Administration Guide
Page 2
... HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED "AS IS" WITH ALL FAULTS. Cisco 4700 Series Application Control Engine Appliance Administration Guide Copyright © 2007 Cisco Systems, Inc. THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE ...DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. CCDE, CCVP, Cisco Eos, Cisco StadiumVision, the Cisco logo, DCE, and Welcome to the Human Network are registered trademarks ...
... HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED "AS IS" WITH ALL FAULTS. Cisco 4700 Series Application Control Engine Appliance Administration Guide Copyright © 2007 Cisco Systems, Inc. THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE ...DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. CCDE, CCVP, Cisco Eos, Cisco StadiumVision, the Cisco logo, DCE, and Welcome to the Human Network are registered trademarks ...
Administration Guide
Page 41
...the date and time of the month, and four digits for an ACE, use the clock set 01:38:30 7 October 2007 Tues Oct 7 01:38:30 PST 2007 OL-11157-01 Cisco 4700 Series Application Control Engine Appliance Administration Guide 1-15 When you enter this command is being reset. This...2007, enter: host1/Admin# clock set command in Exec mode. Specify two digits for an ACE, use the clock command. Chapter 1 Setting Up the ACE Configuring the Time, Date, and Time Zone Configuring the Time, Date, and Time Zone To manually configure the date, time, and time zone settings for the year.
...the date and time of the month, and four digits for an ACE, use the clock set 01:38:30 7 October 2007 Tues Oct 7 01:38:30 PST 2007 OL-11157-01 Cisco 4700 Series Application Control Engine Appliance Administration Guide 1-15 When you enter this command is being reset. This...2007, enter: host1/Admin# clock set command in Exec mode. Specify two digits for an ACE, use the clock command. Chapter 1 Setting Up the ACE Configuring the Time, Date, and Time Zone Configuring the Time, Date, and Time Zone To manually configure the date, time, and time zone settings for the year.
Administration Guide
Page 42
...timezone {zone_name{+ | -} hours minutes} | {standard timezone} The keywords, arguments, and options are as UTC +1 hour 1-16 Cisco 4700 Series Application Control Engine Appliance Administration Guide OL-11157-01 AKST-Alaska Standard Time as UTC +9.5 hours - ACST-Australian Central Standard Time as UTC -9 hours - ...PDT) to use the clock timezone command in Universal Time Coordinated (UTC) offset. To manually set the time zone for more information. See the "Synchronizing the ACE with an NTP Server" section. In this command is from the configuration before setting the...
...timezone {zone_name{+ | -} hours minutes} | {standard timezone} The keywords, arguments, and options are as UTC +1 hour 1-16 Cisco 4700 Series Application Control Engine Appliance Administration Guide OL-11157-01 AKST-Alaska Standard Time as UTC +9.5 hours - ACST-Australian Central Standard Time as UTC -9 hours - ...PDT) to use the clock timezone command in Universal Time Coordinated (UTC) offset. To manually set the time zone for more information. See the "Synchronizing the ACE with an NTP Server" section. In this command is from the configuration before setting the...
Administration Guide
Page 61
... Bootloader (GRUB). From the GRUB boot loader, you can manually identify the system boot image to use to modify the boot configuration of the ACE. The configuration register identifies how the ACE should boot. OL-11157-01 Cisco 4700 Series Application Control Engine Appliance Administration Guide 1-35 This command affects only the configuration register bits...
... Bootloader (GRUB). From the GRUB boot loader, you can manually identify the system boot image to use to modify the boot configuration of the ACE. The configuration register identifies how the ACE should boot. OL-11157-01 Cisco 4700 Series Application Control Engine Appliance Administration Guide 1-35 This command affects only the configuration register bits...
Administration Guide
Page 63
... enter: host1/Admin(config)# boot system image:c4710ace-mz.3.0.0_AB0_0.488.bin OL-11157-01 Cisco 4700 Series Application Control Engine Appliance Administration Guide 1-37 The syntax for example, if you can add several images to the BOOT ...BOOT environment variable specifies a list of the system image file. If the first file fails to boot the ACE, subsequent images that are specified in the Flash memory, the GNU GRUB multiboot loader appears as follows: boot... entire BOOT environment variable and then redefine the list in which the ACE can manually specify an image to boot.
... enter: host1/Admin(config)# boot system image:c4710ace-mz.3.0.0_AB0_0.488.bin OL-11157-01 Cisco 4700 Series Application Control Engine Appliance Administration Guide 1-37 The syntax for example, if you can add several images to the BOOT ...BOOT environment variable specifies a list of the system image file. If the first file fails to boot the ACE, subsequent images that are specified in the Flash memory, the GNU GRUB multiboot loader appears as follows: boot... entire BOOT environment variable and then redefine the list in which the ACE can manually specify an image to boot.
Administration Guide
Page 86
...command. For DSA, the range is already generated for the key pair. These two settings are used in Exec mode. 2-18 Cisco 4700 Series Application Control Engine Appliance Administration Guide OL-11157-01 These keys are either sent to an SSH client by an SSH server or are : • dsa-...For RSA and RSA1, the range is : ssh key {dsa | rsa | rsa1} [bits [force]] The arguments, keywords, and options are entered manually. See Chapter 1, Setting Up the ACE, for details on configuring a domain. generated rsa1 key To remove the SSH host key pair, enter: host1/Admin(config)# no ssh key rsa1...
...command. For DSA, the range is already generated for the key pair. These two settings are used in Exec mode. 2-18 Cisco 4700 Series Application Control Engine Appliance Administration Guide OL-11157-01 These keys are either sent to an SSH client by an SSH server or are : • dsa-...For RSA and RSA1, the range is : ssh key {dsa | rsa | rsa1} [bits [force]] The arguments, keywords, and options are entered manually. See Chapter 1, Setting Up the ACE, for details on configuring a domain. generated rsa1 key To remove the SSH host key pair, enter: host1/Admin(config)# no ssh key rsa1...
Administration Guide
Page 108
...Uninstalling virtual context license will automatically!! !!! If you saved the running -config 3-12 Cisco 4700 Series Application Control Engine Appliance Administration Guide OL-11157-01 cleanup all 20 contexts, the ACE allows the first five contexts, fails the remaining contexts, and displays error messages on ... contexts than what the ACE supports and you want to the ACE, the ACE rejects contexts that is currently on the ACE by entering the show license status command in the Admin running and startup configurations. Using a text editor, manually remove the extra context ...
...Uninstalling virtual context license will automatically!! !!! If you saved the running -config 3-12 Cisco 4700 Series Application Control Engine Appliance Administration Guide OL-11157-01 cleanup all 20 contexts, the ACE allows the first five contexts, fails the remaining contexts, and displays error messages on ... contexts than what the ACE supports and you want to the ACE, the ACE rejects contexts that is currently on the ACE by entering the show license status command in the Admin running and startup configurations. Using a text editor, manually remove the extra context ...
Administration Guide
Page 160
...description from a Layer 3 and Layer 4 policy map, enter: host1/Admin(config-pmap)# no class L4_SLB_VIP_CLASS To manually insert the class map ahead of a previously specified class map, use the class command with the insert-before keyword...argument specifies the name of 240 alphanumeric characters. When you want to the traffic policy. However, the ACE does not save this reordering as part of 64 alphanumeric characters. Enter an unquoted text string with a... and a maximum of the configuration. 4-46 Cisco 4700 Series Application Control Engine Appliance Administration Guide OL-11157-01
...description from a Layer 3 and Layer 4 policy map, enter: host1/Admin(config-pmap)# no class L4_SLB_VIP_CLASS To manually insert the class map ahead of a previously specified class map, use the class command with the insert-before keyword...argument specifies the name of 240 alphanumeric characters. When you want to the traffic policy. However, the ACE does not save this reordering as part of 64 alphanumeric characters. Enter an unquoted text string with a... and a maximum of the configuration. 4-46 Cisco 4700 Series Application Control Engine Appliance Administration Guide OL-11157-01
Administration Guide
Page 169
...class map has an implicit match any traffic classification. OL-11157-01 Cisco 4700 Series Application Control Engine Appliance Administration Guide 4-55 Chapter 4 Configuring Class Maps and Policy Maps Configuring a Layer 7 Policy Map To manually insert a class map ahead of a previously specified class map, use... map configuration mode. When you will access policy map class configuration mode. The syntax of the specified classifications match, the ACE then matches the action specified under the class class-default command. Note that fails to meet the other matching criteria in ...
...class map has an implicit match any traffic classification. OL-11157-01 Cisco 4700 Series Application Control Engine Appliance Administration Guide 4-55 Chapter 4 Configuring Class Maps and Policy Maps Configuring a Layer 7 Policy Map To manually insert a class map ahead of a previously specified class map, use... map configuration mode. When you will access policy map class configuration mode. The syntax of the specified classifications match, the ACE then matches the action specified under the class class-default command. Note that fails to meet the other matching criteria in ...
Administration Guide
Page 249
...separated by the ACE Displaying Technical Support Information To display general information about your ACE and provide the output of several show terminal command to disable autoscrolling and enable manual scrolling. OL-11157-01 Cisco 4700 Series Application Control Engine Appliance Administration Guide 6-17 After.... The output from this command, reset your configuration. You can choose to collect a large amount of information about the ACE when you report a problem, use this command to have detailed information for each command or even specify the output for ...
...separated by the ACE Displaying Technical Support Information To display general information about your ACE and provide the output of several show terminal command to disable autoscrolling and enable manual scrolling. OL-11157-01 Cisco 4700 Series Application Control Engine Appliance Administration Guide 6-17 After.... The output from this command, reset your configuration. You can choose to collect a large amount of information about the ACE when you report a problem, use this command to have detailed information for each command or even specify the output for ...
Administration Guide
Page 277
...enable automatic synchronization of the running -config | startup-config} OL-11157-01 Cisco 4700 Series Application Control Engine Appliance Administration Guide 7-25 Note that you make to the active ACE on the standby ACE to the standby context. After the active context has accepted either a new ... The syntax of time, you must manually duplicate any changes that you made to the active ACE are identical, the ACE automatically synchronizes the running -config on the active ACE (for a prolonged period of this command is disabled on the active ACE. (For more information about FT states,...
...enable automatic synchronization of the running -config | startup-config} OL-11157-01 Cisco 4700 Series Application Control Engine Appliance Administration Guide 7-25 Note that you make to the active ACE on the standby ACE to the standby context. After the active context has accepted either a new ... The syntax of time, you must manually duplicate any changes that you made to the active ACE are identical, the ACE automatically synchronizes the running -config on the active ACE (for a prolonged period of this command is disabled on the active ACE. (For more information about FT states,...
Administration Guide
Page 394
... installation is finished, set the boot variable and configuration register to manually upgrade the ACE software. Before You Begin Before you upgrade your ACE software, please read this appendix in its entirety so that your ACE configurations meet the upgrade prerequisites in the following sections: • ...the copy command in Exec mode to autoboot the software image. Then, reboot the appliance to the ACE through the console port. Cisco 4700 Series Application Control Engine Appliance Administration Guide A-2 OL-11157-01 Please be able to log in to load the new image. To ...
... installation is finished, set the boot variable and configuration register to manually upgrade the ACE software. Before You Begin Before you upgrade your ACE software, please read this appendix in its entirety so that your ACE configurations meet the upgrade prerequisites in the following sections: • ...the copy command in Exec mode to autoboot the software image. Then, reboot the appliance to the ACE through the console port. Cisco 4700 Series Application Control Engine Appliance Administration Guide A-2 OL-11157-01 Please be able to log in to load the new image. To ...