Restoring Archived Data After Re-Imaging A Mars Appliance; Re-Imaging A Local Controller, Page; Re-Imaging A Global Controller, Page; If You Have - Cisco MARS Install And Setup Manual

Recovery Management
Result: The MARS Appliance reboots, performs some configurations, including building the Oracle
database. The configurations that occur after the first reboot take a significant amount of time, during
which there is no feedback; this is normal system behavior.
Reconnect any network cables to the eth0 and eth1 ports.
Step 8
Note After re-imaging the appliance, you must once again perform initial configuration of the MARS
Appliance. For detailed instructions, see
After the initial configuration is complete, do one of the following:
Step 9
Note You cannot add or monitor a Local Controller using the Global Controller until the Global Controller is
running the same MARS software version as the Local Controllers it will be used to monitor.
•
•

Restoring Archived Data after Re-Imaging a MARS Appliance

When you restore a MARS Appliance using archived data, you are restoring the system to match the data
and configuration settings found in the archive. The configuration data includes the operating system,
MARS software, license key, user accounts, passwords, and device list in effect at the time the archive
was performed.
The version of MARS software running on the appliance to be restored must match the version recorded
Caution
in the archive. For example, if the data archive is for version 4.1.4, you must reimage the MARS
Appliance to version 4.1.4, not older or newer, before using the pnrestore command to recover the
system configuration and events.
For additional information on how the archives are restored, see
If you choose to restore from your archived data, you must re-enter all devices on the Local Controller
Note
that are missing from the archive file. To restore existing cases, you must restore incident and session
data. See
If you have archived your data and you have recovered your MARS Appliance as described in either

Re-Imaging a Local Controller, page

following steps:
Step 1 When the recovery process is complete, restore the MARS Appliance from the last archived data by
executing the following command:
pnrestore -p <NFSServerIP>:/<archive_path>
Install and Setup Guide for Cisco Security MARS
6-38
Add all Local Controllers back into the Global Controller. All devices and topology information are
pulled up from each Local Controller into the Global Controller. For more information, see User
Guide for Cisco Security MARS Global Controller.
(Recommended) Recover the previously archived data using the procedure described in
Archived Data after Re-Imaging a MARS Appliance, page
pnrestore, page A-43, for more information on types of data and restore modes.
Chapter 5, "Initial MARS Appliance Configuration."
6-35, or

Re-Imaging a Global Controller, page

Chapter 6 Administering the MARS Appliance
6-38.
Guidelines for Restoring, page
6-36, perform the
Restoring
6-40.
OL-14672-01