Chapter 2 Migrating from ACS 4.x to ACS 5.3

Common Scenarios in Migration

Table 2-1

Functionality Mapping from ACS 4.x to ACS 5.3 (continued)

 

 

 

 

 

 

To configure...

 

In ACS 4.x, choose...

In ACS 5.3, choose...

Additional information for 5.3

 

 

 

 

Downloadable ACLs

Shared Profile

Policy Elements > Authorization

You can add downloadable ACLs

 

 

Components

and Permissions > Named

(DACLs) to a network access

 

 

 

Permission Objects >

authorization profile.

 

 

 

Downloadable ACLs

After you create the

 

 

 

 

 

 

 

See Creating, Duplicating, and

authorization profile, you can

 

 

 

Editing Downloadable ACLs,

add it as a result in an

 

 

 

page 9-31.

authorization policy in a network

 

 

 

 

access service.

 

 

 

 

 

RADIUS VSA

 

Interface

System Administration >

You configure RADIUS VSA

 

 

Configuration

Configuration > Dictionaries >

attributes as part of a network

 

 

 

Protocols > RADIUS > RADIUS

access authorization profile.

 

 

 

VSA.

You can add authorization

 

 

 

 

 

 

 

See Creating, Duplicating, and

profiles as results in an

 

 

 

Editing RADIUS

authorization policy in a network

 

 

 

Vendor-Specific Attributes,

access service.

 

 

 

page 18-6.

 

 

 

 

 

 

Common Scenarios in Migration

The following are some of the common scenarios that you encounter while migrating to ACS 5.3:

Migrating from ACS 4.2 on CSACS 1120 to ACS 5.3, page 2-7

Migrating from ACS 3.x to ACS 5.3, page 2-8

Migrating Data from Other AAA Servers to ACS 5.3, page 2-8

Migrating from ACS 4.2 on CSACS 1120 to ACS 5.3

In your deployment, if you have ACS 4.2 on CSACS 1120 and you would like to migrate to ACS 5.3, you must do the following:

Step 1 Install Cisco Secure Access Control Server 4.2 for Windows on the migration machine. Step 2 Back up the ACS 4.2 data on CSACS 1120.

Step 3 Restore the data in the migration machine.

Step 4 Run the Analysis and Export phase of the Migration utility on the migration machine. Step 5 Install ACS 5.3 on CSACS 1120.

Step 6 Import the data from the migration machine to the CSACS 1120 that has ACS 5.3 installed.

See http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_system/5.3/migration/ guide/migration_guide.html for a detailed description of each of these steps.

User Guide for Cisco Secure Access Control System 5.3

 

OL-24201-01

2-7

 

 

 

Page 39
Image 39
Cisco Systems OL-24201-01 Common Scenarios in Migration, Migrating from ACS 4.2 on Csacs 1120 to ACS, Radius VSA, Vsa