ACS to ISE Migration

Video Tutorials

 

ACS to ISE Migration - Part I - Planning

ACS to ISE Migration - Part II - Preparation

ACS to ISE Migration - Part III - Migration Process and Demonstration ( Clickthrough video )

Demos

 

ACS to ISE Migration - brief Demonstration (with enhanced migration tool)

 

How To Document

 

How to Migrate ACS 5.x to ISE 2.x will give you step by step instructions to plan, design, prepare and migrate from ACS to ISE successfully.

 

Scoping

 

You can make use of the ACS to ISE - High Level design questionnaire to gather information from your customer environment to scope and design your ISE deployment.

 

Migration Paths

 

ISE 2.0 supports migration from ACS 5.5 and 5.6 only.

ISE 2.1+ supports migration from ACS 5.5 and later.

 

ACS version older than 4.x cannot migrate to ISE. You must first upgrade from ACS 4.x to either ACS 5.5 or ACS 5.6 before migrating to ISE 2.0. This is a multi-step process. We recommend a fresh install of ISE with manual configuration or using import/export tools.

 

If you are using ACS 4.x please see the link that provides you options for migration to ISE.

 

ACS versions less than 5.5 need to be upgraded to either ACS 5.5 or later before migrating to ISE.

ACS 4.x to ACS 5.x

 

For customers to migrate to ACS 5.5 or ACS 5.6, they need to be in one of the ACS 4.x versions

  • ACS 4.1.1.24
  • ACS 4.1.4
  • ACS 4.2.0.124
  • ACS 4.2.1

 

ACS 5.x has a significantly different architecture than ACS 4.x. The migration might not carry over a lot of configuration automatically. You might have to manually carry over configuration or use import/export tools. Here are the links that speaks about what objects are supported/not supported during migration.

ACS 4.x to ACS 5.5

ACS 4.x to ACS 5.6

 

Please look at the ACS 4.x to 5.x migration doc for more details on architecture and the choices for migration based on your configuration sets. Here is the ACS feature comparison document discussing parity across ACS 3.x/4.x and ACS 5.x releases.

ACS 5.x to ACS 5.5 / 5.6 / 5.7 / 5.8

 

If customers are in prior version of ACS 5.x, you have to upgrade to ACS 5.5 / 5.6 first before migrating to ISE 2.0. For migrating to ISE 2.1, your customer be in one of the last 4 releases of ACS( ACS 5.5/ 5.6/ 5.7 or 5.8).

 

If your customers interim goal is to upgrade to the latest ACS version based on the EOL then upgrade to the latest version of ACS 5.8.

 

Please follow the link for detailed procedure for migration.Here are the upgrade paths for the ACS 5.x versions. The ACS versions that supports migration to ISE are in Bold letters.

  • ACS 5.0 --> ACS 5.2 --> ACS 5.4 --> ACS 5.6 --> ACS 5.7 or ACS 5.8
  • ACS 5.1 --> ACS 5.3 --> ACS 5.5 --> ACS 5.6 or ACS 5.7 or ACS 5.8
  • ACS 5.2 --> ACS 5.4 --> ACS 5.6 --> ACS 5.7 or ACS 5.8
  • ACS 5.3 --> ACS 5.5 --> ACS 5.6 or ACS 5.7 or ACS 5.8
  • ACS 5.4 --> ACS 5.6 -->  ACS 5.7 or ACS 5.8

 

 

ACS vs ISE Comparison ( Why do you need to migrate to ISE?)

 

ACS vs ISE Comparison provides information on feature comparison/ deployment limits are being improved in ISE 2.1

 

 

ACS vs ISE Deployment Sizing

 

ISE 2.0 TACACS+ Deployment & Sizing Guidance provides TACACS+ deployment sizing and device admin model guideline

 

ACS End of Life

 

ACS VersionEnd of SaleEnd of LifeEnd of Support
(Including Vulnerability fix)

EoS
5.8Aug 30, 2017Aug 30, 2018Aug 31, 2020EoS/L
5.7May 2, 2016May 2, 2017May 31, 2019EoS/L
5.6Feb 16, 2016Feb 15, 2017February 28, 2019EoS/L
5.5April 15, 2015April 14, 2016April 30, 2018EoS/L
4.2October 27, 2011October 26, 2012October 31, 2014EoS/L
3.3August 29, 2006August 29, 2007August 28, 2009EoS/L

Cisco Secure Access Control System - End-of-Life and End-of-Sale Notices - Cisco

 

 

Migration Tool Guide

 

The Migration tool guide is a technical document that discusses the procedure of migrating from ACS to ISE.

It details the migration process and provides information on the objects, character sets supported and differences between ACS and ISE.