topic Re: Configuration Management in General Topics

Configuration Management

MPI-AE — Tue, 01 Nov 2016 11:07:46 GMT

Hi,

I have a further question:

I don't understand the configuration management yet.

The option "Revert to last saved configuration", what does that mean?

When is a configuration saved? Every time I commit ? Or only manually?

Maybe I have done changes on the device and commit them. Then I check that something doesn't work anymore.

What can I do?

Re: Configuration Management

TranceforLife — Tue, 01 Nov 2016 12:33:21 GMT

This article is good explanation:

https://live.paloaltonetworks.com/t5/Featured-Articles/Backing-Up-and-Restoring-Configurations/ta-p/65781

Re: Configuration Management

MPI-AE — Fri, 04 Nov 2016 08:43:26 GMT

It's good, you are right!

But I still don't understand the difference between Revert to last saved configuration and Revert to running configuration....

In my opinion this is the same, because loading the running config is the same like loading the last saved config.

Because the last saved config (by a commit) = running config.

I can't see any difference.

When I save a NAMED config snapshot, this also isn't the last saved config when using Revert to last saved configuration, is it?

So when I accidently commit bad changes, I think the only way to undo this is to manually save a named config snapshot when the firewall is in a working state, then make changes and commit them. If it then turns out that something doesn't work anymore, I could load the named config snapshot which I manually saved before.

Am I right?

Re: Configuration Management

BPry — Fri, 04 Nov 2016 14:11:11 GMT

The Revert to last saved config actually restores your .snapshot.xml config; while the Revert to running config brings back the running-config.xml configuration.

Essentially unless you are saving canidate configurations then they aren't going to be any differences. If you are saving canidate configs then they will be your last saved config; where the running config will always be what was last actually commited.

Hope that clears things up; but essentially unless your using canidates it really doesn't matter which one you click because you will always have the same thing as your last saved and your running config.

Re: Configuration Management

MPI-AE — Wed, 09 Nov 2016 12:21:49 GMT

Yes, thanks!