ACS Upgrade in live network ok?

I am about to upgrade our CiscoSecure ACS from 4.1 to 4.2. If I do so on a live network, can that affect anything within my network?
I would hate to bring down an entire network and upset about 3000 users.
Thanks in advance!

That will prevent that particular ACS to authenticate new users for the time of the upgrade ...
Existing users won't be kicked out unless you configured a very frequent reauthentication timer.
If you have more than one ACS then the other should be there to take the job

Similar Messages

When I try to open live hot mail I get this message:The Windows Live Network is unavailable from this site for one of the following reasons:

When I try to open live hot mail I get this message: The Windows Live Network is unavailable from this site for one of the following reasons:
* This site may be experiencing a problem
* The site may not be a member of the Windows Live Network
You can:
* You can sign in or sign up at other sites on the Windows Live Network, or try again later at this site.
However, when I open hot mail in IE it opens just fine. Tried changing the password as suggested but it did not help in Firefox.

Clear the cache and the cookies from sites that cause problems.
* "Clear the Cache": Tools > Options > Advanced > Network > Offline Storage (Cache): "Clear Now"
* "Remove the Cookies" from sites causing problems: Tools > Options > Privacy > Cookies: "Show Cookies"

ACS 5.4 multiple network interfaces support

In ACS 5.4 release note, it says:
Multiple network interface connector support
ACS 5.4 supports up to four network interfaces: Ethernet 0, Ethernet 1, Ethernet 2, and Ethernet 3. ACS management functions use only the Ethernet 0 interface, but AAA protocols use all configured network interfaces. You must connect the ACS nodes in the distributed deployment only to the Ethernet 0 interface. Therefore, the syslog messages are sent and received at the log collector's Ethernet 0 interface. Data forwarding from one interface to another interface is prohibited to prevent potential security issues. The external identity stores are supported only on the Ethernet 0 interface. In ACS 5.4, multiple network interface connectors are also supported for proxies.
But in the CSACS 1121 Series Appliance Rear View section, it still says on Ethernet 0 is usable. All other interfaces are blocked.
I am confused. Can anyone clarify for me if we can use multiple network interface in ACS 5.4? What about management interface?
Thanks!

We configured 2 interfaces in past within testing enviornment and it worked. ACS 5.4 supports multiple network interfaces on the UCS platform, on a virtual machine and on the legacy ACS 5.x IBM/CAM hardware. The ACS management functions use the interface eth0 only and the AAA protocols use all available network interfaces.
Jatin Katyal
- Do rate helpful posts -

I want to get into Hotmail but it says "Windows Live Network is unavailable from this site."

I have always been able to get into my Hotmail account until about two weeks ago. I updated Mozilla in hopes that this would help but it didn't. The message I get also says that it is unavailable from this site for one of the following reasons - The site is experiencing a problem (but when I try to get into Hotmail from Internet Explorer I have no trouble). OR The site may not be a member of the Windows Live Network - it has always worked before and every once in a while still works. Can anyone help me?

* "Clear the Cache": Tools > Options > Advanced > Network > Offline Storage (Cache): "Clear Now"
* "Remove the Cookies" from sites that cause problems: Tools > Options > Privacy > Cookies: "Show Cookies"
Start Firefox in [[Safe Mode]] to check if one of your add-ons is causing your problem (switch to the DEFAULT theme: Tools > Add-ons > Themes).
* Don't make any changes on the Safe mode start window.
See [[Troubleshooting extensions and themes]] and [[Troubleshooting plugins]]

The Windows Live Network is unavailable from this site for one of the following reasons:

Reasons:* This site may be experiencing a problem
* The site may not be a member of the Windows Live Network
You can:
* You can sign in or sign up at other sites on the Windows Live Network, or try again later at this site
It is getting stuck on the HTTPS login from microsoft. It works fine on IE and FF Beta. Have tried clearing cach, cookies, etc with no
fix. Please HELP.....

Do you have that problem when running in the Firefox SafeMode? <br />
[http://support.mozilla.com/en-US/kb/Safe+Mode] <br />
''Don't select anything right now, just use "Continue in SafeMode."''
If not, see this: <br />
[http://support.mozilla.com/en-US/kb/troubleshooting+extensions+and+themes]

IDSM deployment in a live network...

Guys
We're about to deploy an IDSM in a live 6500 with IOS 12.2(18) sxd4 sup720...
My questions are:
1. Are there any issues we have to consider since it is a live network ?
2. Do we need any downtime or will it interrupt the link ?
3. Each of the 3 sites has a pair of 6500 and each core has an IDSM...what are Cisco's best practices/recommendations since it will be an initial deployment ?
4. Which will be the ideal to use SPAN or VACL for this such topology ?
Your input will be highly appreciated
TIA.

Here are some quick answers to your list of questions...
1. Yes, there are some things to consider. The biggest one is the answer to your second question.
2. IIRC, you'll have to power off the Catalyst chassis prior to installing the IDSM-2 line card. Since the switch won't have power, you'll definitely impact your link(s). I'd say this is a big consideration, in light of your first question.
3. Im not too sure what exactly you're asking here.
Without a better explanation of the overall network topology and where exactly the IDSM-2 sensors will actually be deployed, it's difficult to offer up anything meaningful. As for best practices, it always depends on the network topology, so we'll need more info to help. BTW, I'm not aware of any definitive "Best Practices" documentation WRT deploying IDS/IPS in specific scenarios, if thats what youre looking for.
4. The choice of SPAN or VACL is usually driven by what you're trying to monitor. If you want to watch all the traffic on your ACCOUNTING or ENGINEERING VLAN, you'd use VACL. If you want to watch all the switch ports that are connected to routers (uplinks, extranets, that kind of thing), SPAN is the way to go.
I hope this helps,
Alex Arndt

Leopard upgrade = no wireless networking

I upgraded my Mac Mini (1.83 GHz Core 2 Duo) to Leopard the other day. Took it to 10.5.2 right after the upgrade.
Everything worked flawlessly for about 2 days.
Then the AirPort networking started dropping it's connection. I have a Wireless Router setup right beside the Mini which it now just barely picks up (1-2 bars) and drops the connection every few hours.
And I can no longer browse / see any of the other wireless networks in my neighborhood.
My MacBook which I also upgraded to Leopard is working fine. Full signal strength and can see the 5-10 other networks in my vicinity.
The Mac Mini was also working perfectly fine before I upgraded to Leopard.
I tried deleting the com.apple.airport.preferences.plist as some posts suggest but that doesn't work. I also did a SAFE mode boot to no avail. There seems to be other Mini owners with similar problems but no solutions.
I don't want to revert to 10.4 ... any suggestions?

I'M HAVING THE SAME ISSUE ON AN OLDER POWERBOOK G4 (TITANIUM). I CALLED APPLE SUPPORT AND THEY TRIED SEVERAL CHANGES TO AIRPORT SETTINGS (SUCH AS CHANNEL CHANGES). NO SUCCESS. THEIR LAST WORDS TO ME WERE...WELL, LEOPARD REALLY WASN'T BUILT TO RUN ON OLDER MODEL LAPTOPS. THIS, OF COURSE, IS A CROCK OF S__T AS THE LAPTOP MEETS ALL TECHNICAL SPEC REQUIREMENTS FOR LEOPARD
WHAT'S UP APPLE? SHAME ON YOU FOR NOT ADDRESSING THIS ISSUE. IT'S ALL OVER YOUR DISCUSSION BOARDS BUT YOU REMAIN SILENT. IT'S DISGUSTINGLY ARROGANT.

Windows 8.1 Pro upgrade = No Wifi Network USB N+ "working normally"

Hello,
I used the Microsoft store to download the Windows 8.1 Pro upgrade.
After I got everything started, there is no WiFi connection.
I don't mean it is having trouble connecting to Wi-Fi, I mean it shows no Wi-Fi at all. The "troubleshooter" only wants me to connect a cable to the network. The wireless signal graph shows a RED X overlaid on it and does not pick up any wifi signals-
not only that, but it does not even LOOK for WiFi signals.
Device manager shows my Belkin USB N+ wireless network adapter as working normally.
Using suggestions from an 8.1 preview problem I have tried disabling/re-enabling, re-installing updated drivers from Belkin.com to no avail. The computer thinks the device is working normally. What the computer thinks the device is supposed to be doing while
working normally is anyone's guess.
There is nothing wrong with my Wi-Fi. Every other computer and cell phone that uses the connection is fine. This is a Windows 8.1 issue. Please help!
[Someone suggested updating BIOS. Not sure why, the computer was working PERFECTLY until the Windows 8.1 Pro free upgrade. ]
edit: this is 32 bit Win 8.1 (I assume it doesn't upgrade from 32 to 64 bit just because my system is capable of it) on a Zt systems PC with Core2 Quad processor and 4GB Ram if that makes any difference.

I have had the exact same problem as you have. contacted Microsoft techs but they could not solve the problem at all and had me revert back to windows 8 pro which now recognizes the wireless. I suggest you go back to windows 8 if you need to
use the wireless.

2.1 "upgrade" - lost 3G network connectivity in my apartment

hey apple are you trying to turn me against you? upgraded to 2.1 last night. now i get no signal service on the 3G network. if i turn 3G off then i get full Edge network connectivity. This is strange as there was no connectivity issue in my apartment with either network up until this "upgrade". I would love to blame AT&T but it looks like its your crap software.

Try the iPhone 3G forum. You will find more help in there.

Can't install iTunes upgrade due to network error

I've never had a problem downloading & installing iTunes updates, but I've been trying for a week or two to update iTunes and I'm always getting the following error message:
A networking error has occurred: timed out (-1001). Make sure you can connect to the Internet, then try again.
There is NOTHING wrong with my Internet connection, and all my other Apple updates have installed successfully. I have NO idea how to try to fix this problem. Please help!!!

I am getting this same message but only after the 38.5MB iTunes file has downloaded. Last week a forum named "can't download" also had several user posts with this same problem but I don't see it now. Thought I'd try upgrading again today but it still doesn't work. Does Apple read these posts?

ACS upgrade on windows

Hi,
I have ACS 4.1 installed on my windows servers, i want upgrade it to ACS 4.2.0.124
Can i download the this version from cisco and upgrade?
i would like to know the procedure to upgrade
Please help
Thanks
Ravi

Create a TAC case and request Special File Access. If you are entitled they will post the files and send you an email with the URL where you can download the new software. Then simply follow the documented upgrade instructions.

E71 firmware upgrade for A1 network - Nokia unable...

Hi,
Nokia, please make firmware v210 available to product code 0570359.
i have an E71, use it heavily in business and have standardized our company on it and need to upgrade it to v210 firmware, because the v100 is so buggy. i had 7 email interactions with nokia support and a1 support but both point the finger to each other and are of no help. so the last option is to use the forum, before i feel forced to switch my company over to the iPhone because of lack of nokia software support and upgrades.
the network provider A1.net says they have accepted firmware 200.21.118 already last year and informed Nokia in December 2008 to release v200 for this product code 0570359. A1 even says they have reconfirmed now again that the acceptance of the firmware has reached nokias support team. but when I check the nokia updater and the nokia website, it still says my firmware v100 is the latest. I know that even firmware v210 exists, know the list of fixed issues, so I actually want that one.
Is there anyone out there to help with this mess and help nokia from loosing even more business users over to the iPhone?
Bernd G.

first of all, it isnt Nokias fault. once firmware is released, they do their very best to roll it out and usually achieve this in a few eeks to most regions for their generic product codes (i.e. firmware that is not operator-branded). in your case, there is some kind of miscommunication between your operator (A1) and Nokia, that has resulted in the delay of firmware released for your particular product code. Nokia simply provide the firmware to A1, who then decide whether to actually release it or not with their logos and whatnot all over it (i.e. operator customisation) or if they do not, they will not release the firmware to the users. so all you can do is haggle A1 about it and hope they hurry up and release the firmware.
another option is to ask the A1 guys to sign a release so that you can take your phone to your local Nokia Care Centre and have it flashed with generic firmware. although this is often unlikely to happen as customer service for operators usually do not know what users are talking about when you request this, or are too stubborn/lazy to allow it to happen. but nevertheless, you can try anyway and maybe something good can come out of all this.
If you found this or someone's comments helpful or like what that person has to say, please give some Kudos to their post!

Purchased QNAP 469-Pro NAS, need your assistance upgrading my home network components

Hi everyone,
First of all, I apologize if I am posting my question in a wrong sub-forum. Having said that, I've recently purchased a QNAP 469-Pro NAS -- http://www.qnap.com/en/index.php?lang=en&sn=822&c=351&sc=513&t=520&n=9786 -- that has dual gigabit lan ports. The unit also supports link aggregation ( otherwise known as port trunking or IEEE 802.3ad). Currently I have a WRT 610N wireless router and a TP-Link 8 port gigabit switch that does NOT support link aggregation. Now, I would very much appreciate it, if you helped me by teaching me how to best upgrade my network components so as to fully utilize the performance (or come close as much as possible to the advertised performance) of 221.8 MB/sec Reading, 220.8 MB/sec Writing mentioned on QNAP's website. I have all of my files (movies, music, personal data files, etc) stored on the NAS. I get roughly an abysmal ~38Mbs right now. My household uses the NAS constantly to stream from and download to the NAS. Any help would be greatly appreciated. Many thanks in advance....
P.S.. There are two MB Pros (2010 Core I7, 8GB ram) and two iPads (2) that are most of the time connected to the networking either watching something or browsing the web.
Amir

What if I use SLM2008 for the switch? Then all i need is a wireless router that gives me a perfomance closer to the rates I have mentioned in my original post ( actual throughput, not advertised rates).

ACS upgrade from 4.2.1.15 to ACS5.6

HI
We have bought new ACS5.6 SNS3415 Boxes , earlier we have ACS4.2.1.15 , now we want to migrate the data from old ACS to new ACS.
We have downloaded the ACS and trying to install 4.2.1.15 but getting the error
" ACS4.2.115 can only be installed on top of base version"
So we have installed the eval-ACS-4.2.0.124-SW successfully. And now we are trying to install the 4.2.1.15 but we are getting eth below error
" 4.2.1.5 can not be installed on EVAL version"
How can we resolve this so that we can migrate the data to ACS5.6 via migration utility.

Refer the link : https://supportforums.cisco.com/discussion/11513026/migrating-acs-420-421
you can directly upgrade from 4.2.0.124 to 5.6 : http://www.cisco.com/c/en/us/td/docs/net_mgmt/cisco_secure_access_control_system/5-6/user/guide/acsuserguide/migrate.html#98379

ACS upgrade from 4.0.x to 4.1.x "Appliance upgrade in progress"

Hello friends,
We are in the process of upgrading ACS 4.0 to 4.1 in a SE appliance 1113.
We followed very carefuly the steps, and upgraded de Appliance management ACS 4.1. The second upgrade (Software for appliance 4.1) keeps showing "Appliance upgrade in progress..." (near 2 hours by now). I know that it can stick even finishing, but it seems it has not finished because we can not log in with the GUI Administrator account like we did when upgrading the management software (previous step).
Is this normal? what can be missing?, I attach the console text output below (IP adds obscured).
Note the management upgrade went fine.
Thanks.
Cisco Secure ACS: 4.1.1.23
ACS 4.0.1.49-CSAdmin-CSCsd96293_CSCse26719 Fix: (Patch: 4.0.1.49 Tue 01/09/2007
7:50:00.17)
Appliance Management Software: 4.1.1.23
Appliance Base Image: 4.0.1.2
CSA build 4.0.1.543.2: (Patch: 4_0_1_543)
Appliance upgrade in progress...
Session Timeout: 10
Last Reboot Time: Fri Jun 06 11:46:40 2008
Current Date & Time: 6/6/2008 13:17:40
Time Zone: (GMT-05:00) Bogota, Lima, Quito
NTP Server(s): 131.107.1.10
CPU Load Free Disk Free Physical Memory
0.00% 16.9 GB 765 MB
Appliance IP Configuration
DHCP Enabled. . . . . . . . . . .: No
IP Address. . . . . . . . . . . .: 172.16.x.y
Subnet Mask . . . . . . . . . . .: 255.255.255.0
Default Gateway . . . . . . . . .: 172.6.x2.y2
DNS Servers . . . . . . . . . . .: 172.16.x3.y3
CSAdmin running
CSAuth running
CSDbSync running
CSLog running
CSMon running
CSRadius running
CSTacacs running
CSAgent stopped
Appliance upgrade in progress...

Thanks Jagdeep, but the upgrade has not finished.
The documentation mentions (please read it carefully):
"IF YOU COMPLETE THE UPGRADE and the ACS console displays the message Appliance upgrade in progress, this indicates that the upgrade PROGRESS is hanging.
If this condition occurs, start an ACS console session and enter the command download [hostAddress], where hostAddress can be any IP address. This action releases the ACS console from the upgrade process."
What worries me is that it has not finished.
As I said in my post, we can not log in :( (the GUI gets blocked during the upgrade).
I appreciate the help. Many Thanks.

ACS Upgrade in live network ok?

Similar Messages

Maybe you are looking for