Cisco ISE backup stuck @20% !!

[dnsroot13]

Hi Guys,

There is weird  issue with ISE

trying to do configuration backup via FTP(Filiezilla server) and its stuck @20% completed ,it stays at that for a long hours and manually need to abort it

on FTP server see that directory is listed however not sure why its not going beyond 20%!

Repository is configured  with PATH "/"  and  repository name "FTP" with username  & password on ISE

FTP server one folder with full RW access shared already (i have tested with one test machine to transfer file to this FTP server and its works with same dir)

So either services needs to be restarted which solved the issue I am not sure or is there any other things which i need check further kindly let me know

Debug copy 7 and Debug Transfer 7 doesn't shows much information except below & attached screen shot

---------------------------------------------------------------------------------------------

[6732]:[error] transfer: cars_xfer.c[204] [system]: couldn't get repository Select Repository

6 [19828]:[info] transfer: cars_xfer.c[220] [admin]: ftp dir of repository FTP requested
7 [19828]:[debug] transfer: cars_xfer_util.c[1951] [admin]: ftp get dir for repos FTP
7 [19828]:[debug] transfer: cars_xfer_util.c[1963] [admin]: initializing curl
7 [19828]:[debug] transfer: cars_xfer_util.c[1974] [admin]: full url is ftp://172.29.126.101/
7 [19828]:[debug] transfer: cars_xfer_util.c[1999] [admin]: empty result from retrieving dir list on FTP repo
% Repository is empty

==============

Cisco Identity Services Engine
---------------------------------------------
Version      : 2.0.0.306

===============

[dnsroot13]

Hi Guys/Cisco Team

Any inputs will be much appreciated 

[ajc]

You have not configured properly the REMOTE FTP Server (Remote Repository) on the ISE Primary PAN. Take a look on the attached file.

That is why you got an error when running the CLI COMMAND:

ise#show repository FTP

[dnsroot13]

FTP repository is configured as per document already however its not working ,canceling the backup also takes 2 hours to cancel 

please find attached screenshot

[ajc]

You got an "ERROR READING REMOTE REPOSITORY" when you ran ise#show repository FTP, that is why I am saying you could have something misconfigured.

From ISE CLI your FTP configuration should be like the next:

****************************

repository BackupServer
  url ftp://10.10.10.1/  ------------- > CHANGE BY YOUR PC IP, YOUR PC WOULD RUN THE FTP APP SIMULATING THE REMOTE REPO.

  user backup password hash 09698v9650078245c9c94m58c8a3e77

****************************

Therefore, test the FTP Operation running the application locally on your PC and change the IP of the ISE Repository pointing to the PC (this change MUST be done using the ISE GUI NOT CLI)

If the FTP is working properly (locally on your PC as the remote repository), then you should get the following:

ISE/admin# show repository BackupServer
172_23_111_20_140112_2200.cfg
172_23_111_22_130221_2209.cfg
2ndcapture.cap
33332248.tif
98729128.Tif
AIR-CT5500-K9-7-0-230-0.aes
AIR-CT5500-K9-7-3-101-0.aes
CIN-WS208.ics
Ciscoworks_install_20101105_135802.zip
ise10_deploy.pdf
ise10_dis_deploy.pdf
ISE/admin#

In any case, check as well if you do not have a FW in the middle between the ISE and Remote Repository blocking the data transfer.

Depending on the size of your ISE DB the backup process could take easily 30-45 minutes.

One more thing, I am running 1.4.0.253 patch 6 as this one is very stable. I have no plan to upgrade into 2.0 or 2.1 because I experienced some issues during the beta test on 2.1 on which I was involved with Cisco.

[dnsroot13]

just to update ,Issues is resolved after reload the BOX without any change