Cisco Systems OL-24201-01 manual Expert Troubleshooter, 14-2

Chapter 14 Troubleshooting ACS with the Monitoring & Report Viewer

Available Diagnostic and Troubleshooting Tools

Support bundles typically contain the ACS database, log files, core files, and Monitoring & Report Viewer support files. You can exclude certain files from the support bundle, per ACS node. You can download the support bundle to your local computer. The browser (depending on its configuration) displays the progress of the download and prompts you to save the support bundle to an appropriate location.

•If the ACS server is a primary instance, the support bundle includes an export of the ACS configuration.

•If the ACS server is a secondary instance, the ACS database is not included.

•If the ACS server is a log collector, the support bundle includes an export of the monitoring and report configuration and collected AAA audit and diagnostic logs.

•If the ACS server is not the log collector, the monitoring and reporting configuration is not included in the support bundle. See Downloading ACS Support Bundles for Diagnostic Information, page 14-4for detailed instructions on how to download ACS support bundles.

Expert Troubleshooter

Expert Troubleshooter is an easy-to-use, web-based troubleshooting utility that helps you diagnose and troubleshoot problems in ACS deployments. It reduces the time that you take to diagnose the problem and provides you detailed instructions on how to resolve the problem.

You can use Expert Troubleshooter to diagnose and troubleshoot passed and failed authentications. For example, if a user is unable to gain access to the network, you can use the Expert Troubleshooter to diagnose the cause of this problem.

Expert Troubleshooter provides you the option to run show commands on any network device from the ACS web interface. The output of the show command is returned to you in precisely the same manner as the output appears on a console.

You can use Expert Troubleshooter to evaluate the configuration of any network device to see if there are any discrepancies that cause the problem.

In addition, Expert Troubleshooter provides you four diagnostic tools for troubleshooting Security Group Access device-related problems.

The Expert Troubleshooter identifies the cause of the problem and lists an appropriate course of action that you can take to resolve the problem. See Working with Expert Troubleshooter, page 14-5for more information on the various tools that Expert Troubleshooter offers.

Table 14-1describes the diagnostic tools that ACS 5.3 offers:

Table 14-1 Expert Troubleshooter - Diagnostic Tools

Diagnostic Tool	Description
RADIUS Authentication Troubleshooting	Troubleshoots a RADIUS authentication. See Troubleshooting RADIUS
	Authentications, page 14-6for more information.
Execute Network Device Command	Executes any show command on a network device. See Executing the Show
	Command on a Network Device, page 14-9for more information.
Evaluate Configuration Validator	Evaluates the configuration of a network device. See Evaluating the
	Configuration of a Network Device, page 14-10for more information.

	User Guide for Cisco Secure Access Control System 5.3
14-2	OL-24201-01