topic Best practises for replication in Network Access Control https://community.cisco.com/t5/network-access-control/best-practises-for-replication/m-p/1359268#M332920 <P>Hi,</P><P></P><P>I want to know what is best practise for duration of replicaation of database between two Cisco ACS.</P><P></P><P>Regards,</P><P>Atif.</P> Sun, 10 Mar 2019 23:54:38 GMT jauhar1980 2019-03-10T23:54:38Z Best practises for replication https://community.cisco.com/t5/network-access-control/best-practises-for-replication/m-p/1359268#M332920 <P>Hi,</P><P></P><P>I want to know what is best practise for duration of replicaation of database between two Cisco ACS.</P><P></P><P>Regards,</P><P>Atif.</P> Sun, 10 Mar 2019 23:54:38 GMT https://community.cisco.com/t5/network-access-control/best-practises-for-replication/m-p/1359268#M332920 jauhar1980 2019-03-10T23:54:38Z Re: Best practises for replication https://community.cisco.com/t5/network-access-control/best-practises-for-replication/m-p/1359269#M332922 <HTML><HEAD></HEAD><BODY><P><SPAN style="color: #800000;"><BR /></SPAN></P><P><SPAN style="color: #800000;">Hi Atif,</SPAN></P><P><SPAN style="color: #800000;"><BR /></SPAN></P><P><SPAN style="color: #800000;">The replication time interval should always be higher.</SPAN></P><P><SPAN style="color: #800000;"><BR /></SPAN></P><P><SPAN style="color: #800000;"><STRONG>Reason:</STRONG> Everytime you replicate the data it requires ACS services to restart so doing this frequently may affect your production enviroment.</SPAN></P><P><SPAN style="color: #800000;"><BR /></SPAN></P><P><SPAN style="color: #800000;">However, if you want to replicate internal user's password then there is an option to replicate password changes right awayvwithout a full replication.&nbsp; You can enable this option under System Configuration -&gt; Local Password Management.&nbsp; With this enabled you could potentially set the replications to a larger interval.</SPAN></P><P><SPAN style="color: #800000;"><BR /></SPAN></P><P><SPAN style="color: #800000;">It also depend how often you do changes in your ACS. If its normal then I would say set it to every sunday 12:00 PM.<BR /></SPAN></P><P><SPAN style="color: #800000;"><BR /></SPAN></P><P><SPAN style="color: #800000;"><BR /></SPAN></P><P><SPAN style="color: #800000;">This is how replication happens:</SPAN></P><P><SPAN style="color: #800000;"><BR /></SPAN></P><P><SPAN style="color: #800000;">The primary ACS stops its authentication and creates a copy of the ACSinternal database components that it is configured to replicate. During this<BR />step, if AAA clients are configured properly, those that usually use the primary ACS fail over to another ACS. The primary ACS resumes its authentication service.</SPAN></P><P></P><P><SPAN style="color: #800000;"> After the preceding events on the primary ACS, the database replication process continues on the secondary ACS. The secondary ACS stops its authentication service and replaces its database components with the database components that it received from the primary ACS. During this step, if AAA clients are configured properly, those that usually use the secondary ACS fail over to another ACS. The secondary ACS resumes its authentication service.</SPAN></P><P><SPAN style="color: #800000;"><BR /></SPAN></P><P><SPAN style="color: #800000;">HTH<BR /></SPAN></P><P><SPAN style="color: #800000;">Regards,</SPAN></P><P><SPAN style="color: #800000;">JK</SPAN></P><P><SPAN style="color: #800000;"><BR /></SPAN></P><P><SPAN style="color: #800000;">Plz rate helpful posts-</SPAN></P></BODY></HTML> Wed, 27 Jan 2010 13:28:01 GMT https://community.cisco.com/t5/network-access-control/best-practises-for-replication/m-p/1359269#M332922 Jatin Katyal 2010-01-27T13:28:01Z Re: Best practises for replication https://community.cisco.com/t5/network-access-control/best-practises-for-replication/m-p/1359270#M332923 <HTML><HEAD></HEAD><BODY><PRE __jive_macro_name="quote" class="jive_text_macro jive_macro_quote"><DIV class="jive-rendered-content"><P>Hi,</P><P></P><P>I want to know what is best practise for duration of replicaation of database between two Cisco ACS.</P><P></P><P>Regards,</P><P>Atif.</P></DIV><P></P></PRE><P></P><P>Hi Atif,</P><P></P><P>Whenever there is replication between primary and secondary ACS services get haulted for that particular interval so best recommendation is to replicate twice a day one at morning and the second at the evening time.</P><P></P><P>Hope to help</P><P></P><P>Ganesh.H</P></BODY></HTML> Thu, 28 Jan 2010 10:46:35 GMT https://community.cisco.com/t5/network-access-control/best-practises-for-replication/m-p/1359270#M332923 Ganesh Hariharan 2010-01-28T10:46:35Z