Back up network device configurations on a schedule or on demand. Cloudmon detects every change, stores a full version history, and supports rollback to any previous version via TFTP or SFTP.
NCM Backup maintains a continuous, version-controlled record of every configuration change across your managed network devices. Cloudmon connects to each device via SSH or Telnet and retrieves the running configuration. Backups for a specific device are accessible from the NCM tab within that device's detail page at Network → Network Devices → [Select Device] → NCM. A consolidated view across all NCM-enabled devices is also available at Network → NCM → Devices, and the underlying backup data itself can be browsed at Network → NCM → Backups. Before enabling backup on a device, ensure an SSH or Telnet credential has been created. Refer to Network Configuration Management for credential setup.
Cloudmon supports two methods for triggering a configuration backup:
| Method | How it works |
| Scheduled | Cloudmon automatically backs up the device configuration on a recurring basis. The backup interval (Daily, Weekly, or Monthly) and the time of day are configured in the device's NCM settings. Scheduled backups run without any manual action and ensure a regular baseline is always available. |
| Manual (Backup Now) | A backup can be triggered at any time by clicking the Backup Now button in the device NCM settings, or the cloud icon next to the device in the Network → NCM → Devices list. If a difference is detected compared to the previous backup, a new version is created immediately. This is useful for capturing a known-good state before making a planned configuration change. |
Navigate to Network → NCM → Devices for a consolidated, fleet-wide view of every NCM-enabled device. Summary tiles at the top show Total, Up, Down, Failed, Baseline Conflicts, and Startup Conflicts counts, making it easy to spot devices that need attention without opening each one individually.
The device table lists each device's name, IP, vendor, model, category, backup status, baseline-vs-running sync state, startup-vs-running sync state, and the time of the last backup. From this list you can:
Navigate to Network → Network Devices → [Select Device] → Settings → NCM, or click the edit icon for the device from Network → NCM → Devices, and fill in the required fields:
| Field | Description |
| Template | The NCM template is automatically mapped based on the device vendor and type. Change it manually if needed. |
| Protocol | Select SSH or Telnet. SSH is recommended. Telnet is available for legacy devices that do not support SSH. |
| Credential | Select the SSH or Telnet credential set that has access to this device's configuration mode. Credentials are created under Settings → Configurations → Credentials → Telnet/SSH. |
| Interval | How frequently Cloudmon automatically backs up the device configuration. Options include Daily, Weekly, and Monthly. |
| Backup Time | The time of day the scheduled backup runs. |
| Email Notification | Enable to receive an email after each backup, including whether changes were detected. |
| Enable | Toggle to activate NCM backup for this device. A Backup Now button is also available to trigger an immediate backup outside the scheduled window. |
The NCM tab on each device shows the full backup history for that device. The same data can also be browsed across devices at Network → NCM → Backups → All Configurations. Each entry displays the version number, change type, baseline status, config type (running or startup), and a visual diff showing lines added and removed. Key information surfaced in this view includes:
Drafts let you prepare and review a proposed configuration before it is applied to a device. Navigate to Network → NCM → Backups → Configuration Drafts to view all saved drafts, listed with their name, device, description, source type, version, and creation/change history. Click the view icon to inspect a draft, the edit icon to open it in the Edit Draft panel, or the delete icon to remove it.
| Field | Description |
| Name* | A name to identify this draft. |
| Comments* | A short note describing the purpose of this draft, such as what is changing and why. |
| Configuration* | The full proposed configuration text. This is typically pre-populated from the device's current running configuration and edited from there. |
Click Save to update the draft. A draft is not applied to the device until it is pushed separately; it exists purely for review.
Any two backup versions can be compared side by side. In the All Configurations table at Network → NCM → Backups → All Configurations, click the differences icon on any entry to select a second version for comparison. The view highlights added, removed, and modified lines so you can pinpoint exactly what changed and when. For example, comparing a Cisco router's configuration from before and after a maintenance window will immediately show whether only the intended ACL change was made or whether additional lines were modified.
If a configuration change causes issues, Cloudmon's rollback feature lets you revert the device to any previous version. Rollback is supported via both TFTP and SFTP depending on the device's capabilities. The following actions are available for each entry in the All Configurations table:
| Action | Description |
| Authorize / Unauthorize | Approve or reject a configuration change. Once approved, the change is accepted as the new authorised baseline. Rejecting flags it for remediation. |
| View | Opens the full configuration file for that version. |
| Differences | Compares this version against any other version, showing added, removed, and modified lines. |
| Draft | Saves a proposed configuration as a draft for review before it is applied to the device. |
| Download | Downloads the configuration file for that version for offline review or archival. |
| Issue | What to check |
| Backup Now returns an error or no backup is created | Confirm the credential assigned has configuration-level access. Test by connecting manually via SSH or Telnet from the probe host to the device. Verify the correct protocol is selected in the NCM settings. |
| Session connects but fails during configuration retrieval | Check that the Enable Username and Enable Password are set for devices requiring privilege mode, such as Cisco IOS. Without them the session logs in but cannot run show running-config. |
| Scheduled backup runs but no new version appears | Cloudmon only creates a new version when it detects a change from the previous backup. No change means no new entry. This is expected. Use Backup Now after a deliberate change to confirm detection is working. |
| Rollback fails to apply the previous configuration | Verify the TFTP or SFTP server is reachable from the device during rollback. For SFTP, confirm the device supports SFTP transfer in its current firmware version. |
| NCM tab not visible on a network device | NCM must be explicitly enabled per device. Navigate to the device Settings → NCM, complete all fields, and toggle Enable on. The tab appears after the first backup is attempted. |
| Device shows Baseline Conflicts or Startup Conflicts on the NCM Devices dashboard | The running configuration no longer matches the designated baseline version (or the startup config no longer matches the running config). Open the device from Network → NCM → Devices, compare the running configuration against the baseline in All Configurations, and either authorise the change as the new baseline or roll back to the previous version. |