AAA/Identity/Nac :: ACS 4.2 Backup Through Console / CLI
Jun 6, 2012
Due to some wrong access policy applied in the administration control settings. GUI access is not functioning. So we need to take a backup thru CLI mode using FTP server. I have tried using the backup command in the console & taken the backup using the following steps. But the backup file is less than 1kb. I need the exact Db backup to be taken.
Step 1 Log in to the ACS SE. For more information, see Logging In to the Solution Engine from a Serial Console.Step 2 At the system prompt, enter backup and press Enter.Tip You can enter the following parameters after the command or in response to subsequent prompts: [server] [username] [filepath]Step 3 At the Enter FTP Server Hostname or IP Address: prompt, enter the FTP server IP address or hostname, and press Enter.Step 4 At the Enter FTP Server Directory: prompt, enter the FTP server directory pathname, and press Enter.Step 5 At the Enter FTP Server Username: prompt, enter the FTP server username and. press Enter.Step 6 At the Enter FTP Server Password: prompt, enter the FTP server password and, press Enter.Step 7 At the File: prompt, enter the name that you want to give the backup file, and press Enter.Step 8 At the Encrypt Backup file? <Y or N>: prompt, enter Y to encrypt the backup file or N not to encrypt it, and press Enter.Caution This procedure interrupts the use of the ACS SE for AAA services.Step 9 If you entered Y to encrypt the backup file, at the Encryption Password: prompt, enter a password and then press Enter.Result: The console displays:Backing up now . . .
All running services will be stopped and restarted automatically.Are you sure you want to proceed? <Y or N>Step 10 To proceed, enter Y and press Enter.
View 5 Replies
ADVERTISEMENT
Apr 3, 2012
I've been trying to find the right information on Cisco's site, and I'm not having success.
We have a 3900 router that we would like to do authentication via a local userdatabase. We want ssh access and console access using a local user on the router. I've been working on the console piece and everytime I try it, I get prompted for a username, but it is not accepted.
View 2 Replies
View Related
Nov 27, 2012
I configure my Cisco ACS5.2 using Command set policy and providing Shell access 15.I allow user only “show * ” command.It works fine with Telnet. User Group cannot execute any command apart from “Show * ”But when I connect the device using Console user group has full permission on the devices.I believe Command set policy is not working on Console. Is it normal behavior or do I need to update some changes in ACS or Network devices ?
My network device configuration is as below :
tacacs-server host 10.x.x.x key test123
tacacs-server host 10.y.y.y key test123
tacacs-server timeout 1
aaa authentication login default group tacacs+ local
aaa authentication enable default group tacacs+ enable
aaa accounting exec default start-stop group tacacs+
aaa accounting commands 1 default start-stop group tacacs+
[code].....
View 1 Replies
View Related
Nov 27, 2011
I tried to backup ACS 5.1 but i found error messages as below
acs backup25Nov11 repository 25Nov11Repository
% Repository not found
% Error: Invalid repository name 25Nov11Respository
Please use a configured repository.
View 2 Replies
View Related
Jun 8, 2012
How to backup the configuration on cisco acs 5.2 and how to restore it , if some thing wrong happened
View 7 Replies
View Related
Mar 10, 2013
Cisco ACS 5.x appliance?How to back up Config?What is best way, via TFTP? COPY Startup-config tftp:?COPY Running-config tftp:?I currently use Solarwinds CatTolls to back my Cisco Switches, can I use this for Cisco ACS also?
View 3 Replies
View Related
May 19, 2013
we have ACS 4.1 appliance and will do upgrade to 4.2. We need backup user database and system settings.via Gui I am not sure what all we backed up - dmp file seems to be only encrypted user databse but it can be crypted back up file.
How is possible do complete backup of current machine (user database and system config)? Is it possible via Gui or has to be done CLI access?After upgrade will be on machine previous config and database or or will be appliance completelly re-imaged?
View 1 Replies
View Related
Oct 20, 2011
I've been setting up building and testing our new ACS 5.x boxes and I've been running into a spot of bother with the backup restore feature. This most likely due to my unfamiliarity with the tool.
As part of my testing for Backup/Restore, I first backup the data using the Removal and backup tool in Secure ACS View (found under data management. I then confirm that the new FULL backup has been populated my test repository and is available in the restore feature. (also under Data Management) My next step is to create a few test Network Device Groups, Identity groups, and users Then I go back to the restore feature select the Back up file I just created, I also check the box Skip View Database backup before Restore and hit the restore button.
The box goes through the expected steps including a reload. When it comes back up I would expect the test users, groups etc I created after the last backup to be gone as they did not exist at that time. Although I find the opposite is true. Any settings I made after the last backup are still present. I do not have incremental backups enabled.
I essentially want to test a backup of the database of users and groups/rules etc make changes and then restore that database to the previous backed up configuration.
View 2 Replies
View Related
Sep 4, 2011
I have ACS 5.2 in standalone mode in operation and need not incorporating a second server for high availability ACS, the new ACS is a version 5.1
What should I do first, upgrade the ACS version 5.2 and created the high availability or high availability and get up after the upgrade?
View 2 Replies
View Related
Jan 28, 2012
When I'm trying to make backup in ACS5.1(in log collector node) it gives me the following error:
FullBackupOnDemand-Job Incremental Backup Utility System Wed Jul 13 16:50:23 EEST 2011 Incremental Backup Failed: CARS_APP_BACKUP_FAILED : -404 : Application backup error Failed,I did it via Monitoring Configuration -> System Operation -> Removal and Backup and then "Backup now" bottom.
I tried to restart ACS services through cli (application stop/start) and different repositories (ftp, tftp) but without success.
View 2 Replies
View Related
Feb 8, 2012
I have ACS 4.2 on vmware machine, everything is working fine. Automatically backup is already set on local machine, but the thing is, i want to configure automatically backup on my file server (ex. \1.1.1.1acsbackup). Even though i have defined the acsbackup folder through map drive but no success. when i define the above string in the backup location directory, it shows an error (no directory exists). How do i configure file server or map drives on acs & save daily backup on fileserver
View 1 Replies
View Related
Aug 15, 2012
When doing a backup on any of the ACS 5.x appliances by default the backup is encrypted with PGP. What password is used for that? Is it configurable?
View 3 Replies
View Related
Feb 21, 2012
We have ACS 5.3, and trying to set up sftp backup on freesshd server. SSH connection works, but ACS cannot copy backup file to sftp server, we get following errors:
Acs.MGMT.ACSVIEW Backup failed: CARS_XM_SSH_CONNECT : -306 : SSH connect error
FTP backup works fine.
View 1 Replies
View Related
Apr 5, 2011
I am not able to backup ACS 5.x server by means of SFTP protocol. We use ACS 5-2-0-26-2. My configuration of repository is:
repository SFTP
url sftp://x.x.x.x/home/user
user user password hash 455ad
command 'backup acs01 repository SFTP' does not work and I receive the following error message on ACS server:
%SSH connect error
On my sftp server I can find the following error messages:
Apr 6 06:57:46 CR01 sshd[8561]: Accepted password for user from 10.20.86.72 port 47924 ssh2Apr 6 06:57:46 CR01 sshd[8563]: Received disconnect from 10.20.86.72: 11: disconnected by user
How to successfully performed backup by means of SFTP protocol? Do I need any other configuration settings except repository? Do I need to store my SSHD RSA key to ACS? I am able to copy files using SFTP from other computers, so it seems that SFTP server is set correctly.
View 2 Replies
View Related
Jul 12, 2011
When I'm trying to make backup in ACS5.1(in log collector node) it gives me the following error:
FullBackupOnDemand-Job Incremental Backup Utility System Wed Jul 13 16:50:23 EEST 2011 Incremental Backup Failed: CARS_APP_BACKUP_FAILED : -404 : Application backup error Failed
I did it via Monitoring Configuration -> System Operation -> Removal and Backup and then "Backup now" bottom.
I tried to restart ACS services through cli (application stop/start) and different repositories (ftp, tftp) but without succes.
View 8 Replies
View Related
Jan 20, 2013
I had ACS 5.2 ( Evalution License ) setup installed on VMware with patch 11 when I try to restore earlier backup of ACS gives me error "Cannot find acsbackup_instance.log in the backup file"
I am using Filezilla FTP sever for backup transfer.
View 5 Replies
View Related
Dec 27, 2012
I have ACS 5.3.0.40 Primary Secondary Authenticators , of which the Scheduled backup has stopped.When checked the : Monitoring Configuration > System Operations > Data Management > Removal and Backup > Incremental Backup , it had changed to OFF mode. without any reason.Later i did the acs stop/start "view-jobmanager" and initiated the On-demand Full Backup , but no luck, same error reported this time too.
View 2 Replies
View Related
Apr 10, 2013
I'm doing a basic setup of ACS 5.3. For now, I'm configuring backup to a local repository
!
repository Backup
url disk:/Backup
!
How can I automatically delete old files? I need to keep only the last seven files.
View 2 Replies
View Related
Apr 26, 2011
I am running windows based acs 3.3 in my lan environment going to be replaced with acs 1120 appliance running acs 4.2.1.15 , ACS 3.3 database has been built upto 4.2.0.124 ,step by step by upgrade process
1) acs 3.3.3.14---> 4.1.1.24
2) acs 4.1.1.24 ----> 4.2.0.124 .
now my database is with 4.2.0.124 dmp file , I cannot upgrade my database to 4.2.1.15 because 4.2.1.15 patch is not applicable & executable on 90 days evalution package of 4.2.0.124 of windows platform .
can i import my windows based 4.2.0.124 datbase directly to my acs appliance running 4.2.1.15.3 ??? , else its requires any step to be done to modify the windows based databse matching to appliance windows verison once .
I could see on appliance under restore settings the following options (restore from 4.2.0 backup file to acs 4.2.1)
View 8 Replies
View Related
Feb 26, 2013
So I've decided to utilize 802.1x on a switch module on a 2901, reasons being for mobility for a laptop and network security.
However, the 802.1x authentication occurs over the VPN Tunnel (over the Internet). What our concern is, what happens if the Internet or Tunnel goes down? I know that 802.1x does not authenticate against the IOS local DB, so what would be another option in case this scenario happened?
There will only be one device authenticating (maybe 2) and they are 2 HP Windows 7 laptops.
View 4 Replies
View Related
Oct 3, 2011
We are trying to make a restore from the backup done on ACS version 5.1 to a new appliance running ACS5.2 Before doing it I found this note in Cisco ACS user guide:
Note: You cannot back up data from an earlier version of ACS and restore it to a later version. Backup and restore must be performed on the same version of ACS. If you need the data on a different version of the ACS, you can perform an upgrade after you restore the data. Refer to the Installation and Setup Guide for Cisco Secure Access Control System 5.1 for more information on upgrading ACS to later versions.
How should I understand it? This note has conflicting statements. We can't restore to a later version but if you need data on a different version of ACS you can perform an upgrade AFTER YOU RESTORE the data. Doesn't it mean that the restore will still work? How would I do the upgrade to version 5.2 or even version 5.3 that was announced to be released very soon? I didn't find anything on the software upgrade in ACS5.1 guide.
View 4 Replies
View Related
Jul 27, 2011
We have an issue with View db (Monitoring & Reports) backup on ACS, version 5.2.0.26. We have scheduled incremental backup daily and full backup monthly. Everything has been working well, but since yesterday following errors have appeared, and full and incremental backup stopped working:
Alarm Name
System Alarm [Incremental Backup]
Cause/Trigger
On-demand Full Backup failed
Alarm Details
CARS_BR_BACKUP_CREATE : -405 : Internal error: couldn't create backup file
Alarm Name
[code]....
We use same repository as always. Backup to the same repository works from CLI.
View 2 Replies
View Related
Oct 30, 2011
After ACS upgrade from 5.2 to 5.3 we have noticed that backup files are significantly smaller in size. For example before the upgrade they were:
285633099 2011-10-23 22:01 Meduza-ACS-111023-2200.tar.gpg
285809254 2011-10-24 22:01 Meduza-ACS-111024-2200.tar.gpg
And after upgrade:
124234429 2011-10-25 22:00 Meduza-ACS-111025-2200.tar.gpg
124234425 2011-10-26 22:00 Meduza-ACS-111026-2200.tar.gpg
What could cause this behavior? How we can be sure if backup files have been regular after the upgrade?
View 5 Replies
View Related
Nov 11, 2012
to backup an ACS 5.3 vm running on ESXi 5.0 our backup admin requested to install vmware tools on the acs server.
View 2 Replies
View Related
Sep 7, 2012
Almost new switch giving error: %%Low on memory Try again later.This is a 2960 48pt lanbase image.I can't get a console prompt, telnet in or anything, it is however switching packets OK. [code]
View 1 Replies
View Related
Nov 17, 2012
I have a 1841 router and I can ping the f/0 port from my pc. However when i try to console to it, it is not showing up anything but a blinking cursor. I tried all different baud rates on my teraterm but still not luck. I picked the baud rate disconnected and reconnected everytime and still nothing. Then I tried to telnet to it using teraterm but it would just open a console window and then close.
View 10 Replies
View Related
Apr 3, 2011
My Wifi internet was working fine 12 hrs ago; now I can only use it with wire.I uninstall 2.0 and install Asus wireless console 3.0 but still not working, Fn+F2 not working either.
[code]...
View 2 Replies
View Related
Feb 19, 2013
I have a issue where after configuring aaa and rebooting, logging into the console port seems to be auto trying something before it finally times out and let's the user try. I getting the following sequence: [code] I need aaa to work via vty, however I need the device to boot directly to the Username: prompt so I can continue to use my VB script to clear the config when the devices are return from the field.
View 4 Replies
View Related
Apr 22, 2011
Since I am a collector of all things Cisco, I picked up a Catalyst 5505 switch today. It has two supervisor engines in it, a card with 12 fiber ports in it, and two 24 port cards in it. I am trying to console into this thing, but I am not having any luck. I have Googled it and some threads say it uses a normal straight through cable and other threads say it uses the normal Cisco rollover cable. I tried going both routes but no luck?
View 6 Replies
View Related
Oct 17, 2012
want to ask something about configuration ruter 2800I already have a usb to DB9 | DB9 to RJ45but i have a problem like the image below
View 19 Replies
View Related
Feb 11, 2013
i have been facing this problem as i cannot see any log messages via my console port,except by looking at logs manually by "show log" command,
View 3 Replies
View Related
May 30, 2012
I was trying to get into my router to give it a reboot yesterday, but was unable to get into the console. I used the username/password I've used for over a year (it was also auto saved) but it would not let me in. I went through all the steps to do a hard reset/restore default settings and it wouldn't let me. I had to access the boot loader to reload firmware, and that worked out just fine.
Now, I still cannot get access to the administration console with the default username (blank) and password (admin). I've tried moving my PC to ports 1-4 and none work.
I was about to give up on the router but I tried connecting from my iPhone and everything works just fine. I was even able to change my SSID and WPA key again.
Would this be a hardware issue, or could there be something in Windows 7 that's affecting it? I have disabled the windows firewall and AVG and still can't get any access from either Firefox or IE.
A couple of times I was able to get onto the first page of the console through IE, but if i tried clicking anything else it would ask for the username/password again and not connect. Now it won't even let me in once.
View 6 Replies
View Related
May 2, 2012
I have linksys ADSL Router which is having one line port for Phone Line and 4 Ethernet Ports.The Router IP is 192.168.1.1. When i connect this Router through one of its Ethernet Port to one of the Network Point(which is DHCP enabled)is working fine. I get the IP 192.168.3.x from my existing DHCP not from the ADSL Router which is enabled.Secondly, Although i can Ping the Router IP 192.168.1.1 from Wifi client 192.168.3.X, But when i try to open the Router Console a Login window open and is says " your are trying to access the Router in an insecure ways and it doesnt not authenticate ID and PWD.When i directly connect Router to my Laptop then am able to do so.
View 1 Replies
View Related