Cisco ACS 4.2 Device & User Group Reformation

[yogesh.suryawanshi]

  Hello Experts,

We have cisco ACS servers (4.2) at various (each) locations across globe & we are in process of achieving uniformity for ease of operation…

At each location there are different users & devices group or there are no standards. As part part uniformities initiative we have identified /freeze set of user groups & devices groups. Need your expert advise on how do we move existing set of users / DLs to new user groups, how do we move existing devices to new groups which will be created. We wish do to without any impact to present system..

Future we have directions to move on to 5.2 centralize architecture but even for that uniformity is required….Could you please advise on how do we have achieve that in current 4.2 acs servers across globe.

Thanks in advance.

Regards

Yogesh

[Amjad Abdullah]

Yogesh:

To move existing users from one group to another you can:

- go manually to each user and change its group membership. OR:

- Use RDBMS synchronization where you can fill a CSV file with the actions that you want (change group membership in your case) and import that to the ACS.

For RDBMS sync you can read the user guide:

http://tiny.cc/n13b1w

This config example may also be useful about how to import the csv file:

http://tiny.cc/533b1w

I suggest that you read the guide and come back to ask here if you have any concern.

HTH

Amjad

Rating useful replies is more useful than saying "Thank you"