topic Problems witch acs 4.2 replication in Network Access Control

Problems witch acs 4.2 replication

jaouad laktami — Mon, 11 Mar 2019 01:41:20 GMT

i installed the primary and secondary server.

i see only one problem in the logs.

when i try to replicate

i get this :

cisco acs 01/04/2012 23:50:58 NTVMEM73 INFO Outbound replication cycle starting...01/04/2012 23:40:25 NTVMEM73 INFO Outbound replication cycle starting...01/04/2012 23:29:51 NTVMEM73 INFO Outbound replication cycle starting...01/04/2012 23:19:16 NTVMEM73 INFO

further no issue

can someone helps me

Problems witch acs 4.2 replication

camejia — Thu, 05 Jan 2012 16:51:54 GMT

Hello,

Can you share screenshots of both ACS (Primary and Secondary) servers Replication configuration?

Remember that the Primary should have all the applicable "Replication Components" on send and none on "receive". Under "Outbound Replication" you can select any of the options other than "Automatically triggered cascade ".

Under "Partners" you should have the secondary ACS server on the right box.

For the secondary ACS server you should have all the applicable "Replication Components" on receive and none in send. Under "Outbound Replication" you should select "Manually".

Under "Partners" you should have the primary on the left box. No entries should be on the right box for the secondary server.

Also, remember that Replication occurs over TCP Port 2000. If you have a Cisco Firewall (ASA) between both servers, the Cisco Firewall inspects Skinny packets by default (voice packets) which also use TCP 2000. As the Replication packets do not comply with the Default Inspections policy of the ASA for TCP 2000 packets it will drop the packet. Skinny inspections should be disabled on the Firewall between Replicating ACS servers.

Hope this helps.

Regards.

Problems witch acs 4.2 replication

jaouad laktami — Fri, 06 Jan 2012 09:48:22 GMT

there is no firewall between the servers.

this is working on windows 2008 server.

on both servers these ports are open:

Scanning ntvmem74.zwolle.intern (10.128.8.117) [1000 ports]

Discovered open port 445/tcp on 10.128.8.117

Discovered open port 139/tcp on 10.128.8.117

Discovered open port 135/tcp on 10.128.8.117

Discovered open port 3389/tcp on 10.128.8.117

Discovered open port 49159/tcp on 10.128.8.117

Discovered open port 902/tcp on 10.128.8.117

Discovered open port 49152/tcp on 10.128.8.117

Discovered open port 912/tcp on 10.128.8.117

Discovered open port 2001/tcp on 10.128.8.117

Discovered open port 2002/tcp on 10.128.8.117

Discovered open port 49/tcp on 10.128.8.117

Discovered open port 49154/tcp on 10.128.8.117

Discovered open port 49153/tcp on 10.128.8.117

Discovered open port 31038/tcp on 10.128.8.117

Discovered open port 2000/tcp on 10.128.8.117

thanks for your help

Problems witch acs 4.2 replication

camejia — Fri, 06 Jan 2012 15:14:36 GMT

Hello,

Can you set both servers to Full Detail of logging? Under System Configuration > Service Control > Level of detail > "Full".

After setting the logging detail to Full on both servers please perform a new replication attempt. After a couple of minutes check both servers Replication logs and write down the timestamp when the process started.

After that we need to collect the package.cab file from both servers. Go to System Configuration > Support > Select Collect Log files and Collect Previous 2 days logs.

Please attach the generated files with the appropriate timestamp when the replication process was triggered.

Also, did you check the Replication Partners and confirmed that it is configured as described on my previous reply?

Regards.

Problems witch acs 4.2 replication

Kush Srivastava — Sat, 07 Jan 2012 19:20:58 GMT

Hi,

Could you please check the foll:

- Are both the ACS versions are on the same version and the patch level?

- What's the version of the ACSes? As ACS is installed on a windows 2008 server, ACS installation is only supported with ACS 4.2patch 4 onwards and on windows 2008 64-bit with ACS 4.2.1? If it is on unsupported platform, the services might be stopping.

- Did you try reverse replication i.e making the secondary as the primary and vice-versa?

- Please try to telnet to the secondary ACS on port 2000 from primary and vice-versa?

Regards,

Kush

Problems witch acs 4.2 replication

jaouad laktami — Mon, 09 Jan 2012 10:18:56 GMT

these are the link of the cab files

Time stamp of the replication 06-01-2012 betweeen 16.36 -16.42

https://files.me.com/jaouad/auy2ye

https://files.me.com/jaouad/674ysx

i am using windows 2008 32 bit service pack 2

with acs 4.2 wihout any patches

i can't telnet from primary to the secondary of from the secondary to the primary.

Problems witch acs 4.2 replication

camejia — Mon, 09 Jan 2012 15:59:44 GMT

Hello,

It seems that you did not select the Collect Log files and Collect Previous 2 days logs as the Auth.log, TCS.log and other relevant files are missing on both files.

Something I did notice is the following:

Primary Replication logs:

1/6/2012