11-16-2015 11:09 AM - edited 03-24-2021 10:38 AM
Contents
ACS Version | End of Sale | End of Life | End of Support | EoS |
---|---|---|---|---|
5.8 | Aug 30, 2017 | Aug 30, 2018 | Aug 31, 2020 | EoS/L |
5.7 | May 2, 2016 | May 2, 2017 | May 31, 2019 | EoS/L |
5.6 | Feb 16, 2016 | Feb 15, 2017 | February 28, 2019 | EoS/L |
5.5 | April 15, 2015 | April 14, 2016 | April 30, 2018 | EoS/L |
4.2 | October 27, 2011 | October 26, 2012 | October 31, 2014 | EoS/L |
3.3 | August 29, 2006 | August 29, 2007 | August 28, 2009 | EoS/L |
Cisco Secure Access Control System - End-of-Life and End-of-Sale Notices - Cisco
ISE 2.0 supports migration from ACS 5.5 and 5.6 only.
ISE 2.1+ supports migration from ACS 5.5 and later.
ACS version older than 4.x cannot migrate to ISE. You must first upgrade from ACS 4.x to either ACS 5.5 or ACS 5.6 before migrating to ISE 2.0. This is a multi-step process. We recommend a fresh install of ISE with manual configuration or using import/export tools.
If you are using ACS 4.x please see the ACS 4.x to ISE Migration that provides you options for migration to ISE.
ACS versions less than 5.5 need to be upgraded to either ACS 5.5 or later before migrating to ISE.
For customers to migrate to ACS 5.5 or ACS 5.6, they need to be in one of the ACS 4.x versions
ACS 5.x has a significantly different architecture than ACS 4.x. The migration might not carry over a lot of configuration automatically. You might have to manually carry over configuration or use import/export tools. Here are the links that speaks about what objects are supported/not supported during migration.
Please look at the ACS 4.x to 5.x migration doc for more details on architecture and the choices for migration based on your configuration sets. Here is the ACS feature comparison document discussing parity across ACS 3.x/4.x and ACS 5.x releases.
If customers are in prior version of ACS 5.x, you have to upgrade to ACS 5.5 / 5.6 first before migrating to ISE 2.0. For migrating to ISE 2.1, your customer be in one of the last 4 releases of ACS( ACS 5.5/ 5.6/ 5.7 or 5.8).
If your customers interim goal is to upgrade to the latest ACS version based on the EOL then upgrade to the latest version of ACS 5.8.
Please follow the link for detailed procedure for migration. Here are the upgrade paths for the ACS 5.x versions. The ACS versions that supports migration to ISE are in Bold letters.
ACS vs ISE Comparison provides information on feature comparison/ deployment limits are being improved in ISE 2.1
ISE 2.0 TACACS+ Deployment & Sizing Guidance provides TACACS+ deployment sizing and device admin model guideline
How to Migrate ACS 5.x to ISE 2.x will give you step by step instructions to plan, design, prepare and migrate from ACS to ISE successfully.
You can make use of the ACS to ISE - High Level design questionnaire to gather information from your customer environment to scope and design your ISE deployment.
The Migration tool guide is a technical document that discusses the procedure of migrating from ACS to ISE.
It details the migration process and provides information on the objects, character sets supported and differences between ACS and ISE.
This video tutorial covers Part III of the three part video tutorials for performing ACS to ISE migration covering the Migration process and demonstration. The 3 part video tutorial series will provide an in-depth discussion on Cisco Access Control Server(ACS) to Cisco Identity Services Engine(ISE) migration useful for customers, partners, Sales AS and other participants who are planning this migration.
Topics covered would include discussion on configuration gaps, exceptions, fixes and workarounds across all the configuration areas of ACS. Preparing your staging environment, Migration tool and general pre-requisites and frequently asked questions.
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: