ACS 5.3 on SNS 3415

Similar Questions

• Impossible to ACS 5.4 to 5.5 on an SNS-3415-K9

  Hello

  I try to install one of my Cisco ACS 5.4.0.46 with patch 5-4-0-46-6 5.5.0.46 version on a Cisco SNS-3415-K9 to 5.8.1.4.

  I have already installed the fix for pre-upgrade sharp-PreUpgrade -CSCum04132- 5-4-0-46 - 0 to .tar .gpg such as recommended by Cisco.

  When I run the upgrade, the process remains in 'Launch Application Upgrade' such as mentioned in the attached screen shot.

  Any suggestion please?

  Best regards.

  According to me, it's because of the stored data that causing problem with upgrade.

  4951688 3868528 827572 /storeddata 83%
  / dev/map/smosvg-recvol

  When you applied the upgrade bundle, it gets initially storeddata rental stores. If it doesn't have enough space, upgrade will fail.

  In order to erase stored data, you must contact TAC.

  Concerning

  Gagan

  rate: if it helps!

• What is the recommended size of repository to store saves the backups of ACS SNS-3415-K9, v5.4

  Hello guys, we need your advice :),

  do you know what is the recommended size of repository to store backups of logs of ACS SNS-3415-K9 (v5.4.0.46.0a software)?

  We intend to create an FTP server to record a monthly full backup and an incremental backup daily.

  We would like to consider the worst case in which ACS View Database is complete and a full backup is required and daily incremental backups.

  In the second period, we would appreciate really any advice on how to maintain, say, only the last 2 full backups and all the related incremental backups in the FTP server, is there a way to automate the removal of the oldest backup when a new backup is generated?

  Thanks in advance!

  Hi Rodrigo,

  Honestly, there is not a suggested size of space available to FTP/SFTP server used as the size of your backups of data base of progressive and complete view depend on 100% of the amount of newspapers ACS server receives every day, so what I would suggest to take a look at a couple of incremental for 2 consecutive days and would help you to determine what would be the amount that you need for a period of 30 days (one month).

  And associated with your concern if the ACS would supports the option to manually maintain the last 2 full backups view, unfortunately, it is not available as an option.

• SNS-3415-K9: hardware device console login reset password

  We brought a hardware appliance for small server secure network for the Applications of the NAC & ACS ISE: SNS-3415-K9. After the initial Setup, we have forgotten the IP address and the password for this unit. I access console on the server, but I can not connect because I forgot the password.

  I access MMIC, but I have no idea to reset password to log in to the console.

  Please help me.

  You will need to start using the installation media of the product you are using (ACS or ISE). Once you have started, you will be presented with a list of options, which is to reset the password for the admin user.

  Javier Henderson

  Cisco Systems

• Redundant NIC ISE (SNS-3415-K9)

  Hi all.

  We can connect a SNS-3415-K9 (ISE) to VSS switches. We have a server (SNS-3415-K9) ise can be connected an interface (g1) to switch1 and an other interface (g2) at the switch2 for redundant and load balancing...

  Not in a link aggregation Group (LAG) or multichassi etherchannel as your question implies.

  You can use other ports Gigabit Ethernet beyond Gi0 but they each have a separate IP address. There are different ways you can use these and other restrictions as well (e.g. Admin PAN is restricted to the Gi0).

  The details are laid out in a table here:

  http://www.Cisco.com/c/en/us/TD/docs/security/ISE/2-0/installation_guide...

  There are a few Cisco Live presentations, you can look for some design scenarios. I highly recommend Craig Hyps BRKSEC-3699 ISE for scale and high availability design

  https://www.ciscolive.com/online/connect/sessionDetail.WW?SESSION_ID=837...

• ISE 1.2 SNS - 3415 NIC bonding / grouping

  Hello

  I installed the SNS-3415 with ISE 1.2 and I try to configure the nic redundnacy (team) modes for requests for authentication and not for the purpose of management.

  Tests have shown that when an interface has been disconnected all was lost and nobody of our internal users was authenticated by the node of the ISE.

  However when I unplugged the "second interface" (possibly inactive) nothing has happened which shows which is a useless interface

  My goal is to connect it to my twins basic switches and have a deployment of high availability.

  -J' have enough search the Web but I have not found any clear and precisely the document to say how this could be done.

  http://www.Cisco.com/c/en/us/TD/docs/net_mgmt/cisco_secure_access_contro...

  THEMIS

  ISE 1.2 does not support grouping NETWORK adapters.  Especially on the devices.  There is a solution for the virtual machine using the ESXi host teaming network adapters so that it is transparent for the virtual machine.

  Please rate useful messages and mark this question as answered if, in fact, does that answer your question.  Otherwise, feel free to post additional questions.

  Charles Moreton

• You place your order of SNS-3415

  I ordered the SNS-3415 as ISE 1.1.4.

  I thought I have to install the ISE, however, it has been installed.

  but I don't know what is the ID/PW...

  No one knows about it?

  Hello

  You'll have to reimage, on a new installation, you should be presented with invites it installation.

  Tarik Admani
  * Please note the useful messages *.

• MTBF, MTTR SNS-3415 and TDS values

  Hi team,

  We would like to get the MTTR, MTBF and MDT to SNS-3415 values, kindly request expertise advise on that.

  Thank you

  Vishnu

  This information is not usually available to the public, you must contact the local team of the Cisco and ask them to receive the information for you.

• 3315 to SNS 3415 device migration

  I have a client with ISE 3315 with software version 1.3 four plays running, two nodes(Active-Active) for policy and two nodes(Active-Standby) for the admin. He bought a new four (4) devices with software version 2.0 3415 fast to replace the existing one. No direction to accomplish this task.

  -Tips to know if running on version 1.3 configuration will work with version 2.0 without any problems.

  -How to migrate the licenses, certificates, etc.

  Hello

  Yes, 1.3 ISE can be restored on 2.0. However, it is recommended to have the latest patch on ISE 1.3 before her.

  Config contains only some certs trust not the or certificates of system. So, you can export the certificate of the system with the private key and import on the new server.

  License does not save the config. Later you can get license team or if you already have a copy and then import them.

  I hope that helps!

  Concerning

  Gagan

• Replacement of the ACS 1121

  Hi people,

  I have a clarification associated with ACS 1121. Client needs a solution for the ACS function, rather than to invest on the basis of the ISE, is there any model exists in the form of ACS appliance only. In my view, ACS 1121 will be EOS and he said THAT SNS 3415 is the replacement model.

  I'm confused, it is an ISE, but also the ACS and it is separated from issuance of ISE (as a basic and advanced). What should I do, if I need to select SNS 3415 as ACS appliance? It is based, or should I need to add something more?

  Appreciate your help and your support.

  Kind regards

  SID

  You shouldn't base purchase and license in advance. You just buy the license of migration and it will work quite well for your existing users. For more details on this, you can see ordering guide attached ISE.

• ACS 5.8.0.32 CLI Password Recovery does not

  Everything by making a change of password on my servers emergency ACS SNS-3415 5.8.0.32 production as a result of a termination of employment IT, I found myself having recover the CLI password for my administrative accounts.

  From a bootable USB key using of an ACS 5.8.0.32 .iso, I made my way through the menus, see the list of accounts that I waited, entered new passwords, saved my changes, then use the menu option (q) to restart. When the system came, it had not been changed passwords.

  I have tried for the same operation on the two hosts of ACS production and Lab host, with the same result.

  I got a picture Recovery.iso of Cisco TAC, but it did not change the result.

  ACS servers are up and running and maintenance actively GANYMEDE queries as expected, I can't get to the CLI.

  Any advice?   I can rebuild if necessary, but it should really be an easier way to do it.

  Hi James,

  We have the bug (CSCuy45998) for her. Please install patch4 and try for recovery.

  Thank you

  Catherine

  Please evaluate the useful messages and mark the correct answers.

• Unable to find the required details for SNS-UCS-TPM in the datasheet as rack unit size

  Hello

  I'm just trying to understand the dimensions of the SNS-UCS-TPM device and the same power requirement...

  Is - this 1 U device with 1 x 650W PSU? I think details power but I'm not able to get the size details with respect to the width, length, and width.

  Can you please share the good link that will offer all of this in detail?

  The Trusted Platform Module (TPM) is a module of small integrated circuits on the new network of Secure Server (SNS) 3415 and 3495 device models. They are based on the platform Unified Computing System (UCS) C220 M3.

  Both the 3415 and 3495 have the same physical dimensions, differing only by the number of processors, memory and hard drives installed in their breast.

  The detailed characteristics of the UCS C220 M3 are here. You can see a diagram of where the TPM is installed here.

• 1121 5.4 to 5.6 upgrade

  1121 is EOL, end of the sw-support was August 27, 2014. I'm 5-4-0-46-7 running on my device. I'm upgrading to version 5.5, and I read this post - https://supportforums.cisco.com/discussion/12076866/1121-upgrade-52-55. So I know that it is supported. But what about version 5.6? This Version is September 2014, according to the doc of Cisco, it is not supported for the device of 1121.

  The ACS 5.6 software runs on a device dedicated to Cisco SNS-3495, on a Cisco SNS-3415 device, on a Cisco Secure Access Control System (CSACS-1121) 1121 or on a VMware Server. 5.6 ACS comes on appliances Cisco SNS-3495 and Cisco SNS-3415. However, 5.6 ACS continues to support CSACS-1121 device. You can switch to 5.6 ACS from all previous versions of the ACS that runs on the device CSACS-1121. For more information on the upgrade paths, see upgrading Cisco Secure ACS software.

  http://www.Cisco.com/c/en/us/TD/docs/net_mgmt/cisco_secure_access_control_system/5-6/release/notes/acs_56_rn.html#40742

• What do I have to apply RADIUS server?

  We intend to implement server GANYMEDE +.

  I need to know what exactly I need to set up this server? what I have to buy GANYMEDE + appliance based provider or I can just buy the software and install it on one of my new or existing server. is there any software to open source very good that I can use? What advantages and disadvantages of each options?

  I'm the management of hundreds of routers and switches on our society and on customer sites via internet.

  one last question: is Cisco ACS 5.5 material or can be installed in any server?

  I know it's very long or issues, but I know that you are very friendly and nice people :)

  1.] most of the large company or class operator network device manufacturers supported by GANYMEDE. Some providers that are supported on the GANYMEDE Protocol + are: Adtran, Alcatel/Lucent, Arbor, Aruba, Brocade/Foundry, Cisco/Linksys, Ericsson/Redback, Extreme, Fortinet, HP/3Com, Huawei, Juniper, Netgear, Nortel and others. However, I personally would say ACS 5.x

  Source - http://tacacs.net/faq.asp

  2.] cisco Secure ACS 5.5 is available as a closed and hardened based on Linux SNS 3415/3495 device or as an image for VMware ESX/ESXi 5.0/5.1operating system.

  Cisco Secure ACS 5.5 supports two distinct protocols for authentication, authorization and accounting (AAA): RADIUS access control network and GANYMEDE + to access network device control.

  3.] for more information about the product and the license, you must go through the links listed below.

  Order ACS 5.5 Guide

  Data sheet ACS 5.5

  Kind regards

  Jatin kone

  * Does the rate of useful messages *.

• Scalable CSACSE-1113-K9?

  Hi all

  I CSACSE-1113-K9 network and now I intend to upgrade this legacy.

  Currently is running on 4.2, scalable? If yes what version I can improve the legacy?

  Concerning

  Sachin K

  4.2 was the final version of the ACS 4 I am aware and came out almost 3 years ago. The next step would be to migrate to 5 ACS who needs to migrate you to the SNS-3415-K9 unit.