Cisco NAC-3310, Руководство по установке

Страница: 100 / 176

3-30
Cisco NAC Appliance Hardware Installation Guide
OL-20326-01
Chapter 3 Installing the Clean Access Manager and Clean Access Server
Installing the Clean Access Server
Figure 3-10 Eth1 Egress Packets with Management VLAN ID Tagging
Step 17
Specify the host name for the Clean Access Server (
nacserver
is the default). Type and confirm the
address when prompted:
Please enter the hostname [nacserver]: cas1
You entered cas1 Is this correct? (y/n)? [y]
Step 18
Specify the IP address of the Domain Name System (DNS) server in your environment. Type and
confirm the address when prompted:
Please enter the IP address for the name server: []: 172.10.16.16
You entered 172.10.16.16 Is this correct? (y/n)? [y]
Step 19
The Clean Access Managers and Clean Access Servers use a local master secret password to encrypt and
protect important data, like other system passwords. Cisco recommends keeping very accurate records
of assigned master secret passwords to ensure that you are able to restore database snapshots on the
CAM when you need them and are able to fail over to the HA peer CAM/CAS in HA deployments. (You
cannot upload a CAM database snapshot that was created when the system was configured with a
different master secret password, and HA-Secondary CAMs/CASs are not able to assume the “active”
role following a failover event when the master secret passwords are different.) Type and confirm the
master secret at the prompts.
The master secret is used to encrypt sensitive data.
Remember to configure all HA pairs with the same secret.
Please enter the master secret:
Please confirm the master secret:
Caution
If your master secret is lost or becomes corrupted, use the procedure in Recover From Corrupted Master
Secret, page 3-48 .
Step 20
Specify time settings for the Clean Access Server as follows:
a.
Choose your region from the continents and oceans list. Type the number next to your location on
the list, such as
2
for the Americas, and press Enter. Type
11
to enter the time zone in Posix TZ
format, such as
GST-10
.
b.
The next list that appears shows the countries for the region you chose. Choose your country from
the country list, such as
47
for the United States, and press Enter.
c.
If the country contains more than one time zone, the time zones for the country appears.
d.
Choose the appropriate time zone region from the list, such as
21
for Pacific Time, and press Enter.
et
h
0
eth
1
Trusted network Untrusted network
Clean Access
Server
Mgmt
ID
Mgmt
ID
184096
packet