Table Of Contents
Router MC Administration
Defining System Settings
Defining Configuration Support Settings
Defining the Auto Update Server (AUS) Settings
Router MC Administration
The Admin tab allows system administrators to define overall system settings, and define the ranges and other settings that affect policy configuration and implementation. From this tab, an administrator can also configure the Auto Update Server (AUS) settings required for communication between Router MC and the AUS.
The following topics provide information about the settings that can be defined in the Admin tab:
•
Defining System Settings
•
Defining Configuration Support Settings
•
Defining the Auto Update Server (AUS) Settings
Defining System Settings
Administrators can define the overall system settings for the Router MC application, such as, the workflow mode, activity and job approval settings, and settings for historical jobs and activities.
The System Settings page is accessed by selecting Admin > System Settings.
Table 1-1 describes the elements displayed in the System Settings page.
Table 1-1 System Settings: GUI Reference
GUI Element
|
Description
|
Use Workflow check box
|
Use this check box to change the application's workflow mode. By default, this check box is not selected, since the default working mode is Workflow Disabled mode. Select the check box to work in Workflow Enabled mode.
See Understanding Router MC Workflow Modes, page 1-5 for more information.
|
Require submission of activities for approval check box
|
If this check box is selected, activities must be submitted for approval. If this check box is not selected, activities do not have to be submitted for approval, but can be approved by the same user. In general, submission of activities for approval would not be necessary if the same user typically has the authority to define configurations and commit them to the database. See Understanding Activities, page 1-2 for more information.
Note This check box is enabled only when the Use Workflow check box is selected.
|
Require approval of jobs check box
|
If this check box is selected, jobs must be approved by a user with the appropriate permissions before they are deployed. See Approving a Job, page 1-23 for more information.
Note This check box is enabled only when the Use Workflow check box is selected.
|
Maximum Historical Jobs Saved field
|
Enter the number of jobs to be stored and displayed in the list of jobs. Router MC discards any historical jobs that exceed this value. The default value is 30.
Note Any generated jobs that have not yet been deployed, rejected, or rolled back, will be retained, even if the value entered in this field is exceeded.
|
Maximum Historical Activities Saved field
|
Enter a number of activities. Router MC discards any historical activities that exceed this value. The default value is 30.
|
Clear Audit Records Prior To field
|
Specify a date in the format MM/DD/YYYY, or click the ... button to select a date from a calendar. Router MC will retain only those audit records that were created on or after the specified date.
|
... button
|
Click to open a calendar from which you can select the date of the oldest Router MC audit record that you want to keep. Click OK to confirm your selection and close the calendar, or click Cancel to close the calendar without selecting a date.
|
Config File Suffix field
|
Enter the file name suffix required for device configuration files being imported into Router MC. Users will only be able to import files with this suffix. In most cases, the suffix should be .cfg.
|
Display policy origin in incremental configuration check box
|
Selecting this check box enables you to view the policy source for incremental CLI commands generated for a device, in the View Configs option.
See Viewing Device Configurations (Workflow Disabled Mode), page 1-8 for more information.
|
Show Summary Step in Wizards check box
|
By default, all Router MC wizards end with a summary page that displays the definitions for that policy and enables you to go back and change them if necessary. Deselect this check box to remove this summary page from all wizards.
See Using Router MC Wizards, page 1-30 for more information.
|
Apply button
|
Click to confirm your selections and apply them.
|
Defining Configuration Support Settings
Administrators can change specific ranges and settings that affect policy configuration and implementation in Router MC, such as, the interior gateway protocol (IGP) process range used when generic routing encapsulation (GRE) is defined, and dialer interface ranges.
The Configuration Support Settings page is accessed by selecting Admin > Configuration Support Settings.
Table 1-2 describes the elements displayed in the Configuration Support Settings page.
Table 1-2 Configuration Support Settings—GUI Reference
GUI Element
|
Description
|
Allow automatic generation of supplementary ACEs check box
|
If this check box is selected, Router MC will automatically generate additional ACEs to ensure that your firewall configurations will be compatible with other configurations, such as VPN configurations, management connections, and so on. These ACEs are in addition to the CLI commands generated by Router MC to implement your policy definitions.
By default, this check box is selected. If you prefer to add these ACEs manually when necessary, deselect the check box.
See Automatic ACE Generation in Router MC, page 1-30 for more information.
|
GRE Routing Range fields
|
Router MC adds an additional Interior Gateway Protocol (IGP) that is dedicated for IPSec and GRE secured communication. An IGP refers to a group of devices that receive routing updates from one another by means of a routing protocol, either EIGRP or OSPF. Each "routing group" is identified by a logical number, the process number. This process number must be within the range specified in these fields.
Enter an IGP process range to be used when GRE is defined for failover and routing. The default range is 110 to 120. See Understanding GRE, page 1-4 for more information.
Note Router MC removes any existing IGP on the device that is within the routing range managed by Router MC.
|
HA Standby Group Number (outside) field
|
Enter the standby number of the outside hub interface that matches the external virtual IP subnet, for hubs in an High Availability (HA) group. The number must be within the range of 0-255. See Defining HA Group Settings, page 1-25 for information about HA groups.
|
HA Standby Group Number (inside) field
|
Enter the standby number of the inside hub interface that matches the internal virtual IP subnet, for hubs in an HA group. The number must be within the range of 0-255.
|
Dialer Settings Range fields
|
Enter a range of numbers that can be used for dial backup configuration. A number from this range will be used for dialer pool, dialer group, and interface dialer settings. The allowed range for the dialer settings is 1-128.
See Configuring Dial Backup, page 1-43 for more information.
|
RTR Range fields
|
Enter a range of numbers that are available for configuring the RTR CLI commands for dial backup. The default range for the RTR settings is 1-2147483647.
See Configuring Dial Backup, page 1-43 for more information.
|
Maintain Non-RMC Defined CLI check box
|
This check box is selected by default. Router MC maintains and, where possible, reuses your existing policies (VPN, firewall, and NAT) on your devices, even if they were not configured using Router MC. This enables you to use Router MC to expand an existing network, without changing the existing network.
If you deselect this check box, Router MC will remove commands that do not contain the Router MC identifier and replace them with Router MC generated CLI commands, where relevant.
|
Apply button
|
Click to confirm your selections and apply them.
|
Defining the Auto Update Server (AUS) Settings
Administrators can specify the location of the AUS server and provide AUS contact information for Router MC. This information is required by Router MC in order to retrieve information from dynamically addressed devices.
See Importing Devices with Dynamically Assigned IP Addresses, page 1-12 and Understanding GRE with DMVPN, page 1-6 for more information.
The Auto Update Server Settings page is accessed by selecting Admin > Auto Update Server Settings.
Table 1-3 describes the elements displayed in the Auto Update Server Settings page.
Table 1-3 Auto Update Server Settings—GUI Reference
GUI Element
|
Description
|
AUS Location area
|
• IP Address/Host Name: Enter the IP address or host name of the AUS server.
• Port: Enter the number of the AUS port on the AUS server, or accept the default.
|
AUS Contact Information for Router MC area
|
• Username: Enter the login name of the authorized AUS user.
• Password: Enter the password of the authorized AUS user.
• Confirm Password: Re-enter the password for confirmation.
|
Apply button
|
Click to confirm your selections and apply them.
|