Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

Re: Restore cluster configuration

Hi,

I finally solve my step #4 problem !

Here is the way :

- On a member of the cluster, do logconfig > hostkeyconfig > host, and copy the ssh-dss key of all the machine in the cluster.

- Add these keys in logconfig > hostkeyconfig > new, with their associated IP/hostname (one key at the time).

With this configuration, every machine can leave and join the cluster without human action following my previsous script.

#1) Remove ESA1 from the cluster

ssh backup@<IP_ESA1> "clustermode cluster; clusterconfig removemachine <hostname_ESA1>"

#2) Download standalone configuration file

filename=`ssh  backup@<IP_ESA1> "saveconfig no" | grep xml | sed "s/\"//g" | sed "s/\.$//"`

  scp backup@<IP_ESA1>:$filename

#3) Add ESA1 as a future CCS cluster user on ESA2

ssh backup@<IP_ESA2> "clustermode cluster;clusterconfig prepjoin  new <serial_ESA1> <hostname_ESA1>  \"<fingerprint_ESA1>\";commit CCS"

#4) Put ESA1 back into the cluster

ssh backup@<IP_ESA1> "clusterconfig join --port=2222 <IP_ESA2> Main_Group"

Thank you for all your answers

Best Regards

Quentin      

Everyone's tags (2)
1 REPLY
Cisco Employee

Thanks for sharing your

Thanks for sharing your experience with the community!  I wanted to let you know that Cisco is working to provide an even better solution for loading configurations for Clsutered ESAs.

 

In the upcoming release of AsyncOS 8.5.0, there is a new feature that allows loading configuration files saved from a Cluster to a machine that is currently part of a Cluster.  I'd encourage interested parties to review the Release Notes, available here:

 

http://www.cisco.com/c/en/us/support/security/email-security-appliance/products-release-notes-list.html

 

- Jackie

110
Views
0
Helpful
1
Replies
CreatePlease to create content