This README file describes the process necessary to update your Cisco NAC 
Appliance Release 4.7(2) CASs to provide web login (no persistent or temporal
Agents) support for Apple iPads via the "Patch-iPadSupport" file. Once
logged in, iPad client sessions appear in the Online Users list featuring a
"Macintosh All" Operating System type.

This update applies to the following deployment scenarios:

- Wireless In-Band Real-IP Gateway or Virtual Gateway
- Wireless Out-of-Band Virtual Gateway with no IP refresh on client interface 


FILES MODIFIED

/perfigo/access/tomcat/webapps/auth.war


IMPORTANT NOTE

Ensure the following file permissions on your system for root:
  PERM          OWNER  GROUP  FILE_PATH 
  -rwxr-xr-x 1  root   root   /perfigo/access/tomcat/webapps/auth.war


HOW TO APPLY THE PATCH

Note: Only apply this patch to Release 4.7(2) CASs.

1) Retrieve the Patch-iPadSupport.tar.gz file from CCO.
2) Use SCP (or a similar utility) to place the file in the CAS /store directory.
3) Navigate to /store: "cd /store".
4) Extract the patch file contents: "tar zxvf Patch-iPadSupport.tar.gz".
5) Navigate to Patch-iPadSupport: "cd Patch-iPadSupport".
6) Stop services on the CAS: "service perfigo stop".
7) Apply the patch update: "./apply.sh".
8) Restart services on the CAS: "service perfigo start".


FREQUENTLY ASKED QUESTIONS

1. Do I need to apply this patch to the secondary CAS in an HA pair, and what
is the procedure to do so?

Yes. As with any HA update, apply this patch to the Standby CAS first, then 
follow the same procedure for the Active CAS.

2. How will support know that this patch has been applied?

After running the apply.sh script, you can find a /perfigo/access/tomcat/
webapps/auth.war.save file, which is copy of the previous version of the 
auth.war file. View the contents of this file to verify that the patch has 
been applied.

You can also enter the "md5sum /perfigo/access/tomcat/webapps/auth.war"
command, which should return "305efbf67bf81a8f2ee6b63679cadb9a  
/perfigo/access/tomcat/webapps/auth.war".


3. Will this patch be included in future Cisco NAC Appliance releases?

Yes. Future releases of Cisco NAC Appliance will feature web login support for
iPad client devices integrated automatically.


THIS PATCH ADDRESSES THE FOLLOWING DEFECT IDs

CSCtf60530