Guna, Tacacs+ Does not use VSAs. Radius uses VSAs.   This is what I found online: http://198.152.212.23/css/P8/documents/100106731 See if this helps. It has an example associated for server configuration. In ACS 4, you need to use the shell exec and priv-lvl=<value>. (Similar to Cisco IOS) Regards Ed ... View more

Hey, I doubt these shows up in accounting. You need to note that accounting is not processed the same way the authen/author request is processed. Regards Ed ... View more

Hi, ACS supports all devices mostly. Depends on your switch whether it supports T+ or radius. Regards Ed ... View more

Hey, ACS 5.5 has this. http://www.cisco.com/c/en/us/td/docs/net_mgmt/cisco_secure_access_control_system/5-5/release/notes/acs_55_rn.html#pgfId-300142 Regards Ed ... View more

Hey, Does the Nortel switch support Tacacs+? If yes, go ahead. Most configuration is going to be on the switch end. Regards Ed ... View more

Hey, As of now no options for this feature implementation. A feature request from your end should get this going. Regards, Ed ... View more

The straightforward answer would be "no", unless they are joined, they won't replicate data. But, the term used "failover cluster" in not right. ACS 5 boxes in primary secondary are only replicating active -active devices.   Regards Ed ... View more

Hi, This is a replication solution. The fail-over is only on the device end for example: US router-->US ACS then UK ACS (if you want to) UK router-->UK ACS then US ACS (if you want to) Regards Ed ... View more

Hi Tony, You should not have command authorization when you use RBAC. Kindly remove: aaa authorization commands default group CORP_ACS local and check again. Regards Ed ... View more

Hey, This works the same way on the ACS 5.x, in ACS 5 you have to configure it as primary and secondary. Regards Ed ... View more

Hey, Could you share the AAA configuration on the Nexus?   Regards Ed ... View more

Hi Daniel, Changing the IP on the ACS will reset the management certificate. usually certificates has DNS host names for CN and are reverse resolvable. So, its better to get a new certificate, but changing it in the DNS server also works. Regards Ed ... View more

Hey, ACS 3 and ACS 4 are windows based servers. ACS 5 is a Linux form (Centos to be precise). 2 Flavors for the ACS 5: -Appliance 1120/1121/3415 -VMware ESX VM   ACS 3.x can be upgraded to 4.2.1 max. ACS 4 to ACS 5 will not be upgrade, it will be migration. For this you need the new purchase of ACS 5. The migration process is somewhat  helpful but some customers don't prefer that. You should have a word with TAC of whether it suits your environment or not. There are lot of things that you need to configure from scratch on ACS 5, so re-think the migration.   Regards Ed ... View more