HP 800 User Manual page 387

Group
listener
certificates
logging
Table 13-1. DHCP Plug-in Configuration File Values
c. After copying the server.pem file from the NAC 800 server, delete
the file from its temporary location on the NAC 800 server.
Item
failopen
port
looprate
certfile
location
level
maxsize
The following text shows a DHCP plug-in example configuration file with
default values:
<?xml version="1.0" encoding="utf-8" ?>
<dhcpconnector>
<listener failopen="true">
<port>*:4433</port>
<looprate>10</looprate>
Description
failopen="true" means that if the NAC 800 DHCP
connection goes down, the DHCP server goes in to allow
all mode.
failopen="false" means that if the NAC 800 DHCP
connection goes down, the DHCP server goes in to deny
all mode.
Specifies the port on which the Dynamic Link Library
(DLL) file should listen for NAC 800 connections.
The rate in seconds at which the DHCP server will check
for a broken connection.
A Privacy Enhanced Mail (PEM) formatted file
containing the server key and certificate along with any
CA trusted entities.
The location to save the DLL's log file. The log file is an
ASCII file.
The level of verbosity in the log.
1 - Errors only (logs unexpected behavior, such as unable
to parse configuration file)
2 - Errors and warnings (logs mode changes, such as No
Connection to NAC 800 or Entering allow all mode)
3 - Errors, warnings, and information messages (logs
major processing steps, such as clearing ACL)
4 - Errors, warnings, information, and debug messages
The size in kB at which the log file should be rotated.
When the maximum size specified is exceeded the
current log file is closed and renamed as <current file
name> <integer>.
.
NOTE: If the current log file is open for reading, Windows
cannot rename the file. In that case, the DLL is unable to
rotate the log file, and attempts to re-open the current
log file and continue logging to it.
DHCP Plug-in
Installation Overview
13-5