cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
495
Views
0
Helpful
6
Replies
Enthusiast

what will happen if ACS database full !!!

Hi  everyone,

 

I have a issue that is about acs,these days,our acs occur a alarm is "Physical size of ACS db is more than 50% of its Actual Size".

I think it's bug CSCum51180,and i want to enter "acs-config" in CLI,to confirm acs database.But,when i issue " acsview show-dbsize", there is not any output,just like this:

----------------

acs23/acsadmin(config-acs)#acsview show-dbsize

acs23/acsadmin(config-acs)#

acs23/acsadmin(config-acs)#

---------------

So,i want to know is there any abnormal? And if the acs database full, what will be happened?whether we cannot access to ACS?

Everyone's tags (1)
2 ACCEPTED SOLUTIONS

Accepted Solutions
Cisco Employee

Re: what will happen if ACS database full !!!

There should be protection mechanism so that it doesn’t fill up

 

i will confirm 

Please work with tac to troubleshoot

Highlighted
Cisco Employee

Re: what will happen if ACS database full !!!

I did not see the output of the acsview show db-size command.

The bug was fixed in 5.5 and 5.6.

The alarm should come up only with the size of disk is more than 1GB but it seemed to appear even before that.

Alarm was changed to warning.

 

In any case it would be good to compress and truncate transactional logs. Do it in a maintenance window just to make sure it does not impact users.

https://www.cisco.com/c/en/us/td/docs/net_mgmt/cisco_secure_access_control_system/5-4/command/reference/cli/cli_app_a.html#98188

 

Finally ACS 5.4 is EOL and End of Support

https://www.cisco.com/c/en/us/products/collateral/security/secure-access-control-system/eos-eol-notice-c51-732647.html

 

ISE is the next generation ACS. Please look at ACS to ISE migration for details how to migrate over to ISE

https://community.cisco.com/t5/security-documents/acs-to-ise-migration/ta-p/3644038

 

Thanks

Krishnan

6 REPLIES 6
Cisco Employee

Re: what will happen if ACS database full !!!

There should be protection mechanism so that it doesn’t fill up

 

i will confirm 

Please work with tac to troubleshoot

Enthusiast

Re: what will happen if ACS database full !!!

But,there is not cisco contract about the device...
Cisco Employee

Re: what will happen if ACS database full !!!

We are checking internally to see. Recommendation would be to remove to Identity services engine with an update contract
Highlighted
Cisco Employee

Re: what will happen if ACS database full !!!

I did not see the output of the acsview show db-size command.

The bug was fixed in 5.5 and 5.6.

The alarm should come up only with the size of disk is more than 1GB but it seemed to appear even before that.

Alarm was changed to warning.

 

In any case it would be good to compress and truncate transactional logs. Do it in a maintenance window just to make sure it does not impact users.

https://www.cisco.com/c/en/us/td/docs/net_mgmt/cisco_secure_access_control_system/5-4/command/reference/cli/cli_app_a.html#98188

 

Finally ACS 5.4 is EOL and End of Support

https://www.cisco.com/c/en/us/products/collateral/security/secure-access-control-system/eos-eol-notice-c51-732647.html

 

ISE is the next generation ACS. Please look at ACS to ISE migration for details how to migrate over to ISE

https://community.cisco.com/t5/security-documents/acs-to-ise-migration/ta-p/3644038

 

Thanks

Krishnan

Enthusiast

Re: what will happen if ACS database full !!!

Hi Jason,
Thanks a lot for your response.the error just as before i told.i plan to confirm the database usage by the command “acsview show-dbsize” for acs-config.But there is no any output,so i don‘t know the database space how to useage.in addition,I also worry about i cannot login the acs if the database full,or some other abnormal things.
Cisco Employee

Re: what will happen if ACS database full !!!

per sme o@kthiruve you need to truncate the logs and compress the database. You can do that first if you think the database is full independent of the output display of disk size.