https://community.cisco.com/t5/cloud-security/about-ise-cli-backup-and-restore/m-p/5323873#M2271 <P>For ISE CLI backups and restores, the backup command can only be run on the primary side. For primary/secondary redundancy, can I create backup files for restore on the primary side? Or do you need to create backup files for both primary and secondary?</P><P>If the backup file was created on the primary side, will the settings be restored on both the primary and secondary sides when the restore command is run on the primary side? I would also like to ask you about failover and reboot operations at that time.</P> Mon, 25 Aug 2025 04:20:59 GMT Translator 2025-08-25T04:20:59Z https://community.cisco.com/t5/cloud-security/about-ise-cli-backup-and-restore/m-p/5323873#M2271 <P>For ISE CLI backups and restores, the backup command can only be run on the primary side. For primary/secondary redundancy, can I create backup files for restore on the primary side? Or do you need to create backup files for both primary and secondary?</P><P>If the backup file was created on the primary side, will the settings be restored on both the primary and secondary sides when the restore command is run on the primary side? I would also like to ask you about failover and reboot operations at that time.</P> Mon, 25 Aug 2025 04:20:59 GMT https://community.cisco.com/t5/cloud-security/about-ise-cli-backup-and-restore/m-p/5323873#M2271 Translator 2025-08-25T04:20:59Z https://community.cisco.com/t5/cloud-security/about-ise-cli-backup-and-restore/m-p/5323957#M2272 <P>There's a section in the administrator guide that covers parts of this:<BR /><A href="https://www.cisco.com/c/en/us/td/docs/security/ise/3-4/admin_guide/b_ise_admin_3_4/b_ISE_admin_maintain_monitor.html#ID312" target="_blank">https://www.cisco.com/c/en/us/td/docs/security/ise/3-4/admin_guide/b_ise_admin_3_4/b_ISE_admin_maintain_monitor.html#ID312</A></P> <P>You will only create a backup from the primary administration node, and you will only restore to the primary administration node.</P> <P>After you restore the primary node, you need to re-synchronize secondary nodes to the primary.<BR />Or alternatively you could also either remove and re-join the secondary node to the deployment to get the config sync from the restored primary.</P> <P>If a secondary node fails, you can just re-deploy a new secondary, install certificates and re-join to the deployment, and it will sync config from the primary, so no backup/restore method is required here.</P> Mon, 25 Aug 2025 08:56:51 GMT https://community.cisco.com/t5/cloud-security/about-ise-cli-backup-and-restore/m-p/5323957#M2272 Jonatan Jonasson 2025-08-25T08:56:51Z