ACS User Database to ISE

[fatalXerror]

Hi Guys,

I am going to migrate my ACS to ISE for TACACS service but with different configuration although I need to migrate the user database in ACS to ISE.

Is it possible to export the users in ACS via CSV then import it in ISE? Will the current usernames and its details will be successfully imported also ISE for this way?

Appreciate for any better suggestions.

Thanks

[Marvin Rhoads]

If you use the ACS to ISE Migration application, you can select what elements you want to export from ACS.

The available selections include "Users and Identity Stores"

[fatalXerror]

Hi @Marvin Rhoads , thanks for the feedback. If I use the migration tool, do I need to reboot both ACS and ISE? I am just worried because both of my ACS and ISE are in production right now. Thanks

[Octavian Szolga]

Hi,

If you're really concerned about your current deployment, and you want to be 100% sure you're not breaking anything, you can always:

1. backup your current ACS setup, restore on a test ACS VM; enable migration from test ACS and export user data to a test ISE VM

2. enable ACS migration from your current production ACS; export data to a test ISE VM

The final step for each option is to export users (CSV) from the test ISE VM to your production ISE. (obviously, you need to manually create user groups before importing users from test ISE to production ISE because the CSV file would map a user a group that does not exist in your production ISE environment, so import would fail).

BR,

Octavian