Filter
Top Products
14-14
User Guide for Cisco Secure Access Control System 5.3
OL-24201-01
Chapter 14 Troubleshooting ACS with the Monitoring & Report Viewer
Working with Expert Troubleshooter
Step 10 Click Show Results Summary to view the diagnosis and resolution steps.
The Results Summary page appears with the information described in Table 14-6.
Related Topics
• Available Diagnostic and Troubleshooting Tools, page 14-1
• Connectivity Tests, page 14-1
• ACS Support Bundle, page 14-1
• Expert Troubleshooter, page 14-2
Comparing IP-SGT Pairs on a Device with ACS-Assigned SGT Records
For Security Group Access-enabled devices, ACS assigns each user an SGT value through RADIUS
authentication. The IP User SGT diagnostic tool connects to the network device whose IP address you
provide and does the following:
1. Obtains a list of all IP-SGT assignments on the network device.
2. Checks the RADIUS authentication and accounting records for each IP-SGT pair to find out the
IP-SGT-User value that ACS has assigned to it most recently.
3. Displays the IP-SGT pairs in a tabular format and identifies whether the SGT values most recently
assigned by ACS and those on the device are the same or different.
Use this diagnostic tool to compare the IP-SGT values on a device with ACS-assigned SGT. To do this:
Step 1 Choose Monitoring and Reports > Troubleshooting > Expert Troubleshooter.
Step 2 Click IP User SGT from the list of troubleshooting tools.
The Expert Troubleshooter page refreshes and lists the fields described in Table 14-10.
Step 3 Click Run.
The Progress Details page appears. The Monitoring & Report Viewer prompts you for additional input.
Step 4 Click the User Input Required button and modify the fields as described in Table 14-5.
Step 5 Click Submit.
The Progress Details page appears with a brief summary of the results.
Table 14-10 IP User SGT
Option Description
Enter Information
Network Device IP Enter the IP address of the network device.
Filter Results
Username Enter the username of the user whose records you want to troubleshoot.
User IP Address Enter the IP address of the user whose records you want to troubleshoot.
SGT Enter the user SGT value.