DumbMonit
IntegrationsNetwork and firewalls
Network configuration backup
Keep every version of a switch, router or firewall configuration, see what changed line by line, and be told when it changes.
Product descriptions are in English, as in the product. The page labels follow your language.
What DumbMonit watches
Keep every version of the configuration of a switch, a router or a firewall, see what changed line by line, and be told when it changes, the way Oxidized or RANCID do. DumbMonit reads the configuration over SSH (or through the device's API for OPNsense and PAN-OS), keeps a new version only when the configuration really changed, and stores each version compressed and encrypted.
Examples
- Cisco switch or router
- Juniper router
- FortiGate or pfSense firewall
- MikroTik router
- Aruba switch
How it connects
What you need
- SSH loginA read-only account is enough on most devices. Stored encrypted, never shown again.
- API key and secretOPNsense API profile: the key and secret of an API user allowed to download backups.
- API keyPAN-OS API profile: the API key of a read-only role, sent in the X-PAN-KEY header.
Network ports to open
22/TCPSSH (default port), for every profile but the API ones443/TCPOnly with an API profile (OPNsense API, PAN-OS)
Setup steps: Back up a device configuration
Choose the device model in "Device model": it decides the commands sent, and nothing else is ever run on the device.
Create a read-only account on the device that may log in over SSH and show the running configuration.
For OPNsense through its API, create an API key for a user allowed to download backups; for PAN-OS, generate the API key of a read-only role.
The first SSH connection remembers the device's host key: if it ever changes, backups stop and an alert asks you to check it.
Heads-up. Configurations hold secrets: they are stored encrypted, shown with their secrets masked, and only an administrator signed in can reveal or download them.