execute : backup cli-config
 
backup cli-config
Use this command to manually back up the configuration file to a TFTP server.
 
This method does not include uploaded files such as:
• private keys
• certificates
• error pages
• WSDL files
• W3C Schema
• vulnerability scan settings
If your configuration has these files, use either a full TFTP or FTP/SFTP backup instead. See “backup full-config” or “config system backup”.
 
This command does not include settings that remain at their default values for the currently installed version of the firmware. If you require a backup that includes those settings, instead use “execute backup full-config”.
Alternatively, you can back up the configuration to an FTP or SFTP server. See “config system backup”.
To use this command, your administrator account’s access control profile must have either w or rw permission to the mntgrp area. For more information, see “Permissions”.
Syntax
execute backup cli-config tftp <filename_str> <tftp_ipv4> {entire | profile} [<password_str>]
Variable
Description
Default
<filename_str>
Type the name of the file to be used for the backup file, such as FortiWeb_backup.conf.
No default.
<tftp_ipv4>
Type the IP address of the TFTP server.
No default.
{entire | profile}
Select either:
• entire — Back up the core configuration file only.
Note: This is not literally the entire configuration. It only contains the core configuration file, comprised of a CLI script. It does not include uploaded files such as error pages and private keys.
• profile — Back up only the web protection profiles.
 
[<password_str>]
Type a password for use when encrypting the backup file using 128-bit AES.
If you do not provide a password, the backup file will be stored as clear text.
Caution: Remember the password or keep it in a secure location. You will be required to enter the same password when restoring an encrypted backup file. If you forget or lose the password, you will not be able to use that encrypted backup file.
No default.
Example
This example uploads the FortiWeb appliance’s system configuration to a file named fweb.cfg on a TFTP server at IP address 192.168.1.23. The file will not be password-encrypted.
execute backup cli-config tftp fweb.cfg 192.168.1.23 entire
Related topics
• execute backup full-config
• execute restore config
• config system backup