topic Hello Pratik-Can you share in Network Access Control

ACS server migration AD issue.

pratik gandhi — Mon, 11 Mar 2019 05:20:23 GMT

AD issues while migrating from cisco ACS 4.x to 5.x? AD base authentication failure

nspasov — Mon, 12 Jan 2015 17:16:14 GMT

Hello Pratik-

Can you share some more info? Things like:

1. Exact errors on ACS/supplicant

2. Is this for network access or device administration

3. Some screen shots

4. Overall requirements/setup, etc

Thank you for rating helpful posts!

Ravi Singh — Mon, 12 Jan 2015 20:01:58 GMT

Did you face any problem while migrating. Mostly this problem happen due to unsuccessful migration.

pratik gandhi — Sat, 17 Jan 2015 03:20:06 GMT

Hello,

1)The problem initiates when IP of the OLD ACS is given to the new ACS .

2)Old ACS is 4.x, and the new ACS is 5.x

3)Requirement is both MAB authentication & AD based authentication should be succesfull.

4)MAB getting succesfully authenticated, but facing issues regarding AD.

5) Any other IP given to the new ACS, works fine.

6) Tried deleting the binding of OLD ACS IP and creating a new one.

nspasov — Sat, 17 Jan 2015 03:25:24 GMT

Hello Pratik-

A few questions:

1. Did you disconnect the old server to make sure that there are no conflicts?

2. Did you clear the arp-cache on your layer 3 device to ensure that the new IP-to-MAC entry is in the arp table

3. Did you join the new ACS server to AD?

4. What does the authentication logs show in ACS for the filed AD authentications

5. Post the output of the "show authentication session interface interface_name_number" of the interface with the failing dot1x authentication

Thank you for rating helpful posts!