Table of Contents
Router MC Administration
Changing Application Settings
Defining the Auto Update Server (AUS) Settings
Router MC Administration
The Admin tab allows you to define the settings that configure the performance and behavior of the Router MC application, and the Auto Update Server (AUS) settings required for communication between Router MC and the AUS.
The following topics provides information about these settings, that can be configured by an administrator:
Changing Application Settings
If you have Administrator permissions, you can change the settings for the Router MC application. Application settings include activity and job approval settings, settings for historical jobs and activities, and the interior gateway protocol (IGP) process range used when generic routing encapsulation (GRE) is defined.
The Application Settings page is accessed by selecting Admin>Application Settings.
Table 15-1 describes the elements displayed in the Application Settings page.
Table 15-1 Application Settings—GUI Reference
| GUI Element |
Description |
|
Require submission of activities for approval check box
|
If this check box is selected, activities must be submitted for approval by a user with the appropriate permissions. If this check box is not selected, activities do not have to be submitted for approval, but can be approved directly. In general, submission of activities for approval would not be necessary if the same user typically has the authority to define configurations and commit them to the database. See Understanding Activities for more information.
|
|
Require approval of jobs check box
|
If this check box is selected, jobs must be approved by a user with the appropriate permissions before they are deployed. See Understanding Jobs for more information.
|
|
Allow automatic generation of supplementary ACEs check box
|
If this check box is selected, Router MC will automatically generate additional ACEs to ensure that your firewall configurations will be compatible with other configurations, such as VPN configurations, management connections, and so on. These ACEs are in addition to the CLI commands generated by Router MC to implement your policy definitions.
If you prefer to add these ACEs manually when necessary, deselect the check box.
See Automatic ACE Generation in Router MC for more information.
|
|
Maximum Historical Jobs Saved field
|
Enter a number of jobs. Router MC discards any historical jobs that exceed this value. The default value is 30.
Note Any Generated jobs that weren't yet deployed, rejected, or rolled back, will remain in the list, regardless of the value entered in this field.
|
|
Maximum Historical Activities Saved field
|
Enter a number of activities. Router MC discards any historical activities that exceed this value. The default value is 30.
|
|
Clear Audit Records Prior To field
|
Specify a date in the format MM/DD/YYYY, or click the ... button to select a date from a calendar. Router MC will retain only those audit records that were created on or after the specified date.
|
|
... button
|
Click to open a calendar from which you can select the date of the oldest Router MC audit record that you want to keep. Click OK to confirm your selection and close the calendar, or click Cancel to close the calendar without selecting a date.
|
|
Config File Suffix field
|
Enter the file name suffix required for device configuration files being imported into Router MC. In most cases, the suffix should be .cfg.
|
|
Display policy origin in incremental configuration check box
|
Selecting this check box enables you to view the policy source for incremental CLI commands generated for a device, in the View Configs option.
See Viewing Device Configurations for more information.
|
|
GRE Routing Range fields
|
Router MC adds an additional Interior Gateway Protocol (IGP) that is dedicated for IPSec and GRE secured communication. An IGP refers to a group of devices that receive routing updates from one another by means of a routing protocol, either EIGRP or OSPF. Each "routing group" is identified by a logical number, the process number. This process number must be within the range specified in these fields.
Enter an IGP process range to be used when GRE is defined for failover and routing. The default range is 110 to 120. See Understanding GRE for more information.
|
|
HA Standby Group Number (outside) field
|
Enter the standby number of the outside hub interface that matches the external virtual IP subnet, for hubs in an HA group. The number must be within the range of 0-255.
|
|
HA Standby Group Number (inside) field
|
Enter the standby number of the inside hub interface that matches the internal virtual IP subnet, for hubs in an HA group. The number must be within the range of 0-255.
|
|
Apply button
|
Click to confirm your selections and apply them.
|
|
Defining the Auto Update Server (AUS) Settings
If you have Administrator permissions, you can specify the location of the AUS server and provide AUS contact information for Router MC. This information is required by Router MC in order to retrieve information from dynamically addressed devices.
See Importing Devices with Dynamically Assigned IP Addresses and Using DMVPN With GRE for more information.
The Auto Update Server Settings page is accessed by selecting Admin>Auto Update Server Settings.
Table 15-2 describes the elements displayed in the Auto Update Server Settings page.
Table 15-2 Auto Update Server Settings—GUI Reference
| GUI Element |
Description |
|
AUS Location area
|
- IP Address/Host Name: Enter the IP address or host name of the AUS server.
- Port: Enter the number of the AUS port on the AUS server, or accept the default.
|
|
AUS Contact Information for Router MC area
|
- Username: Enter the login name of the authorized AUS user.
- Password: Enter the password of the authorized AUS user.
- Confirm Password: Re-enter the password for confirmation.
|
|
Apply button
|
Click to confirm your selections and apply them.
|
|
