FMC backup from CLI

[Chess Norris]

Hi, Is it possible to do a full FMC backup from the CLI? I can only find instructions on how to restore from a backup from the CLI, but nothing about doing a full backup.

Thanks

/Chess

[balaji.bandi · Accepted solution]

From FMC 6.2.3 onwards you have cli option :

# backupcli.pl –n <name>

[bharat.bhushan.mehta]

Hi Balaji,

I am trying to take the backup of cisco fmc(7.3.1) using sf-backup.pl -n bkpfilename, but its giving lots of error, can you please help what parameter needs to pass or any documentation which can be refered?

//Bharat

[balaji.bandi]

what kind of errors - can you post me the error ? 

[bharat.bhushan.mehta]

Thanks, Balaji for your response.

Here is the attached sf-backup.pl script output.

//Bharat

[Chess Norris]

@balaji.bandi Thank you very much

Best regards

/Chess

[williams_t82]

Where are the instructions for the restore?

[Marvin Rhoads]

@williams_t82 you can use the model migration tool to restore a backup.

# sf-migration.pl <filename of backup tar file>

This perl script utility is in /var/sf/bin.

You may need to also use this utility to temporarily foll the script into thinking you are migrating to a supported model:

/var/sf/etc/model-info/configure-model.sh 

[williams_t82]

Thank you,

{Initial Issue}

FMC displaying "The server response was not understood. Please contact support." at the GUI login.

After an attempt to upgrade our backup FMC from 6.6.1 (build 91) to the latest 7.0.4-55, the GUI does not allow login and gives the "The server response was not understood. Please contact support." error. After running "pmtool status | grep gui" these are the results:

mysqld (system,gui,mysql) - Running 16750
monetdb (system,gui) - Running 16762
httpsd (system,gui) - Running 16766
sybase_arbiter (system,gui) - Waiting
vmsDbEngine (system,gui) - Down
ESS (system,gui) - Waiting
DCCSM (system,gui) - Down
Tomcat (system,gui) - Waiting
VmsBackendServer (system,gui) - Waiting
mojo_server (system,gui) - Running 29626
root@FMC02:/Volume/home/admin#

Trying to run a "pmtool EnableByID vmsDbEngine" and "pmtool EnableByID DCCSM" or reboot of the appliance does not work.

[balaji.bandi]

Looks like you have opened another thread, contact TAC, since your DB services still waiting.

[stevendallas210]

The ability to perform a full FMC (Firepower Management Center) backup from the CLI (Command-Line Interface) can depend on the specific version of Cisco Firepower software you are using. Cisco Firepower software may offer different backup and restore options in various versions, and the commands and procedures can change.

Here are some general steps that might apply, but I strongly recommend checking the documentation and release notes for your specific Cisco Firepower software version for the most accurate and up-to-date information:

1. Access the CLI: Log in to the FMC via SSH or console access using a terminal emulator like PuTTY.

2. Enter Configuration Mode: You may need to enter configuration mode. This can vary depending on your FMC version but may involve using commands like configure terminal.

3. Initiate Backup: Use a command like backup or system backup followed by relevant options. The specific syntax can vary by software version. For example:

   bash

   backup full-config ftp://username:password@ftp-server/backup-file-name

   Replace username, password, ftp-server, and backup-file-name with your actual information.

4. Follow Prompts: The CLI may prompt you for additional information or confirmation. Provide the necessary details.

5. Monitor Progress: Depending on the size of your configuration, the backup process may take some time. You should see progress indicators in the CLI.

6. Verify Backup: After the backup is complete, it's essential to verify that the backup file has been created and transferred to the specified location.

7. Store the Backup Securely: Ensure that you store the backup securely in accordance with your organization's data retention and security policies.