Cisco AAA/Identity/Nac :: ACS 4.2 To ACS 5.4 Database Replication

May 27, 2013

I would like to know if its possible setup database replication from Cisco ACS 4.2 server to ACS 5.4 server ?

View 3 Replies


ADVERTISEMENT

Cisco AAA/Identity/Nac :: ACS 4.2.1 Authentication And Database Replication?

Mar 27, 2011

Firstly the ACS 4.2.1 for Windows database replication does any one have and documentation on the processes required?Secondly I have a single system installed which is providing TACACS authentication for management access to a Cisco 5508 WLC, the controller prompts with a login box on connection to the web interface. When you put in the username and password pair the box comes back as if the authentication has failed. On the ACS I was unable to see any failed authentications so enabled passed authentication reporting and can see the user passing the process. The WLC is running software version 6.0.199.4. On the ACS I have added the extra two options within the TACACS interface configuration and have a ‘role1=all’ against both the user and the group the user is part of so I am confused as to why the user is still denied access.

View 3 Replies View Related

Cisco Security :: ACS 4.2 Database Replication

Apr 6, 2010

I am not able to replicate Database between two ACS SE 4.2. I am getting the following error:

Inbound database replication from ACS 'ACS_BEX_001' denied - shared secret mismatch.

The configuration apparently is ok. I am attaching the configuration from both ACS.

View 2 Replies View Related

Cisco AAA/Identity/Nac :: ACS 4.2 Replication

Jul 18, 2012

It ´s possible to do replication between a ACS 4.2 installed in a SERVER and  Cisco appliance with ACS4.2?.

View 5 Replies View Related

Cisco AAA/Identity/Nac :: ACS 5.2 Replication Failing Shows Pending

Oct 6, 2010

ACS 5.2 , in my Primary ACS under System Administration > Operations > Distributed System Management I see my Secondary but it shows "PENDING" under Replication Status.

View 3 Replies View Related

Cisco AAA/Identity/Nac :: ACS 4.2. Build15 - Replication Failed With Cannot Access File

Dec 22, 2009

Just upgraded from 4.0 - to 4.2 then to 4.2.1 15. As you may have seen with periovous posts of mine its not been an esay ride.I have now managed to get it all working - backups AAA etc but for some reason i cannot get the replication to work! Its states the following...
 
Within the Database Replication active log - Error OutBound database replication failed - refer to CSAuth log file.Other lines in the log state  its ok eg - Component logging reports was updated - being replicated to slave...

Please note that the $ is a symbol that i have used because the symbol in the log is strange and i  cannot seem to be able replicate here with this text, for example $etworks - should be networks.

View 4 Replies View Related

AAA/Identity/Nac :: Local Database Of Pix 525?

Feb 18, 2013

i configured pix 525 for easy vpn. About 100 to 200 people will use this service. i dont have much knowledge about radius and tacacas servers. Is local data base enough for extended authentication or should i configure the server for it ?

View 2 Replies View Related

Cisco AAA/Identity/Nac :: ACS 5.0.0.21 Monitoring And Reports Database?

Jun 16, 2010

Just installed ACS 5.0.0.21.  Monitoring and reports database was working, but now is not.  When trying to open, I get "Monitoring and reports database currently unavailable.  Trying reconnect in 5 minutes."    From CLI "sho application status acs" gives me the following:
 
ACS role: PRIMARY
Process 'database'                  runningProcess 'management'                runningProcess 'runtime'                   runningProcess 'adclient'                  runningProcess 'view-database'             runningProcess 'view-collector'            runningProcess 'view-jobmanager'           runningProcess 'view-alertmanager'         running
 
Also, logs show nothing unusual.

View 6 Replies View Related

Cisco AAA/Identity/Nac :: ACS 5.3 Remote Database Compatibility?

May 26, 2013

Would like to check up either Microsoft SQL Express 2012 is able work with ACS 5.3 remote database?

View 5 Replies View Related

Cisco AAA/Identity/Nac :: Database Is Not Lost On Primary ACS 5.1

Apr 23, 2013

We have recently upgraded acs 5.1 to 5.3 ( normal upgrade process), all secondary (ACS-B) was deregistered from primary (ACS-A , used as configuration server and log collector) and updated successfully.  But while upgrading primary acs server was rebooted manually. But later primary server was re upgraded successfully to 5.3.
 
Just to ensure database is not lost on primary acs (ACS-A) , primary acs was registered to one of the secondary acs (ACS-B). Initially  ACS-A registered with ACS-B, both ACS was showing proper role now. ACS-A ( secondary ) and ACS-B (primary). But on New primary ACS (ACS-B) is showing new secondary (ACS-A) offline and replication pending. Whereas on Secondary ACS-B its shows primary ACS-A online and updated. But ACS replication id is gradually incrementing. ACS system is in this system for last 2 day, But not sure if there is real replication happening at backend? How long it take place to replicate completely? and how to check / verify status of upgrade?       

View 3 Replies View Related

Cisco AAA/Identity/Nac :: ACS 5.2 Database Failure Radius Accounting?

Jul 31, 2012

on the dashboard of the "Monitoring & Report Viewer" I see a lot of system alarms related to the database.The explanation of the alarm says to look at the Collector logs for the details.

View 3 Replies View Related

Cisco AAA/Identity/Nac :: ACS 5.2 To Use Local Database When LDAP Fails

Mar 22, 2011

i'm trying to configure acs 5.2 to LDAP external idenity store, when LDAP failes ACS 5.2 should use internal indenity store. I configured A sequence to use LDAP 1st then Internal and i shut off the link to the LDAP but ACS will not use internal,  AAA Diagnostics keeps telling me that Cannot establish connection with LDAP server and will not use the internal store.

View 7 Replies View Related

Cisco AAA/Identity/Nac :: LDAP Or AD For External Database - Secure ACS 5.2

Sep 27, 2012

I am working on project with Secure ACS 5.2.  I am trying to determine the proper External Database to use.  LDAP or direct to AD?
 
Additionally, the Domain that I am connecting to has Multiple sub domains.  All of the users are currently in the Sub domains, but will be moving to root domain later.  How should I configure the connection, do I need to connec to each sub domain or can I just connect to the root?

View 2 Replies View Related

Cisco AAA/Identity/Nac :: ACS 5.1 Updating Internal User Database?

Jul 4, 2011

Using  a CSV file, I can not add user in the internal database of the ACS I have a permanent "error File Format Validation Failed" However the file I want to import is a really CSV file.

View 2 Replies View Related

Cisco AAA/Identity/Nac :: Type Of ACS V4.2 Database Password Hash?

Jan 17, 2012

What's type of ACS v4.2 Database password hash?
example:
-------------------------------------------------
Name          :          ###postureuser
Password      :          0x0020 fe fc f0 11 24 dc dd bd 0f d9 78 56 b8 4a fc f4 40 d0 bd 1d 19 5b 56 7e 14 f0 4e 1a b0 83 66 24
Chap password :          0x000e 22 07 e4 28 c0 09 7f 1a b7 e6 2a 78 a1 52
-------------------------------------------------

View 1 Replies View Related

Cisco AAA/Identity/Nac :: ACS 5.2 System Alarm Database Purging

Apr 19, 2012

On Cisco ACS 5.2.0.26 Patch 10, I got this system alarm:Incremental backup is not configured. Configuring incremental backup is necessary to make the database purge successful. This will be useful to avoid disk space issues. View database Size is 2.92GB and size it occupies on the harddisk is 2.91GB
 
In  "Monitoring Configuration >  System Operations >     Data Management >     Removal and Backup", we got this information:
Database Purging:If database size exceeds 120 GB, a backup (if configured) and purge will be initiated. If database size exceeds 150 GB, a purge will be initiated.
 
Could View database size reach 120 GB ?I want to know how long will Cisco ACS works without problem and if I need to hurry to configure purge.

View 2 Replies View Related

AAA/Identity/Nac :: ACS5 Try To Authenticate User In External Database

Jan 16, 2012

Is it possible to create on ACS5 rule which will:

1. Try to authenticate user in external database1 (radius)
2. When external database1 returns FAIL (because of bad password) ACS5 should try to authenticate user in another external database2 (radius)

View 5 Replies View Related

AAA/Identity/Nac :: CSACSE-1113-K9 / ACS 4.2.1.15 External User Database

Mar 9, 2012

Having CSACSE-1113-K9 with ACS 4.2.15.I want to configure windows user database under extrenal user database but i get an error  (attached) 'An error has occured while processing the Authen DLL Configure pagebecasue an error occured.I tried to stop the services and start agian but the same issue. The eappliance is secondary (backup) ACS. On the primary it is working fine.

View 1 Replies View Related

AAA/Identity/Nac :: Windows ACS 4.2.0 Backup Database On 1120 Appliance 4.2.1.15?

Apr 26, 2011

I am running windows based acs 3.3 in my lan environment going to be replaced with acs 1120 appliance running acs 4.2.1.15 , ACS 3.3 database has been built upto  4.2.0.124 ,step by step by upgrade process
 
1) acs 3.3.3.14---> 4.1.1.24
2) acs 4.1.1.24 ----> 4.2.0.124 .
 
now my database is with 4.2.0.124 dmp file , I cannot upgrade my database to 4.2.1.15 because 4.2.1.15 patch is not applicable & executable  on 90 days evalution package of 4.2.0.124 of windows platform .
 
can i import my windows based 4.2.0.124 datbase directly to my acs appliance running 4.2.1.15.3 ??? , else its requires any step to be done to modify the windows based databse matching to appliance windows verison once .
 
I could see on appliance under restore settings the following options (restore from 4.2.0 backup file to acs 4.2.1)

View 8 Replies View Related

Cisco AAA/Identity/Nac :: N5000 Same User In Tacacs / Local Database With Different Privilege

May 15, 2012

i am running NX-OS image n5000-uk9.5.1.3.N1.1.bin on the nexus 5020 platform.i have configured authorization with tacacs+ on ACS server version 5.2 with fall back to switch local database.a user test with priv 15 is craeted on ACS server, password test2 everything works fine, until i create the same username on the local database with privilege 0. ( it doesnt matter if the user in local database was created before user in ACS or after ) e.g.:  username test password test1 role priv-0   (note passwords are different for users in both databases)
 
after i create the same user in local database with privilege 0,if i try to connect to the switch with this username test and password defined on ACS,  i get only privilege 0 authorization, regardless, that ACS server is up and it should be primary way to authenticate and authorizate the user.

View 3 Replies View Related

Cisco AAA/Identity/Nac :: ACS 1121 / 5.3 - Remote Database Settings In Monitoring And Reporting

Mar 26, 2012

I am configuring new ACS 1121 appliance with version 5.3 and wanted to know how to configure Remote Database settings in ACS5.3 Is that necessary to configure that option ?
 
Also one more thing I can see that ACS 5.3 generates lots of logs is there any solution to reduce such logs. It seems many unuseful logs which are system related are getting logged into device which might no be good for memory requirements of device.

View 6 Replies View Related

Cisco AAA/Identity/Nac :: ASA 5510 / SSH Local Database Username And Password Not Working?

Feb 28, 2012

I have a weird issue. I recently setup an ASA 5510 and had SSH working. To make it easier on my VPN users I then decided I wanted to setup a Windows 2008 Network Policy Server for RADIUS authentication. Ever since I added the RADIUS part to aaa authentication, when I use SSH to connect to the ASA it will not take the local user name and password I have setup. I can however get in using a Domain user name and password. Below is the SSH and AAA configuration. Am I missing something here? The username and password in the ASA is not on the domain and it's like the ASA is not even trying LOCAL when it tries to authenticate. I want it to use the local username and password if possible. I'm kind of new to ASA's..
 
On another note, I have never been able to SSH in on the internal interface. I always get a "The remote system refused the connection" error message. I can only use the outside interface.
 
Site-ASA# sh run | in ssh
aaa authentication ssh console SERVER_RADIUS LOCAL
ssh 0.0.0.0 0.0.0.0 outside
ssh 0.0.0.0 0.0.0.0 inside
ssh timeout 60

[code]....

View 2 Replies View Related

Broadband :: How To Increase Replication Speed

Mar 17, 2013

My company has 2 sites. Between them we have 100 MGB link. We do replication every day our data. Recently we had a issue on replication then we stopped about 20 replication. And now issue is fixed, we are started replication. Average replication is 75%, we need to reach it 100% ASAP. But me and my co-worker have little bit different mind about replications are running in same time. I thought there is no difference for total time between one by one and all running in same. But co-worker saying one by one is much quicker.

View 2 Replies View Related

Cisco Firewall :: Protocol Used For ASA 5510 Configuration Replication

Sep 5, 2011

What protocol the firewall configuration replicate and monitor the interfaces?

View 1 Replies View Related

2960S Packet Loss On File Replication?

Oct 26, 2011

I have 2 Exchange 2010 servers and when I enable the DAG and start replication I see both servers NIC cards reach 100% utilization periodically. I normally don't see this on any of my servers but I figure what the heck it'll be really fast in completion. However, when it peaks at 99-100% for short bursts I see packet loss from other systems on the network.

A minute or two into it I start getting alerts of packet drops on the switch these are connected to (catalyst 2960S). It's not across the board but it's enough to wreak other havoc with processes running. I'm curious as to whether this is the 2 servers having a problem or is this switch not up to it?

I believe the last snapshot I took showed most of the active ports on the switch having a 40-50% transmit status when those 2 servers peaked, which didn't make any sense to me. Is there something on the switch triggering other ports to lose packets or is it broadcasting something it shouldn't?

In more detail:-I'm seeing immediate/more packet loss on the network from the 8 or so APC PDU's that are connected to the same switch at 100/half or 100/full (haven't looked into why that is yet some are coming up at half.

-Couple of sql servers were failing over because they could not reach network resources, timeouts exceeding a few seconds. Really just bizarre for just replication files.

Lastly - any way to throttle the throughput on the Exchange replication via powershell or anything?

View 13 Replies View Related

Cisco :: How Replication In Cucm Servers In A Cluster Takes Place

Sep 10, 2012

How does Replication of cucm servers and other servers like unity presence and all in a cluster take place?

View 1 Replies View Related

Cisco Switching/Routing :: 6513 / 5000 - Replication Latency / One Way

May 27, 2013

I am looking for any assistance with an issue I am having.  Within my network, I have two Net App enclaves that replicate with each other.  These hang off of separate switches, one at our primary site and one off of our secondary site, just a few miles away.  I can replicate from the primary site to the secondary site at 8GB per minute.  From the secondary site back to the primary site, however, the replication passes at about 17MB per minute.
 
The configuration is exactly the same on both ends.  The primary Net App enclave hangs off of a 6513 switch and the secondary Net App enclave hangs off of a Nexus5000.  Trace routes and pings all show correct paths and connectivity.  I have troubleshoot this for a few days and I have been unable to figure out what is causing the replication issues.  The fact that this is bi-directional traffic and I am having problems one way is really throwing me off.  There are no ACLs or firewalls present between the two switches.

View 1 Replies View Related

Cisco Switching/Routing :: Poor Snap Mirror Replication Over WAN Fex 5000

Jan 27, 2013

We have a NETAPP nas box having two interfaces connecting to two fex's on 5ks. The 5ks are inturn connected to nexus 7k boxes. We have a 100mbps man link (LAN Extension). The netapp's two nics are grouped together to form a teaming type of environment. SNAPMirror replication is very poor at the rate 10mbps though the WAN speed is 100mbps and also the wan link is utilized only about 60mbps. What could be the problem. We tried removing storm unicast control 10 but with no effect.

View 1 Replies View Related

Cisco Switching/Routing :: 2960s / Marking The Traffic Between Two Hosts (Data Replication)

Feb 6, 2013

in switch 2960s ( c2960s-universalk9-mz.122-55.SE5 ) , i want to marking the traffic between two hosts (Data replication), i choose to use " mac access-list"  to classify my trafic before apply the policy marking . but did'nt work . c

!  my mac ACL
mac access-list extended test
permit host 000a.1a41.aa52 host 000a.1a41.1bc2
!
class-map match-all test
match access-group name test

[code]....

View 4 Replies View Related

Cisco :: ARP Database Timeout?

Aug 16, 2012

How do I, if I even can, adjust the MAC table timeout from 5 minutes to whatever is bigger and allowable?

I would like to also like to change the ARP table timeout as well.

View 4 Replies View Related

Cisco :: LMS 4.1 / Building DSN For UPM Database?

Jan 26, 2012

I need to generate an ODBC connection to the upm Datasource on LMS 4.1 running on Win2K8.  I have successfully built connections to cmf, ipm and rmeng, however UPM keeps failing saying that the Database is not found.
 
Here are my settings.
 
Driver = CiscoWorks Embedded Database
ODBC Tab - Data source name = upm
ODBC Tab - Description = Device Performance
Login Tab - Supply user ID and Password is selcted
Login Tab - User ID = lmsdatafeed  (i have tried DBA as well)
Login Tab - Password = set using the password I estabplished with the dbaccess.pl and dbpasswd.pl scripts
Database.Server name = upmEng
Network.TCP/IP = HOST=<lms server ip>;DOBROADCAST=NO;ServerPort= 43800
 
I validated the server port using netstat -a -b -o and matching up the PID with the UPMDBEngine process shown in the LMS Manage Processes window.Windows firewalls on the remote machine and the LMS server are off.

View 3 Replies View Related

Cisco :: LMS 3.2 - How To Access Database

Sep 22, 2011

what is the database to use cisco LMS3.2 and how to access the database?

View 3 Replies View Related

Cisco :: LMS 3.2 Need To Restore Cmf Database

Aug 29, 2011

If i reinialize(restore) the cmf database.do i need to reinialize all the databases.???
 
or if i reinialize the cmf database and do bulk import the devices is enough?

View 3 Replies View Related







Copyrights 2005-15 www.BigResource.com, All rights reserved