Configuring the Realm

To configure the realm:

1. In Superuser mode, type configure terminal and press Enter.

   ORACLE# configure terminal

2. Type media-manager and press Enter to access the media-related configurations.

   ORACLE(configure)# media-manager

3. Type realm-config and press Enter. The system prompt changes to let you know that you can begin configuring individual parameters.

   ORACLE(media-manager)# realm-config
   ORACLE(realm-config)#

   From this point, you can configure realm parameters. To view all realm configuration parameters, enter a ? at the system prompt.

4. deny-period—Indicate the time period in seconds after which the entry for this host is removed from the deny list. The default value is 30. The valid range is:

   • Minimum—0

   • Maximum—4294967295

5. invalid-signal-threshold— Enter the number of invalid TLS signaling messages that trigger host demotion. The value you enter here is only valid when the trust level is low or medium. Available values are:

   • Minimum—Zero (0) is disabled.

   • Maximum—999999999

     If the number of invalid messages exceeds this value based on the tolerance window parameter, configured in the media manager, the host is demoted.

     The tolerance window default is 30 seconds. Bear in mind, however, that the system uses the same calculation it uses for specifying "recent" statistics in show commands to determine when the number of signaling messages exceeds this threshold. This calculation specifies a consistent start time for each time period to compensate for the fact that the event time, such as a user running a show command, almost never falls on a time-period's border. This provides more consistent periods of time for measuring event counts.

     The result is that this invalid signal count increments for two tolerance windows, 60 seconds by default, within which the system monitors whether or not to demote the host. The signal count for the current tolerance window is always added to the signal count of the previous tolerance window and compared against your setting.

6. access-control-trust-level—Set the trust level for the host within the realm. The default value is none. The valid values are:

   • none—Host is always untrusted. It is never promoted to the trusted list or demoted to the deny list.

   • low—Host can be promoted to the trusted list or demoted to the deny list.

   • medium—Host can be promoted to the trusted list but is only demoted to untrusted. It is never added to the deny list.

   • high—Host is always trusted.

7. Save and activate your configuration.