Getting Started with CiscoWorks LAN Management Solution 4.0
Chapter 8: Checking Protocol, Security, Backup and Authentication Settings
Downloads: This chapterpdf (PDF - 56.0KB) The complete bookPDF (PDF - 1.53MB) | Feedback

Checking Protocol, Security, Backup and Authentication Settings

Table Of Contents

Checking Protocol, Security, Backup and Authentication Settings

RCP and SCP Settings

Browser Server Security Settings

Backup Settings

Authentication Settings


Checking Protocol, Security, Backup and Authentication Settings


This chapter guides you on setting up the following using the Getting Started workflow:

RCP and SCP Settings

Browser Server Security Settings

Backup Settings

Authentication Settings

RCP and SCP Settings

This section explains the setting up of RCP and SCP credentials on the CiscoWorks LMS server.

To setup RCP and SCP:


Step 1 Select RCP and SCP in System Settings workflow.

Step 2 Enter the following details:

RCP User—Name used by network device when it connects to CiscoWorks LMS server to run RCP. User account must exist on UNIX systems, and should also be configured on devices as local user in the ip rcmd configuration command. The default RCP username is cwuser.

SCP User—Name used by the network device when it connects to the CiscoWorks LMS server to run SCP. The username you have entered here is used for authorization while transferring software images using SCP protocol. You must specify a username that has SSH authorization on a Solaris system. SCP uses this authorization for transferring software images.

SCP Password—Enter the password for the SCP user in this field. The password you have entered here is used for authentication while transferring software images using SCP protocol. You must specify a username that has SSH authentication on a Solaris system. SCP uses this authentication for transferring software images.

SCP Verify Password—Re-enter the SCP password in this field.

Step 3 Click Apply to save the RCP and SCP settings.


Browser Server Security Settings

CiscoWorks LMS provides secure access between the client browser and the management server. This section explains you the enabling or disabling of the https security mode in browser and server.


Step 1 Select Browser Server Security Mode in System Settings workflow

Step 2 Select either:

Enable—To change the settings to https mode.

Or

Disable—To change the settings to non-secure http mode.

Step 3 Click Apply to save the security mode settings.

A pop-up message appears asking you to restart the Daemon process when you change the security settings.


Backup Settings

This section explains the configuration and scheduling of backup on the CiscoWorks LMS server.

To configure Backup settings:


Step 1 Select Backup in System Settings workflow.

Step 2 Enter the appropriate information in the following fields:

Table 8-1 Backup Settings

Field
Description
Backup Settings

Backup Directory

Location of the backup directory. We recommend that your target location be on a partition other than the CiscoWorks installation location.

The backup directory name should not contain any special characters.

Generations

Maximum number of backups to be stored in the backup directory.

Scheduler

Run Type

Select the backup schedule:

Daily—The database is backed up every day at the time specified.

Weekly—The database is backed up once a week on the day and time specified. Select a day from the Day of week list.

Monthly—The database is backed up once a month on the day and time specified. Select a day from the Day of month list.

You cannot schedule more than one backup at a time. The new schedule overwrites the previous schedule, if any.

E-mail

Enter a valid E-mail ID in this field.

You can enter multiple E-mail IDs separated by commas.


Step 3 Click Apply to save the backup configuration settings.


Authentication Settings

This section explains the authentication login modules in LMS. Login modules define how authorization and authentication are performed. You can change the current authentication modules to any of the available list of login modules.

To change the authentication module:


Step 1 Select Authentication Mode in System Settings workflow.

The default authentication module in LMS is CiscoWorks Local.

You can change to any of the following authentication login modules:

CiscoWorks Local—This login module is the default authentication module in LMS.

IBM SecureWay Directory—This login module implements Lightweight Directory Access Protocol (LDAP). Before a user can login, the user account is set up in the LDAP server.

KerberosLogin—This login module provides strong authentication for client/server applications by using secret-key cryptography.

Local NT System—This login module is available only on Windows.

Local Unix System—This login module is available only on Solaris.

MS Active Directory—This login module implements Lightweight Directory Access Protocol (LDAP). Before a user can login, the user account is set up in the LDAP server.

Netscape Directory—This login module implements Lightweight Directory Access Protocol (LDAP). Before a user can login, the user account is set up in the LDAP server.

RADIUS—This login module connects to the RADIUS server to validate the user account.

TACACS+—This login module connects to a TACACS server to validate the user account.

Step 2 Select the appropriate login module.

Step 3 Click Apply to save the authentication settings.