HP ProCurve NAC 800, Руководство пользователя

Страница: 394 / 591

Remote Device Activity Capture
Creating a DAC Host
12-14
b. Change any parameters necessary for your specific setup. The
interface and IP address parameters are the only parameters that
require a change; however, changing other parameters can assist you
for debugging purposes.
2. Perform the steps detailed in “Configuring the MS and ES for DAC” on
page 12-14.
3. Go to “Starting the Windows Service”.
Configuring the MS and ES for DAC
1. Create a keystore file containing a unique key, signed certificate, and a CA
certificate that is required for SSL communication.
a. On the NAC 800 MS, enter the following command at the command
line:
/usr/local/nac/bin/SSL-createRemoteDACCertificate
# Application parameters. Add parameters as needed starting from 1
wrapper.app.parameter.1=RemoteDac
wrapper.app.parameter.2=-d
wrapper.app.parameter.3=-l
wrapper.app.parameter.4=../log/DAC.log
wrapper.app.parameter.5=-k
wrapper.app.parameter.6=../lib/DAC_keystore
wrapper.app.parameter.7=-h
#replace wrapper.app.parameter.8 with the Enforcement Server IP address.
#for multiple Enforcement Servers add more parameters and increment the ones
below
#example:
#wrapper.app.parameter.8=<ip 1>
#wrapper.app.parameter.9=<ip 2>
#wrapper.app.parameter.10=<ip 2>
#wrapper.app.parameter.11=-i
#wrapper.app.parameter.12="\Device\NPF_{9F658297-43BF-4EA0-A1E3-3FA2FFD55C70}"
#wrapper.app.parameter.13=-f
#etc...
wrapper.app.parameter.8=172.17.100.100
wrapper.app.parameter.9=-i
#replace wrapper.app.parameter.10 with your interface
#to find your interfaces please run the following from the lib directory
#java -jar SA_DeviceActivityCapturer.jar -L
#this will list all available interfaces replace the following parameter with
your interface
wrapper.app.parameter.10="\Device\NPF_{54052575-E4CC-46A5-B626-9167DD4F9BE3}"
wrapper.app.parameter.11=-f
wrapper.app.parameter.12="udp src port 67"
Figure 12-11. Example wrapper.conf File