Thanks a lot JG.

But are you sure that this can replicates the group mapping for unknown user? Basically the configuration on the ACS are only some NAPs, external DB and unknown user group mapping.

You can use database replication to:

•Select the parts of the primary ACS configuration to be replicated.

•Control the timing of the replication process, including creating schedules.

•Export selected configuration items from the primary ACS.

•Securely transport selected configuration data from the primary ACS to one or more secondary ACSs.

•Update the secondary ACSs to create matching configurations.

The following items cannot be replicated:

•IP pool definitions (for more information.

•ACS certificate and private key files.

•Unknown user group mapping configuration.

•Dynamically-mapped users.

•Settings on the ACS Service Management page in the System Configuration section.

•RDBMS Synchronization settings.

•Third-party software, such as Novell Requestor or RSA ACE client software

Regards,

~JG

Do rate helpful posts

Hi, JG,

It is obvious that the database replication function of the ACS does not meet the customer's requirement. Do you have any suggestion on how to meet the customer requirement?

Hi,

Are these supported and unsupported features documented somewhere in CCO? I'm concerned about the inability to replicate Dynamically-mapped users. I went through the whole ACS SE 4.1 User Guide and didn't find an exact answer.

Thanks for your help!

Jorge,

Here is the link that explains about it,

http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_server_for_windows/4.1/user/SCAdv.html#wp756078

Regards,

~JG