topic Re: SFTP Repository issue in Network Access Control

SFTP Repository issue

rishisemwal — Wed, 22 Jun 2022 14:32:35 GMT

Hello,

I have reconfigured SFTP after changing the IP address of ISE server. It's not generating the RSA key

UNMISS-BEN-ISE/admin# crypto host_key add host 10.155.22.9
host key fingerprint added
Operating in CiscoSSL FIPS mode

UNMISS-BEN-ISE/admin# debug transfer 7
UNMISS-BEN-ISE/admin# sh repository sftp
% Error: Repository sftp could not be accessed. In case Backup was Restored on different setup, Please reconfigure the repository passwords (expected behaviour).
3 [18261]:[error] transfer: cars_xfer.c[204] [admin]: couldn't get repository sftp
% Repository not found
UNMISS-BEN-ISE/admin#

#. I used following command to remove old key and reconfigure but same issue.

1. ssh delete host X.X.X.X
2. crypto host_key delete host X.X.X.X

Many many thanks for your support

Thanks

Rishi

Re: SFTP Repository issue

balaji.bandi — Wed, 22 Jun 2022 14:43:19 GMT

what is the ISE version here ? have you tested the SFTP outside ISE, is that works ?

Re: SFTP Repository issue

rishisemwal — Wed, 22 Jun 2022 17:34:20 GMT

We are using version 3.0. It was working before, since we changed the IP address of ISE server and reconfigured SFTP. I don't see RSA key when I add host in CLI.

Re: SFTP Repository issue

Arne Bier — Wed, 22 Jun 2022 21:36:04 GMT

Have you tried deleting any crypto host entries, and then reboot the ISE node and try adding the crypto host again?

Are you able to ssh from that ISE node to the SFTP IP address?

If TCP/22 between ISE and SFTP is fine, then this might require a TAC case to look deeper. If you changed ISE IP address then perhaps something is stuck in the Oracle database ?

Re: SFTP Repository issue

rishisemwal — Fri, 24 Jun 2022 08:12:51 GMT

I have used following command to remove old key and reconfigure the same but not solved the issue.

1. ssh delete host X.X.X.X
2. crypto host_key delete host X.X.X.X

# I'm not getting RSA key when I added host key in CLI

UNMISS-BEN-ISE/admin# crypto host_key add host 10.155.22.9
host key fingerprint added
Operating in CiscoSSL FIPS mode

UNMISS-BEN-ISE/admin#