Acs Configuration Commands - Cisco CSACS-1121-K9 Reference Manual

Chapter 1 Overview of the ACS Command Line Interface
Table 1-4
Command
access-setting
accept-all
debug-adclient
debug-log
decrypt-support-b
undle
export-data
import-data
import-export-ab
ort
import-export-sta
tus
no
debug-adclient
no debug-log
replication
force-sync
reset-manageme
nt-interface-certif
icate
OL-18996-01
Summary of ACS Configuration Commands
Description
Resets IP address filtering to allow all IP
addresses to access the management pages
of an ACS server.
Enables debug logging of an Active
Directory client.
Defines the local debug logging level for
the ACS components.
Decrypts an ACS support bundle that was
generated using the acs support
command.
Exports configuration data from an ACS
local store to a remote repository.
Imports configuration data from a remote
repository to an ACS local store.
Aborts specific (or all) import and export
processes.
Displays the status of the import and
export processes.
Disables debug logging of an Active
Directory client.
Restores the default local debug logging
level of the ACS components.
Synchronizes configuration information
between the primary and secondary ACS.
Resets the management interface
certificate to the default self-signed
certificate.
CLI Reference Guide for the Cisco Secure Access Control System 5.1
Types of Command Modes in ACS
Required User Role
Only the super admin can issue this
command on a primary ACS node.
Only the network-device admin can
issue this command.
Any user, irrespective of role, can issue
this command.
Only the super admin can issue this
command.
Only users who have Read permission
to a specific configuration object in the
GUI can export that particular
configuration data to a remote
repository.
Only users who have Create, Read,
Update, and Delete (CRUD)
permissions to a specific configuration
object in the GUI can import that
particular configuration data to an ACS
local store.
Only the super admin can
simultaneously abort a running process
and all pending import and export
processes. However, a user who owns a
particular import or export process can
abort that particular process by using the
process ID, or by stopping the process
when it is in progress.
Any user, irrespective of role, can issue
this command.
Only the network-device admin can
issue this command.
Any user, irrespective of role, can issue
this command.
Only the super admin or system admin
can issue this command on a secondary
ACS node.
Only the super admin or system admin
can issue this command.
1-9