Hello all,   I am in the process of migrating from ACS 4.3 to 5.4, in the previous version of ACS I had administrators that were assigned to groups in which they could manage.  I am looking for the same functionality in the new version but I have not been able to find this functionality in the documentation.  This deployment has different geographical areas in which I want to assign an administrator to each geographical area which is defined as a Identity Group.  Each identity group is associated with that area and there is users assigned to each of these identity groups, in addition I have Network Device Groups that mirror the Identity Group structure and devices are associated with these groups as well.  What I need is for a admin assigned to the Atlanta group to be able to perform user admin and network device admin for this group.  Any help will be greatly appreciated! Thanks in advance, Mike Partain ... View more

Trying to upgrade a pair of ACS servers from 5.2.0.26 base to patch 4.  I have tried creating different repositiories that are SFTP, FTP, and Local.  The secondary unit(ROTACS2) upgraded fine with no problems the primary(ROTACS) will not, see below. Cisco Application Deployment Engine OS Release: 1.2 ADE-OS Build Version: 1.2.0.182 ADE-OS System Architecture: i386 Copyright (c) 2005-2009 by Cisco Systems, Inc. All rights reserved. Hostname: ROTACS Version information of installed applications --------------------------------------------- Cisco ACS VERSION INFORMATION ----------------------------- Version : 5.2.0.26 Internal Build ID : B.3075 ROTACS/mpartain# ******************************** REPOS.  21.120 is in the same broadcast. repository acs_sftp   url s ftp://xxx.xxx.21.120/home/acs/   user acs password hash xxxx repository acsrepo   url ftp://xxx.xxx.21.120/   user acs password hash xxxxx repository local   url disk:/patch   user partainm password hash xxxxxx repository mikes   url ftp://144.103.30.23/   user acs password hash xxxxxx ****************** Interface ROTACS/mpartain# sh int eth0      Link encap:Ethernet  HWaddr 00:15:17:E8:27:1D            inet addr:xxx.xxx.21.117  Bcast:xxx.xxx.21.127  Mask:255.255.255.240           inet6 addr: fe80::215:17ff:fee8:271d/64 Scope:Link           UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1           RX packets:5685191 errors:0 dropped:2727 overruns:0 frame:0           TX packets:4272107 errors:31947 dropped:0 overruns:0 carrier:31947           collisions:439208 txqueuelen:100           RX bytes:2010473489 (1.8 GiB)  TX bytes:1347424956 (1.2 GiB)           Base address:0x2000 Memory:e8180000-e81a0000 ********************* Show repos ROTACS/mpartain# sh repo acs_sftp old 5-2-0-26-1.tar.gpg 5-2-0-26-4.tar.gpg ROTACS/mpartain# ROTACS/mpartain# sh repo acsrepo 5-2-0-26-1.tar.gpg 5-2-0-26-4.tar.gpg old ROTACS/mpartain# ROTACS/mpartain# sh repo mikes 5-2-0-26-1.tar.gpg 5-2-0-26-4.tar.gpg ROTACS/mpartain# ROTACS/mpartain# sh repo local 5-2-0-26-1.tar.gpg 5-2-0-26-4.tar.gpg ROTACS/mpartain# **************** ACS Patch Install results ROTACS/mpartain# acs patch install 5-2-0-26-4.tar.gpg repository local Invalid patch '5-2-0-26-4.tar.gpg', cannot unpack. % Error: Failure to open / validate the patch ROTACS/mpartain# ROTACS/mpartain# acs patch install 5-2-0-26-4.tar.gpg repository acsrepo Invalid patch '5-2-0-26-4.tar.gpg', cannot unpack. % Error: Failure to open / validate the patch ROTACS/mpartain# ROTACS/mpartain# acs patch install 5-2-0-26-4.tar.gpg repository acs_sftp Invalid patch '5-2-0-26-4.tar.gpg', cannot unpack. % Error: Failure to open / validate the patch *********************** My thoughts. It appears that the GPG key is not vaild on this primary server.  The patches are in the repositories and I used the acsrepo repo to install on the ROTACS2 secondary server. I have looked through articles and the only mention is to not use TFTP, which I am not.  I have also tried to apply patches 1-3 with the same results. Please help, I have one patched and the other is not. ... View more

Hello Experts and thanks in advance for your assistance.   I have been tasked with providing remote phone capabilities to these two deployable kits that we have.  These kits have Internet connectivity and will establish a VPN connection back to our internal network.  I need to be able to dedicate one PSTN connection from the internal network to each kit.  The PSTN connections are up and operational and the phones can dial outbound, the problems that I am having is that the CME router uses a random FXO port when the calls are made.   In each kit there will be a VoIP phone and a Fax machine connected to a FXS port.  Is there any way to have a hunt group or just basic forwarding to the FAX if the VoIP phone goes unanswered.  Which would be best?  My main confusion is how to tie the PSTN number to a sip partner.  I have attached a basic network diagram, i can verify the SIP Peers work as I can make calls from and two the phones across the sip peer.  Through the use of COR I have been able to tie one PSTN to one VoIP phone connected locally to the PSTN router, which would work fine with having a VOIP phone register over the VPN, but when the FAX was added I utilized the SIP Peer and tried to utilize the FXS and I am having trouble.  Didn't know if COR was the best path and thought i would ask here.  IP connectivity is verified. Hardware 3X Cisco 2811 with CME 7.1 I am open to all suggestions. Thanks very much for the assistance. ... View more

Hello all, I have just started working with VOIP in the last few months at a new position, and the manager her wants to have a custom button on the phone when in a call that will automatically conference in the security desk. This would be in the event of a malicious call such as a bomb threat and so forth. I have downloaded the SDK and read through most of the documentation and I have seen references to things such as Dial:2000 (where 2000 represents the number to be dialed) in the Custom SoftKey section of the IP Phone Services Application Development Notes. I appreciate any help provided. PS the Phone that I am using is a 7970. ... View more

I am having a problem with a 8510 that is running 12.1(22) the problem is that we can only get it to pass about 4mb if traffic before it chokes and starts dropping packets. I am going to include the sh ip interface and sh int stats. I was noticing that all the packets are process switched. I cannot enable IP Fast Switching on the DS3 interfaces. Dont know if I should be able to or not. I read that it is ASIC switched so this would make sense... Any help would be GREATLY appreciated. ATM1/0/2 Switching path Pkts In Chars In Pkts Out Chars Out Processor 1042133 55233049 39462393 2091506829 Route cache 0 0 0 0 Total 1042133 55233049 39462393 2091506829 ATM1/0/3 Switching path Pkts In Chars In Pkts Out Chars Out Processor 1927485 102156705 39454111 2091067883 Route cache 0 0 0 0 Total 1927485 102156705 39454111 2091067883 ATM1/1/0 Switching path Pkts In Chars In Pkts Out Chars Out Processor 14187520 751938560 9521193 504623229 Route cache 0 0 0 0 Total 14187520 751938560 9521193 504623229 ... View more

Hello all, I know this is a bad question as I have been worked over by it. The company I work for has a remote office on the other side of the country that supports about 250-350 users. We have them as part of our Active Directory domain and we are doing replication and a Site to Site VPN tunnel with them for this data. The question I am running into is what would be a good starting point for a connection to a POP? The main IT guy there seems to think that they NEED a OC1 which I am totally against. I have no metrics, basically no data to make this call with the exception of the number of users. We have the ability with the Service provider to go with a OC3 interface that is provisioned down to a small pipe and f the requirement arises to have more speed we can bump it up. My initial thoughts are to have them go with a 6mb connection and we will review the bandwidth utilization and see where we are at. I just thought I would get the advice of some Professionals to base my decision. I know it is almost impossible to make a accurate guess without the data. Thanks for any inputs. Mike ... View more