Cisco Explorer 4700 Installation Guide Page 572
- Page / 648
- Table of contents
- TROUBLESHOOTING
- BOOKMARKS
Rated. / 5. Based on customer reviews
15-4
Device Manager Guide, Cisco ACE 4700 Series Application Control Engine Appliance
OL-26645-02
Chapter 15 Managing the ACE Appliance
Controlling Access to the Cisco ACE Appliance
Thus, role-based access control ensures that users can view only the devices or services or perform the
actions that are included in the domains to which they have been given access.
Figure 15-1 Role-Based Access Control Containment Overview
The following is an example of role-based access control containment.
All other user interfaces, such as configuration, monitoring, and administration, respect this role-based
access control policy:
• Roles limit the screens (or functions on those screens) that a user can see.
• Domains limit the objects that are listed on any screen that the roles allow.
• Users (other than the administrator) can create only subdomains of the domains to which they are
assigned. However, no parent/child relationship is kept between domains.
• The system administrator user (Admin) can see and modify all objects. All other users are subject
to the role-based access controls illustrated in Figure 15-1.
System
Inheritance
Virtual contexts:
Used to virtualize services
Objects contained withn a Virtual context
System Objects
Users
Roles
Domains
Rules
Network
Objects
All associations are one-to-many reading from
the top down unless noted otherwise
182039
Domains
East Coast servers Central servers West Coast servers
Role
Web server administrator
Users
User A User B User C
Note Each association is one-to-many.
- Audience 1
- Organization 1
- OL-26645-01 2
- Related Documentation 3
- Conventions 5
- Guidelines 5
- Control Engine 6
- Original SSLeay License: 7
- Overview 9
- Software Version 10
- First Time Login 12
- Logging In as a User 13
- • The Logout button 15
- Chapter 1 Overview 18
- Understanding Table Buttons 19
- Conventions in Tables 20
- Filtering Entries 21
- Viewing Monitoring Results 24
- Configuration Overview 26
- Understanding ACE Features 27
- IPv6 Considerations 28
- Terminology 30
- Using Homepage 33
- Figure 2-1 Homepage Window 34
- Table 2-1 Homepage Links 34
- Chapter 2 Using Homepage 35
- Using DM Guided Setup 37
- Using ACE Hardware Setup 39
- Using Virtual Context Setup 43
- Using Application Setup 45
- Configuring Virtual Contexts 51
- Using Virtual Contexts 52
- Creating Virtual Contexts 52
- Configuring Syslog Log Hosts 66
- Managing Resource Classes 85
- Adding Resource Classes 88
- Modifying Resource Classes 90
- Deleting Resource Classes 91
- Notifications 92
- Prerequisite 97
- Archive Naming Conventions 100
- Guidelines and Limitations 101
- Defaults 102
- Procedure 102
- OL-26645-02 103
- Related Topics 105
- Prerequisites 106
- Creating ACLs 109
- Resequencing Extended ACLs 116
- Viewing All ACLs by Context 118
- Editing or Deleting ACLs 119
- Configuring Object Groups 120
- Managing Virtual Contexts 129
- Editing Virtual Contexts 134
- Deleting Virtual Contexts 134
- Viewing All Virtual Contexts 134
- Related Topic 136
- Configuring Virtual Servers 137
- Assumptions 143
- Configuring Shared Objects 146
- Assumption 155
- Consideration 194
- Managing Virtual Servers 199
- Activating Virtual Servers 200
- Suspending Virtual Servers 201
- Viewing All Virtual Servers 201
- Load-Balancing Predictors 204
- Real Servers 205
- Configuring Real Servers 207
- Managing Real Servers 211
- Activating Real Servers 212
- Suspending Real Servers 212
- Modifying Real Servers 213
- Viewing All Real Servers 214
- Guidelines and Restrictions 217
- Configuring Server Farms 220
- Viewing All Server Farms 240
- Configuring Health Monitoring 241
- TCL Scripts 242
- Table 6-9 Probe Types 244
- Probe Attribute Tables 249
- DNS Probe Attributes 250
- Echo-TCP Probe Attributes 250
- Echo-UDP Probe Attributes 251
- Finger Probe Attributes 251
- FTP Probe Attributes 252
- HTTP Probe Attributes 252
- HTTPS Probe Attributes 254
- IMAP Probe Attributes 256
- POP Probe Attributes 257
- RADIUS Probe Attributes 258
- RTSP Probe Attributes 258
- Scripted Probe Attributes 259
- SIP-TCP Probe Attributes 261
- SIP-UDP Probe Attributes 261
- SMTP Probe Attributes 262
- SNMP Probe Attributes 262
- TCP Probe Attributes 263
- Telnet Probe Attributes 264
- UDP Probe Attributes 265
- VM Probe Attributes 267
- Configuring Secure KAL-AP 272
- Configuring Stickiness 275
- Sticky Types 276
- HTTP Content Stickiness 277
- HTTP Cookie Stickiness 277
- HTTP Header Stickiness 278
- Layer 4 Payload Stickiness 278
- RADIUS Stickiness 279
- RTSP Header Stickiness 279
- SIP Header Stickiness 279
- SSL Stickiness 279
- Sticky Groups 280
- Buddy Sticky Groups 280
- Stickiness Overview 282
- Configuring Sticky Groups 285
- Sticky Group Attribute Tables 290
- Configuring Sticky Statics 295
- Table 7-10 Sticky Group Types 296
- Configuring Parameter Maps 299
- Step 5 Do the following: 302
- Supported MIME Types 323
- Configuring SSL 327
- SSL Overview 328
- SSL Setup Sequence 331
- Using SSL Certificates 332
- Importing SSL Certificates 334
- Using SSL Keys 337
- Importing SSL Key Pairs 338
- Generating SSL Key Pairs 341
- Exporting SSL Certificates 342
- Exporting SSL Key Pairs 344
- Generating CSRs 353
- Configuring SSL Proxy Service 354
- Configuring SSL OCSP Service 356
- Configuring Network Access 361
- Why Use Port Channels? 362
- Viewing All VLAN Interfaces 382
- NAT Utilization 392
- Configuring Global IP DHCP 395
- Configuring High Availability 397
- Understanding ACE Redundancy 398
- Redundancy Protocol 399
- Stateful Failover 400
- Fault-Tolerant VLAN 401
- Configuration Synchronization 401
- Device Manager 402
- Deleting Host Tracking Probes 418
- Configuring Traffic Policies 421
- Table 12-1 Traffic Policies 422
- Class Maps 423
- Policy Maps 424
- Deleting Class Maps 430
- Inspection 493
- Configuring Actions Lists 510
- Configuring SSL URL Rewrite 514
- Optimization 521
- Optimization Overview 522
- OL-26645-2 528
- Monitoring Your Network 531
- Contexts 532
- ACE System Dashboard 533
- Device Information Table 534
- License Status Table 534
- High Availability Table 535
- Device Resource Usage Graph 537
- ACE Virtual Context Dashboard 541
- Context Resource Usage Graph 544
- Error Monitoring 545
- Monitoring Resource Usage 547
- Monitoring Traffic 551
- Monitoring Load Balancing 553
- Virtual Contexts 561
- Testing Ping 566
- Managing the ACE Appliance 569
- Types of Users 573
- Understanding Roles 573
- Managing Users 575
- Guidelines for Managing Users 576
- Displaying a List of Users 576
- Creating User Accounts 576
- Modifying User Accounts 578
- Deleting User Accounts 578
- Deleting Active Users 580
- Ending Active User Sessions 580
- Changing User Passwords 581
- Changing the Admin Password 581
- Managing User Roles 582
- Admin Predefined Role 588
- Network-Admin Predefined Role 590
- SLB-Admin Predefined Role 593
- Displaying User Roles 596
- Creating User Roles 596
- Modifying User Roles 598
- Deleting User Roles 598
- Managing Domains 599
- Displaying Network Domains 600
- Creating Domains 601
- Modifying Domains 602
- Deleting Domains 602
- Using Admin Tools 605
- Troubleshooting Tools 607
- Guidelines for Using Lifeline 608
- Deleting a Lifeline Package 610
- About File Browser 612
- Downloading Files 613
- Uploading Files 613
- Renaming Files 614
- Deleting Files 615
- Viewing Files 615
- GLOSSARY 617
- Glossary 618
- VTP domain 623
- Web server 623
Related products and manuals for Digital Video Recorders (DVR) Cisco Explorer 4700
(32 pages)© 2020, manymanuals.com. All rights reserved. | 0.073 s |
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Comments to this Manuals