Cisco 3.3 - Manual (Page 340)

Chapter 9 System Configuration: Advanced
CiscoSecure Database Replication
9-12
User Guide for Cisco Secure ACS for Windows Server
78-16592-01
Note If you intend to use cascading replication to replicate network
configuration device tables, you must configure the primary
Cisco Secure ACS with all Cisco Secure ACSes that will receive
replicated database components, regardless of whether they receive
replication directly or indirectly from the primary Cisco Secure ACS.
For example, if the primary Cisco Secure ACS replicates to two
secondary Cisco Secure ACSes which, in turn, each replicate to two
more Cisco Secure ACSes, the primary Cisco Secure ACS must have
AAA server configurations for all six Cisco Secure ACSes that will
receive replicated database components.
• Distribution table—Replicate the Proxy Distribution Table in the Network
Configuration section.
• Interface configuration—Replicate Advanced Options settings, RADIUS
settings, and TACACS+ settings from the Interface Configuration section.
• Interface security settings—Replicate administrators and security
information for the Cisco Secure ACS HTML interface.
• Password validation settings—Replicate password validation settings.
• EAP-FAST master keys and policies—Replicate active and retired master
keys and policies for EAP-FAST.
• CNAC policies—Replicate NAC local policies, external policies, and
attribute definitions.
If mirroring the entire database might send confidential information to the
secondary Cisco Secure ACS, such as the Proxy Distribution Table, you can
configure the primary Cisco Secure ACS to send only a specific category of
database information.
Outbound Replication Options
In the Outbound Replication table on the CiscoSecure Database Replication page,
you can schedule outbound replication and you can specify the secondary
Cisco Secure ACSes for this primary Cisco Secure ACS.
• Scheduling Options—You can specify when CiscoSecure database
replication occurs. The options that control when replication occurs appear in
the Scheduling section of Outbound Replication table and are as follows: