topic Re: FMC backup from CLI in Network Security

FMC backup from CLI

Chess Norris — Tue, 15 Mar 2022 12:21:49 GMT

Hi, Is it possible to do a full FMC backup from the CLI? I can only find instructions on how to restore from a backup from the CLI, but nothing about doing a full backup.

Thanks

/Chess

Re: FMC backup from CLI

balaji.bandi — Tue, 15 Mar 2022 13:10:56 GMT

From FMC 6.2.3 onwards you have cli option :

# backupcli.pl –n <name>

Re: FMC backup from CLI

Chess Norris — Tue, 15 Mar 2022 13:25:01 GMT

@balaji.bandi Thank you very much 🙂

Best regards

/Chess

Re: FMC backup from CLI

williams_t82 — Wed, 12 Oct 2022 13:27:56 GMT

Where are the instructions for the restore?

Re: FMC backup from CLI

Marvin Rhoads — Thu, 13 Oct 2022 17:04:11 GMT

@williams_t82 you can use the model migration tool to restore a backup.

# sf-migration.pl <filename of backup tar file>

This perl script utility is in /var/sf/bin.

You may need to also use this utility to temporarily foll the script into thinking you are migrating to a supported model:

/var/sf/etc/model-info/configure-model.sh

Re: FMC backup from CLI

williams_t82 — Thu, 13 Oct 2022 17:20:10 GMT

Thank you,

{Initial Issue}

FMC displaying "The server response was not understood. Please contact support." at the GUI login.

After an attempt to upgrade our backup FMC from 6.6.1 (build 91) to the latest 7.0.4-55, the GUI does not allow login and gives the "The server response was not understood. Please contact support." error. After running "pmtool status | grep gui" these are the results:

mysqld (system,gui,mysql) - Running 16750
monetdb (system,gui) - Running 16762
httpsd (system,gui) - Running 16766
sybase_arbiter (system,gui) - Waiting
vmsDbEngine (system,gui) - Down
ESS (system,gui) - Waiting
DCCSM (system,gui) - Down
Tomcat (system,gui) - Waiting
VmsBackendServer (system,gui) - Waiting
mojo_server (system,gui) - Running 29626
root@FMC02:/Volume/home/admin#

Trying to run a "pmtool EnableByID vmsDbEngine" and "pmtool EnableByID DCCSM" or reboot of the appliance does not work.

Re: FMC backup from CLI

balaji.bandi — Thu, 13 Oct 2022 18:08:32 GMT

Looks like you have opened another thread, contact TAC, since your DB services still waiting.

Re: FMC backup from CLI

bharat.bhushan.mehta — Thu, 14 Sep 2023 09:59:35 GMT

Hi Balaji,

I am trying to take the backup of cisco fmc(7.3.1) using sf-backup.pl -n bkpfilename, but its giving lots of error, can you please help what parameter needs to pass or any documentation which can be refered?

//Bharat

Re: FMC backup from CLI

stevendallas210 — Sat, 16 Sep 2023 08:08:40 GMT

The ability to perform a full FMC (Firepower Management Center) backup from the CLI (Command-Line Interface) can depend on the specific version of Cisco Firepower software you are using. Cisco Firepower software may offer different backup and restore options in various versions, and the commands and procedures can change.

Here are some general steps that might apply, but I strongly recommend checking the documentation and release notes for your specific Cisco Firepower software version for the most accurate and up-to-date information:

Access the CLI: Log in to the FMC via SSH or console access using a terminal emulator like PuTTY.
Enter Configuration Mode: You may need to enter configuration mode. This can vary depending on your FMC version but may involve using commands like configure terminal.
Initiate Backup: Use a command like backup or system backup followed by relevant options. The specific syntax can vary by software version. For example:
bash
backup full-config ftp://username:password@ftp-server/backup-file-name
Replace username, password, ftp-server, and backup-file-name with your actual information.
Follow Prompts: The CLI may prompt you for additional information or confirmation. Provide the necessary details.
Monitor Progress: Depending on the size of your configuration, the backup process may take some time. You should see progress indicators in the CLI.
Verify Backup: After the backup is complete, it's essential to verify that the backup file has been created and transferred to the specified location.
Store the Backup Securely: Ensure that you store the backup securely in accordance with your organization's data retention and security policies.

Re: FMC backup from CLI

balaji.bandi — Sun, 17 Sep 2023 16:44:59 GMT

what kind of errors - can you post me the error ?

Re: FMC backup from CLI

bharat.bhushan.mehta — Mon, 18 Sep 2023 05:52:08 GMT

Thanks, Balaji for your response.

Here is the attached sf-backup.pl script output.

//Bharat