NAC 4.7

[pmccubbin]

The release notes state that the OS is changing from Fedora to CentOS 5.3 in version 4.7 of NAC.

The means to upgrade one must create an ISO boot disk and install the latest version of software.(In order to boot the new OS kernel.)

Does this mean we are at the end-of-the line with version 4.6?

Thank you in advance.

[Faisal Sehbai]

Hi,

Currently no plans to EOL 4.6! 4.1 line is not getting any new updates for AV/AS etc, but 4.5/4.6/4.7 are.

HTH,

Faisal

[pmccubbin]

Hi Faisal,

I appreciate the quick response. One follow-up question:

We are testing 4.6.1 in the lab and about to start a pilot. Do we upgrade now or will there be an upgrade for the Fedora kernel on the Cisco Roadmap that will not require us to wipe the boxes clean? In other words, what does Cisco suggest for a situation like this we are in?

[Faisal Sehbai · Accepted solution]

Paul,

You're not required to wipe out the existing setup to upgrade to 4.7. Yes, you do have to boot from a CD, but you're given the option to upgrade or reimage from the boot prompt.

Choose upgrade and your existing setup will remain.

HTH,

Faisal

[pmccubbin]

Hi Faisal,

Thanks for clearing that up.

What is the recommendation for upgrading the boxes in our lab:

Do we upgrade the CAM or CAS first?

Just want to keep it all in the lab before pilot to verify communications with our AD. What version of ktpass do we use with our Win2003 AD servers?

[Faisal Sehbai · Accepted solution]

Hi,

Doesn't really matter. Doing CAS first saves you an extra reboot, so you can do that first.

For AD 2k3 SSO, use the 5.2.3790.0 version. Download here: http://www.employees.org/~basti/ktpass.zip

HTH,

Faisal

[pmccubbin]

Hi Faisal,

Just wanted to let you know we upgraded to 4.7 and all is well. The AD authentication kept on working and the CAS is still talking with the NAC Profiler.

Thanks.

Paul