07-09-2012 08:45 AM
Greetings,
I'm a new SysAdmin and have been tasked with being the point-person for issues with our new Cisco Physical Access Manager.
Currently we're using Version 1.3.2 (0.3.5) and I'm having difficulty configuring contractor badges that will only open select doors on a predefined schedule (mon-fri, 7am-6pm ONLY)
In the Time Schedules section, I created a new schedule called "IT Limited" and configured the date/time ranges in there; as well as set the correct Hierarchical location.
Using a test account, under the Cisco Access Policy section I created a new Access Policy ("IT Limited Access") which is Enabled and has access to three doors on the "IT Limited" schedule.
However, when I test the badge on these doors, I am denied access.
I've also applied credential changes to the Access GW Driver (even though the icon was a light-green color) and yet it still fails to open these doors during the approved dates and times. Am I missing some configuration here?
Solved! Go to Solution.
07-13-2012 06:17 AM
If you edit or add to access policies you will need to apply configuration changes along with credential changes.
Sent from Cisco Technical Support iPhone App
07-13-2012 06:29 AM
When editing or adding access policies you will need to apply configuration changes in addition to credential changes.
Sent from Cisco Technical Support iPhone App
07-09-2012 09:11 AM
UPDATE: Even if I edit the Access Policy to have the three doors this badge needs access to to "Always Permit" it still fails to open any of the doors.
07-13-2012 06:17 AM
If you edit or add to access policies you will need to apply configuration changes along with credential changes.
Sent from Cisco Technical Support iPhone App
07-13-2012 06:29 AM
When editing or adding access policies you will need to apply configuration changes in addition to credential changes.
Sent from Cisco Technical Support iPhone App
07-13-2012 08:36 AM
OK.. I think I'm making some progress here. I came in this morning and applied configuration changes to the GW driver and tested the card and it worked!
However, I wanted to do a little further testing, so I modified the time range in which we want them to have access so it was outside of the current time. Current time was 8AM so I set the custom access policy to 9AM-6PM and then reapplied both changes and tested the card again... but it still was granted access.
Is there a certain amount of time I must wait after making configuration changes before they're accepted in the system, or is something else wrong here?
07-13-2012 10:08 AM
As long as you apply configuration changes and credential changes they should take place instantly.
Make sure the access schedule you are appling to the access policy only contains the days and times you want to allow access.
07-13-2012 10:11 AM
Thanks much for your help Keith. I think everything's working fine now. I did, however, run a System Sanity Report and discovered some alerts about the Gateways being set to a different time zone to the CPAM so I'll tacklet that today and hopefully it will be the end to this. Phew!
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide