06-26-2017 03:16 AM - edited 03-11-2019 12:48 AM
Hi Guys
I’m trying to export ACS policies from ACS 5.8.1.4 to be imported later on ISE 2.2 using the ACS-MigrationApplication-2.2.0 tool.
I’m able to export all objects except the Access Plicies. In the Migration tool logs I see that the Service Selection Policy is not supported.
Below the different logs:
===================================================================================
ACS 5.8
ACSLab
=======================================================================
ASEAPTLSPhone
=======================================================================
Rule: SSPPhoneEAPTLS
Description: Enabled SSP rule 'SSPPhoneEAPTLS' points on a service that is not a network
access service. This is not supported by ISE
=======================================================================
ASMD5Phone
=======================================================================
Rule: SSPPhoneMD5
Description: Enabled SSP rule 'SSPPhoneMD5' points on a service that is not a network
access service. This is not supported by ISE
----------------------------------------------------------------------
=======================================================================
DefaultNetworkAccess
=======================================================================
Rule: Radius
Description: Enabled SSP rule 'Radius' points on a service that is not a network access
service. This is not supported by ISE
-----------------------------------------------------------------------
=======================================================================
DefaultDeviceAdmin
=======================================================================
Rule: Tacacs
Description: Enabled SSP rule 'Tacacs' points on a service that is not a network access
service. This is not supported by ISE
-----------------------------------------------------------------------
=======================================================================
Summary:
*Service Selection Policy : Unsupported
*Authentication Policy : Supported
*Authorization Policy : Supported
Not all policies are compatible with ISE 2.2. Out of security concerns,
the migration application will not migrate any of your ACS 5.5/5.6/5.7/5.8
policies.
=======================================================================
End of Report
=======================================================================
I have attached the different Access Services in the Lab.
I have suspected the: ANY and the compound conditions with AND and OR but they are not the issue.
Any suggestion will be appreciated! Don't hesitate if you need any further information
Best regards
02-06-2018 09:02 AM
Hello Abdollah,
I am having the same issue. How did you fixed?
Best Regards,
Daniel
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: