Impossible to ACS 5.4 to 5.5 on an SNS-3415-K9

Similar Questions

• ACS 5.3 on SNS 3415

  Is anyone ACS 5.3 running on a server of SNS 3415.

  It seems that it is not a mixture supported, I wondered why?

  Hello

  When Cisco release 3415 SNS the current version of ACS was 5.4. Developers had to make a different code for this device, because it uses own software and is another type of server.

  5.3 ACS was never develop working on this server, that of why you can't use ACS 5.4 or higher.

  If you need help with anything which touches the ACS do not hesitate to contact me. I used to work in support of Cisco AAA.

  Kind regards

  Erdelgad

• What is the recommended size of repository to store saves the backups of ACS SNS-3415-K9, v5.4

  Hello guys, we need your advice :),

  do you know what is the recommended size of repository to store backups of logs of ACS SNS-3415-K9 (v5.4.0.46.0a software)?

  We intend to create an FTP server to record a monthly full backup and an incremental backup daily.

  We would like to consider the worst case in which ACS View Database is complete and a full backup is required and daily incremental backups.

  In the second period, we would appreciate really any advice on how to maintain, say, only the last 2 full backups and all the related incremental backups in the FTP server, is there a way to automate the removal of the oldest backup when a new backup is generated?

  Thanks in advance!

  Hi Rodrigo,

  Honestly, there is not a suggested size of space available to FTP/SFTP server used as the size of your backups of data base of progressive and complete view depend on 100% of the amount of newspapers ACS server receives every day, so what I would suggest to take a look at a couple of incremental for 2 consecutive days and would help you to determine what would be the amount that you need for a period of 30 days (one month).

  And associated with your concern if the ACS would supports the option to manually maintain the last 2 full backups view, unfortunately, it is not available as an option.

• Scalable CSACSE-1113-K9?

  Hi all

  I CSACSE-1113-K9 network and now I intend to upgrade this legacy.

  Currently is running on 4.2, scalable? If yes what version I can improve the legacy?

  Concerning

  Sachin K

  4.2 was the final version of the ACS 4 I am aware and came out almost 3 years ago. The next step would be to migrate to 5 ACS who needs to migrate you to the SNS-3415-K9 unit.

• Replacement of the ACS 1121

  Hi people,

  I have a clarification associated with ACS 1121. Client needs a solution for the ACS function, rather than to invest on the basis of the ISE, is there any model exists in the form of ACS appliance only. In my view, ACS 1121 will be EOS and he said THAT SNS 3415 is the replacement model.

  I'm confused, it is an ISE, but also the ACS and it is separated from issuance of ISE (as a basic and advanced). What should I do, if I need to select SNS 3415 as ACS appliance? It is based, or should I need to add something more?

  Appreciate your help and your support.

  Kind regards

  SID

  You shouldn't base purchase and license in advance. You just buy the license of migration and it will work quite well for your existing users. For more details on this, you can see ordering guide attached ISE.

• ACS 5.8.0.32 CLI Password Recovery does not

  Everything by making a change of password on my servers emergency ACS SNS-3415 5.8.0.32 production as a result of a termination of employment IT, I found myself having recover the CLI password for my administrative accounts.

  From a bootable USB key using of an ACS 5.8.0.32 .iso, I made my way through the menus, see the list of accounts that I waited, entered new passwords, saved my changes, then use the menu option (q) to restart. When the system came, it had not been changed passwords.

  I have tried for the same operation on the two hosts of ACS production and Lab host, with the same result.

  I got a picture Recovery.iso of Cisco TAC, but it did not change the result.

  ACS servers are up and running and maintenance actively GANYMEDE queries as expected, I can't get to the CLI.

  Any advice?   I can rebuild if necessary, but it should really be an easier way to do it.

  Hi James,

  We have the bug (CSCuy45998) for her. Please install patch4 and try for recovery.

  Thank you

  Catherine

  Please evaluate the useful messages and mark the correct answers.

• SNS-3415-K9: hardware device console login reset password

  We brought a hardware appliance for small server secure network for the Applications of the NAC & ACS ISE: SNS-3415-K9. After the initial Setup, we have forgotten the IP address and the password for this unit. I access console on the server, but I can not connect because I forgot the password.

  I access MMIC, but I have no idea to reset password to log in to the console.

  Please help me.

  You will need to start using the installation media of the product you are using (ACS or ISE). Once you have started, you will be presented with a list of options, which is to reset the password for the admin user.

  Javier Henderson

  Cisco Systems

• 1121 5.4 to 5.6 upgrade

  1121 is EOL, end of the sw-support was August 27, 2014. I'm 5-4-0-46-7 running on my device. I'm upgrading to version 5.5, and I read this post - https://supportforums.cisco.com/discussion/12076866/1121-upgrade-52-55. So I know that it is supported. But what about version 5.6? This Version is September 2014, according to the doc of Cisco, it is not supported for the device of 1121.

  The ACS 5.6 software runs on a device dedicated to Cisco SNS-3495, on a Cisco SNS-3415 device, on a Cisco Secure Access Control System (CSACS-1121) 1121 or on a VMware Server. 5.6 ACS comes on appliances Cisco SNS-3495 and Cisco SNS-3415. However, 5.6 ACS continues to support CSACS-1121 device. You can switch to 5.6 ACS from all previous versions of the ACS that runs on the device CSACS-1121. For more information on the upgrade paths, see upgrading Cisco Secure ACS software.

  http://www.Cisco.com/c/en/us/TD/docs/net_mgmt/cisco_secure_access_control_system/5-6/release/notes/acs_56_rn.html#40742

• What do I have to apply RADIUS server?

  We intend to implement server GANYMEDE +.

  I need to know what exactly I need to set up this server? what I have to buy GANYMEDE + appliance based provider or I can just buy the software and install it on one of my new or existing server. is there any software to open source very good that I can use? What advantages and disadvantages of each options?

  I'm the management of hundreds of routers and switches on our society and on customer sites via internet.

  one last question: is Cisco ACS 5.5 material or can be installed in any server?

  I know it's very long or issues, but I know that you are very friendly and nice people :)

  1.] most of the large company or class operator network device manufacturers supported by GANYMEDE. Some providers that are supported on the GANYMEDE Protocol + are: Adtran, Alcatel/Lucent, Arbor, Aruba, Brocade/Foundry, Cisco/Linksys, Ericsson/Redback, Extreme, Fortinet, HP/3Com, Huawei, Juniper, Netgear, Nortel and others. However, I personally would say ACS 5.x

  Source - http://tacacs.net/faq.asp

  2.] cisco Secure ACS 5.5 is available as a closed and hardened based on Linux SNS 3415/3495 device or as an image for VMware ESX/ESXi 5.0/5.1operating system.

  Cisco Secure ACS 5.5 supports two distinct protocols for authentication, authorization and accounting (AAA): RADIUS access control network and GANYMEDE + to access network device control.

  3.] for more information about the product and the license, you must go through the links listed below.

  Order ACS 5.5 Guide

  Data sheet ACS 5.5

  Kind regards

  Jatin kone

  * Does the rate of useful messages *.

• Cisco Secure ACS appliance - impossible to edit... Reason: The host no longer exists.

  Hi team,

  I have 2 camera which I am not able to remove a group of network devices home device.

  When I try to remove the device after error is thrown

  Impossible to edit INMUM-VPE-T1-3rdFloor-3750-S...  Reason: The host no longer exists.

  Running on Version: Cisco Secure ACS4.2.0.124

  One would come in all of these issues. someone knows the solution.

  Concerning

  Vineeth

  Hi Vineeth

  Yes, you can do through GUI.

  The GUI:

  1 ACS gui > network configuration > click on 'Search', then click 'Search' again.

  2. complete list of all network devices. On top, you will see an option "Download".

  Download the complete file.

  Let me know if it helps.

  Thank you

  Nelson Saha

• WLC 4402 impossible to authenticate correctly with ACS 5.2

  For some reason, I can't WLC to authenticate correctly with ACS 5.2. It's very strange in the sense that when I checked the log. ACS authenticates and authorizes the WLC 4402, but I can't log on the WLC. login screen appears, if I typed the username that he jumped

  Controller of >

  user:

  password:

  No matter what I typed (internal or external users), nothing seems to work.

  It comes to my frustration, I have no problem with authentication of routers and switches except WLC 4402.

  Hello

  Please delete privilege on the ACS level settings.

  Elements of strategy > authorization and permissions > peripheral Administration > Shell profiles > common tasks

  By default the privilege - do not use.

  Maximum privilege - not in use

  I hope this helps.

  Kind regards

  Anisha

  P.S.: Please mark this thread as answered if you feel that your query is resolved. Note the useful messages

• Impossible to browse Active Directory to an ACS 5.1

  Hello

  We joined our ACS 5.1 in our Active Directory 2003, the system seems properly attached on the ACS we like connectivity status: joined and if we try with the test button we get "connection succeeded", on the AD tool, we notice that you have created a computer for our ACS account.

  We wanted to created the group directory but the navigation tool is empty and no request does not give any output.

  The ACS is joined, but we are not able to browse Active Directory.

  Any suggestions that could be the problem?

  Thank you.

  It is a matter of course due to defect mentioned below.

  CSCtf39158 - failed to retrieve ad groups in a single forest with multiple trees scenarios

  You must apply the Patch 3 for this problem

  file name: 5-1-0-44-3

  Download of: CEC / Support / download http://www.cisco.com/public/sw-center/index.shtml

  Letter: Security / identity management / Cisco Secure Access Control System / Cisco Secure Access Control System 5.1 / 5.1.0.44

  ##Steps to create the repository.

  This FAC CLI mode

  Create a repository (it's basically FTP server definition)
  AAA/admin (config) # repository FTP---> (can be any name)
  AAA/admin(config-Repository) # url ftp: / /
  AAA/admin(config-Repository) # password ordinary user

  ===============================
  Steps to install the ACS 5.1 patch:
  ===============================

  Issue the command patch GBA following in EXEC mode to install the fix of the ACS:

  ACS, install patch patch - repository name.tar.gpg repository-name

  Rgds.

  JK

  The rate of useful messages-

• Impossible to upgrade of ACS 5.2 to 5.5 ACS - request is won't boot.

  Hello

  Someone at - he had problems upgrading a 5.2 to 5.5 ACS ACS?

  I start with a 5.2 Patch 5 launched basic machine that has a configuration of work and production. The documentation states that to upgrade 5.2 you need to upgrade to first or 5.3 or 5.4 and then run the upgrade to 5.5. I tried to use the 5.3 and 5.4 as the draft, but I have the same problem. I have confirmed that the version 5.3 or 5.4 working properly until I started the 5.5 upgrade but said the 5.5 upgrade that we succesfull ACS services will not start. I get the message: (and it stays like that)

  acs/admin# sh app sta acs

Application initializing...
Status is not yet available.
Please check again in a minute.

  I upgraded a 5.4 ACS running a default configuration to 5.5 with success so I know that my 5.5 upgrade file is not corrupted.

  I tried other things:

  • Carry out checks on the another patch and updated MD5 at file level.
  • Upgrade to the latest patch level of this version before proceeding with the upgrade
  • Make a compress of database prior to the upgrade of each minor version.
  • Reload the server at the beginning and before the upgrade for each minor release.
  • Wiping the system with the recovery disk 5.5 and restore 5.2 configuration (get the same error)
  • Application of the Pointed-PreUpgrade fix before the upgrade to 5.5

  Here are the steps to upgrade:

  • Start with the basic DCC 5.2 Patch 5 (running a production configuration)
  • Reload the ACS
  • Run the database compress
  • Apply the patch 5.2 11
  • Reload the ACS
  • Apply the upgrade 5.4 application
  • Apply the patch 5.4 6
  • Run the database compress
  • Confirm the ACS application works
  • Apply patch PreUpgrade Pointed to 5.4
  • Reload the ACS
  • Apply the 5.5 upgrade application

  Once, I get the error to happen so I can reset the config 5.5 by default, but then I lose all the information of production system.

  Anyone had similar problems?

  You're running in the default listed below. This defect will be corrected in the patch 2.

  CSCum67932 5.5 ACS starts only after the upgrade because of the unknown encryption algorithm

  To work around the problem, you must apply the hotfix pointed on top of ACS 5.5,
  then run 'database-compress' and finally remove the sharp patch.

  Kind regards

  Jatin kone

  * Does the rate of useful messages *.

• ACS 4.2 Impossible to benefit from price Juno-exec

  I did the steps exactly following the guide by Cisco (http://www.cisco.com/en/US/products/sw/secursw/ps2086/products_configuration_example09186a0080af7d1d.shtml) to allow the Junos according to authorization Ganymede +, but I'm strangely "refused service" problem in my ACS.  I certainly have personalized service called "junos-exec" in my ACS 4.2 for Windows.  I try to let my Juniper EX switch performing authentication (works well) and the authorization with the ACS.

  09/09/2010, 15: failure of 51:33, author, test1, group by default, 10.8.100.77, (default), denied Service, service = junos-exec, ttyp0, 10.8.100.31, DF3-DC-SF-RC, 1, winlab, test1, no,.

  I'll be watching this thread until it is resolved, thank you in advance for any help or advice!

  Ivan

  Can you check the TCS newspaper to see if the Juniper box returned "protocol = Ganymede +"?

  If this isn't the case, you can try to remove "Ganymede +" under the Protocol in step 2 of the link you mentioned. Or check with Juniper to see if they can send "protocol = Ganymede +".

• Impossible to authenticate the user to ACS 5.1 with LDAP as identity outdoor store

  Hi, I have a server and Open-LDAP running ACS on my corporate network.
  Now, I'll set up a new linksys WAP - 54G and select WPA2-Enterprise with ACS as radius server.
  the first thing first, I created new internal user to ACS and trying to join the network wireless from my computer. I did it...

  then I move on an external entity (LDAP server). I set up the sequence of configuration and the LDAP identity, also select the access service.  but when I tried to authenticate from my computer, an error has occurred. I received:
  the following error 22056 object was not found in the store identities applicable (s)

  Ask me ' bout this thing, I implemented a cisco router 1841 to become customer of AAA. and surprise... it works!
  Yes, there is problems to authenticate to the windows of ACS (pointing to LDAP) platform?
  any suggestion?
  Thank you

  Hello

  Looks like you haven't mschap authentication is enabled on the ldap server. You can use eap - gtc instead, but need you:

  1 enable eap - gtc under protocols allowed on your ACS access policy

  2. install an eap - gtc "supplicant" on the windows box - if you have a wireless network card intel, the intel proset client supports eap - gtc

  This could mean a fair bit of work according to the number/type of wireless clients you have - could be useful on the LDAP mschap authentication activation.

  HTH

  Andy