[c-nsp] ACS 4.1 migration, anyone ?
Loc Pham
loc.pham at comcast.net
Fri May 18 14:34:41 EDT 2007
Kratz,
Thanks for the tips. When you say " ... AAA Server config in Network config ... " , it would be under Proxy Distribution Entry ?
Loc,
-------------- Original message ----------------------
From: "Daniel Kratz" <dkratz at gmail.com>
> Loc,
>
> I was experienced some bad problems when migrated to 4.1.1(23) from
> 3.3.11in ACS-SE. First, we are unable to upgrade the software. TAC was
> recommended
> reimage with 4.1 recovery disk. After the upgrade we are not able to make ip
> static configuration. To get up the server we are used a external dhcp
> server.
>
> Last night, TAC publish a new one image 4.1.1(23) that fix the static ip
> configuration. We proceed upgrade TACACS Administration report don't work
> well. We need apply the one fix plus.
>
> To migrate data from data format 3.3 to 4.1 we was used a windows 2K
> server and ACS 3 and a 4.1 trial. All data was migrated. (users, groups,
> ndg, shell, administrative configuration, replication, etc.)
>
> The only caution.... If you use a external server down use the same ip
> address of production env. We will experience problems with AAA Server
> configuration in Network configuration. (you will need to exclude the temp.
> AAA).
>
> My only issue today is snmp. The snmpwalk broke with error.
>
> We are planed use migrate the authentication to a NDS solution in 2 weeks.
> Any one experienced problems in this?
>
> Att,
> Kratz
>
>
>
> On 5/17/07, Loc Pham <loc.pham at comcast.net> wrote:
> >
> > Hello,
> > I migrate our test box ACS 3.1 windows platform to 4.1 ( with help from
> > TAC ).
> > Now, the million dollars question: Have anyone successfully do similar
> > thing and any additional test I need to do ? I would imagine spot checks
> > here and there ( +5000 users / ~ 500 groups ) but may be a more stuff I can
> > verify ? Thing may just work the way it is but who know !
> > TIA,
> > Loc
> > _______________________________________________
> > cisco-nsp mailing list cisco-nsp at puck.nether.net
> > https://puck.nether.net/mailman/listinfo/cisco-nsp
> > archive at http://puck.nether.net/pipermail/cisco-nsp/
> >
More information about the cisco-nsp
mailing list