Installing and Configuring the Cisco Secure Access Control System with CSACS-1121
This chapter describes how to install and initially configure CSACS-1121 and the ACS 5.8 server.
■Installation Using the CSACS-1121 Series Appliance
■Downloading the Cisco Secure ACS 5.8 ISO Image
■Installing the ACS Server
■Resetting the Administrator Password
■Reimaging the ACS Server
Downloading the Cisco Secure ACS 5.8 ISO Image
You can download the Cisco Secure ACS 5.8 ISO image from Cisco.com
1. Go to http://www.cisco.com/go/acs. You must already have a valid Cisco.com login credentials to access this link.
2. Click Download Software.
The Cisco Secure ACS Release 5.8 software image appears on the Cisco.com page. You can test all the Cisco ACS services once your installation and initial configuration are complete.
Note: You can download the ACS 5.x software images from Cisco.com only when you have a valid Software Application Support (SAS) contract for a previous version of ACS 5.x software. If you do not have a valid SAS contract for a previous version, you must contact your Sales Engineer (SE), Accounts Manager (AM), or Cisco partners to publish the software image on Cisco.com to the specific customers account.
Installing the ACS Server
This section describes how to install ACS on the CSACS-1121 Series appliance.
This section contains:
■Running the Setup Program
■Verifying the Installation Process
Running the Setup Program
This section describes the setup process to install the ACS server.
The setup program launches an interactive command-line interface (CLI) that prompts you for the required parameters.
An administrator can use the console or a dumb terminal to configure the initial network settings and provide the initial administrator credentials for the ACS 5.8 server using the setup program. The setup process is a one-time configuration task.
To install the ACS server:
1. Power on the appliance.
The setup prompt appears:
Please type ‘setup’ to configure the appliance
2. At the login prompt, enter setup and press Enter.
The console displays a set of parameters. You must enter the parameters as described in Table 1.
Note: You can interrupt the setup process at any time by typing Ctrl-C before the last setup value is entered.
Table 1 Network Configuration Parameters
|
|
|
|
Host Name |
localhost |
First letter must be an ASCII character. Length must be from 3 to 15 characters. Valid characters are alphanumeric (A-Z, a-z, 0-9), hyphen (-), and the first character must be a letter. Note: When you intend to use AD ID store and set up multiple ACS instances with same name prefix, use maximum of 15 characters as the host name so that it does not affect the AD functionality. |
Enter the hostname. |
IPV4 IP Address |
None, network specific |
Must be a valid IPv4 address between 0.0.0.0 and 255.255.255.255. |
Enter the IP address. |
IPv4 Netmask |
None, network specific |
Must be a valid IPv4 address between 0.0.0.0 and 255.255.255.255. |
Enter a valid netmask. |
IPv4 Gateway |
None, network specific |
Must be a valid IPv4 address between 0.0.0.0 and 255.255.255.255. |
Enter a valid default gateway. |
Domain Name |
None, network specific |
Cannot be an IP address. Valid characters are ASCII characters, any numbers, hyphen (-), and period (.). |
Enter the domain name. |
IPv4 Primary Name Server Address |
None, network specific |
Must be a valid IPv4 address between 0.0.0.0 and 255.255.255.255. |
Enter a valid name server address. |
Add another nameserver |
None, network specific |
Must be a valid IPv4 address between 0.0.0.0 and 255.255.255.255. Note: You can configure a maximum of three name servers from ACS CLI. |
To configure multiple name servers, enter Y. |
NTP Server |
time.nist.gov |
Must be a valid IPv4 address between 0.0.0.0 and 255.255.255.255 or a domain name server. Note: You can configure a maximum of three NTP servers from ACS CLI. |
Enter a valid domain name server or an IPv4 address. |
Timezone |
UTC |
Must be a valid local time zone. |
Enter a valid timezone. |
SSH Service |
None, network specific |
None |
To enable SSH service, enter Y. |
Username |
admin |
The name of the first administrative user. You can accept the default or enter a new username. Must be from 3 to 8 characters, and must be alphanumeric (A-Z, a-z, 0-9). |
Enter the username. |
Admin Password |
None |
No default password. Enter your password. The password must be at least six characters in length, have at least one lowercase letter, one uppercase letter, and one number. In addition: ■Save the user and password information for the account that you set up for initial configuration. ■Remember and protect these credentials because they allow complete administrative control of the ACS hardware, the CLI, and the application. ■If you lose your administrative credentials, you can reset your password by using the ACS 5.8 Installation and Recovery DVD. |
Enter the password. |
The console requests for the parameters as shown below:
Enter hostname[]: acs-server-1
Enter IP address[]: a.b.c.d
Enter IP default netmask[]: 255.255.255.255
Enter IP default gateway[]: a.b.c.d
Enter default DNS domain[]: mycompany.com
Enter primary nameserver[]: a.b.c.d
Add secondary nameserver? Y/N : n
Add primary NTP server [time.nist.gov]: a.b.c.d
Add secondary NTP server? Y/N : n
Enter system timezone[UTC]:
Enable SSH service? Y/N [N] : y
Enter username [admin]: admin
Pinging the primary nameserver...
Do not use `Ctrl-C' from this point on...
Installing applications...
Generating configuration...
After the ACS server is installed, the system reboots automatically.
Now, you can log into ACS using the CLI username and password that was configured during the setup process.
Note: You can use this username and password to log into ACS only via the CLI.
Note: The initial setup of the ACS 5.8 server should be configured with an IPv4 address. You can configure the IPv6 IP address for your server only after the initial setup is completed.
Note: ACS 5.8 supports IPv4 and IPv6 dual stack networking and does not support pure IPv6 network.
Verifying the Installation Process
To verify that you have correctly completed the installation process:
1. When the system reboots, at the login prompt enter the username you configured during setup, and press Enter.
2. At password prompt, enter the password you configured during setup, and press Enter.
3. Verify that the application has been installed properly by entering show application, and press Enter.
The console displays:
acs Cisco Secure Access Control System 5.8
4. At the system prompt, check the release and ACS version that are installed, at the system prompt by entering show application version acs and pressing Enter.
The console displays:
Cisco ACS VERSION INFORMATION
-----------------------------
Note: The Version and Internal Build ID may change for different versions of this release.
5. Check the status of ACS processes, at the system prompt by entering show application status acs, and press Enter.
The console displays:
Process 'database' running
Process 'management' running
Process 'runtime' running
Process 'adclient' running
Process 'view-database' running
Process 'view-jobmanager' running
Process 'view-alertmanager' running
Process 'view-collector' running
Process 'view-logprocessor' running
Resetting the Administrator Password
If you are not able to log in to the system due to the loss of the administrator password, you can use the ACS 5.8 recovery DVD to reset the administrator password.
To reset the administrator password:
1. Power up the appliance.
2. Insert the ACS 5.8 recovery DVD.
The console displays:
Welcome to Cisco Secure ACS 5.8 Recovery
To boot from hard disk press <Enter>
[1] Cisco Secure ACS 5.8 Installation (Keyboard/Monitor)
[2] Cisco Secure ACS 5.8 Installation (Serial Console)
[3] Reset Administrator Password (Keyboard/Monitor)
[4] Reset Administrator Password (Serial Console)
<Enter> Boot from hard disk
Please enter boot option and press <Enter>.
To reset the administrator password, at the system prompt, enter 3 if you are using a keyboard and video monitor, or enter 4 if you are using a serial console port.
The console displays a set of parameters.
3. Enter the parameters as described in Table 2.
Table 2 Password Reset Parameters
|
|
|
Enter the number of the administrator whose password you want to reset.
|
|
Enter the new password for the administrator.
|
|
Enter the password again.
|
|
|
The console displays:
Enter number of admin for password recovery:1
Save change&reeboot? [Y/N]:
Reimaging the ACS Server
To reimage the ACS server:
1. Power up the appliance.
2. Insert the ACS Recovery DVD.
The console displays:
Welcome to Cisco Secure ACS 5.8 Recovery
To boot from hard disk press <Enter>
[1] Cisco Secure ACS 5.8 Installation (Keyboard/Monitor)
[2] Cisco Secure ACS 5.8 Installation (Serial Console)
[3] Reset Administrator Password (Keyboard/Monitor)
[4] Reset Administrator Password (Serial Console)
<Enter> Boot from hard disk
Please enter boot option and press <Enter>.
3. At the console prompt, enter 1 if you are using a keyboard and video monitor, or enter 2 if you are using a serial console port, and press Enter.
The reimage process uninstalls the existing ADE-OS and ACS versions, and installs the latest versions. For the installation process, see the section Running the Setup Program.