Sentriant AG Software Installation Guide, Version 5.2 Extreme Networks, Inc. 3585 Monroe Street Santa Clara, California 95051 (888) 257-3000 (408) 579-2800 http://www.extremenetworks.
AccessAdapt, Alpine, Altitude, BlackDiamond, EPICenter, Essentials, Ethernet Everywhere, Extreme Enabled, Extreme Ethernet Everywhere, Extreme Networks, Extreme Standby Router Protocol, Extreme Turbodrive, Extreme Velocity, ExtremeWare, ExtremeWorks, ExtremeXOS, Go Purple Extreme Solution, ScreenPlay, Sentriant, ServiceWatch, Summit, SummitStack, Triumph, Unified Access Architecture, Unified Access RF Manager, UniStack, the Extreme Networks logo, the Alpine logo, the BlackDiamond logo, the Extreme Turbodriv
Table of Contents List of Figures ................................................................................................................................. 1 List of Tables .................................................................................................................................. 1 Chapter 1: What You Need to Get Started.......................................................................................... 1 Chapter 1: Deployment Flexibility ................................
Upgrading without an Internet Connection .............................................................................25 Upgrading from Sentriant AG v4.x and Sentriant AG v5.0 prior to v5.0-40103....................25 Upgrading from Sentriant AG v5.0-40103 or later ............................................................26 Upgrading from the Command Line.......................................................................................26 Upgrading from the Sentriant AG User Interface................
List of Figures Figure Figure Figure Figure Figure Figure Figure Figure Figure Figure Figure Figure Figure Figure Figure Figure Figure Figure Figure Figure Figure Figure Figure Figure Figure Figure Figure Figure Figure Figure Figure Figure Figure Figure Figure 1: 2: 3: 4: 5: 6: 7: 8: 9: 10: 11: 1: 2: 3: 4: 1: 2: 3: 4: 5: 6: 7: 8: 9: 10: 11: 12: 13: 14: 15: 16: 17: 18: 19: 20: Single-server Installation, Quarantine Method, Inline ....................................................
List of Figures 2 Sentriant AG Software Installation Guide, Version 5.
List of Tables Table 1: Sentriant AG System Requirements.............................................................................1 Sentriant AG Software Installation Guide, Version 5.
List of Tables 2 Sentriant AG Software Installation Guide, Version 5.
1 What You Need to Get Started You need the following prior to installing and running Sentriant AG: ● Minimum system (hardware and software) requirements—See “System Requirements” on page 1 ● IP addresses you will enter during the set up process—See “Installation and Configuration Check List” on page 1 ● Install CD—See “Installing Sentriant AG” on page 3 This Installation Guide helps you install and set up Sentriant AG.
What You Need to Get Started 2 Sentriant AG Software Installation Guide, Version 5.
1 Deployment Flexibility Sentriant AG Version 5.2 allows you to deploy multiple Enforcement servers (ESs) across a network and manage them from one central Management server (MS). You create logical groups of ESs by joining them to an Enforcement cluster. The Sentriant AG MS specifies many aspects of the Enforcement clusters; for example, the MS specifies the enforcement method (inline, DHCP, or 802.
Deployment Flexibility The following figures illustrate various deployment methods. Figure 1: Single-server Installation, Quarantine Method, Inline Figure 2: Multiple-server Installation, Quarantine Method, Inline 2 Sentriant AG Software Installation Guide, Version 5.
Deployment Flexibility Figure 3: Single-server Installation, Quarantine Method, DHCP, Flat Network Figure 4: Multiple-server Installation, Quarantine Method, DHCP Sentriant AG Software Installation Guide, Version 5.
Deployment Flexibility Deploying Sentriant AG Inline The ES’s position in the network is between the endpoints and the rest of the network; acting as a gateway and only allowing endpoints access to network resources that have met the necessary security requirements. Sentriant AG uses two network interfaces to bridge traffic between endpoints and the rest of the network. Sentriant AG uses a high-speed, Layer 2 bridge; network IP address changes are not required.
Deployment Flexibility These DHCP settings effectively restrict all network access except to the IP addresses and networks specified as static routes in the accessible endpoints and services area. A list of Web sites can also be configured as accessible. You can access these Web sites through a proxy server, which is built into the Sentriant AG ES. The Sentriant AG ES responds to DHCP INFO requests to automatically configure the proxy server in the browser.
Deployment Flexibility The following figure shows an example installation scenario for a simple (one LAN) setup with enforcement using ACLs on a router. Figure 5: Single-server Installation, DHCP Mode, Simple Example 6 Sentriant AG Software Installation Guide, Version 5.
Deployment Flexibility The following figure shows an example installation scenario for a complex (multiple LAN) setup with enforcement using ACLs on a router. Figure 6: Single-server Installation, DHCP Mode, Complex Example Sentriant AG Software Installation Guide, Version 5.
Deployment Flexibility The following figure shows an example installation scenario for a setup with enforcement with static routes on the endpoint. Figure 7: Single-server Installation, Endpoint Static Route Enforcement Deploying Sentriant AG Using 802.1X To configure Sentriant AG as 802.1X-enabled, install it with one of three different configurations, depending on your network environment (see Figure 8): 1 Use the built-in Sentriant AG RADIUS server to proxy to any other RADIUS server.
Deployment Flexibility NOTE With a single-server Installation, the ES instructs the switch in which VLAN to place the endpoint. NOTE If the ES cannot see traffic on a mirrored port on a switch, you must configure a remote host for Device Activity Capture (DAC) as described in the User’s Guide, Remote Device Activity Capture. Sentriant AG Software Installation Guide, Version 5.
Deployment Flexibility A sample deployment is shown in the following figure: Figure 8: 802.1X Enforcement 10 Sentriant AG Software Installation Guide, Version 5.
Deployment Flexibility Installing the Network Interface Cards The number of network interface cards (NICs) required depends on the installation method selected as described in this section. Inline The inline installation of Sentriant AG, where the MS and ES are installed on a single server, requires two network interface cards (NICs) installed for Sentriant AG to operate properly.
Deployment Flexibility DHCP A DHCP installation requires two NICs where the MS and ES are installed on the same server (see Figure 10), and at least three NICs where the MS and ES are installed on different servers; one for the MS and two for each ES. Figure 10: Single-server Installation, Ethernet Card Installation, DHCP 802.1X 802.
Deployment Flexibility other networks. Usually, mirroring the ports in which the DNS and DHCP server resides detects new endpoints sufficiently. Figure 11: Single-server Installation, Ethernet Card Installation, 802.1X NOTE It is strongly recommended that you use the Intel NIC cards. If you use a different NIC card, you might be unable to connect, or experience unpredictable results and availability.
Deployment Flexibility # ethtool eth0 Settings for eth0: Supported ports: [ MII ] Supported link modes: 10baseT/Half 10baseT/Full 100baseT/Half 100baseT/Full 1000baseT/Half 1000baseT/Full Supports auto-negotiation: Yes Advertised link modes: 10baseT/Half 10baseT/Full 100baseT/Half 100baseT/Full 1000baseT/Half 1000baseT/Full Advertised auto-negotiation: Yes Speed: 100Mb/s Duplex: Full Port: Twisted Pair PHYAD: 1 Transceiver: internal Auto-negotiation: on Supports Wake-on: g Wake-on: d Current message level:
Deployment Flexibility ● Router IP—10.1.90.254, on a /24 ● Sentriant AG IP—10.1.90.130, on a /24 ● VPN concentrator IP—10.1.90.131, on a /24 ● VPN client IP range—10.1.105.0/24 The VPN concentrator is configured to hand out IP addresses on the 10.1.105.0/24 subnet, while Sentriant AG and the VPN concentrator itself are on the 10.1.90.0/24 subnet. Both Sentriant AG and the VPN concentrator have a default route set through 10.1.90.
Deployment Flexibility # explicit routes for VPN subnets should go to the VPN router, # not the default gateway # /sbin/route add -net 10.1.105.0/24 gw 10.1.90.131 Where, for other network configurations or additional VPN profiles you need to add routes appropriate to the subnet or subnets involved. 16 Sentriant AG Software Installation Guide, Version 5.
1 System Requirements There are several required elements you must have or configure when setting up your network for Sentriant AG: ● “General System Requirements” on page 1 ● “Specific System Requirements” on page 3 ● “Enforcement Methods Requirements” on page 11 General System Requirements The following hardware and software is required to install and operate Sentriant AG.
System Requirements Table 1: Sentriant AG System Requirements Item Required Processor Intel Dual Core (Core 2 Duo/Xeon 5100 series) processor at 1.86 GHz (or greater) RAM 2 GB RAM (or greater) Disk space 80 GB SATA disk (or greater) Multiple-server installation: 10/100/1000 (Intel) MS installation—One server-class network interface cards (NICs) and— ES installation— DHCP—Two server-class network interface cards (NICs) Inline—Two server-class network interface cards (NICs) 802.
System Requirements NOTE The hardware and memory requirements for Sentriant AG v5.0 are not the same as older versions. The software will not prevent you from upgrading; however, you may experience performance issues if your hardware and memory are less than that specified. NOTE It is strongly recommended that you use the server-class Intel NIC cards. If you use a different NIC card, you might be unable to connect, or experience unpredictable results and availability.
System Requirements ■ Enterasys 1H582-25 (software version 03.05.06) ■ Extreme Extreme Network Switches running EXOS version 11.2.2.4 or later ■ Foundry FastIron Edge 9604 (software version FES 3.5 and above) FastIron Edge (FES) 4802 (software version FES 3.4 and above) ■ HP ■ ● ProCurve 3400cl-24G (software version M.10.20) ● ProCurve 2650 (software version H.08.86) ● ProCurve 2824 (software version I.08.105) ● ProCurve 2900 (software version T.11.
System Requirements To allow pop-up windows in Mozilla: Mozilla browser>>Edit>>Preferences>>Privacy & Security>>Popup Windows 1 Select the Block unrequested popup windows check box. 2 Click Allowed sites. 3 Enter the IP address or partial IP address of the Sentriant AG MS. 4 Click Add. 5 Click OK. 6 Click OK. To allow pop-up windows in Windows or Linux Firefox: Firefox browser>>Tools>>Options>>Content 1 Clear the Block Popup Windows check box. 2 Click OK.
System Requirements To allow Active Content to display: 1 Click on the message box to display the options (Figure 2). Figure 2: IE Security Message Options 2 Select Allow Blocked Content. The Security Warning window appears: Figure 3: IE Security Warning Pop-up Window 3 Click Yes on the Security Warning window.
System Requirements 1 In the Internet Options pop-up window, scroll down to the security section. 2 Select the Allow active content to run in files on my computer check box. 3 Click OK. Minimum Font Size In order to properly display the Sentriant AG user interface, do not specify the minimum font size. To clear the Internet Explorer minimum font size: IE browser>>Tools>>Internet options>>General tab>>Accessibility button 1 Make sure all of the check boxes are cleared on this window. 2 Click OK.
System Requirements 3 Click OK. 4 Close the Content window. Page Caching To set the Internet Explorer page caching options: Internet Explorer browser>>Tools>>Internet Options 1 Select the General tab 2 Click Settings. 3 In the Check for new versions of stored pages area, select the Automatically radio button. 4 Click OK. 5 In the Internet Options dialog box, click the Advanced tab. 6 Scroll down to the Security area. Clear the Do not save encrypted pages to disk check box. 7 Click OK.
System Requirements 2 Select the Delete all offline content check box. 3 Click OK. 4 Click OK. To delete temporary files in Mozilla: Mozilla browser>>Edit>>Preferences 1 Select the plus (+) symbol next to Advanced to expand the topic. 2 Select Cache. 3 Click Clear Cache. To delete temporary files in Windows or Linux Firefox: Firefox browser>>Tools>>Options>>Privacy 1 In the Private Data area, click Settings. The Clear Private Data window appears. 2 Select the Cache check box. 3 Click OK.
System Requirements Operating Systems Supported When Sentriant AG is installed on the dedicated server, the required operating system is also installed on the dedicated server. The end-user endpoints that can be tested for this release must have one of the following operating systems: ● ● ● ● ● Mac OS X ■ Mac OS X version 10.3.7 or later. ■ Both the PowerPC and Intel Macintosh computers are supported Windows Server 2003 ■ Service Pack: SP1 ■ Language Support: U.S.
System Requirements ■ Odyssey (Funk Software/Juniper® Networks) Supplicant Enforcement Methods Requirements The following enforcement methods have the following associated requirements: ● Sentriant AG cannot test multiple endpoints behind a Network Address Translation (NAT) server. ● DHCP (all modes) ● ● ● ● ● ■ Sentriant AG must be inline with the DHCP server. ■ Sentriant AG supports Microsoft's DHCP server and ISC. ■ Sentriant AG does not support PXE boot with DHCP.
System Requirements 12 Sentriant AG Software Installation Guide, Version 5.
1 Installing Sentriant AG You have two installation options: ● Install Sentriant AG for the first time (see “Installing Sentriant AG for the First Time”) ● Upgrade to a newer version of Sentriant AG (see “Upgrading Sentriant AG to a Newer Version” on page 24) Installing Sentriant AG for the First Time For first-time installations, use the install CD. Create an install CD from an International Organization for Standardization (ISO) image downloaded from the Extreme Networks, Inc. Web site.
Installing Sentriant AG 4 A pop-up window appears instructing you to select a directory in which to save the file. Navigate to a location that you will remember when it is time to create the install CD. Click Save. 5 The download window appears, showing the status of the download process. This download can take a lot of time, depending on your connection speed.
Installing Sentriant AG Where 8 is the speed of your burner, and /tmp/imagefile.iso is the path and file name of the ISO file you wish to copy. Installing Sentriant AG When you install the Sentriant AG software for the first time, you need to put the Sentriant AG CD directly into the computer that will be the Sentriant AG server (MS or ES). You cannot install any other software on this computer. Installing the Sentriant AG software also installs the operating system (OS) that Sentriant AG uses.
Installing Sentriant AG a Create clusters (see “Creating an Enforcement Cluster” on page 19). b Add enforcement servers to defined clusters (see“Adding an ES to a Cluster” on page 22) 6 Configure Sentriant AG (see the Sentriant AG Version 5.2 Users Guide). Locating and Verifying Server Hardware To verify the server requirements: 1 Locate the computer you will be using for the Sentriant AG server.
Installing Sentriant AG e Ethernet cards—You must know the quarantine (deployment) method you are going to use when setting up your network, as each method has the following specific Ethernet card requirements: Single-server installation—When the MS and ES are installed on the same server, you need two Ethernet cards.
Installing Sentriant AG NOTE Your system may require a different gateway. Check with your network administrator if you have problems or are unsure of which gateway IP address to use. ● Primary nameserver IP address (DNS server)—The IP address of the server that you use to convert hostnames to IP addresses. For example: 204.74.112.1. To find the current DNS server: Linux – Look in the /etc/resolv.conf file for the nameserver entry.
Installing Sentriant AG NOTE If the dedicated server is not configured to boot from the CD drive, edit the basic input/output system (BIOS) options as described in your server’s documentation. Figure 1: Install Screen, Boot Prompt 3 At the boot prompt, type one of the following: ■ install—This is the default option that works on most systems.
Installing Sentriant AG 4 Press [Enter]. The Installation Confirmation screen appears:. Figure 2: Install Screen, Installation Confirmation 5 On the Installation Confirmation screen, type install and select OK. The Network Configuration for eth0 screen appears. NOTE Use the [Tab], [spacebar], and [Enter] keys to navigate between fields and make selections on the install screens.
Installing Sentriant AG Figure 3: Install Screen, Network Configuration for eth0 7 Select OK. The Miscellaneous Network Settings screen appears: Figure 4: Install Screen, Miscellaneous Network Settings Sentriant AG Software Installation Guide, Version 5.
Installing Sentriant AG 8 On the Miscellaneous Network Settings screen, enter the Gateway and Primary DNS, (and Secondary DNS and Tertiary DNS if you use them). Select OK. The Hostname Configuration screen appears: Figure 5: Install Screen, Hostname Configuration 9 On the Hostname Configuration screen, enter the hostname. This name must be the fully qualified domain name (FQDN). Select OK.
Installing Sentriant AG Figure 6: Install Screen, Time Zone Selection 10 On the Time Zone Selection screen, select the time zone. Select OK. The Root Password screen appears: NOTE Make sure that you select a root password that is easy for you to remember but difficult for others to guess. Sentriant AG Software Installation Guide, Version 5.
Installing Sentriant AG Figure 7: Install Screen, Root Password 11 On the Root Password screen, enter a root password for the Sentriant AG server. Enter a secure password that you can remember, and retype the password to confirm it. Select OK. The Extreme Networks, Inc. Sentriant AG installation type screen appears: Figure 8: Install Screen, Installation Type 12 On the Extreme Networks, Inc. Sentriant AG installation type screen, select Both. 12 Sentriant AG Software Installation Guide, Version 5.
Installing Sentriant AG 13 Select OK. The Installation progress screen appears (Figure 9). Figure 9: Install Screen, Installation Progress 14 Wait. Installation can take a few minutes. 15 When installation is complete, remove the CD. NOTE If the server reboots before you remove the CD, the boot prompt appears again. Remove the CD and reboot the server to start Sentriant AG. 16 The server reboots and starts Sentriant AG.
Installing Sentriant AG d Wait. Installation can take a few minutes. e When installation is complete, remove the CD. NOTE If the server reboots before you remove the CD, the boot prompt appears again. Remove the CD and reboot the server to start Sentriant AG. f The server reboots and starts Sentriant AG. 2 Install the ES software: a Perform the steps described in “Creating a Single-server Installation”: step 1 on page 6 through step 11 on page 12. The Extreme Networks, Inc.
Installing Sentriant AG ■ Linux: Mozilla Firefox v1.5 or later, Mozilla v1.7 ■ Mac OS X: Mozilla Firefox v1.5 or later 2 Using https://, point your browser to the IP address or host name of the Sentriant AG server (for example, https://10.0.64.25). 3 You might be prompted with a security alert because Sentriant AG uses a secure communication connection (SSL) (Figure 10). Click Yes. The Accept license agreement window appears (Figure 11).
Installing Sentriant AG Figure 11: Accept License Agreement Window 4 Accept the license agreement: a If you do not wish to accept the license agreement, click I do not accept this license agreement, or b Read the Sentriant AG End-User License Agreement (EULA) and select I Accept this license agreement. 16 Sentriant AG Software Installation Guide, Version 5.
Installing Sentriant AG c Click Next. The Enter management server settings window appears. Figure 12: Enter Management Server Settings Window 5 The Date and time area is prepopulated with values entered during the initial installation process. Change any of the following if necessary: ■ Region—Select a region from the drop-down list. ■ Time zone—Select a time zone from the drop-down list. ■ NTP servers—Enter one or more Network Time Protocol (NTP) servers, separated by commas.
Installing Sentriant AG c Enter the port used for connecting to the proxy server in the Proxy server port text box. For example, 8080. d If your proxy server is authenticated, select the Proxy server is authenticated check box and enter the following: 1) Select the scheme used to authenticate credentials on the proxy server from the Authentication method drop-down list. The following methods are supported: Basic—The original and most compatible authentication scheme for HTTP.
Installing Sentriant AG NOTE An internet connection is required to register/activate the license. The license key is registered to the server once the activation is complete and cannot be moved to another machine without first contacting Technical Assistance Center (TAC). CAUTION If you use a proxy server, your license key will not validate from this window unless you have performed step 7 on page 17.
Installing Sentriant AG 2 Using the administrator User ID and Password you created in step 10 on page 19, log in to the Sentriant AG user interface. The Sentriant AG Home window appears: Figure 15: Sentriant AG Home Window NOTE The Sentriant AG home window displays the System configuration menu option only for users with administrator permissions. You will see different menu options based on your permissions, which are defined as user roles. 20 Sentriant AG Software Installation Guide, Version 5.
Installing Sentriant AG 3 Select System Configuration. The System configuration, Enforcement clusters & servers window appears: Figure 16: Enforcement Clusters & Servers Sentriant AG Software Installation Guide, Version 5.
Installing Sentriant AG 4 Click Add an Enforcement cluster. The Add an Enforcement cluster window appears, with the General menu option selected by default. Figure 17: Add Enforcement Cluster Window 5 In the Add Enforcement cluster window, General area, enter a name for the cluster in the Cluster name field. 6 On the NAC policy set drop-down list, select Default. 7 Before Sentriant AG is fully functional, you must select the operating parameters for each cluster; however, you do not have to do this now.
Installing Sentriant AG 1 Click add an enforcement server. The Add enforcement server window appears: Figure 18: Add Enforcement Server Window 2 Select the cluster name for this enforcement server from the Cluster drop-down list. 3 Enter the IP address of this enforcement server in the IP address text box. 4 The SSH user name must be for an account with sufficient privileges to install certificates. Enter the user name in the SSH User name text box.
Installing Sentriant AG 7 Click ok to add the server. A progress window appears. It can take a minute or so to add the server. The System configuration window appears showing the server joined to the cluster: Figure 19: System Configuration, Enforcement Clusters & Servers Window 8 Click ok to return to the Home window. CAUTION The MS must have the same version of software installed as the ES you are adding or you will get an exception error.
Installing Sentriant AG ● “Creating an upgrade CD from the download” on page 29 ● “Upgrading from a CD” on page 29 Your upgrade options are as follows: To upgrade with an Internet connection: ● v4.x, and prior to v5.0-40103—Upgrade to v5.0-40103 from the command line, then upgrade to the current build from the Sentriant AG user interface. ● v5.0-40103—Upgrade to the current build from the Sentriant AG user interface. To upgrade without an Internet connection: ● ● v4.x, and prior to v5.
Installing Sentriant AG Upgrading from v4.x is supported only if you are creating a single-server installation where the Management server (MS) and Enforcement server (ES) are on the same physical server. Upgrades from 4.x to a distributed system (separate MS and ESs) are not supported. To create the installation CDs for upgrading with no Internet connection: 1 Create the v5.
Installing Sentriant AG 1 Use secure socket shell (SSH) to access the Sentriant AG device using an SSH client such as PuTTY or log in to the console directly. You can download PuTTY from the following location: http://the.earth.li/~sgtatham/putty/latest/x86/putty.exe 2 Log in as user root using the password you set during installation.
Installing Sentriant AG Figure 20: System Configuration Window, Management Server Option 1 Click check for upgrades in the System upgrade area. A progress window appears. 2 A status window appears indicating if upgrades are available. a If no upgrades are available: 1) Click ok to clear the status window. 2) Click ok to return to System configuration. 28 Sentriant AG Software Installation Guide, Version 5.
Installing Sentriant AG b If an upgrade is available, click yes to upgrade your system. CAUTION Installation of an upgrade can take several hours to download all the software. You can continue to use Sentriant AG during the download process. Sentriant AG will automatically shutdown and restart after the software downloads. 3 After the upgrade is complete, log back in to the Sentriant AG user interface navigate to the Test updates window (System configuration>> Test updates).
Installing Sentriant AG 4 Follow the instructions in the Sentriant AG Installation Guide Upgrading from the Command Line. 5 If the server needs to reboot it will ask you to do that. To upgrade from a system running 5.0-40103 to (but not including) 5.0-40110, perform the following steps: Command line window 1 Place the install CD in the filesystem that is NOT the generic mnt area. See http://www.linux.com/base/ ldp/howto/CDROM-HOWTO/x289.html#AEN980 for more information on Linux mnt.
1 Configuring Sentriant AG The System configuration window allows you to set the Sentriant AG operating parameters Sentriant AG Home window>>System configuration The Sentriant AG Users Guide provides detailed instructions for configuring Sentriant AG. If you experience problems, or have questions, contact Extreme Networks, Inc. Technical Assistance Center (TAC) (support@extremenetworks.com or call (800) 998-2408). Sentriant AG Software Installation Guide, Version 5.
Configuring Sentriant AG 2 Sentriant AG Software Installation Guide, Version 5.
1 Installation and Configuration Check List Minimum System Requirements Required fields are indicated by a red asterisk (*). Dedicated server * with: Memory (21 GB RAM) *: ___________________________________________________ Disk space (8036 GBSATA disk drive (or greater)) *: _________________________________ Two (standard/802.1X) server-quality NIC cards (Intel) *: ______________________ CD-ROM drive * For license validation and test updates: http://update.sentriantag.
Installation and Configuration Check List I have access to the installation site(s) I do not have access to the installation site(s) Installation Media Required fields are indicated by a red asterisk (*). One of the following: * Install CD Upgrade link: (provided to Extreme Networks, Inc.
Installation and Configuration Check List Sentriant AG user interface administrator account name: * _____________________________ Sentriant AG user interface administrator account password: * _________________________ SMTP server IP address: ___________________________________________________________ Multiple-server Installations Required fields are indicated by a red asterisk (*). The MS is installed on one physical server; each ES is installed on a unique physical server.
Installation and Configuration Check List ES Netmask IP address (Network mask): * ___________________________________________ Default gateway IP address: * ______________________________________________________ Primary nameserver IP address (DNS server): * ______________________________________ Secondary nameserver IP address (DNS server): ______________________________________ Tertiary nameserver IP address (DNS server): _________________________________________ ES hostname (FQDN): * ________
Installation and Configuration Check List Create at least one ES.
Installation and Configuration Check List Administrator user ID: * ____________________________________________________ Administrator password: * __________________________________________________ Cluster 2: Windows domain name: * ___________________________________________________ Administrator user ID: * ____________________________________________________ Administrator password: * __________________________________________________ Cluster 3: Windows domain name: * _______
Installation and Configuration Check List Filter: * ________________________________________________________ Password attribute: * _____________________________________________ End-user credentials user name: * __________________________________ End-user credentials Password: * __________________________________ 802.1X Devices Required fields are indicated by a red asterisk (*). Define 802.1X devices globally for all clusters, or on a per-cluster basis. 802.
Installation and Configuration Check List NOTE If you select DHCP quarantine, you must create at least one area or you will get a process error.
Installation and Configuration Check List Windows domain controller: _________________________________________________ Accessible services and endpoints for cluster 2: Web sites: __________________________________________________________________ Hostnames: ________________________________________________________________ IP addresses / ports: ________________________________________________________ Networks: _________________________________________________________________ Windows doma
Installation and Configuration Check List Test Exceptions Exceptions are defined for all clusters or on a per-cluster basis.
Index Numerics D 802.
Index Security Alert Window 15 Single-server Installation, DHCP Mode, Complex Example 7 Single-server Installation, DHCP Mode, Simple Example 6 Single-server Installation, Endpoint Static Route Enforcement 8 Single-server Installation, Ethernet Card Installation, 802.
Index S single-server environment 6 software and operating system updates 1 SSL 15 static IP addresses 8 static route add to server 15 static routes 4 system requirements 1 T temporary files 8 delete in Mac Firefox 9 delete in Mozilla 9 delete in Windows or Linux Firefox 9 U upgrade from user interface 27 with Internet connection 25 upgrade ISO burn to CD 29 download 29 upgrade without an Internet connection 25 upgrading from the command line 27 Users’ guide 1 V verify server requirements 4 VPN 4 Sentr
Index 4 Sentriant AG Software Installation Guide, Version 5.
