topic Re: having a backup acs server in Network Access Control https://community.cisco.com/t5/network-access-control/having-a-backup-acs-server/m-p/485006#M428673 <HTML><HEAD></HEAD><BODY><P>A good place to start is take a look at the Failed Attempts log.</P><P></P><P>Using the GUI, Reports and Activity ---&gt; Failed Attempts</P><P></P><P>If the fail other took place and there was a problem with the request then you should see something in here.</P><P></P><P>If nothing appears in here then it looks like a mis configuration on the network device</P><P></P><P></P></BODY></HTML> Fri, 16 Sep 2005 11:30:14 GMT andrewclymer 2005-09-16T11:30:14Z having a backup acs server https://community.cisco.com/t5/network-access-control/having-a-backup-acs-server/m-p/485001#M428662 <P>Pls i have been trying to configure a backup acs server to authenticate users when the primary acs fails. The backup server has been installed and the replication process goes on but when the primary server is down, the secondary server doesn't authenticate users.</P> Sun, 10 Mar 2019 21:16:10 GMT https://community.cisco.com/t5/network-access-control/having-a-backup-acs-server/m-p/485001#M428662 edosa 2019-03-10T21:16:10Z Re: having a backup acs server https://community.cisco.com/t5/network-access-control/having-a-backup-acs-server/m-p/485002#M428664 <HTML><HEAD></HEAD><BODY><P>ACS only supports database replication to other ACS servers. All ACS servers that participate in Cisco Secure database replication must run the same version and patch level of ACS.</P><P><A class="jive-link-custom" href="http://www.cisco.com/en/US/products/sw/secursw/ps2086/products_configuration_example09186a00800e518a.shtml#t2" target="_blank">http://www.cisco.com/en/US/products/sw/secursw/ps2086/products_configuration_example09186a00800e518a.shtml#t2</A></P></BODY></HTML> Fri, 19 Aug 2005 13:06:05 GMT https://community.cisco.com/t5/network-access-control/having-a-backup-acs-server/m-p/485002#M428664 owillins 2005-08-19T13:06:05Z Re: having a backup acs server https://community.cisco.com/t5/network-access-control/having-a-backup-acs-server/m-p/485003#M428668 <HTML><HEAD></HEAD><BODY><P>We had a similar problem, we use ACS to control login acess to routers (EXEC) and also for Dial Users using either PSTN or VPN Connectivity. </P><P></P><P>Basically you need to list the tacacs server twice in the router configuration</P><P></P><P>tacacs-server host 10.1.1.1 single-connection</P><P>tacacs-server host 10.1.1.2 single-connection</P><P></P><P>You may also need to look at the timeouts on tacacs. We had no problems with it failing over for exec sessions but dial users we had to tweak the timeouts so that it failed over quicker.</P><P></P><P>Hope this is of help.</P><P></P><P>Elliott</P></BODY></HTML> Thu, 25 Aug 2005 09:02:55 GMT https://community.cisco.com/t5/network-access-control/having-a-backup-acs-server/m-p/485003#M428668 networking 2005-08-25T09:02:55Z Re: having a backup acs server https://community.cisco.com/t5/network-access-control/having-a-backup-acs-server/m-p/485004#M428671 <HTML><HEAD></HEAD><BODY><P>Hello Elliott, tried out ur configs but it didnt work. do i have to do anything on the acs server menu?</P><P></P><P>Thanks once again. Expexting ur reply</P><P></P><P>Iso</P></BODY></HTML> Thu, 01 Sep 2005 09:31:25 GMT https://community.cisco.com/t5/network-access-control/having-a-backup-acs-server/m-p/485004#M428671 isomemberr 2005-09-01T09:31:25Z Re: having a backup acs server https://community.cisco.com/t5/network-access-control/having-a-backup-acs-server/m-p/485005#M428672 <HTML><HEAD></HEAD><BODY><P>Have you checked to ensure that your secondary ACS works OK on its own?</P><P></P><P>on one of you non-critical devices (Like a lab switch or router) configure it to ONLY have the IP address of your secondary ACS server.</P><P></P><P>If this doesn't work then there is something wrong with the ACS.</P><P></P><P>Nick</P></BODY></HTML> Wed, 07 Sep 2005 09:04:22 GMT https://community.cisco.com/t5/network-access-control/having-a-backup-acs-server/m-p/485005#M428672 networking 2005-09-07T09:04:22Z Re: having a backup acs server https://community.cisco.com/t5/network-access-control/having-a-backup-acs-server/m-p/485006#M428673 <HTML><HEAD></HEAD><BODY><P>A good place to start is take a look at the Failed Attempts log.</P><P></P><P>Using the GUI, Reports and Activity ---&gt; Failed Attempts</P><P></P><P>If the fail other took place and there was a problem with the request then you should see something in here.</P><P></P><P>If nothing appears in here then it looks like a mis configuration on the network device</P><P></P><P></P></BODY></HTML> Fri, 16 Sep 2005 11:30:14 GMT https://community.cisco.com/t5/network-access-control/having-a-backup-acs-server/m-p/485006#M428673 andrewclymer 2005-09-16T11:30:14Z