ACS2.3 upgrade to ACS3.0

[ken.yeo]

What is the best way to transfer ACS 2.3 users and settings on one NT4 box to ACS 3.0 on another W2K box?

[yusuff]

There are several ways, but best is doing DATABASE REPLICATION.

How?

Upgrade you ACS 2.x on NT to ACS 3.0

then, configure it as Primary ACS server and the other 3.0 on W2k as Secondary ACS.

Perform Replication, and the entire database and configuration will be replicated across.

Note that to perform Database Replication, both ACS must be same version and same build eg; ACS 3.0 build 40

VERY IMPORTANT

There is a known bug, that Database Replication fails after upgrading from 2.x to 3.0. There is a patch available to fix this after upgrading the 2.x to 3.0. Refer to the following

http://www.cisco.com/univercd/cc/td/doc/product/access/acs_soft/csacs4nt/csnt30/rn301.htm#xtocid28

Bug ID CSCdw22345: Replication fails on an upgraded ACS

Following URL will walk you through the configuring Replication.

http://www.cisco.com/univercd/cc/td/doc/product/access/acs_soft/csacs4nt/csnt30/user/s.htm#xtocid183499

HTH

R/Yusuf

[e.cormier]

Hi,

I have a similar situation with a cisco secure v2.1 server. I would like to move the (500+) user/groups to a different machine on version 3. I don't want upgrade the existing machine, it is not running very well, I am not sure it would survive an upgrade. Can I do a database dump or backup on the v.2.1 machine and have the 3.0 machine import it? If not, ideas?

Thanks

[yusuff]

You can use the csutil utility to export the users/group to a text file (dump.txt) and import it on ACS 3.0

eg;

----to dump use -d argument

net stop csauth

csutil -d dump.txt

net start csauth

----to resotre use - L argument

net stop csauth

csutil - l dump.txt

net start csauth

Read the following URL for more info

http://www.cisco.com/univercd/cc/td/doc/product/access/acs_soft/csacs4nt/csnt26/usergd26/apimport.htm#xtocid81753

HTH

R/Yusuf

[chafer]

I have just done this, but it did not pull in my network configuration. I have hundreds of devices configured there and don't want to re-type them in. Is there a utility for those devices?