Page 2 - Working with Firewalls
11-2 User Guide for Device Fault Manager OL-11390-01 Chapter 11 Administering DFM (Advanced) Security Considerations Secure Socket Layer (SSL) SSL is an application-level protocol that enables secure transactions of data through privacy,authentication, and data integrity. It relies upon certificates...
Page 3 - Device Support
11-3 User Guide for Device Fault Manager OL-11390-01 Chapter 11 Administering DFM (Advanced) Device Support c. Re-register the DfmServer process with all the flags found in Step a and the following sm_server flags, as needed: # NMSROOT/bin/pdcmd -r DfmServer -e NMSROOT/objects/smarts/bin/sm_server -...
Page 4 - Registering Additional DFM Servers with the LMS Portal; Click Registration. The Registration Location page opens.
11-4 User Guide for Device Fault Manager OL-11390-01 Chapter 11 Administering DFM (Advanced) System Administration Registering Additional DFM Servers with the LMS Portal You can register additional DFM servers so that they appear on the LMS portal. There is no limit to thenumber of servers you can r...
Page 5 - Configuring Users Using CiscoWorks Local Mode
11-5 User Guide for Device Fault Manager OL-11390-01 Chapter 11 Administering DFM (Advanced) System Administration • CiscoSecure Access Control Server (ACS) Mode—ACS specifies the privileges associated withroles; however, ACS also allows you to perform device-based filtering, so that users only seea...
Page 6 - Using DFM in ACS Mode
11-6 User Guide for Device Fault Manager OL-11390-01 Chapter 11 Administering DFM (Advanced) System Administration Using DFM in ACS Mode Before performing any tasks that are mentioned here, you must ensure that you have successfullycompleted configuring Cisco Secure ACS with the CiscoWorks server. I...
Page 7 - Modifying CiscoWorks Roles and Privileges; Creating Self-Signed Security Certificates Yearly; Field
11-7 User Guide for Device Fault Manager OL-11390-01 Chapter 11 Administering DFM (Advanced) System Administration To create custom roles and privileges, see the Cisco Secure ACS online help. (On Cisco Secure ACS,click Online Documentation > Shared Profile Components > Command Authorization Se...
Page 8 - Backing Up and Restoring DFM Data
11-8 User Guide for Device Fault Manager OL-11390-01 Chapter 11 Administering DFM (Advanced) System Administration Step 3 Click Apply. Backing Up and Restoring DFM Data Use the LMS portal to perform immediate backups or schedule backups of DFM data. Common Servicesprovides a command line script that...
Page 9 - Changing the Password for DFM Databases; Option
11-9 User Guide for Device Fault Manager OL-11390-01 Chapter 11 Administering DFM (Advanced) System Administration Database files are stored using the backup directory structure described in Table 11-1 . • Format—/generation_number/suite[/directory]/filename • Example—/1/dfm/dfmFh.db Changing the Pa...
Page 10 - Configuring Logging
11-10 User Guide for Device Fault Manager OL-11390-01 Chapter 11 Administering DFM (Advanced) System Administration Step 2 Change directory to NMSROOT/conf/dfmDb/bin. For example, on Windows: cd Program Files\CSCOpx\conf\dfmDb\bin On Solaris: cd /opt/CSCOpx/conf/dfmDb/bin Note NMSROOT is the folder ...
Page 11 - Viewing and Maintaining Log Files
11-11 User Guide for Device Fault Manager OL-11390-01 Chapter 11 Administering DFM (Advanced) System Administration b. Click OK. To change the logging level for individual modules: a. For each module that you want to change, select one (or deselect all) of the following logging levels: • Warning—Log...
Page 13 - Starting and Stopping DFM Processes; Name
11-13 User Guide for Device Fault Manager OL-11390-01 Chapter 11 Administering DFM (Advanced) System Administration Starting and Stopping DFM Processes Note You cannot stop or unregister a process if any process that depends on it is running. You must first stopor unregister all dependent processes,...
Page 15 - Registering and Unregistering DFM Processes
11-15 User Guide for Device Fault Manager OL-11390-01 Chapter 11 Administering DFM (Advanced) System Administration Registering and Unregistering DFM Processes You can use pdcmd to manually unregister and reregister DFM processes with the CiscoWorks daemonmanager. This is useful when you want to do ...
Page 18 - Example 1: Specifying Clients that Can Connect to DFM
11-18 User Guide for Device Fault Manager OL-11390-01 Chapter 11 Administering DFM (Advanced) System Administration Example 1: Specifying Clients that Can Connect to DFM This example shows how to configure DFM to only accept client connections from the hostnames lucyand ethel. In this case you must ...
Page 19 - Example 2: Configuring the DFM Server to Use a Privileged Port
11-19 User Guide for Device Fault Manager OL-11390-01 Chapter 11 Administering DFM (Advanced) System Administration Example 2: Configuring the DFM Server to Use a Privileged Port This example shows how to configure DFM to use a privileged port. Step 1 Unregister any processes that depend on the DfmS...