


Maintenance Commands                           ssadm-activate(1M)



NAME
     ssadm-activate - activate a SunScreen configuration

AVAILABILITY
     SUNWicgSS

SYNOPSIS
     ssadm activate [-k] [-n] [-l] policy

DESCRIPTION
     The ssadm activate command causes the Screen to begin  "exe-
     cuting"  a  particular configuration.  After activation, the
     configuration controls the  behavior  of  packet  filtering,
     encryption and decryption, proxies, logging, and administra-
     tive access.

     Normally, the named  policy  is  combined  with  the  common
     objects  registry to form the configuration.  But some poli-
     cies are "self-contained", with  their  own  set  of  common
     data.   Self-contained  policies  include  saved versions of
     policies, such as "Initial.2", "Initial.3", etc., and  poli-
     cies created using the -x option of ssadm active.

WARNING
     If the policy argument is omitted, ssadm  activate  reads  a
     configuration file from standard input.  Since the format of
     a configuration file is undocumented and private to the Sun-
     Screen  internal  software, using ssadm activate in this way
     is not supported.

OPTIONS
     -k   Even if the activation fails on one or  more  secondary
          Screens  in  a  Centralized  Management Group, continue
          activating on the other secondary Screens  and  on  the
          primary  Screen.   This is useful if a secondary Screen
          is down or unreachable due to network problems but  you
          want to change the configuration on the Primary.  After
          using the -k option in this  way  it  is  important  to
          remember that there are different configurations in use
          on different Screens in the CMG; this can be  rectified
          later  by  running  ssadm  activate  again when all the
          secondary Screens are responding properly.

     -n   Do not actually make  the  configuration  active;  just
          verify that it is valid.

     -l   Do not send the configuration to other Screens  in  the
          Centralized  Management  Group; only activate it on the
          local Screen.

SEE ALSO
     ssadm(1M),    ssadm-active(1M),    ssadm-edit(1M),    ssadm-



                    Last change: 7 March 2000                   1






Maintenance Commands                           ssadm-activate(1M)



     policy(1M)






















































                    Last change: 7 March 2000                   2



