LANCOM Systems

This guide covers LANCOM routers, gateways, and access points running LCOS.

LCOS

Create a backup account. Create a dedicated administrator — for example netwatch-backup — using LANconfig, WEBconfig, or the CLI, under the device's further-administrators settings (Management > Admin in LANconfig). LCOS redacts sensitive values from the configuration for lower-privilege administrators, so to retrieve a complete, restorable configuration the account needs full (supervisor-level) read rights. If a partially redacted backup is acceptable, a read-only administrator can be used instead.

Enable SSH. LCOS devices ship with an SSH server; make sure SSH is enabled in the device's management-protocol settings and reachable from the Netwatch collector. LCOS supports access lists for management protocols — restrict SSH access to the collector's IP address in the management access settings.

Platform notes.

• QUARK reads the configuration as a text script over SSH; no TFTP or LANconfig export is required.
• If you manage administrators centrally (for example via RADIUS or the LANCOM Management Cloud), create the backup account locally on the device so backups continue to work independently of the management platform.

Enable backup in Netwatch

Once the device is prepared, open its host in Netwatch (Data collection > Hosts) and add the Config Backup macros — the supported status flag, the model code for this platform, and the credentials you created. See Getting started for the full macro list and values.