About Backup and Restore, on page 1 Supported Backup and Restore Procedures, on page 3

Transcription

1 About, on page 1 Supported Procedures, on page 3 Back Up Automation Data Using the GUI, on page 4 Restore Automation Data Using the GUI, on page 6 Schedule a Backup of Automation Data Using the GUI, on page 7 Back Up Automation Data Using the CLI, on page 8 Restore Automation Data Using the CLI, on page 9 Configure an NFS Server, on page 10 Back Up Assurance Data Using the CLI, on page 11 Restore Assurance Data Using the CLI, on page 12 About The backup and restore procedures for DNA Center can be used for the following purposes: To create backup files for disaster recovery for the appliance To create backup files to restore to a different appliance (if required for your network configuration) Backup When you perform a backup, DNA Center creates a copy of the following files and exports the files to a specific location on a remote server: DNA Center databases DNA Center credentials DNA Center file system and files Important The backup files should not be modified by the user. The backup files are created and posted to a remote server. You are able to restore the backup files from the remote server using DNA Center. For information about the remote server requirements, see Backup Server Requirements, on page 2. 1

2 Backup Server Requirements DNA Center does not support using FTP (port 21) when performing a backup. Use SSH (port22)/rsync when backing up the DNA Center. Only a single backup can be performed at a time. Performing multiple backups at once are not permitted. Additionally, only a full backup is supported. Other types of backups (for example, incremental backups) are not supported. While a backup is being performed, you will be unable to delete any files that have been uploaded to the file service and any changes that you make to files might not be captured by the backup process. When performing a backup, we recommend the following: Perform a backup everyday to maintain a current version of your database and files. Perform a backup after making any changes to your configuration. For example, when changing or creating a new policy on a device. Only perform a backup during a low impact or maintenance time period. You are able to schedule or automate a backup for a specific date and time using the DNA Center's GUI. For information about this procedure, see Schedule a Backup of Automation Data Using the GUI, on page 7. Each backup is uniquely stored using the UUID as directory name. Restore When you restore the backup files, DNA Center removes and replaces the existing database and files with the backup files. You restore the backup files from the remote server. When a restore is being performed, DNA Center is unavailable. You cannot take a backup from one version of DNA Center and restore it to another version of DNA Center. You can only restore a backup to an appliance that is running the same DNA Center software version, applications, and application versions as the appliance and applications from which the backup was taken. To view the current applications and versions on DNA Center, click, then System Settings, then App Management. You can restore a backup to a DNA Center system with a different IP address. This could happen if for any reason the IP address is changed on DNA Center and you need to backup from an older system. Backup Server Requirements The following are the requirements for the backup server: Running Red Hat Enterprise Linux 6 or greater, or any of its derivatives such as CentOS, Ubuntu or greater and its derivatives (Mint), or any other modern Linux operating system. Linux rsync utility must be installed. The destination folder for the backup should be owned by the backup user or the backup user should have read-write permissions for the user's group. For example, assuming the backup user is 'backup' and 2

3 Supported Procedures user's group is 'staff ', then the following sample outputs show the required permissions for the backup directory: Example 1: Backup directory is owned by 'backup' user: $ ls -l /srv/ drwxr-xr-x 4 backup root 4096 Apr 10 15:57 dnac Example 2: 'backup' user's group has required permissions: $ ls -l /srv/ drwxrwxr-x. 7 root staff 4096 Jul dnac Ensure that the SFTP sub-system is enabled. The following line needs to be uncommented and present in the SSHD configuration: Subsystem sftp /usr/libexec/openssh/sftp-server The file where you need to uncomment the above line is generally located in: /etc/ssh/sshd_config Supported Procedures For this release, you can backup and restore the Automation data using either the DNA Center GUI or by running the CLI commands on the appliance. To backup and restore the Assurance data, you can only run the CLI commands on the appliance. Automation data consists of system and network automation configuration data. Assurance data consists of network assurance and analytics data. For a complete backup and restore (both Automation and Assurance data) use one of the following two supported procedure sets: GUI and CLI Supported Procedures 1. Backup the Automation data using the DNA Center GUI. See Back Up Automation Data Using the GUI, on page Backup the Assurance data using the CLI commands. See Back Up Assurance Data Using the CLI, on page Restore the Automation data using the DNA Center GUI. See Restore Automation Data Using the GUI, on page Restore the Assurance data using the CLI commands. See Restore Assurance Data Using the CLI, on page 12. CLI Only Supported Procedures 1. Backup the Automation data using the CLI commands. See Back Up Automation Data Using the CLI, on page Backup the Assurance data using the CLI commands. 3

4 Back Up Automation Data Using the GUI See Back Up Assurance Data Using the CLI, on page Restore the Automation data using the CLI commands. See Restore Automation Data Using the CLI, on page Restore the Assurance data using the CLI commands. See Restore Assurance Data Using the CLI, on page 12. Important When restoring a backup on a completely new cluster, you must first restore the Automation data before restoring the Assurance data. Restoring a backup to the same preexisting cluster does not require that this specific procedural order be followed. Back Up Automation Data Using the GUI You can back up and restore the DNA Center Automation database and files. When you perform a backup, DNA Center copies and exports the database and files to a location on a remote server that you configure. When you restore the backup files, DNA Center removes and replaces the existing database and files with the backup files. For more information, see About, on page 1. Data is backed up using SSH/Rsync. DNA Center does not support using FTP (port 21) when performing a backup. Before you begin Only a user with SUPER-ADMIN-ROLE permissions can perform this procedure. For more information, see About User Roles. Ensure that you have set up your backup server and have met all of the requirements. For information, see Backup Server Requirements, on page 2. Step 1 From the DNA Center home page, click the gear icon ( ) and then choose System Settings > Backup & Restore. The Backup & Restore window appears consisting of three tabs: Backups, Schedule, and Activity. The first time you access this window, the Set up backup server field also appears. Click Configure in this field. The Remote Backup Server side panel appears. Configure the remote backup server for the DNA Center backups. Enter configuration values for the remote backup server. SSH IP Address SSH Port IP address of the remote server that you can SSH into. Port address of the remote server that you can SSH into. 4

5 Back Up Automation Data Using the GUI Server Path Username Password Encryption Passphrase Path to folder on the server where the backup files will be sent to and saved. Username used to protect the encrypted backup. Password used to protect the encrypted backup. This passphrase encrypts the security-sensitive components of the backup. These security-sensitive components include both certificates and credentials. This is a required passphrase that you will be prompted for and that must be entered when restoring the backup files. Without this passphrase, backup files will not be restored. Step 4 Step 5 Step 6 Click Apply to save the Remote Backup Server configuration. Other options are Cancel to cancel this configuration or Remove to remove an earlier remote backup server configuration. Click Create New Backup. To view the backup's progress, click the Activity tab and review the Status column. During the backup process, DNA Center creates the backup database and files. The backup files are saved to the specified location on the remote server. You are not limited to a single set of backup files, but can create multiple backup files that are identified with their unique names. You receive a Backup done! notification when the back up process is finished. If the back up process fails, there is no impact to the appliance or its database. DNA Center displays an error message stating the cause of the backup failure. The most common reason for a failed backup is insufficient disk space. If your backup process fails, make sure that there is sufficient disk space on the remote server and attempt another backup. (Optional) Verify the final backup status in the Backup & Restore window (Backups tab). The following information is displayed: Date Local date and time of the backup or restore. Backup Name Name of the file that was backed up or restored. File Size Size of the file that was backed up or restored. Status Success or failure status of the operation. Place your cursor over the failure status to display additional details about the failure. Operation Type of operation, either backup or restore. Action Possible actions to take with the backup files. For example, restore the DNA Center with the backup files or proceed to delete the backup files. Step 7 (Optional) To download a.csv file of what is displayed in this window for your records, click Export.. 5

6 Restore Automation Data Using the GUI What to do next When necessary and at the appropriate time, you can restore the backup file to DNA Center by clicking the Restore link in the Backups tab for the backup. You can also schedule a future backup using the configuration options displayed in the Schedule tab. For information about this procedure, see Schedule a Backup of Automation Data Using the GUI, on page 7. Restore Automation Data Using the GUI You can restore DNA Center Automation database from the backup files on the remote server that you configured. When you restore from the backup files located on the remote server, DNA Center removes and replaces the existing database and files. For more information, see About, on page 1. Caution The DNA Center restore process only restores the database and files. The restore process does not restore your network state and any changes made since the last back up, including any new network policies that have been created, any new or updated passwords, or any new or updated certificates and trustpool bundles. You cannot do a backup from one version of DNA Center and restore to another version of DNA Center. You can only restore a backup to an appliance that is running the same DNA Center software version, applications, and application versions as the appliance and applications from which the backup was taken. To view the current apps and versions, click, then System Settings, then App Management. Before you begin Only a user with SUPER-ADMIN-ROLE permissions can perform this procedure. For more information, see About User Roles. After you initiate the restore process using the GUI, DNA Center enters into maintenance mode. In maintenance mode, DNA Center will be unavailable until the restore process completes. You should take this into account when scheduling a DNA Center restore. DNA Center goes into maintenance mode when you restore the database, perform a system upgrade (not a package upgrade), and enable a service redistribution to support high availability in System Settings > System 360 > Overview. Step 1 From the DNA Center home page, click the gear icon ( ) and then choose System Settings > Backup & Restore. The Backup & Restore window displays the following three tabs: Backups, Schedule, and Activity. The default tab that displays is Backups. If you have already successfully created a backup on a remote server, then it will display in the Backups tab. In the Backup Name column, locate the backup that you wish to restore. In the Actions column, select Restore. 6

7 Schedule a Backup of Automation Data Using the GUI The DNA Center restore process restores the database and files. The restore process does not restore your network state and any changes made since the last backup, including any new network policies that have been created, any new or updated passwords, or any new or updated certificates and trustpool bundles. During a restore, the backup files remove and replace the current database. During the restore process, DNA Center goes into maintenance mode. Wait until DNA Center exists maintenance mode before proceeding. Step 4 Click the Backups tab to view the results for a successful restore process. Schedule a Backup of Automation Data Using the GUI You can schedule a backup of the DNA Center Automation database and files at a future date and time. You schedule this backup using the DNA Center GUI. Before you begin Only a user with SUPER-ADMIN-ROLE permissions can perform this procedure. For more information, see About User Roles. Step 1 From the DNA Center home page, click the gear icon ( ) and then choose System Settings > Backup & Restore. The Backup & Restore window displays the following three tabs: Backups, Schedule, and Activity. The default tab that displays is Backups. Step 4 Step 5 Step 6 Step 7 Step 8 Step 9 Click the Schedule tab header. The Schedule window appears. Click + Add at the upper right of the Schedule tab. The Create Backup side panel appears. Enter a name for the backup file. Click the Schedule Later option. Enter the date for the scheduled backup or use the month icon to select a date. Enter a time for the scheduled backup including an AM or PM value. Click the Schedule button. Click the close icon at the upper right of the side panel to close the panel. After scheduling a future backup, the following information is displayed: Date Date of scheduled backup Backup Name Name of the backup Status Whether backup is scheduled or not Operation Backup operation 7

8 Back Up Automation Data Using the CLI Scheduled Run Date and time of scheduled backup Action Option to delete scheduled backup With the current release, you can only configure one scheduled backup at a time. Not more than one scheduled backup is permitted. What to do next When necessary and at the appropriate time, you can restore the backup files to DNA Center. Back Up Automation Data Using the CLI You can back up and restore the DNA Center Automation database and files using the CLI. When you perform a backup, DNA Center copies and exports the database and files to a location on a remote server that you configure. When you restore the backup files, DNA Center removes and replaces the existing database and files with the backup files. For more information, see About, on page 1. Data is backed up using SSH/Rsync. DNA Center does not support using FTP (port 21) when performing a backup. Before you begin Ensure that you have set up your backup server and have met all of the requirements. For information, see Backup Server Requirements, on page 2. Step 1 Using a Secure Shell (SSH) client, log into the DNA Center appliance, using the IP address of the OOB management network adapter, on port When prompted, enter your Linux username and password for SSH access. Use the maglev backup remote update command to configure the remote backup server details on your cluster. The command syntax is maglev backup remote update -s IP_of_remote_server -t port_number -d full_path_of_directory_of_remote_repository -u remote_server_username -p remote_server_password -r passphrase_of_backup $ maglev backup remote update -s t 22 -d /home/maglev/test_system/116_bck -u maglev -p Cisco123 -r Maglev123 Step 4 Use the maglev backup remove verify command to verify the remote server settings. $ maglev backup remote verify message: Remote server settings verified successfully. status: ok 8

9 Restore Automation Data Using the CLI For other command options, use the following help command: $ maglev backup remote update --help Step 5 Step 6 Use the maglev backup create command to start the backup. $ maglev backup create For other command options, use the following help command: $ maglev backup --help Use the maglev backup progress command to monitor the progress in creating the backup. $ maglev backup progress For other command options, use the following help command: $ maglev backup --help What to do next When necessary and at the appropriate time, you can restore the backup file to DNA Center using the CLI. Restore Automation Data Using the CLI You can restore DNA Center Automation database from the backup files on the remote server that you configured. When you restore from the backup files located on the remote server, DNA Center removes and replaces the existing database and files. For more information, see About, on page 1. Caution The DNA Center restore process only restores the database and files. The restore process does not restore your network state and any changes made since the last back up, including any new network policies that have been created, any new or updated passwords, or any new or updated certificates and trustpool bundles. You cannot do a backup from one version of DNA Center and restore to another version of DNA Center. You can only restore a backup to an appliance that is running the same DNA Center software version, applications, and application versions as the appliance and applications from which the backup was taken. To view the current apps and versions, click, then System Settings, then App Management. 9

10 Configure an NFS Server Before you begin After you initiate the restore process using the GUI, DNA Center enters into maintenance mode. In maintenance mode, DNA Center will be unavailable until the restore process completes. You should take this into account when scheduling a DNA Center restore. DNA Center goes into maintenance mode when you restore the database, perform a system upgrade (not a package upgrade), and enable a service redistribution to support high availability in System Settings > System 360 > Overview. Step 1 Using a Secure Shell (SSH) client, log into the DNA Center appliance, using the IP address of the OOB management network adapter, on port When prompted, enter your Linux username and password for SSH access. Use the maglev restore apply command to restore the backup. The command syntax is maglev restore apply backup_id. $ maglev restore apply backup For other command options, use the following help command: $ maglev restore --help Configure an NFS Server The remote share for backing up an Assurance database (NDP) must be a NFS share. If you need to configure an NFS server, then use the following procedure (Ubuntu distribution) as an example for configuring NFS. This procedure is not required when backing up an Automation database. Step 1 Run the sudo apt-get update command to access and update the advanced packaging tool (APT) for the NFS server. $ sudo apt-get update Run the sudo apt-get install command to install the advanced packaging tool for NFS. $ sudo apt-get install -y nfs-kernel-server Run the sudo mkdir -p command to create nested directories for the NFS server. $ sudo mkdir -p /var/nfsshare/ 10

11 Back Up Assurance Data Using the CLI Step 4 Run the sudo chown nobody:nogroup command to change the ownership of the group to nobody and nogroup. $ sudo chown nobody:nogroup /var/nfsshare Step 5 Run the sudo vi /etc/exports command to add the following line to the end of /etc/exports: $ sudo vi /etc/exports /var/nfsshare *(rw,all_squash,sync,no_subtree_check) Step 6 Run the following sudo exportfs -a command to export the file systems for the NFS server. $ sudo exportfs -a Step 7 Run the following sudo systemctl start nfs-server command to restart the NFS server. $ sudo systemctl start nfs-server What to do next After you configure an NFS share, then proceed to back up the DNA Center Assurance data. For information about this procedure, see Back Up Assurance Data Using the CLI, on page 11. Back Up Assurance Data Using the CLI You can back up and restore the DNA Center Assurance database and files. When you perform a backup, DNA Center copies and exports the database and files to a location on a remote server that you configure. When you restore the backup files, DNA Center removes and replaces the existing database and files with the backup files. Before you begin You must have a NFS server configured for the backup. For information about this procedure, see Configure an NFS Server, on page 10. Step 1 Using a Secure Shell (SSH) client, log into the DNA Center appliance, using the IP address of the OOB management network adapter, on port When prompted, enter your Linux username and password for SSH access. Run the sudo magctl sts backup mount add ndp command to mount a remote share. The remote share has to be a Network File System (NFS) share. For information about configuring a NFS server, see Configure an NFS Server, on page 10. The command syntax is: sudo magctl sts backup mount add ndp IP_address:file_location. $ sudo magctl sts backup mount add ndp :/var/nfsshare 11

12 Restore Assurance Data Using the CLI After running this command, the remote share is mounted. Step 4 Step 5 Step 6 Step 7 Run the magctl sts backup mount display command to display the remote share settings. $ magctl sts backup mount display After running this command, the remote share settings are displayed. (Optional) If you need to delete the remote share for any reason, run the sudo magctl sts backup mount delete ndp command. The command syntax is: sudo magctl sts backup mount delete ndp appstack. $ sudo magctl sts backup mount delete ndp appstack Run the magctl sts backup create ndp command to create the backup. $ magctl sts backup create ndp Backup request submitted. Backup Name:ndp:elasticsearch-backup :00:59 Run the magctl sts backup progress ndp command to display the progress of the backup. The command syntax is: magctl sts backup progress ndp appstack backup_id. $ magctl sts backup progress ndp ndp:elasticsearch-backup :00:59 What to do next When necessary and at the appropriate time, you can restore the Assurance backup file to DNA Center by running the CLI restore commands. Restore Assurance Data Using the CLI You can restore DNA Center Assurance data from the backup files on the remote server that you configured. You use the CLI commands to perform this task. When you restore from the backup files located on the remote server, DNA Center removes and replaces the existing database and files. In case of restoring the Assurance backup to a new cluster, you must first perform a maglev restore on the appliance to restore the Automation backup first. For information about the Automation restore procedure, see Restore Automation Data Using the CLI, on page 9. 12

13 Restore Assurance Data Using the CLI Before you begin After you initiate the restore process using the GUI, DNA Center enters into maintenance mode. In maintenance mode, DNA Center will be unavailable until the restore process completes. You should take this into account when scheduling a DNA Center restore. DNA Center goes into maintenance mode when you restore the database, perform a system upgrade (not a package upgrade), and enable a service redistribution to support high availability in System Settings > System 360 > Overview. Step 1 Using a Secure Shell (SSH) client, log into the DNA Center appliance, using the IP address of the OOB management network adapter, on port When prompted, enter your Linux username and password for SSH access. Run the magctl sts restore apply ndp command to restore the backup. The command syntax is magctl sts restore apply ndp backup_id. $ magctl sts restore apply ndp ndp:elasticsearch-backup :00:59 Restore request submitted for backup name:ndp:elasticsearch-backup :00:59 Step 4 Run the magctl sts restore progress ndp command to view the progress of the restore. The command syntax is magctl sts restore progress ndp backup_id. $ magctl sts restore progress ndp ndp:elasticsearch-backup :00:59 Status: SUCCESS Stats Total Number of Files 64 Processed Files 64 Total Size (bytes) Processed Size (bytes)

14 Restore Assurance Data Using the CLI 14