Cannot login from ACS Admin -Cisco ACS 3.1

Sakirana Karabudak

unread,

Dec 13, 2009, 7:58:39 PM12/13/09

to

I have a CiscoSecure ACS 3.1 Server for Windows Running on a Windows
2000 Server.
Usually I login from icon ACS Admin, but last week I cannot login and
the error msg is

Invalid Administration Connection.
This machine cannot be used for administration.
Contact the System Administrator for access.

Can someone help me
Thanks

Morph

unread,

Dec 14, 2009, 12:40:01 PM12/14/09

to

In the message
<f5cedec3-4218-4d6c...@v15g2000prn.googlegroups.com>
Sakirana Karabudak wrote:

http://www.ciscopress.com/articles/article.asp?p=474238&seqNum=6
After successful installation of CS ACS, services are running. However,
when I try to bring up the GUI, I get this error: "Invalid
administration control." What should I do?

Answer: If you have proxy server configured on the browser, you will see
this message. To work around the problem, disable the proxy server
completely.

==========================================================

http://www.cisco.com/en/US/products/sw/secursw/ps2086/products_configuration_guide_chapter09186a00801fd7e2.html#wp892183
Tip By default, CiscoSecure ACS send the message "Invalid Administration
Connection" when you attempt to access it with an IP address not in a
permitted range. You can disable this message. To do so, select
Administration Control> Session Policy and deselect the Respond to
invalid IP address connections check box.
==========================================================

http://www.cisco.com/en/US/products/sw/secursw/ps2086/products_qanda_item09186a0080094bac.shtml#qa17
Q. When I try to bring up the GUI, I get an Invalid administration
control error. The installation is successful, and the services run.
What is the problem?

A. This problem is usually seen when the browser has a proxy server
configured. In order to fix this, disable the proxy server completely
and then bring up the ACS administration screen.

Sakirana Karabudak

unread,

Dec 14, 2009, 10:42:46 PM12/14/09

to

On Dec 15, 12:40 am, Morph <morph.n...@g.m.a.i.l> wrote:
> In the message
> <f5cedec3-4218-4d6c-be8f-3c80f0276...@v15g2000prn.googlegroups.com>

>
> Sakirana Karabudak wrote:
>
> | I have a CiscoSecure ACS 3.1 Server for Windows Running on a Windows
> | 2000 Server.
> | Usually I login from icon ACS Admin, but last week I cannot login and
> | the error msg is
> |
> | Invalid Administration Connection.
> | This machine cannot be used for administration.
> | Contact the System Administrator for access.
>
> http://www.ciscopress.com/articles/article.asp?p=474238&seqNum=6
> After successful installation of CS ACS, services are running. However,
> when I try to bring up the GUI, I get this error: "Invalid
> administration control." What should I do?
>
> Answer: If you have proxy server configured on the browser, you will see
> this message. To work around the problem, disable the proxy server
> completely.
>
> ==========================================================
>

> http://www.cisco.com/en/US/products/sw/secursw/ps2086/products_config...

> Tip By default, CiscoSecure ACS send the message "Invalid Administration
> Connection" when you attempt to access it with an IP address not in a
> permitted range. You can disable this message. To do so, select
> Administration Control> Session Policy and deselect the Respond to
> invalid IP address connections check box.
> ==========================================================
>

> http://www.cisco.com/en/US/products/sw/secursw/ps2086/products_qanda_...

> Q. When I try to bring up the GUI, I get an Invalid administration
> control error. The installation is successful, and the services run.
> What is the problem?
>
> A. This problem is usually seen when the browser has a proxy server
> configured. In order to fix this, disable the proxy server completely
> and then bring up the ACS administration screen.

Thank you Morph for the advice,
I tried to disable the proxy but still no luck and I cant change
Session Policy too, because I can not login at all.

Is it possible to change Session Policy from command line?

Thanks

Morph

unread,

Dec 15, 2009, 2:49:45 AM12/15/09

to

In the message
<83fd5c0f-92c5-46f4...@g4g2000pri.googlegroups.com>
Sakirana Karabudak wrote:

| Thank you Morph for the advice,
| I tried to disable the proxy but still no luck and I cant change
| Session Policy too, because I can not login at all.

What exactly has changed since you were able to login? Did you change ip
addresses?

Sakirana Karabudak

unread,

Dec 15, 2009, 8:51:59 AM12/15/09

to

On 15 Des, 14:49, Morph <morph.n...@g.m.a.i.l> wrote:
> In the message

> <83fd5c0f-92c5-46f4-8bf7-cc95aec03...@g4g2000pri.googlegroups.com>

I did not change anything.
Is there any log file for error like this?

Chino

unread,

Dec 16, 2009, 11:49:57 AM12/16/09

to

> Invalid Administration Connection.
> This machine cannot be used for administration.
> Contact the System Administrator for access.

It can be some browser settings related problem.
Try with another browser.