Novell ZENworks Network Access Control 5.0, Руководство пользователя

Страница: 319 / 534

DHCP Plug-in 319
no
vd
ocx
(e
n)
24
Ma
rch 20
09
3 Download and install the DHCP plug-in as described in Section 15.2.1, “Installing the Plug-
in,” on page 320 .
4
The DHCP Plug-in is configured using confg.xml that resides on the Windows 2003 Server in
c:\WINDOWS\SYSTEM32\DHCP\confg.xml. The following
Table 15-1 on page 319 shows
options used in confg.xml:
Table 15-1
DHCP Plug-in Configuration File Values
Group Item Description
listener
failopen failopen=“true” means that if the Novell ZENworks
Network Access Control DHCP connection goes down,
the DHCP server goes in to
allow all
mode.
failopen=“false” means that if the Novell ZENworks
Network Access Control DHCP connection goes down,
the DHCP server goes in to
deny all
mode.
port Specifies the port on which the Dynamic Link Library
(DLL) file should listen for Novell ZENworks Network
Access Control connections.
looprate The rate in seconds at which the DHCP server will check
for a broken connection.
certificates certfile A Privacy Enhanced Mail (PEM) formatted file containing
the server key and certificate along with any CA trusted
entities.
logging location The location to save the DLL’s log file. The log file is an
ASCII file.
level The level of verbosity in the log.
1 - Errors only (logs unexpected behavior, such as
unable
to parse configuration file
)
2 - Errors and warnings (logs mode changes, such as
No
Connection to Novell ZENworks Network Access Control
or
Entering allow all mode
)
3 - Errors, warnings, and information messages (logs
major processing steps, such as
clearing ACL
)
4 - Errors, warnings, information, and debug messages
maxsize The size in kB at which the log file should be rotated.
When the maximum size specified is exceeded the
current log file is closed and renamed as
<current file
name>
.
<integer> .
NOTE: If the current log file is open for reading, Windows
cannot rename the file. In that case, the DLL is unable to
rotate the log file, and attempts to re-open the current log
file and continue logging to it.