topic Re: Best Practises with ACS Replication & external databases in Network Access Control https://community.cisco.com/t5/network-access-control/best-practises-with-acs-replication-external-databases/m-p/311144#M433474 <HTML><HEAD></HEAD><BODY><P>I could not find a best practices document as such but a lot of ground is covered in the document 'CiscoSecure Database Replication' at <A class="jive-link-custom" href="http://www.cisco.com/univercd/cc/td/doc/product/access/acs_soft/csacs4nt/acs33/user/sad.htm#wp755988" target="_blank">http://www.cisco.com/univercd/cc/td/doc/product/access/acs_soft/csacs4nt/acs33/user/sad.htm#wp755988</A>. </P></BODY></HTML> Tue, 05 Oct 2004 20:15:48 GMT jsivulka 2004-10-05T20:15:48Z Best Practises with ACS Replication & external databases https://community.cisco.com/t5/network-access-control/best-practises-with-acs-replication-external-databases/m-p/311143#M433473 <P>I am looking for a best practise with the following scenario:</P><P></P><P>2 ACS Servers in 2 separate locations, each providing mutual backup to each other - i.e. all devices/users in Site X point to local ACS Server X 1st and remote ACS Server Y 2nd. In Site Y the devices/users point to the local ACS Server Y 1st and remote ACS Server X 2nd. This works fine; currently Server X replicates the Database to Server Y.</P><P>In the future we will be implementing a remote LDAP database and will forward unknown users to this database for authentication. As I understand it if an unknown user exists on the LDAP database then the ACS Server will create a local account (depending the mapping policy etc) and point the password at the remote LDAP server. If we replicate from Server X to Server Y, but Server Y has created an account for an unknown user will this get deleted on replication? Is there a best practise to handle this scenario?</P><P></P><P>Andy</P> Sun, 10 Mar 2019 20:49:44 GMT https://community.cisco.com/t5/network-access-control/best-practises-with-acs-replication-external-databases/m-p/311143#M433473 andrew.butterworth 2019-03-10T20:49:44Z Re: Best Practises with ACS Replication & external databases https://community.cisco.com/t5/network-access-control/best-practises-with-acs-replication-external-databases/m-p/311144#M433474 <HTML><HEAD></HEAD><BODY><P>I could not find a best practices document as such but a lot of ground is covered in the document 'CiscoSecure Database Replication' at <A class="jive-link-custom" href="http://www.cisco.com/univercd/cc/td/doc/product/access/acs_soft/csacs4nt/acs33/user/sad.htm#wp755988" target="_blank">http://www.cisco.com/univercd/cc/td/doc/product/access/acs_soft/csacs4nt/acs33/user/sad.htm#wp755988</A>. </P></BODY></HTML> Tue, 05 Oct 2004 20:15:48 GMT https://community.cisco.com/t5/network-access-control/best-practises-with-acs-replication-external-databases/m-p/311144#M433474 jsivulka 2004-10-05T20:15:48Z