Configuring Backups

Available Languages

Download Options

  • PDF     (528.9 KB)
    View with Adobe Reader on a variety of devices
Updated:July 28, 2011

Bias-Free Language

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.

Configuring Backups

Configuring Backups

This chapter includes the following sections:

Restoring the Cisco VNMC Software to the Backup Configuration

Restoring the Cisco VNMC Software to the Backup Configuration

Procedure
Step 1   Install the Cisco VNMC virtual machine (VM).

For details, see the Cisco Virtual Security Gateway, Release 4.2(1)VSG1(2) and Cisco Virtual Network Management Center, Release 1.2 Installation and Upgrade Guide.
Step 2   Uninstall the Cisco VSG policy agents.

Connect the Secure Shell to the Cisco VSG console for this task. This step does not cause a traffic disruption.



Example:
vsg# conf t
vsg (config)# vnm-policy-agent
vsg (config-vnm-policy-agent)# no policy-agent-image
Note    Perform this step for all Cisco VSGs that are associated with the Cisco VNMC that you are restoring.
Step 3   Uninstall the VSM policy agents.

Connect the Secure Shell to the VSM console for this task. This step does not cause a traffic disruption.



Example:
vsm# conf t
vsm (config)# vnm-policy-agent
vsm (config-vnm-policy-agent)# no policy-agent-image
Note    Perform this step for all VSMs that are associated with the Cisco VNMC you are restoring.
Step 4   Restore the Cisco VNMC database.

Connect the Secure Shell to the Cisco VNMC CLI for this task. Depending upon your Cisco VNMC backup location, restore using File Transfer Protocol (FTP), Secure Copy (SCP), Trivial File Transfer Protocol (TFTP), or Secure File Transfer Protocol (SFTP).



Example:
vnmc# connect local-mgmt
vnmc(local-mgmt)# restore scp:[//[username@]server][/path]
Step 5   In the Cisco VNMC GUI, click Administration > Service Registry > Clients, and in the Work pane do the following:
  1. Wait until each registered VSM displays the operational status as lost-visibility.
  2. Choose each VSM, and click the Delete Client icon.
Step 6   In the Cisco VNMC GUI, click Resource Management > Resources > Virtual Supervisor Modules, and verify that the deleted VSMs are not visible.
Step 7   Reinstall the VSM policy agents.
Note    If the VSM policy agents must be upgraded, install the new software now.


Example:
VSM# conf t
VSM (config)# vnm-policy-agent
VSM (config-vnm-policy-agent)# policy-agent-image bootflash:vnmc-vsmpa.1.0.1g.bin
Step 8   Wait until all the VSMs have registered in the Service Registry and are displayed under Resource Management > Resources > Virtual Supervisor Modules.
Step 9   Reinstall the Cisco VSG policy agents.
Note   

If the Cisco VSG policy agents must be upgraded, install the new software now.


Example:
VSG# conf t
VSG (config)# vnm-policy-agent
VSG (config-vnm-policy-agent)# policy-agent-image bootflash:vnmc-vsgpa.1.0.1g.bin
Step 10   Verify the following states after the restore process is complete:
Note   

The restore process could take a few minutes depending upon your setup environment.
  1. On the Cisco VSG CLI, verify that your configurations are restored to their earlier state.
  2. On the Cisco VNMC GUI, verify that your objects and policies are restored to their earlier state.

Configuring Backup Operations

Creating a Backup Operation

Before You Begin

Obtain the backup server IP address and authentication credentials.


Procedure
Step 1   In the Navigation pane, click the Administration tab.
Step 2   In the Navigation pane, click the Operations subtab.
Step 3   In the Navigation pane, click the Backups node.
Step 4   In the Work pane, click the Create Backup Operation link.
Step 5   In the Create Backup Operation dialog box, complete the following fields:
Name Description

Admin State radio button

The administrative state.

This can be one of the following states:

  • enabled—Backup is enabled. The system runs the backup operation as soon as you click OK.

  • disabled—Backup is disabled. The system does not run the backup operation when you click OK. If you select this option, all fields in the dialog box remain visible.

Type field

The type of backup. It creates a copy of the whole database file.

You can use this file for disaster recovery if you need to recreate every configuration on your. This field is not editable.

Protocol radio button

The protocol used when communicating with the remote server.

This can be one of the following protocols:

Hostname field

The hostname or IP address of the device the backup file is stored.

The hostname cannot be changed when editing the operation.

Note   

If you use a hostname rather than an IP address, you must configure a DNS server.

User field

The user name the system uses to log into a remote server.

This field is not displayed if the protocol chosen is tftp.

Password field

The password the system uses to log into a remote server.

This field does not appear if the protocol chosen is TFTP.

Note   

Cisco VNMC does not store this password. You do not need to enter this password unless you intend to enable and run the backup operation immediately.

Absolute Path Remote File field

The full path to the backup configuration file.

This field can contain the filename as well as the path. If you omit the filename, the backup procedure assigns a name.
Step 6   Click OK.

Running a Backup Operation

Procedure
Step 1   In the Navigation pane, click the Administration tab.
Step 2   In the Navigation pane, click the Operations subtab.
Step 3   In the Navigation pane, click and expand the Backups node.
Step 4   In the Navigation pane, click the file you want to run.
Step 5   In the Work pane, click the General tab.
Step 6   In the Properties area, complete the following fields:
  1. In the Admin State field, click the enabled button.
  2. For all the protocols, except TFTP, enter the password for the username in the Password field.
  3. (Optional) Change the content of the other available fields.
Step 7   Click Save.

Cisco VNMC takes a snapshot of the configuration type that you selected and exports the file to the network location.

Step 8   (Optional) To view the progress of the backup operation, click the Task tab in the pane. The backup operation continues to run until it is completed.

Editing a Backup Operation

Before You Begin

Obtain the backup server IP address and authentication credentials.


Procedure
Step 1   In the Navigation pane, click the Administration tab.
Step 2   In the Navigation pane, click the Operations subtab.
Step 3   In the Navigation pane, click the Backups node.
Step 4   In the Work pane, expand the items in the table, and select the backup operation you want to edit.
Step 5   In the Edit dialog box, modify the following fields as appropriate:
Name Description

Admin State radio button

The administrative state.

This can be one of the following states:

  • enabled—Backup is enabled. The system runs the backup operation as soon as you click OK.

  • disabled—Backup is disabled. The system does not run the backup operation when you click OK. If you select this option, all fields in the dialog box remain visible.

Type field

The type of backup. It creates a copy of the whole database file.

You can use this file for disaster recovery if you need to recreate every configuration on your. This field is not editable.

Protocol radio button

The protocol used when communicating with the remote server.

This can be one of the following protocols:

Hostname field

The hostname or IP address of the device the backup file is stored.

The hostname cannot be changed when editing the operation.

Note   

If you use a hostname rather than an IP address, you must configure a DNS server.

User field

The user name the system uses to log into a remote server.

This field is not displayed if the protocol chosen is tftp.

Password field

The password the system uses to log into a remote server.

This field does not appear if the protocol chosen is TFTP.

Note   

Cisco VNMC does not store this password. You do not need to enter this password unless you intend to enable and run the backup operation immediately.

Absolute Path Remote File field

The full path to the backup configuration file.

This field can contain the filename as well as the path. If you omit the filename, the backup procedure assigns a name.
Step 6   Click OK.

Deleting a Backup Operation

Procedure
Step 1   In the Navigation pane, click the Administration tab.
Step 2   In the Navigation pane, click the Operations subtab.
Step 3   In the Navigation pane, click Backups node.
Step 4   In the Work pane, click the backup operation you want to delete.
Step 5   Click the Delete link.
Step 6   In the Confirm dialog box, click OK.

Configuring Import Operations

Creating an Import Operation

Before You Begin

Obtain the backup server IP address and authentication credentials.

Important:

The association of compute firewalls with VSGs are not included in the export or import data. Only the compute firewall definitions are included, such as device profiles and policies. Therefore, if an imported compute firewall did not exist in the system, it will not be associated to any VSG after the import operation. If an imported firewall already existed in the system, the association state remains the same.


Procedure
Step 1   In the Navigation pane, click the Administration tab.
Step 2   In the Navigation pane, click the Operations subtab.
Step 3   In the Navigation pane, click the Backups node.
Step 4   In the Work pane, click the Create Import Operation link.
Step 5   In the Create Import Operation dialog box, complete the following fields:
Name Description

Admin State radio button

The administrative state.

This can be one of the following states:

  • enabled—Import is enabled. The system runs the backup operation as soon as you click OK.

  • disabled—Import is disabled. The system does not run the backup operation when you click OK. If you select this option, all fields in the dialog box remain visible.

Action radio button

The action to be taken on a file.

Currently, the only action is merge.

Protocol radio button

The protocol used when communicating with the remote server.

This can be one of the following protocols:

Hostname field

The hostname or IP address of the device the backup file is stored.

The hostname cannot be changed when editing the operation.

Note   

If you use a hostname rather than an IP address, you must configure a DNS server.

User field

The user name the system uses to log into a remote server.

This field does not apply if the protocol is tftp.

Password field

The password the system uses to log into a remote server.

This field does not appear if the protocol chosen is TFTP.

Note   

Cisco VNMC does not store this password. You do not need to enter this password unless you intend to enable and run the backup operation immediately.

Absolute Path Remote File(.tgz) field

The absolute path to the .tgz file.
Step 6   Click OK.

Editing an Import Operation

Before You Begin

Obtain the backup server IP address and authentication credentials.


Procedure
Step 1   In the Navigation pane, click the Administration tab.
Step 2   In the Navigation pane, click the Operations subtab.
Step 3   In the Navigation pane, click the Backups node.
Step 4   In the Work pane, expand the items in the table, and select the import operation you want to edit.
Step 5   Click the Edit link.
Step 6   In the Edit dialog box, modify the fields as appropriate:
Name Description

Admin State radio button

The administrative state.

This can be one of the following states:

  • enabled—Import is enabled. The system runs the backup operation as soon as you click OK.

  • disabled—Import is disabled. The system does not run the backup operation when you click OK. If you select this option, all fields in the dialog box remain visible.

Action radio button

The action to be taken on a file.

Currently, the only action is merge.

Protocol radio button

The protocol used when communicating with the remote server.

This can be one of the following protocols:

Hostname field

The hostname or IP address of the device the backup file is stored.

The hostname cannot be changed when editing the operation.

Note   

If you use a hostname rather than an IP address, you must configure a DNS server.

User field

The user name the system uses to log into a remote server.

This field does not apply if the protocol is tftp.

Password field

The password the system uses to log into a remote server.

This field does not appear if the protocol chosen is TFTP.

Note   

Cisco VNMC does not store this password. You do not need to enter this password unless you intend to enable and run the backup operation immediately.

Absolute Path Remote File(.tgz) field

The absolute path to the .tgz file.
Step 7   Click OK.

Deleting an Import Operation

Procedure
Step 1   In the Navigation pane, click the Administration tab.
Step 2   In the Navigation pane, click the Operations subtab.
Step 3   In the Navigation pane, click the Backups node.
Step 4   In the Work pane, click the import operation you want to delete.
Step 5   Click the Delete link.
Step 6   In the Confirm dialog box, click Yes.

Configuring Export Operations

Creating an Export Operation

Before You Begin

Obtain the backup server IP address and authentication credentials before performing an export.

Important:

The associations of compute firewalls with VSGs are not included in export or import data. Only compute firewall definitions are included, such as device profiles and policies. If an imported compute firewall did not exist in the system, it will not be associated to any VSG after the import operation. If an imported firewall already existed in the system, the association state remains the same.


Procedure
Step 1   In the Navigation pane, click the Administration tab.
Step 2   In the Navigation pane, click the Operations subtab.
Step 3   In the Navigation pane, click the Backups node.
Step 4   In the Work pane, click the Create Export Operation link.
Step 5   In the Create Export Operation dialog box, complete the following fields:
Name Description

Admin State radio button

The administrative state.

This can be one of the following states:

  • enabled—Export is enabled. The system runs the backup operation as soon as you click OK.

  • disabled—Export is disabled. The system does not run the backup operation when you click OK. If you select this option, all fields in the dialog box remain visible.

Type radio button

The type of backup.

This can be one of the following types:

  • config-all

  • config-logical

  • config-system

Protocol radio button

The protocol used when communicating with the remote server.

This can be one of the following protocols:

Hostname field

The hostname or IP address of the device the backup file is stored.

The hostname cannot be changed when editing the operation.

Note   

If you use a hostname rather than an IP address, you must configure a DNS server.

User field

The user name the system uses to log into a remote server.

This field is not displayed if the protocol is tftp.

Password field

The password the system uses to log into a remote server.

This field does not appear if the protocol chosen is TFTP.

Note   

Cisco VNMC does not store this password. You do not need to enter this password unless you intend to enable and run the backup operation immediately.

Absolute Path Remote File(.tgz) field

The absolute path to the .tgz file.
Step 6   Click OK.

Editing an Export Operation

Before You Begin

Obtain the backup server IP address and authentication credentials.


Procedure
Step 1   In the Navigation pane, click the Administration tab.
Step 2   In the Navigation pane, click the Operations subtab.
Step 3   In the Navigation pane, click the Backups node.
Step 4   In the Work pane, expand the items in the table, and select the export operation you want to edit.
Step 5   Click the Edit link.
Step 6   In the Edit dialog box, modify the fields as appropriate:
Name Description

Admin State radio button

The administrative state.

This can be one of the following states:

  • enabled—Export is enabled. The system runs the backup operation as soon as you click OK.

  • disabled—Export is disabled. The system does not run the backup operation when you click OK. If you select this option, all fields in the dialog box remain visible.

Type radio button

The type of backup.

This can be one of the following types:

  • config-all

  • config-logical

  • config-system

Protocol radio button

The protocol used when communicating with the remote server.

This can be one of the following protocols:

Hostname field

The hostname or IP address of the device the backup file is stored.

The hostname cannot be changed when editing the operation.

Note   

If you use a hostname rather than an IP address, you must configure a DNS server.

User field

The user name the system uses to log into a remote server.

This field is not displayed if the protocol is tftp.

Password field

The password the system uses to log into a remote server.

This field does not appear if the protocol chosen is TFTP.

Note   

Cisco VNMC does not store this password. You do not need to enter this password unless you intend to enable and run the backup operation immediately.

Absolute Path Remote File(.tgz) field

The absolute path to the .tgz file.
Step 7   Click OK.

Deleting an Export Operation

Procedure
Step 1   In the Navigation pane, click the Administration tab.
Step 2   In the Navigation pane, click the Operations subtab.
Step 3   In the Navigation pane, click the Backups node.
Step 4   In the Work pane, click the export operation you want to delete.
Step 5   Click the Delete link.
Step 6   In the Confirm dialog box, click Yes.

Was this Document Helpful?

FeedbackFeedback

Contact Cisco