|
|
This chapter identifies system requirements, describes data store options, and provides information on installing the CiscoSecure Global Roaming Server (GRS) software, as well as instructions for starting CiscoSecure GRS.
The same CiscoSecure GRS installation software can be used for performing a full install or for upgrading to the latest release.
To perform a full install, there cannot be any instance of CiscoSecure GRS on the host computer. For instructions about removing CiscoSecure GRS, see the "Removing CiscoSecure GRS" section.
To perform an upgrade, an instance of CiscoSecure GRS must be present on the host computer. Upgrading will create a second instance of CiscoSecure GRS named CSCOgrs.2 and put it in the /opt/CSCOgrs.2 directory. The original data store will be adopted by the upgrade.
CiscoSecure GRS requires the hardware and software specified in the following sections.
CiscoSecure GRS requires the following hardware:
CiscoSecure GRS requires the following software:
Additionally, you must have the following hardware and software on the network on which you want to use CiscoSecure GRS:
CiscoSecure GRS stores user information in a data store. Two data store options are available with CiscoSecure GRS---a flatfile data store or an Oracle database.
CiscoSecure GRS does not require a large data store. The information stored in the CiscoSecure GRS data store usually is not frequently modified or replicated, so most users should be able to use the flatfile data store supplied with CiscoSecure GRS. There are several advantages to using the flatfile data store:
If you prefer, you can store the CiscoSecure GRS data in an Oracle System 7.3.x database.
Before you install CiscoSecure GRS, you need the following information:
lists the questions asked by the installation program and provides a space for you to enter the information for your system. The default is listed in square brackets [ ].
| System Prompt | Description | Your Response |
|---|---|---|
Do you want to input a list of hosts (IP addresses or hostnames) who can monitor GRS via a Web Browser (y/n)? [y] | (Optional) Name or IP address of the workstation running CiscoSecure GRS. |
|
Enter a list of hostnames or IP addresses separated by commas(,): | (Optional) Name(s) or IP address(es) of the local and remote ACS(es). |
|
Do you want GRS to start automatically during a system reboot (y/n)? [y] | (Optional) Directory in which the CiscoSecure ACS software is installed. |
|
Do you want to automatically restart GRS when it exits (y/n)? [y] | (Optional) Name(s) or IP address(es) of host(s) you want to allow to monitor CiscoSecure GRS using a web browser. |
|
Enter how many times you want to auto-restart: [5] | Do you want CiscoSecure GRS to start automatically when the workstation restarts? |
|
Do you want to get e-mail notification when GRS exits (y/n)? [y] | (Optional) E-mail address of user(s) to notify if CiscoSecure GRS shuts down unexpectedly. |
|
Enter one or more recipient addresses: | Auto Restart number. (Number of times to restart CiscoSecure GRS automatically after an unexpected shutdown.) |
|
Do you want to use an external Oracle database (y/n)? [n] | Will you use an Oracle database? (Default is flatfile.) |
|
If you are using an Oracle database, you will be prompted to enter the information listed in Table 2-2.
| System Prompt | Your Response |
|---|---|
Enter Database Server Name: |
|
Enter Database User Name: |
|
Enter Database Password: |
|
Enter ORACLE_HOME: |
|
CiscoSecure GRS provides an easy-to-use installation program that prompts you through each step of the installation and configuration process. CiscoSecure GRS is installed from a CD-ROM onto the SPARC Solaris hard disk.
Take the following steps to install the CiscoSecure GRS software:
Step 1 Log in as root. See your Solaris documentation for more information.
Step 2 Insert the CiscoSecure GRS CD-ROM into the CD-ROM drive.
Step 3 At the command prompt, enter:
cd /cdrom
Step 4 At the command prompt, enter:
% pkgadd -d .
This will install CiscoSecure GRS in the default directory:
/opt/CSCOgrs
(Optional) To install to a directory other than the default, enter:
% pkgadd -a none -d .
The installation program prompts you for an installation directory. When specifying an installation directory, be sure the directory does not reside within the path specified by the -d option.
The following message displays:
1 CSCOgrs CiscoSecure Global Roaming Server
(sparc) Version x.x
2 CSCEacs CiscoSecure Access Control Software
(sun4) 2.1(2)
Select package(s) you wish to process (or 'all' to process
all packages). (default: all) [?,??,q]:
where x.x is the version of CiscoSecure GRS software you are installing.
Step 5 Enter the number that appears to the left of the CiscoSecure GRS package (for example, 1).
The following message displays:
Is this an upgrade installation? (y/n/q)
Step 6 If this is a new installation, enter n. The following message displays:
You have chosen to install CiscoSecure GRS as a new installation. The installation script will try to detect any previous installations of the CiscoSecure GRS software. If there is a previous version installed, all CiscoSecure GRS data will be deleted from the CiscoSecure GRS installation directory or Oracle database. Would you like to proceed? (y/n/q)
Enter n or q to terminate installation, or enter y and proceed to Step 7.
 | Caution If you enter y, your existing database information is deleted. |
If this is an upgrade to an existing CiscoSecure GRS installation, enter y. The installation program tries to detect an existing CiscoSecure GRS instance. If an instance is found, the installation script launches a database upgrade script so that your existing database information is retained. If an existing installation is not found, the installation program displays the following message:
CiscoSecure GRS did not find any previous installations of the software. Continuing to run this installation process will install CiscoSecure GRS as a new installation. It might delete all CiscoSecure GRS data from the CiscoSecure GRS installation directory or Oracle database. Would you like to proceed? (y/n/q)
Enter y to proceed, or enter n or q to terminate installation.
| Caution If you enter y, your existing database information is deleted. |
The following database tables are updated:
Step 7 The following message displays:
Do you want to input a list of hosts (IP address or hostname) who can monitor GRS via a Web Browser (y/n)? [y]
To allow hosts to use a web browser to monitor CiscoSecure GRS, enter y. If you do not want to allow viewing via a web browser, enter n.
The following message displays:
Enter a list of hostnames or IP addresses separated by commas(,):
10.10.10.10,10.20.20.20
The following message displays:
Do you want GRS to start automatically during a system reboot (y/n)? [y]
Step 9 To start CiscoSecure GRS automatically when the workstation restarts, enter y; otherwise, enter n.
If you enter y, the following message displays:
Make sure you configure the local ACS to start automatically during system bootstrap so that it will be ready when GRS is started. Do you want to automatically restart GRS when it exits (y/n)? [y]
Step 10 To allow CiscoSecure GRS to automatically restart after an unexpected shutdown, enter y; otherwise, enter n.
If you selected automatic restart, the following message displays:
Enter how many times you want to auto-restart: [5]
Step 11 Enter the number of times CiscoSecure GRS should restart automatically after an unexpected shutdown.
The following message displays:
Do you want to get e-mail notification when GRS exits (y/n)? [y]
Step 12 To receive notification via e-mail when CiscoSecure GRS stops unexpectedly, enter y; otherwise, enter n.
If you selected e-mail notification, the following message displays:
Enter one or more recipient addresses:
Step 13 If you selected e-mail notification, enter the e-mail address(es) in the following format to notify when CiscoSecure GRS stops unexpectedly:
username@domain.com
The following message displays:
Do you want to use an external Oracle database (y/n)? [n]
Step 14 If you want to use the flat file provided with CiscoSecure GRS, enter the default, n. If you prefer to use an existing Oracle database, enter y. CiscoSecure GRS automatically selects the directory in which to install the files.
The following message displays:
These are your inputs: CommandMonitorAccessList = 10.10.10.10,10.20.20.20 GRS will automatically start on system bootstrap Number of Auto-Restart = 5 E-mail Recipient = username@domain.com Using flatfiles for data store Modify any values (y/n)? [n]
Step 15 If all the information is correct, enter n. If any information is incorrect, enter y. If you enter y, the installation program will begin again and you will need to reenter the information. When all information has been entered correctly, CiscoSecure GRS will display the following message if you used the -a option:
Enter path to package base directory [?,q]
Step 16 If you used the -a option, enter the full path to the directory in which you want to install CiscoSecure GRS, for example:
/export/grs
If you did not use the -a option, CiscoSecure GRS installs the necessary files on your hard disk in the following directory:
/opt/CSCOgrs
The following message displays:
The selected base directory <directory> must exist before installation is attempted. Do you want this directory created now [y,n,?,q]
Step 17 To create the directory, enter y. If you enter n, installation ends.
The names of the files and the directories display as they are installed. After all files have been installed, the following message displays:
Installation of <CSCOgrs> was successful.
Additional information about your installation is included with this message. Be sure to check any Readme.txt file for important information.
If you selected the default directory during installation, CiscoSecure GRS is installed in the $GRSHOME directory. To properly set up and configure CiscoSecure GRS, populate the CiscoSecure GRS data store using the GUI or the data store utilities located in $GRSHOME/bin. See the "Inputting Large Amounts of Data" section for information on populating the data store.
To input a small amount of data, use the GUI or command-line utilities grsdbadd, grsdbdelete, and grsdbview. (See "Using the CiscoSecure GRS Command-Line Interface Options and Utilities.")
If you have a large amount of data in your existing database, use the GUI or command-line utility grsfile2db. (See the "grsfile2db" section.)
To start CiscoSecure GRS, use the command-line utility start_grs. Follow these steps:
Step 1 Log in as root and enter:
cd $GRSHOME/bin
$GRSHOME is the name of the directory in which CiscoSecure GRS is installed.
Step 2 Enter:
./start_grs
Step 3 Verify that CiscoSecure GRS is up and running. Depending on your path environment variable, enter:
ps -ef | grep grs
or
ps -aux | grep grs
Step 4 Make sure there are two processes running---grs and grs_d. If not, check $GRSHOME/logfiles/grs.log.
Posted: Wed Feb 24 12:14:52 PST 1999
Copyright 1989-1999©Cisco Systems Inc.