Cisco CiscoSecure ACS for UNIX Upgrade to v2.3 CSU-2.3-UG Manual De Usuario

In order to support database replication among your ACSes, you need to purchase and preinstall Oracle
Enterprise or Sybase Enterprise RDBMS software at each ACS database site where you want replication
of the CiscoSecure profile database to be carried out.

The per user, per group, or per VPDN maximum session limit feature of the CiscoSecure ACS 2.3 for
UNIX with DSM package requires you to configure profile database replication.

With the CiscoSecure ACS 2.3 for UNIX product, you can purchase a special software license key to
enable the Distributed Session Manager (DSM). When installed and enabled, the DSM feature allows
access to special DSM-specific web pages that enable the CiscoSecure system administrator to limit and
enforce, on a very fine-grained basis, the number of concurrent sessions allowed per user, per group, or
per VPDN either on a network-wide basis, or through a particular “point-of-presence” group of NASes.

If you do not purchase the DSM-enabling software license key, you can still limit the number of
concurrent sessions on a per user basis. See the CiscoSecure ACS 2.3 for UNIX User Guide chapter
“Limiting and Tracking Sessions Per User, Group, or VPDN” for descriptions of maximum session
limits supported by the DSM-enabled and the non-DSM-enabled CiscoSecure ACS 2.3 for UNIX
packages.

Before you attempt to configure DSM max sessions control, make sure that you have implemented the
following CiscoSecure installation and post-installation requirements:

You need to have preinstalled Oracle Enterprise version 7.3.3, 7.3.4 or 8.0.x or Sybase Enterprise
version 11.0.2 or higher as the RDBMS for the CiscoSecure ACS profiles. For details see “Setting
Up an Oracle Database for CiscoSecure,” page xix or “Setting Up a Sybase Enterprise SQL Server
for CiscoSecure,” page xxii.

You need to have enabled the DSM module using the appropriate product:

If you were installing CiscoSecure ACS for the first time, you need to have installed the package
titled CiscoSecure ACS 2.3 for UNIX Distributed Session Manager. See “Basic Installation
Procedures,” page iv.

If you wanted to upgrade a previous version of CiscoSecure ACS 2.x for UNIX to support the
DSM module, you needed to first upgrade to CiscoSecure ACS 2.3 for UNIX. Then you could
use the CiscoSecure ACS Distributed Manager Option product to activate the DSM module. See
“Upgrading from CiscoSecure ACS 2.x to 2.3,” page xiv.

If you wanted to activate the DSM module at an existing CiscoSecure ACS 2.3 for UNIX site
without a licensed DSM module, you needed to use the package titled CiscoSecure ACS
Distributed Session Manager Option. See “Activating the DSM Module on an Existing
CiscoSecure ACS 2.3,” page xviii.