Cisco configuration backup

Cisco config backup.
Versioned, diffed, alerted.

MantisNMS backs up Cisco configurations for IOS, IOS-XE and NX-OS devices over SSH on a schedule and on demand, keeps every version, shows exactly what changed, and alerts you on drift. Works with the Cisco switches, routers and firewalls already on your network.

What you get

Built for the job.
Included in MantisNMS.

How Cisco backups work

MantisNMS logs in over SSH, enters privileged (enable) mode, turns paging off and saves both the running and the startup configuration. NX-OS switches use their own profile.

No false changes

Lines that change on every pull, such as "Last configuration change", the NVRAM update time and the configuration byte count, are ignored, so an unchanged Cisco config does not show up as a new version.

Versions and diffs

A new version is saved only when the configuration actually changes, with a side-by-side diff between any two versions.

Drift alerts

Get an alert when a device's running config changes, so no change goes unnoticed.

Compliance checks

Built-in checks for this vendor plus your own rules; high-severity findings open an incident.

Secrets stay hidden

Passwords and keys in stored configs are masked. A changed secret still shows in the diff; its value never does.

How it works

Up and running
the same day.

1

Add the device

Add it as an SNMP sensor; MantisNMS identifies the vendor and picks the right backup method.

2

Give it a login

Assign an SSH credential for the site, or pin one to the device. Credentials live in an encrypted vault and each device's SSH host key is pinned.

3

Backups run

Configs are backed up on a schedule, and you can click "Backup now" any time.

4

Watch for change

Drift alerts and compliance findings appear in Alerts and the notification bell.

Config backup is part of MantisNMS, priced per sensor from $175 per month for 500 sensors, with no multi-year contract. See pricing →

FAQ

Common questions.

Cisco IOS, IOS-XE and NX-OS devices. MantisNMS reads the device's make and model over SNMP and picks the matching backup method automatically.

Yes. For IOS and NX-OS it saves both the running and the startup configuration, so you can see when the two differ.

Cloud-managed Meraki networks are backed up through the Meraki Dashboard API instead of SSH; you supply a Dashboard API key.

On a regular schedule and whenever you click "Backup now". A new version is only saved when the configuration actually changes.

No. Secrets in stored configs are replaced with a masked fingerprint before they're saved, so changes still show up in diffs but the values never appear.

Try MantisNMS free

No credit card required. We review every signup and email your activation link within one business day.

Start a MantisNMS trial →

Related: Network config backup · Fortinet · Juniper · Palo Alto · Pricing