Overview 1 Preparing for installation 2

Transcription

1 Contents Overview 1 Preparing for installation 2 Network requirements 2 Server requirements 2 Hardware requirements 2 Software requirements 2 Client requirements 2 Pre-installation checklist 3 Installing the license server 4 Obtaining the license server installation package 4 Installing the license server 4 Verifying the installation 4 Opening related license server's ports in the firewall 5 Logging in to the license server 6 Removing the license server 7 Upgrading the license server 8 i

2 Overview H3C license server is license management software developed by H3C. It provides centralized management on licensing and provides licensing for services on the network. This simplifies licensing workflow and automates services licensing. The license server provides the following features: Allows you to apply for licenses based on the hardware of the server where the license server resides. Allows you to install and store the licenses on the license server. 1

3 Preparing for installation Network requirements Before you install a license server, plan your network. Make sure the server where the license server resides is accessible in the network. Server requirements Hardware requirements For a license server to function correctly, install the license server on a physical server. As a best practice, install the license server on the physical server that corresponds to the leader in a controller team to save the physical server resources. Table 1 shows the minimum hardware requirements for a server to host the license server. Table 1 Minimum hardware requirements Item CPU Memory size Available disk space NIC speed Minimum requirements X86-64 (Intel 64/AMD 64), quad cores 8 GB 64 GB for the partition where the root directory resides 1 to 10 Gbps Software requirements Table 2 shows the software requirements for a server to host a license server. Table 2 Software requirements Item Requirements Operating system CentOS 7 64-bit The CentOS system might have bugs such as Shellshock bugs. Note the officially released CentOS system updates. Client requirements You do not need to install a client for logging in to the license server. You can log in to the license server through a Web browser. The license server supports the following Web browsers: Google Chrome 27 and later. Mozilla Firefox 31 and later. Internet Explorer 8 and later. 2

4 If the host uses Java 7, install the Java SE Runtime Environment 7u25 patch. You can download the patch from IMPORTANT: Do not install the Java SE Runtime Environment 7u40 patch. Earlier Java 7 versions have an SSL connection bug. The Java SE Runtime Environment 7u25 patch rectifies this bug but the Java SE Runtime Environment 7u40 patch reintroduces this bug. Pre-installation checklist Table 3 Pre-installation checklist Item Network Physical server Hardware Software Requirements You have planned the network. Make sure the server where the license server resides is accessible in the network. Hardware, including CPU, memory, disk, NIC, meets the requirements. Make sure the operating system is as required. Make sure the system time is configured. As a best practice, configure NTP for time synchronization on all servers in the network, so that the network uses the uniform clock source. Make sure the server is assigned an IP address. Whether the physical server has a license server installed. Host If the server has a license server installed, remove the license server. For more information, see "Removing the license server." Make sure the Web browser version is as required and the host has the Java 7 patches installed as required. 3

5 Installing the license server Obtaining the license server installation package Download the required license server installation package from the H3C website at Copy the installation package to the license server installation directory on the server. If you use FTP or TFTP to upload the installation package to the directory, use the binary mode to avoid damaging the installation package. Installing the license server 1. Access the directory where the license server installation package (.rpm file) resides and install the installation package. The license server installation package is named in the format of VCF_CONTROLLER_LICS-version.rpm, where version represents the version number of the license server installation package. The following example uses the /root directory. ~] rpm ivh VCF_CONTROLLER_LICS-E2172.rpm Preparing... ################################# [100%] 2. Enter Y or N as needed when you are prompted whether to restore the configuration by using the backup file. Do you want to restore the configuration from /opt/licserver/backup/lics_backup. tar? (y/n, default:n) : N 3. Enter the service port number at the prompt if you enter N in step 2: Type the license service port ( , default:5555) : Make sure the service port number is not used. If you press Enter directly, the default port number 5555 is used. Verifying the installation 1. Identify whether the license server is successfully installed at the CLI. If the command output displays correct version information for the license server, the installation succeeds. [root@localhost ~]# rpm -qa grep lics vcf-controller-lics el7.centos.x86_64 2. Identify whether the license server Core, Monitor, and Tomcat services are started. If the command output displays that these services are started, the license server service is started. [root@localhost ~] service licscore status Redirecting to /bin/systemctl status licscore.service licscore.service - LICS Core Loaded: loaded (/etc/systemd/system/licscore.service; disabled) Active: active (running) since Thu :53:40 CST; 2min 51s ago [root@localhost ~]# service licsmonitor status Redirecting to /bin/systemctl status licsmonitor.service 4

6 licsmonitor.service - LICS Monitor Loaded: loaded (/etc/systemd/system/licsmonitor.service; disabled) Active: active (running) since Thu :15:36 CST; 49s ago [root@localhost ~]# service tomcat status tomcat is running Opening related license server's ports in the firewall After the installation, for the license server to operate correctly, make sure related license server's ports are opened if the firewall is enabled. These ports are HTTP port 8090 for the Web login and the license service port. To open related license server's ports in the firewall: 1. Verify that the firewall is enabled. The output active (running) indicates that the firewall is enabled. [root@localhost ~]# service firewalld status Redirecting to /bin/systemctl status firewalld.service firewalld.service - firewalld - dynamic firewall daemon Loaded: loaded (/usr/lib/systemd/system/firewalld.service; disabled) Active: active (running) since Thu :33:26 CST; 20s ago 2. Examine whether the license service port (this example uses 5555) and HTTP port 8090 are blocked by the firewall. The output no indicates that the port is blocked. [root@localhost ~]# firewall-cmd --query-port=5555/tcp no [root@localhost ~]# firewall-cmd --query-port=8090/tcp no 3. Open the license service port and HTTP port 8090 in the firewall by using either of the following methods: (Recommended.) Permanently open the ports. The configuration can survive a reboot. The output success indicates that the operation succeeds. [root@localhost ~]# firewall-cmd -permanent --add-port=5555/tcp success [root@localhost ~]# firewall-cmd -permanent --add-port=8090/tcp success Open the ports this time. The configuration cannot survive a reboot. The output success indicates that the operation succeeds. [root@localhost ~]# firewall-cmd --add-port=5555/tcp success [root@localhost ~]# firewall-cmd --add-port=8090/tcp success 4. Verify that the ports are successfully opened. The output yes indicates that the ports are opened. [root@localhost ~]# firewall-cmd --query-port=5555/tcp yes [root@localhost ~]# firewall-cmd --query-port=8090/tcp yes 5

7 Logging in to the license server 1. Enter the login address in the Web browser's address bar in the format, for example, Then press Enter. The lics_ip_address argument represents the IP address of the server that hosts the license server is the default port number. 2. On the login page, perform the following tasks: a. At the upper right of the login page, click English as the interface language. b. Enter the administrator's username and password. The default username is admin and password is admin. c. Click Login. Figure 1 license server login page 3. On the configuration wizard that appears for the first login, perform the following tasks: Add license clients. Modify system configuration such as the license service port. Modify administrator's password. 6

8 Removing the license server When you remove the license server, you can choose to back up the configuration file and log messages or not. If you back up the configuration file and log messages, you are prompted whether to restore the configuration and log messages by using the backup file when you reinstall the license server. The license file remains after you remove the license server. It is automatically uploaded when you reinstall the license server. To remove the license server: 1. Remove the license server installation package. ~] rpm -e vcf-controller-lics 2. Enter Y or N as needed when you are prompted whether to remove the installation package. Then press Enter. This example uses Y. Do you really want to uninstall LICS? (y/n, default:y) :Y 3. You are promoted whether to back up the configuration file and log messages. To back up the configuration file and log messages, enter Y. Not to back up the configuration file and log messages, enter N. To back up the configuration file and log messages: Do you want to backup the configuration to /opt/licserver/backup/lics_backup.tar? (y/n, default:n) : Y./db/./db/licm/./db/licm/system_configs.data To not back up the configuration file and log messages: Do you want to backup the configuration to /opt/licserver/backup/lics_backup.tar? (y/n, default:n) :N Uninstalling vcf-controller-lics... Stopping tomcat (via systemctl): [ OK ] 7

9 Upgrading the license server License server upgrade includes the following tasks: 1. Remove the old version of the license server (see "Removing the license server"). 2. Install the new version of the license server (see "Installing the license server"). You can use one of the following methods to upgrade the license server: Upgrade with configuration file and log messages backed up Back up the configuration file and log messages when you remove the old version. When you install the new version, choose to restore the configuration and log messages from the backup file. H3C recommends that you use this method. IMPORTANT: The license server will automatically reconnect to the clients after the upgrade. The license services obtained by the clients during the upgrade will not be disrupted. When you use this method, H3C recommends that you not disconnect the clients from the license server. The manual disconnection will cause the license server to reclaim all licenses from the clients, which causes license-based services cannot run correctly on the clients. Upgrade without backing up configuration file and log messages Remove the old license server without backing up the configuration file and log messages. When you install the new license server, choose to not restore the configuration and log messages from the backup file. IMPORTANT: For software versions earlier than E2178, the configuration file backed up during license server removal does not include the license service port setting. Whichever upgrade method you use, enter a license service port during the new version installation when you upgrade to E2178 or later from a version earlier than E