DumbMonit
IntegracionesRed y cortafuegos
Network configuration backup
Keep every version of a switch, router or firewall configuration, see what changed line by line, and be told when it changes.
Las descripciones están en inglés, como en el producto. Las etiquetas de la página siguen su idioma.
Qué vigila DumbMonit
Keep every version of the configuration of a switch, a router or a firewall, see what changed line by line, and be told when it changes, the way Oxidized or RANCID do. DumbMonit reads the configuration over SSH (or through the device's API for OPNsense and PAN-OS), keeps a new version only when the configuration really changed, and stores each version compressed and encrypted.
Ejemplos
- Cisco switch or router
- Juniper router
- FortiGate or pfSense firewall
- MikroTik router
- Aruba switch
Cómo se conecta
Qué necesita
- SSH loginA read-only account is enough on most devices. Stored encrypted, never shown again.
- API key and secretOPNsense API profile: the key and secret of an API user allowed to download backups.
- API keyPAN-OS API profile: the API key of a read-only role, sent in the X-PAN-KEY header.
Puertos de red que abrir
22/TCPSSH (default port), for every profile but the API ones443/TCPOnly with an API profile (OPNsense API, PAN-OS)
Pasos de configuración: Back up a device configuration
Choose the device model in "Device model": it decides the commands sent, and nothing else is ever run on the device.
Create a read-only account on the device that may log in over SSH and show the running configuration.
For OPNsense through its API, create an API key for a user allowed to download backups; for PAN-OS, generate the API key of a read-only role.
The first SSH connection remembers the device's host key: if it ever changes, backups stop and an alert asks you to check it.
Ojo. Configurations hold secrets: they are stored encrypted, shown with their secrets masked, and only an administrator signed in can reveal or download them.