Hitachi GR2000 Series - Manual (Page 258)

Hitachi Gigabit Router GR2000 Series Enhanced Version Operations - Device Management Overview
7-92 GR2K-GA-0015
Ver. 07-02
(b) Checkout on the Policy-Server Side
Check the settings on the policy-server side. When the security function is utilized,
notice especially that failure of matching between the password key of the
policy-server side and that of the COPS configuration definition hinders
communication. Match the settings under Item No. 1 and Item No. 2 of Table 7-40,
below.
7.12.1.2 Impossible to Maintain Communication Between the Policy-Server and the Router While
COPS is in Operation
(a) Checkout of Packets being Dumped by Filtering/QoS Function
Step 1. Check to see if any such setting has inadvertently been made as this may
cause the packets between the policy-server and the Router to be dumped
due to some policy setting made from the policy-server or a filtering
function set up on the router from a console. Also make sure that those
packets are not assigned a lower priority order than the other load packets.
For checkout method, refer to Subsection 5.2.5, “Confirming the filtering
function” and Subsection 5.9.1, “Confirming QoS control function”.
Step 2. If the above checkout reveals that the communication is hindered because
of a set policy made from the policy-server, delete or alter the corresponding
policy on the policy-server, then restart with the
cops operation command of
the router.
(b) Checkout of Section 7.12.1.1, “Communication Cannot Be Established between the
Policy-Server and the Router When COPS is Started
It is likely that communication with the policy-server has been hindered because
settings of the COPS configuration definition or those on the policy-server side were
altered during the operation. Check out this possibility as well.
Table 7-40 Contents of Settings of COPS Configuration Definition and Policy-Server
Password Keys
No.
COPS Configuration
Definition
Parameters
Deployment Server
Environment Setting
Explanation
1 -server_password
<Keyid> <Password> Two authentication keys
of Deployment Server Match one of the two authentication keys of the
Deployment Server side to the server-password of the
COPS configuration definition.
2 -cops_password1-5
<Keyid> <Password> 5 Authentication key of
PEP (Client) Match one of the five authentication keys of the COPS
configuration definition side to that of PEP (Client) on the
Deployment Service side.