AAA/Identity/Nac :: ACS 4.2 Backup Through Console / CLI

Jun 6, 2012

Due to some wrong access policy applied in the administration control settings. GUI access is not functioning. So we need to take a backup thru CLI mode using FTP server. I have tried using the backup command in the console & taken the backup using the following steps. But the backup file is less than 1kb. I need the exact Db backup to be taken.
 
Step 1 Log in to the ACS SE. For more information, see Logging In to the Solution Engine from a Serial Console.Step 2 At the system prompt, enter backup and press Enter.Tip You can enter the following parameters after the command or in response to subsequent prompts: [server] [username] [filepath]Step 3 At the Enter FTP Server Hostname or IP Address: prompt, enter the FTP server IP address or hostname, and press Enter.Step 4 At the Enter FTP Server Directory: prompt, enter the FTP server directory pathname, and press Enter.Step 5 At the Enter FTP Server Username: prompt, enter the FTP server username and. press Enter.Step 6 At the Enter FTP Server Password: prompt, enter the FTP server password and, press Enter.Step 7 At the File: prompt, enter the name that you want to give the backup file, and press Enter.Step 8 At the Encrypt Backup file? <Y or N>: prompt, enter Y to encrypt the backup file or N not to encrypt it, and press Enter.Caution This procedure interrupts the use of the ACS SE for AAA services.Step 9 If you entered Y to encrypt the backup file, at the Encryption Password: prompt, enter a password and then press Enter.Result: The console displays:Backing up now . . .

All running services will be stopped and restarted automatically.Are you sure you want to proceed? <Y or N>Step 10 To proceed, enter Y and press Enter.

View 5 Replies


ADVERTISEMENT

Cisco AAA/Identity/Nac :: AAA Authentication Via Console And SSH 3900

Apr 3, 2012

I've been trying to find the right information on Cisco's site, and I'm not having success.
 
We have a 3900 router that we would like to do authentication via a local userdatabase. We want ssh access and console access using a local user on the router. I've been working on the console piece and everytime I try it, I get prompted for a username, but it is not accepted.

View 2 Replies View Related

Cisco AAA/Identity/Nac :: ACS 5.2 Command Set Policy Not Working On Console?

Nov 27, 2012

I configure my Cisco ACS5.2 using Command set policy and providing Shell access 15.I allow user only “show * ” command.It works fine with Telnet. User Group cannot execute any command apart from “Show * ”But when I connect the device using Console user group has full permission on the devices.I believe Command set policy is not working on Console. Is it normal behavior or do I need to update some changes in ACS or Network devices ?
 
My network device configuration is as below :
 
tacacs-server host 10.x.x.x key test123
tacacs-server host 10.y.y.y key test123
tacacs-server timeout 1
aaa authentication login default group tacacs+ local
aaa authentication enable default group tacacs+ enable
aaa accounting exec default start-stop group tacacs+
aaa accounting commands 1 default start-stop group tacacs+

[code].....

View 1 Replies View Related

Cisco AAA/Identity/Nac :: Fail To Backup ACS 5.1?

Nov 27, 2011

I tried to backup ACS 5.1 but i found error messages as below
 
acs backup25Nov11 repository 25Nov11Repository
% Repository not found
% Error: Invalid repository name 25Nov11Respository

Please use a configured repository.

View 2 Replies View Related

Cisco AAA/Identity/Nac :: Backup Configuration On ACS 5.2?

Jun 8, 2012

How to backup the configuration on cisco acs 5.2 and how to restore it , if some thing wrong happened

View 7 Replies View Related

Cisco AAA/Identity/Nac :: ACS 5.x / How To Backup Configuration

Mar 10, 2013

Cisco ACS 5.x appliance?How to back up Config?What is best way, via TFTP? COPY Startup-config tftp:?COPY Running-config tftp:?I currently use Solarwinds CatTolls to back my Cisco Switches, can I use this for Cisco ACS also?

View 3 Replies View Related

Cisco AAA/Identity/Nac :: ACS 4.1 Possible To Do Backup Via GUI Or Done By CLI Access

May 19, 2013

we have ACS 4.1 appliance and will do upgrade to 4.2. We need backup user database and system settings.via Gui I am not sure what all we backed up - dmp file seems to be only encrypted user databse but it can be crypted back up file.
 
How is possible do complete backup of current machine (user database and system config)? Is it possible via Gui or has to be done CLI access?After upgrade will be on machine previous config and database or or will be appliance completelly re-imaged?

View 1 Replies View Related

Cisco AAA/Identity/Nac :: ACS 5.1 Backup Restore?

Oct 20, 2011

I've been setting up building and testing our new ACS 5.x boxes and I've been running into a spot of bother with the backup restore feature. This most likely due to my unfamiliarity with the tool.

As part of my testing for Backup/Restore, I first backup the data using the Removal and backup  tool in Secure ACS View (found under data management. I then confirm that the new FULL backup has been populated my test repository and is available in the restore feature. (also under Data Management) My next step is to create a few test Network Device Groups, Identity groups, and users  Then I go back to the restore feature select the Back up file I just created, I also check the box Skip View Database backup before Restore and hit the restore button.
 
The box goes through the expected steps including a reload. When it comes back up I would expect the test users, groups etc I created after the last backup to be gone as they did not exist at that time. Although I find the opposite is true. Any settings I made after the last backup are still present. I do not have incremental backups enabled.
  
I essentially want to test a backup of the database of users and groups/rules etc make changes and then restore that database to the previous backed up configuration.

View 2 Replies View Related

Cisco AAA/Identity/Nac :: How To Install ACS 5.X Backup

Sep 4, 2011

I have ACS 5.2 in standalone mode in operation and need not incorporating a second server for high availability ACS, the new ACS is a version 5.1
 
What should I do first, upgrade the ACS version 5.2 and created the high availability or high availability and get up after the upgrade?

View 2 Replies View Related

Cisco AAA/Identity/Nac :: Unable To Make Backup In ACS 5.1

Jan 28, 2012

When I'm trying to make backup in ACS5.1(in log collector node) it gives me the following error:

FullBackupOnDemand-Job     Incremental Backup Utility     System     Wed Jul 13 16:50:23 EEST 2011     Incremental Backup Failed: CARS_APP_BACKUP_FAILED : -404 : Application backup error     Failed,I did it via Monitoring Configuration -> System Operation -> Removal and Backup and then "Backup now" bottom.

I tried to restart ACS services through cli (application stop/start) and different repositories (ftp, tftp) but without success.

View 2 Replies View Related

Cisco AAA/Identity/Nac :: ASA4.2 - ACS Backup On Map Drive

Feb 8, 2012

I have ACS 4.2 on vmware machine, everything is working fine. Automatically backup is already set on local machine, but the thing is, i want to configure automatically backup on my file server (ex. \1.1.1.1acsbackup). Even though i have defined the acsbackup folder through map drive but no success. when i define the above string in the backup location directory, it shows an error (no directory exists). How do i configure file server or map drives on acs & save daily backup on fileserver

View 1 Replies View Related

Cisco AAA/Identity/Nac :: ACS 5.3 Default Backup Password?

Aug 15, 2012

When doing a backup on any of the ACS 5.x appliances by default the backup is encrypted with PGP. What password is used for that? Is it configurable?

View 3 Replies View Related

Cisco AAA/Identity/Nac :: SFTP Backup Does Not Work For ACS 5.3

Feb 21, 2012

We have ACS 5.3, and trying to set up sftp backup on freesshd server. SSH connection works, but ACS cannot copy backup file to sftp server, we get following errors:
 
Acs.MGMT.ACSVIEW Backup failed: CARS_XM_SSH_CONNECT : -306 : SSH connect error
 
FTP backup works fine.

View 1 Replies View Related

Cisco AAA/Identity/Nac :: ACS 5.x - Unable To Backup By SFTP

Apr 5, 2011

I am not able to backup ACS 5.x server by means of SFTP protocol. We use ACS 5-2-0-26-2. My configuration of repository is:
 
repository SFTP
url sftp://x.x.x.x/home/user
user user password hash 455ad
 
command 'backup acs01 repository SFTP' does not work and I receive the following error message on ACS server:
 
%SSH connect error
 
On my sftp server I can find the following error messages:
 
Apr  6 06:57:46 CR01 sshd[8561]: Accepted password for user from 10.20.86.72 port 47924 ssh2Apr  6 06:57:46 CR01 sshd[8563]: Received disconnect from 10.20.86.72: 11: disconnected by user

How to successfully performed backup by means of SFTP protocol? Do I need any other configuration settings except repository? Do I need to store my SSHD RSA key to ACS? I am able to copy files using SFTP from other computers, so it seems that SFTP server is set correctly.

View 2 Replies View Related

Cisco AAA/Identity/Nac :: Unable To Make Backup In ACS 5.1

Jul 12, 2011

When I'm trying to make backup in ACS5.1(in log collector node) it gives me the following error:
 
FullBackupOnDemand-Job     Incremental Backup Utility     System     Wed Jul 13 16:50:23 EEST 2011     Incremental Backup Failed: CARS_APP_BACKUP_FAILED : -404 : Application backup error     Failed
 
I did it via Monitoring Configuration -> System Operation -> Removal and Backup and then "Backup now" bottom.
 
I tried to restart ACS services through cli (application stop/start) and different repositories (ftp, tftp) but without succes.

View 8 Replies View Related

Cisco AAA/Identity/Nac :: ACS 5.2 - Cannot Find Backup File

Jan 20, 2013

I had ACS 5.2 ( Evalution License ) setup installed on VMware with patch 11 when I try to restore earlier backup of ACS gives me  error "Cannot find acsbackup_instance.log in the backup file"

I am using Filezilla FTP sever for backup transfer.

View 5 Replies View Related

Cisco AAA/Identity/Nac :: ACS 5.3.0.40 On-demand Full Backup Failed

Dec 27, 2012

I have ACS 5.3.0.40 Primary Secondary Authenticators , of which the Scheduled backup has stopped.When checked the : Monitoring Configuration > System Operations > Data Management > Removal and Backup > Incremental Backup , it had changed to OFF mode. without any reason.Later i did the acs stop/start  "view-jobmanager" and  initiated the On-demand Full Backup , but no luck, same error reported this time too.

View 2 Replies View Related

Cisco AAA/Identity/Nac :: ACS 5.3 - Delete Local Backup Files?

Apr 10, 2013

I'm doing a basic setup of ACS 5.3. For now, I'm configuring backup to a local repository
 
!
repository Backup
url disk:/Backup
!
 
How can I automatically delete old files? I need to keep only the last seven files.

View 2 Replies View Related

AAA/Identity/Nac :: Windows ACS 4.2.0 Backup Database On 1120 Appliance 4.2.1.15?

Apr 26, 2011

I am running windows based acs 3.3 in my lan environment going to be replaced with acs 1120 appliance running acs 4.2.1.15 , ACS 3.3 database has been built upto  4.2.0.124 ,step by step by upgrade process
 
1) acs 3.3.3.14---> 4.1.1.24
2) acs 4.1.1.24 ----> 4.2.0.124 .
 
now my database is with 4.2.0.124 dmp file , I cannot upgrade my database to 4.2.1.15 because 4.2.1.15 patch is not applicable & executable  on 90 days evalution package of 4.2.0.124 of windows platform .
 
can i import my windows based 4.2.0.124 datbase directly to my acs appliance running 4.2.1.15.3 ??? , else its requires any step to be done to modify the windows based databse matching to appliance windows verison once .
 
I could see on appliance under restore settings the following options (restore from 4.2.0 backup file to acs 4.2.1)

View 8 Replies View Related

Cisco AAA/Identity/Nac :: 2901 - 802.1x Backup Solution For Local AAA?

Feb 26, 2013

So I've decided to utilize 802.1x on a switch module on a 2901, reasons being for mobility for a laptop and network security.
 
However, the 802.1x authentication occurs over the VPN Tunnel (over the Internet).  What our concern is, what happens if the Internet or Tunnel goes down?  I know that 802.1x does not authenticate against the IOS local DB, so what would be another option in case this scenario happened?
 
There will only be one device authenticating (maybe 2) and they are 2 HP Windows 7 laptops.

View 4 Replies View Related

Cisco AAA/Identity/Nac :: ACS5.2 Backup And Restore On A Different Software Version?

Oct 3, 2011

We are trying to make a restore from the backup done on ACS version 5.1 to a new appliance running ACS5.2 Before doing it I found this note in Cisco ACS user guide:
 
Note: You cannot back up data from an earlier version of ACS and restore it to a later version. Backup and restore must be performed on the same version of ACS. If you need the data on a different version of the ACS, you can perform an upgrade after you restore the data. Refer to the Installation and Setup Guide for Cisco Secure Access Control System 5.1 for more information on upgrading ACS to later versions.
 
How should I understand it? This note has conflicting statements. We can't restore to a later version but if you need data on a different version of ACS you can perform an upgrade AFTER YOU RESTORE the data. Doesn't it mean that the restore will still work? How would I do the upgrade to version 5.2 or even version 5.3 that was announced to be released very soon? I didn't find anything on the software upgrade in ACS5.1 guide.

View 4 Replies View Related

Cisco AAA/Identity/Nac :: ACS Version 5.2.0.26 View Backup Stopped Working From GUI?

Jul 27, 2011

We have an issue with View db (Monitoring & Reports) backup on ACS, version 5.2.0.26. We have scheduled incremental backup daily and full backup monthly. Everything has been working well, but since yesterday following errors have appeared, and full and incremental backup stopped working:

Alarm Name
System Alarm [Incremental Backup]
Cause/Trigger
On-demand Full Backup failed
Alarm Details
CARS_BR_BACKUP_CREATE : -405 : Internal error: couldn't create backup file
Alarm Name

[code]....

We use same repository as always. Backup to the same repository works from CLI.

View 2 Replies View Related

Cisco AAA/Identity/Nac :: ACS 5.3 - Backup Files Are Smaller In Size After Upgrade

Oct 30, 2011

After ACS upgrade from 5.2 to 5.3 we have noticed that backup files are significantly smaller in size. For example before the upgrade they were:
 
285633099 2011-10-23 22:01 Meduza-ACS-111023-2200.tar.gpg
285809254 2011-10-24 22:01 Meduza-ACS-111024-2200.tar.gpg
 
And after upgrade:
 
124234429 2011-10-25 22:00 Meduza-ACS-111025-2200.tar.gpg
124234425 2011-10-26 22:00 Meduza-ACS-111026-2200.tar.gpg
  
What could cause this behavior? How we can be sure if backup files have been regular after the upgrade?

View 5 Replies View Related

Cisco AAA/Identity/Nac :: Backup Admin Requested To Install VMWare Tools On ACS 5.3 Server

Nov 11, 2012

to backup an ACS 5.3 vm running on ESXi 5.0 our backup admin requested to install vmware tools on the acs server.

View 2 Replies View Related

Cisco :: Can't Get A Console Prompt

Sep 7, 2012

Almost new switch giving error: %%Low on memory Try again later.This is a 2960 48pt lanbase image.I can't get a console prompt, telnet in or anything, it is however switching packets OK. [code]

View 1 Replies View Related

Cisco :: 1841 Can't See Console

Nov 17, 2012

I have a 1841 router and I can ping the f/0 port from my pc. However when i try to console to it, it is not showing up anything but a blinking cursor. I tried all different baud rates on my teraterm but still not luck. I picked the baud rate disconnected and reconnected everytime and still nothing. Then I tried to telnet to it using teraterm but it would just open a console window and then close.

View 10 Replies View Related

Wireless Console 2.0 Not Working

Apr 3, 2011

My Wifi internet was working fine 12 hrs ago; now I can only use it with wire.I uninstall 2.0 and install Asus wireless console 3.0 but still not working, Fn+F2 not working either.

[code]...

View 2 Replies View Related

Cisco :: Console Errors After Aaa Applied

Feb 19, 2013

I have a issue where after configuring aaa and rebooting, logging into the console port seems to be auto trying something before it finally times out and let's the user try. I getting the following sequence: [code] I need aaa to work via vty, however I need the device to boot directly to the Username: prompt so I can continue to use my VB script to clear the config when the devices are return from the field.

View 4 Replies View Related

Cisco :: Getting Console Into Catalyst 5505?

Apr 22, 2011

Since I am a collector of all things Cisco, I picked up a Catalyst 5505 switch today. It has two supervisor engines in it, a card with 12 fiber ports in it, and two 24 port cards in it. I am trying to console into this thing, but I am not having any luck. I have Googled it and some threads say it uses a normal straight through cable and other threads say it uses the normal Cisco rollover cable. I tried going both routes but no luck?

View 6 Replies View Related

Cisco :: How To Get Into The Console Router 2800

Oct 17, 2012

want to ask something about configuration ruter 2800I already have a usb to DB9 | DB9 to RJ45but i have a problem like the image below

View 19 Replies View Related

Cisco :: Unable To See Log Messages Via Console

Feb 11, 2013

i have been facing this problem as i cannot see any log messages via my console port,except by looking at logs manually by "show log" command,

View 3 Replies View Related

WRT120N Can't Connect To Admin Console

May 30, 2012

I was trying to get into my router to give it a reboot yesterday, but was unable to get into the console. I used the username/password I've used for over a year (it was also auto saved) but it would not let me in. I went through all the steps to do a hard reset/restore default settings and it wouldn't let me. I had to access the boot loader to reload firmware, and that worked out just fine.

Now, I still cannot get access to the administration console with the default username (blank) and password (admin). I've tried moving my PC to ports 1-4 and none work.

I was about to give up on the router but I tried connecting from my iPhone and everything works just fine. I was even able to change my SSID and WPA key again.

Would this be a hardware issue, or could there be something in Windows 7 that's affecting it? I have disabled the windows firewall and AVG and still can't get any access from either Firefox or IE.

A couple of times I was able to get onto the first page of the console through IE, but if i tried clicking anything else it would ask for the username/password again and not connect. Now it won't even let me in once.

View 6 Replies View Related

Unable To Access Linksys Console

May 2, 2012

I have linksys ADSL Router which is having one line port for Phone Line and 4 Ethernet Ports.The Router IP is 192.168.1.1. When i connect this Router through one of its Ethernet Port to one of the Network Point(which is DHCP enabled)is working fine. I get the IP 192.168.3.x from my existing DHCP not from the ADSL Router which is enabled.Secondly, Although i can Ping the Router IP 192.168.1.1 from Wifi client 192.168.3.X, But when i try to open the Router Console a Login window open and is says " your are trying to access the Router in an insecure ways and it doesnt not authenticate ID and PWD.When i directly connect Router to my Laptop then am able to do so.

View 1 Replies View Related







Copyrights 2005-15 www.BigResource.com, All rights reserved