HP Cache Server Appliance Administrator Guide

Chapter 11 Security Options

6. Open the records.config file located in Traffic Server’s config directory with Vi.

7. Edit the following variable:

8. Save and close the

records.config file.

9. Restart Traffic Server.

Controlling access to Traffic Manager

You can restrict access to Traffic Manager to ensure that only authenticated users can change Traffic Server

configuration options and view performance and network traffic statistics. You can:

• The administrator ID and password are set by default at installation to both be admin. You can set a new

administrator ID and password as shown below. A user that logs in to Traffic Manager with the

administrator ID has access to all Traffic Manager activities. (See ‘Setting the administrator ID and

password,” below.)

• Create and maintain a list of administrator accounts that determines who can log into Traffic Manager and

which activities they can perform. (See Creating a list of administrator accounts‚ on page 85)

• Create an access control list of IP addresses that defines which machines can access Traffic Manager. (See

Controlling host access to Traffic Manager‚ on page 86)

• Use SSL for secure administration (see Using SSL for secure administration‚ on page 87).

Setting the administrator ID and password

During the initial web cache appliance configuration an Administrator ID (admin) and password (admin)

were created that control access to Traffic Manager. A user that logs on to Traffic Manager using the correct

ID and password can view all the statistics on the Monitor tab and change any configuration options on the

Configure tab.

You can change the administrator ID and password at any time.

To change the administrator ID and password:

1. Access Traffic Manager from your browser (refer to Accessing Traffic Manager‚ on page 8).

2. On the Configure tab, click the Security button.

Variable Description

proxy.config.arm.security_enabled Set this variable to 1 to enable ARM security.

NOTE To disable the ARM security option, set the

proxy.config.arm.security_enabled variable

to 0 (zero).