Cisco NAC-3310, Руководство по установке

Страница: 101 / 176

3-31
Cisco NAC Appliance Hardware Installation Guide
OL-20326-01
Chapter 3 Installing the Clean Access Manager and Clean Access Server
Installing the Clean Access Server
e.
Confirm your choices by entering
1
, or use
2
to cancel and start over.
The following information has been given:
United States
Pacific Time
Is the above information OK?
1) Yes
2) No
#? 1
Step 21 Type and confirm the current date and time, using format hh:mm:ss mm/dd/yy.
Updating timezone information...
Current date and time hh:mm:ss mm/dd/yy [07:52:52 04/30/07]: 15:52:00 04/30/07
You entered 15:52:00 04/30/07 Is this correct? (y/n)? [y]
Mon Apr 30 15:52:00 PDT 2007
Note
The time set on the CAS must fall within the creation date/expiry date range set on the CAM’s SSL
certificate. The time set on the user machine must fall within the creation date /expiry date range set on
the CAS’s SSL certificate.
Step 22 Press Enter to configure the temporary SSL certificate. The certificate secures the login exchange
between the Clean Access Server and untrusted (managed) clients. Configure the certificate as follows:
a.
Type the IP address or domain name for which you want the certificate to be issued.
Note
This is also the IP address or domain name to which the web server responds. If DNS is not
already set up for a domain name, the CAS web console will not load. Make sure to create
a DNS entry in your servers, or else use an IP address for the CAS.
b.
For the organization unit name, enter the group within your organization that is responsible for the
certificate (for example,
doc
).
c.
For the organization name, type the name of your organization or company for which you would
like to receive the certificate (for example,
Cisco Systems
), and press Enter.
d.
Type the name of the city or county in which your organization is legally located (for example,
San
Jose
), and press Enter.
e.
Type the two-character state code in which the organization is located (for example,
CA
or
NY
), and
press Enter.
f.
Type the two-letter country code (for example,
US
), and press Enter.
Step 23
Confirm values and press Enter to generate the SSL certificate, or type
n
to restart:
You entered the following:
Domain: 10.201.240.10
Organization unit: doc
Organization name: Cisco Systems
City name: San Jose
State code: CA
Country code: US
Is this correct? (y/n)? [y] y
Note
You must generate the temporary SSL certificate or you will not be able to access your CAS as an end
user.