DumbMonit
Network configuration backup
Keep every version of a switch, router or firewall configuration, see what changed line by line, and be told when it changes.
As descrições estão em inglês, como no produto. Os rótulos da página seguem o seu idioma.
O que o DumbMonit vigia
Keep every version of the configuration of a switch, a router or a firewall, see what changed line by line, and be told when it changes, the way Oxidized or RANCID do. DumbMonit reads the configuration over SSH (or through the device's API for OPNsense and PAN-OS), keeps a new version only when the configuration really changed, and stores each version compressed and encrypted.
Exemplos
- Cisco switch or router
- Juniper router
- FortiGate or pfSense firewall
- MikroTik router
- Aruba switch
Como se liga
O que precisa
- SSH loginA read-only account is enough on most devices. Stored encrypted, never shown again.
- API key and secretOPNsense API profile: the key and secret of an API user allowed to download backups.
- API keyPAN-OS API profile: the API key of a read-only role, sent in the X-PAN-KEY header.
Portas de rede a abrir
22/TCPSSH (default port), for every profile but the API ones443/TCPOnly with an API profile (OPNsense API, PAN-OS)
Passos de configuração: Back up a device configuration
Choose the device model in "Device model": it decides the commands sent, and nothing else is ever run on the device.
Create a read-only account on the device that may log in over SSH and show the running configuration.
For OPNsense through its API, create an API key for a user allowed to download backups; for PAN-OS, generate the API key of a read-only role.
The first SSH connection remembers the device's host key: if it ever changes, backups stop and an alert asks you to check it.
Atenção. Configurations hold secrets: they are stored encrypted, shown with their secrets masked, and only an administrator signed in can reveal or download them.