topic Re: ACS 3.1 replication issue(about NAR) in Network Access Control

ACS 3.1 replication issue(about NAR)

victorchen — Fri, 21 Feb 2020 18:07:02 GMT

Hi..I got a problem of ACS 3.1replication, each time when server A replicated to sever B, the NAR (network access restriction) that in server B appeared "??? "question mark in AAA client column. for example: "ap340" become "ap340???", As the result, the clinets within the group can not find correct NAR, therefore all users were be deny.

Can anyone give me some sloutions for this problem?

Regards Victor Chen

Re: ACS 3.1 replication issue(about NAR)

msitzman — Fri, 06 Jun 2003 13:37:01 GMT

Hi,

Take a look at the replication configuration on server A. Do you have all of the boxes checked for what information to replicate? It may be referencing data that was not replicated. I would set the service control logging to full and review the logs after the replication to see if there were any errors during the replication that prevented certain information from being replicated.

Hope this helps,

Marcus

Re: ACS 3.1 replication issue(about NAR)

victorchen — Wed, 11 Jun 2003 00:11:42 GMT

Could any ACS experts answer my question? I will appreciate your help. Thank you very much.

Re: ACS 3.1 replication issue(about NAR)

mhoda — Wed, 11 Jun 2003 05:20:03 GMT

Hi,

Provided your replication log doesn't show any error messge, my suggestion would be to restore the database from the primary one (not using replication) using the following methods:

On the primary:

System Configuration -->ACS Backup-->Specify the path of the .dmp file and then do a manual backup.

On the secondary:

System Configuration -->ACS System Restore-->Specify the .dmp file directory path that you got from the primary one.

It seems that you acs db on the secondary one somehow got corrupted.

If you don't like the above method, this is what probably you may try:

on the secondary server you can recreate the database from scratch as follows:

net stop csauth

CSUtil.exe -n

net start csauth

http://www.cisco.com/en/US/products/sw/secursw/ps2086/products_user_guide_chapter09186a008018494c.html#89

Then replicate from the primary one. This will eliminate the possibility of corruption in database on the secondary server. THERE IS NO BUG ON ACS 3.1 as far as the NAR replication goes. Thanks,

Mynul

Re: ACS 3.1 replication issue(about NAR)

victorchen — Fri, 13 Jun 2003 01:25:57 GMT

Dear Mynul

I had tried your method of recreate the database, unfortunately it didnt work. I am sure my database didnt get corrupted before. Therefore, in this case, I suppose it could be some bugs in ACS 3.1. By the way, could you tell me where can I got beta ACS 3.2 for test.

Regards Victor

Re: ACS 3.1 replication issue(about NAR)

victorchen — Wed, 18 Jun 2003 07:34:13 GMT

Finally, I resovled this problem. The user even though using english version windows 2000 server platform, but he ticked the Traditional Chinese option in the language setting for the system of Regional Option form. That's why everytime after replication, it produced "???" in NAR.

best regards Victor Chen

Re: ACS 3.1 replication issue(about NAR)

mhoda — Thu, 19 Jun 2003 04:23:50 GMT

Dear Victor,

This is great info.. But not sure why it turned Traditional Chinese option ON? Anything special?

Thanks,

Mynul