End-of-Life (EoL)

Export a Saved Configuration from One Firewall and Import it into Another

After you import the saved configuration, you can then Load a Partial Configuration from the first firewall onto the second firewall.
  1. On the first firewall, save the current configuration to a named configuration snapshot using the
    save config to
    <filename>
    command in configuration mode. For example:
    admin@PA-fw1#
    save config to fw1-config
  2. Export the named configuration snapshot and log database to an SCP-enabled server using the
    scp export
    command in operational mode. When prompted, enter the password for your SCP server account.
    admin@fw1>
    scp export configuration from
    <named-config-file>
    to
    <username@host:path>
    For an SCP server running on Windows, the destination folder/filename path for both the export and import commands requires a drive letter followed by a colon. For example:
    admin@fw1>
    scp export configuration from fw1-config.xml to ccrisp@10.10.10.5:
    c:
    /fw-config
  3. Log in to the firewall to which you want to copy the configuration and logs, and then import the configuration snapshot and log database. When prompted, enter the password for your SCP server account.
    admin@fw2>
    scp import configuration from
    <username@host:path_to_named-config-file>
    For example (on a Windows-based SCP server):
    admin@fw2>
    scp import configuration from ccrisp@10.10.10.5:
    c:
    /fw-configs/fw1-config.xml

Recommended For You