Driver Support Document

Cisco load balancers, LD series (OBSOLETE, PLEASE REDISCOVER)

• Internal Driver Name: CiscoLD
• Driver Package: CiscoPIX.rdp
  
• Driver Tier: 3
• Vendor: Cisco
• Family: Cisco LocalDirector
• IPv6 Support: Not Supported

Show Tested Devices Grid

Driver Features Support Grid

Retrieve Running Configuration

Release Notes

May need to change the TFTP interface access setting

To retrieve (or deploy) a PIX device configuration using TFTP, you may need to specify the TFTP interface to use on the device. If the device self-selects the wrong interface for the TFTP settings, you can override the TFTP interface access setting in the device's password rules in the system. Note that you must either set up a device-specific password rule or define a password rule that applies specifically to PIX devices that are exhibiting this problem.

To change a device password rule:

1. Edit the device and select "Use device-specific password information" or create or edit a device password rule applying to the appropriate device(s).
2. Click "Show Device Access Settings"
3. Choose "PIX TFTP interface" from one of the drop-down menus for "Name"
4. Enter the desired interface (e.g. "outside") for the "Value" of this setting.
5. Ensure all other authentication information is correct, and then save the device or password rule.

Double-check deployed configurations

The PIX occasionally has difficulty merging new configuration commands with the existing configuration. Because of this, we recommend that you double-check PIX configurations after you deploy them from the system.

First, take a snapshot of the configuration. Then check whether your changes were actually deployed to the running configuration as expected. Sometimes the system reports the deployment as failed, but still applies changes to the running configuration.

return to top

Syslog Configuration and Change Detection

Release Notes

No support for real-time change detection via AAA

The PIX does not support accounting sessions. Therefore, the system cannot provide real-time change detection through AAA.

Syslog interface must be defined

Cisco Firewalls require the specification of the interface to be used for relaying of syslog messages. The custom access variable "SyslogInterface" should be set to the correct interface to ensure correct operation of Syslog tasks.

return to top

Password Management

Release Notes

SNMP Updater cannot modify SNMP hosts

The SNMP community string updater can update, modify, or remove SNMP community strings. It cannot add, modify, or remove SNMP host entries that might be needed for desired SNMP functionality.

Changing limited password

The Limited Access Password field in the Deploy Passwords task only changes the telnet console access password, using the passwd command on the device.

return to top

Syslog Triggering

Trigger Patterns

Devices supported by this driver trigger changes using the following patterns:
LocalDirector Booted
End Configuration: OK


User Patterns

These patterns are used to determine the username/IP responsible for a change:

return to top