cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
798
Views
0
Helpful
2
Replies
JanWillem
Beginner

Cloudsec APIC and snapshots

Hi all,

 

We have an Multisite setup with 2 locations and have Cloudsec enabled, every 15 minutes the keys will change.

 

We also have recurring snapshots for the Fabric on both sites, but if we have made no changes at all ourself we still see changes in the config, these changes are the cloudsec keys that have been changed.

 

What will happen if you need to rollback a snapshot for 1 site, will this break the cloudsec trust or something, because the keys might differ between the 2 sites?

 

Has anyone experienced this or knows this?

1 ACCEPTED SOLUTION

Accepted Solutions
Robert Burns
Cisco Employee

Rolling back a snapshot or restoring an older config on any site (APIC) will not affect CloudSec connectivity or operation.  Only the Pre-Shared Keys (PSKs) appear in the snapshot, not the more critical Security Association Key (SAK).  The SAK is what's used for encryption/decryption and is unaffected by the config import/rollback.   When a SAK expires, it uses the next available PSK index to generate a new set of SAKs.  As long as a PSK is included in the exported config/snapshot (taken while it was enabled) there will be no issues.

Robert

View solution in original post

2 REPLIES 2
Robert Burns
Cisco Employee

Rolling back a snapshot or restoring an older config on any site (APIC) will not affect CloudSec connectivity or operation.  Only the Pre-Shared Keys (PSKs) appear in the snapshot, not the more critical Security Association Key (SAK).  The SAK is what's used for encryption/decryption and is unaffected by the config import/rollback.   When a SAK expires, it uses the next available PSK index to generate a new set of SAKs.  As long as a PSK is included in the exported config/snapshot (taken while it was enabled) there will be no issues.

Robert

View solution in original post

Hi Robert,

 

Thank you for your explanation.

 

Have a nice day!