cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
929
Views
0
Helpful
1
Replies

Cisco Secure ACS to Cisco ISE Migration Tool – Cannot export ACS policies

B. BELHADJ
Level 4
Level 4

Hi Guys

I’m trying to export ACS policies from ACS 5.8.1.4 to be imported later on ISE 2.2 using the ACS-MigrationApplication-2.2.0 tool.

I’m able to export all objects except the Access Plicies. In the Migration tool logs I see that the Service Selection Policy is not supported.

Below the different logs:

===================================================================================

ACS 5.8

ACSLab

=======================================================================

ASEAPTLSPhone

=======================================================================

Rule: SSPPhoneEAPTLS

Description: Enabled SSP rule 'SSPPhoneEAPTLS' points on a service that is not a network

access service. This is not supported by ISE

=======================================================================

ASMD5Phone

=======================================================================

Rule: SSPPhoneMD5

Description: Enabled SSP rule 'SSPPhoneMD5' points on a service that is not a network

access service. This is not supported by ISE

----------------------------------------------------------------------

=======================================================================

DefaultNetworkAccess

=======================================================================

Rule: Radius

Description: Enabled SSP rule 'Radius' points on a service that is not a network access

service. This is not supported by ISE

-----------------------------------------------------------------------

=======================================================================

DefaultDeviceAdmin

=======================================================================

Rule: Tacacs

Description: Enabled SSP rule 'Tacacs' points on a service that is not a network access

service. This is not supported by ISE

-----------------------------------------------------------------------

=======================================================================

Summary:

*Service Selection Policy     : Unsupported

*Authentication Policy         : Supported

*Authorization Policy         : Supported

Not all policies are compatible with ISE 2.2. Out of security concerns,

the migration application will not migrate any of your ACS 5.5/5.6/5.7/5.8

policies.

=======================================================================

                               End of Report

=======================================================================

I have attached the different Access Services in the Lab.

I have suspected the: ANY and the compound conditions with AND and OR but they are not the issue.

Any suggestion will be appreciated! Don't hesitate if you need any further information

 

Best regards

 

1 Reply 1

Daniel Stefani
Level 1
Level 1

Hello Abdollah,

 

I am having the same issue. How did you fixed?

 

 

Best Regards,

Daniel

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: