Table Of Contents
Readme for CiscoWorks VMS 2.2 Update 1
CiscoWorks VMS 2.2 Documentation
Hardware and Software Requirements
General Recommendations on Java Plug-in 1.4.1_02
Prerequisites for CiscoWorks VMS 2.2 Update 1
Installing CiscoWorks VMS 2.2 Update 1 on Windows
Installing CiscoWorks VMS 2.2 Update 1 on Solaris
CiscoWorks Common Services SP2: Known Problems
Java Plug-in 1.4.1_02: Known Problems
Resource Manager Essentials 3.5 Update 1: Known Problems
VPN Monitor 1.2.1 Known Problems
Readme for CiscoWorks VMS 2.2 Update 1
This document contains the following sections:
•
CiscoWorks VMS 2.2 Documentation
•
Hardware and Software Requirements
•
Prerequisites for CiscoWorks VMS 2.2 Update 1
•
Downloading VMS 2.2 Update 1
Description
CiscoWorks VPN/Security Management Solution (VMS) 2.2 Update 1 contains:
•
CiscoWorks Common Services 2.2 Service Pack 2 (includes CiscoView 5.5 Update 1 and CiscoWorks Common Services 2.2 Service Pack 1)
•
Resource Manager Essentials 3.5 Update 1
•
VPN Monitor and Monitoring Center for Security (Security Monitor) updates
CiscoWorks VMS 2.2 Update 1 provides new support for:
•
Java Plug-in 1.4.1_02
•
Netscape Navigator 7.1 (Windows)
•
Netscape Navigator 7.0 (Solaris)
•
Secure Shell 1.99
•
Windows 2000 Service Pack 4 (SP4) (client and server)
•
Windows XP Service Pack 1a (SP1a) (client)
VMS 2.2 Update 1 also contains resolutions to known problems in VMS 2.2 applications. See the "Known Problems" section for details.
CiscoWorks VMS 2.2 Documentation
For information about installing, troubleshooting, and using VMS 2.2, consult the Quick Start Guide for the VPN/Security Management Solution 2.2 as described in Table 1.
Note
We sometimes update the printed and electronic documentation after original publication. Therefore, you should also review the documentation on Cisco.com for any updates.
Hardware and Software Requirements
Hardware and software requirements are the same as those needed for initial CiscoWorks VMS 2.2 installation, with the following additions:
•
VMS 2.2 does not support Japanese OS versions.
•
Specific updates to browser support (see the "Changes in Browser Support" section)
•
Specific updates to Java support (see the "Changes in Java Support" section)
•
Support for Service Pack 4
CautionIf you have other CiscoWorks bundles installed, you must install those bundle updates in addition to VMS 2.2 Update 1 for your network to function properly.
For a listing of the basic hardware and software requirements, see the Quick Start Guide listed in the "CiscoWorks VMS 2.2 Documentation" section.
Changes in Browser Support
All VMS components support Internet Explorer 6.0 with Service Pack 1 on Windows platforms. Table 2 identifies Netscape Navigator support by individual components where these requirements differ from VMS as a whole.
CautionDo not select the option Edit > Preferences > Advanced > Enable Java Plug-in in Netscape Navigator 4.7x, if available. Some CiscoWorks applets might not load properly if this option is selected.
Changes in Java Support
In response to the removal of the Microsoft Virtual Machine (VM) from new Microsoft products going into distribution, the version of CiscoWorks Common Services 2.2 contained in this Update provides Java Plug-in 1.4.1_02 support for those who prefer to continue using Internet Explorer as their browser.
This support is provided as an alternative to the Microsoft VM, not as a replacement for it. If the Microsoft VM is still present in the version of Internet Explorer you use, you can choose to continue using it. If no browser VM is present, CiscoWorks applets will use Java Plug-in 1.4.1_02 as the default.
Providing support for Java Plug-in 1.4.1_02 ensures that CiscoWorks Common Services and the applications it supports remain stable across all current browsers, browser versions, and operating systems. It affects only those CiscoWorks applications that use Java applets, such as CiscoView and Netconfig.
You might see special behaviors the first time you use the updated version of CiscoWorks Common Services 2.2 on Internet Explorer or Netscape Navigator. These behaviors will vary with the operating system, browser, browser version, and Java VM you are currently using.
Table 3 summarizes the conditions under which you will see these behaviors and the actions you should take in each case. Please also refer to the "General Recommendations on Java Plug-in 1.4.1_02" section.
Sun has issued an Alert Notification for Java Plug-in 1.4.1_02. To learn more about this Alert Notification see http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/56380. If you plan to use Java Plug-in 1.4.1_05, see also the "Using Sun Java Plug-in 1.4.1_05" section.
Note
In Internet Explorer, a dummy applet gets loaded before the login page. This is to detect whether the browser has a Java VM or not. As a result you might notice a slight delay in getting to the login page.
General Recommendations on Java Plug-in 1.4.1_02
The following sections give general recommendations and procedures to follow when installing and using Java Plug-in 1.4.1_02:
•
Installing and Using Java Plug-in 1.4.1_02 on Windows
•
Before Using Java Plug-in 1.4.1_02 On Solaris
•
Installing and Uninstalling Java Plug-in 1.4.1_02 on Solaris
•
Using Sun Java Plug-in 1.4.1_05
Installing and Using Java Plug-in 1.4.1_02 on Windows
When installing or using Java Plug-in 1.4.1_02 on Windows, the guidance offered by the help pages you will be directed to is usually sufficient. You should also be aware of the following:
•
Uninstall any older or later Java Plug-in versions and install only the supported Java Plug-in version (1.4.1_02). If you do not follow the uninstall and reinstall sequence, it might cause some co-existence issues.
•
In some cases, uninstalling Java Plug-in 1.4.1_02 disables the Microsoft VM in Internet Explorer. To enable the Microsoft VM again, you must install Java Plug-in 1.4.1_02 again.
•
If you are using Internet Explorer, we recommend that you set the Security Settings (Tools > Internet Options > Security) to the default level for security zones such as Internet and Local Intranet. If you customize the options, some of the functionality might not work as expected.
•
Java Plug-in 1.4.1_02 has some coexistence conflicts with Java Plug-in 1.3.1:
–
In the same browser session, if one of applets uses JPI 1.4.1_02 and the another tries to use JPI 1.3.1, the browser will not work properly.
–
If you use an applet using JPI 1.3.1 first, and then try to run another applet using JPI 1.4.1_02, the server displays an error message Attachment to a running Virtual Machine failed. SUN does not support multiple VMs in the same browser session.
In general, avoid using applets with different Java Plug-in versions in the same browser session.
•
Select Yes for all the Java Plug-in dialog boxes. If you select No in any of the Java Plug-in dialog boxes, exceptions appear on the Java Console. In such a case, close the browser session and start the Java Plug-in again.
When you run CiscoWorks Server in SSL mode, a dialog box prompts you to accept or deny the Certificate. The certificate gives the details about the hostname mismatch, certificate validity and so on.
Select Yes and accept these certificates to get the login Panel. Do not select No in the Certificate dialog boxes.
•
Do not resize the browser windows after reloading the page.
While using Internet Explorer 6.0 with Service Pack 1 and Java Plug-in 1.4.1_02, if you run an applet and resize Internet Explorer, only part of the applet is displayed.
If you resize the window to full screen, part of the applet that was not covered will not be displayed properly. To correct this, start the applet again.
You must do the same if you are using Netscape.
•
If you are using Netscape 7.1 on Windows please note that some CiscoWorks applications that are launched in new browser windows may not start properly if you have the following option enabled: Edit > Preferences > Privacy & Security > Popup Windows > Block unrequested popup windows. We recommended that you leave this option disabled. It is possible to enable this option and still allow popups for CiscoWorks only; see the Netscape Help for details on how to do this.
Before Using Java Plug-in 1.4.1_02 On Solaris
When installing or using Java Plug-in 1.4.1_02 on Solaris, we recommend:
•
Be sure to install Netscape only from the Sun site at http://wwws.sun.com/software/solaris/netscape/get.html.
•
Install all the recommended and required Solaris OS patches for Netscape and Java Plug-in 1.4.1_02. If you do not install the patches, you might experience browser problems, core dumps, bus errors, or other abnormal behavior when you access CiscoWorks.
•
Be sure to install Java Plug-in 1.4.1_02 using the wrapper script provided with CiscoWorks (pam.sh). This script sets up the environment required for accessing CiscoWorks through Netscape. Do not download and install the Java Plug-in directly.
•
If you are using Netscape 7.0, ensure that you have write access to the Netscape 7.0 directory, as you need to configure it to work with Java Plug-in 1.4.1_02.
•
If you have installed Java Plug-in 1.4.1_02 using pam.sh, it will overwrite the previous configurations of Java Plug-in 1.3.1.
•
Do not access CiscoWorks through Reflection X. You should access CiscoWorks directly from Solaris systems. The browser might not work properly if you do not have the required Solaris patches.
Installing and Uninstalling Java Plug-in 1.4.1_02 on Solaris
When you access an application that requires Java Plug-in 1.4.1_02, you will be redirected to a help page. This page contains instructions to install the Plug-in.
From the help page, download the installable image of the Plug-in. You must uncompress and untar the installable image. When you untar the image, you get the plug-in installation script (pam.sh), a directory named plugin and a README file.
To install Java Plug-in 1.4.1_02 on Solaris:
Step 1
Execute pam.sh.
Step 2
Choose option 1.
Step 3
Configure Java Plug-in with Netscape 4.76 or Netscape 7.0.
You should configure the Java Plug-in to work with at least one of the Netscape versions mentioned in this document to use CiscoWorks.
You can also modify the configurations with Netscape later by choosing Option 3 in the pam.sh script.
Step 4
Before accessing CiscoWorks, source the /jpi.cshrc (csh) or /jpi.profile (if you are using shell script) to set the required environment variables.
To uninstall the Java Plug-in:
Step 1
Execute pam.sh.
Step 2
Choose option 2.
The Plug-in is uninstalled from your system.
Using Sun Java Plug-in 1.4.1_05
CautionCisco has not fully tested VMS component applications with Sun Java Plug-in 1.4.1_05. You might encounter problems.
Sun Alert Notification 56380 concerns a security vulnerability in Java Plug-in 1.4.1_02. Customers using the SSL features of VMS should review the Sun Alert and determine their level of risk. If you are not using SSL with VMS, you should use the Java Plug-in 1.4.1_02, which is installed with CiscoWorks VMS 2.2 Update 1 automatically.
At the time of this release (October 2003), Java Plug-in 1.4.1_02 was the only version tested and recommended for use with VMS 2.2 Update 1. Cisco will examine additional alternatives, including Sun Java Plug-in 1.4.1_05. Information released after this printing concerning supported versions of the Java Plug-in will be posted on the CiscoWorks Server software download page on Cisco's web site: http://www.cisco.com/pcgi-bin/tablebuild.pl/cw2000-cd-one.
Customers choosing to use Sun's Java Plug-in 1.4.1_05 instead of the one provided in VMS 2.2 Update 1 can apply the plug-in manually using the steps outlined below.
Note that if you change to Java Plug-in 1.4.1_05 on the server and one client, you must change to version 1.4.1_05 on all of your clients. You cannot run the updated version of VMS using clients with a mix of different Java Plug-in versions. Also note that, since Cisco has not fully tested VMS with Java Plug-in 1.4.1_05, you may encounter problems.
To modify your CiscoWorks installation to use Sun Java Plug-in 1.4.1_05:
Step 1
Install CiscoWorks VMS 2.2 Update 1 normally. This includes installation of Java Plug-in 1.4.1_02 on Solaris and Windows clients the first time you run CiscoWorks.
Step 2
On the updated CiscoWorks Server (either Solaris or Windows): Locate the Java Plug-in properties file /NMSROOT/lib/classpath/javaplugin.properties (where NMSROOT is the path to the CiscoWorks Server directory), and change the following entries in the javaplugin.properties file to reflect the new Java Plug-in version:
•
Existing entries for Java Plug-in 1.4.1_02:
WIN_IE_VERSION=clsid:CAFEEFAC-0014-0001-0002-ABCDEFFEDCBA
WIN_NS_VERSION=application/x-java-applet;jpi-version=1.4.1_02
SOL_VERSION=application/x-java-applet;jpi-version=1.4.1_02•
Modified Entries for Java Plug-in 1.4.1_05:
WIN_IE_VERSION=clsid:CAFEEFAC-0014-0001-0005-ABCDEFFEDCBA
WIN_NS_VERSION=application/x-java-applet;jpi-version=1.4.1_05
SOL_VERSION=application/x-java-applet;jpi-version=1.4.1_05
Note
Do not change the following entry:
IE_PLUGINS_PAGE=/plugin/j2re-1_4_1_02-windows-i586-i.exeStep 3
Save the modified javaplugin.properties file
Step 4
Restart the CiscoWorks Common Services Daemon Manager.
Step 5
Update each Windows client as follows:
a.
Download Java Plug-in 1.4.1_05 for Windows.
b.
Install the Java Plug-in on the client according to Sun's instructions.
c.
Close any running browser instances and start them again.
Step 6
Update each Solaris client as follows:
a.
Download Java Plug-in 1.4.1_05 for Solaris
b.
Install the Java Plug-in on the client according to Sun's instructions.
c.
Locate the jpi.profile and jpi.cshrc files on the client and change the
MOZ_PLUGIN_PATH, NPX_PLUGIN_PATH, NPX_JRE_PATH, and similar variables in these files to reflect the path to Java Plug-in 1.4.1_05. For example, assuming that 1.4.1_02 was installed in /opt/jre14102, and that 1.4.1_05 is installed in /opt/jre14105:Change:
MOZ_PLUGIN_PATH=/opt/jre14102/j2re1.4.1_02/plugin/sparc/ns610To:
MOZ_PLUGIN_PATH=/opt/jre14105/j2re1.4.1_05/plugin/sparc/ns610.d.
Close any running browser instances and start them again.
Step 7
Update each Solaris client using Netscape 7.0 as follows:
a.
Modify the links to point to the links for Java Plug-in 1.4.1_05:
Change:
"NS7_HOME"/plugins/libjavaplugin_oji.soTo:
"JPI1.4.1_05_HOME"/plugin/sparc/ns610/libjavaplugin_oji.sob.
Source /jpi.cshrc or /jpi.profile.
c.
Close any running browser instances and start them again.
Prerequisites for CiscoWorks VMS 2.2 Update 1
Ensure that you have completed the following tasks before installing VMS 2.2 Update 1. Once you have completed these tasks, you can go on to install this Update using the instructions in the "Installing VMS 2.2 Update 1" section.
Step 1
Install CiscoWorks Common Services 2.2 and the VMS components to be updated. For details, see Quick Start Guide for the VPN/Security Management Solution 2.2 described in the "CiscoWorks VMS 2.2 Documentation" section.
Note
If you decide not to install one or more of the VMS components at this point, then decide to install them later, you must reapply VMS 2.2 Update 1 after you install these missing applications.
Step 2
If you installed Resource Manager Essentials (RME), you must also install Incremental Device Update (IDU) 5.0 for Resource Manager Essentials 3.5. IDU 5.0 for RME 3.5 is available to download IDU from Cisco.com at the following URL: http://www.cisco.com/pcgi-bin/tablebuild.pl/cw2000-rme.
CautionIf you have received the OpenSSL 0.9.7 patch for CiscoWorks Common Services 2.2 (see bug ID CSCec43722), be sure to install it after you install VMS 2.2 Update 1. If you have already installed the OpenSSL patch, you must reinstall it after you install VMS 2.2 Update 1.
Downloading VMS 2.2 Update 1
CiscoWorks VMS 2.2 Update 1 is available for download on the Cisco Software Center site at: http://www.cisco.com/public/sw-center/cw2000/vms-planner.shtml.
Installing VMS 2.2 Update 1
Note
Before installing VMS 2.2 Update 1 on either platform, make sure you have completed the tasks listed in the "Prerequisites for CiscoWorks VMS 2.2 Update 1" section.
VMS 2.2 Update 1 is provided as a single installable file. Use the appropriate procedure to install it:
•
Installing CiscoWorks VMS 2.2 Update 1 on Windows
•
Installing CiscoWorks VMS 2.2 Update 1 on Solaris
Note
You cannot uninstall VMS 2.2 Update 1 after you install it.
Installing CiscoWorks VMS 2.2 Update 1 on Windows
To install CiscoWorks VMS 2.2 Update 1 on Windows:
Step 1
Do one of the following steps:
•
Run the installation setup script by unzipping the file CiscoWorks-VMS-2.2-Update-1-w2k-k9.zip first double-click the file CiscoWorks-VMS-2.2-Update-1-w2k-k9.exe, then double-click the file autorun.exe
or
•
Select Start > Run and navigate to the location of the file CiscoWorks-VMS-2.2-Update-1-w2k-k9.exe in order to run the autorun.exe file. The CiscoWorks VMS 2.2 Update 1 confirmation dialog box appears.
Step 2
Click Yes.
The Welcome screen appears.
Step 3
Click Next to continue.
The Software License Agreement window opens. To install CiscoWorks VMS 2.2 Update 1 you must accept this agreement.
Step 4
Click Yes to continue.
The installation program checks dependencies and system requirements. The System Requirements dialog box appears.
The System Requirements dialog displays the system requirements, available space in the disk drive and temp directory, and available memory in megabytes.
Step 5
Click Next to Continue.
The Summary dialog box appears, displaying the updates that will be installed and the settings for the installation.
Step 6
Click Next to Continue.
The setup screen appears, displaying installation progress while files are copied and applications are configured.
The Setup Complete screen appears.
Note
If the system you are updating has had some, but not all, of these updates previously installed, the install script will list the new updates and those it will reinstall. Enter 1 to install only the new updates not yet present on the system. Enter 2 to install all new updates and reinstall all old updates.
Step 7
Click Finish.
Step 8
To verify the installation:
a.
Launch CiscoWorks.
b.
Select Server Configuration > About the Server > Applications and Versions.
The About the Server page is displayed.
c.
If the VMS 2.2 Update 1 installation was successful, you will see the following entries in the Packages Installed table on this page:
Name
Version Installed PatchesCiscoWorks Common Services with SP2
CiscoWorks Common Services with SP2
2.2
2
Resource Manager Essentials with Update 11
Resource Manager Essentials with Update 1
3.5
3
VPN Monitor Update2
VPN Monitor Suite
1.2.1
1
IDS MC and Security Monitor3
IDS MC
1.2
1
1 This will be visible only if you have installed RME.
2 This will be visible only if you have installed VPN Monitor.
3 This will be visible only after you have installed IDS MC and Security Monitor.
Installing CiscoWorks VMS 2.2 Update 1 on Solaris
Note
If you have downloaded VMS 2.2 Update 1 for Solaris, you must first extract the installable files from CiscoWorks-VMS-2.2-Update-1a-sol-k9.tar.
To install the VMS 2.2 Update 1 on Solaris:
Step 1
Log in as root on the system on which you installed Common Services.
Note
The user installing VMS 2.2 Update 1 must have superuser privileges on the system being updated.
Step 2
Untar the CiscoWorks-VMS-2.2-Update-1a-sol-k9.tar file.
Step 3
Copy the file setup.sh to the appropriate directory.
Step 4
Start the installation using one of the following methods:
•
For a local installation, enter:
# sh ./setup.sh
•
For a remote installation, enter:
# cd remotedir
# sh ./setup.sh
where remotedir is the remote location where the CD-ROM is mounted.
The Software License Agreement (SLA) appears.
Step 5
Accept the SLA to continue.
The setup script displays a list of the updates to be installed or reinstalled. Press any key to install or reinstall all of the updates, or enter q to cancel installation.
Note
If the system you are updating has had some, but not all, of these updates previously installed, the install script will list the new updates and those it will reinstall. Enter 1 to install only the new updates not yet present on the system. Enter 2 to install all new updates and reinstall all old updates.
When you press Enter, files are copied and applications are configured. Installation takes approximately 15 minutes.
When installation is finished, the setup script exits.
Step 6
To verify the installation:
a.
Launch CiscoWorks.
b.
Select Server Configuration > About the Server > Applications and Versions.
The About the Server page is displayed.
c.
If the VMS 2.2 Update 1 installation was successful, you will see the following entries in the Packages Installed table on this page:
Name
Version Installed PatchesCiscoWorks Common Services with SP2
CiscoWorks Common Services with SP2
2.2
2
Resource Manager Essentials with Update 11
Resource Manager Essentials with Update 1
3.5
3
VPN Monitor Update2
VPN Monitor Suite
1.2.1
1
1 This will be visible only if you have installed RME.
2 This will be visible only if you have installed VPN Monitor.
Known Problems
This section contains:
•
CiscoWorks Common Services SP2: Known Problems
•
Java Plug-in 1.4.1_02: Known Problems
•
Resource Manager Essentials 3.5 Update 1: Known Problems
•
VPN Monitor 1.2.1 Known Problems
Note
To obtain more information about known problems, access the Cisco Software Bug Toolkit at http://www.cisco.com/pcgi-bin/Support/Bugtool/home.pl. You will be prompted to log in to Cisco.com.
CiscoWorks Common Services SP2: Known Problems
Table 4 lists problems known to affect CiscoWorks Common Services 2.2 with Service Pack 2 (including CiscoView 5.5 Update 1) on Solaris. Table 5 lists problems known to affect the same products on Windows platforms.
Java Plug-in 1.4.1_02: Known Problems
Table 6 lists problems known to affect Java Plug-in 1.4.1_02.
.
Resource Manager Essentials 3.5 Update 1: Known Problems
Table 7 lists problems known to affect RME 3.5 Update 1.
VPN Monitor 1.2.1 Known Problems
Table 8 lists problems known to affect RME 3.5 Update 1.
Resolved Problems
Table 9 describes previously reported problems in CiscoWorks Common Services SP2 by installing VMS 2.2 Update 1 and Firewall MC 1.2.2.


