topic Re: Upgrade from ACS4.2 to 5.1 in Network Access Control

Upgrade from ACS4.2 to 5.1

hanwucisco — Mon, 11 Mar 2019 01:41:25 GMT

We only need to the Local User info to be transferred to the Ver5.1. Is there anyway you can do it?

thanks,

Han

Upgrade from ACS4.2 to 5.1

jrabinow — Thu, 05 Jan 2012 17:40:38 GMT

ACS 5.1 has a migration utiliity that can transfer internal users from ACS 4.2

Alternatively, ACS 5.1 has an import capabiltiy for internal users where the users are defined in a csv file

In this case need to extract the data from 4.2 and massge to the right file format for import

Re: Upgrade from ACS4.2 to 5.1

hanwucisco — Thu, 05 Jan 2012 18:01:28 GMT

Where in 5.1 do you find the function that imports CSV? Aslo, in 4.2, are you refering to "ACS system backup setup"? I dont find there is any choice that you can select only the Internal user.

thanks,

Re: Upgrade from ACS4.2 to 5.1

jrabinow — Thu, 05 Jan 2012 18:36:17 GMT

Go to Users and Identity Stores > Internal Identity Stores > Users

and Press the File Operations option

Re: Upgrade from ACS4.2 to 5.1

hanwucisco — Thu, 05 Jan 2012 18:41:22 GMT

I am now looking at 4.2, is it in "ACS system backup setup"? if it is, the file is dmp. how can you converter it?

thanks,

Han

Re: Upgrade from ACS4.2 to 5.1

camejia — Thu, 05 Jan 2012 18:52:19 GMT

Hello,

When Jonny referred to the Import feature of ACS 5.x using CSV files, the CSV file has to be created manually. The ACS 4.x does not have a feature to export the Internal Users to a .csv file that you can then import to ACS 5.x.

If you are looking to migrate to the new ACS 5.x you can check:

http://www.cisco.com/en/US/partner/docs/net_mgmt/cisco_secure_access_control_system/5.2/migration/guide/Migration_support.html

Hope this helps.

Regards.

Re: Upgrade from ACS4.2 to 5.1

hanwucisco — Thu, 05 Jan 2012 19:06:29 GMT

Your link is forbidden. So can you tell me how to create CSV file manually?

thanks

Re: Upgrade from ACS4.2 to 5.1

camejia — Thu, 05 Jan 2012 19:34:33 GMT

Hello,

Under the ACS 5.x GUI > Users and Identity Stores > Internal Identity Stores > Users > Click File Operations:

On the New Window click Next > Click Download Template:

The template include the required attributes in order to create a valid .csv file for the ACS to import it. I have attached an example that imports one Internal ACS User called "aaauser" which is "enabled" and has the password and enable password set to "cisco123".

I am also attaching the migration .pdf file that I referenced on my previous reply in case that you want to upgrade your ACS 3.2 to a 4.2 version and run the migration utility instead.

NOTE: Click on the images to enlarge them.

Hope this helps.

Regards.

Re: Upgrade from ACS4.2 to 5.1

hanwucisco — Thu, 05 Jan 2012 21:21:00 GMT

Carlos,

I appreciate your help, but you didnt read clearly my original question. I'll rephrase it.

Q: I have many internal users in V4.2 that I want to transfer into V5.1, how to do that?

You answered me that with CSV files, you have to manually tpye inte usernames and passwords. If it is the case, then it is not my option. We dont know the passwords.

if so, I have to use the first option which the utility. How do you use it, the file you attached doesnt really instruct you to do that, it is only says it can support that. I have the utility open, but it is not that straight forward that you can use it.

Can you please tell me how do you do that?

Would you start with V4.2

1. On the System configuration\ACS backup?

thanks,

Re: Upgrade from ACS4.2 to 5.1

camejia — Thu, 05 Jan 2012 22:17:08 GMT

Hello,

You are correct. I am attaching the correct document for the migration process now. Please review it and let me know if any question arise.

As a snapshot, you will need an ACS for Windows running one of the supported version for migration:

• ACS 4.1.1.24

• ACS 4.1.4

• ACS 4.2.0.124

• ACS 4.2.1

You need an ACS for Windows as the migration utility has to be executed from the server running the ACS application. NOTE: The Migration utility does not support RDP. You need to access the Windows Server locally.

The attached document describes the migration steps.

Hope this helps.

Regards.

Re: Upgrade from ACS4.2 to 5.1

hanwucisco — Fri, 06 Jan 2012 16:37:19 GMT

Carlos,

The document doesnt help me much, the Migration Utility is a GUI on my systme, but this document is talking about CLI. It looks like a painful process, just for transfering a small database. Are you sure?

if you are, could you please summerize it in some steps?

thanks,

Han

Re: Upgrade from ACS4.2 to 5.1

camejia — Fri, 06 Jan 2012 16:50:04 GMT

Hello,

Are we referring to the same migration utility? The one that you download from the ACS 5.x GUI > System Administration > Downloads > Migration Utility > Migration Application Files?

It should download a .zip file which includes the migration.bat file:

Regards.

Re: Upgrade from ACS4.2 to 5.1

hanwu_dot — Fri, 06 Jan 2012 20:13:08 GMT

that is the one I see.

Re: Upgrade from ACS4.2 to 5.1

camejia — Fri, 06 Jan 2012 20:16:17 GMT

Correct,

If you open the Migration folder you should see like 4-5 folders. Access the BIN folder and you will find the migration.bat file.

You need to get the migration folder to the Windows Server running the ACS For Windows application. When executing the migration.bat file it will open a CMD as described on the last document I attached.

Regards.

Re: Upgrade from ACS4.2 to 5.1

hanwucisco — Fri, 06 Jan 2012 23:57:52 GMT

We dont use windows, we use appliance. it is similar

thanks,

Han

Re: Upgrade from ACS4.2 to 5.1

camejia — Sat, 07 Jan 2012 00:02:21 GMT

Han,

You need an ACS for Windows in order to run the migration utility. You can either download the Cisco ACS 4.2 trial version and try loading the ACS SE backup on it in order to perform the migration or you might need to contact your Cisco Account Manager in order to get the appropriate assistance with the migration process.

NOTE: TAC might be able to help you doing a best effort migrating the database for you to 5.x and providing you the 5.x backup, however, the Migration utility is not supported by TAC. Again, as best effort is always performed but TAC will be assisting on an unsupported scenario.

Hope this helps.