Installation and Configuration Guide for Cisco Secure ACS Remote Agents
Installation of Cisco Secure ACS Remote Agent for Solaris
Download this chapter
Installation of Cisco Secure ACS Remote Agent for SolarisInstallation of Cisco Secure ACS Remote Agent for Solaris
 Feedback

Table Of Contents

Installation of Cisco Secure ACS Remote Agent for Solaris

System Requirements

Cisco Secure ACS Requirements

Hardware Requirements

Operating System Requirements

Network Requirements

Installing a Remote Agent for Solaris

Uninstalling Cisco Secure ACS Remote Agent for Solaris

Upgrading Cisco Secure ACS Remote Agent for Solaris


Installation of Cisco Secure ACS Remote Agent for Solaris

This chapter provides information about installing Cisco Secure ACS Remote Agent for Solaris.

This chapter contains the following topics:

•System Requirements

–Cisco Secure ACS Requirements

–Hardware Requirements

–Operating System Requirements

•Network Requirements

•Installing a Remote Agent for Solaris

•Uninstalling Cisco Secure ACS Remote Agent for Solaris

•Upgrading Cisco Secure ACS Remote Agent for Solaris

System Requirements

The computer running Cisco Secure ACS Remote Agent for Solaris must meet the minimum requirements detailed in the sections that follow.

Cisco Secure ACS Requirements

You must use Cisco Secure ACS Remote Agent for Solaris, version 3.3, with Cisco Secure ACS Solution Engine, version 3.3. Other releases of Cisco Secure ACS are not supported.

Hardware Requirements

The computer running Cisco Secure ACS Remote Agent for Solaris must meet the following minimum hardware requirements:

•SPARC architecture.

•256 MB of RAM.

•250 MB of free disk space.

For the most recent information about tested hardware, see the Release Notes for Cisco Secure ACS Solution Engine. The current version of the release notes are posted on Cisco.com.

Operating System Requirements

The computer running Cisco Secure ACS Remote Agent for Solaris must use Solaris 2.8.

For the most recent information about tested operating systems, see the Release Notes for Cisco Secure ACS Solution Engine. The current version of the release notes are posted on Cisco.com.

Network Requirements

Your network should meet the following requirements before you begin installing Cisco Secure ACS.

•Make sure that the computer running Cisco Secure ACS Remote Agent for Solaris can ping the Cisco Secure ACS Solution Engines that it is to support.

•Make sure that gateway devices permit traffic between the computer running Cisco Secure ACS Remote Agent for Windows and the Cisco Secure ACS Solution Engine. Specifically, the remote agent must receive TCP communication on TCP ports you configure in CSAgent.ini. The default TCP ports, if all services are used, are 2004, 2006, and 2007. The appliance must receive TCP communication on TCP port 2003.

Note Using the CSAgent.ini file, you can configure the ports used by the remote agent to communicate with Cisco Secure ACS. If you change the ports used, configure intervening gateway devices to permit TCP traffic on the ports that you configure the remote agent to use. For more information about changing the ports that a remote agent uses, see Configuring a Remote Agent.

Installing a Remote Agent for Solaris

Use this procedure to install Cisco Secure ACS Remote Agent for Solaris.

Before You Begin

Determine the IP address of the Cisco Secure ACS Solution Engine that is to be the configuration provider for this remote agent. For more information about configuration providers, see Configuration Provider.

For information about what must be completed before installing Cisco Secure ACS Remote Agent for Solaris, see System Requirements.

To install Cisco Secure ACS Remote Agent for Solaris, follow these steps:

Step 1 Find the installation file for Cisco Secure ACS Remote Agent for Solaris. The file should be located on the Cisco Secure ACS Solution Engine CD. The file name is typically CSCOacsag.version.platform.tar

If the Solaris remote agent is not found on the CD, you may be able to download it from Cisco.com. To do so, log in to Cisco.com, select Technical Support > Downloads, and then locate the software download page for Cisco Secure ACS Solution Engine.

Tip Remote agent software is located on the Strong Cryptographic 3DES Software page for Cisco Secure ACS Solution Engine software.

Step 2 Place the Solaris remote agent file in a location accessible from the Solaris server on which you want to install the remote agent.

Step 3 On the Solaris server on which you want to install the Solaris remote agent, log in as root.

Note If you cannot access the server as root, log in to the server as any user that has permission to use the sudo command.

Step 4 Access a shell command prompt and change directories to the directory in which you saved the downloaded Solaris remote agent file.

Step 5 Copy the remote agent installation package to the tmp directory. For example, type: 

cp CSCOacsag.version.platform.tar /tmp

where version is the version of the remote agent and platform is the platform identifier string.

Step 6 Change directories to the /tmp directory. To do so, type: 

cd /tmp

and press Enter.

Step 7 Unpack the remote agent software package. To do so, type: 

tar xf CSCOacsag.version.platform.tar

and press Enter.

Step 8 Install the remote agent software package. To do so, type: 

pkgadd -d . CSCOacsag

and press Enter.

Tip If you are not logged in as root, use the sudo command, for example, sudo pkgadd -d . CSCOacsag.

The software installation begins. The Enter Appliance name/IP: prompt appears. The appliance referred to is the configuration provider for the remote agent.

Step 9 Type the hostname or IP address of the Cisco Secure ACS Solution Engine that is the configuration provider for this remote agent. Press Enter.

Note If you type a hostname, be sure either that DNS is operating correctly or that the appliance hostname is in the local hosts file.

Tip You can edit the IP address or hostname of the configuration provider after completing the installation. For more information, see Configuring a Remote Agent.

The installation script verifies the IP address or hostname specified, records the validated information in the CSAgent.ini file, and continues the installation. The following message and prompt appear: 

Do you like to use CSUnix output format? [n] [y,n,?]

Step 10 Do one of the following:

•If you want to use CSUnix log format, type N and press Enter.

•If you want to use CSV log format, type N and press Enter.

For more information about CSUnix log format, see the discussion of the CSUnixOutput option in CSAgent.ini Settings.

Tip You can edit the setting for the CSUnixOutput option after completing the installation. For more information, see Configuring a Remote Agent.

The installation script records your log format selection in the CSAgent.ini file and continues the installation. The following message and prompt appear: 

This package contains scripts which will be executed with super-user permission during the 
process of installing this package. 
 
Do you want to continue with the installation of <CSCOacsag> [y,n,?]

Step 11 To continue with the installation, type Y and press Enter.

Note If you type N, the installation exits and the remote agent software is not installed.

The Solaris remote agent software is installed on the Solaris server.

Step 12 To configure the remote agent, see Configuring a Remote Agent.

Note The installation provides a default configuration, including specifying the configuration provider; however, you may want to configure the ports on which the remote agent communicates with the configuration provider and with other Cisco Secure ACS Solution Engines.

Step 13 To start remote agent services, see Stopping and Starting Remote Agent Services.

Uninstalling Cisco Secure ACS Remote Agent for Solaris

Note If you do not intend to reinstall Cisco Secure ACS Remote Agent for Solaris on this computer, remove the applicable remote agent configurations from all Cisco Secure ACS Solution Engines.

Before You Begin

Uninstalling a Solaris remote agent requires root privileges or permission to use the sudo command.

To uninstall Cisco Secure ACS Remote Agent for Solaris, follow these steps:

Step 1 On the Solaris server running the remote agent, log in as root.

Note If you cannot access the server as root, log in to the server as any user that has permission to use the sudo command.

Step 2 Access a shell command prompt.

Step 3 Type: 

pkgrm CSCOacsag

and press Enter.

Tip If you are not logged in as root, use the sudo command, for example, sudo pkgrm CSCOacsag.

The following prompt appears: 

Do you want to remove this package?

Step 4 Type Y and press Enter.

The following prompt appears: 

This package contains scripts which will be executed  
with super-user permission during the process of removing  
this package. 
 
Do you want to continue with the removal of this package  
[y,n,?,q] ?

Step 5 Type Y and press Enter.

The Solaris remote agent software is removed from the Solaris server.

Upgrading Cisco Secure ACS Remote Agent for Solaris

The upgrade process consists of uninstalling the old version of the remote agent and installing the new version.

To upgrade Cisco Secure ACS Remote Agent for Solaris, follow these steps:

Step 1 Remove the old version of the remote agent by performing the steps in Uninstalling Cisco Secure ACS Remote Agent for Solaris.

Step 2 Using the version of Cisco Secure ACS Remote Agent for Solaris that you want to upgrade to, perform the steps in Installing a Remote Agent for Solaris.