config – a family of commands for managing the configuration

config reset-candidate

Reset candidate configuration.

config reset

Apply default configuration as startup configuration. Before running this command, you must stop services in the shell: knbe-agent (by running the systemctl stop knbe-agent command) and klnagent (by running the systemctl stop klnagent64 command). Otherwise, the settings received from the orchestrator and OSMP may overwrite the starting configuration.

config save

Save running configuration as startup configuration.

config export (candidate|running|startup) (all|<module name>) file <name>.(json|xml)

Save candidate|running|startup configuration from all modules or a specific module to /var/ngfw/configs/<name> file in JSON|XML format.

config import file <name>.(json|xml) (candidate|running|startup) (all|<module name>)

Load candidate|running|startup configuration for all modules or a specific module from /var/ngfw/configs/<name> file in JSON|XML format.

show config (candidate|default|running|startup) (json|xml)

Show candidate|default|running|startup configuration in JSON|XML format.

Example output:

ngfw> show config candidate json
{
  "ngfw-ids:ids": {
    "@": {
      "yang:operation": "none"
    },
    "profile": [
      {
        "@": {
          "yang:operation": "create"
        },
        "id": "34b65915-43e3-4132-9c48-c6e8a33ce2d1",
        "name": "test"
      }
    ]
  }
}

ngfw> show config candidate xml
<ids xmlns="urn:kaspersky:params:xml:ns:yang:ngfw-ids" xmlns:yang="urn:ietf:params:xml:ns:yang:1" yang:operation="none">
  <profile yang:operation="create">
      <id>34b65915-43e3-4132-9c48-c6e8a33ce2d1</id>
      <name>test</name>
  </profile>
</ids>

show config files

Show configuration files in JSON|XML format in the /var/ngfw/configs/ directory.

show config modules

Show all yang modules loaded into sysrepo.

| Prev | Home | Next |