| 5.6 |  | Security Device Manager (SDM) |
| 5.6.2 |  | Accessing SDM |

| To minimize the impact on router performance, SDM uses an industry standard Java client application. SDM can be accessed by executing an HTML file in the router, which then loads the SDM Java file. Use a supported browser to launch SDM from a PC. They include:

- Netscape version 4.79 or later
- Internet Explorer version 5.5 or later
- Java and JavaScript must be enabled on the browser

There are Java plug-ins built into these browsers with Java Virtual Machine (JVM) which requires no plug-in. SDM also supports Java Runtime Engine (JRE) versions 1.3.1 and higher.

The client software must be running on a machine with one of the Microsoft operating systems listed below.

- Windows 98
- Windows NT 4.0 (with Service Pack 4)
- Windows 2000
- Windows XP
- Windows ME

Use the process shown in Figure to access SDM for the first time. The process is intended to run on a router with SDM installed, or routers with default SDM configurations loaded into memory. The startup wizard will appear.

SDM communicates with the router to access the SDM application for download to the PC and to read and write the router configuration and provide a status. For the Cisco IOS Release 12.3M or later and Cisco IOS Release 12.2(13)ZH or later releases, SDM uses HTTPS for data transport. For earlier IOS releases, SDM uses RCP as the transport. In both cases SDM relies on Telnet or SSH access for communication to the routers.

Be careful not to lock down the router too tight. If certain types of traffic are denied, SDM will not be accessible to administer the router. For the Cisco IOS Release 12.2(11)T, Cisco IOS Release 12.2(13)T and Cisco IOS Release 12.2(15)T releases, SDM uses SSH and Telnet.

When configuration changes are made in SDM, IOS commands are transferred to the router flash as a temporary file using RCP. Then the temporary file is copied to the routers running config and then the file is deleted. SDM uses a “squeeze” process to reclaim router flash. Squeeze is used in two instances:

- In the installation procedure, a step is performed to “squeeze flash” when removing an older SDM version and then adding a newer one.
- Also a “squeeze” message may appear in a SDM dialogue box, when attempting to deliver an image to the router. In either case, follow the recommendations provided.

| Web Links http://www.cisco.com/en/US/ products/sw/secursw/ps5318/ products_user_guide_list.html