The NAC upgrade

Hello

Could you tell me the best way to upgrade software of cisco nac 4.1.3 to 4.7.2. What key questions I am likely to encounter when I do the upgrade?

Concerning

Prasanth Mathews

Prasanth,

You will need to go to 4.5.x or 4.6.x and then jump from there to 4.7.2. Be sure to only perform backups along the way.

Full details here: http://tinyurl.com/2bymy9q

HTH,

Faisal

Tags: Cisco Security

Similar Questions

  • The NAC upgrade question

    I intend to improve our systems SCS and CAM version 4.6.1 to 4.7.2. The documentation states that "Cisco recommends that you do not perform this procedure to upgrade via an SSH connection, because the steps needed to restart the appliance during the upgrade process will cause your lost connection."

    Is the only concern with the help of SSH that you will lose your connection and the need to reconnect (and possibly miss some messages in the console), or is there something in the upgrade, which can be a console connection?

    My CASE systems are 65 miles away and forced to dig between locations will increase the window for a potential failure.

    We met our CAM and ea 2. CASE until 4.7.2 with SSH only, no access console. Not always the best idea (in this case for some reason you NEED it), but it can be done completely via SSH for orders and SCP for file transfer.

  • The NAC Agent autoUpgrade ISE possible?

    Hi all

    I have this:

    802.1 x-window with the NacAgent version (say 1) <---->802. 1 x switch active (RADIUS aaa OK) <------>ISE and AD on the same LAN

    ISE is configured for client provisioning with hardware (NacAgent version 2) downloaded from Cisco's Web site (as described in the documentation)

    I have a basic plan of authentication and authorization that allow me to well but I expect the NACAgent to be upgraded.

    No profiling is configured at the moment.

    Is that someone can help?

    Best regards?

    Hello

    In the ISE settings provisioning client, activate you the option where the NAC upgrade agent is required. However, it is to you to run updates perioidic and map the most recent agent in the configuration of the parameters of the client.

    Thank you

    Tarik Admani
    * Please note the useful messages *.

  • Upgrade the NAC of 4.5 to 4.8

    Hello everyone

    I'm about to upgrade to a CNA of 4.5 to 4.8 on an application I do in a bank with 1500 users. The upgrade is due because the Bank makes its migration from PC to Windows 7

    The implementation is in a failover situation (2) and (2) CAM. the design is Out of Band, a virtual gateway and integration with a wireless LAN controller.

    I would like to know if when I upgrade the CAM and CAS´s for version 4.8 can I still use the Agent access own version 4.5 on clients? To perform the migration in several steps

    There is a StubAgent for version 4.8? or already included in the Agent 4.8? I install the StubAgent on all computers of the Bank, because they have no administrative rights.

    What is the best way to perform the upgrade of agents which does not affect users?

    Thanks in advance

    Eduardo Navas

    Hi Eduardo,

    Agent 4.5 is compatible with 4.8 CAM/CASE, although with a few restrictions:

    http://www.Cisco.com/en/us/docs/security/NAC/appliance/support_guide/agntsprt.html#wp52084

    For example, see also the following notes:

    "If you use version 4.8 of CAM/CASES with a version of the Agent plus early 4.8.0.32, then either use the requirement of the Distribution link or upgrade the Agent to the latest version to use the Distribution of files".

    "Cisco NAC Agent version 4.5.x is not supported by download version 4.6 (1) CAM because the structure of Agent installation files is different in version 4.5 (x) compared to the support in version 4.6 (1) agents."

    The NAC 4.8 agent has not any component necessary as the previous stub, for example:

    http://www.Cisco.com/en/us/docs/security/NAC/appliance/configuration_guide/48/cam/m_webagt.html#wp1473153

    Kind regards

    Fede

    --

    If this helps you or answers to your question if it you please mark it as 'responded' or write it down, if other users can easily find it.

  • Profiler in the NAC 2.1 to 3.1 upgrade

    Hi guys,.

    I'm setting up a Profiler from the NAC that accompanies 2.1 installed. I upgraded to 3.1, prayed and installed the license without any problems, but I always get this message: "ERROR: [2010-12-08 09:25:01 (main: 668)] valid no key not found [no such file or directory]" "

    The license file exists, and on the interface Web Profiler from the NAC, the State of the license is OK.

    A single line in the license file gives me this information: 'cisco 2.1 INCREMENT CCA-MANAGER countless Permanent '.

    Does anyone know if the license is linked with the version of Profiler?

    The upgrade from 2.1 to 3.1 is allowed or it is necessary to purchase a new license 3.1?

    Best regards

    Hello

    So I guess you spotted the problem here...

    You have a collector's license?

    You need 2 licenses: 1 to the server profile, and one for the collector.

    Basically, the mac address you provide is the same (eth0 ot Server Profiler), but you need a PAK Server Profiler to generate the license Server Profiler (the one you already have) and a PAK for license collector (which is missing).

    You have the collector PAK?

    If Yes, then just go to the license page and submit this PAK and the mac address.

    HTH,
    Tiago

    --

    If this helps you or answers to your question if it you please mark it as 'responded' or write it down, if other users can easily find it.

  • Help the NAC OOB Windows SSO

    We have just upgraded to Windows 2003 AD to Win2k8 R2 and Single Sign it has stopped working. Authentication works very well, but the NAC agent does not use the Windows credentails. Users must enter their user name and password manually.

    The AD server is a new server but has the same IP addresses as the old man. I'm running the CAM/CASE 4.7.2.

    Gregg

    Gregg,

    2 k 8 does not by default, so I suspect that is where it's a failure. Please look at the following sections and rerun ktpass (on a new user preference) as shown in the link:

    http://www.Cisco.com/en/us/docs/security/NAC/appliance/configuration_guide/47/CAs/s_adsso.html#wp1257882

    HTH,

    Faisal

    --

    If you find this article useful, please note so that others can easily find the answer

  • Reuse the material of the NAC

    Is is possible to reuse our equipment of the NAC Server and Manager 3310 with ISE?

    Hello

    You cannot reuse the NAC 3310, the 33 x 5 and 1121 ACS are the platforms supported for ISE. However existing customers have benefits for the upgrade to ISE. Please join your Cisco partner and if you don't practice you can reach for me and I can help you.

    Thank you

    Tarik Admani
    * Please note the useful messages *.

  • Problem of the NAC - Agent is a disconnect

    Hello

    We have a problem with the NAC in mode virtual outofband.

    AD SSO, sanitation, everything is working, but the strange things happening: after awhile, when downloading large files, Agent connects to the formula of network users, and the registration process is restarted.

    I disabled the pulsation clocks and timers, session, but we still have a problem.

    Also, while sniffing traffic on the switch port, I noticed that after have correctly connected you to the own Cisco Agent network always send traffic to UDP Port 8905. Is this a normal behavior?

    I noticed problems with this version of the agent causing connections to give up intermittently. I would upgrade to agent v4.1.3.1.

  • The NAC replacement procedure

    Hi Experts,

    Our 3315 NAC does not work because of a hardware failure. So let's replace that. Therefore kindly confirm the steps to take the backup and the procedure to install it?

    Thank you

    Kind regards

    Vijay.

    Since there seems to be no method to perform a backup of the CLI on the appliance 3315, we go the route of the workaround. This may seem a little out there, but the only way I can see a backup being created without using the WebGUI interface.

    First of all, you have IP access to the device of the ANC?

    If this isn't the case, quit reading and contact TAC.

    If you have backups of configuration in the past, they are stored in the/guest/bakcups directory and can be transferred via FTP, SFTP, etc...

    If not, then download a upgrade file that is newer than the version you are running (if you are running the latest version, download the upgrade file for this version). In this case, v2.1.  Transfer the file to your repository and run the upgrade on the comment of the NAC server.

    Note Before the 2.1 update, a snapshot backup of the existing 1.x or 2.0.x database is automatically created and stored in the guest.bak directory. In the case of an upgrade failure, Cisco recommends to make a local backup of this directory.

    http://www.Cisco.com/en/us/docs/security/NAC/guestserver/Release_notes/21/gsrn21.html#wp111257

    Otherwise, I am at a loss on this issue.

    Please rate useful messages and mark this question as answered if, in fact, does that answer your question.  Otherwise, feel free to post additional questions.

    Charles Moreton

  • lost or stolen iPhone. It is w / 'Find my iPhone', later received email that it has been found. No call and impossible to recover, now phone is in offline mode. I am leasing through the iPhone upgrade program. Help, please.

    6 sec more lost/stolen iPhone. Turned on the 'lost' Mode and displays the number to call if found on-screen. It is w / "Find my iPhone", went up, no response from any home in the area. Later received an email that it was found, still no call to the number on the screen. Several unsuccessful attempts to get it back, now the phone is in offline mode and says that the history of the site is not available. I left a note on all the doors in the place indicated on the "find my iPhone" describing my phone lost and left a number to call. I am leasing through the iPhone upgrade program. Help, please.

    There is no way to locate now, unless the one who found it exerts a force on you contact on this number you posted

    The good news is, since you have find my iPhone, they will not be able to reuse the phone even if they are trying to restore. Unless they know your password, or you have a valid proof of purchase AGFI won't be deleted.

    So if the person who found the phone knows about it, he or she would rather go back because it would be of no use to them.

  • The iPhone upgrade program

    I want to buy the new iphone 6s with carriers upgrade program. My question can I buy new iphone 6s with the program of upgrade of the carriers on the Fund, defended without down payment, how much its cost to me

    The iPhone upgrade program is an Apple program, not a program of carriers. If you want to use your carriers upgrade program, you communicate with them on their terms. Many U.S. carriers have programs to run, but you will need to check with them. Not knowing where you are, it is hard to say what your operators can offer.

  • Since the last 'upgrade' my iPad does not connect to my Bluetooth from Sony speakers.  I restarted everything.  I have not matched the speaker, and then paired again, nothing. The iPad said they are connected, but not sound and the machine keeps spinning.

    My iPad mini links is no longer in my Bluetooth from Sony speakers since the last 'upgrade' to iOS.  I rebooted the iPad.  I unpaired and repair the speakers.  Showes Bluetooth as connected but the train continues spinning saying: it is always looking for devices even though it says it has paired with speakers.   Any suggestions?  and Yes, the volume is rising.

    Tap settings > general > reset > reset all settings and restart your iPad then re "pair" speakers.

  • My apple ID became invalid after the recent upgrade to ios 9.3

    My apple ID became invalid after the recent upgrade to ios 9.3. What can I do to reactivate the ID? I tried to reset my password several times even.

    For now, I am unable to pay for anything because I can't access the function of apple on the phone pay.

    Hello

    Follow the instructions here, include a link to get help from Apple with your Apple ID:

    If your identifier Apple is locked - Apple supports

  • Satellite Pro L300 - Trouble you sign up for the free upgrade to Windows 7

    I just bought a Toshiba Satellite Pro L300 and informed me that I qualify for the free upgrade to Windows 7.
    However, whenever I try and enter the SN ID, I get the message "SNID not allowed!
    I left 3 messages with Teck Wah (the company that manages this update for Toshiba) and no return call yet.
    No idea how the model number and serial are supposed to be cited when I complete the registration form online?
    Thank you.

    Hello

    What Satellite Pro L300 laptop, you have exactly or let's say what is the model number of this laptop?
    I checked books upgrade of Windows 7 supported and only laptop PSLB9E is supported for this upgrade.
    Check it!

    Additionally, make sure that you typed in the right massword. Check this again once, maybe you have mixed up a few letters.

  • Satellite A505-S6973 and the OS upgrade

    Users of computers laptop toshiba colleagues,.

    I'm here tonight to find out, my laptop has touchpad buttons and quickplay and wondering if I should upgrade my pc to Windows 7 I was able to use all these features (more eco and pc health monitor utility).

    I ask this because currently my pc has, which is supposed to be a hard disk of 500 GB, 317 GB of available hard disk space, but I barely information or documents stored on my system. I understand I have programs installed, but still for this amount.

    So, long story short, if I had to remove and install the Windows 7 operating system, and I installed the toshibha value added utility programs package and eco, that would be all I need to dload and install because I love this pc.

    Also can anyone with a Toshiba Satellite A505-S6973 tell me if they can smell it the breeze coming out of their laptop because my fan seems to blow slowly and always higher, the temperature on my system is currently 90% and 64% CPU TEMPERATURE FAN SPEED and I HAV my system set up to use low power.

    I enjoyed all the comments, suggestions and advice...

    I don't have a US mobile phone model and can't answer your second question, but I know with certainty that Win7 works well on the Satellite A500.
    Two months ago, I had the Satellite A500 friends home. Initially, it was pre-installed with Vista.
    I did two experiments to see how it works with Win7. First I updated it with the Toshiba upgrade kit and everything was OK.
    With the new installation of the OS, everything was OK also.

    Before Win7 installation please check Toshiba support page to make sure what version is fully supported. Here in Europe only Win7 64 bit is completely compatible.

Maybe you are looking for

  • Unwanted calendar synchronization.

    My friend used my mac to check his gmail. Later, I noticed that his events seem to have been migrated to my mac calendar. How do I: (a) ensure that it is more connected / synchronization. (b) to remove its events from my calendar, and (c) prevent thi

  • Chrome may be a substitute satisfactory for Firefox on Windows 2000?

    Firefox recommends Opera for a replacement. Chrome would be as good a substitute for Windows 2000 Pro

  • Why iTunes not the poster that my second apple TV is connected as wel?

    I have the latest iTunes and 2 apple tv, s. The first apple tv the second kind off the first set, it is displayed in iTunes. But the other a type series 3 is connected but can only be seen in iTunes. If you are unable to switch between them.

  • Is it better to slow down the DVD recorder for best results?

    I read somewhere that it is better to slow down your burner DVD 16 x, 2 x or 3 x for best results. Isn't anyone agree with this? I burned several disks now and had trouble with them. (using less expensive DVD-R discs) I also heard that I should use D

  • Photosmart C7180 scan to PDF

    Recently I formatted my hard drive and reinstalled everything. I am running Windows XP Pro with SP3 and I downloaded the latest software for my all-in-one Photosmart C7180. I used to be able to scan a document to PDF using Adobe Standard 7, but I can