14-15
User Guide for Cisco Secure Access Control System 5.4
OL-26225-01
Chapter14 Troubleshooting ACS with the Mo nitoring and Report Viewer
Working with Expert Troubleshooter
Step10 Click Show Results Summary to view the diagnosis and resolution steps.
The Results Summary page appears with the information described in Table 14 -6.
Related Topics
•Available Diagnostic and Troubleshooting Tools, page14-1
•Connectivity Tests, page14-1
•ACS Support Bundle, page14-1
•Expert Troubleshooter, page 14-2
Comparing IP-SGT Pairs on a Device with ACS-Assigned SGT Records
For Security Group Access-enabled devices, ACS assigns each user an SGT value through RADIUS
authentication. The IP User SGT diagnostic tool connects to the network device whose IP address you
provide and does the following:
1. Obtains a list of all IP-SGT assignments on the network device.
2. Checks the RADIUS authentication and accounting records for each IP-SGT pair to find out the
IP-SGT-User value that ACS has assigned to it most recently.
3. Displays the IP-SGT pairs in a tabular format and identifies whether the SGT values most recently
assigned by ACS and those on the device are the same or different.
Use this diagnostic tool to compare the IP-SGT values on a device with ACS-assigned SGT. To do this:
Step1 Choose Monitoring and Reports > Troubleshooting > Expert Troubleshooter.
Step2 Click IP User SGT from the list of troubleshooting tools.
The Expert Troubleshooter page refreshes and lists the fields described in Table 14-10.
Step3 Click Run.
The Progress Details page appears. The Monitoring and Report Viewer prompts you for additional input.
Step4 Click the User Input Required button and modify the fields as described in Table14-5.
Step5 Click Submit.
The Progress Details page appears with a brief summary of the results.
Table14-10 IP User SGT
Option Description
Enter Information
Network Device IP Enter the IPv4 or IPv6 address of the network device.
Filter Results
Username Enter the username of the user whose records you want to trou bleshoot.
User IP Address Enter the IP address of the user whose records you want to troubleshoot.
SGT Enter the user SGT value.