Linksys SPA921 Cisco Small Business IP Telephony Devices Provisioning Guide - Page 78

Exercise, Submit All Changes

Page 78 highlights

Provisioning Tutorial Secure Resync 3 Exercise STEP 1 Install Perl on the host running the HTTPS server. STEP 2 Generate the following Perl reflector script: #!/usr/bin/perl -wT use strict; print "Content-Type: text/plain\n\n"; print ""; print "OU=$ENV{'SSL_CLIENT_I_DN_OU'},\n"; print "L=$ENV{'SSL_CLIENT_I_DN_L'},\n"; print "S=$ENV{'SSL_CLIENT_I_DN_S'}\n"; print ""; STEP 3 Save this file with the file name reflect.pl, with executable permission (chmod 755 on Linux), in the CGI scripts directory of the HTTPS server. STEP 4 Verify accessibility of CGI scripts on the server (as in /cgi-bin/...). STEP 5 Modify the Profile_Rule on the test device to resync to the reflector script, as in the following example: https://prov.server.com/cgi-bin/reflect.pl? STEP 6 Click Submit All Changes. STEP 7 Observe the syslog trace to ensure a successful resync. STEP 8 Open the admin/advanced page, Provisioning tab. STEP 9 Verify that the GPP_D parameter contains the information captured by the script. This information contains the product name, MAC address, and serial number if the test device carries a unique certificate from the manufacturer, or else generic strings if it is a unit manufactured before firmware release 2.0. A similar script could be used to determine information about the resyncing device and then provide it with appropriate configuration parameter values. Cisco Small Business IP Telephony Devices Provisioning Guide 76

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116

Provisioning Tutorial
Secure Resync
Cisco Small Business IP Telephony Devices Provisioning Guide
76
3
Exercise
STEP 1
Install Perl on the host running the HTTPS server.
STEP 2
Generate the following Perl reflector script:
#!/usr/bin/perl -wT
use strict;
print “Content-Type: text/plain\n\n”;
print “<flat-profile><GPP_D>”;
print “OU=$ENV{‘SSL_CLIENT_I_DN_OU’},\n”;
print “L=$ENV{‘SSL_CLIENT_I_DN_L’},\n”;
print “S=$ENV{‘SSL_CLIENT_I_DN_S’}\n”;
print “</GPP_D></flat-profile>”;
STEP 3
Save this file with the file name reflect.pl, with executable permission (chmod 755
on Linux), in the CGI scripts directory of the HTTPS server.
STEP 4
Verify accessibility of CGI scripts on the server (as in /cgi-bin/…).
STEP 5
Modify the Profile_Rule on the test device to resync to the reflector script, as in the
following example:
STEP 6
Click
Submit All Changes
.
STEP 7
Observe the syslog trace to ensure a successful resync.
STEP 8
Open the admin/advanced page, Provisioning tab.
STEP 9
Verify that the GPP_D parameter contains the information captured by the script.
This information contains the product name, MAC address, and serial number if the
test device carries a unique certificate from the manufacturer, or else generic
strings if it is a unit manufactured before firmware release 2.0.
A similar script could be used to determine information about the resyncing device
and then provide it with appropriate configuration parameter values.