topic Re: Cisco ISE 3.1 Automated backup configuration issue in Network Access Control

Cisco ISE 3.1 Automated backup configuration issue

aamir.aleem — Tue, 02 Aug 2022 11:26:25 GMT

Hello Community,

I am facing an issue with scheduling automated backups on Cisco ISE 3.1.

The configuration, which is very straight forward, just returns back null, i.e. lands me back on the backup and restore page without any changes on the page.

Please see the two screenshots to see the behavior.

Deployment info:

1. Two nodes(PAN,PSN,MNT)

2. Both are VMs

Thanks

Aamir

Re: Cisco ISE 3.1 Automated backup configuration issue

ahollifield — Tue, 02 Aug 2022 14:37:04 GMT

What is your repository protocol? If this is SFTP, did you generate the crypto keys from the ISE CLI? What happens from the CLI of the ISE nodes if you issue a "show repository Backup-Repository"

Re: Cisco ISE 3.1 Automated backup configuration issue

Charlie Moreton — Tue, 02 Aug 2022 14:50:42 GMT

What is your patch level?

Re: Cisco ISE 3.1 Automated backup configuration issue

aamir.aleem — Thu, 04 Aug 2022 06:20:54 GMT

Hello,

There are no patches installed as of now. Its more or less a relatively new deployment.

Regards

Aamir

Re: Cisco ISE 3.1 Automated backup configuration issue

aamir.aleem — Thu, 04 Aug 2022 06:22:59 GMT

Hello,

1. Its FTP

2. The repository files are accessible from ISE. Manual backups to it work without issues.

Aamir

Re: Cisco ISE 3.1 Automated backup configuration issue

ahollifield — Thu, 04 Aug 2022 11:32:06 GMT

Please install the latest patch for ISE 3.1. This may not fix your issue but its 100% a best practice and fixes some major security vulnerabilities.

Re: Cisco ISE 3.1 Automated backup configuration issue

Marcelo Morais — Tue, 09 Aug 2022 02:27:03 GMT

Hi @aamir.aleem ,

please take a look at: CSCwa05936 ISE 3.0 p2 scheduled backups are not triggered.

Symptom:
Somewhere after patch 2 is installed, scheduled backups aren't generated.
Manual backups run fine, but whenever the date/time for scheduled backups comes, nothing gets generated, and no info is seen on logs. Attempting to set up a new scheduled backup doesn't work either.
Conditions:
ISE 3.0 - patch 2
schedule weekly or daily backups.

ISE 3.1 has parity with 3.0 P2, you are probably hitting this bug. An update should solve the issue.

Hope this helps !!!

Re: Cisco ISE 3.1 Automated backup configuration issue

kerstin-534 — Wed, 04 Jan 2023 10:21:58 GMT

No automatic schedule works in Cisco ISE 3.1 Patch 4 or Patch 5. I wonder what's so difficult to resolve this issue.

Re: Cisco ISE 3.1 Automated backup configuration issue

Marcelo Morais — Wed, 04 Jan 2023 13:24:12 GMT

Hi @kerstin-534 ,

Schedule Backup on 3.1 P5 should work, could you please describe your issue?

Regards

Re: Cisco ISE 3.1 Automated backup configuration issue

kerstin-534 — Wed, 04 Jan 2023 13:40:04 GMT

my issue is:

Schedule backups on ISE 3.1 Patch 5 do NOT work. Nothing is done from ISE. Manual backup works.

Re: Cisco ISE 3.1 Automated backup configuration issue

ahollifield — Wed, 04 Jan 2023 13:44:42 GMT

Any errors on the backup page? Is NTP setup correctly on ISE? What is the repository type? Does "show repo [name]" from the ISE CLI Return anything?

Re: Cisco ISE 3.1 Automated backup configuration issue

Marcelo Morais — Wed, 04 Jan 2023 14:49:59 GMT

Hi @kerstin-534 ,

in my own words ...

1. the Schedule Backup do not work for any Frequency (One Time, Daily, Weekly or Monthly)

2. you are able to Schedule a Backup, for example:

3. during the Schedule Backup you have 0 logs from:

ise/admin# debug backup-restore backup

4. you are able to Manually Backup ISE via the Backup Now button.

Am I correct?

Regards

Re: Cisco ISE 3.1 Automated backup configuration issue

kerstin-534 — Wed, 04 Jan 2023 15:18:17 GMT

Yes, NTP is set up and date/time is correct. Repo content is visible via show repository FTP1.

"Backup now" works.

I don't have debugging yet.

regards,

Kerstin

Re: Cisco ISE 3.1 Automated backup configuration issue

kerstin-534 — Wed, 04 Jan 2023 16:04:12 GMT

I have set backup time to 5:00 pm and have done

"psn/admin# debug backup-restore backup 7"

There happens nothing at all. Cisco ISE sleeps.
I have same backup setup/configuration with ISE 2.6P12 without problems.

Re: Cisco ISE 3.1 Automated backup configuration issue

aamir.aleem — Mon, 09 Jan 2023 08:58:15 GMT

Hello,

Just a feedback regarding the issue, upon installing patch 3(which I had done a long time back), the automatic backups worked as expected. Been running them since then.

I have not tried them on patch 4 or 5 as yet.

Aamir

Re: Cisco ISE 3.1 Automated backup configuration issue

Ihsan Al Faili — Thu, 23 Mar 2023 21:34:31 GMT

Aamir, get into PAN by using your admin (local-account). It should work with no issues. Thanks

Re: Cisco ISE 3.1 Automated backup configuration issue

Shazz — Mon, 16 Oct 2023 15:15:07 GMT

Hi Marcelo,

I am seeing the same issue on 3.1 patch 7.

Could be related to the below?

scheduled backup failure when ISE indexing engine backup failed
CSCwb62192

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwb62192

Thanks.

Re: Cisco ISE 3.1 Automated backup configuration issue

Shazz — Mon, 16 Oct 2023 15:15:31 GMT

Hi Marcelo,

I am seeing the same issue on 3.1 patch 7.

Could be related to the below?

scheduled backup failure when ISE indexing engine backup failed
CSCwb62192

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwb62192

Thanks.