ACS 5.1 Backup

Similar Questions

• ACS 5.1 backup does not

  Hello

  We want to save the backup to an ACS on a NFS 5.1: \\x.x.x.x\ACS_Backup

  We have configured the x.x.x.x ip and the name of /ACS_Backup, is sharing - this correct? I can mount the disk with the configured username / password, but the backup impossible to share ACS. Is there a way to see the problem in the newspapers?

  Concerning

  Dominic

  
  Hi there
  we would like to save the backup of an ACS 5.1 to a NFS: \\x.x.x.x\ACS_Backup
  We configured the ip x.x.x.x and the share name as /ACS_Backup, is this correct? I can mount this share with the configured username / password, but the ACS can't backup to the share. Is there a way to see the problem in the logs?
  Regards
  Dominic
  

  Hi Dominic,

  Check out the below link hope that help

  http://www.Cisco.com/en/us/docs/net_mgmt/cisco_secure_access_control_system/5.1/installation/guide/csacs_upg.html

  Ganesh.H

• ACS 5.2 Backup Restore on ACS 5.7

  All,

  I've been combing through documentation for a direct response to this, but fails.

  I have an ACS 5.2 device I need to replace it with another device running ACS 5.7.  From what I found, you must run upgrade 5.5 to 5.7, and I guess it's because of the DB conversion.  With this in mind, I think that the DB to point 5.2 is incompatible with 5.7, which leads to my main question...

  If I don't have the luxury of upgrade to 5.5 is there another way to get my backup restored to a system ACS 5.7?

  Hi Antonio,.

  You're right, 5.2 backup may not be restored to the version 5.7 of the ACS and there is not a possibility to do so directly. ACS 5.2 backup cannot be restored on version 5.4.

  What you might be able to do is the following:

  -Install ACS in your ACS running 5.7 5.4

  -Restore you ACS 5.2 backup in ACS 5.4

  -Upgrade of the ACS running 5.4 to 5.6, and then to 5.7

  Note: Please mark it as answered as appropriate.

• ACS 5.8 backup and restore

  Hello

  We have an ACS 5.8 with evaluation license server & we saved the configuration. Then the evaluation license has expired. Would it not possible to copy the backup configuration to another machine with a new evaluation license?

  Thank you!

  This will not help. Also, the backup configuration contains the license information and replace the evaluation license.

  It is possible to communicate with your Cisco partner to obtain an extension of the evaluation license to continue the assessment of the product

• ACS 5.3 backup password

  When you make a backup on any one of the default ACS 5.x devices, the backup is encrypted with PGP. What password is used for this? Is - this configurable?

  It is not configurable, and this information has not been made public. However, when you restore it should be able to decipher it is fine.

  You can try to open a TAC case, but when I was at TAC was not able to find this key is.

  Thank you

  Tarik Admani
  * Please note the useful messages *.

• ACS 5.3 - backups fail to TFTP, work on the DISC

  Hi all

  I am setting up ACS for the first time and the configuration is complete and working, with the exception of backups of the database from the view. I created a repositiory TFTP and if I perform a manual backup or wait for a regular if he fails. I get one. tar.GPG file in the TFTP server (but cannot restore him because he is not in the "restoration" as a backup).

  It works fine if I create and use a repository on local disk. I get one. tar.GPG, but also a file catalog.xml and repolock.cfg (which I did not in TFTP). Looking at the logs on the TFTP server, I can see it trying to repeatedly read the catalog.xml file, but fails:

  Request for reading of file . Mode netascii [15/07 16:05:52.167]

  File : error 2 in system CreateFile call, the system cannot find the file specified. [15/07 16:05:52.167]

  This seems correct, that the file does not exist. However he never seems to try to create it.

  (I've created 4 or 5 repositories TFTP test this, all the same behavior)

  Any ideas?

  Paul

  Paul,

  TFTP will not work because the Protocol does not support the directory, what GBA is trying to do is to determine if a backup is running by looking in the file repolock.cfg. He also tries to see the content of the catalog.xml file so that when an incremental backup is triggered, it will add a line of the first full backup, followed by all the incremental backups. Your best bet is to use ftp as the backup, and this will fix the problem you are experiencing.

  Thank you

  Tarik Admani

• ACS 5.7.0.15 backup fails

  Hi all

  We have configured the FTP on Cisco ACS repository. When we at the request of the primary ACS via FTP backup, we can see the incoming transfers on the FTP server, but we are unable to see any file in the home directory. And also "referential sh" shows that the repository is empty of command output.

  Need your help to solve this issue as soon as possible.

  Brigitte,

  Why you have the following staging URL?

  backup-staging-url nfs://127.0.0.1:/opt/CSCOacs/bin
  

• Migration of the existing database of victory ACS 3.3 to device ACS 4.2.15

  Hi all

  Can anyone suggest me how to migrate the db for windows 3.3 acs acs 4.2.15 device.

  We replace the 3.3 victory device 4.2.15 as part of end of life. So we have the eap-tls/peap authentication.

  It has huge files. So suggest me the steps to migrate the db to win 3.3 appl 4.2.15.

  We need to upgrade to win 3.3 to win 4.0 for win 4.2 & then migrate to appl 4.2?

  Or any other way to do it?

  Hello

  You can take a backup copy of the database of the ACS unit. You can install ACS 3.3 in windows. Restore the backup.

  Then you can proceed to 3.3.4 on Windows ACS. make a backup and save it to a different location.

  Upgrade the windows of the CSA at 4.1.1.24. take a backup. Save it to a different location.

  Then the windows of the CSA 4.2.0.124. resume a backup and save it to a different location.

  Now re-images of the device of the ACS for ACS 4.2.0.124. Restore the backup of Windows ACS ACS ACS 4.2.0.124 unit now running.

  Now you can upgrade the ACS unit to 4.2.1.15.

  I hope this helps.

  Kind regards

  Anisha

  P.S.: Please mark this thread as answered if you feel that your query is resolved. Note the useful messages.

• Search ACS 4.2 order unknown user from database

  Hello

  I have several user databases in the search order for the unknown user policy. Ignoring the manual (http://www.cisco.com/en/US/partner/docs/net_mgmt/cisco_secure_access_control_server_for_windows/4.2/user/guide/UnknUsr.html#wp277530), which States that, after the failure of authentication from the first database (Windows) the ACS does not continue to look for the second database, a RADIUS server. I see that, with the failure in the first user, database stops the ACS research and fails to the user authentication with an authentication failure code "external DB password invalid.

  Documentation not going or is this a bug in the ACS v4.2.1? How can I make the ACS to continue to seek the second database user?

  Hello Roberto,.

  If the external database returns an invalid username/password, then it is intended for ACS is not to check the following data in the sequence and the failure of authentication:

  http://www.Cisco.com/en/us/partner/docs/net_mgmt/cisco_secure_access_control_server_for_windows/4.2/user/guide/UnknUsr.html#wp277502

  "For authentication requests, ACS applies the unknown unknown user policy to users. ACS does not backup to the known or discovered users authentication failure unknown when user authentication support. »

  If you want that ACS to verify the following database, even if a response from the invalid username/password has been received, you will need to explicitly set this on the external Windows database configuration page, in the section entitled 'Strategy for the unknown user' (but on the database configuration page specific Windows, not covered by the unknown user policy) :

  http://www.Cisco.com/en/us/docs/net_mgmt/cisco_secure_access_control_server_for_windows/4.2.1/User_Guide/UsrDb.html#wp354338

  In addition, on the previous screenshots, I could see that you have configured both as a result of database:

  Windows database

  RADIUS Server token

  So we may be running into a situation where the authentication method used is not supported by the tokens, Radius servers, and therefore impossible to check the second database in the list:

  http://www.Cisco.com/en/us/docs/net_mgmt/cisco_secure_access_control_server_for_windows/4.2.1/User_Guide/UsrDb.html#wpxref36799

  http://www.Cisco.com/en/us/docs/net_mgmt/cisco_secure_access_control_server_for_windows/4.2.1/User_Guide/Overvw.html#wpxref846

  Kind regards

  Fede

  --

  If this helps you or answers to your question if it you please mark it as 'responded' or write it down, if other users can easily find it.

• Restore the backup on ACS for Windows 4.2.0.124

  Hello

  According to the Migration Guide, I took the backup of a CBS existing 4.2.0.124 Server (device). While trying to restore the backup on the Migration machine (ACS 4.2.0.124 for Windows), I am unable to see the directory area where I can select the backup file to restore.

  Could you please give any suggestion on the same.

  Kind regards

  Brigitte

  Make sure that your java is up to date. Also try using firefox just to rule out the question of the browser.

  -Jousset

• What is the recommended size of repository to store saves the backups of ACS SNS-3415-K9, v5.4

  Hello guys, we need your advice :),

  do you know what is the recommended size of repository to store backups of logs of ACS SNS-3415-K9 (v5.4.0.46.0a software)?

  We intend to create an FTP server to record a monthly full backup and an incremental backup daily.

  We would like to consider the worst case in which ACS View Database is complete and a full backup is required and daily incremental backups.

  In the second period, we would appreciate really any advice on how to maintain, say, only the last 2 full backups and all the related incremental backups in the FTP server, is there a way to automate the removal of the oldest backup when a new backup is generated?

  Thanks in advance!

  Hi Rodrigo,

  Honestly, there is not a suggested size of space available to FTP/SFTP server used as the size of your backups of data base of progressive and complete view depend on 100% of the amount of newspapers ACS server receives every day, so what I would suggest to take a look at a couple of incremental for 2 consecutive days and would help you to determine what would be the amount that you need for a period of 30 days (one month).

  And associated with your concern if the ACS would supports the option to manually maintain the last 2 full backups view, unfortunately, it is not available as an option.

• ACS Appliance backup

  I have a new ACS 5.6 machine I want to save periodically. I went to the Administration of the system--> backups scheduled and configured two backups

  one to a local repository and the other on a TFTP server on the network

  For the TFTP server protocol I specified the folder on the server uses to the TFTP root (/ ACS) and provided a password for encryption.

  It is, it doesn't seem to work, and I don't see that anything is reports indicating if the system has attempted to save, if there is a failure, or why. I do not see an error about incremental backup of the purges without being configured, but that seems to be something different

  is there anything else I need to do?

  Instead, I would try an FTP or SFTP server. TFTP does not play well with larger files. If you do not already have an FTP/SFTP server you can try one of the free ones out there just to test and confirm. FreeFTPD is a free and very easy to use:

  http://www.FreeSSHd.com/

  Thank you for evaluating useful messages!

• Incremental backup ACS is DISABLED

  Dear team,

  Incremental backup settings changing on OFF state and get the error message below in the ACS logs. Please find the attachment.

  «"" 31 August 2014 04:01:21 com.cisco.nm.acs.view.common.incrbackup.IncrBackupJob.execute(IncrBackupJob.java:166) ERROR DefaultQuartzScheduler_Worker - 5 Acs.MGMT.ACS»»»
  VIEW of incremental backup: exception java.lang.NullPointerException
  at com.cisco.nm.acs.view.common.incrbackup.IncrBackupUtil.sendSystemAlert(IncrBackupUtil.java:1690)
  at com.cisco.nm.acs.view.common.incrbackup.IncrBackupImpl.executeBackup(IncrBackupImpl.java:457)
  at com.cisco.nm.acs.view.common.incrbackup.IncrBackupJob.execute(IncrBackupJob.java:125)
  Sep 01-2014 22:08:21 com.cisco.nm.acs.view.common.incrbackup.XMLExceptionListener.exceptionThrown(XMLExceptionListener.java:44) DefaultQuartzScheduler_ FATAL
  Worker-9 Acs.MGMT.ACSVIEW premature end of file.
  at com.cisco.nm.acs.view.common.incrbackup.IncrBackupUtil.getCatalogFromFile(IncrBackupUtil.java:1447)
  at com.cisco.nm.acs.view.common.incrbackup.IncrBackupImpl.executeBackup(IncrBackupImpl.java:286)
  at com.cisco.nm.acs.view.common.incrbackup.IncrBackupJob.execute(IncrBackupJob.java:125)
  Sep 01-2014 22:08:21 com.cisco.nm.acs.view.common.incrbackup.IncrBackupImpl.executeBackup(IncrBackupImpl.java:446) ERROR Acs DefaultQuartzScheduler_Worker-9.
  MGMT. ACSVIEW backup failed: null
  Sep 01-2014 22:08:21 com.cisco.nm.acs.view.common.incrbackup.IncrBackupJob.execute(IncrBackupJob.java:166) ERROR DefaultQuartzScheduler_Worker - 9 Acs.MGMT.ACS
  VIEW of incremental backup: exception java.lang.NullPointerException
  at com.cisco.nm.acs.view.common.incrbackup.IncrBackupUtil.sendSystemAlert(IncrBackupUtil.java:1690)
  at com.cisco.nm.acs.view.common.incrbackup.IncrBackupImpl.executeBackup(IncrBackupImpl.java:453)
  at com.cisco.nm.acs.view.common.incrbackup.IncrBackupJob.execute(IncrBackupJob.java:125)
  """""

  Hi Robert,.

  Can you please try reconfigure the incremental backup. I think that according to the logic, the incremental backup is forced OFF mode when an error has occurred during one of the previous incremental backups. If you still see the same error after re-set up, I would say you can check this problem with TAC, as it is something related to the data are saved.

  Thank you

• A primary and backup/replica ACS server may be on different versions?

  Hello

  (2) ACS' (for example: a common unit 1120 5.x version and a version of runnig quanta 1113 4.x) 1 primary possible version 5.x with a replica version 4.x?  If not, what are the requirements between implementation of a primary and backup/replica for devices?

  Thank you

  James

  Hello

  No, you can not made the two device replication you talked,

  The only requirement is that the devices are exactly same version and patach construction so that the replication working.

  Thank you

  Waris Hussain.

• How do Active/Backup (replication config) ACS 4.1

  Hello

  I tried to find a way by which I can do on my ACS active & the other as secondary IE how I can reproduce the config made on an asset to the backup of the acs. I m using ACS SE 4.1

  Thanks in advance for your suggestions.

  -Piyush

  Hello

  You can use the box RDBMS synchronization to synchronize the 2 boxes of ACS, but I don't think that there is a way to make an active and the other secondary on the ACS itself.

  If you are authenticating users of your switches wireless etc... You can do first appears in ACS 'active' and 'secondary' GBA listed second. This secondary GBA would only used it actively it was not available.

  HTH

  Craig