ACS 5.3 Backup idea

IS this below alerts 1 . Incremental Backup Not Configured and Purge Configuration Repository not configured is must ?
or it leads to any issues in future ?
<TABLE style="BORDER-BOTTOM: #fc8932 1.5pt outset; BORDER-LEFT: #fc8932 1.5pt outset; WIDTH: 100%; BORDER-TOP: #fc8932 1.5pt outset; BORDER-RIGHT: #fc8932 1.5pt outset" border=1 cellSpacing=0 cellPadding=0 width="100%" mcestyle="width: 100%; padding: px; border: #fc8932 1.5pt outset;">
<TD style="BORDER-BOTTOM: #fc8932 1pt inset; BORDER-LEFT: #fc8932 1pt inset; PADDING-BOTTOM: 7.5pt; PADDING-LEFT: 7.5pt; PADDING-RIGHT: 7.5pt; BACKGROUND: #fc8932; BORDER-TOP: #fc8932 1pt inset; BORDER-RIGHT: #fc8932 1pt inset; PADDING-TOP: 7.5pt" colSpan=2 mcestyle="background: #fc8932; border: #fc8932 1pt inset; padding: 7.5pt;">
Cisco Secure ACS - Alarm Notification
<TD style="BORDER-BOTTOM: #fc8932 1pt inset; BORDER-LEFT: #fc8932 1pt inset; PADDING-BOTTOM: 7.5pt; PADDING-LEFT: 7.5pt; PADDING-RIGHT: 7.5pt; BACKGROUND: #fc8932; BORDER-TOP: #fc8932 1pt inset; BORDER-RIGHT: #fc8932 1pt inset; PADDING-TOP: 7.5pt" mcestyle="background: #fc8932; border: #fc8932 1pt inset; padding: 7.5pt;">
Severity: Warning
<TD style="PADDING-BOTTOM: 7.5pt; PADDING-LEFT: 7.5pt; PADDING-RIGHT: 7.5pt; BACKGROUND: #fc8932; PADDING-TOP: 7.5pt" mcestyle="background: #fc8932; padding: 7.5pt;">
<TD style="BORDER-BOTTOM: #fc8932 1pt inset; BORDER-LEFT: #fc8932 1pt inset; PADDING-BOTTOM: 7.5pt; PADDING-LEFT: 7.5pt; PADDING-RIGHT: 7.5pt; BORDER-TOP: #fc8932 1pt inset; BORDER-RIGHT: #fc8932 1pt inset; PADDING-TOP: 7.5pt" mcestyle="border: #fc8932 1pt inset; padding: 7.5pt;">
Alarm Name
<TD style="BORDER-BOTTOM: #fc8932 1pt inset; BORDER-LEFT: #fc8932 1pt inset; PADDING-BOTTOM: 7.5pt; PADDING-LEFT: 7.5pt; PADDING-RIGHT: 7.5pt; BORDER-TOP: #fc8932 1pt inset; BORDER-RIGHT: #fc8932 1pt inset; PADDING-TOP: 7.5pt" mcestyle="border: #fc8932 1pt inset; padding: 7.5pt;">
System Alarm
<TD style="BORDER-BOTTOM: #fc8932 1pt inset; BORDER-LEFT: #fc8932 1pt inset; PADDING-BOTTOM: 7.5pt; PADDING-LEFT: 7.5pt; PADDING-RIGHT: 7.5pt; BORDER-TOP: #fc8932 1pt inset; BORDER-RIGHT: #fc8932 1pt inset; PADDING-TOP: 7.5pt" mcestyle="border: #fc8932 1pt inset; padding: 7.5pt;">
Cause/Trigger
<TD style="BORDER-BOTTOM: #fc8932 1pt inset; BORDER-LEFT: #fc8932 1pt inset; PADDING-BOTTOM: 7.5pt; PADDING-LEFT: 7.5pt; PADDING-RIGHT: 7.5pt; BORDER-TOP: #fc8932 1pt inset; BORDER-RIGHT: #fc8932 1pt inset; PADDING-TOP: 7.5pt" mcestyle="border: #fc8932 1pt inset; padding: 7.5pt;">
Incremental Backup Not Configured
<TD style="BORDER-BOTTOM: #fc8932 1pt inset; BORDER-LEFT: #fc8932 1pt inset; PADDING-BOTTOM: 7.5pt; PADDING-LEFT: 7.5pt; PADDING-RIGHT: 7.5pt; BORDER-TOP: #fc8932 1pt inset; BORDER-RIGHT: #fc8932 1pt inset; PADDING-TOP: 7.5pt" mcestyle="border: #fc8932 1pt inset; padding: 7.5pt;">
Alarm Details
<TD style="BORDER-BOTTOM: #fc8932 1pt inset; BORDER-LEFT: #fc8932 1pt inset; PADDING-BOTTOM: 7.5pt; PADDING-LEFT: 7.5pt; PADDING-RIGHT: 7.5pt; BORDER-TOP: #fc8932 1pt inset; BORDER-RIGHT: #fc8932 1pt inset; PADDING-TOP: 7.5pt" mcestyle="border: #fc8932 1pt inset; padding: 7.5pt;">
Incremental backup is not configured. Configuring incremental backup is necessary to make the database purge successful. This will help to avoid disk space issues. View database Size is 0.1GB and size it occupies on the harddisk is 0.09GB.
<TD style="BORDER-BOTTOM: #fc8932 1pt inset; BORDER-LEFT: #fc8932 1pt inset; PADDING-BOTTOM: 7.5pt; PADDING-LEFT: 7.5pt; PADDING-RIGHT: 7.5pt; BORDER-TOP: #fc8932 1pt inset; BORDER-RIGHT: #fc8932 1pt inset; PADDING-TOP: 7.5pt" mcestyle="border: #fc8932 1pt inset; padding: 7.5pt;">
Generated On
<TD style="BORDER-BOTTOM: #fc8932 1pt inset; BORDER-LEFT: #fc8932 1pt inset; PADDING-BOTTOM: 7.5pt; PADDING-LEFT: 7.5pt; PADDING-RIGHT: 7.5pt; BORDER-TOP: #fc8932 1pt inset; BORDER-RIGHT: #fc8932 1pt inset; PADDING-TOP: 7.5pt" mcestyle="border: #fc8932 1pt inset; padding: 7.5pt;">
Thu Sep 13 04:00:00 UTC 2012
<TABLE style="BORDER-BOTTOM: #fc8932 1.5pt outset; BORDER-LEFT: #fc8932 1.5pt outset; WIDTH: 100%; BORDER-TOP: #fc8932 1.5pt outset; BORDER-RIGHT: #fc8932 1.5pt outset" border=1 cellSpacing=0 cellPadding=0 width="100%" mcestyle="width: 100%; padding: px; border: #fc8932 1.5pt outset;">
<TD style="BORDER-BOTTOM: #fc8932 1pt inset; BORDER-LEFT: #fc8932 1pt inset; PADDING-BOTTOM: 7.5pt; PADDING-LEFT: 7.5pt; PADDING-RIGHT: 7.5pt; BACKGROUND: #fc8932; BORDER-TOP: #fc8932 1pt inset; BORDER-RIGHT: #fc8932 1pt inset; PADDING-TOP: 7.5pt" colSpan=2 mcestyle="background: #fc8932; border: #fc8932 1pt inset; padding: 7.5pt;">
Cisco Secure ACS - Alarm Notification
<TD style="BORDER-BOTTOM: #fc8932 1pt inset; BORDER-LEFT: #fc8932 1pt inset; PADDING-BOTTOM: 7.5pt; PADDING-LEFT: 7.5pt; PADDING-RIGHT: 7.5pt; BACKGROUND: #fc8932; BORDER-TOP: #fc8932 1pt inset; BORDER-RIGHT: #fc8932 1pt inset; PADDING-TOP: 7.5pt" mcestyle="background: #fc8932; border: #fc8932 1pt inset; padding: 7.5pt;">
Severity: Warning
<TD style="PADDING-BOTTOM: 7.5pt; PADDING-LEFT: 7.5pt; PADDING-RIGHT: 7.5pt; BACKGROUND: #fc8932; PADDING-TOP: 7.5pt" mcestyle="background: #fc8932; padding: 7.5pt;">
<TD style="BORDER-BOTTOM: #fc8932 1pt inset; BORDER-LEFT: #fc8932 1pt inset; PADDING-BOTTOM: 7.5pt; PADDING-LEFT: 7.5pt; PADDING-RIGHT: 7.5pt; BORDER-TOP: #fc8932 1pt inset; BORDER-RIGHT: #fc8932 1pt inset; PADDING-TOP: 7.5pt" mcestyle="border: #fc8932 1pt inset; padding: 7.5pt;">
Alarm Name
<TD style="BORDER-BOTTOM: #fc8932 1pt inset; BORDER-LEFT: #fc8932 1pt inset; PADDING-BOTTOM: 7.5pt; PADDING-LEFT: 7.5pt; PADDING-RIGHT: 7.5pt; BORDER-TOP: #fc8932 1pt inset; BORDER-RIGHT: #fc8932 1pt inset; PADDING-TOP: 7.5pt" mcestyle="border: #fc8932 1pt inset; padding: 7.5pt;">
System Alarm
<TD style="BORDER-BOTTOM: #fc8932 1pt inset; BORDER-LEFT: #fc8932 1pt inset; PADDING-BOTTOM: 7.5pt; PADDING-LEFT: 7.5pt; PADDING-RIGHT: 7.5pt; BORDER-TOP: #fc8932 1pt inset; BORDER-RIGHT: #fc8932 1pt inset; PADDING-TOP: 7.5pt" mcestyle="border: #fc8932 1pt inset; padding: 7.5pt;">
Cause/Trigger
<TD style="BORDER-BOTTOM: #fc8932 1pt inset; BORDER-LEFT: #fc8932 1pt inset; PADDING-BOTTOM: 7.5pt; PADDING-LEFT: 7.5pt; PADDING-RIGHT: 7.5pt; BORDER-TOP: #fc8932 1pt inset; BORDER-RIGHT: #fc8932 1pt inset; PADDING-TOP: 7.5pt" mcestyle="border: #fc8932 1pt inset; padding: 7.5pt;">
Purge Configuration Repository not configured
<TD style="BORDER-BOTTOM: #fc8932 1pt inset; BORDER-LEFT: #fc8932 1pt inset; PADDING-BOTTOM: 7.5pt; PADDING-LEFT: 7.5pt; PADDING-RIGHT: 7.5pt; BORDER-TOP: #fc8932 1pt inset; BORDER-RIGHT: #fc8932 1pt inset; PADDING-TOP: 7.5pt" mcestyle="border: #fc8932 1pt inset; padding: 7.5pt;">
Alarm Details
<TD style="BORDER-BOTTOM: #fc8932 1pt inset; BORDER-LEFT: #fc8932 1pt inset; PADDING-BOTTOM: 7.5pt; PADDING-LEFT: 7.5pt; PADDING-RIGHT: 7.5pt; BORDER-TOP: #fc8932 1pt inset; BORDER-RIGHT: #fc8932 1pt inset; PADDING-TOP: 7.5pt" mcestyle="border: #fc8932 1pt inset; padding: 7.5pt;">
Configure Remote Repository under Purge Configuration which is used to take a backup of data before purge.
<TD style="BORDER-BOTTOM: #fc8932 1pt inset; BORDER-LEFT: #fc8932 1pt inset; PADDING-BOTTOM: 7.5pt; PADDING-LEFT: 7.5pt; PADDING-RIGHT: 7.5pt; BORDER-TOP: #fc8932 1pt inset; BORDER-RIGHT: #fc8932 1pt inset; PADDING-TOP: 7.5pt" mcestyle="border: #fc8932 1pt inset; padding: 7.5pt;">
Generated On
<TD style="BORDER-BOTTOM: #fc8932 1pt inset; BORDER-LEFT: #fc8932 1pt inset; PADDING-BOTTOM: 7.5pt; PADDING-LEFT: 7.5pt; PADDING-RIGHT: 7.5pt; BORDER-TOP: #fc8932 1pt inset; BORDER-RIGHT: #fc8932 1pt inset; PADDING-TOP: 7.5pt" mcestyle="border: #fc8932 1pt inset; padding: 7.5pt;">
Thu Sep 13 04:00:00 UTC 2012

Hi,
Depending on the version of ACS you are on, there were some issues where a purging repository needs to be configured (nfs is recommended) in order to purge the monitoring data, there have been issues where this can fill up and cause the box to become inoperable.
What version of ACS are you on?
Tarik Admani
*Please rate helpful posts*

Similar Messages

ACS 5.3 - Backups fail to TFTP, work to DISK

Hi All,
I'm configuring ACS for the first time and the config is complete and working, except backups of the view database. I've created a TFTP repositiory and if I perform a manual backup or wait for a scheduled one to occur it fails. I do get a .tar.gpg file in the TFTP server (but can not restore from it as it's not listed in "Restore" as a backup).
It works fine if I create and use a local disk repository. I get a .tar.gpg but also a catalog.xml and repolock.cfg file (which I don't in TFTP). Looking at the logs on the TFTP server I can see it tries repeatedly to read the catalog.xml file but fails:
Read request for file <DB/catalog.xml>. Mode netascii [15/07 16:05:52.167]
File <DB\catalog.xml> : error 2 in system call CreateFile The system cannot find the file specified. [15/07 16:05:52.167]
That seems correct, the file doesn't exist. However it never seems to try and create it.
(I've created 4 or 5 TFTP repositories testing this, all behave the same)
Any ideas?
Paul

Paul,
TFTP will not work because the protocol doesnt support directory listing, what the ACS is trying to do is determine if a backup is currently running by looking into the repolock.cfg file. It also tries to see the contents of the catalog.xml file so that when a incremental backup is triggered it will add a line of the first full backup followed by all the incremental backups. Your best bet is to use ftp as the backup and this will fix the issue you are facing.
thanks,
tarik Admani

ACS 5.1 backup via nfs issues

Hi all,
we ran into problems when launching an immediate backup via nfs:
server is windows (nfs share), ACS is 5.1.0.44
windows log files show successful nfs mount/unmount when we try to save the ACS backup to a nfs repository but ACS reports that the backup could not be written after sucessfully generating the .gpg archive.
show repository for a nfs repository always returns errors on the ACS console, either "could not mount" or "invalid directory" - in both cases the windows log file report a successful nfs mount (we turned on nfs logs on the windows server).
the same operations, backing up and show repository, are sucessful with a test ftp-server (we just changed the protocol and adjusted the credentials in the repository config).
I have carefully read throug the available documention and the sucessful nfs mount/unmount on the windows logs show that basically everything is configured correctly and no restrictions on the server block access to the nfs.
any idea on that?
rgds,
MiKa
PS the url used for nfs follows the syntax:
nfs://{server}:/{nfs-share-name}/
the colon has to be there, according to the documentation
Message was edited by: m.kafka

Hi all,
we ran into problems when launching an immediate backup via nfs:
server is windows (nfs share), ACS is 5.1.0.44
windows log files show successful nfs mount/unmount when we try to save the ACS backup to a nfs repository but ACS reports that the backup could not be written after sucessfully generating the .gpg archive.
show repository for a nfs repository always returns errors on the ACS console, either "could not mount" or "invalid directory" - in both cases the windows log file report a successful nfs mount (we turned on nfs logs on the windows server).
the same operations, backing up and show repository, are sucessful with a test ftp-server (we just changed the protocol and adjusted the credentials in the repository config).
I have carefully read throug the available documention and the sucessful nfs mount/unmount on the windows logs show that basically everything is configured correctly and no restrictions on the server block access to the nfs.
any idea on that?
rgds,
MiKa
PS the url used for nfs follows the syntax:
nfs://{server}:/{nfs-share-name}/
the colon has to be there, according to the documentation
Message was edited by: m.kafka

ACS 5.3 Backup fails

ACS 5.3 on VM- backup fails all the time. I opened several tickets with Cisco, but still no luck.
Here is one of the log message I got during the backup. Maybe someone can point out what the issue is.
debugd[2933]: [31965]: config:kron: cs_api.c[1142] [daemon]: occurrence occurrence_backup1 could not be deleted.

I just did it on my ACS 5.4 patch 6 (running on VMWare) backup to a Windows 2003 FTP server and it works without any issues:
repository ftp_192.168.1.129
url ftp://192.168.1.129/
user Administrator password hash e50ffb9aabc8ccebe066f6239efeaa1ab728a16f2b2
labacs2/admin# backup labacs2 repository ftp_192.168.1.129
% Creating backup with timestamped filename: labacs2-140628-2059.tar.gpg
Calculating disk size for /opt/backup/backup-labacs2-1403989173
Total size of backup files are 27 M.
Max Size defined for backup files are 13339 M.
labacs2/admin#

ACS 5.4 backup status in syslog

Have raised a TAC for this but thought I'd post here too.
We are running ACS v5.4 Patch 1.
We have noticed that ACS will not produce syslog messages about scheduled backups (success or failure)
(1)    From the GUI, under “System Administration > Configuration > Log Configuration > Remote Log Targets”, we have configured a remote syslog host.
(2)    Then, each logging category under “System Administration > Configuration > Log Configuration > Logging Categories > Global”, we have configured everything to log to the remote target.
(3)    However, no messages regarding successful or failed backups ever arrive via syslog.
Backup status can be checked by running “show backup history” from the CLI.
However, syslog communication between ACSView and ACS show backup status OK.
You can find backup information in ACS View under:
Monitoring & Reports > Reports > Catalog > ACS Instance > ACS Operations Audit
We have one quite simple requirement – that ACS produces syslog messages stating backup success and failure. This will drive our alarm system.
Has anyone else got this to work?
Pretty simple request - backup success/failure in syslog messages!
Forcing the output of ade.log to syslog would also do it. Would rather not hack around under the covers with root patch though.
Cheers!

Hi Rob,
I was going through your requirement and that seems to be an important notification. If we look at the ACS 5.4 guide > under logging categories. It does talk about ACS operational changes—Logs all operations requested by administrators, including promoting an ACS from your deployment as the primary, requesting a full replication, performing software downloads, doing a backup or restore, generating and restoring PACs, and so on.
Administrative and operational audit log messages are always sent to the local store, and you can also send them to remote syslog server and Monitoring and Reports server targets.
Log messages are sent to the local store with this syslog message format:
time stamp sequence_num msg_code msg_sev msg_class msg_text attr=value
Log target and logging categories.
http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_system/5.4/user/guide/logging.html#wp1052656
Since you've configured ACS logging categories to log everything. It should work fine. Can you see the same message success or failure under local store logs of ACS. If we can see it there it means ACS is sending it, after that we can check in the log forwarder file and run the packet capture on the syslog server.
~BR
Jatin Katyal
**Do rate helpful posts**

Cisco Secure ACS 5.6 Backup to FTP server listening on non-standard ports

When defining a software repository from CLI or GUI, I have not been able to define the custom port that our FTP server is listening on. Does ACS support the use of custom ports for FTP?

Hi Anthony,
I don't thing so it will support non-standard ports as the options are only Disk,FTP,SFTP,TFTP and NFS.
Regards,
Chris

ACS User database Backup

Is it possible to have the ACS user database in an excel sheet

Hi,
You can open .dmp file in notepad but that will not provide any info as its not user readable.
You need to export the lsit of users in .txt extension
here is the command that you need to run from the command prompt where ACS is installed
start > run> cmd > go to this dir
C:\Program Files\CiscoSecure ACS v4.2\bin>net stop csauth
CSUtil.exe -u user.txt
C:\Program Files\CiscoSecure ACS v4.2\bin>net start csauth
Then you can easily access user.txt file in notepad.
HTH
JK

ACS incremental backup is OFF

Dear Team,
Incremental backup settings is changing to OFF state and getting below error message in the logs ACS . Please find the attachement.
""""" Aug 31 2014 04:01:21 com.cisco.nm.acs.view.common.incrbackup.IncrBackupJob.execute(IncrBackupJob.java:166) ERROR DefaultQuartzScheduler_Worker-5 Acs.MGMT.ACS
VIEW Incremental Backup: exception java.lang.NullPointerException
        at com.cisco.nm.acs.view.common.incrbackup.IncrBackupUtil.sendSystemAlert(IncrBackupUtil.java:1690)
        at com.cisco.nm.acs.view.common.incrbackup.IncrBackupImpl.executeBackup(IncrBackupImpl.java:457)
        at com.cisco.nm.acs.view.common.incrbackup.IncrBackupJob.execute(IncrBackupJob.java:125)
Sep 01 2014 22:08:21 com.cisco.nm.acs.view.common.incrbackup.XMLExceptionListener.exceptionThrown(XMLExceptionListener.java:44) FATAL DefaultQuartzScheduler_
Worker-9 Acs.MGMT.ACSVIEW Premature end of file.
        at com.cisco.nm.acs.view.common.incrbackup.IncrBackupUtil.getCatalogFromFile(IncrBackupUtil.java:1447)
        at com.cisco.nm.acs.view.common.incrbackup.IncrBackupImpl.executeBackup(IncrBackupImpl.java:286)
        at com.cisco.nm.acs.view.common.incrbackup.IncrBackupJob.execute(IncrBackupJob.java:125)
Sep 01 2014 22:08:21 com.cisco.nm.acs.view.common.incrbackup.IncrBackupImpl.executeBackup(IncrBackupImpl.java:446) ERROR DefaultQuartzScheduler_Worker-9 Acs.
MGMT.ACSVIEW Backup failed: null
Sep 01 2014 22:08:21 com.cisco.nm.acs.view.common.incrbackup.IncrBackupJob.execute(IncrBackupJob.java:166) ERROR DefaultQuartzScheduler_Worker-9 Acs.MGMT.ACS
VIEW Incremental Backup: exception java.lang.NullPointerException
        at com.cisco.nm.acs.view.common.incrbackup.IncrBackupUtil.sendSystemAlert(IncrBackupUtil.java:1690)
        at com.cisco.nm.acs.view.common.incrbackup.IncrBackupImpl.executeBackup(IncrBackupImpl.java:453)
        at com.cisco.nm.acs.view.common.incrbackup.IncrBackupJob.execute(IncrBackupJob.java:125)

Hi Muthuraj,
Can you please try reconfiguring incremental backup. I think as per the logic , the incremental backup is forced to OFF mode when an error is encountered during any of the previous incremental backups. If you are still seeing the same error after re-configuring , I would suggest you to check this issue with TAC , as it is something related to the data that is being backed up.
Thanks

ACS Backup on map drive

Hi Guyz,
Good Day,
I have ACS 4.2 on vmware machine, everything is working fine. Automatically backup is already set on local machine, but the thing is, i want to configure automatically backup on my file server (ex. \\1.1.1.1\acsbackup). Even though i have defined the acsbackup folder through map drive but no success.
when i define the above string in the backup location directory, it shows an error (no directory exists).
How do i configure file server or map drives on acs & save daily backup on fileserver
Many thanks in advance
Cheers

Hello,
Unfortunately the ACS for Windows 4.x will only backup files on the local drive the application is installed. Mapping remote drives/folders will not work as the application will not be able to read the mapped drive.
ACS 5.x includes support for different "Repository" configurations in order to backup files to remote device through FTP, SFTP, NFS. However, ACS 4.x does not include that functionality and backups will be saved on the local drive only.
If this was helpful please rate.
Regards.

ACS migration from 4.1.1.23 to 5.6

Dear Team.
We need to upgrade an ACS 4.1.1.23 to a new ACS 5.6. This means a data migration from ACS 4.1.1.24 to 5.6
The migration guide says that the migration utility must be run on a 4.1.1.24 to check the DB integrity and make some modifications.
Our client has an ACS 4.1.1.23.
In the Cisco Download page for ACS 4.1.1.24 there isn't any acumulative patch to 4.1.1.24. Anyone has any idea how we can upgrade the ACS 4.1.1.23 to .24?
After this patch will be applied, we will backup data from 4.1.1.24 to migration server 4.1.1.24 with demo license (this file exist on Download Center)
Thanks.

You can upgrade to 4.2 and then to 5.6
ACS 4.2 with the recovery DVD, no need to upgrade to ACS 4.1.1.24 and then to 4.2.
Remember to make a backup before the upgrade.
There is a feature that allows you to restore any ACS 4.1 backup into ACS 4.2.
"Before you begin any upgrade procedure, we recommend that you back up your existing data and configuration. When, upgrading do a re-image of ACS 4.2 and then restore the ACS 4.1 configuration."
http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_server_for_solution_engine/4.2/installation/guide/solution_engine/upgap.html#wp1120037
http://www.cisco.com/c/en/us/td/docs/net_mgmt/cisco_secure_access_control_system/5-6/user/guide/acsuserguide/migrate.html#pgfId-1057975

Can set any IP on ACS 4.0 SE - accept the one I need

We are trying to upgrade from an ACS 3.2 for Windows server to our new ACS 4.0 SE box. We have upgraded the Windows box to 4.0, backed up the configuration and restored it to the new box. We have pointed a couple of clients to the new box for testing, and can authenticate. So far so good, but when we went to the final step, assigning the IP address of the old server to the new box, we had a problem ? the ACS SE box will not let us assign the address to the local NIC ? I get an message that the configuration could not be assigned to the NIC.
To go into detail on what was done:
The Windows server was changed from x.x.3.45 to x.x.0.45 (we use a 255.255.248.0 subnet mask), and rebooted.
On the ACS SE box, I used set IP to change the IP from x.x.0.20 (used for testing and setting up the configuration) to x.x.3.45. The system would not complete this step - This is when The system indicated that the configuration could not be applied to the NIC.
I then set the NIC to DHCP, which was success fully applied. I then set the NIC to x.x.3.46, which it also accepted. At this point I thought it may be doing DNS lookup, and seeing another host name for the IP, so I deleted the PTR record for x.x.3.45, and tried setting that as the IP again. I got the same response.
I thought it for some reason could be detecting an IP conflict, so I tried setting the IP to an address I knew was in use. As I expected, this did not work, but the error did say IP conflict ? and I was not getting that error on x.x.3.45.
At this point I moved the connection on the ACS to the other Ethernet interface, but that did not improve the issue.
I tried performing a reboot on the ACS box, but still could not set the desired IP address. At this point what I thought would be a 5 minute outage for VPN authentication had lasted 45 minutes, and I had to put the target address back on the Windows ACS server.
Any idea what is causing this? I can set the IP address of the ACS SE to any IP accept for the one that I need! Since we have 70+ Cisco devices that point to x.x.3.45 for authentication, we really do not want to change the address of our ACS.

You need to open a TAC case with Cisco for this.
If I recalled this correctly, the old IP
address is save into a registry file and when
you backup the configuration, that registry
containing the old IP address will be in there.
When you restored the configuration, it will
restore the old IP address along with it.
Cisco TAC can help you modified the registry
to fix this problem.
You do not have this problem when you run
Freeware TACACS+. You can change the IP of
the box at anytime and not breaking anything.
David
CCIE Security

Problems upgrading ACS 3.3 to ACS 4.0

I have a Cisco ACS server 3.3 running on a win2k platform and i have to upgrade to ACS4.0 on win2k.
- backing up 3.3 and restoring files on 4.0 using web interface doesn't work;
- the same operation using csutils.exe doesn't work (csutil -b [...] and then csutil -r [...])
- i have installed the new machine with ACS3.3, i have imported user/group/data with csutil, then i have installed ACS 4.0 using setup.exe; the result is that ACS's services fail to start
Any idea?!
THX a lot.

Hi Antonio,
- backing up 3.3 and restoring files on 4.0 using web interface doesn't work.
*It wont work, as in ACS we can backup and restore database among ACS's of same versions only, same applies for replication.
- the same operation using csutils.exe doesn't work (csutil -b [...] and then csutil -r [...])
*Answer will be same as above.
- i have installed the new machine with ACS3.3, i have imported user/group/data with csutil, then i have installed ACS 4.0 using setup.exe; the result is that ACS's services fail to start.
*Normal cause for this is that you might be hitting a bug, according to which when we try to upgrade a database of ACS 3.3(x) build xx to ACS 4.0 and we have trailing spaces in AAA client and/or AAA servers entry in databaae, then that may cause an issue. But we may not be hitting that bug.
Correct way to upgrade :
[1] Verify we are following correct and supported upgradation path :
http://www.cisco.com/univercd/cc/td/doc/product/access/acs_soft/csacs4nt/acs40/rnwin401.htm#wp37488
[2] Then follow following steps to upgrade :
http://www.cisco.com/univercd/cc/td/doc/product/access/acs_soft/csacs4nt/acs40/install/install.htm#wp1041858
Summarizing above link, just run setup of ACS 4.0 over existing setup of ACS 3.3, and setup will prompt you itself, to save previous configuration, select yes at that point.
Let me know if this helps.
Regards,
Prem

How do i backup only 1 particular folder in Time Machine

I dont know if this has been asked or not-frankly i just want to know because ive never even touched time machine before. I have a time capsule now at work and boss is telling me to backup my work to the time capsule using time machine. I keep hearing that this thing works backward, that you have to EXCLUDE folders you DONT want? Is that right? If so thats just plain stupid IMHO. All i want to do is setup a nightly backup of work and not have to worry about it. How do i best set this up?

2.So does that mean Im working directly on the external drive?
Yes.
Im confused with this solution. Im about to setup a Time Capsule HD as the target drive for TM or this OSX Backup idea above. The whole reason of doing that is so idont have to manually copy it there and then keep it updated.
I'm confused about what is confusing you. Storing data on an external drive is no different from storing it on an internal one. The whole point of this discussion, I thought, was that (a) you were under orders from your boss to back up your work data with Time Machine, and nothing but Time Machine; (b) you were, for some strange reason, dead set against backing up anything except your work data; and (c) you couldn't be bothered to set up a bunch of exclusions in Time Machine. This way, you don't have to. Just exclude the internal drive. The one you don't exclude -- the external -- will be backed up automatically, which is what you seem to want.

Using Ipod as a backup

I was concerned about backing up my music files when I realized that the Ipod itself was a handy backup. All of my music was on the portable harddrive known as "my Ipod". I went into the Apple store and wanted to talk to the technicians about using the Ipod as my backup harddrive. Man, was I surprised when they said, "oh, we can't talk about that". Great, I bought this fancy music playing thing and it becomes a great (and expensive) one way street. Then, the young technician said that there is a way to make the Ipod a "disc drive" he began to hold several things down on the wheel simultaniously that would allow me to write to my computer hard drive - thus makeing my Ipod a "backup". He was going so fast I could not catch it all. Plus, he said if you do that, something else happens.
Now, my CPU has crashed and I have $100s of dollars in music on my Ipod that I want to get back onto a new hard drive.
How is this done? Do I have to go to the "black market" to find this out?
Richard G.

Richard,
While you
i can
store a copy of your complete music files on the iPod if you have the space (in addition to the music stored there by iTunes), you have not created a true backup and are still at risk for data/music loss. I do not consider an iPod to be a music backup device unless that is all you are using it for (not sure why one would do this...).
A real backup is one that is
b independent
of its main source(s). This means both iTunes and the iPod. You need to have a separate backup source external to the PC or iPod: CD, DVD or external HD for a start. At a minimum, you need your music on your PC within iTunes, the iPod and one other medium. Many advanced folks here have multiple backups as none of the methods are completely fail-safe.
If you choose to delete your music from your PC (as some folks do), having two distinct backup sets is critical.
See: Buegie, "Best to Save iTunes Library Externally" #1, 04:39pm Sep 21, 2005 CDT for some backup ideas.
In the end, it's your data and time/money, so make the choices that fit your needs.

Setting up DVD drives on single IDE channels

The k9n only has a single IDE channel, but my dvd drive will only seem to work when I have it set as the Primary Master. Does this particularly matter ?

Uthred,
Run your DVD Drive as Master on the IDE Cable. If you have an IDE Hard Drive you also want to run on there, try it as slave. (I am guessing it would be a backup HD since you have all the SATA HDs listed in your Sig.)
If the DVD Drive does not like the Slave HD, I would recommend buying a cheap USB 2.0 External Drive Enclosure and putting your backup IDE HD in there and plug it in to a USB Port.
It is a solution.
Take Care,
Richard

ACS 5.3 Backup idea

Similar Messages

Maybe you are looking for