ACS 5.2 hight avilibility

[a.aitkaddour]

hello,

it is possible de use two servers ACS 5.2 (primary and secondary) in active/ active? or just in active/ passive?

thank you for your reply.

[Waris Hussain]

Hi ,

There is no concept of Active/Active in ACS 5.x . How ever both acs can perform authentication. You can mention half device to point to ACS1(Primary)  and other half to ACS2(Secondary)  . However the master DB will be in Primary ACS

Thanks

Waris Hussain

[athukral]

Very Nice answer...Short and Crisp!!

Regards,

Ankur Thukral

Community Manager - Security & VPN

Cisco Support Community

[Angus Bishop]

We need to configure some of the AAA clients with first ACS as primary and for other devices configure the second ACS  as primary

Switch 1:

Tacacs-server host

Tacacs-server host

Switch 2:

Tacacs-server host

Tacacs-server host

This is how we share the loads between 2 ACS servers .

Please let me know if you require any more clarifications 

[Naveen Kumar]

Yes HA is possible in ACS 5.2  :

Ref:

http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_system/5.2/user/guide/admin_operations.html#wp1066095

[harvisin]

Hello aitkaddour,

I think that you can do the load balancing between both the ACS as told by Angus:-

Switch 1:

Tacacs-server host

Tacacs-server host

Switch 2:

Tacacs-server host

Tacacs-server host

Now if your both the ACS are active then your  switches will perform their functions and will redirect the clients on their respective servers.