15.10.6 System configuration

(1) Basic system configuration

Manager, agent is version 13, authentication servers JP1/Base is version 13 or earlier and supports a mix with version 12 or earlier.

Figure 15‒40: Basic configuration

To Page Top

(2) System configuration in which connection is established with multiple manager hosts

The following figure shows a system configuration in which one viewer host starts two viewers, one of which is connected to a manager host on which the communication encryption function is enabled and the other is connected to a manager host on which the communication encryption function is disabled.

Figure 15‒41: Configuration in which connection is established with multiple manager

In this system configuration, a host that encrypts communication with JP1/IM - View and a host that does not encrypt communication with JP1/IM - View are configured. For details about the configuration method, see Non-encryption communication host configuration file (nosslhost.conf) (in Chapter 2. Definition Files) in the manual JP1/Integrated Management 3 - Manager Command, Definition File and API Reference.

To maintain the confidentiality of communication data between the viewer host and the manager host on which the communication encryption function is disabled, configure a physically secure environment with a secure network by using a firewall, VPN, or the like, so that unencrypted communication from the viewer host in the unsecure environment to the manager host can be blocked.

To Page Top

(3) System configuration in which multiple viewer hosts establish connection

An environment in which JP1/IM - View version 11 is intermixed with JP1/IM - View version 10 or earlier is not supported because a manager host does not allow unencrypted communication with viewer hosts.

Figure 15‒42: Configuration in which multiple viewer hosts establish connection

To Page Top

(4) Tree configuration of manager hosts and viewer hosts

If the communication encryption function is disabled on a base manager host or a relay manager host, communication with the viewer host is not encrypted.

To maintain the confidentiality of communication data, configure a physically secure environment with a secure network by using a firewall, VPN, or the like. Encrypt all communication from a viewer host in an unsecure environment and block unencrypted communication by using a firewall, for example. Also, place a viewer host that uses unencrypted communication in a secure environment.

Figure 15‒43: Tree configuration of managers

To Page Top

(5) Configuration of manager hosts and an authentication server

If you will be encrypting communication between manager hosts and an authentication server, consider the authentication server's authentication range.

• When all manager hosts are version 12

  If the authentication server's communication encryption function is enabled, enable the communication encryption function (authentication server's function as a client) in all JP1/Bases (manager hosts).

  Figure 15‒44: When all manager hosts are version 12

• When manager hosts with version 11 or later are intermixed with manager hosts with version 10 or earlier

  If the authentication server's communication encryption function is enabled, separate authentication ranges must be provided by configuring a server for which the authentication server's communication encryption function is disabled.

  Figure 15‒45: When manager hosts with version 11or later are intermixed with manager hosts with version 10 or earlier

To Page Top