DumbMonit
IntégrationsRéseau et pare-feu
Network configuration backup
Keep every version of a switch, router or firewall configuration, see what changed line by line, and be told when it changes.
Les descriptions des produits sont en anglais, comme dans le produit. Les libellés de la page suivent votre langue.
Ce que DumbMonit surveille
Keep every version of the configuration of a switch, a router or a firewall, see what changed line by line, and be told when it changes, the way Oxidized or RANCID do. DumbMonit reads the configuration over SSH (or through the device's API for OPNsense and PAN-OS), keeps a new version only when the configuration really changed, and stores each version compressed and encrypted.
Exemples
- Cisco switch or router
- Juniper router
- FortiGate or pfSense firewall
- MikroTik router
- Aruba switch
Comment il se connecte
Ce qu'il faut
- SSH loginA read-only account is enough on most devices. Stored encrypted, never shown again.
- API key and secretOPNsense API profile: the key and secret of an API user allowed to download backups.
- API keyPAN-OS API profile: the API key of a read-only role, sent in the X-PAN-KEY header.
Ports réseau à ouvrir
22/TCPSSH (default port), for every profile but the API ones443/TCPOnly with an API profile (OPNsense API, PAN-OS)
Étapes de mise en place: Back up a device configuration
Choose the device model in "Device model": it decides the commands sent, and nothing else is ever run on the device.
Create a read-only account on the device that may log in over SSH and show the running configuration.
For OPNsense through its API, create an API key for a user allowed to download backups; for PAN-OS, generate the API key of a read-only role.
The first SSH connection remembers the device's host key: if it ever changes, backups stop and an alert asks you to check it.
À savoir. Configurations hold secrets: they are stored encrypted, shown with their secrets masked, and only an administrator signed in can reveal or download them.