Administration Guide
Page 2
... in this document or Website are the property of their respective owners. Any use of Cisco Systems, Inc.; IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY, CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY. NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND... and Learn, and iQuick Study are trademarks of the word partner does not imply a partnership relationship between Cisco and any other company. (0501R) Any Internet Protocol (IP) addresses used in illustrative content is an adaptation of a program developed by the University of California, Berkeley (UCB) ...
... in this document or Website are the property of their respective owners. Any use of Cisco Systems, Inc.; IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY, CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY. NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND... and Learn, and iQuick Study are trademarks of the word partner does not imply a partnership relationship between Cisco and any other company. (0501R) Any Internet Protocol (IP) addresses used in illustrative content is an adaptation of a program developed by the University of California, Berkeley (UCB) ...
Administration Guide
Page 3
...Audience xi How to Use This Guide xii Related Documentation xiii Symbols and Conventions xv Obtaining Documentation, Obtaining Support, and Security Guidelines xvii Managing GSS Devices from the GUI 1-1 Logging Into the Primary GSSM Graphical User Interface 1-2 Logging Into the GSS and Accessing the ...GSSM Data 1-14 Viewing Third-Party Software Versions 1-15 Managing the GSS from the CLI 2-1 Logging in to the CLI and Enabling Privileged EXEC Mode 2-2 Understanding GSS Software Licenses 2-3 Acquiring and Installing CNR and DDoS License Files 2-4 Cisco Global Site Selector Administration Guide iii
...Audience xi How to Use This Guide xii Related Documentation xiii Symbols and Conventions xv Obtaining Documentation, Obtaining Support, and Security Guidelines xvii Managing GSS Devices from the GUI 1-1 Logging Into the Primary GSSM Graphical User Interface 1-2 Logging Into the GSS and Accessing the ...GSSM Data 1-14 Viewing Third-Party Software Versions 1-15 Managing the GSS from the CLI 2-1 Logging in to the CLI and Enabling Privileged EXEC Mode 2-2 Understanding GSS Software Licenses 2-3 Acquiring and Installing CNR and DDoS License Files 2-4 Cisco Global Site Selector Administration Guide iii
Administration Guide
Page 4
...2-15 Displaying the running - Contents Installing CNR 2-6 Accessing the CNR CLI 2-9 Invoking the Shell and Executing CNR Utilities 2-11 Using the startup-config and running-config Files 2-12 Changing the startup-config and running -config File 2-15 Displaying the startup-config File ...of a GSS Device 2-28 Disabling the GSS Software 2-28 Restoring GSS Factory-Default Settings 2-29 Replacing GSS Devices in Your GSS Network 2-30 Replacing the Primary GSSM in the Network 2-31 Converting the Standby GSSM to a Primary GSSM 2-31 Replacing the Primary GSSM with an Available GSS 2-35 Cisco Global ...
...2-15 Displaying the running - Contents Installing CNR 2-6 Accessing the CNR CLI 2-9 Invoking the Shell and Executing CNR Utilities 2-11 Using the startup-config and running-config Files 2-12 Changing the startup-config and running -config File 2-15 Displaying the startup-config File ...of a GSS Device 2-28 Disabling the GSS Software 2-28 Restoring GSS Factory-Default Settings 2-29 Replacing GSS Devices in Your GSS Network 2-30 Replacing the Primary GSSM in the Network 2-31 Converting the Standby GSSM to a Primary GSSM 2-31 Replacing the Primary GSSM with an Available GSS 2-35 Cisco Global ...
Administration Guide
Page 5
...Status 2-51 Displaying GSS Services 2-52 Creating and Managing User Accounts 3-1 Creating and Managing GSS CLI User Accounts 3-1 Creating a GSS User Account 3-2 Modifying a GSS User Account 3-3 Deleting a GSS User Account 3-3 Creating and Managing Primary GSSM GUI User Accounts 3-4 Privilege Levels for Using the Primary GSSM... GUI 3-5 Creating a GUI User Account 3-9 Modifying a GUI User Account 3-12 Removing a GUI User Account 3-12 Changing the User Account GUI Password 3-13 Creating and Modifying User Views for the Primary GSSM GUI 3-15 Custom User View Overview 3-15 Cisco...
...Status 2-51 Displaying GSS Services 2-52 Creating and Managing User Accounts 3-1 Creating and Managing GSS CLI User Accounts 3-1 Creating a GSS User Account 3-2 Modifying a GSS User Account 3-3 Deleting a GSS User Account 3-3 Creating and Managing Primary GSSM GUI User Accounts 3-4 Privilege Levels for Using the Primary GSSM... GUI 3-5 Creating a GUI User Account 3-9 Modifying a GUI User Account 3-12 Removing a GUI User Account 3-12 Changing the User Account GUI Password 3-13 Creating and Modifying User Views for the Primary GSSM GUI 3-15 Custom User View Overview 3-15 Cisco...
Administration Guide
Page 6
... 3-27 Restoring or Changing the Administrator GUI Password 3-28 Managing GSS User Accounts Through a TACACS+ Server 4-1 TACACS+ Overview 4-2 TACACS+ Configuration Quick Start 4-4 Configuring a TACACS+ Server for Use with the GSS 4-5 Configuring Authentication Settings on the TACACS+ Server 4-5 Configuring Authorization...GSS 4-23 Specifying TACACS+ Authentication of the GSS 4-23 Specifying TACACS+ Authorization of the GSS 4-24 Specifying TACACS+ Accounting on the GSS 4-25 Showing TACACS+ Statistics on the GSS 4-26 Clearing TACACS+ Statistics on the GSS 4-28 Disabling TACACS+ on a GSS 4-28 Cisco ...
... 3-27 Restoring or Changing the Administrator GUI Password 3-28 Managing GSS User Accounts Through a TACACS+ Server 4-1 TACACS+ Overview 4-2 TACACS+ Configuration Quick Start 4-4 Configuring a TACACS+ Server for Use with the GSS 4-5 Configuring Authentication Settings on the TACACS+ Server 4-5 Configuring Authorization...GSS 4-23 Specifying TACACS+ Authentication of the GSS 4-23 Specifying TACACS+ Authorization of the GSS 4-24 Specifying TACACS+ Accounting on the GSS 4-25 Showing TACACS+ Statistics on the GSS 4-26 Clearing TACACS+ Statistics on the GSS 4-28 Disabling TACACS+ on a GSS 4-28 Cisco ...
Administration Guide
Page 7
...GSS Traffic 5-1 Filtering GSS Traffic Using Access Lists 5-1 Access List Overview 5-2 Creating an Access List 5-4 Associating an Access List with a GSS Interface 5-7 Disassociating an Access List from a GSS Interface 5-8 Adding Rules to an Access List 5-8 Removing Rules from an Access List 5-9 Segmenting GSS...Notification Operations 6-7 Viewing SNMP Status 6-8 Viewing MIB Files on the GSS 6-9 Backing Up, Restoring, and Downgrading the GSSM Database 7-1 Backing Up the Primary GSSM 7-2 Backup Overview 7-2 Performing a Full Primary GSSM Backup 7-3 Cisco Global Site Selector Administration Guide vii
...GSS Traffic 5-1 Filtering GSS Traffic Using Access Lists 5-1 Access List Overview 5-2 Creating an Access List 5-4 Associating an Access List with a GSS Interface 5-7 Disassociating an Access List from a GSS Interface 5-8 Adding Rules to an Access List 5-8 Removing Rules from an Access List 5-9 Segmenting GSS...Notification Operations 6-7 Viewing SNMP Status 6-8 Viewing MIB Files on the GSS 6-9 Backing Up, Restoring, and Downgrading the GSSM Database 7-1 Backing Up the Primary GSSM 7-2 Backup Overview 7-2 Performing a Full Primary GSSM Backup 7-3 Cisco Global Site Selector Administration Guide vii
Administration Guide
Page 9
Contents A A P P E N D I X INDEX Purging System Log Messages from the GUI 9-15 Common System Log Messages 9-16 Viewing GSS System Logs Using CiscoWorks RME Syslog Analyzer 9-18 Upgrading the GSS Software A-1 Verifying the GSSM Role in the GSS Network A-2 Backing up and Archiving the Primary GSSM A-3 Obtaining the Software Upgrade A-3 Upgrading Your GSS Devices A-5 OL-10410-01 Cisco Global Site Selector Administration Guide ix
Contents A A P P E N D I X INDEX Purging System Log Messages from the GUI 9-15 Common System Log Messages 9-16 Viewing GSS System Logs Using CiscoWorks RME Syslog Analyzer 9-18 Upgrading the GSS Software A-1 Verifying the GSSM Role in the GSS Network A-2 Backing up and Archiving the Primary GSSM A-3 Obtaining the Software Upgrade A-3 Upgrading Your GSS Devices A-5 OL-10410-01 Cisco Global Site Selector Administration Guide ix
Administration Guide
Page 11
... Global Site Selector Manager (GSSM) and GSS devices, including login security, GSS software upgrades, GSSM database administration, and log files. OL-10413-01 Cisco Global Site Selector CLI-Based Global Server ...Load-Balancing Configuration Guide xi This preface contains the following major sections: • Audience • How to properly manage and maintain your organization's specific network configuration. It describes the procedures necessary to Use...
... Global Site Selector Manager (GSSM) and GSS devices, including login security, GSS software upgrades, GSSM database administration, and log files. OL-10413-01 Cisco Global Site Selector CLI-Based Global Server ...Load-Balancing Configuration Guide xi This preface contains the following major sections: • Audience • How to properly manage and maintain your organization's specific network configuration. It describes the procedures necessary to Use...
Administration Guide
Page 12
... Describes how to create access lists and access groups to configure the GSS as a client of general guidelines for use in the network. Chapter 4, Managing GSS User Accounts Through a TACACS+ Server Describes how to filter GSS traffic. Cisco Global Site Selector CLI-Based Global Server Load-Balancing Configuration Guide xii OL-10413-01 Preface How...
... Describes how to create access lists and access groups to configure the GSS as a client of general guidelines for use in the network. Chapter 4, Managing GSS User Accounts Through a TACACS+ Server Describes how to filter GSS traffic. Cisco Global Site Selector CLI-Based Global Server Load-Balancing Configuration Guide xii OL-10413-01 Preface How...
Administration Guide
Page 13
...use to monitor the status of your GSS devices and of global load balancing on your site for installation, how to install the GSS device in an equipment rack, and how to maintain and troubleshoot the GSS hardware. It describes how to prepare your GSS network. Release Note for the Cisco...Balancing Configuration Guide xiii Regulatory Compliance and Safety Information for the Cisco Global Site Selector Regulatory compliance and safety information for the GSS software. Describes how to this document, the GSS documentation set includes the following: Document Title Description Global Site ...
...use to monitor the status of your GSS devices and of global load balancing on your site for installation, how to install the GSS device in an equipment rack, and how to maintain and troubleshoot the GSS hardware. It describes how to prepare your GSS network. Release Note for the Cisco...Balancing Configuration Guide xiii Regulatory Compliance and Safety Information for the Cisco Global Site Selector Regulatory compliance and safety information for the GSS software. Describes how to this document, the GSS documentation set includes the following: Document Title Description Global Site ...
Administration Guide
Page 14
...groups, DNS sticky, network proximity, and DNS rules. Procedures on how to configure your primary GSSM from the GUI to use the CLI interface. Several of all GSS command-line interface (CLI) commands including syntax, options, and related commands. This document also provides an overview of the... CNR on the supported operating systems: Windows, Solaris, and Linux. An alphabetical list of the Cisco CNS Network Registrar (CNR) documents are referenced in this guide. Cisco Global Site Selector CLI-Based Global Server Load-Balancing Configuration Guide xiv OL-10413-01 This document also...
...groups, DNS sticky, network proximity, and DNS rules. Procedures on how to configure your primary GSSM from the GUI to use the CLI interface. Several of all GSS command-line interface (CLI) commands including syntax, options, and related commands. This document also provides an overview of the... CNR on the supported operating systems: Windows, Solaris, and Linux. An alphabetical list of the Cisco CNS Network Registrar (CNR) documents are referenced in this guide. Cisco Global Site Selector CLI-Based Global Server Load-Balancing Configuration Guide xiv OL-10413-01 This document also...
Administration Guide
Page 15
... and keywords are grouped in boldface screen font. Cisco CNS Network Information about how to emphasize certain information. Command descriptions use the following symbols and conventions to use the CNR command-line Registrar CLI Reference program, nrcmd. Do not use the following conventions: screen font Terminal sessions and ... (CLI). A nonquoted set of characters. Screen examples use quotation marks around the string, or the string will include the quotation marks. font OL-10413-01 Cisco Global Site Selector CLI-Based Global Server Load-Balancing Configuration...
... and keywords are grouped in boldface screen font. Cisco CNS Network Information about how to emphasize certain information. Command descriptions use the following symbols and conventions to use the CNR command-line Registrar CLI Reference program, nrcmd. Do not use the following conventions: screen font Terminal sessions and ... (CLI). A nonquoted set of characters. Screen examples use quotation marks around the string, or the string will include the quotation marks. font OL-10413-01 Cisco Global Site Selector CLI-Based Global Server Load-Balancing Configuration...
Administration Guide
Page 16
Nonprinting characters, such as passwords, are in italic font. Graphical user interface elements use of data or adversely impact use the following conventions: boldface text Courier text Courier bold text italic text Instructs the user to system prompts are in italic ... ^ represents the key labeled Control. An exclamation point (!) or a pound sign (#) at the beginning of a line of text in an example. Cisco Global Site Selector CLI-Based Global Server Load-Balancing Configuration Guide xvi OL-10413-01 For example, the key combination ^D in a screen display means hold...
Nonprinting characters, such as passwords, are in italic font. Graphical user interface elements use of data or adversely impact use the following conventions: boldface text Courier text Courier bold text italic text Instructs the user to system prompts are in italic ... ^ represents the key labeled Control. An exclamation point (!) or a pound sign (#) at the beginning of a line of text in an example. Cisco Global Site Selector CLI-Based Global Server Load-Balancing Configuration Guide xvi OL-10413-01 For example, the key combination ^D in a screen display means hold...
Administration Guide
Page 20
...the signed certificate every time you log in to the primary GSSM, accept the certificate from Cisco Systems, Inc. If you are using the user administration features of the Certificate Manager Import Wizard. Cisco Global Site Selector Administration Guide 1-2 OL-10410-01 When you first log in to the...HTTPS) to access the GUI: https://gssm1.example.com Note If you cannot locate the primary GSSM DNS name, be aware that the GSS network uses secure connections and that the address of the GSSM includes https:// (HTTP over SSL) instead of your preferred Internet web browser application, ...
...the signed certificate every time you log in to the primary GSSM, accept the certificate from Cisco Systems, Inc. If you are using the user administration features of the Certificate Manager Import Wizard. Cisco Global Site Selector Administration Guide 1-2 OL-10410-01 When you first log in to the...HTTPS) to access the GUI: https://gssm1.example.com Note If you cannot locate the primary GSSM DNS name, be aware that the GSS network uses secure connections and that the address of the GSSM includes https:// (HTTP over SSL) instead of your preferred Internet web browser application, ...
Administration Guide
Page 21
If you are using Netscape-In the New Site Certificate dialog box, click Next and ...and password in the fields provided, and then click Login (see Figure 1-2) appears. See the Cisco Global Site Selector GUI-based Global Server Load-Balancing Configuration Guide for information about navigating through the primary GSSM GUI.... Chapter 1 Managing GSS Devices from the GUI Logging Into the Primary GSSM Graphical User Interface - Figure 1-1 Primary GSSM GUI Login Window OL-10410-01 Cisco Global Site Selector Administration Guide 1-3 At the primary...
If you are using Netscape-In the New Site Certificate dialog box, click Next and ...and password in the fields provided, and then click Login (see Figure 1-2) appears. See the Cisco Global Site Selector GUI-based Global Server Load-Balancing Configuration Guide for information about navigating through the primary GSSM GUI.... Chapter 1 Managing GSS Devices from the GUI Logging Into the Primary GSSM Graphical User Interface - Figure 1-1 Primary GSSM GUI Login Window OL-10410-01 Cisco Global Site Selector Administration Guide 1-3 At the primary...
Administration Guide
Page 22
Click OK to log out of the window. Logging Into the GSS and Accessing the CNR GUI You can extend the capabilities of GSS by clicking Logout in the upper right of the primary GSSM GUI session. 7. When you click OK, the primary GSSM logs you... information about obtaining, installing, and activating a CNR license, see Figure 1-1). The browser confirms that you out of a primary GSSM GUI session by using the Cisco Network Registrar (CNR). Cisco Global Site Selector Administration Guide 1-4 OL-10410-01 CNR is purchased as a separate license add-on and involves upgrading the existing...
Click OK to log out of the window. Logging Into the GSS and Accessing the CNR GUI You can extend the capabilities of GSS by clicking Logout in the upper right of the primary GSSM GUI session. 7. When you click OK, the primary GSSM logs you... information about obtaining, installing, and activating a CNR license, see Figure 1-1). The browser confirms that you out of a primary GSSM GUI session by using the Cisco Network Registrar (CNR). Cisco Global Site Selector Administration Guide 1-4 OL-10410-01 CNR is purchased as a separate license add-on and involves upgrading the existing...
Administration Guide
Page 24
... Web-based user interface (Web UI). Activating and Modifying GSS Devices Activate your GSS devices from your GSS network. Click the Resources tab. 2. The GSS devices requiring activation appear with an "Online" status. Cisco Global Site Selector Administration Guide 1-6 OL-10410-01 You also use the primary GSSM GUI to remove a non-functioning standby GSSM or...
... Web-based user interface (Web UI). Activating and Modifying GSS Devices Activate your GSS devices from your GSS network. Click the Resources tab. 2. The GSS devices requiring activation appear with an "Online" status. Cisco Global Site Selector Administration Guide 1-6 OL-10410-01 You also use the primary GSSM GUI to remove a non-functioning standby GSSM or...
Administration Guide
Page 27
... modify the name and location of your GSS devices using the primary GSSM GUI. Click the Global Site Selectors navigation link. The Global Site Selectors list page appears (see the Cisco Global Site Selector Getting Started Guide). OL-10410-01 Cisco Global Site Selector Administration Guide 1-9 Modifying GSS Device Name and Location You can modify...
... modify the name and location of your GSS devices using the primary GSSM GUI. Click the Global Site Selectors navigation link. The Global Site Selectors list page appears (see the Cisco Global Site Selector Getting Started Guide). OL-10410-01 Cisco Global Site Selector Administration Guide 1-9 Modifying GSS Device Name and Location You can modify...
Administration Guide
Page 28
...see the Cisco Global Site Selector Getting Started Guide. 1-10 Cisco Global Site Selector Administration Guide OL-10410-01 The Modifying GSS details page appears. 4. Activating and Modifying GSS Devices Chapter 1 Managing GSS Devices from your network through the primary GSSM GUI. Click the Modify GSS icon ...for the device. With the exception of the primary GSSM, you can delete GSS devices from the GUI 3. Click the Resources tab. 2. You use the device name to activate. To delete a GSS device from the list. Click the Global Site Selectors navigation link. From the...
...see the Cisco Global Site Selector Getting Started Guide. 1-10 Cisco Global Site Selector Administration Guide OL-10410-01 The Modifying GSS details page appears. 4. Activating and Modifying GSS Devices Chapter 1 Managing GSS Devices from your network through the primary GSSM GUI. Click the Modify GSS icon ...for the device. With the exception of the primary GSSM, you can delete GSS devices from the GUI 3. Click the Resources tab. 2. You use the device name to activate. To delete a GSS device from the list. Click the Global Site Selectors navigation link. From the...
Administration Guide
Page 32
...Monitoring Screen Refresh Interval field. Printing and Exporting GSSM Data You can send any data that appears on the primary GSSM GUI to open it using your designated CSV editor. • To print the data, click the Print button. b. The default is 10 minutes. • To ...to 4000 minutes. You cannot output individual pieces of time that can pass without user activity before GSS devices report their status to indicate the successful updating of available printers. 1-14 Cisco Global Site Selector Administration Guide OL-10410-01 In the GUI Session Inactivity Timeout field, enter the...
...Monitoring Screen Refresh Interval field. Printing and Exporting GSSM Data You can send any data that appears on the primary GSSM GUI to open it using your designated CSV editor. • To print the data, click the Print button. b. The default is 10 minutes. • To ...to 4000 minutes. You cannot output individual pieces of time that can pass without user activity before GSS devices report their status to indicate the successful updating of available printers. 1-14 Cisco Global Site Selector Administration Guide OL-10410-01 In the GUI Session Inactivity Timeout field, enter the...