189 8069 5689
备份============================
acs/admin#acs backup acs repository acsre 常用
恢复，其过程会停用服务,初始化时间较长
acs restore *.gpg repository acsre
===============================================================
backup / restore 备份恢复所有内容，会停用服务，还原会重启服务器
acs-ms/admin# backup ftp repository ppp ----------------备份所有数据
% backup in progress: Starting Backup...10% completed
% Creating backup with timestamped filename: ftp-160415-0138.tar.gpg
Please enter backup encryption password [8-32 chars]:
Please enter the password again:
% backup in progress: Backing up ADEOS configuration...55% completed
Calculating disk size for /opt/backup/backup-ftp-1460684335
Total size of backup files are 16 M.
Max Size defined for backup files are 3880 M.
% backup in progress: Moving Backup file to the repository...75% completed
% backup in progress: Completing Backup...100% completed
acs-main/admin# debug transfer 7 **************排障常用
acs-main/admin# debug copy 7
acs-main/admin# acs backup adconfig repository ftp --------------------------备份应用数据
6 [7102]: transfer: cars_xfer.c[108] [admin]: ftp copy out of /opt/backup/backup-adconfig-160518-1708-1463562496/adconfig-160518-1708.tar.gpg requested
6 [7102]: transfer: cars_xfer_util.c[586] [admin]: curl version: libcurl/7.16.2 OpenSSL/0.9.7a zlib/1.2.1.2 libidn/0.5.6
7 [7102]: transfer: cars_xfer_util.c[598] [admin]: full url is ftp://192.168.159.1/adconfig-160518-1708.tar.gpg
ACS backup file 'adconfig-160518-1708.tar.gpg' successfully copied to repository 'ftp'
文件名自动加日间标记
acs backup xx rep ftp /注意用FTP备份超32M的数据，否则可能出现传输错误。
acs-ms/admin# show backup history 查看备份历史
acs-ms/admin# show restore history 查看还原历史
reload 重启ACS服务器
F12 进入引导菜单
mkdir disk:/backup
dir **************查看文件目录
show disks *****************类linux ----- ls -l
show application status acs ********************查看应用服务状态
ACS role: PRIMARY
正常情况下为running
Process 'database' running
Process 'management' running
Process 'runtime' running
Process 'ntpd' running
Process 'view-database' running
Process 'view-jobmanager' running
Process 'view-alertmanager' running
Process 'view-collector' running
Process 'view-logprocessor' running
补丁安装 patch=======================================================================
acs patch install 5-3-0-40-xx.tar.gpg repository repository-name
acs-sec/admin# acs patch install 5-3-0-40-xx.tar.gpg repository ftp
Installing ACS patch requires a restart of ACS services. Continue? (yes/no) yes
Stopping ACS.
Stopping Management and View...............................................................
Stopping Runtime......
Stopping Database....
Cleanup.....
Stopping log forwarding .....
Installing patch version '5.3.0.40.xx'
Installing ADE-OS 2.0 patch. Please wait...
About to install files
Removing old war
Removing old war
Removing old war
Removing old war
Removing old war
Removing old war
Removing old war
Removing old war
monit daemon with pid [4812] killed
.Starting monit daemon with http interface at [localhost:2812]
This patch includes security fixes which requires ACS server reboot. It is highly recommended to proceed with reboot
Do you want to reboot the server ? Y/N: y
You have choosen to reboot the server, Rebooting ...
Broadcast message from root (pts/0) (Thu May 19 16:40:37 2016):
The system is going down for reboot NOW!
/opt/CSCOacs/patches/5-3-0-40-xx
Patch '5-3-0-40-10' version '5.3.0.40.10' successfully installed
ACS is already running.
Upgrading an ACS Deployment from 5.3 to 5.5===========================
Note When you upgrade from ACS 5.3 to ACS 5.5 using the “Reimaging and Upgrading an ACS Server method,
you must install patch 8 or a subsequent patch before you start upgrading to ACS 5.5.
Note When you upgrade from ACS 5.3 to 5.5 using the "Upgrading an ACS server using the ApplicationUpgrade Bundle" method,
it is mandatory to install the following patches one by one in the order specified:
1 Install ACS 5.3 patch 8 (ACS 5.3.0.40.8) or a subsequent patch. You need to install patch 8 or a subsequent patch prior to the upgrade or the upgrade may fail.
2 Install the "Pointed-PreUpgrade-CSCum04132-5.3.0.40" patch over patch 8 or a subsequent patch before you start upgrading from ACS 5.3 version.
bugs: https://bst.cloudapps.cisco.com/bugsearch/bug/CSCum04132/?referring_site=bugquickviewredir
升级后可能出现的问题ssh不了，
建议操作在console操作升级，如果出现则打最新补丁，在console下操作，关闭sshd服务 这个方法不一定可行。
==========================================================================================
4.upgrade 注意文件名以.tar.gz结尾---！！
application upgrade ACS_5.3.tar.gz repository-name =====注意操作完不要按任何按键等待重启
ACS displays the following confirmation message:
Do you want to save the current configuration? (yes/no) [yes]?
Step 3 Enter yes .
When the ACS upgrade is complete, the following message appears:
% CARS Install application required post install reboot...
The system is going down for reboot NOW!
Application upgrade successful
from the Monitoring and Report Viewer, choose Monitoring Configuration > System Operations > Data Upgrade Status .
The Data Upgrade Status page appears, indicating the status of the Monitoring and Report Viewer data upgrade.
When the database upgrade completes, ACS displays the following message:
Upgrade completed successfully. 升级完后确认这个状态为升级成功！
查看日志
show logg app
acsLogForward.log
acsupgrade.log.1
show acs-log filename xxx 对应日志文件名，查看详细日志内容
show tech 升级前查看空间大小 /storeddata 这个空间是否够解压升级包
show version 查看版本信息
acs5.5以上，cli密码限制在8位或以上。
ACS 默认密码策略
password-policy
lower-case-required
upper-case-required
digit-required
no-username
disable-cisco-passwords
min-password-length 6 长度
password-lock-enabled 默认锁定10分钟
password-lock-retry-count 5 次数
acs-sec/admin# acs reset-config 5.3需要重置才能改序列号，5.5后可以不用重置
This command deletes the current ACS configuration
and resets the ACS configuration to factory defaults.
Cisco recommends that you perform a backup before you execute this command.
Are you sure you want to reset the configuration now? (yes/no) yes
Stopping ACS.
Stopping Management and View......................
Stopping Runtime..................
Stopping Database....
Stopping Ntpd...
Cleanup...
Resetting configuration to factory defaults.
Starting ACS ....
To verify that ACS processes are running, use the
'show application status acs' command.
Secure Access Control System (ACS 5.x and later) Troubleshooting
http://www.cisco.com/c/en/us/support/docs/security/secure-access-control-system/113485-acs5x-tshoot.html
ACS 5.2/5.3 backup & restore
http://www.cisco.com/c/en/us/support/docs/security/secure-access-control-system/113639-ptn-113639.html
5.3 to 5.5 Manifest file not found in the bundle问题解决方案
http://www.cisco.com/c/en/us/support/docs/security/secure-access-control-system/200333-Troubleshoot-Manifest-file-not-found-Err.html#anc6
补丁包下载
https://software.cisco.com/download/release.html?mdfid=283883841&release=5.3.0.40&softwareid=282766937
链接官方网站全有。
另外有需要云服务器可以了解下创新互联scvps.cn，海内外云服务器15元起步，三天无理由+7*72小时售后在线，公司持有idc许可证，提供“云服务器、裸金属服务器、高防服务器、香港服务器、美国服务器、虚拟主机、免备案服务器”等云主机租用服务以及企业上云的综合解决方案，具有“安全稳定、简单易用、服务可用性高、性价比高”等特点与优势，专为企业上云打造定制，能够满足用户丰富、多元化的应用场景需求。