19.1 Using the Proxy Administration Tool

The iChain Proxy Server supports a Proxy Administration Tool, allowing you to manage and administer your iChain Proxy Server from a browser. To launch the tool, you simply access a special management URL on the iChain Proxy Server. The URL must contain either the 172-net management address or the IP address you have already configured for the server, followed by:1959/appliance/config.html. For example,

http://172.16.0.1:1959/appliance/config.html

NOTE:If the iChain Proxy Server is located behind a firewall and you are accessing the Proxy Administration Tool from a browser outside that firewall, you must open ports 1959, 2222, and 51100 on the firewall to administer the proxy server.

19.1.1 Prerequisites for Running the Administration Tool

You need the following:

  • A proxy server that has been initialized and is currently running

  • A Java-enabled browser, such as Internet Explorer 5.5 (or higher) running on your workstation

  • Sun JRE 1.5 SP4 on your workstation. If you use an older version, you might experience the following problems:

    • A delay when selecting Configure > Authentication. For more details, see Windows XP.

    • If you use a large PIN list, the entire list might not display. Earlier versions can handle approximately 762 entries.

  • SSL 2.0 and SSL 3.0 (where available) enabled on the browser

  • A network or cross-over cable connection to the proxy server

  • The IP address of the proxy server

After the appliance has been configured with an IP address and mask, a gateway server, and a DNS server, you can administer it over the network via any client that can communicate with it over IP.

Until you have completed that configuration, you must use a cross-over cable and a client with the following constraints:

  • Client IP address set to 172.16.0.2 (or another available 172-net IP address) with a mask of 255.255.255.255

  • Client gateway address set to 172.16.0.1 (the management address of the appliance)

  • Client DNS server address set to 172.16.0.1

Windows XP

If you are running the Proxy Administration Tool on a Windows XP machine with Sun JRE, you might experience a delay when selecting Configure > Authentication. While the page is loading, you cannot access the Proxy Administration Tool until all of the authentication profiles are added.

A possible workaround is to go to the control panel and double-click the Java Plug-in, then select the Browser tab and deselect Microsoft Internet Explorer so that the Sun JRE is not used.

If you need to use the Sun JRE, we recommend that you use the Sun JRE 1.5 SP4 version to avoid the slowness issue on Windows platforms. You can use the Microsoft* JVM, but you need to already have it downloaded because it is no longer available for download.

19.1.2 Starting the Administration Tool

  1. Start the browser on your client workstation.

  2. Point the browser to the URL of the appliance you want to manage.

    The URL must contain either the 172-net management address or an IP address you have already configured on the appliance, followed by :1959/appliance/config.html, for example:

    http://172.16.0.1.:1959/appliance/config.html

  3. Accept the SSL certificate.

    IMPORTANT:You must have SSL 2.0 and SSL 3.0 (where available) enabled in your browser. Otherwise, the browser displays an error indicating that the page cannot be displayed.

  4. Enter a password if you have previously specified one for the appliance.

19.1.3 Applying and Cancelling Changes

As you make changes to appliance parameters in the Proxy Administration Tool, these changes are tracked and accumulated in a buffer until you either apply or cancel them. You can make changes in multiple tabs and wait to apply them all at once.

This does not apply to the Actions and Date/Time tabs. Changes in these tabs are immediately effective. If you change the NTP server, the appliance time changes with the next synchronization cycle (normally about 15 minutes).

Except in the cases just mentioned, clicking Apply commits all changes made in any page since the last time you started the appliance or clicked Cancel. Clicking Cancel cancels all changes made since the last time you started the appliance or clicked Apply. Clicking Cancel is also a quick way of requesting that the appliance reread the currently displayed settings.

When you click Apply or Cancel, the action cannot be undone.

19.1.4 The Help Button

Click the Help button in the left frame to display the online documentation with a table of contents in the left frame. To navigate through the documentation, click the titles in the table of contents.

19.1.5 Encryption

If you have specified passwords for appliance management purposes, communications regarding the password are transmitted through HTTPS. All other communications with the appliance are not normally encrypted.