RG-MACC-BASE_v2.01. Installation Guide

Transcription

1 RG-MACC-BASE_v2.01

2 Preface Thank you for using our products. Audience This manual is intended for: Network engineers Technical support and servicing engineers Network administrators Symbols Important information. Contains helpful suggestions or references. Use caution. Could result in equipment damage or data loss.

3 Contents Contents Contents Installation Preparations Requirements for Hardware and Operating System Disk Partition and Directory Requirements Changing System Time Configuring IP Addresses and DNS Servers Uploading MACC-BASE Installation Package Deployment and Installation Deploying and Installing MACC-BASE Verifying Deployment and Installation Upgrade Upgrading the MACC-BASE Using Upgrade Script Online Upgrade HTTPs Certificate Modification Appendix SecureFXPortable.exe (File Copy Tool) SecureCRTPortable.exe (Maintenance Tool)... 18

4 Installation 1 Installation 1.1 Preparations Requirements for Hardware and Operating System The following table lists the minimum hardware and operating system configuration requirements: Hardware Specifications Remarks CPU 4 cores 2.0 GHz or higher N/A Memory 8 GB or more N/A Disk space 500 GB or more Single disk Network Gigabit or higher N/A interface System Centos 6.5/ bits (basic version) Centos Download URL Port mapping (This requirement can be skipped if servers use public network IP addresses): The MACC-BASE operating system uses CentOS, which does not provide a self-defense function by default. Apply the port mapping mode instead of the overall system-mapping mode if there is no defense function. Make sure that the following ports are not isolated by the firewall. Internal External Protocol Mandatory Remarks Port Port or Optional Port 80 Port 80 or TCP Mandatory HTTP access port others Port 443 Port 443 or TCP Optional HTTPS access port others Port 3478 Port 3478 UDP Mandatory For device interaction and Stun learning Port 3479 Port 3479 UDP Mandatory For device interaction and STUN learning Port 22 Port 8090 Ports other than Port 22 Port 8090 or others TCP Optional Secure shell (SSH) remote login port for the MACC-BASE server. Do not use Port 22 for mapping. The password for running the operating system must be highly complex to avoid attacks. TCP Optional For MACC-BASE online upgrade and access Disk Partition and Directory Requirements The /macc directory is used for saving both MACC-BASE installation and running data. This directory is required and assigned 200 GB or more space.

5 Installation Single mass storage disk If the operating system has been installed and cannot be partitioned, the /macc directory can be created by running the following command: ~]# mkdir /macc Multiple disks with no data disk mounted (Take the Alibaba Cloud Computing server as an example.) Usually, the system has two disks: system and data. To check the disk status, run the fdisk l command: [root@xxxxxxx ~]# fdisk -l Disk /dev/xvda: 21.5 GB, bytes 255 heads, 63 sectors/track, 2610 cylinders Units = cylinders of * 512 = bytes Sector size (logical/physical): 512 bytes / 512 bytes I/O size (minimum/optimal): 512 bytes / 512 bytes Disk identifier: 0x00078f9c Device Boot Start End Blocks Id System /dev/xvda1 * Linux Disk /dev/xvdb: GB, bytes 255 heads, 63 sectors/track, cylinders Units = cylinders of * 512 = bytes Sector size (logical/physical): 512 bytes / 512 bytes I/O size (minimum/optimal): 512 bytes / 512 bytes Disk identifier: 0x To check the disk mounting status, run the df command: [root@iz28iclrr63z ~]# df -h Filesystem Size Used Avail Use% Mounted on /dev/xvda1 20G 2.4G 17G 13% / /dev/xvdb 394G 275G 100G 74% /macc If the data disk (/dev/xvdb in the example above) is not mounted, it needs to be formatted and mounted to /macc. The following process is recommended: mkfs -t ext4 /dev/xvdb mkdir /macc mount /dev/xvdb /macc ##Modifying /etc/fstab Automatically mounts the disk upon startup. vi /etc/fstab Adding a line at the end. /dev/xvdb /macc ext4 defaults 0 0

6 Installation /dev/xvdb is added as required. Run the df command for confirmation after restarting the server. Multiple disks with the data disk mounted It is necessary to create the data disk soft link in /macc. To check the disk mounting status, run the df command: ~]# df -h Filesystem Size Used Avail Use% Mounted on /dev/xvda1 20G 2.4G 17G 13% / /dev/xvdb 394G 275G 100G 74% /data If the data disk is mounted under the /data directory, you need to run the mkdir/macc command to create the /macc directory. Run the vi/etc/fstab command to mount the data disk to /macc, and then restart the server Changing System Time The system time needs to be synchronized with actual time. Server disconnected from the Internet Run the date command to change the time and write the settings into CMOS. The following shows an example of the date command in the format of date month day hour minute year. [root@localhost ~]# date Sun Aug 30 00:27:00 CST 2015 [root@localhost ~]# clock -w Server connected to the Internet Time is automatically synchronized when connected Configuring IP Addresses and DNS Servers The IP address and DNS server need to be configured before deployment and installation. Configuring the IP addresses Run the ifconfig command to identify the external network interface: [root@localhost ~]# ifconfig eth0 Link encap:ethernet HWaddr 00:15:5D:5D:27:0B inet addr: Bcast: Mask: inet6 addr: fe80::215:5dff:fe5d:270b/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets: errors:0 dropped:0 overruns:0 frame:0 TX packets: errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes: (1.0 GiB) TX bytes: (984.6 MiB)

7 Installation lo Link encap:local Loopback inet addr: Mask: inet6 addr: ::1/128 Scope:Host UP LOOPBACK RUNNING MTU:16436 Metric:1 RX packets: errors:0 dropped:0 overruns:0 frame:0 TX packets: errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes: (481.3 MiB) TX bytes: (481.3 MiB) Take eth0 above as an example. Modify /etc/sysconfig/network-scripts/ifcfg-eth0. Assume that the IP address of Port eth0 is and the gateway IP address of Port eth0 is vi /etc/sysconfig/network-scripts/ifcfg-eth0 Set ONBOOT to yes, and BOOTPROTO to static. Add IPADDR (IP address), GATEWAY (gateway), NETMASK (subnet mask), and then restart the server. Configuring DNS servers For example, run the following command to add the server with the IP address as a DNS server: echo nameserver >> /etc/resolv.conf Uploading MACC-BASE Installation Package The MACC-BASE installation package is in ISO format. This section describes how to upload the MACC-BASE installation package to the server, run the mount command to mount the installation package to /mnt/iso, and to copy the ISO file to the /mnt/install/ directory Using a Tool CentOS provides a simple tool that enables users to implement direct interaction between Windows and Linux systems. For details about using the tool, see SecureFXPortable.exe (File Copy Tool). Copy the ISO file to any directory of the server. Run the mount o loop /directory for storing the upgrade file/file name/mnt/iso command to mount the ISO file. For example, to save a file in the home directory, run the following command: mkdir /mnt/iso mount o loop /home/rg-macc-base_v2.01_build iso /mnt/iso

8 Installation Next, to copy the ISO file to the /mnt/install/ directory, run the following command: mkdir /mnt/install cp -ar /mnt/iso/* /mnt/install/ Using a USB Flash Drive Insert a USB flash drive into the USB port. Run the fdisk l command to check partitions: Run the mount -o loop /dev/sdb2 /mnt/ command to mount the USB flash drive to the /mnt directory. mkdir /mnt/iso mount o loop /dev/sdb2 /mnt/iso Copy the ISO file to the /mnt/install directory. mkdir /mnt/install cp -ar /mnt/iso/* /mnt/install/ Downloading from Internet Set up a Hypertext Transfer Protocol (HTTP) or File Transfer Protocol (FTP) server on a device that can interoperate with the server. Copy the installation file to the HTTP or FTP server. Log in to the MACC-BASE server, and run the following command to download the installation file: If you use the HTTP mode (for example, using HFS commonly used for HTTP server setup), run the following command: wget IP address/file name If a prompt is displayed, indicating no wget command, run the yum install wget command for installation. Make sure that the server can access the Internet. Example: Run the cd /home command to enter the home directory, and run the following command to download the installation file:

9 Installation cd /home wget The ISO file is downloaded to the home directory. If the designated directory is not displayed after the wget command is run, the ISO file is downloaded to the current directory by default. If FTP is chosen, run the following command: wget ftp://ftp account:ftp address/directory name/file name For example: wget Application Run the following command to mount the disk to the /mnt/iso directory: mkdir /mnt/iso mount -o loop RG-MACC-BASE_v2.01_Build iso /mnt/iso/ cd /mnt/iso/ Copy the ISO file to the /mnt/install/ directory. mkdir /mnt/install cp -ar /mnt/iso/* /mnt/install/ Uploading Using a CD In CentOS, the installation file is in the CD-ROM form. Log in to CentOS. Run the following command to mount the disk to the /mnt/iso directory: mkdir /mnt/iso mount -o loop /dev/cdrom /mnt/iso/ cd /mnt/iso/ Copy the ISO file to the /mnt/install/ directory. mkdir /mnt/install cp -ar /mnt/iso/* /mnt/install/ 1.2 Deployment and Installation Note: Enter commands manually to perform installation Deploying and Installing MACC-BASE As described in Uploading MACC-BASE Installation Package, the MACC-BASE installation package has been uploaded to the server and mounted to the /mnt/iso directory. The ISO file has been copied to the /mnt/install/ directory. 1. The following directories will be displayed in the deployment and upgrade directory:

10 Installation pkg]# cd /mnt/install/ pkg]# ll drwxr-xr-x. 4 root root 4096 Aug 29 16:43 installpkg -rwx--x--x. 1 root root Aug 29 16:43 install.sh 2. Run install.sh. <<-----Executed for initial installation [root@localhost install]#./install.sh -l en -i <<----Herein, is an external IP address. System version : CentOS release 6.5 (Final) Checking for system...64-bit Checking for macc directory...yes Checking for ppl...no Installing ppl... Note 1: Run the chmod command to obtain the execution permission of install.sh and upgrade.sh. Note 2: The following RPM signature warning can be ignored. warning: /macc/install_pkg/ RG-MACC-BASE_v2.01_Build /installpkg/soft/rpm/kernel-headers el6.x86_64.rpm: Header V3 RSA/SHA1 Signature, key ID c105b9de: NOKEY Note 3: The following MySQL startup error can be ignored, and does not affect the installation. Initializing mysql... ERROR! MySQL server PID file could not be found! Starting MySQL.. SUCCESS! SUCCESS! MySQL running (2811) Initialize mysql...[ok] Checking for tomcat...no spawn openssl genrsa -des3 -out./ca/serverkey.pem 2048 Note 4: Run the following commands to restart mongodb if it does not start normally. [root@localhost mongo]# ps -ef grep mongod <<------It starts normally if the mongod process exists. mongod :24? 00:00:00 /usr/bin/mongod -f /etc/mongod.conf root :24 pts/0 00:00:00 grep mongodwarning: <<-----If mongodb is not started, execute the following operation to start mongodb. [root@localhost mongo]# rm -rf /var/lib/mongo/* <<-----Deleting all the files under this directory. [root@localhost mongo]# service mongod start <<-----Starting mongodb. Starting mongod: [ OK ]

11 Installation Verifying Deployment and Installation Verifying MACC-BASE Service Open the Google Chrome browser, and enter the URL address or URL[:port] to visit the website. (Change the IP address to the actual IP address. The default port is Port 80. If port mapping is used and the port is not Port 80, add the port number.) Enter the account admin and password admin (default password) to log in to the MACC-BASE server. For details, see MACC-BASE_2.0 User Guide Verifying Online Upgrade Enter address:8090. Enter the default account and password admin Verifying Server Restart Run the reboot command to restart the server. Ensure that the MACC-BASE can be accessed and used after restarting.

12 Installation Special Failure Case Cause Symptom The MACC server has dual network interface cards (NICs) and both use private IP addresses. One of the IP addresses is mapped to a public IP address. Fail to fetch the CPE URL. The CPE URL data is all-zero in MACC. Affect Solution Fail to configure the AP through MACC. Change the IP address in the STUN configuration file to the IP address which is mapped to the public IP address.

13 Upgrade 2 Upgrade Users that have installed MACC-BASE 2.0 can download the MACC-BASE upgrade package for upgrading. Warning: Only a MACC-BASE version later than 2.0 can be upgraded. MACC-BASE 1.x cannot be upgraded using this method. For details, contact the customer service personnel. 2.1 Upgrading the MACC-BASE Using Upgrade Script 1. Upload the upgrade package RG-MACC-BASE_v2.01_Build tar.gz to the /macc/install/tomcat directory. For details, see Uploading MACC-BASE Installation Package. 2. Enter the /macc/install/tomcat directory. [root@localhost ~]# cd /macc/install/tomcat/ [root@localhost tomcat]# [root@localhost tomcat]# ll total drwxr-xr-x 2 root root 4096 Oct 26 16:46 bin drwxr-xr-x 2 root root 4096 Oct 10 16:38 ca drwxr-xr-x 4 root root 4096 Aug 9 15:35 conf drwxr-xr-x 2 root root 4096 May 20 13:33 lib -rw-r--r-- 1 root root May LICENSE drwxr-xr-x 2 root root Oct 28 10:43 logs dr-xr-xr-x. 3 root root 4096 Oct 11 10:12 macc_conf -rw-r--r-- 1 root root 1192 May NOTICE -rw-r--r-- 1 root root 8974 May RELEASE-NOTES -rw-r--r-- 1 root root Dec 27 19:42 RG-MACC-BASE_v2.01_Build tar.gz -rw-r--r-- 1 root root May RUNNING.txt drwxr-xr-x 51 root root 4096 Oct 28 11:00 temp drwxr-xr-x Oct 27 19:59 webapps drwxr-xr-x 3 root root 4096 Oct 9 17:05 work 3. Decompress the upgrade package. [root@localhost tomcat]# ll [root@localhost tomcat]# tar -zxvf RG-MACC-BASE_v2.01_Build tar.gz macc/ macc/upgrade_en.sh macc/wxadmin.war macc/upgrade_zh.sh macc/copy_properites.sh macc/diagnosis.tar.gz macc/maccauth.war macc/macclog.war

14 Upgrade macc/service.war macc/node-v4.6.1-linux-x64.tar.gz macc/intl/ macc/intl/intl.properties macc/deploy.tar.gz macc/upgrade.sh macc/diagnosis_version macc/admin.war 4. Enter the macc directory and run upgrade.sh. tomcat]# cd macc macc]#./upgrade.sh 2.2 Online Upgrade MACC-BASE_2.01 provides the online upgrade service. The online upgrade service enables uploading the MACC-BASE upgrade package in tar.gz format via the web page without logging in to the MACC-BASE server and enabling one-click upgrades. Enter address:8090. Enter the default account and password (admin and admin). After you you log in to the MACC-BASE server, the online upgrade page is displayed. 1. Click Choose File. In the displayed dialog box, choose the MACC-BASE upgrade package in tar.gz format. 2. Click Upgrade. 3. View the log in the black region. If the system displays Upgrade succeeded, the MACC-BASE is successfully upgraded.

15 Upgrade 4. The upgrade may take 3 to 5 minutes, depending on device performance.

16 HTTPs Certificate Modification 3 HTTPs Certificate Modification Changing the HTTPs certificate of the MACC-BASE is a sub function of the online upgrade service. Enter address:8090. On the HTTPs configuration page, choose a keystore file, and enter the key and port number. Click Save&Restart Tomcat. Make sure that the port corresponding to the port number is not occupied by other applications and not blocked by the firewall.

17 Appendix 4 Appendix 4.1 SecureFXPortable.exe (File Copy Tool) The SecureFXPortable.exe tool is used to connect to the Linux server in SFTP mode for file transfers. Double-click the desktop icon to start SecureFXPortable. In the displayed dialog box, enter the password, as shown below: figure:

18 Appendix Copy the target file, choose the directory, and paste it. You can also drag the file to the corresponding directory. 4.2 SecureCRTPortable.exe (Maintenance Tool) The SecureCRTPortable.exe tool is used to connect to the Linux server in SSH2 mode for configuration. SecureCRTPortable is a commonly used SSH2 tool. Start SecureCRT, and click Quick Connect in the toolbar.

19 Appendix Enter the host and usernames, and click Connect. Enter the server password , and click OK. The following figure shows the interface displayed after the login.

20 Appendix