Security

Does anyone know of a way to backup Clearpass Policy Manager without going into the GUI? I've tried from the CLI but the backup command does not give an option for backup to say a TFTP. I also cannot connect with WinSCP to establish an SSH connection. Any help would be appreciated.

Sorry to revive this thread but does anybody have a proper way to automate backups?

This realy should be scriptable and the CLI backup command doesn't seem to leave place for indeed ftp or any other server option tpo transfer your backups to.

Can backup's be done durring normal working hours? It doesn't stop services does it?

This would depend on what you are backing up. If you want to do a full back up its not recommended. CPPM will do an automatic backup every night. You can configure if you want just config or config/sessions

The backup runs around 1 am every night. Currently the time is a locked in value.

Is there a way to offload the backup to a samba or nfs share? I can run a script on a linux machine to do the file copy however, there do not appear to be any options to do this under the appadmin login through ssh.The automated backup feature is great until the harddrive on the clear pass server dies.

---

@keithcr wrote:

Is there a way to offload the backup to a samba or nfs share? I can run a script on a linux machine to do the file copy however, there do not appear to be any options to do this under the appadmin login through ssh.The automated backup feature is great until the harddrive on the clear pass server dies.

---

Keithcr,

Please take a look at the knowledgebase article here:  https://arubanetworkskb.secure.force.com/pkb/articles/FAQ/CPPM-External-Data-Puller-Tool-to-automatically-pull-CPPM-backups and see if that meets you rneeds...

That works perfectly! Thanks!

Is this tool only available to customers who have purchased directly from Aruba?

Hello,

Could I please grab a copy of the clearpass backup tool?

Thank You!

Hi

The datapuller tool can be downloaded from the support site.

https://support.arubanetworks.com/DownloadSoftware/tabid/75/DMXModule/510/Default.aspx?EntryId=11857

Regards

Jonas Hammarbäck

Hi

I have implemented the External Data Puller service and also found a minor issue in the software.

If you have NAT between the machine running the data puller service and your ClearPass host the back up will not work.

From the log file I see that the service is redirected to the actual IP of the ClearPass host when it try to fetch the back up files and thus it can't downlod the file.

But if you don't have NAT the service works fine. 

Regards

Jonas

Hey,

Today I got a chance to actually do a full restore from the auto backups that are generated from the ClearPass and all I have to say is that they are awesome!

We had an issue with our CPPM that eventually led to us having to redo our server.

We put together a new server, gave it a set of IP's, loaded up our backup and were back online in about 15 minutes.

We were even able to reuse the IP's from the old server by simple shutting down the old and changing the IP's on the new server. No need to make changes to the controller or to DNS.

The backup restored EVERYTHING! All of our certs from Onboarded devices, all of the modifications we had made to our Self-registration pages... Everything!

I was super impressed. Aruba did a really nice job!

Thanks to the techs that helped us out!

Cheers

Is there really no way to have your backups sent to a NAS or file share but only to have it be pulled from a Linux box that runs this file puller. To me this seems archaic. There has to be another way.

Hello, could someone tell me how to deal with two pairs of cluster CPPM. I test on the first cluster that is ok, I try to change the config file-info to put a second cluster but it does not work, only the first is ok. I'm version 6.1
Thank you for your help

Hi,

Just out curiousity, is it worth it to backup the session data?

If we do not back it up what exactly as we missing out on?

Sorry one more question. Is the information from the ClearPass Guest and ClearPass Onboard also included in this backup? 

Thank you,

Cheers

---

@bourne wrote:

Hi,

 

Just out curiousity, is it worth it to backup the session data?

If we do not back it up what exactly as we missing out on?

 

Sorry one more question. Is the information from the ClearPass Guest and ClearPass Onboard also included in this backup? 

 

Thank you,

 

Cheers

---

Config= Server settings, Certs, endpoints, guest users

Session= anything you would get in access tracker (user history)

Thank you @tarnold!