Cisco NAC-3310, Руководство по установке

Страница: 78 / 176

3-8
Cisco NAC Appliance Hardware Installation Guide
OL-20326-01
Chapter 3 Installing the Clean Access Manager and Clean Access Server
Installing the Clean Access Manager
You entered 10.201.240.11 Is this correct? (y/n)? [y]
At the prompt, enter
y
to accept the default address, or
n
to specify another IP address. In this case, type
the address you want to use for the trusted network interface in dotted-decimal format. Confirm the value
when prompted.
Step 7 Type the subnet mask for the interface address at the prompt or press enter for the default. Confirm the
value when prompted.
Please enter the netmask for the interface eth0 []: 255.255.255.0
You entered 255.255.255.0, is this correct? (y/n)? [y]
Step 8
Specify and confirm the address of the default gateway for the Clean Access Manager. This is typically
the IP address of the router between the Clean Access Manager subnet and the Clean Access Server
subnet.
Please enter the IP address for the default gateway []: 10.201.240.1
You entered 10.201.240.1. Is this correct? (y/n)? [y]
Step 9 Provide a host name for the Clean Access Manager. The host name will be matched with the interface
address in your DNS server, enabling it to be used to access the Clean Access Manager admin console
from a browser. The default host name is
nacmanager
.
Please enter the hostname [nacmanager]: cam3355
You entered cam3355 Is this correct? (y/n)? [y]
Step 10
Specify the IP address of the Domain Name System (DNS) server in your environment:
Please enter the IP addresses for the name servers: []: 63.93.96.94
You entered 63.93.96.94 Is this correct? (y/n)? [y]
Step 11 The Clean Access Managers and Clean Access Servers use a local master secret password to encrypt and
protect important data, like other system passwords. Cisco recommends keeping very accurate records
of assigned master secret passwords to ensure that you are able to restore database snapshots on the
CAM when you need them and are able to fail over to the HA peer CAM/CAS in HA deployments. (You
cannot upload a CAM database snapshot that was created when the system was configured with a
different master secret password, and HA-Secondary CAMs/CASs are not able to assume the “active”
role following a failover event when the master secret passwords are different.) Type and confirm the
master secret at the prompts.
The master secret is used to encrypt sensitive data.
Remember to configure all HA pairs with the same secret.
Please enter the master secret:
Please confirm the master secret:
Caution
If your master secret is lost or becomes corrupted, use the procedure in Recover From Corrupted Master
Secret, page 3-48 .
Step 12
Specify the time zone in which the Clean Access Manager is located as follows:
The timezone is currently not set on this system.
Please identify a location so that time zone rules can be set correctly.
Please select a continent or ocean.
a. Choose your region from the continents and oceans list. Type the number next to your location on
the list, such as
2
for the Americas, and press Enter. Type
11
to enter the time zone in Posix TZ
format, such as
GST-10
.
b.
The next list that appears shows the countries for the region you chose. Choose your country from
the country list, such as
47
for the United States, and press Enter.