Modular Configuration Backup on DrayOS routers

Modular configuration backup allows you to transfer settings from individual sections of the router, such as the Firewall or Wireless Access Control List.

This makes it possible to move router settings between dis-similar routers. This is where the Configuration Import feature does not support import of a configuration file from a different model of router. For instance, moving from a DSL router like the Vigor 2862 to an Ethernet router such as the Vigor 3910. They each run the same DrayOS operating system, but the configurations are too different to simply import.

To resolve this, DrayOS can export individual parts of the configuration such as Firewall and VPN configuration, so that they can be imported between different router models.

This article depicts configuration module options, and steps required to take the backup and restore the settings of the following modules:

[LAN] > [Bind IP to MAC]

[Firewall] > [General Setup]

[Objects Setting] > [IP Object]

[VPN and Remote Access] > [Remote Dial-in User]

[VPN and Remote Access] > [LAN to LAN]

[Mesh] > [Mesh Setup]

[Wireless LAN] > [Access Control]

1. In the [LAN] > [Bind IP to MAC] section many new DrayTek routers can save up to 1024 devices. Their MAC addresses and IPv4 addresses can be then backup as a plain-text file. This allows for adding new entries manually.
To save the current Bind IP to MAC list, click the Backup button.

To restore on the new router, simply Browse to the saved file and hit Restore button. A brief confirmation message will appear on the screen:

2. Taking a configuration backup of the [Firewall] > [General Setup] module will produce a .cfg file (not plain-text / editable) which includes:

• Firewall rules
• User management
• Object Settings (IP Object/Group, IPv6 Object/Group, File extension Object, service Type Object/Group, Keyword Object/Group)
• CSM (APP Enforcement, Web Content Filter, URL Content Filter, DNS Filter).

Navigate to [Firewall] > [General Setup] and press the Backup button to save firewall settings.

When restoring the setting, there are options to select individual items to restore as illustrated below, tick all the required boxes:

Press OK to restore selected settings. A restore status window should appear within a minute:

3. To export router’s full list of configured IP Objects, go to the [Objects Setting] > [IP Object] page. Select the ‘Backup the current IP Objects with a CSV file’ option and press the Download button.

Once downloaded, the plain-text CSV file can be manually updated. There is also the ‘default CSV template to edit’ available to download from the router:

To restore, simply Browse to the saved file and hit the Restore button. A brief confirmation message will appear on the screen:

4. Vigor routers allow remote users to connect over the encrypted tunnel such as SSL VPN. Configured profiles can be copied from one router to another. Go to [VPN and Remote Access] > [Remote Dial-in User] and press Backup to save the setting to a .bak file. 

To restore, simply Browse to the saved file and hit the Restore button. A brief confirmation message will appear on the screen:

5. When many users from a branch office need to access head office network, it would be easier to set a LAN to LAN VPN tunnel. The backup of VPN profiles can be taken in [VPN and Remote Access] > [LAN to LAN] section. Press Backup to save the setting to a .bak file. Note that there are two different profiles to be saved (and restored). The 'dial-in' profile and 'dial-out' profiles are used on local and remote routers:

To restore, simply Browse to the saved file and hit the Restore button. A brief confirmation message will appear on the screen:

6. DrayTek Vigor routers capable of setting up Wireless Mesh network, such as the Vigor 2862ac model, support the Mesh Config Backup option. Go to [Mesh] > [Mesh Setup] and press Backup to save the setting to an encrypted file.

To restore, simply Browse to the saved file and hit the Restore button. A brief confirmation message will appear on the screen:

7. Wireless routers can filter wireless clients with the [Wireless LAN] > [Access Control], a list of MAC addresses to allow or deny access to. The MAC address list can be saved to a plain-text and editable file by pressing the Backup button.

To restore, simply Browse to the saved file and hit the Restore button. A brief confirmation message will appear on the screen:

---