Hello all, I have two ACS 3.3, and I am trying to replicate them but it is not working. The topology is something like this:
I test a lot of things, and I suppose that the problem is in ASA5540. So the question is: does anyone know which ports should be opened in ASA5540 to allow the replication ? I know that there must be opened port 2000, but I think that there must be some ports more.
Thanks a lot.
My understanding is, you need only port 2000 to be opened for ACS Replication.
BTW, Do you have skinny inspection enabled on the ASA. ACS replication runs over port 2000 which also happens to be the same port as the Skinny protocol. Make sure that he Skinny inspection on both firewalls is turned off and see if you can get replication.
no fixup protocol skinny 2000
I hope it helps.
** Please rate all helpful posts **