topic Exporting backup files from Cisco ISE 2.2 in Network Access Control

Exporting backup files from Cisco ISE 2.2

Nabil. — Wed, 15 May 2019 11:18:22 GMT

Hello folks,

I'm trying to find a way (GUI or CLI) to transfer or export backup files from ISE towards tftp or any other type of communication.

I hope you can help me in this regard

Thanks in advance

Regards,

Re: Exporting backup files from Cisco ISE 2.2

hslai — Wed, 15 May 2019 12:09:14 GMT

We define a file repository before taking a backup. More info, see Backup and Restore Repositories.

Re: Exporting backup files from Cisco ISE 2.2

Nabil. — Thu, 16 May 2019 07:09:44 GMT

Thanks for your reply, we already have repository configured, but what I want is how to get/download the backup file from ISE local disk as sftp and tftp didn't work.

Thanks,

Re: Exporting backup files from Cisco ISE 2.2

Aravind Ravichandran — Thu, 16 May 2019 07:39:31 GMT

After sftp configured in GUI, you have to generate a crypto key on CLI of admin & MnT node.

Re: Exporting backup files from Cisco ISE 2.2

Jason Kunst — Thu, 16 May 2019 09:45:44 GMT

Did you see the information here?

https://www.cisco.com/c/en/us/td/docs/security/ise/2-2/admin_guide/b_ise_admin_guide_22/b_ise_admin_guide_22_chapter_01011.html

Make sure you are on a current recommended release of 2.2 or higher as well as there have been fixes around this . If needing hands on support go to http://cs.co/ise-help

https://community.cisco.com/t5/security-documents/ise-community-resources/ta-p/3621621#Resources

Re: Exporting backup files from Cisco ISE 2.2

hslai — Fri, 17 May 2019 04:38:43 GMT

As Aravind Ravichandran said, we would define the SFTP location as the repository for the backup. Use ISE admin CLI

"crypto host_key add host {IP|hostname}" to trust the host key.

If you already have the backup files in localdisk directory, then use ISE admin CLI "copy disk:/<Backup-Filename> sftp://{sftpServerIP|name}/path/to/fileDirectory/"

If the remote SFTP user is enabled with PKI, then this copy operation is not working.

Some known issues -- CSCvg32162 and CSCvm43120

Re: Exporting backup files from Cisco ISE 2.2

Prab — Fri, 30 Jul 2021 06:34:49 GMT

I was able to export the backup file to my FTP server. I have ISE v2.7

I have saved my backup file named Backup2021.tar.gpg in the "backup" directory.

The command used on the ISE CLI was as following:

copy disk:/backup/Backup2021.tar.gpg ftp://X.X.X.X/

I did not need to perform any extra configuration on the ISE. Also, you don't get any information if the file transfer was successful, so you need to check that manually.

Cheers,

Prab 🙂

Re: Exporting backup files from Cisco ISE 2.2

Saravana17 — Thu, 29 Aug 2024 08:20:39 GMT

Hi,

Unfortunately, I missed CLI admin password. So, before try to reset admin password for CLI, I prefer to take a backup and save it local desktop for easy restoration process in case if failure of password reset.

Is there any way can we export backup to local machine through GUI?

Thanks,
Saravana

Re: Exporting backup files from Cisco ISE 2.2

ahollifield — Thu, 29 Aug 2024 14:19:38 GMT

You can copy it to a configured repository. Alternatively, you can backup to local disk and then use local disk management to download to your local machine.

Re: Exporting backup files from Cisco ISE 2.2

Saravana17 — Fri, 30 Aug 2024 11:46:09 GMT

Thanks @ahollifield for your input, it was helpful 🙂