Arista

This guide covers Arista switches and routers running EOS.

Create a backup account

Create a dedicated local user with the built-in network-operator role, which permits show commands but denies configuration changes. Assigning privilege 15 lets the account display the running configuration without a separate enable password:

configure
username netwatch-backup privilege 15 role network-operator secret <password>

If you keep the account at a lower privilege level instead, you must also configure and supply an enable password, since show running-config requires privileged mode.

Enable SSH access

SSH is enabled by default on EOS. To restrict management access to the collector, apply a standard ACL to the SSH service:

configure
ip access-list standard QUARK-MGMT
   permit host <collector-ip>
exit
management ssh
   ip access-group QUARK-MGMT in

If management traffic uses a dedicated VRF, apply the ACL in that VRF and make sure the collector reaches the management interface address.

Platform notes

• The network-operator role is read-only; QUARK never needs network-admin.
• For MLAG pairs, add both peers — each switch maintains its own configuration.

Enable backup in Netwatch

Once the device is prepared, open its host in Netwatch (Data collection > Hosts) and add the Config Backup macros — the supported status flag, the model code for this platform, and the credentials you created. See Getting started for the full macro list and values.