Cisco CiscoSecure ACS for UNIX Upgrade to v2.3 CSU-2.3-UG Manual De Usuario
Los códigos de productos
CSU-2.3-UG
xxx
CiscoSecure ACS 2.3 for UNIX User Guide
78-5222-02 Rev. A0
Editing Configuration Files to Enable or Disable the DSM Module
Editing Configuration Files to Enable or Disable the DSM Module
•
After installation or upgrade, you needed to log in to the CiscoSecure Administrator web site located
the Max Sessions Enabled field in the AAA General web page, select Distributed to activate the
DSM module, and restart the CiscoSecure ACS server.
the Max Sessions Enabled field in the AAA General web page, select Distributed to activate the
DSM module, and restart the CiscoSecure ACS server.
•
You needed to confirm that the AAA accounting functions are enabled on the client NASes. See the
CiscoSecure ACS 2.3 for UNIX User Guide chapter “CiscoSecure ACS Accounting.”
CiscoSecure ACS 2.3 for UNIX User Guide chapter “CiscoSecure ACS Accounting.”
•
If your network is serviced by more than one CiscoSecure ACS installation, database replication
must be configured and enabled between the CiscoSecure profile RDBMS sites. See the chapter
“Setting up Database Replication among CiscoSecure ACSes” in the CiscoSecure ACS 2.3 for UNIX
User Guide.
must be configured and enabled between the CiscoSecure profile RDBMS sites. See the chapter
“Setting up Database Replication among CiscoSecure ACSes” in the CiscoSecure ACS 2.3 for UNIX
User Guide.
Caution
Database replication setup requires database administrator (DBA) expertise. If you do not possess DBA
experience, assign this task to someone who does.
experience, assign this task to someone who does.
Editing Configuration Files to Enable or Disable the DSM
Module
Module
Cisco strongly recommends using the Max Sessions Enabled field in the CiscoSecure Administrator
AAA General web page to enable or disable the Distributed Session Manager or other supported types
of max sessions control.
AAA General web page to enable or disable the Distributed Session Manager or other supported types
of max sessions control.
Alternatively, if you do not have access to a web browser, you can enable or disable max sessions control
by editing the CSU.cfg and CSConfig.ini configuration files.
by editing the CSU.cfg and CSConfig.ini configuration files.
Step 1
In the $BASEDIR/config directory of your ACS server, edit your CSU.cfg and CSConfig.ini files as
specified in Table 4 to enable the DSM or other supported types of max sessions control.
specified in Table 4 to enable the DSM or other supported types of max sessions control.
Caution
If you edit the CSU.cfg and CSConfig.ini files, make sure that when you enable one type of max sessions
control that you also disable all other types of max sessions control. Enabling the settings for one type
of max sessions control in the table below without disabling the settings for the other types of max
sessions control can cause extremely slow authentication performance and out-of-memory errors.
control that you also disable all other types of max sessions control. Enabling the settings for one type
of max sessions control in the table below without disabling the settings for the other types of max
sessions control can cause extremely slow authentication performance and out-of-memory errors.
Table 4
Editing Configuration Files to Enable or Disable the DSM
Type of Max Sessions
CSU.cfg Required Settings
CSConfig.ini Required Settings
None (all max sessions
control disabled)
control disabled)
•
config_maxsessions_enable= 0
•
config_distmaxsessions_enable=0
Disables AAA server and DSM max
sessions control
sessions control
•
ProcessInMemoryMaxSessionInfo = disable
•
ArchiveMaxSessionInfoToDB = disable
Disables DBServer-based max sessions control.
Distributed Session
1
Manager (DSM)
•
config_maxsessions_enable= 0
•
config_distmaxsessions_enable=1
Disables AAA server-based max sessions
control and enable the DSM
control and enable the DSM
•
ProcessInMemoryMaxSessionInfo = disable
•
ArchiveMaxSessionInfoToDB = disable
Disables DBServer-based max sessions control