1. Manuals
  2. Brands
  3. Extreme Networks Manuals
  4. Network Accessory
  5. Sentriant AG200
  6. Installation manual

Extreme Networks AG200 Installation Manual

Version 5.0
Hide thumbs Also See for AG200:
Table of Contents

Advertisement

Quick Links

Download this manual See also: User Manual
Sentriant AG Installation Guide, Version 5.0
Extreme Networks, Inc.
3585 Monroe Street
Santa Clara, California 95051
(888) 257-3000
(408) 579-2800
http://www.extremenetworks.com
Published: June 2007
Part number: 100277-00 Rev 07

Advertisement

Table of Contents
loading

Related Manuals for Extreme Networks AG200

Summary of Contents for Extreme Networks AG200

  • Page 1 Sentriant AG Installation Guide, Version 5.0 Extreme Networks, Inc. 3585 Monroe Street Santa Clara, California 95051 (888) 257-3000 (408) 579-2800 http://www.extremenetworks.com Published: June 2007 Part number: 100277-00 Rev 07...
  • Page 2 ServiceWatch, Summit, Summit24, Summit48, Summit1i, Summit4, Summit5i, Summit7i, Summit 48i, SummitRPS, SummitGbX, Triumph, vMAN, the Extreme Networks logo, the Alpine logo, the BlackDiamond logo, the Summit logos, the Extreme Turbodrive logo, and the Color Purple, among others, are trademarks or registered trademarks of Extreme Networks, Inc.

  • Page 3: Table Of Contents

    Table of contents Table of contents ... 3 List of figures... 5 List of tables ... 7 Chapter 1: What You Need to Get Started... 9 Chapter 2: Deployment Flexibility ... 11 Deploying Sentriant AG Inline ...13 Deploying Sentriant AG Using DHCP ...14 Deploying Sentriant AG Using 802.1x ...17 Installing the Network Interface Cards...18 Inline ...18...
  • Page 4 Table of contents Downloading the Upgrade ISO Image ...64 Creating an upgrade CD from the download...64 Upgrading from a CD ...64 Chapter 6: Configuring Sentriant AG ... 67 Appendix A: Installation and Configuration Check List ... 69 Minimum System Requirements ...69 Installation Location...69 Installation Media ...70 IP Addresses, Hostname, Logins, and Passwords...70...

  • Page 5: List Of Figures

    List of figures Figure 1: Single-server Installation, Quarantine Method, Inline ...12 Figure 2: Multiple-server Installation, Quarantine Method, Inline ...12 Figure 3: Single-server Installation, Quarantine Method, DHCP, Flat Network...13 Figure 4: Multiple-server Installation, Quarantine Method, DHCP ...13 Figure 5: Single-server Installation, DHCP Mode, Simple Example ...15 Figure 6: Single-server Installation, DHCP Mode, Complex Example ...16 Figure 7:...
  • Page 6 List of figures Sentriant AG Installation Guide, Version 5.0...

  • Page 7: List Of Tables

    List of tables Table 1: Sentriant AG System Requirements...25 Sentriant AG Installation Guide, Version 5.0...
  • Page 8 List of tables Sentriant AG Installation Guide, Version 5.0...

  • Page 9: Chapter 1: What You Need To Get Started

    What You Need to Get Started You need the following prior to installing and running Sentriant AG: Minimum system (hardware and software) requirements—see ● IP addresses you will enter during the set up process—see ● page 69 Install CD—See “Installing Sentriant AG” on page 39 ●...
  • Page 10 What You Need to Get Started Sentriant AG Installation Guide, Version 5.0...

  • Page 11: Chapter 2: Deployment Flexibility

    Deployment Flexibility Sentriant AG Version 5.0 allows you to deploy multiple Enforcement servers (ESs) across a network and manage them from one central Management server (MS). You create logical groups of ESs by joining them to an Enforcement cluster. The Sentriant AG MS specifies many aspects of the Enforcement clusters; for example, the MS specifies the enforcement method (inline, DHCP, or 802.1x), how often the endpoints are retested, the tests run on the endpoints, and how to control the endpoints’...

  • Page 12: Figure 2: Multiple-Server Installation, Quarantine Method, Inline

    Deployment Flexibility Figure 2: Multiple-server Installation, Quarantine Method, Inline Figure 3: Single-server Installation, Quarantine Method, DHCP, Flat Network Sentriant AG Installation Guide, Version 5.0...

  • Page 13: Deploying Sentriant Ag Inline

    Deployment Flexibility Figure 4: Multiple-server Installation, Quarantine Method, DHCP Deploying Sentriant AG Inline The ES’s position in the network is between the endpoints and the rest of the network; acting as a gateway and only allowing endpoints access to network resources that have met the necessary security requirements. Sentriant AG uses two network interfaces to bridge traffic between endpoints and the rest of the network.

  • Page 14: Deploying Sentriant Ag Using Dhcp

    Deployment Flexibility Deploying Sentriant AG Using DHCP When you configure Sentriant AG with a DHCP quarantine area, the Sentriant AG ES must sit inline with your DHCP server. With a quarantined endpoint, the ES responds to the DHCP request and blocks the request from getting to the main DHCP server.

  • Page 15: Figure 5: Single-Server Installation, Dhcp Mode, Simple Example

    Deployment Flexibility The following figure shows an example installation scenario for a simple (one LAN) setup with enforcement using ACLs on a router. Figure 5: Single-server Installation, DHCP Mode, Simple Example Sentriant AG Installation Guide, Version 5.0...

  • Page 16: Figure 6: Single-Server Installation, Dhcp Mode, Complex Example

    Deployment Flexibility The following figure shows an example installation scenario for a complex (multiple LAN) setup with enforcement using ACLs on a router. Figure 6: Single-server Installation, DHCP Mode, Complex Example Sentriant AG Installation Guide, Version 5.0...

  • Page 17: Deploying Sentriant Ag Using 802.1X

    The following figure shows an example installation scenario for a setup with enforcement with static routes on the endpoint. Figure 7: Single-server Installation, Endpoint Static Route Enforcement Deploying Sentriant AG Using 802.1x To configure Sentriant AG as 802.1x-enabled, install it with one of three different configurations, depending on your network environment: Use the built-in Sentriant AG RADIUS server and user accounts.

  • Page 18: Installing The Network Interface Cards

    Deployment Flexibility NOTE With a single-server Installation, the ES instructs the switch in which VLAN to place the endpoint. A sample deployment is shown in the following figure: Figure 8: 802.1x Enforcement Installing the Network Interface Cards The number of network interface cards (NICs) required depends on the installation method selected as described in this section.

  • Page 19: Dhcp

    very important that you connect the eth0 Private Network (VPN) side (for inline mode or for the main DHCP server in DHCP mode). Figure 9: Single-server Installation, Ethernet Card Installation, Inline DHCP A DHCP installation requires two NICs where the MS and ES are installed on the same server (see and at least three NICs where the MS and ES are installed on different servers;...

  • Page 20: Determining Eth0 And Eth1

    Deployment Flexibility networks, must be connected to a mirrored port or a port that is part of a tagged VLAN trunk to detect eth1 traffic from endpoints on these other networks. Usually, mirroring the ports in which the DNS and DHCP server resides detects new endpoints sufficiently.

  • Page 21: Deploying Sentriant Ag In Vpn Mode On A Different Network

    Advertised auto-negotiation: Yes Speed: 100Mb/s Duplex: Full Port: Twisted Pair PHYAD: 1 Transceiver: internal Auto-negotiation: on Supports Wake-on: g Wake-on: d Current message level: 0x000000ff (255) Link detected: yes NOTE In normal operation, Sentriant AG does not respond to Internet Control Message Protocol (ICMP or ping) echo requests.
  • Page 22 Deployment Flexibility Because a connecting VPN endpoint is not on the same subnet as Sentriant AG, all of the packets that Sentriant AG sends (in response to HTTP requests from the endpoint) go to the router at 10.1.90.254, which knows to send them (back through the Sentriant AG bridge) to the VPN concentrator for a next hop. For normal communication (such as testing traffic) between Sentriant AG and an endpoint, this works fine, even if it seems a bit inefficient.
  • Page 23 Deployment Flexibility Sentriant AG Installation Guide, Version 5.0...
  • Page 24 Deployment Flexibility Sentriant AG Installation Guide, Version 5.0...

  • Page 25: Chapter 3: System Requirements

    System Requirements There are several required elements you must have or configure when setting up your network for Sentriant AG: “General System Requirements” on page 25 ● “Specific System Requirements” on page 27 ● “Operating Systems Supported” on page 28 ●...
  • Page 26 System Requirements Table 1: Sentriant AG System Requirements Item Processor Disk space Multiple-server installation: MS installation network interface cards (NICs) and— ES installation — DHCP interface cards (NICs) — Inline interface cards (NICs) 802.1x-enabled installation server-class network interface cards Single-server installation class network interface cards (NICs) CD-ROM drive An Internet connection or a web...

  • Page 27: Specific System Requirements

    NOTE Your license key is emailed to you. If you did not receive one, contact Extreme Networks, Inc. Technical Assistance Center (TAC) (support@extremenetworks.com or (800) 998-2408). Specific System Requirements The following hardware is supported for this version of Sentriant AG, although other hardware may also function...

  • Page 28: Operating Systems Supported

    2950 IOS (software version 12.1 (22) EA8a) 4006 CATOS (software version 8.4 (9)GLX) 6509 CATOS (software version 8.5 (7)) Enterasys ■ 1H582-25 (software version 03.05.06) Extreme ■ Summit 48si (software version 7.4.2.6) Summit300-24:1 (software version ExtremeWare 7.4e.2.6) SummitX450-24t.2 (software version ExtremeWare XOS 11.2.2. or later) Foundry ■...

  • Page 29: Enforcement Methods Requirements

    Mac OS X version 10.3.7 or later. ■ Both the PowerPC and Intel Macintosh computers are supported ■ Windows Server 2003 ● Service Pack: SP1 ■ Language Support: U.S. English ■ Windows 2000 ● Service Pack: SP4 ■ Language Support: U.S. English ■...
  • Page 30 System Requirements 802.1x ● All switches must have 802.1x support. ■ Clients must have Windows or Funk supplicants. ■ Specific Windows supplicants tested are EAP, PEAP, MD5 challenge. ■ Switches must send Calling_Station_ID and NAS_Port Radius attributes. ■ 802.1x RADIUS server support ●...

  • Page 31: Chapter 4: Important Browser Settings

    Important Browser Settings Pop-up Windows The Sentriant AG reports capability uses a pop-up window. In order for you to run reports on Sentriant AG, you must allow pop-up windows from the Sentriant AG server. To allow pop-up windows in IE 6.0 with SP2: IE browser>>Tools>>Pop-up blocker>>Pop-up blocker settings 1 Enter the IP address or partial IP address of the Sentriant AG MS.

  • Page 32: Active Content

    Important Browser Settings Active Content The Windows® XP Service Pack 2 (SP2) installation changes some of the Internet Explorer (IE) browser’s security settings. This change in settings displays an active content message window when you access the Sentriant AG help feature. Figure 12: Internet Explorer Security Warning Message To view the Sentriant AG online help in IE: 1 Click on the message box to display the options...

  • Page 33: Minimum Font Size

    Important Browser Settings Figure 15: IE Internet Options, Advanced Tab 1 In the Internet Options pop-up window, scroll down to the security section. 2 Select the Allow active content to run in files on my computer check box. 3 Click OK. Minimum Font Size In order to properly display the Sentriant AG console, do not specify the minimum font size.

  • Page 34: Page Caching

    Important Browser Settings To clear the Mozilla minimum font size: Mozilla browser>>Edit>>Preferences>>Appearance>>Fonts 1 Select None from the Minimum font size drop-down list. 2 Click OK. To clear the Firefox minimum font size: Firefox browser>>Tools>>Options>>Content>>Fonts & Colors, Advanced 1 Select Allow pages to choose their own fonts, instead of my selections above. 2 Click OK.

  • Page 35: Temporary Files

    3 In the Compare the page in the cache to the page on the network area, select the Every time I view the page radio button. 4 Click ok. Temporary Files Periodically delete temporary files from your system to improve browser performance. To delete temporary files in IE: Internet Explorer>>Tools>>Internet Options>>General tab 1 Click Delete Files.
  • Page 36 Important Browser Settings Sentriant AG Installation Guide, Version 5.0...

  • Page 37: Chapter 5: Installing Sentriant Ag

    For first-time installations, use the install CD. Create an install CD from an International Organization for Standardization (ISO) image downloaded from the Extreme Networks, Inc. Web site. The installation process loads both the Sentriant AG application and the custom, hardened operating system (OS) on which Sentriant AG runs.

  • Page 38: Creating The Installation Cd From The Sentriant Ag Download

    Installing Sentriant AG 4 A pop-up window appears instructing you to select a directory in which to save the file. Navigate to a location that you will remember when it is time to create the install CD. Click Save. 5 The download window appears, showing the status of the download process. This download can take a lot of time, depending on your connection speed.

  • Page 39: Installing Sentriant Ag

    Sentriant AG release upgrades or patch installs, compromising the third-party software functionality. Additionally, installing third-party software and/or modifying the Sentriant AG software may violate your license agreement. Please refer to the Extreme Networks, Inc. EULA, which can be found in the Sentriant AG Users Guide.

  • Page 40: Locating And Verifying Server Hardware

    Installing Sentriant AG 5 For multiple-server installations: a Create clusters (see b Add enforcement servers to defined clusters 6 Configure Sentriant AG (see the Sentriant AG Version 5.0 Users Guide). Locating and Verifying Server Hardware To verify the server requirements: 1 Locate the computer you will be using for the Sentriant AG server.

  • Page 41: Information Required During Installation

    pick one of the above commands and enter it. If you don’t have that type of drive, nothing will be returned. Windows – From the desktop, double-click on My Computer. ● e Ethernet cards—You must know the quarantine (deployment) method you are going to use when setting up your network, as each method has the following specific Ethernet card requirements: Single-server installation—When the MS and ES are installed on the same server, you need two Ethernet cards.

  • Page 42: Creating A Single-Server Installation

    Installing Sentriant AG To find the current Default Gateway: Linux – Enter route -n Windows - Enter ipconfig NOTE Your system may require a different gateway. Check with your network administrator if you have problems or are unsure of which gateway IP address to use. Primary nameserver IP address (DNS server)—The IP address of the server that you use to convert ●...

  • Page 43: Figure 16: Install Screen, Boot Prompt

    WARNING! The Sentriant AG installation CD automatically reformats the hard drive on the host machine, erasing all existing data. Do not continue if you need any information that is stored on the hard drive! To abort the installation, press [Ctrl]+[Alt]+[Delete]. NOTE If the dedicated server is not configured to boot from the CD drive, edit the basic input/output system (BIOS) options as described in your server’s documentation.

  • Page 44: Figure 17: Install Screen, Installation Confirmation

    Installing Sentriant AG Figure 17: Install Screen, Installation Confirmation 4 On the Installation Confirmation screen, type eth0 screen appears. NOTE Use the [Tab], [spacebar], and [Enter] keys to navigate between fields and make selections on the install screens. 5 On the Network Configuration for eth0 screen, enter the IP address of the Sentriant AG MS/ES installation, as shown in Figure 18.

  • Page 45: Figure 18: Install Screen, Network Configuration For Eth0

    Figure 18: Install Screen, Network Configuration for eth0 6 Select OK. The Miscellaneous Network Settings screen appears: Figure 19: Install Screen, Miscellaneous Network Settings Sentriant AG Installation Guide, Version 5.0 Installing Sentriant AG...

  • Page 46: Figure 20: Install Screen, Hostname Configuration

    Installing Sentriant AG 7 On the Miscellaneous Network Settings screen, enter the Gateway and Primary DNS, (and Secondary DNS and Tertiary DNS if you use them). Select OK. The Hostname Configuration screen appears: Figure 20: Install Screen, Hostname Configuration 8 On the Hostname Configuration screen, enter the hostname. This name must be the fully qualified domain name (FQDN).

  • Page 47: Figure 21: Install Screen, Time Zone Selection

    Figure 21: Install Screen, Time Zone Selection 9 On the Time Zone Selection screen, select the time zone. Select OK. The Root Password screen appears: Figure 22: Install Screen, Root Password 10 On the Root Password screen, enter a root password for the Sentriant AG server. Enter a secure password that you can remember, and retype the password to confirm it.

  • Page 48: Figure 23: Install Screen, Database Password

    Installing Sentriant AG NOTE This is a secure Operating System. Make sure that you select a root password that is easy for you to remember but difficult for others to guess. Figure 23: Install Screen, Database Password Sentriant AG Installation Guide, Version 5.0...

  • Page 49: Figure 24: Install Screen, Installation Type

    11 On the Database Password screen, enter a database password. Enter a secure password that you can remember, and retype the password to confirm it. Select OK. The Extreme Networks, Inc. Sentriant AG installation type screen appears: Figure 24: Install Screen, Installation Type 12 On the installation type screen, select Both.

  • Page 50: Creating A Multiple-Server Installation

    Installing Sentriant AG 13 On the NTP Server settings screen, enter the IP address of the NTP server. Select OK. The Installation progress window appears: Figure 26: Install Screen, Installation Progress 14 Wait. Installation can take a few minutes. 15 When installation is complete, remove the CD. NOTE If the server reboots before you remove the CD, the boot prompt appears again.

  • Page 51: Figure 27: Install Screen, Installation Type Screen

    Installing the MS Software. To install the MS software: 1 Install the Sentriant AG software on the MS by performing using the MS IP address, host name, time zone, root password, and database password. The Installation type screen appears: Figure 27: Install Screen, Installation Type Screen 2 On the Installation type screen, select Management server.

  • Page 52: Figure 28: Install Screen, Installation Type

    Installing Sentriant AG 1 Install the Sentriant AG software on the ES by performing the ES IP address, host name, time zone, root password, and database password. The Installation type screen appears: Figure 28: Install Screen, Installation Type step 1 on page 42 through step 11 on page Sentriant AG Installation Guide, Version 5.0...

  • Page 53: Initial Configuration

    2 On the Installation type screen, select Enforcement server. Select OK. The Node installation settings screen appears: Figure 29: Install Screen, Node Installation Settings 3 On the Node installation settings screen, enter the IP address of the MS the ES is joining. Leave the Cluster name field blank.

  • Page 54: Figure 30: Security Alert Window

    Installing Sentriant AG Linux: Mozilla Firefox v1.5 or later, Mozilla v1.7 ■ 2 Using , point your browser to the IP address or host name of the Sentriant AG server (for example, https:// https://10.0.64.25 3 You might be prompted with a security alert because Sentriant AG uses a secure communication connection (SSL) (Figure 30).

  • Page 55: Figure 32: Enter Management Server Settings Window

    4 Accept the license agreement: a If you do not wish to accept the license agreement, click I do not accept this license agreement, or b Read the Sentriant AG End-User License Agreement (EULA) and select I Accept this license agreement. c Click Next.
  • Page 56 Installing Sentriant AG 6 The Network settings area is prepopulated with values entered during the initial installation process. Change any of the following if necessary: Host name—Enter a Fully Qualified Domain Name (FQDN). For example, ■ DNS IP address—Enter one or more DNS resolver IP addresses, separated by commas, semicolons, or ■...

  • Page 57: Figure 33: Enter License Key Window

    8 Click Next. The Enter license key window appears. Figure 33: Enter License Key Window 9 On the Enter license key window, in the License key field copy and paste your Sentriant AG license key, which was emailed to you as a text file. Click Next. The Create administrator account window appears. NOTE The double-equal sign (==) is part of the license key.

  • Page 58: Figure 35: Sentriant Ag Home Window

    Installing Sentriant AG NOTE In the case of a single-server installation, the MS and ES are on the same server and the ES is automatically joined to a default Enforcement cluster. You can change the name of the Enforcement cluster from the console. See the Sentriant AG Users Guide for instructions on editing Enforcement clusters.

  • Page 59: Figure 36: Enforcement Clusters & Servers

    Installing Sentriant AG 3 Select System Configuration. The System configuration, Enforcement clusters & servers window appears: Figure 36: Enforcement Clusters & Servers Sentriant AG Installation Guide, Version 5.0...

  • Page 60: Figure 37: Add Enforcement Cluster Window

    Installing Sentriant AG 4 Click Add an Enforcement cluster. The Add an Enforcement cluster window appears, with the General menu option selected by default. Figure 37: Add Enforcement Cluster Window 5 In the Add Enforcement cluster window, General area, enter a name for the cluster in the Cluster name field.

  • Page 61: Figure 38: Add Enforcement Server Window

    Adding an ES to a Cluster. To add an ES to a cluster: Sentriant AG home window>>System configuration 1 Click add an enforcement server. The Add enforcement server window appears: Figure 38: Add Enforcement Server Window 2 Select the cluster name for this enforcement server from the Cluster drop-down list. 3 Enter the IP address of this enforcement server in the IP address text box.

  • Page 62: Upgrading Sentriant Ag To A Newer Version

    Installing Sentriant AG 7 Click ok to add the server. A progress window appears. It can take a minute or so to add the server. The System configuration window appears showing the server joined to the cluster: Figure 39: System Configuration, Enforcement Clusters & Servers Window 8 Click ok to return to the Sentriant AG home window.

  • Page 63: Upgrading From The Sentriant Ag Console

    Installing Sentriant AG NOTE The Extreme Networks, Inc. Sentriant AG upgrade is compatible with version 4.1 and 4.2 only. Please call Extreme Networks, Inc. Technical Assistance Center (TAC) at (800) 998-2408 or send an email to support@extremenetworks.com for upgrade assistance.

  • Page 64: Downloading The Upgrade Iso Image

    Installing Sentriant AG a If no upgrades are available: 1) Click ok to clear the status window. 2) Click ok to return to System configuration. b If an upgrade is available, click yes to upgrade your system. CAUTION Installation of an upgrade can take several hours to download all the software. You can continue to use Sentriant AG during the download process.
  • Page 65 5 Follow the instructions in “Upgrading from the Sentriant AG Console” on page If you have questions or experience problems, contact Extreme Networks, Inc. Technical Assistance Center (TAC) at support@extremenetworks.com or call (800) 998-2408. Sentriant AG Installation Guide, Version 5.0...
  • Page 66 Installing Sentriant AG Sentriant AG Installation Guide, Version 5.0...

  • Page 67: Chapter 6: Configuring Sentriant Ag

    Sentriant AG Home window>>System configuration The Sentriant AG Users Guide provides detailed instructions for configuring Sentriant AG. If you experience problems, or have questions, contact Extreme Networks, Inc. Technical Assistance Center (TAC) (support@extremenetworks.com or call (800) 998-2408). Sentriant AG Installation Guide, Version 5.0...
  • Page 68 Configuring Sentriant AG Sentriant AG Installation Guide, Version 5.0...

  • Page 69: Appendix A: Installation And Configuration Check List

    Mozilla 1.7 Internet Explorer 6.0 Linux: Mozilla Firefox 1.5 or later Mozilla 1.7 License key: (cut and paste from the email you receive from Extreme Networks, Inc.) Installation Location My office(s) Server room(s)/Data center(s) Test lab(s) Production network(s) Sentriant AG Installation Guide, Version 5.0...

  • Page 70: Installation Media

    I do not have access to the installation site(s) Installation Media One of the following: Install CD Upgrade link: (provided to Extreme Networks, Inc. subscribers through email) IP Addresses, Hostname, Logins, and Passwords Single-server Installation The MS and ES are installed on the same physical server.

  • Page 71: Management Server

    Management Server Create at least one MS. MS IP address: ___________________________________________________________________ MS Netmask IP address (Network mask): Default gateway IP address: Primary nameserver IP address (DNS server): Secondary nameserver IP address (DNS server): __________________________________________ Tertiary nameserver IP address (DNS server): ____________________________________________ MS hostname (FQDN): ____________________________________________________________ NOTE...

  • Page 72: Enforcement Server 2

    Installation and Configuration Check List ES Database password:* Sentriant AG console administrator account name: Sentriant AG console administrator account password: Enforcement Server 2 Create at least one ES. Cluster name 2: ES IP address: ES Netmask IP address (Network mask): Default gateway IP address: Primary nameserver IP address (DNS server): Secondary nameserver IP address (DNS server): __________________________________________...

  • Page 73: Proxy Server

    Proxy Server If you use a proxy server for Internet connections, these fields are required: Proxy server IP address: ____________________________________________________________ Proxy server port: _________________________________________________________________ Proxy server authentication method (basic or digest): Proxy server user ID: ______________________________________________________________ Proxy server password: _____________________________________________________________ Agentless Credentials The administrator credentials for endpoints on a domain.

  • Page 74: 802.1X

    Installation and Configuration Check List 802.1x Quarantine subnets: _________________________________________________________________ RADIUS server type (local or remote IAS): ______________________________________________ Local RADIUS server type end-user authentication method: Manual: ____________________________________________________________________ Windows domain: Open LDAP: 802.1x Devices Define 802.1x devices globally for all clusters, or on a per-cluster basis. 802.1x device 1 IP address: Shared secret:...

  • Page 75: Dhcp

    802.1x device 4 IP address: ________________________________________________________________ Shared secret: _____________________________________________________________ Device type: ______________________________________________________________ 802.1x device 5 IP address: ________________________________________________________________ Shared secret: _____________________________________________________________ Device type: ______________________________________________________________ DHCP Define quarantine areas for all clusters, or on a per-cluster basis. Create as many quarantine areas as you need. NOTE If you select DHCP quarantine, you must create at least one area or you will get a process error.

  • Page 76: Accessible Services

    Installation and Configuration Check List Accessible services and endpoints for all clusters: Web sites: __________________________________________________________________ Hostnames: _________________________________________________________________ IP addresses / ports: __________________________________________________________ Networks: __________________________________________________________________ Windows domain controller:____________________________________________________ Accessible services and endpoints for cluster 1: Web sites: __________________________________________________________________ Hostnames: _________________________________________________________________ IP addresses / ports: __________________________________________________________ Networks: __________________________________________________________________ Windows domain controller:____________________________________________________ Accessible services and endpoints for cluster 2:...

  • Page 77: Test Exemptions

    Cluster 1 Send information to: __________________________________________________________ SNMP server IP address: ______________________________________________________ Email information sent from: ___________________________________________________ Cluster 2 Send information to: __________________________________________________________ SNMP server IP address: ______________________________________________________ Email information sent from: ___________________________________________________ Cluster 3 Send information to: __________________________________________________________ SNMP server IP address: ______________________________________________________ Email information sent from: ___________________________________________________ Test Exemptions Exemptions are defined for all clusters or on a per-cluster basis.
  • Page 78 Installation and Configuration Check List Sentriant AG Installation Guide, Version 5.0...

  • Page 79: Index

    Index Symbols == 57 Numerics 802.1x 11 deployment 11 active content in the browser 32 allow pop-up windows 31 authentication 14 browser allow pop-ups 31 browser and active content 32 browser settings 31 built-in RADIUS server 17 button configure system 63 create 38 CD, install 9 create...
  • Page 80 Index operating system, hardened 37 page caching 34 ping 21 pop-up window 31 pop-up windows, allowing 31 proxy to any other RADIUS 17 RAS 14 reboot 42 required hardware 25 software 25 single-server environment 42 software and operating system updates 69 SSL 54 static IP addresses 44 static routes 14...

This manual is also suitable for:

Sentriant ag

Table of Contents