topic Re: ACS 4.2.1 Authentication and Database Replication in Network Access Control

ACS 4.2.1 Authentication and Database Replication

IAIN HILL — Mon, 11 Mar 2019 00:56:55 GMT

I have a couple of questions/issues. Firstly the ACS 4.2.1 for Windows database replication does any one have and documentation on the processes required?

Secondly I have a single system installed which is providing TACACS authentication for management access to a Cisco 5508 WLC, the controller prompts with a login box on connection to the web interface. When you put in the username and password pair the box comes back as if the authentication has failed. On the ACS I was unable to see any failed authentications so enabled passed authentication reporting and can see the user passing the process. The WLC is running software version 6.0.199.4. On the ACS I have added the extra two options within the TACACS interface configuration and have a ‘role1=all’ against both the user and the group the user is part of so I am confused as to why the user is still denied access.

Anyone any help with either would be gratefully received.

Re: ACS 4.2.1 Authentication and Database Replication

andamani — Mon, 28 Mar 2011 16:10:49 GMT

Hi,

The link below gives details of replication:

http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_server_for_windows/4.2.1/User_Guide/SCAdv.html#wp755988

The following link gives configuration of replication:

http://www.cisco.com/en/US/products/sw/secursw/ps2086/products_configuration_example09186a00800e518a.shtml

If the ACS failed and passed authentication is showing no log then the request is not reaching the ACS.

Could you please cross check your configuration on the WLC.

Hope this helps.

Regards,

Anisha

P.S.: please mark this thread as answered if you feel your query is resolved. Do rate helpful posts.

Re: ACS 4.2.1 Authentication and Database Replication

IAIN HILL — Mon, 28 Mar 2011 20:18:14 GMT

Thanks for the two links, with regards to the WLC authentication I can see a passed authentication in the log files and hence my confusion. The authentication appears (well its in the log file, correct username/NAS IP Address/time) to pass, and there is nothing in the failed logs, so its getting to the ACS passing the authentication but still the WLC does not let me in.

Thanks again.

Re: ACS 4.2.1 Authentication and Database Replication

andamani — Tue, 29 Mar 2011 14:30:08 GMT

Hi,

The issue seems to be with the WLC. i would suggest asking this question in the wireless forum as there will be more people who will be aable to answer this question of yours.

Hope this helps.

Regards,

Anisha

P.S.: please mark this thread as answered if you feel your query is resolved. Do rate helpful posts.