Objective 5.1 – Backup and Restore Network Configurations
Skills and Abilities
- Schedule/Backup/Restore NSX Manager data
- Export/Restore vSphere Distributed Switch configuration
- Export/Import Service Composer profiles
- Save/Export/Import/Load Distributed Firewall configurations
Schedule/Backup/Restore NSX Manager data
Having backups of your NSX environment is highly recommended in case you ever need to restore your config back to a working state in the event of a failure. A NSX backup will contain all of the NSX configuration, including controllers, logical switches, logical routers, firewall rules and other things that were configured within NSX. It is also good to have the vCenter database and distributed switch configs backed up so that you have a complete recovery point.
To begin setting up the backup, log in to the NSX Manager.
Click Backup & Restore.
Under Backups & Restore, next to FTP Server Settings, click Change.
Enter in the FTP server settings. Click OK.
Now you should see your FTP Server settings saved. Click Backup under the Backup History section
Click Start to begin the backup
Once the backup is complete, you will see the file name and date under Backup History.
Now I just go and check my FTP server and the files are there.
To schedule a NSX backup, simply click Change next Scheduling and adjust your backup schedule
To restore a backup, click on the backup file that you want to restore to and click Restore under the Backup History section. Click Yes to begin the restore.
Export/Restore vSphere Distributed Switch configuration
Navigate to the vSphere Web Client, and under the Networking view, select your distributed switch. Right click the switch and go to Settings > Export Configuration.
Select if you want to export the distributed switch and all port groups or just the distributed switch only. Click OK.
Click Yes to confirm the export
To restore a distributed switch config, under the Networking view, select your distributed switch. Right click the switch and go to Settings > Restore Configuration.
Then simply browse to the distributed switch backup file that you want to restore. Click Next and Finish.
Export/Import Service Composer profiles
You can export Service Composer profiles to restore security configurations from one NSX manager to another. To export a Service Composer profile, navigate to Networking & Security > Service Composer > Security Policies. Right click on a security policy and click Export Configuration.
Give the export a name. Click Next.
Select the security policies. Click Next.
The file can now be saved on your PC.
To import a service composer profile, navigate to Networking & Security > Service Composer > Security Policies. Click the Import Configuration icon . Browse to and select the .blueprint file. Click Next.
This page gives you a summary of what will be imported. Click Finish.
Save/Export/Import/Load Distributed Firewall configurations
Whenever you make a change to the distributed firewall, the config is auto saved. You can then export the auto saved files to use later. To export a distributed firewall config navigate to Networking & Security > Firewall > Saved Configurations. Select a autosaved config and click the export configuration icon
To import a distributed firewall config, click the import configuration icon. Browse to and select the config that you want to import. Click OK to import the config.
To load a config that you’ve imported and make it active, go under the Configuration tab for the distributed firewall and click the load saved configuration icon . Select the config that you want to load and click Load.