The NAC upgrade question

I intend to improve our systems SCS and CAM version 4.6.1 to 4.7.2. The documentation states that "Cisco recommends that you do not perform this procedure to upgrade via an SSH connection, because the steps needed to restart the appliance during the upgrade process will cause your lost connection."

Is the only concern with the help of SSH that you will lose your connection and the need to reconnect (and possibly miss some messages in the console), or is there something in the upgrade, which can be a console connection?

My CASE systems are 65 miles away and forced to dig between locations will increase the window for a potential failure.

We met our CAM and ea 2. CASE until 4.7.2 with SSH only, no access console. Not always the best idea (in this case for some reason you NEED it), but it can be done completely via SSH for orders and SCP for file transfer.

Tags: Cisco Security

Similar Questions

  • Basic of the NAC deployment question

    Hello

    Do I have reason to assume that at least 2 devices - a server and Manager must consist of a NAC deployment? or is the manager, an application running on a Windows Server? the Manager can run on the same machine as the server?

    My second question concerns Cisco Trust Agent and clean access Agent. CTA has actually managed by CAA? from what I see, CTA was part of the old framework of the NAC until they start using devices.

    Many thanks in advance,

    DOM

    Manager and the server can run on both PC or Cisco devices, which are in fact HP ProLiant DL140 G3 or HP ProLiant DL360 G5 PCs ;) You will need two devices in all cases.

    Second question - no one knows what will happen with all technology in the future. Is it completely replaced by MS NAP? The framework of the NAC is cancelled? Two Cisco solutions are not perfect. What customers actually need, is to have all the features of the NAC appliance to operate directly on the routers and Cisco switches. No clean access server no need in this case, only managing! And the OOB mode which is difficult to set up, support and troubleshoot will disappeared. The NAC framework is executed directly on Cisco devices, but it's not feature-REACH as NAC Appliance.

  • The NAC upgrade

    Hello

    Could you tell me the best way to upgrade software of cisco nac 4.1.3 to 4.7.2. What key questions I am likely to encounter when I do the upgrade?

    Concerning

    Prasanth Mathews

    Prasanth,

    You will need to go to 4.5.x or 4.6.x and then jump from there to 4.7.2. Be sure to only perform backups along the way.

    Full details here: http://tinyurl.com/2bymy9q

    HTH,

    Faisal

  • Most bang for the buck upgrade question

    Hi all.  I am currently using VMWare Workstation for Windows v6.x and have noticed that when I have three open tiles, my machine seems a little slow.  Current specifications are:

    CPU: Intel Core 2 Duo E6750

    RAM: 8 GB

    OS: Vista Ultimate (64-bit)

    OS disk: Velociraptor 150 GB

    VM disk: 1 GB Western Digital (all VMs are on this drive)

    SMV (RAM): SCO UNIX (512 MB), Windows XP Pro (2 GB), Windows XP Pro (1 GB)

    My question is the following, which would give me the best bang for my money:

    1. Upgrade to a Q9550.

    2. Allocate more RAM for the virtual machines (I currently use about 6GB with all the tiles running and what Vista takes on the host)

    3. Build a new machine with an i7 processor.

    4. Move virtual machines to a single Velociraptor.

    5. Move virtual machines to a RAID0 array (using two drives of 1 GB / 7200 RPM).  I know THAT RAID-0 has no redudancy; I would be back up critical files to an external drive of 1 GB.

    On these machines, I do some scripting/small database unix (SCO VM) and especially the word processor (several documents) / some work with audio products/editing Adobe (WinXP VMs).

    Thank you, in advance, for your input.

    I would like to start with more and faster for the VM disks.

    ___________________________________

    VMX-settings- VMware-liveCD - VM-infirmary

  • Dell E7440 i5 4310U 16 GB of the RAM upgrade question

    Hello

    could someone help me, please. Recently I bought 16GB (2x8GB) modules of 1600 MHz RAM Corsair but when I insert into the machine, the laptop does not even start. The LED of the POST tells me that there is a problem with the memory.

    Read the description of Dell, description of Corsair 16 GB are supported by this model. Tried the modules in another laptop and they work very well.

    Any idea? Thank you

    Purchased DDR3L or DDR3? Only DDR3L is supported by the Latitude E7440. https://www.Dell.com/support/article/us/en/19/SLN153768/en

  • PS the victory to the Mac upgrade question

    I'm moving from windows to mac.

    my windows serial number does not work on my mac to PS cs6.  He did for LR4.  Why, what I can do.

    Thank you.

    It's because your license of Photoshop CS6 is Windows only.  Lightroom has a cross-platform license, that's why you were able to install it on your Mac with success.

    Please see product order | Platform, language Exchange - l http://helpx.adobe.com/x-productkb/policy-pricing/order-product-platform-language-swap.htm for more information on how to request a Mac from Photoshop CS6 version.

  • The NAC Agent autoUpgrade ISE possible?

    Hi all

    I have this:

    802.1 x-window with the NacAgent version (say 1) <---->802. 1 x switch active (RADIUS aaa OK) <------>ISE and AD on the same LAN

    ISE is configured for client provisioning with hardware (NacAgent version 2) downloaded from Cisco's Web site (as described in the documentation)

    I have a basic plan of authentication and authorization that allow me to well but I expect the NACAgent to be upgraded.

    No profiling is configured at the moment.

    Is that someone can help?

    Best regards?

    Hello

    In the ISE settings provisioning client, activate you the option where the NAC upgrade agent is required. However, it is to you to run updates perioidic and map the most recent agent in the configuration of the parameters of the client.

    Thank you

    Tarik Admani
    * Please note the useful messages *.

  • Upgrade the NAC of 4.5 to 4.8

    Hello everyone

    I'm about to upgrade to a CNA of 4.5 to 4.8 on an application I do in a bank with 1500 users. The upgrade is due because the Bank makes its migration from PC to Windows 7

    The implementation is in a failover situation (2) and (2) CAM. the design is Out of Band, a virtual gateway and integration with a wireless LAN controller.

    I would like to know if when I upgrade the CAM and CAS´s for version 4.8 can I still use the Agent access own version 4.5 on clients? To perform the migration in several steps

    There is a StubAgent for version 4.8? or already included in the Agent 4.8? I install the StubAgent on all computers of the Bank, because they have no administrative rights.

    What is the best way to perform the upgrade of agents which does not affect users?

    Thanks in advance

    Eduardo Navas

    Hi Eduardo,

    Agent 4.5 is compatible with 4.8 CAM/CASE, although with a few restrictions:

    http://www.Cisco.com/en/us/docs/security/NAC/appliance/support_guide/agntsprt.html#wp52084

    For example, see also the following notes:

    "If you use version 4.8 of CAM/CASES with a version of the Agent plus early 4.8.0.32, then either use the requirement of the Distribution link or upgrade the Agent to the latest version to use the Distribution of files".

    "Cisco NAC Agent version 4.5.x is not supported by download version 4.6 (1) CAM because the structure of Agent installation files is different in version 4.5 (x) compared to the support in version 4.6 (1) agents."

    The NAC 4.8 agent has not any component necessary as the previous stub, for example:

    http://www.Cisco.com/en/us/docs/security/NAC/appliance/configuration_guide/48/cam/m_webagt.html#wp1473153

    Kind regards

    Fede

    --

    If this helps you or answers to your question if it you please mark it as 'responded' or write it down, if other users can easily find it.

  • Profiler in the NAC 2.1 to 3.1 upgrade

    Hi guys,.

    I'm setting up a Profiler from the NAC that accompanies 2.1 installed. I upgraded to 3.1, prayed and installed the license without any problems, but I always get this message: "ERROR: [2010-12-08 09:25:01 (main: 668)] valid no key not found [no such file or directory]" "

    The license file exists, and on the interface Web Profiler from the NAC, the State of the license is OK.

    A single line in the license file gives me this information: 'cisco 2.1 INCREMENT CCA-MANAGER countless Permanent '.

    Does anyone know if the license is linked with the version of Profiler?

    The upgrade from 2.1 to 3.1 is allowed or it is necessary to purchase a new license 3.1?

    Best regards

    Hello

    So I guess you spotted the problem here...

    You have a collector's license?

    You need 2 licenses: 1 to the server profile, and one for the collector.

    Basically, the mac address you provide is the same (eth0 ot Server Profiler), but you need a PAK Server Profiler to generate the license Server Profiler (the one you already have) and a PAK for license collector (which is missing).

    You have the collector PAK?

    If Yes, then just go to the license page and submit this PAK and the mac address.

    HTH,
    Tiago

    --

    If this helps you or answers to your question if it you please mark it as 'responded' or write it down, if other users can easily find it.

  • I have an upgrade question. I received a notification when I connected my computer to the internet that Lightroom 5.7.1 was available

    I have an upgrade question. I received a notification when I connected my computer to the internet that Lightroom 5.7.1 was available had merge to HDR & Panoramic photos. I can't find these. Where can I find them.

    It is unfortunate that Adobe has chosen to use the "update" in the notice inside LR 5. It is not an "update". It is an 'upgrade '. Thus, you pay if you want. Also as usual, Adobe directs clients to the CC solution and makes it hard to find perpetual license option.

  • Question of the NAC

    The NAC policy is run on a cisco switch. If a cisco switch not is connected to these cisco switches, NAC policy can be implemented on the switch cisco no?

    You can do that if you perform the mode in-band NAC deployment. You cannot apply the strategies on other cisco switches in tape mode.

    so if NAC is deployed in in-band mode, your answer is Yes.

    If nac is deployed in band mode, your answer is no.

  • Question about the license of the NAC

    Hi all

    In the past time, my company has bought server of the NAC with 250 user license. At the present time, my company has 300 users and the intention to expand the capacity of the server of the NAC.

    What I have to buy another server the NAC or simply by another license (for more than 300, e.g. 1000 users)?

    Thank you for your answer!

    See this link about the licenses.

    http://www.Cisco.com/en/us/prod/collateral/vpndevc/ps5707/ps8418/ps6128/prod_bulletin0900aecd805d0358.html

  • The NAC replacement procedure

    Hi Experts,

    Our 3315 NAC does not work because of a hardware failure. So let's replace that. Therefore kindly confirm the steps to take the backup and the procedure to install it?

    Thank you

    Kind regards

    Vijay.

    Since there seems to be no method to perform a backup of the CLI on the appliance 3315, we go the route of the workaround. This may seem a little out there, but the only way I can see a backup being created without using the WebGUI interface.

    First of all, you have IP access to the device of the ANC?

    If this isn't the case, quit reading and contact TAC.

    If you have backups of configuration in the past, they are stored in the/guest/bakcups directory and can be transferred via FTP, SFTP, etc...

    If not, then download a upgrade file that is newer than the version you are running (if you are running the latest version, download the upgrade file for this version). In this case, v2.1.  Transfer the file to your repository and run the upgrade on the comment of the NAC server.

    Note Before the 2.1 update, a snapshot backup of the existing 1.x or 2.0.x database is automatically created and stored in the guest.bak directory. In the case of an upgrade failure, Cisco recommends to make a local backup of this directory.

    http://www.Cisco.com/en/us/docs/security/NAC/guestserver/Release_notes/21/gsrn21.html#wp111257

    Otherwise, I am at a loss on this issue.

    Please rate useful messages and mark this question as answered if, in fact, does that answer your question.  Otherwise, feel free to post additional questions.

    Charles Moreton

  • The iPhone upgrade program

    I want to buy the new iphone 6s with carriers upgrade program. My question can I buy new iphone 6s with the program of upgrade of the carriers on the Fund, defended without down payment, how much its cost to me

    The iPhone upgrade program is an Apple program, not a program of carriers. If you want to use your carriers upgrade program, you communicate with them on their terms. Many U.S. carriers have programs to run, but you will need to check with them. Not knowing where you are, it is hard to say what your operators can offer.

  • Satellite A505-S6973 and the OS upgrade

    Users of computers laptop toshiba colleagues,.

    I'm here tonight to find out, my laptop has touchpad buttons and quickplay and wondering if I should upgrade my pc to Windows 7 I was able to use all these features (more eco and pc health monitor utility).

    I ask this because currently my pc has, which is supposed to be a hard disk of 500 GB, 317 GB of available hard disk space, but I barely information or documents stored on my system. I understand I have programs installed, but still for this amount.

    So, long story short, if I had to remove and install the Windows 7 operating system, and I installed the toshibha value added utility programs package and eco, that would be all I need to dload and install because I love this pc.

    Also can anyone with a Toshiba Satellite A505-S6973 tell me if they can smell it the breeze coming out of their laptop because my fan seems to blow slowly and always higher, the temperature on my system is currently 90% and 64% CPU TEMPERATURE FAN SPEED and I HAV my system set up to use low power.

    I enjoyed all the comments, suggestions and advice...

    I don't have a US mobile phone model and can't answer your second question, but I know with certainty that Win7 works well on the Satellite A500.
    Two months ago, I had the Satellite A500 friends home. Initially, it was pre-installed with Vista.
    I did two experiments to see how it works with Win7. First I updated it with the Toshiba upgrade kit and everything was OK.
    With the new installation of the OS, everything was OK also.

    Before Win7 installation please check Toshiba support page to make sure what version is fully supported. Here in Europe only Win7 64 bit is completely compatible.

Maybe you are looking for

  • C6300BD user manuals

    Can someone tell me where I can find the manual for my C6300BD-1TLAUS cable Modem

  • Table axis range error labview

    Hello I'm trying to programmatically set the chart to display a minute 30 or 60 minute range. I can do this by setting the following in a case manager properties, if the user presses a button to apply the settings of the map (with the display of abso

  • Windows Server 2003 Search / recent history?

    Does anyone know where these locations are on Win 2003 Enterprise that is recently sought + records recently open (they are still visible in the address of a folder bar), how can I find it? I tried to find their location but cannot and it seems to me

  • I have an e-mail message in Windows Live Mail which is stuck and are not sent.

    I run windows xp home edition. I have a message in live mail which continuously keeps trying to send, but fails. How can I break the loop? original title: stuck Message

  • How can a re - activate my volume icon

    On my taskbar notification section, the volume icon disappeared. When I go to restore or to turn it back on, it is said "this notification icon is not currently active." and doesn't let me go successively to on. Any suggestions?