topic Re: Cisco ISE 3.1 Backup Failing in Network Access Control

Cisco ISE 3.1 Backup Failing

aamir.aleem — Thu, 28 Jul 2022 12:22:38 GMT

Hello Community,

I would appreciate your suggestions in finding the issue why the config and operational backup is failing on a Cisco ISE 3.1 deployment.

Checks performed:

1. I am able to see and browse the files in the FTP repository.

2. The FTP server(Filezilla) shows an incoming connection from ISE and the successful authentication there upon.

In the logs, the below shows the occurrence of events:

backup July-28th-2022 repository Backup-Repository ise-config encryption-key plain xxxxxx
% Internal CA Store is not included in this backup. It is recommended to export it using "application configure ise" CLI command
% Creating backup with timestamped filename:
% backup in progress: Starting Backup...10% completed
% backup in progress: Validating ISE Node Role...15% completed
% backup in progress: Backing up ISE Configuration Data...20% completed
% backup in progress: Backing up ISE Indexing Engine Data...45% completed
% backup in progress: Backing up ISE Logs...50% completed
% backup in progress: Completing ISE Backup Staging...55% completed
% backup in progress: Backing up ADEOS configuration...55% completed
% backup in progress: Moving Backup file to the repository...75% completed
% File transfer error

Further the status as shown from the CLI command is as below:

SHOW BACKUP STATUS
%% Configuration backup status
%% ----------------------------
% backup name: xxxxxx
% repository: Backup-Repository
% start date: Thu Jul 28 14:55:32 +03 2022
% scheduled: no
% triggered from: CLI
% host: XXxxxxx

% status: Backup failed: copy to repository failed

Your inputs are much appreciated

Thanks

Aamir

Re: Cisco ISE 3.1 Backup Failing

ahollifield — Thu, 28 Jul 2022 13:02:56 GMT

From the ISE CLI what happens when you a "show repository [repo-name]"?

Re: Cisco ISE 3.1 Backup Failing

aamir.aleem — Thu, 28 Jul 2022 13:28:07 GMT

Hello,

Thanks for your reply.

As I mentioned, I can see the files in the repository using the CLI command

Show Repository (Rep Name)

Aamir

Re: Cisco ISE 3.1 Backup Failing

ahollifield — Thu, 28 Jul 2022 13:34:26 GMT

What is the FTP server? Linux? Windows? Is there enough free space on the FTP server for the backup?

Re: Cisco ISE 3.1 Backup Failing

Aref_Alsouqi — Thu, 28 Jul 2022 14:05:59 GMT

[]

Re: Cisco ISE 3.1 Backup Failing

Aref Alsouqi — Thu, 28 Jul 2022 14:07:02 GMT

Seems to be due to some permissions issues on that folder where ISE is trying to write the backup files.

Re: Cisco ISE 3.1 Backup Failing

Marcelo Morais — Sat, 30 Jul 2022 04:41:42 GMT

Hi @aamir.aleem ,

I agree with @Aref Alsouqi , double check the folder permissions.

You can also try to use the following command for a better understanding of the issue:

ise/admin# debug backup-restore backup

Hope this helps !!!

Re: Cisco ISE 3.1 Backup Failing

aamir.aleem — Sun, 31 Jul 2022 04:09:04 GMT

Thank you @Aref Alsouqi @Marcelo Morais .

My bad, i missed that one. It was a permissions issue.

Cheers!

Aamir Aleem