topic Re: Cisco DNA Bakupup in Cisco Catalyst Center

Cisco DNA Bakupup

saxenanitesh8522 — Mon, 04 Jan 2021 04:15:42 GMT

hi Guys,

When i am trying to configure NFS mount for the DNA it is not working and keeps giving this error

Remote directory issue: Error running mount to remote server: 'mount -t nfs -o nolock 1X.XX.XX.XX:/media/Backup_DNA/Backup/CiscDNAC /tmp/nfs-test'. Error message: mount.nfs: access denied by server while mounting 1X.XX.XX.XX:/media/Backup_DNA/Backup/CiscDNAC

Same NFS i tried in ISE to validate but no issues are there.

Can some one help me why this happening..

Re: Cisco DNA Bakupup

Tomas de Leon — Mon, 04 Jan 2021 05:06:23 GMT

Please provide the following information:

* What is the version of the Cisco DNA Center?
* What is the Operating System of the NFS Server?
* What NFS version is being run on the NFS Server (nfsstat -s)

Server Requirements for Assurance Backup:
To support Assurance data backups, the server must be a Linux-based NFS server 
that meets the following requirements:

* Support NFS v4 and NFS v3. (To verify this support, from the server, enter nfsstat -s .)
* Have read and write permissions on the NFS export directory.
* Have a stable network connection between Cisco DNA Center and the NFS server.
* Have sufficient network speed between Cisco DNA Center and the NFS server.

Note: You cannot use an NFS-mounted directory as the Cisco DNA Center backup server directory. 
A cascaded NFS mount adds a layer of latency and is therefore not supported.

Re: Cisco DNA Bakupup

saxenanitesh8522 — Mon, 04 Jan 2021 05:30:59 GMT

Hi,

* What is the version of the Cisco DNA Center? --> DNA 2.1.2.4
* What is the Operating System of the NFS Server? Linux Mint
* What NFS version is being run on the NFS Server (nfsstat -s)

# nfsstat -s
Server rpc stats:
calls badcalls badfmt badauth badclnt
152 0 0 0 0

Server nfs v4:
null compound
6 3% 146 96%

Server nfs v4 operations:
op0-unused op1-unused op2-future access close
0 0% 0 0% 0 0% 22 6% 0 0%
commit create delegpurge delegreturn getattr
0 0% 0 0% 0 0% 0 0% 122 35%
getfh link lock lockt locku
28 8% 0 0% 0 0% 0 0% 0 0%
lookup lookup_root nverify open openattr
22 6% 0 0% 0 0% 0 0% 0 0%
open_conf open_dgrd putfh putpubfh putrootfh
0 0% 0 0% 116 34% 0 0% 6 1%
read readdir readlink remove rename
0 0% 0 0% 0 0% 0 0% 0 0%
renew restorefh savefh secinfo setattr
0 0% 0 0% 0 0% 0 0% 0 0%
setcltid setcltidconf verify write rellockowner
12 3% 12 3% 0 0% 0 0% 0 0%
bc_ctl bind_conn exchange_id create_ses destroy_ses
0 0% 0 0% 0 0% 0 0% 0 0%
free_stateid getdirdeleg getdevinfo getdevlist layoutcommit
0 0% 0 0% 0 0% 0 0% 0 0%
layoutget layoutreturn secinfononam sequence set_ssv
0 0% 0 0% 0 0% 0 0% 0 0%
test_stateid want_deleg destroy_clid reclaim_comp allocate
0 0% 0 0% 0 0% 0 0% 0 0%
copy copy_notify deallocate ioadvise layouterror
0 0% 0 0% 0 0% 0 0% 0 0%
layoutstats offloadcancel offloadstatus readplus seek
0 0% 0 0% 0 0% 0 0% 0 0%
write_same
0 0%

NFS configuration:-

/media/Backup_DNA/Backup/CiscoDNA *(rw,all_squash,sync,no_subtree_check)
/media/Backup_DNA/Backup *(rw,all_squash,sync,no_subtree_check)
/media/Backup_DNA_2/Backup/CiscDNAC XX.XX.XX.10(rw,all_squash,sync,no_subtree_check)
/media/Backup_DNA_2/Backup/CiscDNAC XX.XX.XX.11(rw,all_squash,sync,no_subtree_check)
/media/Backup_DNA_2/Backup/CiscDNAC XX.XX.XX.12(rw,all_squash,sync,no_subtree_check)
/media/Backup_DNA_2/Backup/CiscDNAC XX.XX.XX.13(rw,all_squash,sync,no_subtree_check)
/media/Backup_DNA_2/Backup/CiscDNAC *(rw,all_squash,sync,no_subtree_check)

-------------------------------------------------

https://www.cisco.com/c/en/us/td/docs/cloud-systems-management/network-automation-and-management/dna-center/1-3-3-0/admin-guide/b_cisco_dna_center_admin_guide_1_3_3_0/b_cisco_dna_center_admin_guide_1_3_2_0_chapter_0110.html

------------------------

* Have a stable network connection between Cisco DNA Center and the NFS server. --> 10 gig connectivity and same subnet
* Have sufficient network speed between Cisco DNA Center and the NFS server. --> 10 gig connectivity

Re: Cisco DNA Bakupup

saxenanitesh8522 — Mon, 04 Jan 2021 05:39:20 GMT

showmount -e 10.6.183.26
Export list for 10.6.183.26:
/media/emircom/Backup *
/media/emircom/Backup/CiscoDNA *
/media/emrbackup/Backup/CiscDNAC (everyone)

i tested from the DNA it shows the NFS mount but it doesnt mount it.

Re: Cisco DNA Bakupup

Tomas de Leon — Mon, 04 Jan 2021 06:24:11 GMT

From what you reported:
-----------------------
Error message: mount.nfs: access denied by server while mounting 1X.XX.XX.XX:/media/Backup_DNA/Backup/CiscDNAC

Your Export List from the NFS Server:
/media/emircom/Backup *
/media/emircom/Backup/CiscoDNA *
/media/emrbackup/Backup/CiscDNAC (everyone)

** The directories do not appear to match what is configured in the UI for NFS Server Path?


*** Working Cisco DNA Center (NFS)

From the Cisco DNA Center:
--------------------------
Configured Server Path in Admin UI:
/home/maglev/v1Assurance

$ df -k | grep nfs
172.18.217.89:/home/maglev/v1Assurance 101654272 91597312 10056960 91% /data/nfs


From the NFS Server:
--------------------
$ cat /etc/exports
# /var/nfsshare *(rw,all_squash,sync,no_subtree_check)
/home/maglev/v1Assurance *(rw,sync,no_root_squash,no_subtree_check)

$ showmount -e v1-remotefs1.cisco.com
Export list for v1-remotefs1.cisco.com:
/home/maglev/v1Assurance *

Re: Cisco DNA Bakupup

saxenanitesh8522 — Mon, 04 Jan 2021 06:27:24 GMT

apologies for the wrong screenshot

/media/emircom/Backup/CiscoDNA *(rw,all_squash,sync,no_subtree_check)
/media/emircom/Backup *(rw,all_squash,sync,no_subtree_check)
/media/emrbackup/Backup/CiscDNAC XX.XX.XX.10(rw,all_squash,sync,no_subtree_check)
/media/emrbackup/Backup/CiscDNAC XX.XX.XX.11(rw,all_squash,sync,no_subtree_check)
/media/emrbackup/Backup/CiscDNAC XX.XX.XX.12(rw,all_squash,sync,no_subtree_check)
/media/emrbackup/Backup/CiscDNAC XX.XX.XX.13(rw,all_squash,sync,no_subtree_check)
/media/emrbackup/Backup/CiscDNAC *(rw,all_squash,sync,no_subtree_check)

it's configured as required.

Re: Cisco DNA Bakupup

saxenanitesh8522 — Mon, 04 Jan 2021 06:38:12 GMT

/home/maglev/v1Assurance --> is this your existing path or the path which you have configured in the NFS share.

I have tested this ISE NFS in the Cisco ISE it works.

Re: Cisco DNA Bakupup

saxenanitesh8522 — Mon, 04 Jan 2021 09:47:10 GMT

Hi,

it worked i guess the issue

/home/maglev/v1Assurance *(rw,sync,no_root_squash,no_subtree_check)

as mine was just (rw,all_squash,sync,no_subtree_check)

I modified it again and it started to work.