Configuring policy server parameters – H3C Technologies H3C Intelligent Management Center User Manual

Page 600

Advertising
background image

582

{

Next LDAP Sync/Backup Time—This field is automatically populated with the next

synchronization or backup time when you configure the LDAP Synchronization Time parameter.

8.

Click OK.

Configuring policy server parameters

A policy server works with the iNode client to provide functions such as anti-proxy and host name

binding check. If the EAD component is installed, the policy server works with the EAD component and

the iNode client to carry out computer security check.
Policy server parameters affect operation and daily maintenance of policy servers.
To configure the policy server parameters:

1.

Click the User tab.

2.

Select User Access Policy > Service Parameters > System Settings from the navigation tree.
The list includes all the system settings.

3.

Click the Configure icon for Policy Server Parameters.

4.

Configure the following policy server parameters:

{

Enable Policy Server/IPv6 Enable Policy Server—Select Enable or Disable from the list to

configure the policy server function. To implement anti-proxy, host name binding check, and
related functions, you must enable the policy server function.

Enable either or both options according to your network requirements:

In an IPv4 network or an IPv4/IPv6 dual stack network that contains only IPv4 access
devices, select Enable only for Enable Policy Server. The iNode clients communicate with

the policy server using the IPv4 protocol.

In an IPv4 network or an IPv4/IPv6 dual stack network that contains only IPv6 access
devices, select Enable only for IPv6 Enable Policy Server. The iNode clients communicate

with the policy server using the IPv6 protocol.

In an IPv4/IPv6 dual stack network that contains both IPv4 and IPv6 access devices, select
Enable for both Enable Policy Server and IPv6 Enable Policy Server. If the iNode client

communicates with the policy server through an IPv4 access device, the IPv4 protocol is

used. If the iNode client communicates with the policy server through an IPv6 access device,

the IPv6 protocol is used.

{

Configuration Port of Policy Server—Set the listening port for configuration update packets from
the IMC console. Use the default port 9013.

{

Listening Port of Proxy Server—Set the listening port for packets sent from iNode clients. Use the
default port 9019.

{

Policy Server Log Level—Select a level from the list for the logs generated by a policy server. Log
levels in descending order of severity include Fatal, Error, Warning, Info, and Debugging. With

the log level configured, policy servers record logs of the specified level and all above levels. Do

not use the debugging level except for troubleshooting, because it greatly consumes system

resources.

{

iNode Management Center IP—Specify the IP address of the iNode management center. The IP
address is delivered to the iNode client once the user passes authentication, and is used by the

iNode client to contact the iNode management center for client updates.

{

Heartbeat Interval—Specify the interval at which each iNode client sends a heartbeat packet to
the policy server.

Advertising