Cisco NAC3350-PROF-K9 Hardware Installation Guide - Page 101

Step 21, Step 22, Step 23

Page 101 highlights

Chapter 3 Installing the Clean Access Manager and Clean Access Server Installing the Clean Access Server e. Confirm your choices by entering 1, or use 2 to cancel and start over. The following information has been given: United States Pacific Time Is the above information OK? 1) Yes 2) No #? 1 Step 21 Type and confirm the current date and time, using format hh:mm:ss mm/dd/yy. Updating timezone information... Current date and time hh:mm:ss mm/dd/yy [07:52:52 04/30/07]: 15:52:00 04/30/07 You entered 15:52:00 04/30/07 Is this correct? (y/n)? [y] Mon Apr 30 15:52:00 PDT 2007 Note The time set on the CAS must fall within the creation date/expiry date range set on the CAM's SSL certificate. The time set on the user machine must fall within the creation date /expiry date range set on the CAS's SSL certificate. Step 22 Press Enter to configure the temporary SSL certificate. The certificate secures the login exchange between the Clean Access Server and untrusted (managed) clients. Configure the certificate as follows: a. Type the IP address or domain name for which you want the certificate to be issued. Note This is also the IP address or domain name to which the web server responds. If DNS is not already set up for a domain name, the CAS web console will not load. Make sure to create a DNS entry in your servers, or else use an IP address for the CAS. Step 23 b. For the organization unit name, enter the group within your organization that is responsible for the certificate (for example, doc). c. For the organization name, type the name of your organization or company for which you would like to receive the certificate (for example, Cisco Systems), and press Enter. d. Type the name of the city or county in which your organization is legally located (for example, San Jose), and press Enter. e. Type the two-character state code in which the organization is located (for example, CA or NY), and press Enter. f. Type the two-letter country code (for example, US), and press Enter. Confirm values and press Enter to generate the SSL certificate, or type n to restart: You entered the following: Domain: 10.201.240.10 Organization unit: doc Organization name: Cisco Systems City name: San Jose State code: CA Country code: US Is this correct? (y/n)? [y] y Note You must generate the temporary SSL certificate or you will not be able to access your CAS as an end user. OL-20326-01 Cisco NAC Appliance Hardware Installation Guide 3-31

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176

3-31
Cisco NAC Appliance Hardware Installation Guide
OL-20326-01
Chapter 3
Installing the Clean Access Manager and Clean Access Server
Installing the Clean Access Server
e.
Confirm your choices by entering
1
, or use
2
to cancel and start over.
The following information has been given:
United States
Pacific Time
Is the above information OK?
1) Yes
2) No
#? 1
Step 21
Type and confirm the current date and time, using format hh:mm:ss mm/dd/yy.
Updating timezone information...
Current date and time hh:mm:ss mm/dd/yy [07:52:52 04/30/07]: 15:52:00 04/30/07
You entered 15:52:00 04/30/07 Is this correct? (y/n)? [y]
Mon Apr 30 15:52:00 PDT 2007
Note
The time set on the CAS must fall within the creation date/expiry date range set on the CAM’s SSL
certificate. The time set on the user machine must fall within the creation date /expiry date range set on
the CAS’s SSL certificate.
Step 22
Press Enter to configure the temporary SSL certificate. The certificate secures the login exchange
between the Clean Access Server and untrusted (managed) clients. Configure the certificate as follows:
a.
Type the IP address or domain name for which you want the certificate to be issued.
Note
This is also the IP address or domain name to which the web server responds. If DNS is not
already set up for a domain name, the CAS web console will not load. Make sure to create
a DNS entry in your servers, or else use an IP address for the CAS.
b.
For the organization unit name, enter the group
within
your organization that is responsible for the
certificate (for example,
doc
).
c.
For the organization name, type the name of your organization or company for which you would
like to receive the certificate (for example,
Cisco Systems
), and press Enter.
d.
Type the name of the city or county in which your organization is legally located (for example,
San
Jose
), and press Enter.
e.
Type the two-character state code in which the organization is located (for example,
CA
or
NY
), and
press Enter.
f.
Type the two-letter country code (for example,
US
), and press Enter.
Step 23
Confirm values and press Enter to generate the SSL certificate, or type
n
to restart:
You entered the following:
Domain: 10.201.240.10
Organization unit: doc
Organization name: Cisco Systems
City name: San Jose
State code: CA
Country code: US
Is this correct? (y/n)? [y] y
Note
You must generate the temporary SSL certificate or you will not be able to access your CAS as an end
user.