Cisco Cisco Access Registrar 4.2 Manuel de l'opérateur

Americas Headquarters

Cisco Systems, Inc.

170 West Tasman Drive

San Jose, CA 95134-1706

USA

http://www.cisco.com

Tel: 408 526-4000

800 553-NETS (6387)

Fax: 408 527-0883

Installing and Configuring Cisco Access

Registrar, 4.2

November 2008

Text Part Number: OL-17221-02

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL

STATEMENTS, INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT

WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.

THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT

SHIPPED WITH THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE

OR LIMITED WARRANTY, CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.

The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB’s public

NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS” WITH

ALL FAULTS. CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT

LIMITATION, THOSE OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF

DEALING, USAGE, OR TRADE PRACTICE.

IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING,

WITHOUT LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO

OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

CCDE, CCENT, Cisco Eos, Cisco HealthPresence, the Cisco logo, Cisco Lumin, Cisco Nexus, Cisco StadiumVision, Cisco TelePresence, Cisco WebEx, DCE, and Welcome

to the Human Network are trademarks; Changing the Way We Work, Live, Play, and Learn and Cisco Store are service marks; and Access Registrar, Aironet, AsyncOS,

Bringing the Meeting To You, Catalyst, CCDA, CCDP, CCIE, CCIP, CCNA, CCNP, CCSP, CCVP, Cisco, the Cisco Certified Internetwork Expert logo, Cisco IOS,

Cisco Press, Cisco Systems, Cisco Systems Capital, the Cisco Systems logo, Cisco Unity, Collaboration Without Limitation, EtherFast, EtherSwitch, Event Center, Fast Step,

Follow Me Browsing, FormShare, GigaDrive, HomeLink, Internet Quotient, IOS, iPhone, iQuick Study, IronPort, the IronPort logo, LightStream, Linksys, MediaTone,

MeetingPlace, MeetingPlace Chime Sound, MGX, Networkers, Networking Academy, Network Registrar, PCNow, PIX, PowerPanels, ProConnect, ScriptShare, SenderBase,

SMARTnet, Spectrum Expert, StackWise, The Fastest Way to Increase Your Internet Quotient, TransPath, WebEx, and the WebEx logo are registered trademarks of

Cisco Systems, Inc. and/or its affiliates in the United States and certain other countries.

All other trademarks mentioned in this document or website are the property of their respective owners. The use of the word partner does not imply a partnership relationship

between Cisco and any other company. (0812R)

Installing and Configuring Cisco Access Registrar, 4.2

iii

Installing and Configuring Cisco Access Registrar, 4.2

OL-17221-02

CONTENTS

About This Guide ix

Obtaining Documentation ix

Cisco.com ix

Documentation Feedback x

Cisco Product Security Overview x

Reporting Security Problems in Cisco Products x

Obtaining Technical Assistance xi

Cisco Technical Support & Documentation Website xi

Submitting a Service Request xii

Definitions of Service Request Severity xii

Obtaining Additional Publications and Information xiii

CHAPTER

1Overview 1-1

Installation Dialog Overview 1-1

Installation Type 1-1

Installation Location 1-2

License File Location 1-2

Java 2 Runtime Environment 1-2

Open Database Connectivity 1-2

Example Configuration 1-3

Base Directory 1-3

setuid and setgid Permissions 1-3

Continue with Installation 1-3

Downloading Cisco Access Registrar Software 1-3

Cisco Access Registrar 4.2 Licensing 1-4

License Slabs 1-5

Getting Cisco Access Registrar 4.2 License 1-5

Installing Cisco Access Registrar 4.2 Licenses 1-6

Adding Additional Cisco Access Registrar 4.2 Licenses 1-6

Sample License File 1-6

Displaying License Information 1-7

aregcmd Command-Line Option 1-7

Launching aregcmd 1-7

Contents

Installing and Configuring Cisco Access Registrar, 4.2

OL-17221-02

CHAPTER

2Installing Cisco Access Registrar 4.2 2-1

Installing the Cisco Access Registrar 4.2 License File 2-1

Installing Cisco Access Registrar 4.2 Software on Solaris 2-1

Deciding Where to Install 2-2

Installing Cisco Access Registrar Software from CD-ROM 2-2

Installing Downloaded Software 2-2

Common Solaris Installation Steps 2-3

Configuring SNMP 2-6

RPC Bind Services 2-6

Installing Cisco Access Registrar on LDoms 2-6

Installing Cisco Access Registrar 4.2 Software on Linux 2-6

Deciding Where to Install 2-7

Installing Cisco Access Registrar Software from CD-ROM 2-7

Common Linux Installation Steps 2-7

Configuring SNMP 2-9

CHAPTER

3Upgrading Cisco Access Registrar Software 3-1

Solaris Software Upgrade Overview 3-1

Linux Software Upgrade Overview 3-2

Software Upgrade Tasks 3-3

Disabling Replication 3-3

Using pkgrm to Remove Cisco Access Registrar Solaris Software 3-4

Removing the AICar1 Package 3-4

Removing the CSCOar Package 3-5

Using uninstall-ar to Remove Linux Software 3-6

Installing the Cisco Access Registrar License File 3-7

Upgrading Cisco Access Registrar Solaris Software 3-7

Deciding Where to Install 3-7

Installing Cisco Access Registrar Software from CD-ROM 3-8

Installing Downloaded Software 3-8

Common Solaris Installation Steps 3-8

Configuring SNMP 3-11

Back-up Copy of Original Configuration 3-11

Removing Old VSA Names 3-12

VSA Update Script 3-12

Upgrading Cisco Access Registrar Linux Software 3-13

Using uninstall-ar to Remove Linux Software 3-13

Deciding Where to Install 3-14

Contents

Installing and Configuring Cisco Access Registrar, 4.2

OL-17221-02

Installing Cisco Access Registrar Software from CD-ROM 3-14

Common Linux Installation Steps 3-15

Backup Copy of Original Configuration 3-17

Removing Old VSA Names 3-18

VSA Update Script 3-18

Configuring SNMP 3-19

Restarting Replication 3-19

CHAPTER

4Configuring Cisco Access Registrar 4.2 4-1

Using aregcmd 4-1

General Command Syntax 4-1

aregcmd Commands 4-2

Configuring a Basic Site 4-2

Running aregcmd 4-2

Changing the Administrator’s Password 4-3

Creating Additional Administrators 4-4

Configuring the RADIUS Server 4-4

Checking the System-Level Defaults 4-5

Checking the Server’s Health 4-5

Selecting Ports to Use 4-5

Displaying the UserLists 4-6

Displaying the Default UserList 4-7

Adding Users to UserLists 4-7

Deleting Users 4-8

Displaying UserGroups 4-8

Configuring Clients 4-9

Adding a NAS 4-9

Configuring Profiles 4-10

Setting RADIUS Attributes 4-10

Adding Multiple Cisco AV Pairs 4-11

Validating and Using Your Changes 4-11

Saving and Reloading 4-11

Testing Your Configuration 4-12

Using radclient 4-12

Troubleshooting Your Configuration 4-13

Setting the Trace Level 4-13

Configuring Accounting 4-13

Configuring SNMP 4-14

Contents

Installing and Configuring Cisco Access Registrar, 4.2

OL-17221-02

Enabling SNMP in the Cisco Access Registrar Server 4-14

Stopping the Master Agent 4-14

Modifying the snmpd.conf File 4-14

Access Control 4-15

Trap Recipient 4-15

System Contact Information 4-16

Restarting the Master Agent 4-16

Configuring Dynamic DNS 4-16

Testing Dynamic DNS with radclient 4-18

CHAPTER

5Customizing Your Configuration 5-1

Configuring Groups 5-1

Configuring Specific Groups 5-1

Creating and Setting Group Membership 5-2

Configuring a Default Group 5-3

Using a Script to Determine Service 5-3

Configuring Multiple UserLists 5-4

Configuring Separate UserLists 5-5

Creating Separate UserLists 5-5

Configuring Users 5-5

Populating UserLists 5-5

Configuring Services 5-6

Creating Separate Services 5-6

Creating the Script 5-6

Client Scripting 5-7

Configuring the Script 5-7

Client Scripting 5-7

Choosing the Scripting Point 5-7

Handling Multiple Scripts 5-8

Configuring a Remote Server for AA 5-8

Configuring the Remote Server 5-9

Creating a RemoteServer 5-9

Configuring Services 5-10

Creating Services 5-11

Configuring the RADIUS Server 5-11

Changing the Authentication and Authorization Defaults 5-12

Configuring Multiple Remote Servers 5-12

Configuring Two Remote Servers 5-13

Creating RemoteServers 5-13

Contents

vii

Installing and Configuring Cisco Access Registrar, 4.2

OL-17221-02

Configuring Services 5-14

Creating the Services 5-14

Configuring the Script 5-15

Choosing the Scripting Point 5-15

Configuring Session Management 5-16

Configuring a Resource Manager 5-16

Creating a Resource Manager 5-16

Configuring a Session Manager 5-17

Creating a Session Manager 5-17

Enabling Session Management 5-18

Configuring Session Management 5-18

NDEX

Contents

viii

Installing and Configuring Cisco Access Registrar, 4.2

OL-17221-02

Installing and Configuring Cisco Access Registrar, 4.2

OL-17221-02

About This Guide

The Installing and Configuring Cisco Access Registrar, 4.2, provides information about installing,

configuring, and customizing CAR 4.2. This guide is intended to be used by experienced network

administrators with working knowledge of the Solaris UNIX operating system.

This guide contains the following chapters:

• Chapter 1, “Overview,” provides an overview of the installation process and dialog, information

about downloading Cisco Access Registrar 4.1 software, and information about Cisco AR licensing.

• Chapter 2, “Installing Cisco Access Registrar 4.2,” provides information about installing the CAR

using CD-ROM or downloaded software.

• Chapter 3, “Upgrading Cisco Access Registrar Software,” provides information to help you upgrade

your Cisco

• Chapter 4, “Configuring Cisco Access Registrar 4.2,” describes how to configure a site. Cisco

Access Registrar 4.1 is very flexible. You can choose to configure it in many different ways. In

addition, you can write scripts that can be invoked at different points during the processing of

incoming requests and/or outgoing responses.

• Chapter 5, “Customizing Your Configuration,” provides an introduction to many of the Cisco

Access Registrar 4.1 objects and their properties.

This guide also includes an index.

Obtaining Documentation

Cisco documentation and additional literature are available on Cisco.com. Cisco also provides several

ways to obtain technical assistance and other technical resources. These sections explain how to obtain

technical information from Cisco Systems.

Cisco.com

You can access the most current Cisco documentation at this URL:

http://www.cisco.com/techsupport

You can access the Cisco website at this URL:

http://www.cisco.com

Installing and Configuring Cisco Access Registrar, 4.2

OL-17221-02

About This Guide

You can access international Cisco websites at this URL:

http://www.cisco.com/public/countries_languages.shtml

Documentation Feedback

You can rate and provide feedback about Cisco technical documents by completing the online feedback

form that appears with the technical documents on Cisco.com.

You can submit comments about Cisco documentation by using the response card (if present) behind the

front cover of your document or by writing to the following address:

Cisco Systems

Attn: Customer Document Ordering

170 West Tasman Drive

San Jose, CA 95134-9883

We appreciate your comments.

Cisco Product Security Overview

Cisco provides a free online Security Vulnerability Policy portal at this URL:

http://www.cisco.com/en/US/products/products_security_vulnerability_policy.html

From this site, you will find information about how to:

• Report security vulnerabilities in Cisco products.

• Obtain assistance with security incidents that involve Cisco products.

• Register to receive security information from Cisco.

A current list of security advisories, security notices, and security responses for Cisco products is

available at this URL:

http://www.cisco.com/go/psirt

To see security advisories, security notices, and security responses as they are updated in real time, you

can subscribe to the Product Security Incident Response Team Really Simple Syndication (PSIRT RSS)

feed. Information about how to subscribe to the PSIRT RSS feed is found at this URL:

http://www.cisco.com/en/US/products/products_psirt_rss_feed.html

Reporting Security Problems in Cisco Products

Cisco is committed to delivering secure products. We test our products internally before we release them,

and we strive to correct all vulnerabilities quickly. If you think that you have identified a vulnerability

in a Cisco product, contact PSIRT:

• For Emergencies only— [email protected]

An emergency is either a condition in which a system is under active attack or a condition for which

a severe and urgent security vulnerability should be reported. All other conditions are considered

nonemergencies.

• For Nonemergencies— [email protected]

Autres manuels pour Cisco Access Registrar 4.2

Table des matières

Autres manuels Cisco Logiciel

Cisco

Cisco CVPN3002-8E-K9 - Fast Ethernet VPN Gateway Manuel utilisateur

Cisco

Cisco Digital Media Player Manuel utilisateur

Cisco

Cisco XO Manuel utilisateur

Cisco

Cisco TELEPRESENCE MANAGEMENT SUITE Manuel utilisateur

Cisco

Cisco SMART BUSINESS COMMUNICATIONS SYSTEM - FEATURE ... Manuel du propriétaire

Cisco

Cisco Nexus 7000 Series Mode d’emploi

Cisco

Cisco TELEPRESENCE MANAGEMENT SUITE EXTENSION 2.2 - FOR MICROSOFT... Manuel de service

Cisco

Cisco IPS-4240-K9 - Intrusion Protection Sys 4240 Manuel utilisateur

Cisco

Cisco CallManager Release 3.0(10 Manuel utilisateur

Cisco

Cisco OL-5490-01 Manuel utilisateur

Cisco

Cisco TELEPRESENCE MANAGEMENT SUITE EXTENSION 2.2 - FOR MICROSOFT... Manuel de service

Cisco

Cisco CISCOWORKS COMMON SERVICES 3.0 Manuel utilisateur

Cisco

Cisco TMS SQL DATABASE Manuel utilisateur

Cisco

Cisco PIX 520 - PIX Firewall 520 Manuel utilisateur

Cisco

Cisco TELEPRESENCE MOVI 4.1 - FOR MAC OS X Manuel utilisateur

Cisco

Cisco TELEPRESENCE MANAGEMENT SUITE EXTENSION 2.2 - FOR MICROSOFT... Manuel utilisateur

Cisco

Cisco TELEPRESENCE MANAGEMENT SUITE EXTENSION - FOR IBM LOTUS NOTES... Manuel utilisateur

Cisco

Cisco OL-11757-01 Mode d’emploi

Cisco

Cisco ONS 15327 Manuel utilisateur

Cisco

Cisco III - Supervisor Engine III Manuel utilisateur

Cisco

Cisco CONFERENCING EXTENSIONS - FOR MICROSOFT EXCHANGE... Manuel utilisateur

Cisco

Cisco 3600 Series Manuel utilisateur

Cisco

Cisco Unified Videoconferencing Manager Manuel utilisateur

Cisco

Cisco GEM318P Manuel utilisateur

Manuels Logiciel populaires d'autres marques

COMPRO

COMPRO COMPROFM Manuel utilisateur

Muratec

Muratec OFFICEBRIDGE ONLINE Manuel utilisateur

Oracle

Oracle Contact Center Anywhere 8.1 Manuel utilisateur

Adobe

Adobe 65007312 - Photoshop Lightroom Manuel

Avaya

Avaya NULL One-X for RIM Blackberry Manuel utilisateur

HP ProLiant BL420c Manuel utilisateur

PS Audio

PS Audio PowerPlay Manuel du propriétaire

Brady

Brady LOCKOUT PRO 3.0 Manuel de service

Avaya

Avaya Interaction Center Manuel utilisateur

Texas Instruments

Texas Instruments TI-83 Plus Silver Edition Manuel

Novell

Novell GROUPWISE 8 - INTERNET AGENT Manuel utilisateur

Oracle

Oracle Application 9i Manuel utilisateur

Acer

Acer RDM Manuel utilisateur

Canon

Canon Vixia HF21 Manuel utilisateur

Canon

Canon ZR950 Manuel utilisateur

Samsung

Samsung Auto Backup Manuel utilisateur

Polycom

Polycom Vortex EF2201 Instructions d'installation et d'utilisation

Brocade Communications Systems

Brocade Communications Systems Brocade 8/12c Manuel utilisateur