DHCP Syslog Service Installation and Configuration
DHCP Syslog Services Prerequisites
The following prerequisites will need to be completed on all Windows DHCP servers used by machines being managed by MetaAccess NAC.
Step-by-step guide
Confirm Log File Size
Ensure the value allows for sufficient log file growth. MetaAccess NAC needs to relay all DHCP transactions to MetaAccess NAC. If the log file growth is capped, the DHCP server will stop logging and MetaAccess NAC will not receive the transactions.
- Open the registry to confirm this by locating the one of the following keys:
Windows 2008 and Windows 2012:
Some Windows 2008:
Note: Windows Servers will only have one of these registry keys. Do not create an additional registry key if one is already present.
- MetaAccess NAC recommends setting this to a value equal to 2048MB (if represented as a hex value it would be "800")
- This will allow for 7 (seven) 290 MB log files.
- Note: Every environment is different. MetaAccess NAC recommends 700 MB as a starting point. A larger environment may generate a higher volume of DHCP Transaction Logs, if the log files stop being updated during the week, this value will need to be increased.
If this registry value is changed, the DHCP service will need to be restarted for the change to take effect.
Installing the MetaAccess NAC Windows Services
The DHCP Syslog Service should be installed on all Windows DHCP servers used by any machine that will be managed by MetaAccess NAC. The installer install and starts a service on each DHCP server. No reboot of the server is required. If a mistake is made with one of the parameters, or if something changes at a later date, re-running the installer is completely safe.
Download the Installer to each domain controller
The Windows services installer can be downloaded from:
https://portal.myweblogon.com:8443/downloads/Tools/OPSWATServicesSetup.exe
If downloading from a network segment that is not managed by MetaAccess NAC, the internal IP address of the appliance (Manager node in a cluster) should be used in place of portal.myweblogon.com.
Launching the Installer
Once the Installer is downloaded, double-click to run. Choose “Next” on the first screen.
Select the DHCPsyslog Service to install and click “Finish”. This will launch the next portion of the install.
If pre-requisites are not completed, a warning messages will be displayed and the installer will abort. If the message is displayed, please review for the pre-requisite section of this document.
Completing the DHCP Syslog Service Install
Click “Next” on the DHCP Syslog Service portion of the installer.
Under Enforcer IP, enter the internal IP address of the MetaAccess NAC appliance. In a cluster, this will be the Manager node. Click “Next”.
Choose the install location for the service. In most cases, the defaults will be sufficient. Click “Next”.
Click “Next” when prompted to create a Start Menu shortcut.
Click “Install” when ready.
Click “Finish” to close the installer.