Cisco NAC-3310, Руководство по установке

Страница: 54 / 176

2-12
Cisco NAC Appliance Hardware Installation Guide
OL-20326-01
Chapter 2 Preparing for Installation
Preparing Your Site for Installation
•
Clean Access Manager (CAM) Configuration Worksheet
• Clean Access Server (CAS) Configuration Worksheet
•
CAS Mode IP Addressing Considerations
Note
If planning to configure your appliances for high availability (HA), you first must perform initial
installation on each appliance, then configure HA via the CAM and/or CAS web console(s). You will
need to create a virtual Service IP for the HA-pair via web configuration.
Clean Access Manager (CAM) Configuration Worksheet
Clean Access Server (CAS) Configuration Worksheet
Table 2-2 CAM Configuration Utility Worksheet
For Clean Access Manager NAC Appliance
a.
IP address for eth0 interface (trusted)
1
:
1. eth0 and eth1 generally correlate to the first two network cards—NIC 1 and NIC 2—on the server hardware.
b.
Subnet mask (IP netmask) for eth0 interface:
c.
Default gateway IP address for eth0 interface:
d.
Host name for your CAM:
e.
IP address of Domain Name Server on your network:
f.
Master secret:
Note
The master secret must be the same for
CAMs/CASs deployed as HA peers.
g.
Date, time and timezone:
h.
To generate the required temporary SSL certificate
(you can change this at a later time):
FQDN or IP address of CAM:
Organization unit (e.g. Sales)
Organization name (e.g. Cisco)
Organization location (e.g. San Jose, CA, US)
Note
If using FQDN, make sure your DNS server is set
up for the domain name.
i.
Root user password:
j.
Web console password
2
:
2. Cisco highly recommends replacing default password(s) with “strong” passwords (at least 8 characters long, comprised of a
combination of two characters from each of the upper- and lower-case letters, numbers, and special characters categories)
Table 2-3 CAS Configuration Utility Worksheet
For Clean Access Server NAC Appliance
a.
IP address for eth0 interface (trusted)
1
:
b.
Subnet mask (IP netmask) for eth0 interface: