cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
3606
Views
2
Helpful
18
Replies

Cisco ISE Backup Fails -Repository validation: confd implementations

rocteam
Level 1
Level 1

Hello,

The ISE is set up to Backup automatically:
Configuration Data Backup - Daily
Operational Data Backup - Weekly
Repository - NFS

The Daily works fine, but the Weekly Operational Backup fails witht the message:
Repository (Rep_Name) validation failed due to error: confd implementatons

They both use the same Repo, that is why I do not know why it happens.

Thanks in advance for help.

 

1 Accepted Solution

Accepted Solutions

rocteam
Level 1
Level 1

I found the solution together with Cisco TAC!
Root cause was the firewall blocking connections between repositories and monitoring nodes.
In ISE when using GUI or scheduled backups:
- The config backups are done from admin nodes
- The operational backups are done from monitoring nodes
The firewall was not set up to allow connections from monitoring nodes - ONLY admin nodes.
That is why when performing operational backup from admin node using CLI, it was successfull - but not from GUI

After allowing the connections from all admin and monitoring nodes, all backups are working fine. 

Thank you for trying to find a solution.

View solution in original post

18 Replies 18

marce1000
Hall of Fame
Hall of Fame

 

    - What happens if you use a different Repo for both , 

M.



-- Each morning when I wake up and look into the mirror I always say ' Why am I so brilliant ? '
    When the mirror will then always repond to me with ' The only thing that exceeds your brilliance is your beauty! '

Are you using the same folder for both backups? if not, maybe it is a permission issue on the operational backup folder?

Thanks for the reply.

We are using the same repository and folder for both backups. 

Interesting. What happens if you try to trigger the operational backup manually? would it still fail? if not, I would try to delete the operational backup schedule and recreate it.

Manually via GUI fails witht error: copy to repository failed.
Via CLI ends with success, but this outcome:

Warning: Do not use CTRL+C or close this terminal window until the backup is completed.

% Creating backup with timestamped filename: Operational_Data_Backup_260924-OPS10-240926-1525.tar.gpg

% backup in progress: Starting Backup...10% completed

% backup in progress: starting dbbackup using expdp.......20% completed

ttBulkCp: Error received while connecting to data store -- 08S01: [TimesTen][TimesTen 18.1.4.15.0 ODBC Driver][TimesTen]TT0799: Unable to connect to daemon; check daemon status -- file "dbConnect.c", lineno 2537, procedure "sbDbConnect" (TimesTen error code = 799).

ttSchema: Error received while connecting to data store -- 08S01: [TimesTen][TimesTen 18.1.4.15.0 ODBC Driver][TimesTen]TT0799: Unable to connect to daemon; check daemon status -- file "dbConnect.c", lineno 2537, procedure "sbDbConnect" (TimesTen error code = 799).

% backup in progress: starting cars logic.......50% completed

% backup in progress: Moving Backup file to the repository...75% completed

% backup in progress: Completing Backup...100% completed

 

  - Check if this can help : https://community.cisco.com/t5/network-access-control/operational-backup-failing-ise-2-7/m-p/4812262/highlight/true#M581095

 M.



-- Each morning when I wake up and look into the mirror I always say ' Why am I so brilliant ? '
    When the mirror will then always repond to me with ' The only thing that exceeds your brilliance is your beauty! '

thanks for the reply.
It can be the cause. I also tried your first suggestions, did a backup with different repos, the result was the same. 
For the restart, we will need a window from customer. I will let you know the outcome once done. May take some time

I would try to delete and recreate the scheduled backup and see if that helps.

I can not delete the scheduled backup, tried to deactivate and activate again - same error. 

 

 - FYI : https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/212594-debugs-to-troubleshoot-on-ise.html
           When collecting all log files you may also have confd.log or related name ; check it's content

 M.



-- Each morning when I wake up and look into the mirror I always say ' Why am I so brilliant ? '
    When the mirror will then always repond to me with ' The only thing that exceeds your brilliance is your beauty! '

Does it return any specific error when you try to delete it?

Sorry for late reply. 
I just do not see any option in GUI to delete a scheduled Backup. I can only deactivate it. 

You're right and that was my bad, I got confused myself with this, sorry about that. At this point probably I would try to deactivate the backup and try to delete the repository and recreate it. Not sure though if this would help but I think it does worth the try.

No problem
I tried to deactivate schedule backup - delete repo and add new - same result