ACS 5.4 Multiple NIC Questions

I've read that 5.4 includes support for multiple NICs (appliance and VM).  My question is what can these NICs be used for?  I know one must be a dedicated management link, and the other three support TACACS/RADIUS.  Does this mean that each NIC can have a separate IP address and thus act as a separate AAA target or are the links just used for aggregation?  
If this posts answers your question or is helpful, please consider rating it and/or marking as answered.       

Hi Chris,
If you're running 1121 with ACS 5.4 and looking at Table 4-4     ACS 5.4 Functional Interface Distribution Among Network Interfaces. then the answer is that you may set up any interface for tacacs/radius authentication. However, management interface should be setup for gig0 only. Currently, it doesn't support NIC teaming/bonding. However, it sometimes create issues with replication.
http://www.cisco.com/en/US/partner/docs/net_mgmt/cisco_secure_access_control_system/5.4/installation/guide/csacs_hw_ins.html#wp1179311
In case you are running 3415 appliance, the only difference is that it supports reduduncy but that only applies for Cisco Integrated Management Interface (CIMC)
step 4. Set the NIC mode to your choice for which ports to use to access the CIMC for server management
http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_system/5.4/installation/guide/csacs_hw_ins_ucs.html#wp1188250
Hope this helps.
~BR
Jatin Katyal
**Do rate helpful posts**

Similar Messages

  • ACS v4.2 for Windows multiple NICs?

    Hi, I would like separate ACS traffics on 2 two separate NICs, one for front end AAA service related traffics, and another one for web, backup administrative traffic, is it possible?
    Leo

    Hi Leo,
    Teaming is not supported at this
    time.
    When ACS server has dual NIC, there might be problem with interoperability between ACS servers for functions like replication, RDBMS-sync, RADIUS proxy, remote logging, remote agent.
    Already filed as enhancement.
    CSCsr76897: ACS interoperability with dual NICs
    HTH
    Regrads,
    JK

  • WOL question. SCCM server with multiple nics.

    Hi,
    I have a sccm server with multiple nics, I can wake up any machine using a 3ed party magic packet utility, if I set a schedule and use sccm wol functionally the machine never wakes up. As I pointed out my server has multiple nics, does anyone have a sccm
    server with multiple nics with sccm built in wol functionally working?. I am curious on how you achieved this.

    Hey Garth,
    Yes the problem is solved but we had to buy a 3rd party power management utility to accomplish WOL. Because we have many different subnets in our environment we found that this was the fastest way to get WOL working,
    So out of the box SCCM would not work for us, with a 3rd party utility that had an SCCM plugin WOL now works flawlessly.

  • ISE 1.2 - Multiple NICs/Load Balancing for DHCP Probe

    Hello guys
    Just prepping an ISE 1.2 patch 8 setup in our organization. I am going for the virtual appliances with multiple NICs. It will be a distributed deployment with 4 x PSNs behind a load balancer and there is no requirement for wireless or guest user at the moment. I've got 2 points I will like to get some guidance on:
    Our DC has a dedicated mgmt network and I plan to IP the gig0 interface of the PANs, MNTs and PSNs from this subnet. All device admin, clustering, config replication, etc will be over this interface. However, RADIUS/probe/other user traffic to the ISE PSNs will be over the gig1 interface which will be addressed from another L3 network. Is this a supported configuration in ISE?
    I intend to use the DHCP probe as part of device profiling and will ideally like to have just an additional ip helper to add to our switch SVI config. Also, it will appear that WLCs can only be configured for 2 DHCP servers for a given network so another consideration for when we bringing our WLAN in scope. We however use ACE load balancers within our DC and from what I have read, they do not support DHCP load balancing. Are there any workarounds to using the DHCP probe with multiple PSNs without having to add each node as an ip helper/DHCP server on the NADs?
    Thanks in advance
    Sayre

    Hello Sayre-
    For Question #1:
    Management is restricted to GigabitEthernet 0 and that cannot be changed so you should be good there
    You can configure Radius and Profiling to be enabled on other interfaces
    Even though you are not using guest services yet, you can dedicate an interface just for that. As a result, you can separate guest traffic completely from your production network
    Take a look at this link for more info:
    http://www.cisco.com/c/en/us/td/docs/security/ise/1-2/installation_guide/ise_ig/ise_app_c-ports.html
    For Question #2
    If you are using a Cisco WLC and running code 7.4 and newer you don't need to mess with the IP helper configurations. 
    The controller can be configured to act as a collector for client profiling and interact with the DHCP thread along with the RADIUS accounting task that is running on the controller. The controller receives a copy of the DHCP request packet sent from the DHCP thread and parses the DHCP packet for two options:
    –Option 12—HostName of the client
    –Option 60—The Vendor Class Identifier
    After this information is gathered from the DHCP_REQUEST packet, a message is formed by the controller with these option fields and is sent to the RADIUS accounting thread, which is in turn transmitted to the ISE in the form of an interim accounting message.
    Both DHCP and HTTP profiling settings are located under the "Advanced" configuration tab in the WLC
    On the other hand, you can also use Anycast for profiling. You can check out some of Cisco Live's sessions for more info on that. Here is one that is from a couple of years (There are more recent ones that are available as well):
    http://www.alcatron.net/Cisco%20Live%202013%20Melbourne/Cisco%20Live%20Content/Security/BRKSEC-3040%20%20Advanced%20ISE%20and%20Secure%20Access%20Deployment.pdf
    I hope this helps!
    Thank you for rating helpful posts!

  • Best app to import and study multiple choice questions.

    Hi,
    I'm searching for an app to help study for an exam.
    Part of the studying strategy is to study by the previous exams questions. I have those (a lot of them) in text format.
    The app would need to have:
    - Support for multiple-choice questions;
    - Easy, fast and automated way of importing the questions;
    Would be nice to have:
    - Ability to include a rich-text comment along with the right/wrong answer;
    - Support for tagging each questions.
    I've used the search function and found this:http://forums.macrumors.com/showthread.php?t=1041085 but it's been a while since then.
    thanks in advance

    Hi Konrad;
    What approach would you recommend to import and export EBS data? Open Interfaces, PL/SQL, web services or anything else?For your question please check below notes:
    Export/import process for R12 using 11gR1 [ID 741818.1]
    Export/Import Process for Oracle E-Business Suite Release 12 using 10gR2 [ID 454616.1]
    General Notes For E-Business Suite Release 12 [ID 986673.1]
    Please also check below thread:
    how to export data from ebs
    how to export data from ebs??
    Also check below search which could help you about your issue:
    http://forums.oracle.com/forums/search.jspa?threadID=&q=import+export+&objID=c3&dateRange=all&userID=&numResults=15
    http://forums.oracle.com/forums/search.jspa?threadID=&q=export+data&objID=f475&dateRange=all&userID=&numResults=15&rankBy=10001
    Hope it helps
    Regard
    Helios

  • ACS 5.x Multiple Vlans

    Hi,
    I know that appliance based ACS version 5.x doesn't support multiple NICs. When you configure an IP address and unshut the second nic, it restarts and the port is immediately shut down.
    With VMARE ACS is it possible to assign two seperate subnet IP addresses to it?
    Thanks
    Sandy

    Are you performing eap-tls for you clients or peap(mschapv2)? The reason I ask is that you can use eap-tls and configure the new domain as an ldap database and build a identity store sequence, if you are using peap(mschapv2) then you will have make sure you have the proper trust setup so the ACS can perform kerberos authentication (I think the trust type is known as "external").
    Also one issue that you may run into, is if the usernames are going to be the same or not. If you plan on migrating users over, will the migration remove the old 'samaAccountNames" from the old database? The reason is that if a user authenticates with just their SAM i.e johndoe, then you run the risk of the same account being in two seperate domains with different levels of access.
    Hopefully these links will get you going down the right path.
    https://supportforums.cisco.com/thread/2162234
    https://supportforums.cisco.com/thread/2064843
    Thanks,
    Tarik Admani
    *Please rate helpful posts*

  • Multiple NIC Issues

    Hello everyone. I'm in the process of certifying a system with four dual-port gigabit ethernet ports. I can pass all tests with only one of those dual-port cards enabled, but when I have any more I fail the test.
    My question is has anybody had any luck with >2 NICS using the same driver? Specifically an Intel e1000g driver?
    -James

    Kevin, will this fix the problems with trying to do installations with
    multiple NICs, or is that still out there??
    "KBOYLE" <[email protected]> wrote in message
    news:[email protected]..
    >
    > The developers have apparently resolved this issue in an upcoming patch.
    > When the patch is applied you will be able to:
    >
    >
    > - Click on Advanced Settings to list all Network Interfaces.
    > - Select the radio button corresponding to the network interface you
    > would like simba to use
    > - Select/de-select network interfaces you do/do not want to be
    > touched.
    >
    > I don't know when the patch will be released into the channel. You will
    > know that the patch has been applied by checking from a terminal console
    > what revision of Simba is installed.
    > Code:
    > --------------------
    > server:~ # rpm -q simba
    > simba-2.5-r1921
    >
    > --------------------
    >
    >
    > --
    > Kevin Boyle
    > ------------------------------------------------------------------------
    > KBOYLE's Profile: http://forums.novell.com/member.php?userid=19359
    > View this thread: http://forums.novell.com/showthread.php?t=404451
    >

  • Multiple Choice Question Issues

    I am embedding a quiz within my presentation with individual
    question slides interspersed throughout the presentation. These
    questions are pulled from a couple of different question pools. I
    want to use a multiple choice question that branches to different
    parts of the presentation depending on the correct or incorrect
    answer. If the user answers the question incorrectly, I send them
    to the next slide which has two click boxes. On this slide, they
    can either click one box to move back in the presentation and
    review the material or click another box to move them forward to
    another multiple choice question. If they go back and review the
    information, they would eventually return to the same multiple
    choice question to try it again. (This is the desired navigation,
    anyway.)
    What actually happens is that when the user goes back to
    review the information and then finally returns to the question,
    the question has not been reset and still shows the incorrect
    answer marked with no way to clear it.
    I have used this same navigation on a drag-and-drop type
    question and it works fine. All the settings for the
    multiple-choice questions are set the same as in the drag-and-drop
    question.
    Any help in making this work correctly would be greatly
    appreciated.

    I can't see where that error might arise except possibly for a case where an AS2 radio is used since it appears they don't have a group property, but an AS3 radio button does.  Check to be sure that your Flash Publish Settings are set to use AS3.  AS3 errors normally have error numbers which also makes the error you quoted ring of an AS2 scenario.
    Here's a link to the file I made based on your code that works fine and doesn't display the errors you mention.  It is a CS3 file.
    http://www.nedwebs.com/Flash/AS3_Radios.fla

  • Multiple choice question in intractive pdf?

    Hi,
    I have a question about Multiple option question. How to create Multiple option single answer question with explanation popup in interactive PDF. Please guide me.
    Regards
    Anil

    Yes, this worked fine.
    I just had to place the animal to the left of the table and just reduce it slightly in size. It worked fine.
    Thanks!

  • Select more than one answer on a multiple choice question

    How do you select more than one answer on a multiple choice question on an employment application on the internet?

    marmaldonado,
    Is this a PDF form? Or a web form?
    Clinton

  • ACS 5.4 multiple network interfaces support

    In ACS 5.4 release note, it says:
    Multiple network interface connector support
    ACS  5.4 supports up to four network interfaces: Ethernet 0, Ethernet 1,  Ethernet 2, and Ethernet 3. ACS management functions use only the  Ethernet 0 interface, but AAA protocols use all configured network  interfaces. You must connect the ACS nodes in the distributed deployment  only to the Ethernet 0 interface. Therefore, the syslog messages are  sent and received at the log collector's Ethernet 0 interface. Data  forwarding from one interface to another interface is prohibited to  prevent potential security issues. The external identity stores are  supported only on the Ethernet 0 interface. In ACS 5.4, multiple network  interface connectors are also supported for proxies.
    But in the CSACS 1121 Series Appliance Rear View section, it still says on Ethernet 0 is usable. All other  interfaces are blocked.
    I am confused. Can anyone clarify for me if we can use multiple network interface in ACS 5.4? What about management interface?
    Thanks!

    We configured 2 interfaces in past within testing enviornment and it worked. ACS 5.4 supports multiple network interfaces on the UCS platform, on a virtual machine and on the legacy ACS 5.x IBM/CAM hardware. The ACS management functions use the interface eth0 only and the AAA protocols use all available network interfaces.
    Jatin Katyal
    - Do rate helpful posts -

  • Multiple nics on server

    Remote control will not work on server with multiple nics. Currently
    running Neware 5.1 with Zen 3.2. Zen 3.2 sp2 mentions this problem
    but I
    would rather not install sp2 if there is an easy fix. Any ideas?

    Mike,
    It appears that in the past few days you have not received a response
    to your posting. That concerns us, and has triggered this automated
    reply.
    Has your problem been resolved? If not, you might try one of the
    following options:
    - Do a search of our knowledgebase at
    http://support.novell.com/search/kb_index.jsp
    - Check all of the other support tools and options available at
    http://support.novell.com in both the "free product support" and "paid
    product support" drop down boxes.
    - You could also try posting your message again. Make sure it is
    posted in the correct newsgroup. (http://support.novell.com/forums)
    If this is a reply to a duplicate posting, please ignore and accept
    our apologies and rest assured we will issue a stern reprimand to our
    posting bot.
    Good luck!
    Your Novell Product Support Forums Team
    http://support.novell.com/forums/

  • Weblogic Cluster on a machine with multiple NIC

    Out Setup
              One Quad Machine
              2 NIC - one ip address on each
              Two weblogic installations
              Each Instance is listening on one address and port 7001.(managed servers)
              Admin Server on one of the ip and port 8001
              Both managed servers part of a cluster.
              While i check weblogic console i see both the managed server
              having almost same number of frames incoming and outgoing.
              If i check 4 processers all 4 of them working eqaully same
              during out load test..(almost 85%)
              But i check NICs only one of them seems to be working really hard..
              and another one so..so.. what could be the problem??
              

              Weblogic 7 has a new concept called network channel, where there is a section talking
              about clustering over multiple NIC cards. I was confused by the cluster address in
              customized network channel (no example there). I tried to use multiple NIC cards
              for the purpose of network failover, but failed in clustering environment, although
              I succeed in single server environment.
              Kumar Allamraju <[email protected]> wrote:
              >You can set Interface address via admin console's
              >Cluster >> {Cluster Name }
              >
              >on the right hand side you will find InterfaceAddress box.
              >
              >--
              >Kumar
              >
              >zevit wrote:
              >
              >>>It's the JVM & OS who will take adv. of multiple NIC's. We don't have
              >>>anything in WLS that does this thing.
              >>>
              >>>Alternatively you can bind each WLS instance to a specific NIC card
              >>>to effeciently utilize each NIC card.
              >>>
              >>
              >> thank u kumar.. Could u please tell me how do i bind each WSL instance
              >> to a specific NIC ?
              >>
              >
              

  • Multiple choise question, limit number of options

    Hi,
    we have a multiple choise question with 10 possible answers. 5 is correct, and 5 is not. How can I limit so the user only can check 5 answers? Right now, the user can check all 10 and get full score.
    Im using Captivate 8.
    Kind regards,
    Pontus

    Hi,
    I am relatively new to Captivate (currently using version 7) and have also been looking at this.  I have a programming background so have been mucking around with trying to create this using advanced actions so would appreciate some advice if I've gone about it the right way or not.
    I have created 4 answers with clickable smart shapes to show whether they are selected/deselected.  I have variables to store the number of allowed answers, number of selected answers and question score (which update with the selecting/deselecting of each answer).  To keep things simple, I am assigning 1 point for every correct answer selected and only have 2 correct answers.  There are 3 separate 'submit' buttons (one worth 0 points and not included in quiz, one worth 1 point included in quiz and one with 2 points included in quiz).  Depending on the answers chosen, the relevant submit button will be made visible (and the others hidden).
    What I'm having trouble with is that the points from the submit buttons that are included in the quiz are all contributing to the total points available.  I want the question to only be worth 2 points but because I have two buttons (one worth 1 and one worth 2) that means the total points available for the quiz is 3.
    Any help on where to go from here much appreciated.
    Thanks,
    Chris.

  • Bonjour not finding anything from PC with Multiple NICs

    We have two Network Interface Cards in each workstation at work to access two separate Physical Networks. Both networks provide access to ZeroConf (Bonjour) IP Printers.
    Bonjour discovery fails intermittently on the two different networks. Occasionally Printers on one network, the other network, both or neither are visible from various workstations.
    Is mDNSResponder aware of multiple NICs? Is there a way to force mDNSResponder to only search for printers on a particular subnet?

    The second  network adapter was installed after the VPC, indeed.
    In the dropdown menu in the VPC networking settings there was only one network adapter to chose because the description for both physical network cards were the same. Therefore I cannot assign for virtual NICs different physical network adapters.
    Finally I coped with the problem:
    - I uninstalled one of the adapters (removing the drivers, too),
    - edited the INF file in the adapter drivers and changed the description of the adapter
    - I reinstalled the adapter with the altered driver (with the INF file changed).
    Then, in the VPC networking settings both physical adapters appeared (one with the altered description).
    I Wonder if that will cause any problems later ;)
    Thanks for your replies :)

Maybe you are looking for