Configuration Download over HTTPS

Support has been added for downloading a configuration file from the HTTPS server to the startup configuration file. HTTPS configuration download works in a simple process.

After the https startup-config command is executed specifying the URL to the file on the server (including IP address, port, path, and file name), an HTTP request is issued to download the configuration file from the server. The response to the HTTP request contains the configuration in the body. After the configuration is downloaded by the HTTPS client, the data returned is written to the startup configuration file, replacing the original startup configuration.

Considerations for downloading a configuration file over HTTPS

  • The original startup configuration is overwritten with the new configuration file.
  • A reboot is required for the new configuration to take effect.
  • A syslog startup notification is generated automatically when the startup configuration is updated.
  • The HTTPS client uses the device certificate.
  • The remote end must serve the ICX startup, either by a web server or have a web service providing the configuration for the URL specified in the HTTP request.
  • No special HTTP headers are required.
  • Configuration download over HTTPS is not available in FIPS or CC mode.
  • Only IPv4 HTTPS download is supported.

Downloading a configuration file from a web server to the startup configuration

The following example copies an ICX configuration from the HTTPS server, specifying IP address 10.2.1.1 and the “cfg/backup.cfg” file name. Port number 876 is also specified.


device# copy https startup-config 10.2.1.1 cfg/backup.cfg port 876

The following example copies an ICX configuration from the HTTPS server, specifying IP address 10.1.1.1 and the “cfg/backup.cfg” file name. Because no port is specified, the default of 443 is used.


device# copy https startup-config 10.1.1.1 cfg/backup.cfg