Table of Contents

About This Guide
Objectives
Audience
Documentation Conventions
Related Juniper Networks Documentation
Obtaining Documentation
Documentation Feedback
Requesting Support
Product Overview
Product Description
Product Features and Benefits
SDX Components
Component Overview
Server Components
SAE
Policy and Service Management
Accounting Support
SAE Extensions
JPS
NIC
Directory as Repository for SDX Data
LDAP Version 3
Prepackaged Integration
Third-Party Directory Servers
Sample Data
Directory Eventing and Failover
Configuration Tools
Local Configuration Tools
Policy Editor and Management
SDX Admin
SDX Configuration Editor
SDX Management Tools
Admission Control Plug-In Administration Application
JPS Administration Application
NIC Web Admin
Policy Web Admin
Prepaid Account Administration Application
SAE Web Admin
SNMP Agent
Traffic Mirroring Administration Application
VTA Configuration Manager
Service Management Applications
Advanced Services Gateway
Deep Packet Inspection Integration Application
Benefits of the DPI Integration
Enterprise Audit Plug-In
Enterprise Manager Portal
IDP Integration Applications
IVE Host Checker Integration Application
Prepaid Service Application
Sample Enterprise Service Portal
Sample IPTV Application
Sample Residential Service Selection Portals
Threat Mitigation Application
Traffic-Mirroring Application
Workflow Application
Java
LDAP
Scripts and External Programs
E-Mail Send/Receive Protocols
HTTP
XML
SDX Programming Interfaces
CORBA Plug-In SPI
CORBA Remote API
NIC Access API
SAE Core API
Script Services
Authentication and Accounting Applications
AAA RADIUS Servers
Admission Control Plug-In
Flat-File Accounting
Volume-Tracking Application
Managing Subscriber Accounts with Web Portals
Accessory Components
Monitoring Agent Application
Redirect Server
Auxiliary Applications
Application Server
IP FIlter
Other Applications
Planning an SDX Installation
Installation Options and Configurations
Component Distribution Scenarios
Distributed Installation
Master Directory and Directory Shadows
Scalability
Reliability
Simplified Management and Security
Regionalized Installation
Consolidated Installation
Redundancy Schemes
RADIUS
NIC Hosts
COPS Connection
Adding or Replacing Hardware
Single-Host Installation for Demonstration
Before You Install the SDX-300 Software
Requirements to Install the SDX Software
Required User Privileges to Install the Software
SDX Software Distribution
System Requirements for Installing the SDX Software
Verifying System Resources
Network Requirements for the SDX Software
SNMP Master Agent Requirements
Directory Server Choices
RADIUS Choices
X-Window Server Software Recommendations
Installing Solaris Patches for the UNIX Host
Next Steps
Installing the SDX-300 Software
Information About Installing IP Filter, Python Libraries, and the SNMP Agent
IP Filter
Python Libraries
SNMP Agent
Overview of Steps to Install the SDX Software
Logging the Installation Session
Installation Feature Sets, Components, and Packages
SDX Installation Choices
Installing the SDX Software with the Installation Program in Silent Mode
Installing the SDX Software with Installation Program in Graphical Mode
Overview of Installing SDX Components as Solaris Packages
Solaris IP Filter Software Installation Notes
Installing SDX Components as Solaris Packages
Transferring SDX Packages to Other Hosts
Example: Transferring and Installing Packages
Uninstalling the SDX Software
Next Steps
Defining an Initial Configuration
Configuring Initial Component Settings and Starting Components
Saving Logging Information for an SDX Component
Using OpenLDAP Directory Server
Starting the OpenLDAP Directory Server
Stopping the OpenLDAP Directory Server
Monitoring the OpenLDAP Directory Server
Loading the OpenLDAP Base and Sample Data
Starting and Operating the SAE
Starting the SAE for the First Time
Starting the SAE After Initial Startup
Monitoring the SAE
Stopping the SAE
Reviewing Port Settings for SDX Components
Enabling Display of Help Topics for SDX Configuration Tools
Next Steps
Setting Up an SAE
Configuring SAE Initial Settings
Configuring Directory Properties
Configuring RADIUS Properties and the Portal Address
Configuring JRE, SNMP, and Port Offset Properties
Configuring SAE Attributes in Property Files
Installing and Configuring Licenses
Types of Licenses
Obtaining a License
Pilot License
Server License
Before You Install a License
Installing Licenses
Configuring Initial Settings for a Server License
Configuring Directory Information
Configuring Miscellaneous Properties
Installing a Pilot License
Installing a Pilot License by Using the instlic Command
Installing a Pilot License by Using SDX Admin
Installing a Server License
Verifying a License
Command Options for the instlic and licchk Commands
Starting the License Server
Monitoring the License Server
Stopping the License Server
Customizing Configuration of the License Server
Configuring the License Manager
Configuring Directory Access
Configuring Client Properties
Customizing and Managing the License Server
Overview of the License Server
Server License
License Server Errors
License Requests
Example: License Allocation
Example: License Release Example
Lease Renewal
Directory Location and Access
Unsuccessful Connections from the SAE to the License Server
License Server Redundancy
Managing Log Files
Customizing License Server Configuration
Configuring Alarms
Specifying the ORB Configuration Property File
Configuring the Repository for the License Server
Configuring Properties for the License Server
Configuring Location of the License Server
Troubleshooting License Server Problems
Configuring and Starting the SDX SNMP Agent
Configuring the SNMP Agent
Configuring Directory Connection Parameters
Configuring SNMP Agent Logging
Severity Levels
Configuring Communication with the Master Agent
Configuring Other SDX SNMP Agent Parameters
Operating the SNMP Agent
Starting the SDX SNMP Agent
Stopping the SDX SNMP Agent
Monitoring the SDX SNMP Agent
Cleaning SNMP Agent Logs and Process Files
Commands for the Master Agent
Reading the SNMP Agent MIBs
Installing and Using the Net-SNMP Agent
Installing the Net-SNMP Agent
Configuring the Net-SNMP Agent
Starting the Net-SNMP Agent
Stopping the Net-SNMP Agent
Monitoring the Net-SNMP Agent
Locating the Log File
Installing Web Applications
Installing Web Applications
Installing Web Applications Inside JBoss
Stopping JBoss
Removing Web Applications
Session Timeouts for Web Applications
Access Controls
Default Security Roles for Access Control
Upgrading the SDX-300 Software
Upgrading the SDX Software
Migrating Directory Data
Overview of the Migration Script
Script Tasks Without Directory Server Upgrade
Script Tasks With Directory Server Upgrade
Overview of Steps to Migrate Directory Data
Managing Shadowed Directories when Migrating Directory Data
OpenLDAP Deployment
Updating OpenLDAP Secondary Directories
DirX Deployment
Updating DirX Secondary Directories
Sun ONE Deployment
Preparing the Migration Host
Cloning the Directory Server
Cloning the OpenLDAP Directory Server
Cloning the DirX Directory Server
Cloning Sun ONE Directory Server (iPlanet)
Installing the UMCmig Migration Package
Customizing Migration
Running the Migration Script
Completing the Migration
DirX
OpenLDAP
Sun ONE (iPlanet)
Updating the Original Host
Setting Up Your SDX Environment
Distributing Directory Changes to SDX Components
Overview of the Directory Eventing System
Configuring JNDI Properties for the Directory Eventing System
Extending the Directory Eventing System for SDX Components
Example
Identifying the Type of Directory
Managing Directory Problems
Directory Eventing System with Large Directories
Configuring Local Properties
Using SDX Admin
Overview
Understanding the SDX Admin Layout
Using the Menu Bar
Options Menu: Configure
Using the Toolbar
Using the Navigation Pane
Navigation Pane Icons
Using the Content Pane
General Procedures for Using SDX Admin
Using Pop-Up Menus
Modifying an Entry
Undo and Redo
Save and Revert
Deleting an Entry
Virtual Deletion
Searching Text
SDX Admin Limitations
Unique User IDs Only
Consistency
Interdependence
Internationalization
Locale
Localization of Data Storage
Using SDX Configuration Editor
Setting Up SDX Configuration Editor
Starting SDX Configuration Editor
Setting the Editing Level
Specifying the Directory Connection
Creating a New Project
Moving Between Versions of SDX Configuration Editor
Using SDX Configuration Editor
Importing Existing Configuration Objects
Creating a New Configuration Object
Exporting Configuration Objects
GUI Elements
Creating and Deleting Instances
Abbreviations
References
RFCs
Draft RFCs
Other Software Standards
URLs
Index