Logging In and Using the Migration Tool
After you have started the migration tool, log into the Cisco Secure ACS 5.1/5.2 system from which you will be exporting data. To start using the migration tool, complete the following steps:
Step 1 In the Cisco Secure ACS 5.1/5.2-Cisco ISE 1.0 migration tool main window, click Settings to display the list of data objects you want to migrate.
Step 2 Click to select the check box(es) for those data objects you want to export in case their dependency data is missed, and click Save.
Step 3 In the main window of the Cisco Secure ACS 5.1/5.2-Cisco ISE 1.0 migration tool, click Migration and click Export from ACS.
The Login window for the Cisco Secure ACS 5.1/5.2 system is displayed.
Step 4 Enter the IP address (or host name) and the password for the Cisco Secure ACS 5.1/5.2 system into the ACS Credentials window, and click Connect.
The data migration process begins.
Step 5 Check the progress of the migration of Cisco Secure ACS 5.1/5.2 data by viewing the main window of the Cisco Secure ACS 5.1/5.2-Cisco ISE 1.0 migration tool.
The main window of the Cisco Secure ACS 5.1/5.2-Cisco ISE 1.0 migration tool displays the current count of successful objects exports, and also lists any objects that triggered warnings or errors.
Step 6 To get more information about a warning or error that occurred during the export process, click any listed Warnings or Errors in the table. The following example shows the result returned result from choosing an error to display.
The Object Errors and Warnings Details window is displayed, which provides the object group, the type, and a date and time that this error occurred.
Step 7 Scroll to the right to display the complete set of details, and click Close to close this window.
When the data export process from the Cisco Secure ACS 5.1/5.2 system has completed (Exporting finished...), the main window of the Cisco Secure ACS 5.1/5.2-Cisco ISE 1.0 migration tool displays this status.
Step 8 Click Export Report(s) to view the contents of the report, which summarizes the export operation as shown in the following example.
Each export report contains header information with the operation type, date and time, and system IP address or host name. Each object group details the types and related information for the objects in that group. Each report ends with an report that summarizes the start and end date and time, and the duration of the operation.
Step 9 To start importing this data into the Cisco ISE appliance, click Import to ISE in the main window of the Cisco Secure ACS 5.1/5.2-Cisco ISE 1.0 migration tool.
You are prompted to add attributes to the LDAP identity stores before they are imported into Cisco ISE 1.0.
Step 10 Click OK to start the attribute add process for your LDAP identity stores.
Step 11 In the LDAP Identity Store pull-down list, select the identity store to which you want to add attributes.
Step 12 Enter a name in the Attribute Name field, select an attribute type from the Attribute Type pull-down list, enter a value in the Default Value field, and click Save & Exit.
Step 13 After you have completed the attribute addition, click Import to ISE to proceed with the importing process, and log into the Cisco ISE system using the ISE Credentials window.
Step 14 Enter the ISE IP address (or hostname), ISE Username, and ISE Password as required, and click Connect to start importing data into the Cisco ISE appliance.
Step 15 At any point in the import or export process, click View Log Console to display a real-time look at the current status of the import or export operation.
Step 16 To get more information about any warning or error that occurred during the import process, click Warnings or Errors in the table where it is listed (see step 6), and view any details.
When the data import operation is complete, this status is displayed in the main window of the Cisco Secure ACS 5.1/5.2-Cisco ISE 1.0 migration tool.
Step 17 To view the complete report on the data imported into the Cisco ISE 1.0 appliance, click Import Report(s). The report is displayed.
Step 18 To verify that the import process has completed, log into the Cisco ISE 1.0 appliance:
-
Enter a valid Username and Password.
-
Click Login.
Step 19 In the Cisco ISE main window for example, navigate to Administration > Network Resources > Network Devices to display the Network Devices window to verify if any ACS-based devices were imported.
You can perform the same sort of verification for users or policies to check whether the import was successful.
This concludes the import/export operations using the Cisco Secure ACS 5.1/5.2-Cisco ISE 1.0 migration tool.