topic Our security team wanted to in Network Access Control

ACS inquiry

John — Mon, 11 Mar 2019 06:30:54 GMT

Hello Cisco Community,

Our security team wanted to synchronize our ACS with LDAP / AD / RSA for dual security proposes

We would like to request assistance if:

1. this is possible on our current setup and ACS model

2. it possible to make it Active – Active? Current setup is Active – Standby

3.there any bugs regarding with the current installed version for this configuration?

4.check how many user account it can accomodate

Are you trying to setup

Jatin Katyal — Tue, 23 Feb 2016 16:19:34 GMT

Are you trying to setup internal and external database for the failover purpose. This can be done but only in active standby mode. For example if user not found in internal db then the next db in the identity store sequence can be queried. let me know if we are on same page.

~ Jatin

Our security team wanted to

John — Wed, 24 Feb 2016 00:45:51 GMT

Our security team wanted to synchronize our ACS with LDAP / AD / RSA for dual security proposes this is possible on our current setup (active-standby) and in ACS 5.4.0.46.5?

Hi,

Nadav — Sat, 27 Feb 2016 17:10:32 GMT

Hi,

As Jatin has suggested, set up LDAP\Internal\AD integration, create an identity store sequence which is rule based according to your preference, and then user lookup is performed according to sequence. Active-standby in this context is regarding the identity sequence and not the ACS cluster.

Take care of timers per authentication method if you plan to use a sequence.