ACS 5.4 multiple radius Authorization profile

[sagarawate]

Hi,

we are currently using the Open TACACS server and now we implementing the Cisco ACS Applicence 5.4 as new TACACS server, in that we want to add the multiple radius Authorization profile..

as we are having 1000 + radius Profile..please let us know how to add it through GUI or Root Directory... (Command Line)

Regards,

Sagar

[Amjad Abdullah]

Hi Sagar,

I didn't understand your point.

do you want to migrate authorization profile from open TACACS to ACS? Or you want a faster way to create multiple authorization profiles?

not sure if autho profiles can be imported by CSV templates.

give this link a look.

http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_system/5.1/sdk/cli_imp_exp.html#wp1057211

[sagarawate]

Hi Amjad,

I have the 1000+  authorization profile exported from Open TACACS server, so is ther any way to import it or any tool we can migrate those authorization profiles from exiting TACACS server.

i checked in the ACS 5.4, but not able to see, we can import the files using CSV or any other format. in fact file opertaion option is not available in that.

Pleasse advice..

Regards,

Sagar

[Muhammad Munir]

Hi Sagar

You should use encryption to reduce the risk of password capture on the network. Client and server access-control protocols such as TACACS+ and RADIUS encrypt passwords to prevent them from being captured within a network.

However, TACACS+ and RADIUS operate only between the AAA client and ACS. Before this point in the authentication process, unauthorized persons can obtain clear-text passwords; for example, in the following setups:

•The communication between an end-user client dialing up over a phone line

•An Integrated Services Digital Network (ISDN) line terminating at a network-access server

•Over a TELNET session between an end-user client and the hosting device

For more detail regarding to import the files using CSV or other format, please go to following link:

http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_system/5.2/user/guide/eap_pap_phase.html

[sagarawate]

Hi,

As mentioned, I want a faster way to create multiple authorization profiles..

Regards,

Sagar

[aqjaved]

Hello Sagar,

For migration ;of Radius profile into ACS  5.4 from any open TACACS server, Please check the below link for  Migration configurations

http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_system/5.4/migration/guide/Migration_data.html#wpxref52026