Hi All
sorry im newbie in SSL VPN, could anybody advice what is the correct procedure to backup and restore the config in active/active cluster
thanks in advance
Ucup
Hi Ucup,
I understand that you are looking for Backup and restore procedure for Active/Active Cluster
Clustering backup and restore procedure is explained in detail under Chapter 30: System Archiving section of SA admin guide: Refer page#765:
you can also look for:
¥ Creating Local Backups of SA Series Appliance Configuration Files on page 768
¥ Importing and Exporting SA Series Appliance Configuration Files on page 770
Admin guide access url:
http://www.juniper.net/techpubs/software/ive/admin/j-sa-sslvpn-7.1-adminguide.pdf
You may use system and user backups to update a single SA Series Appliance or a cluster.If you choose to restore an SA Series Appliance that is enabled as part of a cluster, that
SA Series Appliance automatically pushes the configuration to all other cluster members.The cluster is disabled until all cluster members have updated their settings using the
backup configuration. Then, they restart and re-enable the cluster.
You can save a backup of your current configuration or to restore your system or user account state from a backup.
Hope the above explanation clarifies your query.
NOTE:
Please mark this post as 'accepted solution' if this answers your question that way it might help others as well, a kudo would be a bonus thanks!!
hi Kalagesan
actually i have read the admin guide but i have difficulty to understand because the guide dont mention the step in detai
could you give me the step in detail? let say we have 2 boxes. so first what i need to do ? then should i disable the node etc. could you provide me the steps?
thanks
ucup
Hi,
If you have 2 boxes in cluster, you can backup and restored the configutaion from one node itself since cluster configurations are synched.
First you can backup the configuration from one node of the cluster, The cluster is disabled until all cluster members have updated their settings using the backup configuration. Then, they restart and re-enable the cluster.
Please find the steps and explanation :
The SA Series Appliance provides different ways to backup and restore configuration files containing user and system data. The SA Series Appliance utilities you can use to backup and restore data preserve the configuration data in two different formats: binary
and XML. The method you choose to use depends on your requirements.
SA Series Appliances enable you to save backups of your current system configuration and user accounts directly to the SA Series Appliance in binary format. You may then use these configurations to restore the SA Series Appliance or a cluster of SA Series
Appliances to the state contained in the encrypted file. Note that these files only contain configuration informationÑthey do not include logs.
You may save up to 5 system configuration backups and 5 user account backups on the SA Series Appliance. If you try to exceed this limit, the SA Series Appliance overwrites the oldest backup with the new backup. If you do not want to overwrite the oldest backup,
choose another backup to delete instead, before saving the most current one.
Steps tyo save system configuration:
To save your current system configuration:
1. In the admin console, choose Maintenance > Archiving > Local Backups.
2. Click Save Configuration or Save User Accounts. The SA Series Appliance adds a
new backup to the list, naming it with the current date and time.
You may use system and user backups to update a single SA Series Appliance or a cluster.
If you choose to restore an SA Series Appliance that is enabled as part of a cluster, that
SA Series Appliance automatically pushes the configuration to all other cluster members.
The cluster is disabled until all cluster members have updated their settings using the
backup configuration. Then, they restart and re-enable the cluster.
To override your configuration with settings from a backup file:
1. In the admin console, choose Maintenance > Archiving > Local Backups.
2. Select the checkbox next to the system configuration or user account backup file that
you want to use to restore your system.
3. If you are restoring from a system configuration, indicate whether or not you want to
use the certificate, IP address, and network settings contained in the configuration
file.
NOTE: If you are upgrading an entire cluster, you should use caution when including network settings. Since IP addresses and other settings may not apply to all members of the cluster, cluster members may not be able to communicate with one another if the settings are pushed out to all members.
4. Click Restore. The SA Series Appliance must restart before changes can take effect.
After the SA Series Appliance restarts, you must sign back in to the SA Series Appliance
in order to access the admin console.
You can use Importing and Exporting options availble in SA Series Appliance to save and restore the Configuration Files:
The SA Series Appliance enables you to import and export SA Series system and network settings using binary SA Series configuration files.
To import a configuration file:
1. Select Maintenance > Import/Export > Import/Export > Configuration in the admin
console.
2. Specify whether you want to import the SA Series Appliance certificate. The certificate
is not imported unless you check the Import Device Certificate(s)? checkbox.
3. Choose one of the following import options.
Import everything but the IP addressÑÑThis option excludes only the IP address from the imported configuration file. If you exclude the IP address, the serverÕs IP address does not change when you import the file. When you select this option, the SA Series Appliance also imports any SNMP settings that you have defined. In other words, choosing this option preserves the IP address, netmask, default gateway, VIPs, ARPs, and routes of the network interfaces on the target device.
Import everything except network settings and licensesÑ
4. Browse to the configuration file, which is named system.cfg by default.
5. Enter the password you specified for the file. If you did not specify a password before exporting the file, then leave this field blank.
6. Click Import Config.
You can also use Importing and Exporting XML Configuration Files options for backup and restore :
The XML Import/Export feature enables you to make significant changes to your system configuration and provides a number of benefits, particularly when it comes to making a large number of repetitive changes, or when you want to add, update, and delete
configuration data all at once.
Hope the explanation steps clarifies your requirement on step by step backup and restore procedure for cluster. If you still need
more information kindly open a technical case with JTAC support for more information and assistance.
NOTE:
Please mark this post as 'accepted solution' if this answers your question that way it might help others as well, a kudo would be a bonus thanks!!
Regards,
Kannan