Table Of Contents
Cisco Physical Access Manager Quick Start Guide for Release 1.2.0
Before You Begin
Installing the Appliance
Logging in to Cisco Physical Access Manager
Entering the Initial Configuration
Installing the Desktop Software
Next Steps
Obtaining Documentation and Submitting a Service Request
Quick Start Guide
Cisco Physical Access Manager Quick Start Guide for Release 1.2.0
1 Before You Begin
Perform the following tasks before you install and configure the Cisco PAM appliance:
•
If upgrading from a previous version of the Cisco PAM server software, see "Appendix B: Upgrading Software and Firmware" in the Cisco Physical Access Manager User Guide.
•Prepare the site, including rack, safety and power. See the Cisco Physical Security Multi Services Platform User Guide for instructions.
Note For Cisco PAM release 1.0.0 and 1.1.0, see the Cisco Physical Access 1125 Appliance User Guide .
•Before connecting power to the Cisco PAM appliance, you need the following:
–A PC and web browser (Internet Explorer 6.0 and higher, or Mozilla Firefox 2.0 and higher).
–An Ethernet cable to connect your PC directly to the Cisco PAM appliance. Cross-over and straight-through cables are supported.
•In addition, gather the following information:
–IP, subnet, and gateway addresses for the Cisco PAM appliance:
–For a standalone server installation, one IP address for Eth0 is required.
–For a redundant (HA) server configuration, two IP addresses are required: One address for the Shared IP Address setting, and a second address for the Eth0 port.
–(Optional) If using NTP synchronization, the address of the NTP server.
–(Optional) The DNS server settings.
–Administrator password. If you are setting up the appliance for the first time, use the default password supplied in the following instructions.
See the Cisco Physical Access Manager User Guide for complete instructions.
2 Installing the Appliance
To physically install the Cisco PAM appliance, complete the instructions in the Cisco Physical Access Manager User Guide, "Installing the Cisco PAM Appliance".
3 Logging in to Cisco Physical Access Manager
1. Connect an Ethernet cable from your PC to the eth0 port on the Cisco PAM appliance.
Note After configuration is complete, disconnect your PC from the Eth0 port and connect the Eth0 port to the IP network.
2. Power on the appliance.
3. Open a web browser on your PC and enter the URL: https://192.168.1.2. Be sure to include the s in https:// to connect your browser to the secure URL.
4. Enter the default username and password:
default username: cpamadmin
default password: cpamadmin
4 Entering the Initial Configuration
A series of initial configuration screens appear the first time you log on to a new Cisco PAM appliance. Enter the configuration settings when prompted. For complete instructions, see "Entering the Initial Server Configuration" in the Cisco Physical Access Manager User Guide.
Step 1 Enter the server configuration, as shown in Figure 1.
Figure 1 Initial Configuration: Server Configuration
Note The version and serial number are not configurable.
a. Type: Select the appliance server type.
–Active Server: (Default) Select Active Server for a single appliance, or if the appliance is the active server in a redundant configuration.
–Standby Server: Select Standby Server if the appliance is the standby (backup) server in a redundant configuration. A standby server must have the exact same configuration settings as the active except the network addressees, hostname, and HA license.
b. Site Name: Enter a description to identify the appliance on the network. This field is disabled for a standby appliance since the standby server assumes the primary server name if a failover occurs. Enter any combination of letters and numbers up to 32 characters. Spaces are not allowed. Dashes and underscore characters are allowed.
Example: SJCsite1.
c. Select Next to continue.
Step 2 Enter the initial User settings to define the administrator password and email address, as shown in Figure 2.
Figure 2 Initial Configuration: User Configuration
a. Username: The admin username cannot be changed. The default username is cpamadmin.
b. Current Password: Enter the current administrator password. The default password is cpamadmin.
c. New Password: Enter a new administrator password. The administrator has full rights to configure the Cisco PAM appliance, and grant access rights to other users. The new password is required and must be entered to continue.
d. Re-enter Password: Re-enter the new administrator password to confirm the setting.
e. Email Address: (Optional) Enter the email address that will receive system messages.
f. Select Next to continue.
Step 3 Enter the Network configuration for the Cisco PAM appliance, as shown in Figure 3.
Figure 3 Initial Configuration: Network Configuration
a. Host Name: Enter the host name on the active appliance. Enter a different host name on the standby appliance. The host name is used to identify the appliance on the local network and does not impact other configurations.
b. Shared IP Address: (HA configurations only). Enter the same IP address on the active and standby appliance. This address is transferred from the active to the standby appliance if a failover occurs.
The Shared IP address and the Eth0 IP address should be on the same subnet. Eth0 and Eth1 can be on separate subnets. See Understanding IP Addresses on the Cisco PAM Server, page 4-4 for more information.
Note Enter a Shared IP Address if you plan to install a Standby server in the future, even if installing only the Active server now. This allows successful HA backups when the Standby server is installed.
c. Transport Port: The default value is 8020. Enter the same number the same on the active and standby appliances.
d. SSL Enable For Server: Click the SSL checkbox to enable or disable secure IP communication between the Cisco PAM appliance and the Cisco Physical Access Gateways. The settings must be the same the same on the active and standby appliances.
Note Cisco Systems recommends that SSL always be enabled for all Gateways and the Cisco PAM appliance (default). If SSL is disabled for a Gateway but enabled for Cisco PAM, the Gateway cannot connect to the appliance. If the SSL settings are changed, reset all Gateways and the Cisco PAM appliance. See the Cisco Physical Access Gateway User Guide for more information.
e. Eth0: (Required) Enter a static IP address for the Eth0 port. If the appliance is a standalone server, this port is the Cisco PAM appliance IP address. In a redundant (HA) configuration, the Eth0 port is used for HA communication between the active and standby appliance. The active appliance must have a different Eth0 IP address than the standby appliance.
–IP Address: Enter the IP address for the Eth0 port. This address should be on the same subnet as the Shared IP address, and must be different on the active and standby appliances.
–Subnet Mask: Enter the subnet mask provided by your system administrator.
–Gateway: (Optional) Enter the Gateway provided by your system administrator.
f. Eth1: This port is disabled by default. You can enable and configure the Eth1 port for remote Internet connections to the Cisco PAM Server Administration utility.
–Enable Interface: Click the check box to enable or disable the Ethernet interface.
–DHCP: Click the check box to enable or disable DHCP. When DHCP is enabled, the IP following address fields are inactive since the information is supplied by a DHCP server.
–IP Address: Enter the IP address for the Eth0 port. If configured, this address must be different on the active and standby appliances.
–Subnet Mask: Enter the subnet mask provided by your system administrator.
–Gateway: (Optional) Enter the Gateway provided by your system administrator. If a Gateway is provided for Eth0, leave this field blank.
g. Select Next to continue.
Step 4 (Optional) Enter the Optional DNS Settings for the Cisco PAM appliance. Enter the same settings on the active and standby appliance.
a. Primary DNS: (Optional) Enter the domain name server (DNS) for the active Cisco PAM appliance.
b. Secondary DNS: (Optional) Enter the domain name server for the standby Cisco PAM appliance.
c. Domain: (Optional) Enter the domain name for the Cisco PAM appliance.
d. Select Next to continue.
Step 5 Enter the email settings used to send messages from the Cisco PAM appliance: Enter the same settings on the active and standby appliance.
a. SMTP Server Address: Enter the SMTP server address used to send outgoing messages. Outgoing messages include event and other alarm information.
b. SMTP Email Address from: Enter the email address that will appear in the From field for messages sent by the Cisco PAM appliance. This email address is also the Reply To address.
c. Test: Click the Test button to send a test message and verify the SMTP settings. The test message is sent to the administrator email address entered in User settings.
d. Select Next to continue.
Step 6 Enter the date and time settings. Enter an initial date and time for the server. These settings are used by the appliance and the Cisco Physical Access Gateways. Enter the same settings on the active and standby appliance.
a. Date & Time: Click the calendar icon to open a pop-up window and select the current day. The current date and time are inserted from your computer's date and time settings.
b. Time Zone: Select the time zone where the appliance is installed.
c. NTP enable: (Optional) Select the checkbox to use a Network Time Protocol (NTP) server automatically adjust the date and time.
d. NTP Server Address: (Optional) If NTP is enabled, enter the IP address of the NTP server.
e. Select Next to continue.
Step 7 Enter the license settings to obtain and install the software license using one of the following methods:
•Option 1: Enter the Product Authorization Key to Download the License File.
•Option 2: Obtain the License File from the Cisco Web Site.
Note Enter all licenses except high availability (HA) on the active appliance. Enter only the HA license on the standby appliance.
Option 1: Enter the Product Authorization Key to Download the License File
To use this method, your PC must be connected to the Internet.
a. Locate the Product Authorization Key (PAK) included with the Cisco Physical Access Manager appliance.
b. Enter the code in the PAK field.
c. Select Finish. The license file will install on the Cisco PAM appliance.
Note If the license file does not download, verify that your PC has Internet access, or use the method described in Option 2: Obtain the License File from the Cisco Web Site.
Option 2: Obtain the License File from the Cisco Web Site
a. Locate the Product Authorization Key (PAK) included with the Cisco Physical Access Manager appliance.
b. In a Web browser, open the Cisco Product License Registration Web page.
http://www.cisco.com/go/license/
c. Follow the onscreen instructions to complete the form and enter the PAK. A license file with the extension .lic is sent to your email address.
d. Save the file to the PC used to configure the Cisco PAM appliance.
e. In the License screen, click Browse to select the license file located on your local drive. The selected filename appears in the File field.
f. Select Finish to install the license file on the Cisco PAM appliance and activates the included features.
Step 8 Wait for the installation to complete. A status screen displays each configuration item as it is applied. When all items are marked Done, the CPAM Server Administration utility status page displays.
Note If any errors occur, the setup returns to Step 1. If a serious error occurs, contact your Cisco support representative for assistance.
Step 9 Create a system backup. You should have at least one backup file to preserve critical system data and to restore the appliance software using the recovery CD.
a. Select the Setup tab, and then select Backup from the Setup List.
b. Click Start Backup to begin the backup process and create a new .zip file. When complete, the new file is added to the top of the list, and named with the current date. For example: bak-08212008-144419.zip.
c. To save the file to another location, right click the filename and select a save option from the browser menu.
Step 10 Disconnect your PC from the Eth0 port and connect the Eth0 port to the IP network.
5 Installing the Desktop Software
When the initial configuration is complete, the CPAM Server Administration utility is displayed. To install the Cisco PAM desktop software, select Launch Client from the menu bar, and complete the onscreen instructions to install the software. This process will install the desktop software, or upgrade an existing version to match the Cisco PAM appliance.
Notes:
•You can also select Launch Cisco PAM Client from the from the login window of the CPAM Server Administration utility.
•Always upgrade the Cisco PAM desktop client when the server software is upgraded. If the versions are not the same, an error will occur when launching the desktop client.
•If the download fails, check your Java Web Start network settings. The Cisco PAM client launches using Java Web Start.
6 Next Steps
Refer to the following Cisco documents for complete installation and configuration information:
•To install and configure the Cisco PAM appliance, see the Cisco Physical Access Manager User Guide.
•To install and configure the Cisco Physical Access Gateways and optional expansion modules, see the Cisco Physical Access Gateway User Guide.
7 Obtaining Documentation and Submitting a Service Request
For information on obtaining documentation, submitting a service request, and gathering additional information, see the monthly What's New in Cisco Product Documentation, which also lists all new and revised Cisco technical documentation, at:
http://www.cisco.com/en/US/docs/general/whatsnew/whatsnew.html
Subscribe to the What's New in Cisco Product Documentation as a Really Simple Syndication (RSS) feed and set content to be delivered directly to your desktop using a reader application. The RSS feeds are a free service and Cisco currently supports RSS version 2.0.
Feedback