Database replication creates mirror systems of Cisco Secure ACSes by
duplicating parts of the primary Cisco Secure ACS setup to one or more
secondary Cisco Secure ACSes. You can configure your AAA clients to use these
secondary Cisco Secure ACSes if the primary Cisco Secure ACS fails or is
unreachable. With a secondary Cisco Secure ACS whose CiscoSecure database is
a replica of the CiscoSecure database on the primary Cisco Secure ACS, if the
primary Cisco Secure ACS goes out of service, incoming requests are
authenticated without network downtime, provided that your AAA clients are
configured to failover to the secondary Cisco Secure ACS.

Database replication allows you to do the following:

•

Select the parts of the primary Cisco Secure ACS configuration to be
replicated.

•

Control the timing of the replication process, including creating schedules.

•

Export selected configuration items from the primary Cisco Secure ACS.

•

Securely transport selected configuration data from the primary Cisco Secure
ACS to one or more secondary Cisco Secure ACSes.

•

Update the secondary Cisco Secure ACSes to create matching configurations.

The following items cannot be replicated: