Export a Saved Configuration from One Firewall and Import
it into Another
After you import the saved configuration,
you can then Load
a Partial Configuration from the first firewall onto the
second firewall.
On the first firewall, save the current configuration
to a named configuration snapshot using the save config to <filename> command
in configuration mode. For example:
admin@PA-fw1# save config to fw1-config
Export the named configuration snapshot and log database
to an SCP-enabled server using the scp export command
in operational mode. When prompted, enter the password for your
SCP server account.
admin@fw1> scp export configuration from <named-config-file> to <username@host:path>
For
an SCP server running on Windows, the destination folder/filename
path for both the export and import commands requires a drive letter
followed by a colon. For example:
admin@fw1> scp export configuration from fw1-config.xml to ccrisp@10.10.10.5:c:/fw-config
Log in to the firewall to which you want to copy the
configuration and logs, and then import the configuration snapshot
and log database. When prompted, enter the password for your SCP
server account.
admin@fw2> scp import configuration from <username@host:path_to_named-config-file>
For
example (on a Windows-based SCP server):
admin@fw2> scp import configuration from ccrisp@10.10.10.5:c:/fw-configs/fw1-config.xml
