Cisco Cisco Access Registrar 4.2 Manual del operador

Americas Headquarters

Cisco Systems, Inc.

170 West Tasman Drive

San Jose, CA 95134-1706

USA

http://www.cisco.com

Tel: 408 526-4000

800 553-NETS (6387)

Fax: 408 527-0883

Installing and Configuring Cisco Access

Registrar, 4.2

November 2008

Text Part Number: OL-17221-02

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL

STATEMENTS, INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT

WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.

THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT

SHIPPED WITH THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE

OR LIMITED WARRANTY, CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.

The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB’s public

NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS” WITH

ALL FAULTS. CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT

LIMITATION, THOSE OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF

DEALING, USAGE, OR TRADE PRACTICE.

IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING,

WITHOUT LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO

OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

CCDE, CCENT, Cisco Eos, Cisco HealthPresence, the Cisco logo, Cisco Lumin, Cisco Nexus, Cisco StadiumVision, Cisco TelePresence, Cisco WebEx, DCE, and Welcome

to the Human Network are trademarks; Changing the Way We Work, Live, Play, and Learn and Cisco Store are service marks; and Access Registrar, Aironet, AsyncOS,

Bringing the Meeting To You, Catalyst, CCDA, CCDP, CCIE, CCIP, CCNA, CCNP, CCSP, CCVP, Cisco, the Cisco Certified Internetwork Expert logo, Cisco IOS,

Cisco Press, Cisco Systems, Cisco Systems Capital, the Cisco Systems logo, Cisco Unity, Collaboration Without Limitation, EtherFast, EtherSwitch, Event Center, Fast Step,

Follow Me Browsing, FormShare, GigaDrive, HomeLink, Internet Quotient, IOS, iPhone, iQuick Study, IronPort, the IronPort logo, LightStream, Linksys, MediaTone,

MeetingPlace, MeetingPlace Chime Sound, MGX, Networkers, Networking Academy, Network Registrar, PCNow, PIX, PowerPanels, ProConnect, ScriptShare, SenderBase,

SMARTnet, Spectrum Expert, StackWise, The Fastest Way to Increase Your Internet Quotient, TransPath, WebEx, and the WebEx logo are registered trademarks of

Cisco Systems, Inc. and/or its affiliates in the United States and certain other countries.

All other trademarks mentioned in this document or website are the property of their respective owners. The use of the word partner does not imply a partnership relationship

between Cisco and any other company. (0812R)

Installing and Configuring Cisco Access Registrar, 4.2

iii

Installing and Configuring Cisco Access Registrar, 4.2

OL-17221-02

CONTENTS

About This Guide ix

Obtaining Documentation ix

Cisco.com ix

Documentation Feedback x

Cisco Product Security Overview x

Reporting Security Problems in Cisco Products x

Obtaining Technical Assistance xi

Cisco Technical Support & Documentation Website xi

Submitting a Service Request xii

Definitions of Service Request Severity xii

Obtaining Additional Publications and Information xiii

CHAPTER

1Overview 1-1

Installation Dialog Overview 1-1

Installation Type 1-1

Installation Location 1-2

License File Location 1-2

Java 2 Runtime Environment 1-2

Open Database Connectivity 1-2

Example Configuration 1-3

Base Directory 1-3

setuid and setgid Permissions 1-3

Continue with Installation 1-3

Downloading Cisco Access Registrar Software 1-3

Cisco Access Registrar 4.2 Licensing 1-4

License Slabs 1-5

Getting Cisco Access Registrar 4.2 License 1-5

Installing Cisco Access Registrar 4.2 Licenses 1-6

Adding Additional Cisco Access Registrar 4.2 Licenses 1-6

Sample License File 1-6

Displaying License Information 1-7

aregcmd Command-Line Option 1-7

Launching aregcmd 1-7

Contents

Installing and Configuring Cisco Access Registrar, 4.2

OL-17221-02

CHAPTER

2Installing Cisco Access Registrar 4.2 2-1

Installing the Cisco Access Registrar 4.2 License File 2-1

Installing Cisco Access Registrar 4.2 Software on Solaris 2-1

Deciding Where to Install 2-2

Installing Cisco Access Registrar Software from CD-ROM 2-2

Installing Downloaded Software 2-2

Common Solaris Installation Steps 2-3

Configuring SNMP 2-6

RPC Bind Services 2-6

Installing Cisco Access Registrar on LDoms 2-6

Installing Cisco Access Registrar 4.2 Software on Linux 2-6

Deciding Where to Install 2-7

Installing Cisco Access Registrar Software from CD-ROM 2-7

Common Linux Installation Steps 2-7

Configuring SNMP 2-9

CHAPTER

3Upgrading Cisco Access Registrar Software 3-1

Solaris Software Upgrade Overview 3-1

Linux Software Upgrade Overview 3-2

Software Upgrade Tasks 3-3

Disabling Replication 3-3

Using pkgrm to Remove Cisco Access Registrar Solaris Software 3-4

Removing the AICar1 Package 3-4

Removing the CSCOar Package 3-5

Using uninstall-ar to Remove Linux Software 3-6

Installing the Cisco Access Registrar License File 3-7

Upgrading Cisco Access Registrar Solaris Software 3-7

Deciding Where to Install 3-7

Installing Cisco Access Registrar Software from CD-ROM 3-8

Installing Downloaded Software 3-8

Common Solaris Installation Steps 3-8

Configuring SNMP 3-11

Back-up Copy of Original Configuration 3-11

Removing Old VSA Names 3-12

VSA Update Script 3-12

Upgrading Cisco Access Registrar Linux Software 3-13

Using uninstall-ar to Remove Linux Software 3-13

Deciding Where to Install 3-14

Contents

Installing and Configuring Cisco Access Registrar, 4.2

OL-17221-02

Installing Cisco Access Registrar Software from CD-ROM 3-14

Common Linux Installation Steps 3-15

Backup Copy of Original Configuration 3-17

Removing Old VSA Names 3-18

VSA Update Script 3-18

Configuring SNMP 3-19

Restarting Replication 3-19

CHAPTER

4Configuring Cisco Access Registrar 4.2 4-1

Using aregcmd 4-1

General Command Syntax 4-1

aregcmd Commands 4-2

Configuring a Basic Site 4-2

Running aregcmd 4-2

Changing the Administrator’s Password 4-3

Creating Additional Administrators 4-4

Configuring the RADIUS Server 4-4

Checking the System-Level Defaults 4-5

Checking the Server’s Health 4-5

Selecting Ports to Use 4-5

Displaying the UserLists 4-6

Displaying the Default UserList 4-7

Adding Users to UserLists 4-7

Deleting Users 4-8

Displaying UserGroups 4-8

Configuring Clients 4-9

Adding a NAS 4-9

Configuring Profiles 4-10

Setting RADIUS Attributes 4-10

Adding Multiple Cisco AV Pairs 4-11

Validating and Using Your Changes 4-11

Saving and Reloading 4-11

Testing Your Configuration 4-12

Using radclient 4-12

Troubleshooting Your Configuration 4-13

Setting the Trace Level 4-13

Configuring Accounting 4-13

Configuring SNMP 4-14

Contents

Installing and Configuring Cisco Access Registrar, 4.2

OL-17221-02

Enabling SNMP in the Cisco Access Registrar Server 4-14

Stopping the Master Agent 4-14

Modifying the snmpd.conf File 4-14

Access Control 4-15

Trap Recipient 4-15

System Contact Information 4-16

Restarting the Master Agent 4-16

Configuring Dynamic DNS 4-16

Testing Dynamic DNS with radclient 4-18

CHAPTER

5Customizing Your Configuration 5-1

Configuring Groups 5-1

Configuring Specific Groups 5-1

Creating and Setting Group Membership 5-2

Configuring a Default Group 5-3

Using a Script to Determine Service 5-3

Configuring Multiple UserLists 5-4

Configuring Separate UserLists 5-5

Creating Separate UserLists 5-5

Configuring Users 5-5

Populating UserLists 5-5

Configuring Services 5-6

Creating Separate Services 5-6

Creating the Script 5-6

Client Scripting 5-7

Configuring the Script 5-7

Client Scripting 5-7

Choosing the Scripting Point 5-7

Handling Multiple Scripts 5-8

Configuring a Remote Server for AA 5-8

Configuring the Remote Server 5-9

Creating a RemoteServer 5-9

Configuring Services 5-10

Creating Services 5-11

Configuring the RADIUS Server 5-11

Changing the Authentication and Authorization Defaults 5-12

Configuring Multiple Remote Servers 5-12

Configuring Two Remote Servers 5-13

Creating RemoteServers 5-13

Contents

vii

Installing and Configuring Cisco Access Registrar, 4.2

OL-17221-02

Configuring Services 5-14

Creating the Services 5-14

Configuring the Script 5-15

Choosing the Scripting Point 5-15

Configuring Session Management 5-16

Configuring a Resource Manager 5-16

Creating a Resource Manager 5-16

Configuring a Session Manager 5-17

Creating a Session Manager 5-17

Enabling Session Management 5-18

Configuring Session Management 5-18

NDEX

Contents

viii

Installing and Configuring Cisco Access Registrar, 4.2

OL-17221-02

Installing and Configuring Cisco Access Registrar, 4.2

OL-17221-02

About This Guide

The Installing and Configuring Cisco Access Registrar, 4.2, provides information about installing,

configuring, and customizing CAR 4.2. This guide is intended to be used by experienced network

administrators with working knowledge of the Solaris UNIX operating system.

This guide contains the following chapters:

• Chapter 1, “Overview,” provides an overview of the installation process and dialog, information

about downloading Cisco Access Registrar 4.1 software, and information about Cisco AR licensing.

• Chapter 2, “Installing Cisco Access Registrar 4.2,” provides information about installing the CAR

using CD-ROM or downloaded software.

• Chapter 3, “Upgrading Cisco Access Registrar Software,” provides information to help you upgrade

your Cisco

• Chapter 4, “Configuring Cisco Access Registrar 4.2,” describes how to configure a site. Cisco

Access Registrar 4.1 is very flexible. You can choose to configure it in many different ways. In

addition, you can write scripts that can be invoked at different points during the processing of

incoming requests and/or outgoing responses.

• Chapter 5, “Customizing Your Configuration,” provides an introduction to many of the Cisco

Access Registrar 4.1 objects and their properties.

This guide also includes an index.

Obtaining Documentation

Cisco documentation and additional literature are available on Cisco.com. Cisco also provides several

ways to obtain technical assistance and other technical resources. These sections explain how to obtain

technical information from Cisco Systems.

Cisco.com

You can access the most current Cisco documentation at this URL:

http://www.cisco.com/techsupport

You can access the Cisco website at this URL:

http://www.cisco.com

Installing and Configuring Cisco Access Registrar, 4.2

OL-17221-02

About This Guide

You can access international Cisco websites at this URL:

http://www.cisco.com/public/countries_languages.shtml

Documentation Feedback

You can rate and provide feedback about Cisco technical documents by completing the online feedback

form that appears with the technical documents on Cisco.com.

You can submit comments about Cisco documentation by using the response card (if present) behind the

front cover of your document or by writing to the following address:

Cisco Systems

Attn: Customer Document Ordering

170 West Tasman Drive

San Jose, CA 95134-9883

We appreciate your comments.

Cisco Product Security Overview

Cisco provides a free online Security Vulnerability Policy portal at this URL:

http://www.cisco.com/en/US/products/products_security_vulnerability_policy.html

From this site, you will find information about how to:

• Report security vulnerabilities in Cisco products.

• Obtain assistance with security incidents that involve Cisco products.

• Register to receive security information from Cisco.

A current list of security advisories, security notices, and security responses for Cisco products is

available at this URL:

http://www.cisco.com/go/psirt

To see security advisories, security notices, and security responses as they are updated in real time, you

can subscribe to the Product Security Incident Response Team Really Simple Syndication (PSIRT RSS)

feed. Information about how to subscribe to the PSIRT RSS feed is found at this URL:

http://www.cisco.com/en/US/products/products_psirt_rss_feed.html

Reporting Security Problems in Cisco Products

Cisco is committed to delivering secure products. We test our products internally before we release them,

and we strive to correct all vulnerabilities quickly. If you think that you have identified a vulnerability

in a Cisco product, contact PSIRT:

• For Emergencies only— [email protected]

An emergency is either a condition in which a system is under active attack or a condition for which

a severe and urgent security vulnerability should be reported. All other conditions are considered

nonemergencies.

• For Nonemergencies— [email protected]

Otros manuales para Cisco Access Registrar 4.2

Tabla de contenidos

Otros manuales de Software de Cisco

Cisco

Cisco CCNA NETWORK SIMULATOR Manual de usuario

Cisco

Cisco TELEPRESENCE MANAGEMENT SUITE EXTENSION - INSTALLATION GUIDE FOR IBM LOTUS NOTES... Manual de usuario

Cisco

Cisco 2509 - Router - EN Manual de usuario

Cisco

Cisco Digital Media System 3.5 Manual de instrucciones

Cisco

Cisco Servers Manual de usuario

Cisco

Cisco 15454-TCC - Network Processor Card Manual de usuario

Cisco

Cisco 861W - Integrated Services Router Wireless Manual de usuario

Cisco

Cisco MCS 7825 Series Manual de usuario

Cisco

Cisco 15454-TCC - Network Processor Card Manual de usuario

Cisco

Cisco Voice Interworking Services (VISM) Manual del operador

Cisco

Cisco Craft Works Interface Manual de usuario

Cisco

Cisco PVDM2 24DM - Digital Modem Module Manual de usuario

Cisco

Cisco 5520 - ASA IPS Edition Bundle Manual de usuario

Cisco

Cisco MCS-7825-H3-IPC1 Manual de usuario

Cisco

Cisco TMS SERVER REDUNDANCY - CONFIGURATION GUIDE... Manual de usuario

Cisco

Cisco MeetingPlace Video Integration Manual de servicio

Cisco

Cisco CISCOWORKS COMMON SERVICES 3.0 Manual de usuario

Cisco

Cisco Router IOS XR Manual de usuario

Cisco

Cisco SMTP Manual de instrucciones

Cisco

Cisco TELEPRESENCE MOVI 4.1 - ADMINISTRATOR GUIDE... Manual de servicio

Cisco

Cisco Unified MeetingPlace H.323/SIP Manual de servicio

Cisco

Cisco Signaling Interface H.323 Manual de usuario

Cisco

Cisco IPICS Manual de usuario

Cisco

Cisco 6503-E - Catalyst Chassis With Supervisor Engine 32... Manual de instrucciones

Manuales populares de Software de otras marcas

COMPRO

COMPRO COMPROFM Manual de usuario

Muratec

Muratec OFFICEBRIDGE ONLINE Manual de usuario

Oracle

Oracle Contact Center Anywhere 8.1 Manual de usuario

Adobe

Adobe 65007312 - Photoshop Lightroom Manual

Avaya

Avaya NULL One-X for RIM Blackberry Manual de usuario

HP ProLiant BL420c Manual de usuario

PS Audio

PS Audio PowerPlay Manual del propietario

Brady

Brady LOCKOUT PRO 3.0 Manual de servicio

Avaya

Avaya Interaction Center Manual de usuario

Texas Instruments

Texas Instruments TI-83 Plus Silver Edition Manual

Novell

Novell GROUPWISE 8 - INTERNET AGENT Manual de usuario

Oracle

Oracle Application 9i Manual de usuario

Acer

Acer RDM Manual de usuario

Canon

Canon Vixia HF21 Manual de usuario

Canon

Canon ZR950 Manual de usuario

Samsung

Samsung Auto Backup Manual de usuario

Polycom

Polycom Vortex EF2201 Instrucciones de instalación y funcionamiento

Brocade Communications Systems

Brocade Communications Systems Brocade 8/12c Manual de usuario