Table Of Contents
Preface
Preface
This guide provides instructions for the administration of the Cisco Application Control Engine (ACE) module. It describes how to perform administration tasks on the ACE, including initial setup, establish remote access, manage software licenses, configure class maps and policy maps, manage the ACE software, configure SNMP, configure redundancy, configure the XML interface, and upgrade your ACE software.
This preface contains the following major sections:
•
Audience
•How to Use This Guide
•Related Documentation
•Symbols and Conventions
•Obtaining Documentation, Obtaining Support, and Security Guidelines
Audience
This guide is intended for the following trained and qualified service personnel who are responsible for configuring the ACE:
•System administrator
•System operator
How to Use This Guide
This guide is organized as follows:
Chapter
|
Description
|
Chapter 1, Setting Up the ACE
|
Describes how to configure basic settings on the ACE, including topics such as how to session and log in to the ACE, change the administrative username and password, assign a name to the ACE, configure a message-of-the-day banner, configure date and time, configure terminal settings, modify the boot configuration, and restart the ACE.
|
Chapter 2, Enabling Remote Access to the ACE
|
Describes how to configure remote access to the Cisco Application Control Engine (ACE) module by establishing a remote connection using the Secure Shell (SSH) or Telnet protocols. It also describes how to configure the ACE to provide direct access to a user context from SSH. This chapter also covers how to configure the ACE to receive ICMP messages from a host.
|
Chapter 3, Managing ACE Software Licenses
|
Describes how to manage the software licenses for your ACE.
|
Chapter 4, Configuring Class Maps and Policy Maps
|
Configure class maps and policy maps to provide a global level of classification for filtering traffic received by or passing through the ACE.
|
Chapter 5, Managing the ACE Software
|
Save and download configuration files, use the file system, view and copy core dumps, capture and copy packet information, use the configuration checkpoint and rollback service, display configuration information, and display technical support information.
|
Chapter 6, Viewing ACE Hardware and Software Configuration Information
|
Display ACE hardware and software configuration information, and display technical support information.
|
Chapter 7, Configuring Redundant ACE Modules
|
Configure the ACE for redundancy, which provides fault tolerance for the stateful failover of flows.
|
Chapter 8, Configuring SNMP
|
Configure Simple Network Management Protocol (SNMP) to query the ACE for Cisco Management Information Bases (MIBs) and to send event notifications to a network management system (NMS).
|
Chapter 9, Configuring the XML Interface
|
Provide a mechanism using XML to transfer, configure, and monitor objects in the ACE. This XML capability allows you to easily shape or extend the CLI query and reply data in XML format to meet different specific business needs.
|
Appendix A, Upgrading Your ACE Software
|
Upgrade the software on your ACE.
|
Related Documentation
In addition to this document, the ACE documentation set includes the following:
Document Title
|
Description
|
Release Note for the Cisco Application Control Engine Module
|
Provides information about operating considerations, caveats, and command-line interface (CLI) commands for the ACE.
|
Cisco Application Control Engine Module Hardware Installation Note
|
Provides information for installing the ACE into the Catalyst 6500 series switch.
|
Cisco Application Control Engine Module Getting Started Guide
|
Describes how to perform the initial setup and configuration tasks for the ACE.
|
Cisco Application Control Engine Module Virtualization Configuration Guide
|
Describes how to operate your ACE in a single-context or in multiple-contexts. Multiple-contexts use the concept of virtualization to partition your ACE into multiple virtual devices.
|
Cisco Application Control Engine Module Routing and Bridging Configuration Guide
|
Describes how to configure routing and bridging on the ACE, including:
•VLAN interfaces
•Routing
•Bridging
•Dynamic Host Configuration Protocol (DHCP).
|
Cisco Application Control Engine Module Server Load-Balancing Guide
|
Describes server load-balancing and how to configure it on the ACE, including:
•Real servers and server farms
•Class maps and policy maps to load-balance traffic to real servers in server farms
•Server health monitoring (probes)
•Stickiness
•Firewall load balancing
•TCL scripts
|
Cisco Application Control Engine Module Security Configuration Guide
|
Describes how to perform ACE security configuration tasks, including:
•Security access control lists (ACLs)
•User authentication and accounting using a TACACS+, RADIUS, or LDAP server
•Application protocol and HTTP deep packet inspection
•TCP/IP normalization and termination parameters
•Network address translation (NAT)
|
Cisco Application Control Engine Module SSL Configuration Guide
|
Describes SSL and how to configure it on the ACE, including:
•SSL certificates and keys
•SSL initiation
•SSL termination
•End-to-end SSL
|
Cisco Application Control Engine Module System Message Guide
|
Describes how to configure system message logging on the ACE. This guide also lists and describes the system log (syslog) messages generated by the ACE.
|
Cisco Application Control Engine Module Command Reference
|
Provides an alphabetical list and descriptions of all CLI commands by mode, including syntax, options, and related commands.
|
Symbols and Conventions
This publication uses the following conventions:
Convention
|
Description
|
boldface font
|
Commands, command options, and keywords are in boldface. Bold text also indicates a command in a paragraph.
|
italic font
|
Arguments for which you supply values are in italics. Italic text also indicates the first occurrence of a new term, book title, emphasized text.
|
{ }
|
Encloses required arguments and keywords.
|
[ ]
|
Encloses optional arguments and keywords.
|
{x | y | z}
|
Required alternative keywords are grouped in braces and separated by vertical bars.
|
[x | y | z]
|
Optional alternative keywords are grouped in brackets and separated by vertical bars.
|
string
|
A nonquoted set of characters. Do not use quotation marks around the string or the string will include the quotation marks.
|
screen font
|
Terminal sessions and information the system displays are in screen font.
|
boldface screen font
|
Information you must enter in a command line is in boldface screen font.
|
italic screen font
|
Arguments for which you supply values are in italic screen font.
|
^
|
The symbol ^ represents the key labeled Control—for example, the key combination ^D in a screen display means hold down the Control key while you press the D key.
|
< >
|
Nonprinting characters, such as passwords are in angle brackets.
|
1. A numbered list indicates that the order of the list items is important.
a. An alphabetical list indicates that the order of the secondary list items is important.
•A bulleted list indicates that the order of the list topics is unimportant.
–An indented list indicates that the order of the list subtopics is unimportant.
Notes use the following conventions:
Note Means reader take note. Notes contain helpful suggestions or references to material not covered in the publication.
Cautions use the following conventions:
Caution Means
reader be careful. In this situation, you might do something that could result in equipment damage or loss of data.
Warnings use the following conventions:
Warning Means possible physical harm or equipment damage. A warning describes an action that could cause you physical harm or damage the equipment.
For additional information about CLI syntax formatting, refer to the Cisco Application Control Engine Module Command Reference.
Obtaining Documentation, Obtaining Support, and Security Guidelines
For information on obtaining documentation, obtaining support, providing documentation feedback, security guidelines, and also recommended aliases and general Cisco documents, see the monthly What's New in Cisco Product Documentation, which also lists all new and revised Cisco technical documentation, at:
http://www.cisco.com/en/US/docs/general/whatsnew/whatsnew.html
