Upgrade to Cisco acs 1120 to 4.2.1.15 help

Similar Questions

• The upgrade to Cisco ACS

  Hello.

  I would like to upgrade our current ACS NT Terminalserver edition server to a Win2000 server. Since this upgrade requires a fresh installation (since a direct upgrade from NT 4 TS to w2k is not the best thing to do). My question is, do I have to do to ensure that I can keep my user database active? Is replication the answer? And replication will make a copy of all the different users/groups/routers etc etc. In other words, I'll be able to do this upgrade without too much trouble?

  I speak here of a replication of the database, do not configure replication between servers ACS.

  Here is the doc that will help you to do this

  http://www.Cisco.com/univercd/CC/TD/doc/product/access/acs_soft/csacs4nt/csnt30/user/AE.htm

• authenticate the cisco WLC 5508 with cisco ACS 1120 (version 5.0) using GANYMEDE +.

  My installation has cisco WLC 5508 and ACS 1120 ver 5.0. How to authenticate users who access to the WLC via the ACS 1120 users GANYMEDE +. I am able to authenticate users for routers and cisco switches, but when I try the same for the CMT, it fails.

  Can someone explain please the config/basic steps that must be configured on both services ACS & WLC.

  You use plain vanilla 5.0 or have installed patches?

  the ACS 5.1 has new GANYMEDE related functionaity, including support for custom services and attributes. If they are necessary for the WLC yo need support it would improve.

  He could also relevant corrective patch from calendar 5.0 but I can't find any relevant specific at this stage CDETS

• The upgrade to Cisco ACS SE and Remote Agent

  Hello

  Currently we are upgrading the PDC to Windows Server 2008, Standard Edition R2.

  I am little confused with information available for upgrade scenarios. Appearing on the current working versions.

  Cisco ACS SE - version 4.1 Build 23 5 Patch 1

  Cisco ACS Remote Agent version 4.2 (0.124)

  The new operating system will work on 64-bit, I think that the current ACE SE and the remote agent can / must be upgraded.

  My existing versions, give the possible scenarios of upgrade available for me. After that upgraded SE and Remote Agent should work for the 64 bit OS.

  Thanks in advance!

  Yes, it is not possible to upgrade the ACS ACS 5.2 existing to level 4.1. They are two different boxes run on a different platform.

  Unfortunately ACS 4.x does not support windows 2008 r2.

  5.2 ACS is the only option left, and you will need to buy a new box of seprate with the new licnese for this.

  Concerning

  Bellefroid

  Note the useful messages

• CISCO ACS 5.7 upgrade

  Hello; I'm trying the upgrade of our ACS VM to 5.6 to 5.7 ACS servers. The file ISO, Tar 5.7 and basic Patch works very well. The question that we run into seems to be after each update rollup. The 'Show Application status ACS' shows that half of the process are in a "not monitored" State (management, View employment Manager, Manager of display-alert and View log-processor). Other services are in a running state.  Show "Stop and start GBA" or "Recharge" solves the problem. I am Inquiring on what I can do next. Thank you very much in advance

  Hello

  The bug that you mentioned is now resolved in patch 5 5.8 ACS

  http://www.Cisco.com/c/en/us/TD/docs/net_mgmt/cisco_secure_access_contro...

  Concerning

  Gagan

  PS: Please write it down as correct if it helps!

• Connection Error 1120 ACS cisco acs 5.0 web gui

  Hi all

  I installed the unit acs 1120 as follows

  entered in the installation in console mode command

  aiinstalle licensevia gui mode

  But when I access the gui mode it disconnect regularly

  When I ping ping is successful and shows life 128

  but after some time, the connection is estabalished and when I ping the TTL shows 64

  can someone help with this problem

  Thank you very much

  Hello

  I couldn't quite follow the description of your problem. Can clarify you the problem more in detail.

  You then mention access to the ACS GUI mode it to disconnect regularly. You lose any IP to GBA connectivity, or is the problem only through the user interface?

  Please can you include ACS cli:

  view the status of the acs application
  See the version

  Show tech

  Would also be relevant to see the output of 'display the acs application state"when the problem occurs.

  Additional troubleshooting, the support beam will also relevant information during problem occurrence timestamp. You need to enable the debug logs, for ex:

  GBA cli:
  admin #conf t
  exploitation forest admin (config) # loglevel 7
  exit admin (config) #.
  # acs admin - config
  After a few seconds,.
  You can then log in with the credentials of user/password for GUI of the CSA name.

  acsadmin(config-ACS) # debug level mgmt-acsview of-journal of debugging

  acsadmin(config-ACS) # debug level to debug-log duration
  output acsadmin(config-ACS) #.

  Following the appearance of the problem, the support beam then downloadable GUI Monitoring & Report Viewer > troubleshooting > ACS support Bundle.We will need to check on the timestamp of the problem newspapers.

  But for now, more details about the problem seem necessary as well as the output display orders of cli ACS mentioned above.

  Thank you

  Alex

• Upgrade CSM and ACS

  1. cisco ACS /Solution Engine, according to me, the dedicated device, unknown version)

  2 cisco Security Manager 3.1

  Are updates possible, or buy the latest version of the product is the only way out?

  What do we need for the upgrade?

  Are there specific codes or new need to buy new products?

  In case of purchase of new products, which are the configurations?

  Your response will be appreciated.

  The GBA unit has been released with at least three different major versions - 3.x, 4.x and 5.x. If you have ACS 4.2 on a device of 1120, you can proceed to the last (5.3) on the same hardware. Anything else will be require a new device (or use a VM solution).

  Please see guide to orders and the migration guide for this information.

  For the CSM, to upgrade you would need to go to 3.3. First, then to the current version of CSM (4.2). The necessary licenses are described in this product bulletin.

  It would probably be easier and more own just build a new facility in both cases. Architecture products both db schema have changed significantly. The SKU upgrade probably will save in licensing fees, even though the two products have undergone changes in how they are allowed.

  Note that CSM will come out with a new version 4.3 more later this spring.

• Brand new ACS 1120

  -Very well,.

  my company bought an ACS 1120, no SMARTNET support of course, and I'm getting ready to deploy.

  I literally got out of the box and he turned...

  in the box came several CD/DVD which is ACS 4.1 for windows;  4.2 for windows; and who has a copy of a Windows Server (looks like a special version, I am writing this post from home and do not have the CD in front of me, sorry)...

  My question is simple, I do TEU cross the guests of initial installation?  Is it necessary to start 4.1 and upgrade I'm going (that is to say... 4.2 and 5.0)?  Or can I go straight to 5.0?

  Bruce

  If your goal is to have ACS 5.X running, then go right, download 5.1 ACS, which has most ACS 4.X features.

  http://www.Cisco.com/en/us/docs/net_mgmt/cisco_secure_access_control_system/5.1/release/notes/acs_51_rn.html#wp71092

  If I'm wrong that your 1120 should already be running 5.0 ACS... not, but just in case you should also be able to download the DVD of EAC:

  ACS 5.1:

  http://download-SJ.Cisco.com/SWC/ESD/03/crypto/3DES/282773289/contract/ACS_v5.1.0.44.ISO

  ACS 5.0:

  http://download-SJ.Cisco.com/SWC/ESD/03/crypto/3DES/282382303/contract/ACS-5.0.0.21.ISO

  You will need a valid license for ACS 5.X, which will have to be made by the team for approval.

  http://www.Cisco.com/en/us/docs/net_mgmt/cisco_secure_access_control_system/5.1/release/notes/acs_51_rn.html#wp114337

  If you prefer, you can stay with ACS 4.2; you need to intall the "ACS 42. s/w for device cisco 1120', this kind of ACS will be preinstalled with the operating system and you can not access the OS.

  http://www.Cisco.com/en/us/docs/net_mgmt/cisco_secure_access_control_server_for_solution_engine/4.2/installation/guide/solution_engine/prepap.html

  4.2 ACS ACS 5.X migration is not recommended because they are completely different breads!

  http://www.Cisco.com/en/us/docs/net_mgmt/cisco_secure_access_control_system/5.0/user/guide/migrate.html#wp1052577

  HTH,

• Cisco ACS server

  Hello

  I currently have a Cisco ACS 3.3 Server. I want to upgrade the server to the latest version and cluster with one another so that we can have a redundant infrastructure because if one fails it also includes...

  Can provide you a solution for this?

  Thank you

  Hello

  The latest version is 4.1 ACS. You can upgrade 3.3.3 build 11 directly to 4.1.

  Then, you can install an another ACS 4.1 on a different machine and replication configuration between these two. In this way, you will need to make changes to only one that ACS and the secondary will be automatically updated.

  Once these two are defined, you can set both of these servers as a server Radius/Ganymede on devices and there will be a redundancy.

  Kind regards

  Vivek

• Cisco ACS and the domain controller

  Hello

  We are currently using the Cisco ACS 3.2.3.11 solution engine and using a Windows domain as a remote agent controller.

  We now have the ACS to 4.1

  1. do I need to upgrade the remote agent on the domain controller as well?

  2. any computer on the network can be used as a Distribution Server?

  3. after an initial backup and upgrade then to 3.3.3.3 I make another backup before the upgrade to 4.1?

  You can use any PC in the network as a Distribution Server.

• Upgrade of the ACS

  Hello

  We have an existing ACS running 4.1.4.13 and bought a new device running 4.1.1.23. I understand that for replicate that they must be the same version. Can someone please clarify 4.1.1.23 upgrade path? What I have to ask the TAC software or is it here -http://www.cisco.com/cgi-bin/tablebuild.pl/acs-soleng-3des ?

  TIA

  Some downloads/upgrades software Cisco requires additional access / valid Service contract. Using this contract would you give access to most of the tools and to encrypted software.

  To learn more about the Cisco service contract to choose from the following options:

  (a) contact your Cisco team account if you have a Direct purchase agreement.

  (b) contact a Cisco partner or reseller to purchase a service contract:

  http://Tools.Cisco.com/WWChannels/LOCATR/JSP/partner_locator.jsp

  (c) use the Profile Manager to update your Cisco.com profile and request the association of the service agreement:

  http://Tools.Cisco.com/RPF/profile/edit_entitlement.do?tab=3

  (d) you can also contact your Cisco representative or Manager of Cisco accounts for more details

  Cisco provides a warranty period, where you can get the software. However to gain access to the software, you need to contact TAC by using the following link http://tools.cisco.com/ServiceRequestTool/create/launch.do for further assistance. They would be able to help you the best.

• restore the configuration of the cisco ACS 1121 ver 5.2 to SNS 3425 ver 5.6

  Dear all,

  We currently have Cisco ACS 1121 ver 5.2 in our production, then we will replace it with the new devices using SNS 3425 ver 5.6.

  Please good to want to help someone can tell you how to restore all the old configuration of devices (ACS 1121 ver 5.2) for the new Member States?

  Best regards

  Yudibagam

  Hello! You must upgrade the current device to a min of v5.4 for restoration work and be supported.

  http://www.Cisco.com/c/en/us/TD/docs/net_mgmt/cisco_secure_access_control_system/5-6/release/notes/acs_56_rn.html

  However, if you're going to go through the upgrade problems then I would say that you upgrade all the way to 5.6 just to be sure :)

  I hope this helps!

  Thank you for evaluating useful messages!

• Cisco ACS 5.1 and RSA Authentication Manager 6.1

  Hi all

  We recently had a Cisco Secure ACS 1120 and I improved the Unit 5.1 5.0 with all your support

  Now, I need to integrate Cisco ACS 5.1 with RSA Authentication Manager 6.1. I have config file of RSA ACE Server successfully downloaded and exported to 1120 ACS.

  I also added as NetOS Agent ACS in the RSA server during the process, I found a few warnings. The ACE Server is not able to resolve the IP address to the name (is it necessary?).

  I have not created any file of secret key for communication between FAC and RSA and I used encryption is FOR.

  Now, when I log into ACS and search for devices in the identity store sequences I am not able to get Sever Token RSA.

  Let me know what was wrong, where can I fix and also please tell me what is the communciaction between the RSA and ACS?

  Hoping that you guys help me as usual when I'm in a hurry...

  Sree

  Were you able to successfully create the RSA identity server. After selecting the sdconf.rec and you press on submit what happened? The RSA instance created OK?

  If you go to

  Users and identity stores > external identity stores > RSA SecurID Token servers, what do you see in the list?

• Cisco ACS 3.1 and Logging of Nortel Passport CLI commands

  Good afternoon

  We try to log commands CLI Cisco ACS version 3.1 of Nortel Passport 8600. The version of the code that runs on the Passport does not support Ganymede +.

  Passports authenticate OK but don't sign any order information. I "think" the problem is maybe that the VSA Radius of Nortel for cli-commands-attribute, 195, is not collected by ACS.

  Does anyone know how I would go to get this added to the existing list of Radius (Nortel) VSA?

  Thank you very much

  Kind regards

  Flett.

  Foisy,

  You must add the attribute Nortel 193-195 to activate the posting of the order.

  Unfortunately you can't download on code 3.x, you will need to upgrade acs to the 4.x code.

  Kind regards

  ~ JG

  Note the useful messages

• Cisco ACS installation problem

  Hello everyone.
  I have Cisco acs 4.2 on windows 2008 64 bit installation and get a very strange error when installing. V: ismg_israel_acs it gives some encryption error.
  Can someone please help me on this who have encountered the same problem. My project is stopped cause of it.
  Thanks in advance.

  Sent by Cisco Support technique Android app

  Hi Rizwan,

  If you're upgrading some version prerequisites ACS then I think you get something like this V:\ismg_israel_acs\Acs\Crypto\init.cpp

  You need to locate the old CryptoAPI container used by ACS, which may still be on the system.  This is normally located in C:\Documents and Settings\username that installed ACS> \Application\Data\Microsoft\Crypto\RSA.

  There will be one or more files will be very long filenames hexdecimal. You must identify the right one.

  Open a command prompt in that folder and type "findstr /I CiscoSecure *.» ' * ' - the file name that appears should be the

  old container of ACS.

  Let me know if you will be able to search for any file.

  ~ BR
  Jatin kone

  * Does the rate of useful messages *.