RAY & VSA - ACS 5.2 Appliance

Similar Questions

• Add new OPNET VSA ACS 4.2

  I need to add attributes Radius OPNET ACS 4.2. How can I add a specific attribute again GBA?  Google search points me to CSUtil.exe and I can not find this utility in the ACS installation files.

  These are the values I need added to OPNET.

  When configuring the RADIUS server to take over of the ACE Live device, use the Code provider and specific attribute of the following (VSA) provider:

  Manufacturer code: 7119

  VSA: 33

  Thanks for your help.

  Faucher

  Well well well, you can use the RDBMS synchronization feature to add the new custom provider ACS with its custom attributes that complement the standard list of the IETF.

  What you need to do is set the file accountactions.csv with the actions needed to add the new custom as well as its attributes provider.

  As a reference to how to implement the accountactions.csv file, please see the following link:

  http://www.Cisco.com/en/us/docs/net_mgmt/cisco_secure_access_control_server_for_windows/4.2/user/guide/A_RDBMS.html#wp148322

  Walk through all of the above chapter.

  One last thing, you need to find the file of the dictionary for OPNET with their custom attributes.

  If you need the fish, just provide the dictionary file and I will make the file for you.

  ------------------------------------------------------------------

  Pleae make sure that correct rate

• VSA does virtual vCenter Appliance support

  We are setting up a remote site with VSA running on both nodes ESX with a third ESX Server built to manage the instance of vCenter.  We run vCenter device for our main campus and would like to remain consistent, but I read her you need to run on a Windows Server vCenter.  Someone at - it care to confirm or deny?

  VSA is and add-on for vCenter for Windows.

  Some clues:

  • "vsphere Storage Appliance Planning Checklist" (http://pubs.vmware.com/vsphere-50/topic/com.vmware.vsa.doc_10/GUID-2F776546-FAFD-4C07-8588-DD87CCFC186F.html#GUID-2F776546-FAFD-4C07-8588-DD87CCFC186F). It is said to istall vCenter on a virtual or physical machine (vCenter Server Appliance is virtual ony)
  • the "Install vCenter Server for VSA ' (http://pubs.vmware.com/vsphere-50/topic/com.vmware.vsa.doc_10/GUID-045C6534-66AA-4034-BC53-59F2FE40A1AC.html) vCenter Server requires Microsoft .NET 3.5 SP1 Framework. (so Windows)
  • "Yellow brick - vCenter device" (http://www.yellow-bricks.com/2011/08/10/vcenter-appliance/)

  My 2 cents

  Sam

• ACS 5.1 integration with WLC

  Hello

  can someone help me find a document for ACS 5.1 appliance, integration GANYMEDE + (configuration) with my WLC. configuration of RADIUS also for clients.

  all configuration of wireless controller shows only acs 4.x integration.

  Thanks in advance

  Hello

  There is unfortunately no official configuration example for this right now.
  Haowever, you can view these screenshots I took an example of laboratory, to set up the profile of shell and pass it back due to the authorization rule.

  Hope this helps,

  Fede

  --
  If this helps you or answers to your question if it you please mark it as 'responded' or write it down, if other users can easily find it.

• Devices configured for authentication under ACS

  Hi friends,

  Would like to know how many devices can be configured for authentication under ACS version 5.6.0.22 (Cisco Secure Network Server 3415).

  I'm not able to find the same everywhere.

  Concerning

  JN

  Hello

  It depends on the license that you install on the ACS 5.6.

  All deployments of 5.6 ACS supports customers AAA 100 000, 10,000 network, 300,000 users and 150 000 host device groups. 5.6 ACS collector server log can handle 2 million records per day and 750 messages per second for stress sent by the various nodes of ACS in the deployment on the server of log collector.

  Please visit this link:

  http://www.Cisco.com/c/en/us/TD/docs/net_mgmt/cisco_secure_access_contro...

  With the Base license, a Cisco Secure ACS 5.6 appliance or virtual machine software can support the deployment of up to 500 devices of access network (DNA) such as routers and switches. These are not authentication, authorization and accounting clients (AAA). The number of network devices is based on the number of unique IP addresses that are configured. The limit of 500-device is not a limit for each individual device or the instance, but a limit of scale that applies to a set of instances of Cisco Secure ACS (primary and secondary instances) that are configured for replication.

  The optional add-on of large deployment license allows deployment to support over 500 network devices. Only one major deployment license is required by the deployment because it is shared by all instances.

  Please visit this link:

  http://www.Cisco.com/c/en/us/products/collateral/security/secure-access-...

  Kind regards

  Aditya

  Please evaluate the useful messages.

• Compatibility of huawei and alcatel ACS 5.4

  Hi all

  We will soon order an ACS 5.4 appliance based to use AAA but in our network, we have routers Cisco, huwawei, and alcatel.

  I would like to know if I can include switches and routers to alcatel and huawei.

  Kindly give advice on what attributes of I need (AAA, RADIUS, etc...)

  Can I get the full functionality even as if I was using switches or cisco router

  Kind regards

  Standard Basic attributes must all be supported... also you can create some vendor specific values as well

  Sent by Cisco Support technique iPad App

• 5.3 of the ACS cannot work with two rules of service strategy

  Hello my name is Ivan

  I have a question about ACS v5.3 appliance.

  I have a v 5.3 ACS wo authenticate users wireless, as well as a cisco wlc. A profile is to business users and the second profile is invited.

  Business users must authenticate with Active Directory and the guest with WLC. Guest users to authenticate with the local database of GBA.

  I have set up two service political selection that correspond with the Radius protocol. The first rule is for users to Active Directory and the second is for users in

  the local database of ACS.

  When I try to authenticate users with active directory is OK, but when trying to authenticate users with the local database (Portal comments) GBA was trying to find the

  internal user in Active Directory, because math the first rule and the second profile cannot authenticate.

  When I change the order, first of all the State of users internal and second rule of users from Active Directory, internal users can authenticate in ACS, but

  in Active Directory users cannot authenticate.

  I think that my ACS authenticate only the first rule of the RADIUS to the Active Directory, not two rules of RADIUS at the same time. Or maybe there is a problem in the BONE of the ACS.

  Authentication separately is OK.

  Please could you help me to resolv this problem?

  I enclose my two rules

  Concerning

  Hello Ivan,.

  To solve your problem, you must configure your ACS so that the first selection policy (active directory) corresponds to only for users of the company and the other strategy of selection service (internal users) does not match.

  The second strategy selection of service must be only for guest users.

  If you use Cisco WLCs, it will be easier for you.

  Why?

  Because you can use 'End Station filter' easier to match the SSID.

  In feature selection policy, you build your game to the fine filter station (add it via the Customize button).

  Now, you must create two filters of end station, one is the ssid of comments and one corresponds to the ssid company. (tell how to create later)

  After you create the filter end station and match the selection policy of end station filter function, you have a political service selection matches corporate only guest SSID and other SSP the SSID matches.

  Now you can select different identity for the two SSP sources.

  Now for the filter end of station:

  End station filter is used (in our case) to distinguish the SSID.
  If I want to separate applications of different SSID, I use the end station filter to match what SSID I use.
  cretae end station filter to your SSID, follow the following image:

  

  on point number 4, write resounding brand (*) asteristk of your SSiD (case-sensitive), without spaces. Be sure to avoid spaces before or after.

  (I assume you are using cisco WLC. If not, the idea cannot be applied the way I described above).

  So far, we're OK, except one point. The default SSID guest is not sent by the Cisco WLC to the radius server when the client tries to connect to it, while the SSID of 802. 1 x is.

  To say the WLC to send the guest SSID, you must add this command to the WLC:

  RADIUS config callstationidtype ap-macaddr-ssid

  I hope I described correctly. Let me know if you got it or if you need more explanation.

  Greetings,

  Amjad

  Rating of useful answers is more useful to say "thank you".

• TLS v1.2 on Cisco ACS 5.7

  Hello

  V1.2 TLS is supported on Cisco ACS 5.7 appliance virtual?

  If this isn't the case, you know were I can check it out?

  Thank you!!!

  Unfortunately, 5.7 ACS don't supports TLS v1.2

  We filed an enhancement request to support.

  CSCuu29920    ENH: Add support for TLS 1.2 on ACS 5.X

  Kind regards

  ~ Jousset

• material conditions VSA?

  Hi all, I have a couple of servers I want to use for esx vsa, can I use different physical servers?

  those I have is the two ram 64gig with the same kind of CPU in both (intel E5-2620 x 2) and raid is setup at the same time with the same amount of storage, hard drives same but different, is raid controllers the number one is a Fujitsu and the other is super micro.

  Someone think that I would have problems this?

  Thank you

  Steve

  Hi, I did a little work on the ASB (with the same type of good servers) but I think you will be ok and it's certainly worth a try. The fact that all the components are the same (with the exception of the RAID controller) should mean that everything will work.

  The installation notes refer to a "homogeneous hardware configuration" not identical so I think it will work. The only thing I would say is make sure RAID controllers present the same RAID configurations (RAID10, RAID 6, etc.) as long as they are the same configuration.

  Here is the link to the release note that has the installation requirements - http://www.vmware.com/support/vsa/doc/vsphere-storage-appliance-513-release-notes.html

  Hope that helps,

  Steven

• out-of-range security question: export a certificate with the private key

  Salvation of the Forumers

  As above mention of title, if we do PKI, we you get invovle with certificate.

  When I made an express unit WLC and ACS, where the appliances doesn't come with generate CSR function... So we use openSSL for it.

  To clear my curiosity, why we need to export the private key certifiate wit? Itsn can't the private key cannot publish to the public?

  Thank you

  Noel

  Because two devices act as a server, and you would need to have the private key of the server. However, you do not have the private key to all customers for sure you mentioned you need to provide the public key to the client, not the private key only. Private key should only be stored on the server, and in this case, the two devices are the server.

• 1121 5.4 to 5.6 upgrade

  1121 is EOL, end of the sw-support was August 27, 2014. I'm 5-4-0-46-7 running on my device. I'm upgrading to version 5.5, and I read this post - https://supportforums.cisco.com/discussion/12076866/1121-upgrade-52-55. So I know that it is supported. But what about version 5.6? This Version is September 2014, according to the doc of Cisco, it is not supported for the device of 1121.

  The ACS 5.6 software runs on a device dedicated to Cisco SNS-3495, on a Cisco SNS-3415 device, on a Cisco Secure Access Control System (CSACS-1121) 1121 or on a VMware Server. 5.6 ACS comes on appliances Cisco SNS-3495 and Cisco SNS-3415. However, 5.6 ACS continues to support CSACS-1121 device. You can switch to 5.6 ACS from all previous versions of the ACS that runs on the device CSACS-1121. For more information on the upgrade paths, see upgrading Cisco Secure ACS software.

  http://www.Cisco.com/c/en/us/TD/docs/net_mgmt/cisco_secure_access_control_system/5-6/release/notes/acs_56_rn.html#40742

• 802. 1 x wireless and wired network

  Hello

  I have to configure a Wi - Fi network and 802.1 x and I don't know what components I need. ACS or NAC appliance?

  Hello

  802. 1 x is an authentication mechanism to devices at the port (L2) level.

  Can be wired or wireless.

  Here's what you'll need:

  A client (Windows computer, peripheral end-user 802.1 x compatible)

  An authenticator (switch, AP)

  An authentication server (Radius)

  The intention is to authenticate the user as soon as the detection of the activity of L2, for example when a user plug the computer to a port on a switch.

  You can do a quick test with the following components:

  Client (Windows computer)

  Authenticator (Cisco Switch)

  Authentication server (ACS)

  Federico.

• Local storage capacity in 5.1

  Hello

  I know that, in version 5.1 you can use vmotion without the use of a SAN (instead use local storage).  This also extends to the HA feature or a SAN is always needed for this?

  Thank you

  For HA can restart the virtual machines on another host in the event of a host failure, the other host must have access to the files of the virtual machine. With local storage on the failed host, the other host will not normally be able to access to the files of the virtual machine. If you use warehouses of data on local storage THAT HA will not work unless you also use the vSphere Storage Appliance (VSA). VSphere Storage Appliance creates the shared storage of local storage.

• Adding a custom VSA to a group - ACS unit

  Hello

  Using a secure ACS appliance 4.0

  I want to add a new provider of RADIUS and its VSA associated with the configuration of the ACS. This will be then returned in the authorization.

  I have already added the new seller and the VSA required through RDBMS. I can now see the new seller (supplier) RADIUS in NAP profile etc.

  However I can't seem to find a way that how to set the value of the SBA added? And assign it to a particular group? I can't find this anywhere VSA.

  Add an AAA client with "authenticate using the" Radius (vendor)

  Then go to Configuration of the Interface and select VSA to the user or group

  ~ Rohit

• Cannot create VSA attributes in ACS 5.1

  I upgraded to ACS 5.1 inorder to use the VSA RADIUS feature that has been added. I am able to create the VSA provider object, but get an error during the creation of the real attributes. Therror States: this failure has occurred: {0}. your changes have not been saved. Click OK to return to the list page. Is anyone else getting this error?

  I went through a process of upgrading on my system and I am able to reproduce your problem.

  Problem occurs if you have "Include attribute in the newspaper" check box selected.

  As a work around to continue without the selected square and should be able to add the attribute.

  Impact of not selecting this is that the attribute will not appear in the monitoring and troubleshooting of newspapers but will not affect what is sent in response (s) of RADIUS.

  I sync upward with the development team to see what can be done to solve this problem