topic what is the use of status field in ACS 5.3 in Network Access Control

what is the use of status field in ACS 5.3

kerim mohammed — Mon, 11 Mar 2019 02:23:57 GMT

users whose status is manually disabled don not have difficulty in authenticating and access managing nework devices. that makes me wonder what is the difference between status enabled and disabled?

Thanks,

Kerim

what is the use of status field in ACS 5.3

Tarik Admani — Wed, 08 Aug 2012 20:08:26 GMT

Kerim,

I wanted to know how you are authenticating the clients. If you look at the report does it point to the internal database?

Thanks,

Tarik Admani
*Please rate helpful posts*

what is the use of status field in ACS 5.3

kerim mohammed — Wed, 08 Aug 2012 20:27:00 GMT

Hi Tarik,

I see what you mean. we are using sequential identity datastore. at the top of the sequence is RSA server followed by internal users. so if user is not found in RSA server fails to internal DB. for users on internal DB, the status field matters! for users on RSA server, the status field don't matter.

Re: what is the use of status field in ACS 5.3

kerim mohammed — Wed, 08 Aug 2012 20:38:57 GMT

Tarik,

i attached screenshot of reports. jut fyi.. and thanks as usual.

Re: what is the use of status field in ACS 5.3

Tarik Admani — Wed, 08 Aug 2012 20:45:59 GMT

That is correct, are you testing with kerimtest? Because that looks like it is passing and failing, but I can see the timestamp.

Tarik Admani
*Please rate helpful posts*

Re: what is the use of status field in ACS 5.3

kerim mohammed — Wed, 08 Aug 2012 20:52:10 GMT

yes, that is my internal user test account. things seem to be going fine. am in the process of installing secondary instance. i think am going to need separate license. is that right?

what is the use of status field in ACS 5.3

Tarik Admani — Wed, 08 Aug 2012 21:21:03 GMT

Yes you will need a seperate license to join this ACS to the primary ACS.

Tarik Admani
*Please rate helpful posts*

Re: couldn't register the secondary to the primary

kerim mohammed — Mon, 13 Aug 2012 20:49:55 GMT

hi Tarik,

i installed the secondary ACS server. i truied to register this to the Primary. i gave the IP Address(DNS not yet configured) and acsadmin password. but the registeration timesout saying either wrong IP address or wrong username and password. fyi, we allowed only TCP port 2638. we didn't open other ports like TCP61616, TCP2020 and TCP2030 and UDP20514. kind of stickt environmnet. am using the web login credentials as opposed to the CLI credential. please, let me know what could be causing this failure

Re: what is the use of status field in ACS 5.3

Tarik Admani — Mon, 13 Aug 2012 20:53:47 GMT

You need all the ports open for this to work. You also need dns with ptr records for this to work also. Please look make sure these are in place and try again.

Sent from Cisco Technical Support iPad App

Re: what is the use of status field in ACS 5.3

kerim mohammed — Mon, 13 Aug 2012 21:25:57 GMT

can you tell me why we need these TCP pors (2020 and 2030). we don't have voice network.

Thanks

Re: what is the use of status field in ACS 5.3

Tarik Admani — Mon, 13 Aug 2012 21:30:37 GMT

Kerim,

This is not for voice calls, the calls in this context is referring to the RMI processes:

http://www.javacoffeebreak.com/articles/javarmi/javarmi.html

Thanks,

Tarik Admani
*Please rate helpful posts*

Re: what is the use of status field in ACS 5.3

kerim mohammed — Mon, 13 Aug 2012 21:34:55 GMT

thanks tarik!

Re: what is the use of status field in ACS 5.3

kerim mohammed — Mon, 13 Aug 2012 21:42:07 GMT

Tarik,

Things changed a bit. previously TCP port 2000 is all you need for database replication. now a bunch of ports. i used to be java programmer. infact certified java programmer. look at me know (asking about RMI). i will request DNS entry and also firewall ports to be opened and will give it a shoot tomorrow.

thanks Tarik.

Re: what is the use of status field in ACS 5.3

kerim mohammed — Tue, 14 Aug 2012 14:52:25 GMT

Hi Tarik,

the PTR recods created and the required ports opened (TCP 2638,61616,2020,2030,UDP 20514) unidirectional (from primary to secondary. i used both the CLI and web login credentials (not sure which one i should be using). still no success of registering the secondary to primary. is there some change to made on the primary as a first step? anything i can be missing?

thanks,

kerim

Re: what is the use of status field in ACS 5.3

Tarik Admani — Tue, 14 Aug 2012 15:11:26 GMT

Can you please try port 443 also, please make sure that the ports are open in both directions.

Also is there an existing secondary node entry on the primary deployment page? If so, please delete that and try again.

Thanks,

Tarik Admani
*Please rate helpful posts*

Re: what is the use of status field in ACS 5.3

kerim mohammed — Thu, 16 Aug 2012 14:39:40 GMT

Hi tarik,

unfortunately, our VMs running acs5.3 were not thick provisioned. was informed by Cisco TAC that the VMs had to be thick provisioned and i have to re-install acs5.3. my concern is, will this affect licensing in anyway? will i be able to use the license generated originally or will have to regenerate them?

thanks,

Kerim,

what is the use of status field in ACS 5.3

Tarik Admani — Thu, 16 Aug 2012 15:05:49 GMT

Kerim,

If you take a backup and rebuild your virtual machines you should be able to restore with the licenses and all the application configuration. *command is acs backup repository "

Thanks,

Tarik Admani
*Please rate helpful posts*

Re: what is the use of status field in ACS 5.3

kerim mohammed — Thu, 16 Aug 2012 15:06:08 GMT

hi Tarik,

while you are at it, i want ot ask you about patching acs servers. i used "patch install" CLI command to install cumulative patch. it asks for file name and remote repository name. i gave it the patch name 5-3-0-40-3.tar.gpg and also the remote tftp user which i use for inceremental backup and for patching too. But, i keep on getting this error message % Manifest file not found in the bundle. can you help with this as usual?

thanks,

Kerim

what is the use of status field in ACS 5.3

Tarik Admani — Thu, 16 Aug 2012 15:09:06 GMT

The command you want to run when installing a patch is 'acs patch install...' and you need to use a ftp server, I was never able to get the patch installed using a tftp repository.

Thanks,

Tarik Admani
*Please rate helpful posts*

what is the use of status field in ACS 5.3

kerim mohammed — Thu, 16 Aug 2012 16:00:01 GMT

thanks tarik!

what if i choose to no to back up abd rather use clean install. will that cause problem related to licensing?