Cisco Explorer 4700 Installation Guide Page 140
- Page / 648
- Table of contents
- TROUBLESHOOTING
- BOOKMARKS
Rated. / 5. Based on customer reviews
5-4
Device Manager Guide, Cisco ACE 4700 Series Application Control Engine Appliance
OL-26645-02
Chapter 5 Configuring Virtual Servers
Configuring Virtual Servers
• Configuration options and roles
To support and maintain the separation of roles, some objects cannot be configured using the Virtual
Server configuration screen. These objects include SSL certificates, SSL keys, NAT pools, interface
IP addresses, and ACLs. Providing these options as separate configuration options in the ACE
Appliance Device Manager interface ensures that a user who can view or modify virtual servers or
aspects of virtual servers cannot create or delete virtual servers.
• RBAC role and domain requirements
If you want to create, modify, or delete a virtual server, we recommend that you use the pre-defined
Admin role (see Table 15-4).Only the Admin pre-defined role supports the ability to successfully
deploy a functional virtual server from the ACE appliance Device Manager.
If a user prefers to be assigned a custom role, and wants the ability to create, modify, or delete a
virtual server, that user requires the proper role permissions to be defined by the administrator to
allow them to perform those virtual server activities.
Note A user must be assigned with a default domain (default-domain) to be able to configure a virtual
server. A domain is the namespace in which a user operates.
Included below are a list of RBAC permissions which are required for a user to create, modify, or
delete a virtual server:
---------------------------------------------
Rule Type Permission Feature
---------------------------------------------
1. Permit Create real
2. Permit Create serverfarm
3. Permit Create vip
4. Permit Create probe
5. Permit Create loadbalance
6. Permit Create nat
7. Permit Create interface
8. Permit Create connection
9. Permit Create ssl
10. Permit Create pki
11. Permit Create sticky
12. Permit Create inspect
Note that certain configured virtual servers may only cover a subset of the features and may not
require all the permissions outlined above. In general, the above set of permissions are required for
allowing users to configure all elements of a virtual server.
For background information, see the “Managing User Roles” section in Chapter 15, “Managing the
ACE Appliance”.
Related Topics
• Configuring Virtual Servers, page 5-2
• Information About Using Device Manager to Configure Virtual Servers, page 5-5
• Virtual Server Configuration Procedure, page 5-7
- Audience 1
- Organization 1
- OL-26645-01 2
- Related Documentation 3
- Conventions 5
- Guidelines 5
- Control Engine 6
- Original SSLeay License: 7
- Overview 9
- Software Version 10
- First Time Login 12
- Logging In as a User 13
- • The Logout button 15
- Chapter 1 Overview 18
- Understanding Table Buttons 19
- Conventions in Tables 20
- Filtering Entries 21
- Viewing Monitoring Results 24
- Configuration Overview 26
- Understanding ACE Features 27
- IPv6 Considerations 28
- Terminology 30
- Using Homepage 33
- Figure 2-1 Homepage Window 34
- Table 2-1 Homepage Links 34
- Chapter 2 Using Homepage 35
- Using DM Guided Setup 37
- Using ACE Hardware Setup 39
- Using Virtual Context Setup 43
- Using Application Setup 45
- Configuring Virtual Contexts 51
- Using Virtual Contexts 52
- Creating Virtual Contexts 52
- Configuring Syslog Log Hosts 66
- Managing Resource Classes 85
- Adding Resource Classes 88
- Modifying Resource Classes 90
- Deleting Resource Classes 91
- Notifications 92
- Prerequisite 97
- Archive Naming Conventions 100
- Guidelines and Limitations 101
- Defaults 102
- Procedure 102
- OL-26645-02 103
- Related Topics 105
- Prerequisites 106
- Creating ACLs 109
- Resequencing Extended ACLs 116
- Viewing All ACLs by Context 118
- Editing or Deleting ACLs 119
- Configuring Object Groups 120
- Managing Virtual Contexts 129
- Editing Virtual Contexts 134
- Deleting Virtual Contexts 134
- Viewing All Virtual Contexts 134
- Related Topic 136
- Configuring Virtual Servers 137
- Assumptions 143
- Configuring Shared Objects 146
- Assumption 155
- Consideration 194
- Managing Virtual Servers 199
- Activating Virtual Servers 200
- Suspending Virtual Servers 201
- Viewing All Virtual Servers 201
- Load-Balancing Predictors 204
- Real Servers 205
- Configuring Real Servers 207
- Managing Real Servers 211
- Activating Real Servers 212
- Suspending Real Servers 212
- Modifying Real Servers 213
- Viewing All Real Servers 214
- Guidelines and Restrictions 217
- Configuring Server Farms 220
- Viewing All Server Farms 240
- Configuring Health Monitoring 241
- TCL Scripts 242
- Table 6-9 Probe Types 244
- Probe Attribute Tables 249
- DNS Probe Attributes 250
- Echo-TCP Probe Attributes 250
- Echo-UDP Probe Attributes 251
- Finger Probe Attributes 251
- FTP Probe Attributes 252
- HTTP Probe Attributes 252
- HTTPS Probe Attributes 254
- IMAP Probe Attributes 256
- POP Probe Attributes 257
- RADIUS Probe Attributes 258
- RTSP Probe Attributes 258
- Scripted Probe Attributes 259
- SIP-TCP Probe Attributes 261
- SIP-UDP Probe Attributes 261
- SMTP Probe Attributes 262
- SNMP Probe Attributes 262
- TCP Probe Attributes 263
- Telnet Probe Attributes 264
- UDP Probe Attributes 265
- VM Probe Attributes 267
- Configuring Secure KAL-AP 272
- Configuring Stickiness 275
- Sticky Types 276
- HTTP Content Stickiness 277
- HTTP Cookie Stickiness 277
- HTTP Header Stickiness 278
- Layer 4 Payload Stickiness 278
- RADIUS Stickiness 279
- RTSP Header Stickiness 279
- SIP Header Stickiness 279
- SSL Stickiness 279
- Sticky Groups 280
- Buddy Sticky Groups 280
- Stickiness Overview 282
- Configuring Sticky Groups 285
- Sticky Group Attribute Tables 290
- Configuring Sticky Statics 295
- Table 7-10 Sticky Group Types 296
- Configuring Parameter Maps 299
- Step 5 Do the following: 302
- Supported MIME Types 323
- Configuring SSL 327
- SSL Overview 328
- SSL Setup Sequence 331
- Using SSL Certificates 332
- Importing SSL Certificates 334
- Using SSL Keys 337
- Importing SSL Key Pairs 338
- Generating SSL Key Pairs 341
- Exporting SSL Certificates 342
- Exporting SSL Key Pairs 344
- Generating CSRs 353
- Configuring SSL Proxy Service 354
- Configuring SSL OCSP Service 356
- Configuring Network Access 361
- Why Use Port Channels? 362
- Viewing All VLAN Interfaces 382
- NAT Utilization 392
- Configuring Global IP DHCP 395
- Configuring High Availability 397
- Understanding ACE Redundancy 398
- Redundancy Protocol 399
- Stateful Failover 400
- Fault-Tolerant VLAN 401
- Configuration Synchronization 401
- Device Manager 402
- Deleting Host Tracking Probes 418
- Configuring Traffic Policies 421
- Table 12-1 Traffic Policies 422
- Class Maps 423
- Policy Maps 424
- Deleting Class Maps 430
- Inspection 493
- Configuring Actions Lists 510
- Configuring SSL URL Rewrite 514
- Optimization 521
- Optimization Overview 522
- OL-26645-2 528
- Monitoring Your Network 531
- Contexts 532
- ACE System Dashboard 533
- Device Information Table 534
- License Status Table 534
- High Availability Table 535
- Device Resource Usage Graph 537
- ACE Virtual Context Dashboard 541
- Context Resource Usage Graph 544
- Error Monitoring 545
- Monitoring Resource Usage 547
- Monitoring Traffic 551
- Monitoring Load Balancing 553
- Virtual Contexts 561
- Testing Ping 566
- Managing the ACE Appliance 569
- Types of Users 573
- Understanding Roles 573
- Managing Users 575
- Guidelines for Managing Users 576
- Displaying a List of Users 576
- Creating User Accounts 576
- Modifying User Accounts 578
- Deleting User Accounts 578
- Deleting Active Users 580
- Ending Active User Sessions 580
- Changing User Passwords 581
- Changing the Admin Password 581
- Managing User Roles 582
- Admin Predefined Role 588
- Network-Admin Predefined Role 590
- SLB-Admin Predefined Role 593
- Displaying User Roles 596
- Creating User Roles 596
- Modifying User Roles 598
- Deleting User Roles 598
- Managing Domains 599
- Displaying Network Domains 600
- Creating Domains 601
- Modifying Domains 602
- Deleting Domains 602
- Using Admin Tools 605
- Troubleshooting Tools 607
- Guidelines for Using Lifeline 608
- Deleting a Lifeline Package 610
- About File Browser 612
- Downloading Files 613
- Uploading Files 613
- Renaming Files 614
- Deleting Files 615
- Viewing Files 615
- GLOSSARY 617
- Glossary 618
- VTP domain 623
- Web server 623
Related products and manuals for Digital Video Recorders (DVR) Cisco Explorer 4700
(32 pages)© 2020, manymanuals.com. All rights reserved. | 0.061 s |
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Comments to this Manuals