Preface
Revised: October 4, 2018,
This guide describes the system requirements, installation, upgrade, configuration, troubleshooting, and maintenance process for Cisco Secure Access Control System Release 5.8.1 (ACS 5.8.1).
ACS 5.8.1 consists of an ACS 5.8.1 server, the Cisco Application Deployment Engine Operating System Release: 2.2, ADE-OS Build Version: 2.2.3.002, ADE-OS System Architecture: x86_64, Copyright (c) 2005-2016 by Cisco Systems, Inc. All rights reserved, and ACS 5.8.1 software.
The ADE-OS and ACS 5.8.1 software run on a dedicated SNS-3515, SNS-3595, SNS-3415 or SNS-3495 Access Control System Series appliance (Cisco SNS-3515, Cisco SNS-3595, Cisco SNS-3415 or Cisco SNS-3495), on a dedicated Cisco 1121 Secure Access Control System Series appliance (CSACS-1121), or on a VMware server. However, ACS 5.8.1 continues to support CSACS-1121 appliances that you have used for ACS 5.3. You cannot directly upgrade from ACS 5.3 or 5.4 to 5.8.1. You have to upgrade ACS 5.3 or 5.4 to either 5.5, 5.6, 5.7, or 5.8. From ACS 5.5, 5.6 5.7, or 5.8, you can directly upgrade to ACS 5.8.1.
For virtual machine (VM)-based installations, you need to configure the VM environment to meet minimal system requirements, as well as install the ACS 5.8.1 software. The supported VMware versions are ESXi 5.0, 5.1, 5.5, and 6.0.
ACS 5.8.1 is compatible with ADE-OS 2.x. If you are using ACS 5.1, you must upgrade to this ADE-OS version as part of the ACS 5.8.1 upgrade.
Warranty, service, and support information is located in the Cisco Information Packet that shipped with your appliance.
Audience
This guide is designed for administrators who install and configure the SNS-3515, SNS-3595, SNS-3415, SNS-3495, Cisco ACS 1121 appliances and VMware servers or for administrators who upgrade their ACS deployment to Release 5.8.1.
To use this hardware publication, you should be familiar with networking equipment and cabling and should have a basic knowledge of electronic circuitry and wiring practices.
Warning: Only trained and qualified personnel should be allowed to install, replace, or service this equipment. Statement 1030![](/c/dam/en/us/td/i/templates/blank.gif)
Document Organization
The topics in this guide are grouped into introduction, installation procedures, upgrade, post-installation tasks, and reference categories, and are organized in the following way:
Table 1 Document Organization
|
|
Part 1: ACS Server Deployment |
Understanding the ACS Server Deployment—Provides an overview of ACS server deployments and their components. Read this chapter for planning a new ACS deployment. |
Part 2: ACS 5.8.1 on Cisco 1121 Secure Access Control System |
Introducing the Cisco 1121 Secure Access Control System Hardware—Provides an overview of CSACS-1121 hardware. |
Preparing to Install the Cisco 1121 Secure Access Control System Hardware—Describes the safety instructions, site requirements, and tasks to perform before installing the CSACS-1121. |
Installing the Cisco 1121 Secure Access Control System Hardware—Provides instructions on rack-mounting configuration, mounting the CSACS-1121, connecting cables, powering up the appliance, and removing and replacing the appliance. |
Installing and Configuring the Cisco Secure Access Control System with CSACS-1121—Describes how to install ACS for the first time with CSACS-1121. |
Part 3: ACS 5.8.1 on Cisco SNS 3400 Servers |
Introducing the Cisco SNS-3415 and Cisco SNS-3495 Hardware Appliances—Provides an overview of the Cisco SNS-3415 and Cisco SNS-3495 hardware. |
Preparing to Install the Cisco SNS 3415 and Cisco SNS 3495 Hardware Appliances—Describes the safety instructions, site requirements, and tasks to perform before installing the Cisco SNS-3415 and Cisco SNS-3495. |
Installing the Cisco SNS 3415 and Cisco SNS 3495 Hardware Appliances—Provides instructions on rack-mounting configuration, mounting the Cisco SNS-3415 and Cisco SNS-3495, connecting cables, powering up the appliance, and removing and replacing the appliance. |
|
Installing and Configuring the Secure Access Control System with the Cisco SNS-3415 and Cisco SNS-3495—Describes how to install ACS for the first time with the Cisco SNS-3415 and Cisco SNS-3495. |
Part 4: ACS 5.8.1 on Cisco SNS 3500 Servers |
Introducing the Cisco SNS-3515 and Cisco SNS-3595 Hardware Appliances—Provides an overview of the Cisco SNS-3515 and Cisco SNS-3595 hardware. |
|
Preparing to Install the Cisco SNS 3515 and Cisco SNS 3595 Hardware Appliances—Describes the safety instructions, site requirements, and tasks to perform before installing the Cisco SNS-3515 and Cisco SNS-3595. |
|
Installing the Cisco SNS 3515 and Cisco SNS 3595 Hardware Appliances—Provides instructions on rack-mounting configuration, mounting the Cisco SNS-3515 and Cisco SNS-3595, connecting cables, powering up the appliance, and removing and replacing the appliance. |
|
Installing and Configuring the Secure Access Control System with the Cisco SNS-3515 and Cisco SNS-3595—Describes how to install ACS for the first time with the Cisco SNS-3515 and Cisco SNS-3595. |
Part 5: ACS 5.8.1 on VMware Virtual Machines |
Installing ACS in a VMware Virtual Machine—Describes how to install ACS using VMware ESX. |
Part 6: Upgrading ACS to Release 5.8.1 |
Upgrading the Cisco Secure Access Control System—Describes how to upgrade an ACS server from 5.5, 5.6, 5.7, 5.8 to 5.8.1 and how to upgrade an ACS 5.5, 5.6, 5.7, or 5.8 deployment to 5.8.1. |
Part 7: Post-Installation Tasks |
Post-Installation Tasks—Provides information on installing an ACS license and a list of configuration tasks to perform after installation. |
Part 8: Reference |
Troubleshooting—Provides some techniques for troubleshooting the initial CSACS-1121 startup. |
Site Log—Provides recommendations for maintaining a site log to record all actions related to installing and maintaining the CSACS-1121, Cisco SNS-3415, Cisco SNS-3495, Cisco SNS-3515, or Cisco 3595. |
Maintaining the CSACS-1121, Cisco SNS-3400 Series, and Cisco SNS-3500 series Appliances—Provides recommendations on maintaining the CSACS-1121, Cisco SNS-3415, Cisco SNS-3495, Cisco SNS-3515, and Cisco SNS-3595 Series appliance after installation. |
Installation, Upgrade, and Migration Scenarios
Table 2 lists some common scenarios that you might come across while installing, upgrading, or migrating to ACS 5.8.1. For each of the scenarios, references to the respective chapters or guides are provided in the order that you must follow.
Table 2 Installation, Upgrade, and Migration Scenarios
|
|
Installing ACS for the first time using the CSACS-1121 appliance |
1. Introducing the Cisco 1121 Secure Access Control System Hardware 2. Preparing to Install the Cisco 1121 Secure Access Control System Hardware 3. Installing the Cisco 1121 Secure Access Control System Hardware 4. Installing and Configuring the Cisco Secure Access Control System with CSACS-1121 5. Post-Installation Tasks |
Installing ACS for the first time using the Cisco SNS-3415 or Cisco SNS-3495 appliances |
1. Introducing the Cisco SNS-3415 and Cisco SNS-3495 Hardware Appliances 2. Preparing to Install the Cisco SNS 3415 and Cisco SNS 3495 Hardware Appliances 3. Installing the Cisco SNS 3415 and Cisco SNS 3495 Hardware Appliances 4. Installing and Configuring the Secure Access Control System with the Cisco SNS-3415 and Cisco SNS-3495 5. Post-Installation Tasks |
Installing ACS for the first time using the Cisco SNS-3515 or Cisco SNS-3595 appliances |
1. Introducing the Cisco SNS-3515 and Cisco SNS-3595 Hardware Appliances 2. Preparing to Install the Cisco SNS 3515 and Cisco SNS 3595 Hardware Appliances 3. Installing the Cisco SNS 3515 and Cisco SNS 3595 Hardware Appliances 4. Installing and Configuring the Secure Access Control System with the Cisco SNS-3515 and Cisco SNS-3595 5. Post-Installation Tasks |
Installing ACS for the first time with a VMware server |
1. Installing ACS in a VMware Virtual Machine 2. Post-Installation Tasks |
Upgrading from ACS 5.5, 5.6 5.7, 5.8 to 5.8.1 |
1. Upgrading the Cisco Secure Access Control System |
Migrating from ACS 4.2 on the same hardware platform (CSACS-1121 Series appliance) |
1. Back up the ACS 4.2 data from the CSACS-1121 Series appliance and restore the data on an intermediate migration machine. This intermediate migration machine must be a Windows server. See the ACS 5.8.1 Migration Guide at: http://www.cisco.com/c/en/us/td/docs/net_mgmt/cisco_secure_access_control_system/5-6/migration/guide/migration_guide.html 2. Perform a clean installation of ACS 5.8.1 on the CSACS-1121 appliance. See Reimaging the ACS Server 3. Perform migration of data from ACS 4.2 to ACS 5.8.1 according to the instructions that are provided in the ACS 5.8.1 Migration Guide. See: http://www.cisco.com/c/en/us/td/docs/net_mgmt/cisco_secure_access_control_system/5-6/migration/guide/migration_guide.html. |
Migrating from ACS 4.2 on a different hardware platform |
1. Perform initial installation of ACS 5.8.1 on a CSACS-1121, Cisco SNS 3400, or Cisco SNS 3500 Series appliance or VMware server. – To install ACS 5.8.1 on a CSACS-1121 appliance, see Installation Using the CSACS-1121 Series Appliance – To install ACS 5.8.1 on a Cisco SNS 3400 series appliance, see Installing ACS on the Cisco SNS-3415 or 3495 Appliance – To install ACS 5.8.1 on a Cisco SNS 3500 series appliance, see Installing ACS on the Cisco SNS-3515 or 3595 Appliance – To install ACS 5.8.1 on a VMware server, see Installing ACS in a VMware Virtual Machine 2. Perform migration of data from ACS 4.2 to ACS 5.8.1 according to the instructions that are provided in the ACS 5.8.1 Migration Guide. See: http://www.cisco.com/c/en/us/td/docs/net_mgmt/cisco_secure_access_control_system/5-6/migration/guide/migration_guide.html |
Document Conventions
This guide uses the following conventions to convey instructions and information.
|
|
Commands, keywords, special terminology, and options that should be selected during procedures |
boldface font |
Variables for which you supply values and new or important terminology |
italic font |
Displayed session and system information, paths and file names |
screen font |
Information you enter |
boldface screen font |
Variables you enter |
italic screen font |
Menu items and button names |
boldface font |
Indicates menu items to select, in the order you select them. |
Option > Network Preferences |
Note: Means reader take note. Notes contain helpful suggestions or references to material not covered in the manual.
Caution: Means reader be careful. In this situation, you might do something that could result in equipment damage or loss of data.![](/c/dam/en/us/td/i/templates/blank.gif)
Safety Warnings
Safety warnings appear throughout this publication in procedures that, if performed incorrectly, might harm you. A warning symbol precedes each warning statement. The safety warnings provide safety guidelines that you should follow when working with any equipment that connects to electrical power or telephone wiring. Included in the warnings are translations in several languages.
For detailed information about compliance guidelines and translated safety warnings, see Regulatory Compliance and Safety Information for Cisco Secure Access Control System.
Warning: |
IMPORTANT SAFETY INSTRUCTIONS This warning symbol means danger. You are in a situation that could cause bodily injury. Before you work on any equipment, be aware of the hazards involved with electrical circuitry and be familiar with standard practices for preventing accidents. Use the statement number provided at the end of each warning to locate its translation in the translated safety warnings that accompanied this device. Statement 1071 SAVE THESE INSTRUCTIONS |
Waarschuwing |
BELANGRIJKE VEILIGHEIDSINSTRUCTIES Dit waarschuwingssymbool betekent gevaar. U verkeert in een situatie die lichamelijk letsel kan veroorzaken. Voordat u aan enige apparatuur gaat werken, dient u zich bewust te zijn van de bij elektrische schakelingen betrokken risico's en dient u op de hoogte te zijn van de standaard praktijken om ongelukken te voorkomen. Gebruik het nummer van de verklaring onderaan de waarschuwing als u een vertaling van de waarschuwing die bij het apparaat wordt geleverd, wilt raadplegen. BEWAAR DEZE INSTRUCTIES |
Varoitus |
TÄRKEITÄ TURVALLISUUSOHJEITA Tämä varoitusmerkki merkitsee vaaraa. Tilanne voi aiheuttaa ruumiillisia vammoja. Ennen kuin käsittelet laitteistoa, huomioi sähköpiirien käsittelemiseen liittyvät riskit ja tutustu onnettomuuksien yleisiin ehkäisytapoihin. Turvallisuusvaroitusten käännökset löytyvät laitteen mukana toimitettujen käännettyjen turvallisuusvaroitusten joukosta varoitusten lopussa näkyvien lausuntonumeroiden avulla. SÄILYTÄ NÄMÄ OHJEET |
Attention |
IMPORTANTES INFORMATIONS DE SÉCURITÉ Ce symbole d'avertissement indique un danger. Vous vous trouvez dans une situation pouvant entraîner des blessures ou des dommages corporels. Avant de travailler sur un équipement, soyez conscient des dangers liés aux circuits électriques et familiarisez-vous avec les procédures couramment utilisées pour éviter les accidents. Pour prendre connaissance des traductions des avertissements figurant dans les consignes de sécurité traduites qui accompagnent cet appareil, référez-vous au numéro de l'instruction situé à la fin de chaque avertissement. CONSERVEZ CES INFORMATIONS |
Warnung |
WICHTIGE SICHERHEITSHINWEISE Dieses Warnsymbol bedeutet Gefahr. Sie befinden sich in einer Situation, die zu Verletzungen führen kann. Machen Sie sich vor der Arbeit mit Geräten mit den Gefahren elektrischer Schaltungen und den üblichen Verfahren zur Vorbeugung vor Unfällen vertraut. Suchen Sie mit der am Ende jeder Warnung angegebenen Anweisungsnummer nach der jeweiligen Übersetzung in den übersetzten Sicherheitshinweisen, die zusammen mit diesem Gerät ausgeliefert wurden. BEWAHREN SIE DIESE HINWEISE GUT AUF. |
Avvertenza |
IMPORTANTI ISTRUZIONI SULLA SICUREZZA Questo simbolo di avvertenza indica un pericolo. La situazione potrebbe causare infortuni alle persone. Prima di intervenire su qualsiasi apparecchiatura, occorre essere al corrente dei pericoli relativi ai circuiti elettrici e conoscere le procedure standard per la prevenzione di incidenti. Utilizzare il numero di istruzione presente alla fine di ciascuna avvertenza per individuare le traduzioni delle avvertenze riportate in questo documento. CONSERVARE QUESTE ISTRUZIONI |
Advarsel |
VIKTIGE SIKKERHETSINSTRUKSJONER Dette advarselssymbolet betyr fare. Du er i en situasjon som kan føre til skade på person. Før du begynner å arbeide med noe av utstyret, må du være oppmerksom på farene forbundet med elektriske kretser, og kjenne til standardprosedyrer for å forhindre ulykker. Bruk nummeret i slutten av hver advarsel for å finne oversettelsen i de oversatte sikkerhetsadvarslene som fulgte med denne enheten. TA VARE PÅ DISSE INSTRUKSJONENE |
Aviso |
INSTRUÇÕES IMPORTANTES DE SEGURANÇA Este símbolo de aviso significa perigo. Você está em uma situação que poderá ser causadora de lesões corporais. Antes de iniciar a utilização de qualquer equipamento, tenha conhecimento dos perigos envolvidos no manuseio de circuitos elétricos e familiarize-se com as práticas habituais de prevenção de acidentes. Utilize o número da instrução fornecido ao final de cada aviso para localizar sua tradução nos avisos de segurança traduzidos que acompanham este dispositivo. GUARDE ESTAS INSTRUÇÕES |
¡Advertencia! |
INSTRUCCIONES IMPORTANTES DE SEGURIDAD Este símbolo de aviso indica peligro. Existe riesgo para su integridad física. Antes de manipular cualquier equipo, considere los riesgos de la corriente eléctrica y familiarícese con los procedimientos estándar de prevención de accidentes. Al final de cada advertencia encontrará el número que le ayudará a encontrar el texto traducido en el apartado de traducciones que acompaña a este dispositivo. GUARDE ESTAS INSTRUCCIONES |
Varning! |
VIKTIGA SÄKERHETSANVISNINGAR Denna varningssignal signalerar fara. Du befinner dig i en situation som kan leda till personskada. Innan du utför arbete på någon utrustning måste du vara medveten om farorna med elkretsar och känna till vanliga förfaranden för att förebygga olyckor. Använd det nummer som finns i slutet av varje varning för att hitta dess översättning i de översatta säkerhetsvarningar som medföljer denna anordning. SPARA DESSA ANVISNINGAR |
|
|
|
|
|
|
|
|
|
|
Aviso |
INSTRUÇÕES IMPORTANTES DE SEGURANÇA Este símbolo de aviso significa perigo. Você se encontra em uma situação em que há risco de lesões corporais. Antes de trabalhar com qualquer equipamento, esteja ciente dos riscos que envolvem os circuitos elétricos e familiarize-se com as práticas padrão de prevenção de acidentes. Use o número da declaração fornecido ao final de cada aviso para localizar sua tradução nos avisos de segurança traduzidos que acompanham o dispositivo. GUARDE ESTAS INSTRUÇÕES |
Advarsel |
VIGTIGE SIKKERHEDSANVISNINGER Dette advarselssymbol betyder fare. Du befinder dig i en situation med risiko for legemesbeskadigelse. Før du begynder arbejde på udstyr, skal du være opmærksom på de involverede risici, der er ved elektriske kredsløb, og du skal sætte dig ind i standardprocedurer til undgåelse af ulykker. Brug erklæringsnummeret efter hver advarsel for at finde oversættelsen i de oversatte advarsler, der fulgte med denne enhed. GEM DISSE ANVISNINGER |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Product Documentation
Note: The printed and electronic documentation is sometimes updated after original publication. Therefore, you should also review the documentation on http://www.cisco.com for any updates.
Table 3 lists the product documentation that is available for ACS 5.8.1 on Cisco.com. To find end-user documentation for all products on Cisco.com, go to: http://www.cisco.com/go/techdocs
Select Products > Security > Access Control and Policy > Secure Access Control System > Cisco Secure Access Control System 5.8.1.
Documentation Updates
Table 4 lists the updates to the Installation and Upgrade Guide for Cisco Secure Access Control System 5.8.1.
Table 4 Updates to the Installation and Upgrade Guide for Cisco Secure ACS 5.8.1
|
|
03/21/2016 |
Cisco Secure Access Control System, Release 5.8.1 |