Manual Chapter : Warehouse Topic: Access Product

Applies To:

Show Versions Show Versions

BIG-IQ Centralized Management

  • 7.1.0
Manual Chapter

Warehouse Topic: Access Product

For Access to have report data for a device, you must add the device to the BIG-IQ Centralized Management system, the system must discover the device, and someone must have run the Access remote logging configuration on the device.
  1. Log in to the BIG-IQ system with your user name and password.
  2. At the top of the screen, select
    Configuration
    , then on the left side of the screen, click
    ACCESS
    Access Groups
    .
  3. Click the name of an Access group.
    A new screen displays the group's properties.
  4. Enter a
    Partition
    . The default is
    Common
    . You can also enter a custom path to a partition you have created. Only users with access to a partition can view the objects that the partition contains. If the object resides in the
    Common
    partition, all users can access it.
  5. Click
    Shared resources
    .
    The screen displays a list of resources, with
    ACCESS POLICIES
    selected.
  6. Select the type of resource that you want to change.
    The screen displays a list of resources of that type on the right.
  7. At the top of the screen, select
    Access Reporting
    .
    A Summary report (for all devices and a default timeframe) starts to generate and display.
  8. From the left, select any report that you want to run.
    • All Managed Devices
      Includes all Access devices that are currently discovered.
    • <
      Access group name
      >
      - Select to include all devices in the Access group.
    • <
      Cluster display name
      >
      - Select to include the devices in the cluster.
    • <
      Device name
      >
      - Select to include the device. You can select any device from
      Managed Devices
      ,
      <
      Access group name
      >
      , or
      <
      Cluster display name
      >
      .
  9. From the
    TIMEFRAME
    list, specify a time frame:
    • Select a predefined time period - These range from
      Last hour
      to
      Last 3 months
      .
    • Set a custom time period - Select
      Between
      ,
      After
      , or
      Before
      , and click the additional fields that display the set dates and times that support your selection.
  10. To save report data in a comma-separated values file, click the
    CSV Report
    button.
    A CSV file downloads.
  11. To add this device to a new cluster:
    If a device is not a member of a Sync-Failover group that you configured to support an Active-Standby configuration for APM, do not add it to a cluster.
    If the device is the first member of a Sync-Failover group that you have added to the BIG-IQ system, add it to a new cluster. It does not matter whether this device is the Active or the Standby member of the group.
    1. From the
      Cluster Display Name
      list, select
      Create New
      , and then type a new name for this new cluster.
      A cluster name must be unique on the BIG-IQ system. It does not need to match the name of the Sync-Failover group on the BIG-IP device. However, ensuring some similarity between the names might be useful to you, because when you add the second member of the group, you must add it to the same cluster.
    2. Select an option from the
      Deployment Settings
      :
    • Initiate BIG-IP DSC sync when deploying configuration changes (Recommended)
      Select this option to prompt BIG-IQ to start the DSC synchronization process so that any configuration change made to this device is synchronized with other members of the DSC. This option makes sure all members of the DSC have the most current configuration.
    • Ignore BIG-IP DSC sync when deploying configuration changes
      Select this option to have BIG-IQ deploy any configuration changes for this device to all cluster members. Use this option only if this device is not configured in a DSC Sync-Failover device group, or if any members of the cluster are disabled.
  12. To add this device to an existing cluster:
    If the device is the second member of a Sync-Failover group that you have added to the BIG-IQ system, add the device to the existing cluster for that Sync-Failover group.
    1. From the
      Cluster Display Name
      list, select
      Use Existing
      , and then select the cluster from the list.
    2. Select an option from the
      Deployment Settings
      :
    • Initiate BIG-IP DSC sync when deploying configuration changes (Recommended)
      Select this option to prompt BIG-IQ to push any configuration changes to this device to other members of the DSC. This option makes sure all members of the DSC have the most current configuration.
    • Ignore BIG-IP DSC sync when deploying configuration changes
      Select this option to have BIG-IQ deploy any configuration changes for this device to all cluster members. Use this option only if this device is not configured in a DSC Sync-Failover device group, or if any members of the cluster are disabled.
  13. For Access Policy Manager (APM), select the
    Create a snapshot of the current configuration before importing
    check box to save a copy of the device's current configuration.
    You are not required to create a snapshot, but it is a good idea in case you have to revert to the previous configuration for any reason.
  14. For Local Traffic (LTM), select the
    Create a snapshot of the current configuration before importing
    check box to save a copy of the device's current configuration.
    You are not required to create a snapshot, but it is a good idea in case you have to revert to the previous configuration for any reason.