To Create Polices for the Agent Resources

The policies you create here are used in a subsequent procedure that verifies that the agents and load balancer work properly.

1. Create a referral policy for Load Balancer 6.

   1. Go to the Access Manager URL:

      https://loadbalancer-3.example.com:9443/amserver/UI/Login

   2. Log in to the Access Manager console using the following information:

      Username

      amadmin

      Password

      4m4dmin1

   3. On the Access Control tab, click the realm name example.com.

   4. Click the Policies tab.

   5. Click the “Referral URL Policy for users realm” link.

   6. In the Edit Policy page, under Rules, click New.

   7. In the page “Step 1 of 2: Select Service Type for the Rule,” select “URL Policy Agent (with resource name), and then click Next.

   8. In the page “Step 2 of 2: New Rule,” provide the following information:

      Name:

      URL Rule for LoadBalancer-6

      Resource Name:

      http://LoadBalancer-6.example.com:91/*

   9. Click Finish, and then click Save.

      The new rules you added are now contained in the rules list.

2. Create a policy for the users realm.

   1. In the Edit Policy page, click the Realms link.

   2. On the Access Control tab, click the users link.

   3. Click the Policies tab, and then click New Policy.

      In the Name field, enter URL Policy for LoadBalancer-6 .

   4. Under Rules, click NEW.

   5. In the page “Step 1 of 2: Select Service Type for the Rule,” click Next.

   6. In the page “Step 2 of 2: New Rule,” provide the following information:

      Name:

      Enter LoadBalancer-6.

      Parent Resource Name:

      Click http://LoadBalancer-6.example.com:91/* to select it.

      The Parent Resource Name selected is not contained in the Resource Name field.

      GET

      Mark the checkbox, and verify that the Allow option is selected.

      POST

      Mark the checkbox, and verify that the Allow option is selected.

   7. Click Finish.

   8. In the “Step 1 of 2: Select Subject Type” page, be sure that Access Manager Identity Subject is selected, and then click Next.

   9. In the “Step 2 of 2: New Subject — Access Manager Identity Subject” page, provide the following information:

      Name:

      LoadBalancer-6_Roles

      Filter:

      In the drop-down list, select Role. Then click Search. The search returns a list of available roles.

   10. In the Available: list, select manager and employee, and then click Add.

       The roles manager and employee are now contained in the Selected List.

   11. Click Finish.

3. Log out of the Access Manager console and close the browser.