All rights reserved. Specifications in this manual are subject to change without notice.
Originated in the USA. All other trademarks are the property of their respective owners.
Open Source Code
Certain Aruba products include Open Source software code developed by third parties, including software code
subject to the GNU General Public License (GPL), GNU Lesser General Public License (LGPL), or other Open
Source Licenses. Includes software from Litech Systems Design. The IF-MAP client library copyright 2011
Infoblox, Inc. All rights reserved. This product includes software developed by Lars Fenneberg, et al. The Open
Source code used can be found at this site:
http://www.arubanetworks.com/open_source
Legal Notice
The use of Aruba Networks, Inc. switching platforms and software, by all individuals or corporations, to terminate
other vendors’ VPN client devices constitutes complete acceptance of liability by that individual or corporation for
this action and indemnifies, in full, Aruba Networks, Inc. from any and all legal actions that might be taken against it
with respect to infringement of copyright on behalf of those vendors.
4Dell Networking W-ClearPass PolicyManager 6.0 | QuickStar t Guide
Chapter 1
Configuring Policy Manager
This Quick Start Guide for the Dell Networking W-ClearPass Policy Manager System (Policy Manager) describes the
steps for installing the appliance using the
that the required services are running.
Installing Policy Manager
The Policy Manager server requires initial port configuration.
Server Port Overview
Policy Manager Backplane
P—Power Button; A—Serial port; B—Management port; C—Data port
Command Line Interface
(CLI) and using the
User Interface
(UI) to ensure
as described in the following table:
KeyPortDescription
Configures the Policy Manager
ASerial
B - eth1
C - eth2Data (gigabit Ethernet)
Management (gigabit
Ethernet)
appliance initially, via hardwired
terminal.
Provides access for cluster
administration and appliance
maintenance via web access, CLI, or
internal cluster communications.
Configuration required.
Provides point of contact for RADIUS,
TACACS+, Web Authentication and
other data-plane requests.
Configuration optional. If not
configured, requests redirected to the
management port.
Server Port Configuration
Before starting the installation, gather the following required information:
Data Port IP Address must not be in the same subnet as
the Management Port IP Address
To set up the Policy Manager appliance:
1. Connect and power on.
Using the null modem cable provided, connect a serial port on the appliance to a terminal, then connect power
and switch on. The appliance immediately becomes available for configuration.
Use the following parameters for the serial port connection:
l Bit Rate: 9600
l Data Bits: 8
l Parity: None
l Stop Bits: 1
l Flow Control: None
2. Login.
Later, you will create a unique appliance/cluster administration password. For now, use the preconfigured
credentials:
login: appadmin
password: eTIPS123
This starts the Policy Manager Configuration Wizard.
3. Configure the appliance.
Replace the bolded placeholder entries in the following illustration with your local information:
Enter hostname: hyperion.us.arubanetworks.com
Enter Management Port IP Address: 192.168.5.10
Enter Management Port Subnet Mask: 255.255.255.0
Enter Management Port Gateway: 192.168.5.1
Enter Data Port IP Address: 192.168.7.55
Enter Data Port Subnet Mask: 255.255.255.0
Enter Data Port Gateway: 192.168.7.1
Enter Primary DNS: 198.168.5.3
6Dell Networking W-ClearPass PolicyManager 6.0 | QuickStar t Guide
Enter Secondary DNS: 192.168.5.1
4. Change your password.
Use any string of at least six characters:
New Password:************
Confirm Password:************
Going forward, you will use this password for cluster administration and management of the appliance.
5. Change system date/time.
Do you want to configure system date time information [y|n]: y
Please select the date time configuration options.
1) Set date time manually
2) Set date time by configuring NTP servers
Enter the option or press any key to quit: 2
Enter Primary NTP Server: pool.ntp.org
Enter Secondary NTP Server: time.nist.gov
Do you want to configure the timezone? [y|n]: y
Once the timezone information is entered, you are asked to confirm the selection.
6. Commit or restart the configuration.
Follow the prompts:
y[Y] to continue
n[N] to start over again
q[Q] to quit
Enter the choice: Y
Successfully configured Policy Manager appliance
**************************************************************
* Initial configuration is complete.
* Use the new login password to login to the CLI.
* Exiting the CLI session in 2 minutes. Press any key to exit now.
A Subset of Useful CLI Commands
The CLI provides a way to manage and configure Policy Manager information. Refer to
Interface
in the User Guide for more detailed information on the CLI.
The CLI can be accessed from the console using a serial port interface or remotely using SSH:
*****************************************************************************************
**
* Dell W-ClearPass Policy Manager 6.0.2.49062*
**
*****************************************************************************************
Logged in as group Local Administrator
[appadmin@hyperion.us.arubanetworks.com]#
The following subset of CLI commands may be useful at this point:
l To view the Policy Manager data and management port IP address, and DNS configuration:
[appadmin]# show ip
l To reconfigure DNS or add a new DNS:
[appadmin]# configure dns <primary> [secondary] [tertiary]
l To reconfigure or add management and data ports:
[appadmin]# configure ip <mgmt | data > <ipadd> netmask <netmask address> gateway <gateway address>
l Network interface type: mgmt or data
l Server ip address.
netmask <netmask address>Netmask address.
gateway <gateway address>Gateway address.
l To configure the date (time and time zone optional):
[appadmin]# configure date –d <date> [-t <time>] [-z <timezone>]
l To configure the hostname to the node:
configure hostname <hostname>
l If you are using Active Directory to authenticate users, be sure to join the Policy Manager appliance to that
domain as well.
ad netjoin <domain-controller.domain-name> [domain NETBIOS name]
where:
Flag/ParameterDescription
<domain-controller. domainname>
[domain NETBIOS name]
Required.
Host to be joined to the domain.
Optional.
8Dell Networking W-ClearPass PolicyManager 6.0 | QuickStar t Guide
Chapter 2
Accessing Policy Manager
Use
Firefox 3.0
1. Open the administrative interface.
Navigate to https://<hostname>/tips (where <hostname> is the hostname you configured during the initial
configuration).
2. Enter License Key.
3. Click on the Activate Now link.
(or higher) or
Internet Explorer 7.0.5
(or higher) to perform the following steps:
4. Activate the product.
If the appliance is connected to the Internet, click on the Activate Now button. If not, click on the Download
button to download the Activation Request Token. Contact Dell Support and provide your technician with the
downloaded token in an email attachment. Once you receive the Activation Key from Dell Support, save it to a
known location on your computer. Come back to this screen and click on the Browse button to select the
Activation Key. Upload the key by clicking on the Upload button.