SDX 6.4.x Application Library Guide > Providing Admission Control with ACP > Installing ACP

Installing ACP

For information about installing ACP, see Chapter 1, Installing the SDX Applications. After you have installed the ACP application on a host, you must add the ACP configuration to the directory. To do so:

1. On the ACP host, log in as root or as another authorized administrator.
2. Launch the local configuration tool from the ACP installation directory.

./opt/UMC/acp/etc/config -l&

The local configuration tool window appears.

3. Complete the fields in the local configuration tool window. Local Properties for ACP describes the fields on the Main tab and the Other tab.
4. Click OK.
5. A file called bootstrap,properties appears in the /opt/UMC/acp/etc folder, and the ACP configuration appears in the directory. The SDX software automatically sets some values for properties that do not appear in the local configuration tool window.

Local Properties for ACP

Use the fields in this section to configure the local properties for ACP.

Configuration Directory URL

• URL of the primary directory.
• Value—URL in the format ldap://<host>:389

• <host>—IP address or name of directory host

• Example—ldap://192.0.2.1:389/
• Property name—Config.java.naming.provider.url

Backup Configuration Directory URLs

• List of redundant directories.
• Value—Space-separated list of URLs; URLs have the format ldap://<host>:389

• <host>—IP address or name of directory host

• Default—Unspecified
• Example—ldap://192.0.2.1:389/ ldap://192.0.2.3:389/
• Property name—Config.net.juniper.smgt.des.backup_provider_urls

Configuration Location

• Name of the object that contains the ACP configuration data.
• Value—/<objectName>
• Guidelines—This object appears in l=ACP, ou=staticConfiguration, o=Management, o=umc. Sensible choices for this field are the name of the host or the name of a given location. If you configure ACP redundancy, use the same name in the ACP configurations on both hosts.
• Default—/config
• Example—bostonConfig
• Property name—Config.ACP.namespace

Directory Base DN

• DN of the root of the SDX data in the directory.
• Value—o=<DN>

• <DN>—DN

• Guidelines—If you are storing non-SDX data in the directory, and that data changes frequently whereas the SDX data does not, you may need to adjust the default value to improve performance. For optimal performance, set the value to the DN of an entry superior to both the SDX data and the changing non-SDX data.
• Default—o=umc
• Example—o=umc
• Property name—Config.net.juniper.smgt.des.event_baseDN

Configuration Directory Authentication DN

• DN of the directory entry that defines the username with which the SDX component accesses the directory.
• Value—<DN>
• Example—cn=nic, ou=Components, o=Operators,<base>
• Default—cn=conf, o=Operators,<base>
• Property name—Config.java.naming.security.principal

Configuration Directory Password

• Password with which ACP accesses the directory.
• Value—<password>
• Guidelines—The password can be encoded in base64 and not visible in plain text. To use an encoded value, use the format {BASE64} <encoded-value>.
• Default—conf
• Example—secret
• Property name—Config.java.naming.security.credentials

Connect Timeouts (s)

• Maximum time that the directory eventing system (DES) waits for the directory to respond.
• Value—Number of seconds in the range 1-2147483647
• Default—10
• Example—5
• Property name—Config.net.juniper.smgt.des.connect.timeout

Java Runtime Environment

• Path to the Java Runtime Environment (JRE).
• Value—Text string
• Guidelines—The SDX software requires a JRE that conforms to the Java 2 specification. The SDX software has been tested with Sun's JRE. Check the SDX Release Notes for information about which version of the Sun JRE is distributed with the SDX software. Other JREs should work but have not been tested with the SDX software.
• Default—../jre/bin/java (path for the JRE that is distributed with the SDX software and installed with the other SDX components)
• Property name—Acp.java

Java Heap Size

• Maximum amount of memory available to the JRE.
• Value—Number of megabytes in the format <integer>m
• Guidelines—Change this value if you have problems caused by lack of memory. Set the value lower than the available physical memory to avoid low performance caused by disk swapping.
• Default—64m