topic Re: Certificate issue at Secondary ACS in Network Access Control https://community.cisco.com/t5/network-access-control/certificate-issue-at-secondary-acs/m-p/2489447#M88163 <HTML><HEAD></HEAD><BODY><P>is there any way to check , when it was moven from primary to secondary ACS ?</P></BODY></HTML> Tue, 11 Feb 2014 08:02:20 GMT Puneet Gupta 2014-02-11T08:02:20Z Certificate issue at Secondary ACS https://community.cisco.com/t5/network-access-control/certificate-issue-at-secondary-acs/m-p/2489444#M88160 <P>Hi </P><P></P><P>We have distributed ACS deployment model where Primary ACS can do the configuration role and secondary ACS is doing the monitoring role.</P><P></P><P>Our root certtificate was expired two days back and we have installed this on primary ACS bit forgot to install it on secondary ACS.</P><P></P><P>Due to this our some wirless useers were not able to connect with wireless with authentication fails messages.</P><P></P><P>So my question is , are both primary and secondary ACS accepting the AAA request and replying as we are using didtributted deployment model.</P><P></P><P>Or can share any cisco document which shows this ?</P> Mon, 11 Mar 2019 04:22:52 GMT https://community.cisco.com/t5/network-access-control/certificate-issue-at-secondary-acs/m-p/2489444#M88160 Puneet Gupta 2019-03-11T04:22:52Z Re: Certificate issue at Secondary ACS https://community.cisco.com/t5/network-access-control/certificate-issue-at-secondary-acs/m-p/2489445#M88161 <HTML><HEAD></HEAD><BODY><P>The WLC will send authentication to the primary ACS server and only will use the secondary if there is no response from the primary. The WLC will not fail back to the primary unless the secondary fails to respond or if you have Fallback enabled in which the WLC will check if the primary is up.<BR /><BR />Sent from Cisco Technical Support iPhone App</P></BODY></HTML> Tue, 11 Feb 2014 05:03:16 GMT https://community.cisco.com/t5/network-access-control/certificate-issue-at-secondary-acs/m-p/2489445#M88161 Scott Fella 2014-02-11T05:03:16Z Re: Certificate issue at Secondary ACS https://community.cisco.com/t5/network-access-control/certificate-issue-at-secondary-acs/m-p/2489446#M88162 <HTML><HEAD></HEAD><BODY><P>Hi Scott</P><P>Thanks for the information</P><P></P><P>Exactly the same thing is happening .Now client are authenticated by secondary ACS not from primary ACS.</P><P></P><P>How can we make the primary ACS to work ? will it be distrupted ?</P></BODY></HTML> Tue, 11 Feb 2014 08:01:10 GMT https://community.cisco.com/t5/network-access-control/certificate-issue-at-secondary-acs/m-p/2489446#M88162 Puneet Gupta 2014-02-11T08:01:10Z Re: Certificate issue at Secondary ACS https://community.cisco.com/t5/network-access-control/certificate-issue-at-secondary-acs/m-p/2489447#M88163 <HTML><HEAD></HEAD><BODY><P>is there any way to check , when it was moven from primary to secondary ACS ?</P></BODY></HTML> Tue, 11 Feb 2014 08:02:20 GMT https://community.cisco.com/t5/network-access-control/certificate-issue-at-secondary-acs/m-p/2489447#M88163 Puneet Gupta 2014-02-11T08:02:20Z Re: Certificate issue at Secondary ACS https://community.cisco.com/t5/network-access-control/certificate-issue-at-secondary-acs/m-p/2489448#M88164 <HTML><HEAD></HEAD><BODY><P>You can see it in the WLC logs or if you issues a show radius summary. That will tell you which is active or not.<BR /><BR />Sent from Cisco Technical Support iPhone App</P></BODY></HTML> Tue, 11 Feb 2014 13:32:39 GMT https://community.cisco.com/t5/network-access-control/certificate-issue-at-secondary-acs/m-p/2489448#M88164 Scott Fella 2014-02-11T13:32:39Z Re: Certificate issue at Secondary ACS https://community.cisco.com/t5/network-access-control/certificate-issue-at-secondary-acs/m-p/2489449#M88165 <HTML><HEAD></HEAD><BODY><P>Is there any way in monitoring tab on ACS that can shows when autheniocation was shifted from primary to secondary ACS for those WLC's.</P><P></P><P>or any alarm.</P></BODY></HTML> Wed, 12 Feb 2014 06:46:01 GMT https://community.cisco.com/t5/network-access-control/certificate-issue-at-secondary-acs/m-p/2489449#M88165 Puneet Gupta 2014-02-12T06:46:01Z