Руководство Пользователя для Cisco Cisco Content Security Management Appliance M160

Скачать
Страница из 418
 
14-42
AsyncOS 9.1 for Cisco Content Security Management Appliances User Guide
 
Chapter 14      Common Administrative Tasks
  Saving and Importing Configuration Settings
Because the file is in XML format, an associated document type definition (DTD) that describes all 
of the XML entities in the configuration file is also provided. You can download the DTD to validate 
an XML configuration file before uploading it. (XML validation tools are readily available on the 
Internet.) 
You can use the configuration file to speed configuration of another appliance, for example a cloned 
virtual appliance. 
Managing Configuration Files 
Saving and Exporting the Current Configuration File
Using the Current Configuration section of the Management Appliance > System Administration > 
Configuration File page, you can save the current configuration file to your local machine, save it on the 
appliance (placed in the 
configuration
 directory in the FTP/SCP root), or email it to the address 
specified. 
Masking the password
Optionally, mask the user’s passwords by selecting the check box. Masking a password causes the 
original, encrypted password to be replaced with “*****” in the exported or saved file.
Note
Configuration files with masked passwords cannot be loaded back into AsyncOS.
Loading a Configuration File
The configuration file must have been saved from an appliance running the same AsyncOS version as 
the appliance on which you will load the configuration. 
Configuration files with masked passwords cannot be loaded.
Regardless of the method, you must include the following tags at the top of your configuration:
<?xml version="1.0" encoding="ISO-8859-1"?>
<!DOCTYPE config SYSTEM "config.dtd">
<config>
 ... your configuration information in valid XML
</config>
The closing 
</config>
 tag should follow your configuration information. The values in XML syntax are 
parsed and validated against the DTD located in the 
configuration
 directory on your Cisco Content 
Security appliance. The DTD file is named
 config.dtd
. If validation errors are reported at the command 
line when you use the 
loadconfig
 command, the changes are not loaded. You can download the DTD to 
validate configuration files outside of the appliance before uploading them.
In any import method, you can import an entire configuration file (the information defined between the 
highest level tags: 
<config></config>
), or a complete and unique subsection of the configuration file, 
as long as it contains the declaration tags (above) and is contained within the 
<config></config>
 tags.