topic Re: ACS 3.3 Fresh Installation using the WEB Interface in Network Access Control

ACS 3.3 Fresh Installation using the WEB Interface

beiriger — Sun, 10 Mar 2019 21:43:47 GMT

Who do I login as using the web interface? I tried the CSACS user I created for the installation. Local admin for windows?

Re: ACS 3.3 Fresh Installation using the WEB Interface

a.kiprawih — Sun, 27 Aug 2006 15:04:45 GMT

Hi,

Access to ACS admin console (the ACS web interface menu) is for all ACS admin users (not normal user account that authenticated by ACS).

The web interface allows you to login onto this server either locally from the server itself or remotely (both via web browser).

Login locally means you can have direct access to ACS server management console via web interface without ACS admin authentication.

But if you need to login remotely, i.e from other pc in the same network or other segment, this is where you need to use ACS admin account. You can limit/control the IP Address of the host you can use to login, or the ACS admin account/user privileges to include/exclude certain ACS admin capabilities.

Rgds,

Re: ACS 3.3 Fresh Installation using the WEB Interface

beiriger — Mon, 28 Aug 2006 01:25:40 GMT

When you refer to the ACS admin account are you talking about the administrator account for the server? When I try the account I created during setup or administrator from Windows they both do not work.

Re: ACS 3.3 Fresh Installation using the WEB Interface

a.kiprawih — Mon, 28 Aug 2006 06:59:15 GMT

Do you mean even if you access the ACS admin console@GUI from the server hosting ACS itself you can't access the admin console (via web browser)?

By right, no username & password is required to access the admin console. But you need to login to the server using the same user account when you installed the ACS.

BTW, if you double-click on the "Cisco Secure ACS" button, what's the error message you get?

Rgds,

Re: ACS 3.3 Fresh Installation using the WEB Interface

beiriger — Mon, 28 Aug 2006 11:47:12 GMT

Yes when I access the ACS server I am prompted for a user/pwd. Is there a default? What am I missing?

Re: ACS 3.3 Fresh Installation using the WEB Interface

a.kiprawih — Mon, 28 Aug 2006 14:05:10 GMT

Does your ACS run on Windows 2003? IF so, the ACS administrator account that runs the ACS services must have a Domain Administrator account to authenticate against Windows 2003.

BTW, what's your ACS version & platform?

Re: ACS 3.3 Fresh Installation using the WEB Interface

beiriger — Mon, 28 Aug 2006 16:19:39 GMT

Yes I am running 2003. Yes the administrator account which created during installation "CSACS" is a domain account in our NT domain. The ACS server is also in our domain. ACS Version 3.3.

Re: ACS 3.3 Fresh Installation using the WEB Interface

beiriger — Wed, 30 Aug 2006 01:27:23 GMT

My ACS server does not have a domain admin account it's only a normal account. Why would the ACS server require a domain admin status?

Re: ACS 3.3 Fresh Installation using the WEB Interface

d.alves — Thu, 31 Aug 2006 17:23:52 GMT

I ma having the same problem. I installed ACS 3.3 on a new W2K3 server and I simply want to access the GUI Admin via http://ip address:2002

What login would I use here? Is there a default? I authenticate AAA clients via local database so I don't tie in the windows domain user accounts.

admin

cisco

???

Re: ACS 3.3 Fresh Installation using the WEB Interface

darpotter — Fri, 01 Sep 2006 14:41:40 GMT

All

This sounds like a bug. If you access http://127.0.0.1:2002 you should not have to enter any credentials.

By default ACS will always allow unauthenticated local access. This can be changed under Admin Config / Session Policy "Allow automatic local login"

Could be an issue with v3.3 on Server 2003

I'd contact the TAC.

Re: ACS 3.3 Fresh Installation using the WEB Interface

d.alves — Tue, 05 Sep 2006 16:27:02 GMT

Actually, you bring up another issue I am having. Locally on the server from a web browser if I enter http://127.0.0.1:2002 I just get a blank screen.

From my laptop over the network when I enter http://ip address:2002 I do get the login screen, but back to my original statement I have know idea what to enter for credentials??

Re: ACS 3.3 Fresh Installation using the WEB Interface

darpotter — Tue, 05 Sep 2006 17:03:21 GMT

This is a catch-22 Im afraid.

Until you log in locally you can't create admin users as this can only be done via the web interface.

If you cant login locally (and you've ruled out java issues on the browser) your only option is to remove, clean & re-install.

Re: ACS 3.3 Fresh Installation using the WEB Interface

tdzierzek — Tue, 05 Sep 2006 18:58:22 GMT

I've seen the issue with the blank page when connecting locally. In Internet Explorer, I had to add the loopback address as a trusted site. (Tools, Internet Options, Security).

Tim

Re: ACS 3.3 Fresh Installation using the WEB Interface

beiriger — Tue, 05 Sep 2006 19:26:02 GMT

The problem was Java plugin was not installed in my browser. Solved.