Cisco FMC Scheduled Backup Error "Error creating tar archive"

[Roosevelt]

How's it going Team!

We have an issue with our Primary FMC its running the following Image:

Secure Firewall Management Center 1600

Version 7.4.2.1 (build 30)

When attempting to run a scheduled back up, we received the below error

Is there a way to find the backup logs on the FMC to help us narrow down the root cause of the issue

during this backup attempt?

Thanks in advance!

[MHM Cisco World]

Change name of backup file' 

Make it simple backupzero for example and check again 

MHM

[Roosevelt]

Thanks MHM!

Will try this as well and report back thanks again!

[MHM Cisco World · Accepted solution]

/var/log/sf/backup.log <<- since you use ssh to connect to external server' check if there is any log error in this folder 

MHM

[balaji.bandi]

The screenshot does not show, is the Local backup or remote backup ? please confirm what backup ?

if this is remote storage, what kind of remote, SMB, SSH, NFS , Local

1. check do you have enough space - if this is local or remote

2. you can login to FMC ssh, check the logs  directory /var/log/backup.log or syslog.

[Roosevelt]

Thanks for the quick response Gents!

The screenshot does not show, is the Local backup or remote backup ? please confirm what backup ? Its a remote backup

if this is remote storage, what kind of remote, SMB, SSH, NFS , Local ( We're using SSH)

1. check do you have enough space - if this is local or remote (space available confirmed)

2. you can login to FMC ssh, check the logs  directory /var/log/backup.log or syslog. (Will try and report back)

[balaji.bandi · Accepted solution]

is this remote backup same Lan ? if in different network, Do you have any Firewall between to allow the traffic.

from FMC Cli try ping and reaching the remote backup server.

If the Far end using SSH to backup - you can also view the logs.(on remove also in FMC)

[Roosevelt]

Hello again Gents,

A few changes have been made since I last tuned in.

We have our FMC on a different Lan than our SFTP server, the SFTP server is sitting behind a Netscaler load balancer

that is working as a proxy, it handles any SFTP requests sent to its Gateway IP. 

I'm able to ping the Netscaler's gateway IP from the FMC, but I'm unable to SSH to the SFTP server

when using the Netscaler Gateway IP, I'm getting the "shell request failed on channel 0" error from the FMC.

this happens also when I use the SFTP server's IP as well. Trying to figure this out before, trying to point the FMC

to the Netscaler's gateway IP. Should I make any FW rules to allow SSH communication between the GW IP and the FMC?

[balaji.bandi]

Its all depends on the port you using. if SFTP then open relevant ports between FMC Management to VPX to transfer the files.

follow also the guide FTPS LB using VPX :

https://support.citrix.com/external/article?articleUrl=CTX228088-how-do-i-load-balance-ftps-servers-on-a-netscaler-adc&language=en_US

[Roosevelt]

Hello Balaji,

We've confirmed the relevant ports are being allowed, on our FTDs in our case port 22. I have a TAC case open and will be investigating further with Cisco, I will keep you guys posted on what I find out. Thanks again!

[MHM Cisco World]

Wait your reply about log 

Thanks 

MHM