Change IP Address on ACS for Windows 3.3 and RSA/ACE agent

amvita · ‎12-11-2007

I am running ACS 3.3 on Windows with External RSA/ACE SecureID server 6.0 support installed on separate server.

I need to change the IP addresses on both servers. Has anyone done this, or can you point me to some documentation on how to accomplish this task.

David Stanford · ‎12-13-2007

For ACS:

You need to update the ip address of

radius/tacacs servers on all the devices pointing to this AAA server as well. Also, if you have redundant servers then you need to update the ip address of this server under the Network configuration on them as well.

Also, take a backup of ACS before making the

change.

There is no special procedure and

only we need to ensure that all the AAA Clients or the NAS devices are

configured with the new IP address of the AAA Server so that the devices

will not stop authenticating the users.

cisco24x7 · ‎12-13-2007

1- Do what davistan suggested

2- Stop all the RSA services on the RSA server

3- go into RSA edit configuration and modify

the IP address,

4- start the RSA Services,

5- modify the existing Agent host that you

created for ACS server to reflect the new IP

address of the ACS server,

6- generate a new sdconf.rec file for the ACS

agent host,

7- copy the sdconf.rec file into the \Windows\system32 directory of the ACS server,

8- use the RSA agent tool to test RSA

authentication connectivity between

the RSA and ACS server

That's about it. Very simple and straight

forward.