ACS Recovery for 1113 Appliance

I need to recover my password from the ACS 1113 Appliance. I do not have the Recovery CD is there a way that it can be downloaded from
Cisco.com. Also is there a default password for the ACS version 4.2. I access from the console but I dont know the login or password

Hi Janet,
For doing password recovery we need to have the recovery cd for 1113 Appliance.
The following are the steps for doing password recovery:-
http://www.cisco.com/en/US/products/sw/secursw/ps5338/products_password_recovery09186a00801ece5f.shtml
If you do not have the recovery CD, I will recommend you to open a TAC case and they will publish recovery files for you, as it is not available on cisco.com for download.

Similar Messages

Cisco ACS 4.2 1113 Recovery DVD

Good day!
We have CSACSE-1113-k9 Cisco ACS 4.2 1113 appliance. And we need to reimage (restore the appliance to its original state). Could enyone help me with proper link to software.cisco.com image of recovery DVD?
I'm trying to find it, but i cant see recovery dvd:
Downloads Home
Products
Cloud and Systems Management
Security and Identity Management
Cisco Secure Access Control Server Products
Cisco Secure Access Control Server Solution Engine
Cisco Secure Access Control Server Solution Engine 4.2

Hi,
AFAIK you do not have the option to download ACS Recovery DVD from cisco.com. You can contact Cisco TAC and they can publish the software for you.
Do rate if Helpful....
Regards,
Kush

Upgrade path for Cisco Secure ACS 4.X Solution Engine 1113 Appliance.

Hello,
I am having Cisco Secure ACS 4.X Solution Engine 1113 Appliance, and is running on version Cisco Secure ACS Release 4.1(1) Build 23 and now want to upgarde it to the latest version. Need to know the upgrade path for the same. As per my information ACS 4.1(1) runs on windows server and releases post to 5.X uses Linux. Please guide how can i upgrade Appliance 1113 from 4.1 to 5.x

Hi,
Cisco ACS 1113 appliance doesn't support ACS 5.x version. 1113 appliance supports till ACS 4.2.1 version.
Cisco ACS SE 1120/1121 appliance models are required for ACS 5.x
The upgrade path for ACS 4.1 to 4.2.1 version can be found in the following link :
http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_server_for_solution_engine/4.2.1/Installation_Guide/solution_engine/upgap.html#wp1237189
Regards,
Karthik Chandran
*kindly rate helpful post*

Migrating from Linux based Tacacs+ server to Cisco ACS 1113 appliance

I'm trying to migrate my configuration from a Linux based Tacacs+ server to the Cisco ACS 1113 appliance. Does anyone have any recommendations.
Thanks.

Hi
We (extraxi) offer migration and general consultancy for ACS if you need professional help.
www.extraxi.com/contact.htm

Cisco 1113 ACS 4.2 1113 configure auth. for Infoblox appl.

Hi there,
I have an issue with Cisco ACS and an Infoblox appliance. We want to authenticate users, that login on the Infoblox, via the Cisco ACS. After that the ACS should reply with a passed (RADIUS) authentication and reply with an administrative groupname that the user belongs on the Infoblox. To do this I have to import a VSA to have the option in the ACS to reply with this groupname. On the Infoblox these groups are allready made and this must match the group that the ACS replies.
Now I have imported the VSA and configured an AAA client (infoblox) to use the new RADIUS (VSA) to support the Infoblox. In the groupsetting I've turned on the Infoblox-Group_info attribute and filled in a specific groupname that the authenticated user belongs to. Now here comes the part where the group info is returned, but the Infoblox Appliance gives me a RADIUS error reply message. As I can see in the logs of the ACS the authentication part of the user is fine. So it has to be between the info that the ACS replies with, when the user logs in.
I've attach the VSA and a *.pcap of wireshark to see what's going on.
Can anyone advice of suggest any option that can make this thing work.
With regards,
Richard Gosen

Halijenn,
Unfortunatly the above solution doesn't do the trick. When I delete the imported VSA, via the attached *.csv, the Infoblox attributes still shows up when I re-add the Infoblox appliance to a network device group en there choose "Radius (Infoblox)" for the authentication. After deleting the VSA I have restarted the ACS SE. The returned acknowledgment from the ACS still presents a malformed packet. When I uncheck the checkbox of the "RADIUS (Infoblox)" attribute in the group settings, then it shows no malformed packet, but no group information is sent either.
Again I have imported the original accountsAction.csv and restarted the SE, but it still returns malformed packets.
Any other possibilities?
Kind regards,
Richard Gosen

ACS SE Quanta 1113

Hello,
I have ACS SE Quanta 1113, have configured login authentication on a router using TACACS+.
But cannot login to the router remotely. when telneting to the router, i don't event get the username/password prompt. it shows three error messages: "Authentication failed"
on the ACS log report, the following message is displayed:
03/06/2007,11:56:28,Authen failed,,Default Group,,(Default),Key Mismatch,,,,172.16.1.3,,,,,,DGFP-NAS,
PS: By-the-way authentication to ACS 4.0 for Windows worked fine.
Thanks in advance

Looks like the shared secret entered in ACS is wrong.
Try re-entering it.

Recovery for cisco security mars

Hello
Post me a document in order to perform recovery for cisco security mars 25 series
Thanks

It sounds like there may either be a problem with the RAID controller [configuration] or, though unlikely a hardware failure. You'd need to check the RAID controller BIOS to see if there's a hard disk drive problem or RAID configuration problem. Also check RAID controller is damaged as disks are not recognized at all.
Rebuild the Raid and reimage the appliances.

Cisco ACS questions for new deployment

Hi all, I am designing a new Cisco ACS deployment to handle AAA services for all our network devices. I have read the user guides and I understand the different deployment scenario's. However, what i could not find in the user guide, were answers to the questions below...
Number of AAA clients, using command authorisation, that a single ACS server can handle?
Does a Large Add-On license (for more than 500 nodes) need to be purchased for every ACS server, or does one license cover the whole deployment?
How is AAA load-balancing performed? Does each AAA server need to be defined individually on every Network device? Or is there some intelligence build in to the AAA servers so that they can distribute the load themselves? Or can a load balancer be used like you can with Cisco ISE PSN nodes?
Thanks
Mario

Supported number of clients depends on License for example
The base license is required for all deployed software instances and for all appliances. The base license enables you to use all ACS functions except license-controlled features, and it enables standard centralized reporting features.
The base license:
Is required for all primary and secondary ACS instances.
Is required for all appliances.
Supports deployments that have a maximum of 500 NADs.
The following are the types of base licenses:
Permanent—Does not have an expiration date. Supports deployments that have a maximum of 500 NADs.
Evaluation—Expires 90 days from the time the license is issued. Supports deployments that have a maximum of 50 NADs.

Is anyone doing disaster recovery for a J2EE application?

We generally use database log shipping to maintain a standby database for our ABAP instances. We can successfully fail over our production application to our disaster recovery site with no real issues. With the J2EE instances (EP, ESS/MSS, BI, etc), we have a few concerns:
hostname cannot change, without going through a system copy procedure, so we would have to keep the hostnames in DR the same. (for example, ref: oss note 757692 - changing hostname is not supported)
fully qualified domain name - from what I understand, there are potentially issues with changing the fqdn, for example SSO certificates, BSPs, XI has issues, etc.
we can't keep both hostname and fqdn the same between DR and production, or we could never do a DR test.
Has anyone implemented disaster recovery for any SAP J2EE application that has run into these concerns and addressed them? Input would be greatly appreciated regarding how you addressed these issues, or how you architected your disaster recovery implementation.
Regards,
David Hull
The Walt Disney Company

I haven't done this personally, but I do have some experience with these issues in different HA environments.
To your first point: You can change the hostname, note 757692 tells you exactly how to do it. However like the note says, "Changing the name of a host server in a production system is not automatically supported by SAP." When it says "supported by SAP" I think it means SAP the company, not SAP's software. So I would contact SAP to see if this configuration would be covered under your service agreement. Then you have to think about whether you want to do something that isn't "officially supported" by SAP. Also I'm sure you'll need some kind of additional licensing for the DR systems as their hardware keys will de different.
To your second point: As for SSO certs (SAP Login Tickets), I think they should still work as long as the SID and client number of the issuing system remain the same. I don't think they are hostname or fqdn dependant. For BSPs I would think they would still work as long as they use relative paths rather than absolute paths. And for XI... I have no idea what kind of issues may arise, I'm not an XI guy.
Again, I haven't done what you're describing myself. This is just based on my HA experiences.
Hope this helps a little,
Glenn

Advice on best way to setup Disaster Recovery for SOA Suite 10.1.3.4

Hi Everyone,
I need some advice on the best way to setup Disaster Recovery for a SOA Suite 10.1.3.4 install deploying JSF/ADF OC4J applications.
The way we are trying to do it at the moment is manually copy the "applications" and "applications-deployments" folders for the OC4J application on the production server, then compress and ship the files across to the DR application server nightly. (We don't require high availability).
In the event of a disaster we then extract the files and copy to the OC4J instance (pre-created and configured) on the DR server. Unfortunately to date we haven't been able to reliably setup a DR application (seem to mostly get 404 errors etc), even though the OC4J application has its connection pool resolved to the DR database and is showing as "up" in the ASConsole.
My question is, is there a more "native" way to do what we are trying to do. We do not have Enterprise version of SOA Suite or 11g database so any advanced recovery features are not an option. The setup is also stand alone, i.e. we are not using clustering or RAC etc.
Any ideas would be really helpful.
Thanks,
Leigh.
PS we are also running the production apps server with Oracle Application server 10g 10.1.2.3.0 as the HTTP apache server (with Forms, Reports and Discoverer deployed) and the SOA Suite 10.1.3 applications use the 10.1.2 HTTP server via the HTTP to AJP bridge. So the 10.1.3 OC4J instance is configured to use AJP on port range 12501 - 12600.

For enterprise solutions, AS Guard would work.
http://download.oracle.com/docs/cd/B25221_04/core.1013/b15977/disasrecov.htm#sthref303
However, since advanced recovery options are not available (as you said), then what you are doing should not be too bad.
AMN

How to do the hard recovery for exchange 2010 (No Restore.env generated)

enrollment:Windows server 2008 R2, exchange 2010.
I want to test the fundamentally of eseutil /cc
so I backup the exchange database by Using the Windows backup, then I restore the database, and no Restore.env be found.But I found I can run the
eseutil /r.
what's happened?
1,why No Restore.env generated for exchange 2010 in Windows server 2008 r2?
2,why I can do the soft recovery after the restoring the database?
3, how to do the hard recovery for this situation(No Restore.env )?
Please click the Mark as Answer button if a post solves your problem!

Hi Eric,
From your description, I would like to clarify the following things:
1. Before performing the restore process, we need to dismount the Exchange databases that we want to restore. If the database is still mounted, the restore process will fail. If the restore process doesn't succeed, Restore.env won't be generated.
2. It is because the log files are healthy, you can run Eseutil/r and perform soft recovery.
3. In your case, you can continue to perform the soft recovery.
For more information about hard recovery and soft recovery, here are some helpful threads for your reference.
Exchange Server Soft and Hard Recovery
http://technet.microsoft.com/en-us/library/aa996168(v=exchg.65).aspx
Exchange Database Recovery – Using eseutil commands (Note: It isn't from Microsoft, please pay attention to refer to it.)
http://msexchangeguru.com/2009/07/12/exchange-database-recovery-using-eseutil-commands/
Hope it helps.
If there any problems, please feel free to let me know.
Best regards,
Amy
Amy Wang
TechNet Community Support
" If the restore process doesn't succeed, Restore.env won't be generated. "
thank you for you reply.The restore process succeed,otherwise I can't do the soft recovery after the restoring the database,but can't see the restore.env
Please click the Mark as Answer button if a post solves your problem!

Disaster Recovery For SAP ECC 6.0 On Oracle

Hi All,
This is our infrastructure
Windows 2003 Server
SAP ECC 6.0
Oracle 10
Legato Networker Client / Library
Actually our Backup Strategy is to do an Online Backup Every Night from monday to saturday. We want to test our backup by doing a Restore. We are assuming a complete loss of the system including hardware.
What we do:
1. Install the SAP System on a new host with the same hardware characteristic of the source system.
2. Install & Configure the legato utility.
3. Copy the E:\oracle\MIS\sapbackup\ directory from the source system to the test system.
4. Them we put the database in mount mode.
5. Execute the command: brrestore -b bdyxwoqv.fnf -m full (bdyxwoqv.fnf-> Full Online Backup that was executed without problems).
It gives the following errors:
BR0386E File 'F:\ORACLE\MIS\SAPDATA2\SR3_10\SR3.DATA10' reported as not found by
backup utility
BR0386E File 'F:\ORACLE\MIS\SAPDATA3\SR3700_9\SR3700.DATA9' reported as not foun
d by backup utility
BR0280I BRRESTORE time stamp: 2008-10-01 17.45.19
BR0279E Return code from 'backint -u MIS -f restore -i E:\oracle\MIS\sapbackup\.
rdyybrzp.lst -t file -p E:\oracle\MIS\102\database\initMIS.utl': 2
BR0374E 0 of 63 files restored by backup utility
BR0280I BRRESTORE time stamp: 2008-10-01 17.45.19
BR0231E Backup utility call failed
BR0406I End of file restore: rdyybrzp.rsb 2008-10-01 17.45.19
BR0280I BRRESTORE time stamp: 2008-10-01 17.45.19
BR0404I BRRESTORE terminated with errors
Since this is a new SAP system it never will find the SAPDATA files because they where on the source system and this is a new test system.
We found the following note:
96848 Disaster recovery for SAP R/3 on Oracle
But this note is for SAP R/3 no for SAP ECC!
It explain that you have to install your SAP system with the System Copy Method (is this the only way??).
2.) Installation of the R/3 System
The installation of SAP software contains the software installation of the database. The initial SAP database should be created again but the SAP data should not be loaded.
Install the SAP system with the Oracle-specific system copy method, which is based on backup/restore. This method is described in the system copy guide for your Product/Release. Refer to Note 659509 for products that are based on Web AS.
3.) Modification of the installation
Above all, you must take into account the mounted file systems at the time of the loss. If necessary create new SAPDATA directories (mount points). These generally identify a disk or a logical storage area (logical volume).
Are we working in the right way? maybe there is a formal procedure to do a Restore from an Online backup when you complete loss your system.
Please some tips.
Best Regards,
Erick Ilarraza

Hi Eric,
Thanks a lot for your reply, I will follow the Note 96848 Disaster recovery for SAP R/3 on ORACLE point 5.
5.) Restore profile and log files, as you sayed in case of disaster we will lost our "source" system.
On the other hand to configure the legato client we take care of the name of the server, we configured the .sap, .cfg and .utl files so in theory the restore will be done on the new test system since we run the brrestore command from that system.
Officially there is not a documentation from SAP to do a Restore from a Online Backup with SAP ECC, SAP Netweaver (ABAP / ABAP + Java). You only have the 96848 note??? I found the following information:
http://help.sap.com/saphelp_nw70/helpdata/en/65/cade3bd0c8545ee10000000a114084/frameset.htm
But there is not a official procedure like a System Copy Guide or Installation Guide.
Best Regards,
Erick Ilarraza

Making data in tables online and offline - Backup/Recovery for tables.

Hi All,
I'm working on a project where the functionality is similar to 'Backup and Recovery' for database tables.
Lets say we have a set of 6 tables T1, T2.... T6. They do have relationship between them. The tables in questions are simple standard tables, which are not table partitioned.
- I want remove the records from live tables based on user entered date ranges and store it in some offline medium.
- I might want make the data online again from the offline medium; Application should be able use that data without any modifications.
- Different offline mediums can be
a) Flat file
b) Different table space
c) Any other secondary medium (like XML, tape..Etc,)
The total number of records will run in millions.
The proposed solution should consider,
1. Performance - Java solutions not feasible. Anything in SQL, PL/SQL or runs in DB itself(tools) are OK.
2. Reliability - Should be highly reliable, Data corruption simply unacceptable.
3. Security - Users should not be able to make out of the file.
Few options include:
1. Use partition
2. Use SQL*Loader
3. Export and import of tables.
My main targets:
1. Reduce space.
2. Increase performance for queries.
Please pass on your suggestions, any help is highly appreciated!
Thanks In Advance!

If you truely need to get the data out of the Oracle database into flat files, partitioning is pretty useless. Partitioning the table, though, strikes me as by far the most efficient, reliable, and secure solution.
What sort of security do you need with the flat file? Do you need the data in the file to be encrypted, or is the binary file format of an Oracle export file sufficiently obfuscated?
I'd stay away from UTL_FILE here, just because performance is rather poor.
I always get pretty nervous about recoverability when people start moving data out of the database to flat files for long-term archival.
- If you ever change the data model, even slightly, you may not be able to move the data back into the database without modifying your loader. A few years down the line, after a few data model changes, it can be almost impossible to find the documentation to make that change.
- If you do things like change lookup tables over time, reloading data can cause major problems. When you load the data back in, your applications and reports may not treat the old codes properly.
- Making sure that the flat files get stored and tagged properly can be a challenge. When the database gets moved to new system, you have to make sure that all the flat files also get moved around and the the loader scripts are modified appropriately.
Justin
Distributed Database Consulting, Inc.
http://www.ddbcinc.com/askDDBC

Password recovery for 2960 without loosing configuration

Hi,
I don't remember password for Cisco 2960 switch, now i want to recover the password. I have checked few documents but would like to know few things before following these steps.
1. Is password recovery procedure for Cisco 2960 switch is different from normal ctr+break then change the register method? As i am more confident of doing this procedure than using mode button and then renaming the configuration file.
2. If i follow below procedure then hope it won't erase the configuration including vlans information.?
https://supportforums.cisco.com/discussion/11756896/cisco-switch-29603560-password-recovery-and-factory-default-mode-button
3. Pressing mode button is an alternate to using ctrl+break sequence? and long pressing of mode button does't effect anything.
4. Restarting the switch after pressing mode button (without making any changes) will go back to previous configuration (working condition).
Thanks.

1. Is password recovery procedure for Cisco 2960 switch is different from normal ctr+break then change the register method? As i am more confident of doing this procedure than using mode button and then renaming the configuration file.
Password recovery for switches, like the Catalyst 2K and 3K, are far more simpler. Read this: Cisco Catalyst Fixed Configuration Layer 2 and Layer 3 Switches
2. If i follow below procedure then hope it won't erase the configuration including vlans information.?
https://supportforums.cisco.com/discussion/11756896/cisco-switch-29603560-password-recovery-and-factory-default-mode-button
I've posted a link above. I'd recommend you read that one. The link you've posted is about someone who wants to make a simple procedure look complicated.
3. Pressing mode button is an alternate to using ctrl+break sequence? and long pressing of mode button does't effect anything.
Correct. Get your mindset out of the password recovery of routers. When you are dealing with some models of switches, it's the "Mode" button. There are no "Mode" buttons in routers, hence, the Ctrl+Break key is required.
4. Restarting the switch after pressing mode button (without making any changes) will go back to previous configuration (working condition).
If you did NOT rename the configuration file, yes, the switch will reboot and load the existing configuration file.
If you renamed the configuration file, the switch will reboot. Finding no configuration file, the switch will load the factory defaulted configuration.

How to create the recovery for windows 8

Hello,
I have windows 8 in my T430....I just wanted to know the detailed procedure for creating the recovery for it...
Thanks
Harsh
Solved!
Go to Solution.

Methodology to create Recovery Media and reload a Lenovo system with Microsoft Windows 8 preload
Z.
The large print: please read the Community Participation Rules before posting. Include as much information as possible: model, machine type, operating system, and a descriptive subject line. Do not include personal information: serial number, telephone number, email address, etc. The fine print: I do not work for, nor do I speak for Lenovo. Unsolicited private messages will be ignored. ... GeezBlog
English Community Deutsche Community Comunidad en Español Русскоязычное Сообщество

ACS Recovery for 1113 Appliance

Similar Messages

Maybe you are looking for