devil-linux-develop

Re: [Devil-linux-develop] thoughs about additional options to save-config (followup)

[<hzu...@ra...>]

On 03/26/2004 07:09:59 AM Arnaud Gomes-do-Vale wrote:
>Heiko Zuerker <he...@zu...> writes:
>
>>> Background: This way one could run
>>>   ssh root@firewall "save-config -dump" > etc.tar.bz2
>>> on a remote host.
>>
>> Hmmmm, like that. Of course one would have to have root login enabled,
>> which I usually don't allow.
>
>That's pretty much what I have been doing for some time with a
>modified version of the save-config script. Now if we could just use
>tftp to load the config... :-)

Is there really interest loading the config over the network?

I was thinking about that feature for a while, but this is only interesting
for LANs, not for DMZ.
I was also more thinking about using wget from a https server, or some
other way to ensure a secure communication.

Heiko

Re: [Devil-linux-develop] thoughs about additional options to save-config (followup)

[Arnaud Gomes-do-V. <Arn...@ir...>]

hzu...@ra... writes:

> Is there really interest loading the config over the network?
>
> I was thinking about that feature for a while, but this is only interesting
> for LANs, not for DMZ.

I do use Devil Linux on a LAN. ;-)

> I was also more thinking about using wget from a https server, or some
> other way to ensure a secure communication.

That means creating custom CD for each site with the local SSL
certificates, or there is little additional security benefit. Why not?
I thought about TFTP because I already have a TFTP server for other
tasks.

-- 
Arnaud