Security

 View Only

  • 1.  Need clarity on the configuration backup

    Posted Aug 07, 2025 06:48 AM
    We currently have two separate ClearPass clusters: one running on C3000V and the other on C1000V. I need to replicate the configuration from the C3000V cluster to the C1000V cluster, which will be used as a lab environment.
     
    Before proceeding, I would like to understand the implications of moving the configuration between the two clusters, specifically regarding the following points:
     
    Certificates – Will the certificates get replaces?
     
    Licensing – will license move from configuration backup?
     
    NAD Devices – Will the network access devices (NADs) configured in the C1000V, will remain in the configuration?
     
    IP Addresses – How will IP addresses be handled during the configuration migration? Will they need to be adjusted post-migration?
     
    Guest Configuration - will all the guest related configuration will present in configuration backup ?
     
    Please advise on best practices and any precautions to take before initiating the replication process ?


    -------------------------------------------


  • 2.  RE: Need clarity on the configuration backup

    Posted Aug 07, 2025 07:20 AM

    Hi

    When you perform a backup and restore operation all configuration visible under the Configuration section in Policy Manager is moved, this includes all Services, authentication methods and sources enforcement objects etc etc. Also including Endpoints and NAD Devices. Profiling information for Endpoints is not included.

    All configuration under Cluster Wide Parameters are included in the backup and restored, as well as all Guest and Onboard information.

    Do not try to restore large Session Log data or Insight data, as this may fill the disk on the C1000 server and cause the server to crash.

    Certificates, licenses IP addresses and any server specific configuration under the server object is not restored on the target server.



    ------------------------------
    Best Regards
    Jonas Hammarbäck
    MVP Guru, ACEX, ACDX #1600, ACCX #1335, ACX-Network Security
    Aranya AB
    If you find my answer useful, consider giving kudos and/or mark as solution
    ------------------------------



  • 3.  RE: Need clarity on the configuration backup

    Posted Aug 07, 2025 09:22 AM

    Certificates and server level configs are restored when the target server IP is the same as the IP of the CPPM node in the config back.



    ------------------------------
    Willem Bargeman
    Systems Engineer Aruba
    ACEX #125
    ------------------------------

    Original Message


  • 4.  RE: Need clarity on the configuration backup

    Posted Aug 08, 2025 07:40 AM

    Will the Single Sign-On (SSO) configuration be restored from the configuration file?

    -------------------------------------------

    Original Message


  • 5.  RE: Need clarity on the configuration backup
    Best Answer

    Posted Aug 11, 2025 08:52 AM

    Yes, SSO configuration is restored with the backup



    ------------------------------
    Best Regards
    Jonas Hammarbäck
    MVP Guru, ACEX, ACDX #1600, ACCX #1335, ACX-Network Security
    Aranya AB
    If you find my answer useful, consider giving kudos and/or mark as solution
    ------------------------------

    Original Message


Related Content