Re: ACS: Submit vs Submit & Restart

From: Nick Garner (nwgarner@gmail.com)
Date: Tue Nov 21 2006 - 15:44:21 ART


Tim,
Usually, if the submit&restart option is available it is required for the
changes you have made to take effect. Usually meaning always... I have
never hit submit when submit&restart is available and not seen this message:

The current configuration has been changed. Restart ACS in "System
Configuration:Service Control" to adopt the new settings.

As for your other question, regarding multiple servers. I've always used
the single-connection option when defining a tacacs-server on the IOS
device.

from cisco.com :
Use the *single-connection* keyword to specify single-connection (only valid
with CiscoSecure Release 1.0.1 or later). Rather than have the router open
and close a TCP connection to the daemon each time it must communicate, the
single-connection option maintains a single open connection between the
router and the daemon. This is more efficient because it allows the daemon
to handle a higher number of TACACS operations.

I haven't tested multiple servers without it. I probably should though...
I'll have to check but I believe if a device is able to reach an ACS server
it will continue to use that server for subsequent requests. It isn't a
load balancing type of situation where it will use the first one server
listed then use the next server when it needs to make another request.

Nick

On 11/21/06, Tim <ccie2be@nyc.rr.com> wrote:
>
> Hi guys,
>
>
>
> In ACS, after entering data, it's sometimes necessary to click, Submit &
> Restart but sometimes, it's not. Why is that?
>
>
>
> When the Submit & Restart button is clicked, what's actually Restarting?
>
>
>
> Thanks, Tim



This archive was generated by hypermail 2.1.4 : Fri Dec 01 2006 - 08:05:48 ART