Upgraded from 220.127.116.11 to 18.104.22.168 and having big problems
We currently have SE 1112 and are using two (one primary, one backup). I recently upgraded my primary from 22.214.171.124 to 126.96.36.199 and had some issues after the upgrade.
After some time, the ACS would stop responding via the GUI or just be extremely slow. During this time, I couldn't log in to any devices. I would reboot the ACS and then I could authenticate again.
After looking through the logs for the time the ACS was non responsive, I saw no failed authentications. I saw no failed authentications in the backup server either. After some time the server was extremely slow again (doing anything on the GUI took forever) and I couldn't log in to anything. I decided to power it off. After this, I had no problems authenticating via the backup server.
I upgraded exactly how Cisco said. Upgraded the management software, then the acs software, backed up my database, ran the recovery disk for 1112 188.8.131.52, recovered my database.
I haven't uploaded any of the patches, but I don't see a description any where for this bug.
Re: Upgraded from 184.108.40.206 to 220.127.116.11 and having big problems
After upgrade, previous admin account will not work. You will need to add GUI admin account through the console access. So before starting with upgrade process please make sure you have console access available for the appliance. Command would be :
add-guiadmin [admin] [password]
admin User name for the GUI account.
password Password for the GUI account.
If you do not set up a GUI account using the add-guiadmin command, then there is no way to access the ACS SE other than through the CLI administrator account and a serial connection. After initial installation of the ACS SE, add a web GUI account using this command.
Table of ContentsIntroductionVersion HistoryPossible Future
UpdatesDocuments PurposeNAT Operation in ASA 8.3+ SectionsRule Types
Network Object NATTwice NAT / Manual NATRule Types used per SectionNAT
Types used with Twice NAT / Manual NAT and Network Obje...
[toc:faq]Introduction:This document describes details on how NAT-T
works.Background:ESP encrypts all critical information, encapsulating
the entire inner TCP/UDP datagram within an ESP header. ESP is an IP
protocol in the same sense that TCP and UDP are I...