DNAC 2.3.3.5 Backups

[ChuckMcF]

Just upgraded to DNAC 2.3.3.5 and cannot create a backup. SFTP service used to be in System->Settings->Device Setting however it is no longer there. Google is no help. Does anyone know how to get SFTP started on the DNAC servers with 2.3.3.5?

TIA

Chuck McFadden

[Preston Chilcote]

I found this in the docs: https://www.cisco.com/c/en/us/td/docs/cloud-systems-management/network-automation-and-management/dna-center/2-3-3/admin_guide/b_cisco_dna_center_admin_guide_2_3_3/b_cisco_dna_center_admin_guide_2_3_3_chapter_0110.html#concept_bkp_mgh_sdb

• SFTP subsystem must be enabled. The following line must be uncommented and present in the SSHD configuration:

  Subsystem sftp /usr/libexec/openssh/sftp-server

  The file where you need to uncomment the preceding line is usually located in /etc/ssh/sshd_config.

[ChuckMcF]

Thank you for the feedback, however I'm trying to backup directly to DNAC not to a remote SFTP server. 

Chuck

[ChuckMcF]

We can close out this topic. Bottom Line is that Cisco no longer supports running the SFTP server on the local DNA Center server starting with 2.3.x.x. The '_shell' change has made the use of SFTP impractical.

To configure a remote Linux server for DNAC backups, follow this link: 

Additional commands that may be helpful:

- Verify that you can SSH to the external server from Cisco DNA center:
ssh <backup server IP> -l <backup server username>

- Verify backup username has admin rights over the folder used to save the backups on the external server:

chmod 777 /path/to/directory

- Run the below commands on Cisco DNA center, and share their output with TAC:
maglev backup history
magctl sts backup mount display
maglev backup remote verify