Specifications

14-33

Cisco NAC Appliance - Clean Access Manager Configuration Guide

OL-28003-01

Chapter 14 Administering the CAM

Policy Import/Export

Step 3 Click the Update button. You must click Update each time you change the set of policies to include for

Policy Sync.

Step 4 Add each Receiver to the Master as follows:

a. In the Receiver Host Name/IP text box, type the domain name or IP address of the receiver CAM.

For HA-CAMs, type the Service IP of the CAM HA pair.

b. Type an optional Receiver Description

c. Click the Add button. (To delete a Receiver, you can click the “X” icon in the Action column.)

Note Policy Sync supports a maximum of 10 CAMs or 10 HA-CAM pairs.

Step 5 Authorize each Receiver CAM as described in the following steps. Authorization allows verification of

the Distinguished Name on the SSL certificates of the Master and Receiver CAMs to ensure the

communication between them is secure and limited to the respective parties.

a. Obtain the DN of the Receiver CAM as follows:

–

navigate to Administration > CCA Manager > SSL > x509 Certificate on the Receiver CAM

console

–

click the View button to bring up the Certificate Authority Information dialog.

–

copy the DN entry (Figure 14-16).

Figure 14-16 Copying the DN Information from the Receiver CAM

On the Master CAM, navigate to Administration > CCA Manager > Policy Sync > Configure

Master

c. Paste the DN from the SSL certificate of the Receiver CAM into the List of Authorized Receivers

by Certificate Distinguished Name text box (Figure 14-17).