Cisco Ise 13 User Guide
Here you can view all the pages of manual Cisco Ise 13 User Guide. The Cisco manuals for Interface are available online for free. You can easily download all the documents as PDF.
Page 261
showrepositoryrepository_name whererepository_nameisthenameoftherepositorythatyouhavecreated. Ifthepaththatyouprovidedwhilecreatingtherepositorydoesnotexist,thenyouwill getthefollowingerror:%InvalidDirectory. Note •Runanon-demandbackuporscheduleabackup. On-Demand and Scheduled Backups Ciscoprovideson-demandbackupsofthePrimaryPANandtheprimarymonitoringnode.Performan on-demandbackupwhenyouwanttobackupdataimmediately....
Page 262
Whenperformingabackupandrestore,therestoreoverwritesthelistoftrustedcertificatesonthetarget systemwiththelistofcertificatesfromthesourcesystem.Itiscriticallyimportanttonotethatbackup andrestorefunctionsdonotincludeprivatekeysassociatedwiththeInternalCertificateAuthority(CA) certificates. Ifyouareperformingabackupandrestorefromonesystemtoanother,youwillhavetochoosefromone oftheseoptionstoavoiderrors: Important •Option1: ExporttheCAcertificatesfromthesourcenodethroughtheCLIandimportthemintothetarget...
Page 263
Procedure Step 1ChooseAdministration>System>BackupandRestore. Step 2ClickBackupNow. Step 3Enterthevaluesasrequiredtoperformabackup. Step 4ClickOK. Step 5Verifythatthebackupcompletedsuccessfully. Ciscoappendsthebackupfilenamewithatimestampandstoresthefileinthespecifiedrepository.Inaddition tothetimestamp,CiscoaddsaCFGtagforconfigurationbackupsandOPStagforoperationalbackups. Ensurethatthebackupfileexistsinthespecifiedrepository....
Page 264
Whenperformingabackupandrestore,therestoreoverwritesthelistoftrustedcertificatesonthetarget systemwiththelistofcertificatesfromthesourcesystem.Itiscriticallyimportanttonotethatbackup andrestorefunctionsdonotincludeprivatekeysassociatedwiththeInternalCertificateAuthority(CA) certificates. Ifyouareperformingabackupandrestorefromonesystemtoanother,youwillhavetochoosefromone oftheseoptionstoavoiderrors: Important •Option1: ExporttheCAcertificatesfromthesourcenodethroughtheCLIandimportthemintothetarget...
Page 265
Procedure Step 1ChooseAdministration>System>BackupandRestore. Step 2ClickCreatetoscheduleaConfigurationoranOperationalbackup. Step 3Enterthevaluesasrequiredtoscheduleabackup. Step 4ClickSavetoschedulethebackup. Step 5ClicktheRefreshlinkatthetopofthispagetoseethescheduledbackuplist. YoucancreateonlyonescheduleatatimeforaConfigurationorOperationalbackup.Youcanenableor disableascheduledbackup,butyoucannotdeleteit. Backup Using the CLI...
Page 266
•Verifyifapurgeisinprogress.Backupandrestoreoperationswillnotworkwhileapurgeisinprogress. •Verifyiftherepositoryisconfiguredcorrectly. Cisco ISE Restore Operation Youcanrestoreconfigurationdataonaprimaryorstandaloneadministrationnode.Afteryourestoredataon thePrimaryPAN,youmustmanuallysynchronizethesecondarynodeswiththePrimaryPAN. Theprocessforrestoringtheoperationaldataisdifferentdependingonthetypeofdeployment. Thenewbackup/restoreuserinterfaceinCiscomakesuseofmeta-datainthebackupfilename.Therefore,...
Page 267
IfyoudidnotexporttheCiscoISECAcertificatesandkeys,thenafteryourestorethe configurationbackuponthePrimaryPAN,generatetherootCAandsubordinateCAs onthePrimaryPANandPolicyServiceNodes(PSNs). Note •Youneedadatarepository,whichisthelocationwhereCiscosavesyourbackupfile.Youmustcreate arepositorybeforeyoucanrunanon-demandorscheduledbackup. •Ifyouhaveastandaloneadministrationnodethatfails,youmustruntheconfigurationbackuptorestore...
Page 268
(Optional,applicableonlyforconfigurationbackup)Enterthiscommandoperator parameterifyouwanttorestoreADE-OSconfigurationfromaconfiguration backup.Whenyourestoreaconfigurationbackup,ifyoudonotincludethis parameter,CiscoISErestoresonlytheCiscoISEapplicationconfigurationdata. include-adeos Defaults Nodefaultbehaviororvalues. Command Modes EXEC Usage Guidelines WhenyouuserestorecommandsinCisco,theCiscoserverrestartsautomatically....
Page 269
Description Displaysthebackuphistoryofthesystem.showbackuphistory Displaysthestatusofthebackupoperation.showbackupstatus Displaysthestatusoftherestoreoperation.showrestorestatus IfthesyncstatusandreplicationstatusafterapplicationrestoreforanysecondarynodeisOutofSync,you havetoreimportthecertificateofthatsecondarynodetothePrimaryPANandperformamanual synchronization. Restore Configuration Backups from the GUI YoucanrestoreaconfigurationbackupfromtheAdminportal.TheGUIlistsonlythebackupsthataretaken...
Page 270
Ifyouattempttorestoredatatoanodeotherthantheonefromwhichthedatawastaken,youmust configuretheloggingtargetsettingstopointtothenewnode.Thisensuresthatthemonitoringsyslogs aresenttothecorrectnode. Note Restore a Monitoring (Operational) Backup in a Standalone Environment TheGUIlistsonlythebackupsthataretakenfromthecurrentrelease.Torestorebackupsthatobtainedfrom earlierreleases,usetherestorecommandfromtheCLI. Before You Begin •Purgetheoldmonitoringdata. •Scheduleabackuporperformanon-demandbackup. Procedure...