HP Services zl Module ngenius Integrated Agent Installation and Getting Started Guide

HP Services zl Module ngenius Integrated Agent Installation and Getting Started Guide Part Number 733-0207 www.hp.com/networking Revision A www.netscout.com September 28, 2010

Copyright 2008 Hewlett-Packard Development Company, L.P. Copyright 2008 NetScout Systems Software Credits and Notices SSL on HP Networking Switches is based on the OpenSSL software toolkit. This product includes software developed by the OpenSSL Project for use in the OpenSSL Toolkit. For more information on OpenSSL, visit www.openssl.org. Open Source Software Acknowledgement This software incorporates open source components that are governed by the GNU General Public License (GPL). In accordance with this license, HP will make available a complete, machine readable copy of the source code components covered by the GNU GPL upon receipt of a written request. Send a request to: NetScout Systems, Inc. 310 Littleton Rd. Westford, MA 01886 (978) 614-4000 Hewlett-Packard Company, L.P. HP Services zl Module GNU GPL Source Code Attn: HP Networking Support MS: 5551 Roseville, CA 95747 USA Disclaimer HEWLETT-PACKARD COMPANY MAKES NO WARRANTY OF ANY KIND WITH REGARD TO THIS MATERIAL, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. Hewlett-Packard shall not be liable for errors contained herein or for incidental or consequential damages in connection with the furnishing, performance, or use of this material. The information contained herein is subject to change without notice. The only warranties for HP products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. HP shall not be liable for technical or editorial errors or omissions contained herein. Hewlett-Packard assumes no responsibility for the use or reliability of its software on equipment that is not furnished by Hewlett-Packard. 2

Table of Contents Overview... 4 Step-by-step instructions... 4 1. Install the Services zl Module hardware... 4 2. Download the software image onto the Services zl Module... 5 3. Install the software image on the Services zl Module... 8 4. Activate the ngenius Integrated Agent product software image... 8 5. Access the ngenius Integrated Agent CLI... 10 6. Configure the Services zl Module ports into a specific VLAN... 11 7. Configure ngenius Integrated Agent using the CLI... 13 Post-Install Verification... 13 Configuring ngenius Integrated Agent Software... 14 8. Access the ngenius Integrated Agent... 16 Windows Clients... 16 UNIX Clients... 18 9. Configure ngenius Integrated Agent using ngenius Performance Manager. 18 10. Rebooting the Services zl Module... 19 11. Technical Support... 19 3

Overview The HP Services zl Module is shipped from the factory ready for the ngenius Integrated Agent software image to be downloaded and installed. It does not have any specific application software or an application-related operating system already installed. Instead, a resident Service OS provides the ability to download, install. and activate a complete operating system image that includes the ngenius Integrated Agent application. After the ngenius Integrated Agent image is downloaded, installed and activated on the Services zl Module, it becomes joined to that one particular module. Because the Services zl Module is not shipped with any specific network function or service until a Product OS image is added, it provides a unique ability to become a dedicated appliance within a switch after the ngenius Integrated Agent image is installed and activated. This document describes the steps needed to install and activate ngenius Integrated Agent on the Services zl Module. Because the Services zl Module is not a server device, it is necessary to follow the steps described in this document to successfully complete the installation. Before proceeding, register for accounts both at http://my.networking.com and at http://my.netscout.com. These accounts provide access to product support information, updates, and license keys. Step-by-step instructions 1. Install the Services zl Module hardware Before installing the Services zl Module into the switch chassis, access the switch CLI and verify the following items: Verify that the switch CLI is configured correctly for network access. Verify that the switch s time and date are set correctly. Verify the switch has the most current module-compatible software installed. The switch software version should be K.14.60 or later. Use the following command to check the switch software version: Hostswitch# show version <CR> Image stamp:... <date, time> K.14.XX... Boot Image: Primary 4

If the switch software needs to be updated, follow the directions in the HP Services zl Module Installation and Getting Started Guide to update the software. Next, install the Services zl Module following directions and safety precautions in the HP Services zl Module Installation and Getting Started Guide. Verify the module is installed successfully. When the module is installed, it undergoes a self test that takes a few seconds. The LEDs on the front panel of the module help determine if the module has passed the self test. For more information, see the HP Services zl Module Installation and Getting Started Guide. 2. Download the software image onto the Services zl Module Contact NetScout Systems for software licensing options and instructions on how to acquire access to the ngenius Integrated Agent product software image. Once the ngenius Integrated Agent product software image is received, it can be downloaded onto the Services zl Module using either a USB flash drive or using FTP file transfer through the local network. Download Using USB Flash Drive Copy the image files onto a USB flash drive. Make sure the drive is FAT/FAT32 formatted and can hold all files that will be downloaded (at least 1GB free space). If the software image is provided in the form of a zip file, first unzip the contents. Then, create a directory on the USB flash drive using the same structure and copy all files to it. For example: /images/ IA-xxx-yyy-HP/ Note: The xxx-yyy indicates the major and minor build numbers, respectively. Type "services" to list the services installed on the Services zl Module: Hostswitch> services <CR> Installed Services Slot Index Description Name B 1. Services Module services-module The Services zl Module service is in Slot B at index 1 and has the name servicesmodule. Type either of the following commands to access the Services zl Module CLI: Hostswitch# service b 1 <CR> Hostswitch(svcs-mod-B:SvcOS)# boot service 5

or Hostswitch# service b name services-module <CR> Hostswitch(svcs-mod-B:SvcOS)# boot service Insert the USB flash drive with the ngenius Integrated Agent image into the USB slot on the front of the Services zl Module. IMPORTANT: The USB flash drive must be inserted into the USB slot on the front of the Services zl Module, NOT into the USB slot on the switch chassis. Type the following commands to copy the image to the image repository on the Services zl Module: Hostswitch(svcs-mod-B:SvcOS)# usb mount <CR> Hostswitch(svcs-mod-B:SvcOS)# usb copyfrom IA-xxx-yyy-HP <CR> Hostswitch(svcs-mod-B:SvcOS)# usb unmount <CR> Once the copy completes, enter the usb unmount command and remove the USB disk (if installing from USB). Important: Ensure the USB disk is removed from the Service Module before booting into the Product OS. Download Using FTP File Transfer Before using FTP to transfer the image to the Services zl Module, use the show ip command to make sure it is configured with an IP address: Hostswitch(svcs-mod-B:SvcOS)# show ip <CR> IP address : 0.0.0.0 Netmask : 0.0.0.0 Default Gateway : 0.0.0.0 If the IP address is not configured (as shown above), use the ip command to configure an IP address and default gateway. You can either use DHCP or configure a static address. The syntax is as follows: Hostswitch(svcs-mod-B:SvcOS)# ip <CR> address Set IP parameters. default-gateway Configure the IP address of the default gateway router. dhcp Configure the interface to use DHCP. 6

If the software image is provided in the form of a zip file, first unzip the image directory and copy it (as a sub-directory) to the FTP server. For example: /var/ftp/images/ia-xxx-yyy-hp/ Note: The xxx-yyy indicates the major and minor build numbers, respectively. Type "services" to list the services installed on the Services zl Module: Hostswitch> services <CR> Installed Services Slot Index Description Name B 1. Services Module services-module The Services zl Module service is in Slot B at index 1 and has the name servicesmodule. Type either of the following commands to access the Services zl Module CLI: Hostswitch# service b 1 <CR> Hostswitch(svcs-mod-B:SvcOS)# or Hostswitch# service b name services-module <CR> Hostswitch(svcs-mod-B:SvcOS)# Next, type the following command to initiate FTP file transfer: Hostswitch(svcs-mod-B:SvcOS)# download ftp <IP-ADDRESS> /var/ftp/images/iaxxx-yyy-hp user <USERNAME> <CR> Password: ******** <IP-ADDRESS> is the IP address of the FTP server to which the product image directory was copied, xxx-yyy are the major and minor build numbers included in the image directory name, and <USERNAME> is the optional login ID for the FTP server (enter this login ID only if it s required for FTP server login). 7

3. Install the software image on the Services zl Module After the ngenius Integrated Agent software image is downloaded into the Services zl Module image repository (using either USB file copy or FTP transfer), type the following commands to install the image: Hostswitch# services b 1 <CR> Hostswitch(svcs-mod-B:SvcOS)# uninstall ONE-app <CR> Hostswitch(svcs-mod-B:SvcOS)# install ONE-app local IA-xxx-yyy-HP <CR> Important: Ensure the USB disk is removed from the Service Module before booting into the Product OS. Boot into the Product OS by entering the boot ONE-app command. Hostswitch(svcs-mod-B:SvcOS) boot ONE-app Verifying image... Changing boot from CF Service OS to Product OS. Rebooting Hostswitch(svcs-mod-B:SvcOS)# 4. Activate the ngenius Integrated Agent product software image After the software image is installed onto the Services zl Module, it must be registered and activated before being run for the first time. To do this, first obtain a hardware ID for the Services zl Module by entering the following commands: Hostswitch# services b 1 <CR> Hostswitch(svcs-mod-B:SvcOS)# licenses hardware-id activation <CR> The hardware Id for package "activation" is SG000GG000-A-0123456-ABCDEFG-0123456-ABCDEFG Note: SG000GG000 is the serial number of the Services zl Module. Detailed instructions to find your activation hardware ID are embedded in the My Networking portal (https://my.networking.com) registration pages and are also available in the HP Services zl Module Installation and Getting Started Guide. 8

Use this activation hardware ID to register the Services zl Module through the My Networking portal. Sign in to the portal and then click on My Licenses and follow the instructions to complete the registration process. You will be asked to enter the activation hardware ID as well as the registration ID that was provided along with the ngenius Integrated Agent product software image. Once the registration process has completed successfully, you should receive a license key in email and on the screen. This license key must be installed on the Services zl Module. For instructions on how to install the license key, see the HP Services zl Module Installation and Getting Started Guide. The following commands install the license key on the Services zl Module: Hostswitch# services b 1 <CR> Hostswitch(svcs-mod-B:SvcOS)# licenses install activation SG0000GG000-A- 0123456-ABCDEFG-0123456-ABCDEFG <CR> Hostswitch(svcs-mod-B:SvcOS)# boot ONE-app <CR> Changing boot from Service OS to Product OS. System will be rebooted. Do you want to continue [y/n]? y Rebooting Check the boot progress on the Services zl Module until the Product OS is running (you can use the repeat command to monitor booting progress): Hostswitch# show services b <CR> Status and Counters - Services Module A Status HP Services zl Module J9154A Versions Status : A.01.06, B.01.03 : not responding For more information, use the show commands in services context Hostswitch# repeat <CR> Press any key to exit the repeat command once the Status for the module is booted, as shown below: Hostswitch# show services b <CR> Status and Counters - Services Module A Status HP Services zl Module J9154A Versions : A.01.06, B.01.03 9

Status : booted For more information, use the show commands in services context Hostswitch# repeat <CR> IMPORTANT: The USB flash drive must be removed from the USB slot on the front of the Services zl Module before the module is rebooted. If it is not, the module may appear to hang instead of rebooting. To recover, simply remove the USB flash drive, disengage the module from the switch chassis for 5 seconds, then reinsert the module to restart the boot process. After the Services zl Module reboots, the ngenius Integrated Agent command line interface (CLI) becomes available. 5. Access the ngenius Integrated Agent CLI Type "services" in the switch CLI to list the services installed on the Services zl Module: Hostswitch# services <CR> Installed Services Slot Index Description Name B 1. Services zl Module svcs-mod Type the following commands to access the ngenius Integrated Agent CLI: Hostswitch# config Hostswitch# services b tech Fedora release 12 (Constantine) Kernel 2.6.31.5-127.NetScout_1.fc12.x86_64 on an x86_64 (ttys0) localhost.localdomain login: root Password: Last login: Fri Aug 6 11:16:28 from 172.24.6.82 10

6. Configure the Services zl Module ports into a specific VLAN The Services zl Module provides two internal Ethernet port connections into the switch after installation. By default, both ports are placed in the default VLAN. For example, if the Services zl Module is installed into slot B of the switch chassis, the internal ports appear as B1 and B2, and are automatically placed in the default VLAN. Depending on the VLAN configuration in the switch, one or both of these ports may need to be reassigned into a different VLAN. This is done by using the switch's management interface, just like any other port on the switch. The VLAN that the internal ports are placed in is important when configuring network parameters (e.g. IP address) for the services on the zl Module. These network parameters need to match the network configuration of the VLAN they are members of. The VLAN configuration in the switch can be seen using: Hostswitch# show vlans <CR> Status and Counters VLAN Information Maximum VLANs to support : 256 Primary VLAN : DEFAULT_VLAN Management VLAN : VLAN ID Name Status Voice Jumbo ------- -------------------- + ---------- ----- ----- 1 DEFAULT_VLAN Port-based No No 123 VLAN_123 Port-based No No For this example, the ports assigned to the default VLAN can be seen using: Hostswitch# show vlan 1 <CR> Status and Counters VLAN Information VLAN 1 VLAN ID : 1 Name : DEFAULT_VLAN Status: Port-based Voice : No Jumbo : No Port Information Mode Unknown VLAN Status ---------------- -------- ------------ ------ B1 Untagged Learn Up B2 Untagged Learn Up In this example, if all other switch ports are assigned to VLAN 123, the two Services zl Module ports will also need to be assigned to VLAN 123 in order to be accessible. These ports can be assigned as tagged using: 11

Hostswitch# configure <CR> Hostswitch(config)# vlan 123 <CR> Hostswitch(vlan-123)# tagged B1,B2 <CR> or else as untagged using: Hostswitch# configure <CR> Hostswitch(config)# vlan 123 <CR> Hostswitch(vlan-123)# untagged B1,B2 <CR> See the Management and Configuration Guide for the HP Series 3500yl, 6200yl, 5400zl, and 8200zl Switches for more information on VLAN configuration. 12

7. Configure ngenius Integrated Agent using the CLI Enter the ngenius Integrated Agent CLI. The available commands are listed if you type the? or TAB character. As you type a command you can press? or TAB at any time to see matching commands or arguments: Hostswitch(AppSW-B)# <?>... (list of AppSW CLI commands appears here)... exit Return to switch command context When entering a command, there may be a delay of a few seconds as the command is processed - this is normal behavior. Wait for the command prompt before trying to enter further commands. Using the ngenius Integrated Agent CLI, configure network settings, set time and time zone, synchronize time, set passwords, and set security. Use the "show" command to verify the settings: Hostswitch(AppSW-B)# show <CR> Post-Install Verification Once the Service Module is booted, enter the following commands to access the Product OS from the switch: config services b tech Hostswitch# config Hostswitch# services b tech Fedora release 12 (Constantine) Kernel 2.6.31.5-127.NetScout_1.fc12.x86_64 on an x86_64 (ttys0) localhost.localdomain login: root Password: Last login: Fri Aug 6 11:16:28 from 172.24.6.82 The Product OS environment is a LINUX shell similar to the ngenius InfiniStream appliance. Confirm the eth0 port is detected for management only. The eth1 port is used for monitoring only and will not appear in ifconfig output. 13

Note: The ifconfig command output does not display information for the eth1 port. The eth2 port is currently unused but will appear in the ifconfig command output. [root@localhost ~]# ifconfig eth0 Link encap:ethernet HWaddr 00:24:A8:C5:58:A3 inet addr:172.24.5.17 Bcast:172.24.7.255 Mask:255.255.252.0 inet6 addr: fe80::224:a8ff:fec5:58a3/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:319 errors:0 dropped:0 overruns:0 frame:0 TX packets:232 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:100 RX bytes:48592 (47.4 KiB) TX bytes:107093 (104.5 KiB) Memory:d3000000-d3020000 eth2 lo Link encap:ethernet HWaddr 00:24:A8:C5:58:A1 inet6 addr: fe80::224:a8ff:fec5:58a1/64 Scope:Link UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:157 errors:7 dropped:0 overruns:0 frame:7 TX packets:79 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:12523 (12.2 KiB) TX bytes:5055 (4.9 KiB) Link encap:local Loopback inet addr:127.0.0.1 Mask:255.0.0.0 inet6 addr: ::1/128 Scope:Host UP LOOPBACK RUNNING MTU:16436 Metric:1 RX packets:32 errors:0 dropped:0 overruns:0 frame:0 TX packets:32 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:1920 (1.8 KiB) TX bytes:1920 (1.8 KiB) Configuring ngenius Integrated Agent Software To configure the ngenius Integrated Agent software module, do the following: 1. If you are not already logged in to your ngenius Integrated Agent, log in as the root user to the operating system using these credentials: Username: root Password: netscout 2. Run the Linux date MMDDhhmmYYYY command to synchronize the time and date between the HP blade and the ngenius Integrated Agent software. If an "Operation not permitted" error message appears, ignore the message. The time should be set correctly. 3. To configure your system, you will need to set the following: IP Configuration for the Manage Port, including IP address, subnet mask, and default gateway. 14

ngenius Integrated Agent hostname Network domain name(s) DNS server(s) IP address Time zone and NTP server IP address or GPS Synchronization adapter information 4. Run the following script from the /opt/netscout/rtm/bin folder:./ngapplianceconfig.plx 5. When asked if you want to continue, enter y and press Enter to continue. Then, follow the prompts to enter the information collected in Step 4. a. Enter an IP address for the Manage port and press Enter. b. Enter a Subnet Mask for the Manage port and press Enter. c. Enter a Gateway IP address for the Manage port and press Enter. d. Supply a hostname for the ngenius Integrated Agent and press Enter. e. Enter the domain name where the Manage port is connected and press Enter. f. Enter the IP address of a DNS server (nameserver). The script gives you the option of entering multiple DNS server addresses to be used as backups in case the first DNS server specified is unreachable. g. Select the Time Source to be used for synchronization of the system clock. Currently, only NTP is supported. Time Source Description NTP Supply the IP address of one or more NTP servers. Servers are used as fallbacks in the same order they are specified. h. Configure the Integrated Agent Time Zone. i. When the script displays your settings, confirm that they are correct. 15

If your settings are correct, enter y and press Enter to continue. If any errors are detected, enter n and press Enter. You can then reenter your settings. j. When asked if you want to reboot, enter y and press Enter. k. The ngconfigsync utility automatically propagates properties file changes and the ngenius Integrated Agent restarts. 6. Once the installation completes, all the ngenius Integrated Agent files are located in the /opt/netscout/rtm/bin folder. You can start the ngenius Integrated Agent application with the./start script. To access the CDM Agent Configuration Utility menu, enter the./localconsole command. 7. Use the CDM Agent Configuration Utility menu to configure the following: SNMP Read string SNMP Write string Configuration Server (ngenius Performance Manager server IP address) 6. Restart the ngenius Integrated Agent application to commit changes. For more information on configuring CDM settings, see the ngenius Agent Administrator Guide for CDM Firmware. 8. Access the ngenius Integrated Agent You can access the ngenius Integrated Agent remotely to perform management functions, including: Starting and stopping the ngenius Integrated Agent, services, and processes Running the ngapplianceconfig script to modify agent configuration Installing service packs Collecting data for troubleshooting Windows Clients Because ngenius Integrated Agent runs on a hardened Linux operating system, you must configure PuTTY on a Windows remote system to access the ngenius Integrated Agent and perform management functions. PuTTY is a client connection program for the Secure Shell (SSH), Telnet, and Rlogin network protocols. 16

Configure a PuTTY connection to ngenius Integrated Agent as follows: 1. Download PuTTY to the Windows remote system: http://www.chiark.greenend.org.uk https://my.netscout.com/mcp/pages/dl_thirdpartyres.aspx 2. Open putty.exe to display the PuTTY Configuration dialog box. 3. In the Category list box, select Session. 4. Enter the hostname or IP address of the ngenius Integrated Agent. 5. Select SSH as the Protocol. 6. In the Category list box, select SSH. 7. Select 2 as the Preferred SSH protocol version. 8. Click Open to display the PuTTY connection window. Note: By default, Telnet is disabled on the ngenius Integrated Agent. 9. Click Yes if the following message displays and you confirm that the ngenius Integrated Agent hostname or IP address is valid: The server's host key is not cached in the registry Note: This message generally displays upon connecting for the first time from a specific Windows remote system to the ngenius Integrated Agent. 10. Log in as root user to the ngenius Integrated Agent operating system. The default values are as follows: Username: root Password: netscout 17

UNIX Clients To access and manage ngenius Integrated Agent from a UNIX system, you can use the native SSH client available on the UNIX system. 1. To establish an SSH connection from a remote UNIX system to the ngenius Integrated Agent software, enter the following at command line: ssh -l root <ngenius Integrated Agent IP Address> 2. Log in as root user to the ngenius Integrated Agent operating system. The default values are as follows: Username: root Password: netscout 9. Configure ngenius Integrated Agent using ngenius Performance Manager The Integrated Agent is automatically added to ngenius Performance Manager if you successfully specified its IP address as the Config Server in Configuring ngenius Integrated Agent Software. You can also add an ngenius Integrated Agent to ngenius Performance Manager manually, as follows: 1. From the ngenius Performance Manager Home page, select Server Administration. 2. Open Device > Device Configuration. 3. Click Add. 4. Enter the required information. Refer to the ngenius Performance Manage online Help for assistance in adding the ngenius Integrated Agent. 5. Click OK. 6. ngenius Performance Manager learns Interface 3 (eth1). Refer to the ngenius Performance Manager online help for details on how to log in to the application and add ngenius Integrated Agents. You can find portable help files for ngenius Performance Manager on the NetScout Systems web site, at the following URL: https://my.netscout.com/pages/mcplanding.aspx. 18

10. Rebooting the Services zl Module Rebooting should not normally be required and can potentially result in data loss. If for some reason the Services zl Module becomes unresponsive, the following commands can be used to reboot: Hostswitch# service b 1 Hostswitch(services-module-B:PR)# boot <CR> System will be rebooted, do you want to continue [y/n]? y or Hostswitch# service b name services-module Hostswitch(services-module-B:PR)# boot <CR> System will be rebooted, do you want to continue [y/n]? y 11. Technical Support The Services zl Module is a hardware platform that allows application vendors to make minor changes in their existing application software to run in a switch chassis. With a wide variety of applications available from several vendors, HP is committed to providing an "initial point of contact" for technical support. During this process, HP will verify the installation, configuration, activation licensing, and warranty claims on the Services zl Module. For problems concerning the application software, such as configuration or licensing of the application from the vendor, HP may have to redirect technical support to the application vendor to provide the best resources for solving a support issue. Consequently, if you are confident that the technical support issue resides within the application, it may be expeditious to contact the application vendor directly. For access to HP networking support, go to: http://www.hp.com/networking/support/ For troubleshooting tips, tutorials and Frequently Asked Questions, go to https://my.netscout.com/pages/mcplanding.aspx 19