Document Outline

• toc
  • Software license
    • Nortel Networks software license agreement
  • New in this release
    • Features
    • Other changes
  • Introduction
    • Before you begin
    • Text conventions
    • Related information
      • Publications
      • Online
    • How to get help
  • Overview
    • The Nortel SNAS
      • Elements of the Nortel SNAS
      • Supported users
      • Supporting additional users with the software license file
      • Role of the Nortel SNAS
        • Nortel SNAS functions
        • Nortel SNAS enforcement types
          • VLANs and filters
          • Filters only
          • DHCP hub subnet
        • Groups and profiles
        • Authentication methods
        • Nortel Health Agent host integrity check
        • Multi-OS Applet Support
        • Communication channels
          • About SSH The Secure Shell (SSH) protocol provides secure and en
      • Nortel SNAS clusters
      • Interface configuration
        • One armed configuration
    • Nortel SNAS configuration and management tools
    • Nortel SNAS configuration roadmap
  • Initial setup
    • Before you begin
      • About the IP addresses
        • Management IP address
        • Portal Virtual IP address
        • Real IP address
    • Initial setup
      • Setting up a single Nortel SNAS device or the first in a cluster
        • Settings created by the quick setup wizard
      • Adding a Nortel SNAS device to a cluster
        • Before you begin
        • Joining a cluster
    • Next steps
    • Applying and saving the configuration
  • Managing the network access devices
    • Before you begin
    • Managing network access devices
      • Roadmap of domain switch commands
      • Adding a network access devices
        • Using the quick switch setup wizard
        • Manually adding a switch
      • Deleting a network access devices
      • Configuring the network access devices
      • Mapping the VLANs
      • Managing SSH keys
        • Generating SSH keys for the domain
        • Managing SSH keys for Nortel SNAS communication
        • Reimporting the network access devices SSH key
      • Monitoring switch health
      • Controlling communication with the network access devices
    • Configuring SSCPLite
    • Configuring SNMP Profiles
    • Configuring SNMP Versions
    • Configuring SSCPLite Community
    • Configuring SNMP Templates
  • Configuring the domain
    • Configuring the domain
      • Roadmap of domain commands
      • Creating a domain
        • Manually creating a domain
        • Using the Nortel SNAS domain quick setup wizard in the CLI
      • Deleting a domain
      • Configuring domain parameters
      • Configuring the Nortel Health Agent check
        • Using the quick Nortel Health Agent setup wizard in the CLI
      • Configuring the SSL server
        • Tracing SSL traffic
        • Configuring SSL settings
        • Configuring traffic log settings
      • Configuring HTTP redirect
      • Browser-Based Management Configuration
      • Browser-Based Management Configuration with SSL
      • Configuring advanced settings
      • Configuring RADIUS accounting
        • Managing RADIUS accounting servers
        • Configuring Nortel SNAS -specific attributes
      • Configuring local DHCP services
        • DHCP Settings menu
        • Hub DHCP subnet type
        • Filter DHCP subnet type
        • Standard DHCP subnet type
        • Managing local DHCP leases
      • Creation of the location
        • Creation of the locations
      • Configuring Lumension PatchLink integration
  • Configuration of the RADIUS server
    • Overview of RADIUS server
      • 802.1x functionality
    • Roadmap of RADIUS server configuration commands
    • Configuration of the RADIUS server
    • Configuration of the client
    • Configuration of the realms
    • Configuration of the dictionary
    • Configuration of the RADIUS accounting
    • Configuration of the RADIUS authentication methods
    • Configuration of the EAP authentication methods
    • Select the server certificate
    • Select the CA certificate
  • Configuration of Microsoft NAP Interoperability
    • Roadmap of NAP configuration commands
    • Configuration of NAP Interoperability
      • Probation Settings
      • Remote Network Policy Servers
      • System Health Validators
      • Configuration of Windows System Health Validator
  • Configuring groups and profiles
    • Overview
      • Groups
        • Default group
      • Linksets
      • SRS rule
      • Extended profiles
    • Before you begin
    • Configuring groups and extended profiles
      • Roadmap of group and profile commands
      • Configuring groups
      • Configuring client filters
      • Configuring extended profiles
      • Creating RADIUS attributes to a group
      • Mapping linksets to a group or profile
      • Creating a default group
  • Configuring authentication
    • Overview
    • Before you begin
    • Configuring authentication
      • Roadmap of authentication commands
      • Configuring authentication methods
      • Configuring advanced settings
      • Configuring RADIUS authentication
        • Adding the RADIUS authentication method
        • Modifying RADIUS configuration settings
        • Managing RADIUS authentication servers
        • Configuring session timeout
      • Configuring LDAP authentication
        • Adding the LDAP authentication method
        • Modifying LDAP configuration settings
        • Managing LDAP authentication servers
        • Managing LDAP macros
        • Group Search Configuration
        • Managing Active Directory passwords
        • Configuring Advanced LDAP Settings
      • Configuring local database authentication
        • Adding the local database authentication method
        • Managing the local portal database
        • Managing the local MAC database
          • Adding MAC addresses using the MAC Registration interface The MA
      • Specifying authentication fallback order
  • Managing system users and groups
    • User rights and group membership
    • Managing system users and groups
      • Roadmap of system user management commands
      • Managing user accounts and passwords
      • Managing user settings
      • Managing user groups
      • CLI configuration examples
        • Adding a new user
        • Changing a users group assignment
        • Changing passwords
          • Changing your own password All users can change their own passwo
          • Changing another users password Only the admin user can change a
        • Deleting a user
  • Customizing the portal and user logon
    • Overview
      • Captive portal and Exclude List
        • Exclude List
      • Portal display
        • Portal look and feel
          • Default appearance Figure 14 "Default appearance of the portal H
          • Colors There are four colors used on the portal page:
        • Self service portal
          • • “Language localization ” (page 233 )
          • Language localization The default English-language dictionary fi
        • Linksets and links
          • Autorun linksets You can enable an autorun feature for a linkset
          • Planning the linksets Plan your configuration so that linksets c
        • Macros
        • Automatic redirection to internal sites
        • Examples of redirection URLs and links
      • Managing the end user experience
        • Automatic JRE upload
        • Windows domain logon script
    • Customizing the portal and logon
      • Roadmap of portal and logon configuration commands
      • Configuring the captive portal
      • Configuring the Exclude List
      • Changing the portal language
        • Configuring language support
        • Setting the portal display language
      • Configuring the portal display
      • Changing the portal colors
      • Configuring custom content
      • Configuring linksets
      • Configuring links
        • Configuring external link settings
  • Configuring system settings
    • Configuring the cluster
      • Roadmap of system commands
      • Configuring system settings
      • Configuring the Nortel SNAS host
        • Viewing host information
      • Configuring host interfaces
      • Configuring static routes
      • Configuring host ports
      • Managing interface ports
      • Configuring the Access List
      • Configuring date and time settings
        • Managing NTP servers
      • Configuring DNS servers and settings
        • Managing DNS servers
      • Configuring RSA servers
      • Configuring syslog servers
      • Configuring administrative settings
      • Enabling TunnelGuard SRS administration
      • Configuring Nortel SNAS host SSH keys
        • Managing known hosts SSH keys
      • Configuring RADIUS auditing
        • About RADIUS auditing
        • About the vendor-specific attributes
        • Configuring RADIUS auditing
        • Managing RADIUS audit servers
      • Configuring authentication of system users
        • Managing RADIUS authentication servers
      • Configuration of auto blacklisting
      • Configuration of harden password
  • Managing certificates
    • Overview
      • Key and certificate formats
      • Creating certificates
      • Installing certificates and keys
      • Saving or exporting certificates and keys
      • Updating certificates
    • Managing private keys and certificates
      • Roadmap of certificate management commands
      • Managing and viewing certificates and keys
      • Generating and submitting a CSR
      • Adding a certificate to the Nortel SNAS
      • Adding a private key to the Nortel SNAS
      • Importing certificates and keys into the Nortel SNAS
      • Displaying or saving a certificate and key
      • Exporting a certificate and key from the Nortel SNAS
      • Generating a test certificate
  • Configuring SNMP
    • Configuring SNMP
      • Roadmap of SNMP commands
      • Configuring SNMP settings
      • Configuring the SNMP v2 MIB
      • Configuring the SNMP community
      • Configuring SNMPv3 users
      • Configuring SNMP notification targets
      • Configuring SNMP events
  • Viewing system information and performance statistics
    • Viewing system information and performance statistics
      • Roadmap of information and statistics commands
      • Viewing system information
      • Viewing alarm events
      • Viewing log files
      • Viewing AAA statistics
      • Viewing all statistics
      • Kicking by username or address
      • Nortel SNAS TPS Interface
  • Maintaining and managing the system
    • Managing and maintaining the system
      • Roadmap of maintenance and boot commands
      • Performing maintenance
      • Backing up or restoring the configuration
      • Configuring the Nortel SNAS scheduler
        • Addition of a scheduled task
      • Managing Nortel SNAS devices
      • Managing software for a Nortel SNAS device
  • Upgrading or reinstalling the software
    • Upgrading the Nortel SNAS
      • Performing minor and major release upgrades
        • Downloading the software image
      • Activating the software upgrade package
    • Reinstalling the software
      • Before you begin
      • Reinstalling the software from an external file server
      • Reinstalling the software from a CD
  • The Command Line Interface
    • Connecting to the Nortel SNAS
      • Establishing a console connection
        • Requirements
        • Procedure steps
      • Establishing a Telnet connection
        • Enabling and restricting Telnet access
        • Running Telnet
      • Establishing a connection using SSH
        • Enabling and restricting SSH access
        • Running an SSH client
    • Accessing the Nortel SNAS cluster
    • CLI Main Menu or Setup
    • Command line history and editing
    • Idle timeout
  • Configuration example
    • Scenario
    • Steps
      • Configure the network DNS server
      • Configure the network DHCP server
      • Configure the network core router
      • Configure the Ethernet Routing Switch 8300
        • Steps
        • Enabling SSH
        • Configuring the Nortel SNAS pVIP subnet
        • Creating port-based VLANs
        • Configuring the VoIP VLANs
        • Configuring the Red, Yellow, and Green VLANs
        • Configuring the NSNA uplink filter
        • Configuring the NSNA ports
        • Enabling NSNA globally
      • Configure the Ethernet Routing Switch 5510
        • Steps
        • Setting the switch IP address
        • Configuring SSH
        • Configuring the Nortel SNAS pVIP subnet
        • Creating port-based VLANs
        • Configuring the VoIP VLANs
        • Configuring the Red, Yellow, and Green VLANs
        • Configuring the login domain controller filters
        • Configuring the NSNA ports
        • Enabling NSNA globally
      • Configure the Nortel SNAS
        • Performing initial setup
        • Completing initial setup
        • Adding the network access devices
          • Adding the Ethernet Routing Switch 8300 Add the switch manually:
          • Adding the Ethernet Routing Switch 5510 Use the quick switch wiz
        • Mapping the VLANs
        • Enabling the network access devices
  • Troubleshooting
    • Troubleshooting tips
      • Cannot connect to the Nortel SNAS using Telnet or SSH
        • Verify the current configuration
        • Enable Telnet or SSH access
        • Check the Access List
        • Check the IP address configuration
      • Cannot add the Nortel SNAS to a cluster
      • Cannot contact the MIP
        • Check the Access List
        • Add Interface 1 IP addresses and the MIP to the Access List
      • The Nortel SNAS stops responding
        • Telnet or SSH connection to the MIP
        • Console connection
      • A user password is lost
        • Administrator user password
        • Operator user password
        • Root user password
        • Boot user password
      • A user fails to connect to the Nortel SNAS domain
    • Trace tools
    • System diagnostics
      • Installed certificates
      • Network diagnostics
      • Active alarms and the events log file
      • Error log files
  • Appendix CLI reference
    • Using the CLI
      • Global commands
      • Command line history and editing
      • CLI shortcuts
        • Command stacking
        • Command abbreviation
        • Tab completion
        • Using a submenu name as a command argument
      • Using slashes and spaces in commands
      • IP address and network mask formats
        • IP addresses
        • Network masks
      • Variables
    • CLI Main Menu
    • CLI command reference
      • Information menu
      • Statistics menu
      • Configuration menu
      • Boot menu
      • Maintenance menu
  • Appendix Syslog messages
    • Syslog messages by message type
      • Operating system (OS) messages
      • System Control Process messages
        • About alarm messages
        • About event messages
      • Traffic Processing Subsystem messages
      • Start-up messages
      • AAA subsystem messages
      • NSNAS subsystem messages
    • Syslog messages in alphabetical order
  • Appendix Supported MIBs
    • Supported MIBs
    • Supported traps
  • Appendix Supported ciphers
  • Appendix Adding User Preferences attribute to Active Directory
    • Install All Administrative Tools (Windows 2000 Server)
      • Register the Schema Management dll (Windows Server 2003)
      • Add the Active Directory Schema Snap-in (Windows 2000 Server and
        • Create a shortcut to the console window
      • Permit write operations to the schema (Windows 2000 Server)
      • Create a new attribute (Windows 2000 Server and Windows Server 2
      • Create the new class
        • Add isdUserPrefs attribute to nortelSSLOffload class
        • Add the nortelSSLOffload Class to the User Class
  • Appendix Configuring DHCP to auto-configure IP Phones
    • Configuring IP Phone auto-configuration
      • Creating the DHCP options
      • Configuring the Call Server Information and VLAN Information opt
      • Setting up the IP Phone
  • Appendix Using a Windows domain logon script to launch the Norte
    • Configuring the logon script
    • Creating a logon script
      • Creating the script as a batch file
      • Creating the script as a VBScript file
    • Assigning the logon script
  • Appendix Software licensing information
    • OpenSSL License issues
    • Original SSLeay License
    • GNU General Public License
    • Apache Software License, Version 1.1
    • Bouncy Castle license