CajunRules Policy Manager for Solaris Getting Started Guide Version 2.0

CajunRules Policy Manager for Solaris Getting Started Guide Version 2.0 March 2001

Copyright Avaya Inc. 2001 ALL RIGHTS RESERVED Printed in USA, March 2001 The products, specifications, and other technical information regarding the products contained in this document are subject to change without notice. All information in this document is believed to be accurate and reliable, but is presented without warranty of any kind, express or implied, and users must take full responsibility for their application of any products specified in this document. Avaya disclaims responsibility for errors which may appear in this document, and it reserves the right, in its sole discretion and without notice, to make substitutions and modifications in the products and practices described in this document. P550 is a registered trademark, and Avaya, Cajun, CajunDocs, OpenTrunk, CajunView, and CajunRules are trademarks of Avaya Inc. Cisco is a registered trademark of Cisco Systems Inc. Netscape, Navigator, and the Netscape N and Ship's Wheel logos are registered trademarks of Netscape Communications Corporation in the U.S. and other countries. Solaris is a trademark of Sun Microsystems Inc. ALL OTHER TRADEMARKS MENTIONED IN THIS DOCUMENT ARE PROPERTY OF THEIR RESPECTIVE OWNERS. 610-0180-091

Table of Contents Preface Chapter 1 Preinstallation Overview... v Software Version Information... v Technical Support... v Conventions... vi Related Documentation... vii Online Documentation... vii Online Help... vii Documentation Feedback... viii Avaya Products and Services... viii Overview... 1-1 Installation Worksheet... 1-2 CajunRules System Requirements... 1-3 Netscape Directory Server Requirements... 1-4 Installation Prerequisites... 1-5 Chapter 2 Installing CajunRules Overview... 2-1 Installing CajunRules on Solaris... 2-1 Updating Netscape Schema... 2-6 Chapter 3 Starting CajunRules Overview... 3-1 Starting the CajunRules Server from Solaris... 3-1 Starting the CajunRules Console from Solaris... 3-2 Starting the CajunRules License Manager from Solaris... 3-3 iii

Preface Overview This guide explains how to install and start the CajunRules Policy Manager for Solaris and includes the following chapters: Chapter 1, Preinstallation - Provides system configuration requirements for CajunRules and the Netscape Lightweight Directory Access Protocol (LDAP) Directory Server used by CajunRules. Chapter 2, Installing CajunRules - Explains how to install CajunRules. Chapter 3, Starting CajunRules - Explains how to start CajunRules. Software Version Information Technical Support This guide describes installing CajunRules Policy Manager software version 2.0 for Solaris. To contact Avaya s technical support: From the United States: Request a Network Management Software representative. 1-800-237-0016 Outside the United States: Contact your distributor. v

mêéñ~åé Conventions This document uses the following conventions: Convention Represents Examples User Input User entered text. To enable the network, enter: set network enable Boldface Text System Output Menu command, keyword to be acted upon, or button name. Text displayed by the system. From the Interface pulldown menu, select Default. Click Cancel to stop the installation. If you enable the network successfully, the following output displays: ATM(configure)# set network enable Network has been enabled * Note: Provides additional information about a procedure or topic. `^rqflk Indicates a condition that may damage hardware or software. Indicates a condition that may cause bodily injury or death. t^okfkd vi

mêéñ~åé Related Documentation This section provides information on related documentation, including: Online Documentation Online Help Documentation Feedback Online Documentation The following documentation provides additional information on CajunRules: CajunRules Policy Manager Release Notes for Solaris, Version 2.0 CajunRules Policy Manager User Guide, Version 2.0 CajunRules Policy Manager Quick Start Card, Version 2.0 Avaya maintains copies of these documents on its web server. To access online documentation in PDF format, use Netscape Navigator version 4.5 or later and enter the following URL: http://pubs.avayactc.com Online Help You must have Netscape Navigator version 4.5 or later (preferably version 4.7) in order to use the online help. To launch help, select Help > CajunRules Help from the pulldown menu. The Welcome page opens. This page is divided into two panes. The left pane contains two tabs, TOC and Index. Use either tab to locate the information you are looking for. The right pane contains a Welcome screen explaining how to navigate the help system. * Note: When launching the online help, do not resize the help window until it has completely opened. vii

mêéñ~åé Documentation Feedback If you have comments about the technical accuracy or general quality of this document, please send E-mail to: LSG-CTechPubs@avayactc.com Please cite the document title, part number, and page reference, if appropriate. Avaya Products and Services For information about Avaya products and services, please consult the Avaya World Wide Web site at: http://www.avaya.com. viii

1 Preinstallation Overview This chapter contains the following information: Installation Worksheet CajunRules System Requirements Netscape Directory Server Requirements Installation Prerequisites CajunRules Policy Manager is a software tool for creating and managing policies on Cajun P550R, P880, and P330 devices, as well as Cisco 2500 and 7500 systems. A policy is a set of rules that enable you to allow or deny traffic between multiple network devices based on IP address. CajunRules consists of a Policy Engine (server) and a Console user interface (client) that enable you to manage your network of devices according to your business needs. * Notes: For the purpose of this document, CajunRules Policy Manager will be referred to as CajunRules. If you have Cisco devices you plan on managing via CajunRules, you need a separate packet detailing how to obtain a license key. If you plan on managing Cisco devices and did not receive this packet, please contact your Avaya Sales representative. CajunRules 2.0 for Solaris uses Netscape s Directory Server (Version 4.1.1) to store information and to communicate with some of the devices it manages. This communication between CajunRules and the Directory Server is done via a Lightweight Directory Access Protocol (LDAP). CajunRules currently runs on Solaris 2.8. The Directory Server and the CajunRules Console and Policy Engine can reside either on the same system or on different systems. 1-1

Chapter 1 Installation Worksheet The Console allows you to define the policies and rules by which your network operates. The policies are stored on the Directory Server. During installation, you are required to enter current configuration information, as well as information provided from the previous install of your Directory Server. Table 1-1 provides an Installation Worksheet that you can use to log these parameters for reference during installation of CajunRules. Table 1-1. Installation Worksheet Netscape Directory Parameters Entry Organization = Directory Manager ID = Password = CajunRules Typical, and Server Only. LDAP Dir = LDAP Port = LDAP Root = CajunRules Console Only Install CajunRules Server IP Address = LDAP Root= Entry Entry 1-2

Preinstallation CajunRules System Requirements The following tables list system requirements for installing CajunRules: Policy Engine (Table 1-2) Console (Table 1-3) Switch software (Table 1-4) Table 1-2. Policy Engine Requirements (Solaris) System Component Requirements Operating System Solaris 2.8 Memory Free Disk Space Optimum: 256 MB Minimum: 128 MB 100 MB Table 1-3. Console Requirements System Component Memory Free Disk Space Requirements Optimum: 256 MB Minimum: 128 MB 100 MB Table 1-4. Switch Software Requirements Switch Requirements Cajun P550R/P880 Cajun P330 Cisco 25xx/75xx Software Requirements Cajun operational code 4.0 or later, with integrated routing. Cajun operational code 3.0 or later. Cisco operational code (IOS) 11.2 or later. 1-3

Chapter 1 Netscape Directory Server Requirements CajunRules for Solaris is used in conjunction with the Netscape Directory Server (Version 4.1.1.) The Netscape Directory Server can be installed on the same system as CajunRules or on a different system and can operate in a mode dedicated to CajunRules or in support of other applications as well. * Note: The Netscape Directory Server must be installed on your system before you install CajunRules. Refer to your Netscape Directory Server documentation for the installation procedure. During the installation of the directory server, make note of the organization that you create, for example, o=avaya.com, as well as the User ID and password you choose for the Directory Manager user. The user name defaults to cn=directory Manager. This organization information is needed during CajunRules installation and it is recommended that for future reference, you log this information on the Installation Worksheet provided earlier in this chapter. 1-4

Preinstallation Installation Prerequisites You must have the Netscape Directory Server installed and running before installing CajunRules: You also need to have the following information available for your CajunRules installation (Table 1-5). Parameter LDAP Dir Table 1-5. Preinstallation Information Description If your LDAP server resides on the same system on which you are installing CajunRules, enter localhost in this field. Otherwise, enter the IP address of your LDAP server system. LDAP Port The default LDAP port is 389. LDAP Root The LDAP root is typically the Domain Name Server on your network. This must match the root base used during the LDAP server installation. LDAP root refers to the organization parameter from your Netscape Directory Server installation. You can now install CajunRules. 1-5

2 Installing CajunRules Overview CajunRules is comprised of a Console (client) and a Policy Engine (server). You can install the complete version of CajunRules on one system or you can install each component on separate systems. Installing CajunRules on Solaris To install CajunRules on your Solaris system, complete the following steps. * Note: You must be logged in as the root user to install CajunRules. 1. Insert the CajunRules CD-ROM into the CD-ROM drive on your Solaris system. 2. Enter /directory/setup.sh (where directory is = to your CD-ROM drive). The InstallShield Welcome screen displays (Figure 2-1). 2-1

Chapter 2 CajunRules2.0-InstallShield Wizard Figure 2-1. Welcome Screen Welcome Welcome to the InstallShield Wizard for CajunRules2.0 V2.0.118. The InstallShield Wizard will Install CajunRules2.0 V2.0.118 on your computer. To continue, click Next. CajunRules2.0 V2.0.118 Avaya Inc. www.avaya.com InstallShield Next> Cancel 3. Click Next and file initialization take place. The Setup Type screen displays (Figure 2-2). Choose the type of install you want. CajunRules2.0-InstallShield Wizard Figure 2-2. Setup Type screen Setup Type Choose the setup type that best suits your needs. Typical The program will be installed with the suggested configuration recommended for most users. Console CajunRules 2.0 Console Only Server CajunRules 2.0 Server Only InstallShield <Back Next> Cancel 4. Click Next. The Destination Folder screen displays (Figure 2-3). 2-2

Installing CajunRules * Note: If you do not want to install this software in the default directory (/opt/avaya/ CajunRules2.0) enter the directory where you would like CajunRules to be installed. You also have the option to click Change and a Select Directory screen displays, allowing you to browse your directory structure and select a target directory. Figure 2-3. Destination Folder Screen CajunRules2.0-InstallShield Wizard Destination Folder Click next to install to this folder, or click Change to install to a different folder. /opt/avaya/cajunrules2.0 Change InstallShield <Back Next> Cancel 5. Click Next. The Confirm Directory Dialog box displays informing you that the directory does not exist and asks if you would like to create it now. 6. Click Yes. The Ready to Install screen displays and provides the following information: The following items will be installed. Product (900kb) (The InstallShield) Selected Features: Server(100kb) Console(8.7mb) Common(28.6mb) Schema(4.3mb) uninstall(1kb) * Note: The directory in which you are installing CajunRules should have at least 120 Mb of free disk space, which is equal to the sum of Product + Selected Features + jre file (untarred). 2-3

Chapter 2 7. Click Install Now. The Installation process begins and a progress bar displays within the Installation screen. When the Installation is complete, the Server Property Editor Screen displays (Figure 2-4). * Note: This screen displays only if you chose a Typical or Server Only Installation. Figure 2-4. Server Property Editor Screen CajunRules2.0-InstallShield Wizard CajunRules2.0 Server Property Editor Please enter your LDAP Host IP Address or localhost, your LDAP Port and your LDAP Root LDAP Host localhost LDAP Port 389 LDAP Root InstallShield <Back Next> Cancel 8. Enter your LDAP Root. * Note: The LDAP Root must match the root base used during the LDAP server installation.(ldap Root is the organization parameter from your Netscape Directory Server installation.) 9. Click Next. The Console Property Editor screen displays (Figure 2-5). * Note: This screen displays only if you chose a Typical or Console Only Installation. 2-4

Installing CajunRules Figure 2-5. Console Property Editor Screen CajunRules2.0-InstallShield Wizard CajunRules2.0 Console Property Editor Please enter your LDAP Root and you CajunRules2.0 Server IP address. LDAP Root CR Server IP: InstallShield <Back Next> Cancel * Note: If you chose a Console Only installation, you must enter the IP Address of the machine on which your CajunRules server resides. If you chose a Typical installation, the CR Server IP address field remains blank and must be left this way. 10. Enter your LDAP Root. 11. Click Next. The Installation Summary screen displays providing you with details of all the components that were installed and the amount of disk space used. 12. Click Next. This part of the CajunRules installation is now complete. 2-5

Chapter 2 Updating Netscape Schema The following steps update CajunRules schema extensions to your Netscape Directory Server and populate the directory with CajunRules data. 1. Complete the procedure described in "Installing CajunRules on Solaris". 2. Copy the crou.ldif file from your../cajunrules2.0/ bin directory to the../netscape/server4/shared/bin directory. 3. Edit your../netscape/server4/slapd- machine name /config/ns-schema.conf file (where machine name is = to the name of the machine on which you installed your Netscape Directory Server) by appending the following lines in this order:../cajunrules2.0/bin/nsdensch_at.conf../cajunrules2.0/bin/nsdensch_oc.conf 4. Stop the Netscape Directory Server using the following command:../netscape/server4/slapd- machine name / stop-slapd 5. Restart the Netscape Directory Server using the following command:../netscape/server/slapd- machine name / start-slapd 6. Modify your LDAP directory using the following command:../netscape/server4/shared/bin/ldapmodify -D cn=directory Manager -w password -avf crou.ldif * Note: Use the Directory Manager password entered during your Netscape Directory Server installation. At this point if you plan on managing Cisco devices using CajunRules, refer to Starting the CajunRules License Manager from Solaris in Chapter 3. Installation is now complete. 2-6

Installing CajunRules * Note: If you want to uninstall CajunRules, enter./uninstall.sh from your../cajunrules2.0/bin directory. 2-7

3 Starting CajunRules Overview You must start both the CajunRules Server and the Console before you can use CajunRules. * Note: For information on installing CajunRules, refer to Installing CajunRules in Chapter 2. This chapter contains the following information: Starting the CajunRules Server from Solaris Starting the CajunRules Console from Solaris Starting the CajunRules License Manager from Solaris Starting the CajunRules Server from Solaris Once you have completed the CajunRules installation, you can start your server. To start the CajunRules server: 1. Make sure your Netscape Directory Server is running. Refer to your Netscape Directory Server documentation for more information. 2. Enter./runcr.sh from your../cajunrules2.0/ bin directory. The RNRService Status Browser opens, displaying the status of all CajunRules services. 3-1

Chapter 3 Starting the CajunRules Console from Solaris * Note: You must start the CajunRules server before starting the CajunRules Console whether or not they are both installed on the same system. To start the Console application: 1. Enter./runconsole.sh from your../ CajunRules2.0/bin directory. * Note: At this point, if you are planning on managing Cisco devices using CajunRules, and have not yet obtained a license key, a dialog box displays informing you that discovery of Cisco devices has been disabled. For more information refer to Starting the CajunRules License Manager from Solaris. 2. Click OK. The CajunRules Login dialog box opens (Figure 3-1). Figure 3-1. CajunRules Login Dialog Box 3. Enter the following information in the Login box: User: CRAdmin Password: cajunrules 3-2

Starting CajunRules 4. Click OK. The CajunRules Console screen opens (Figure 3-2). Figure 3-2. CajunRules Console Screen You can now set up your network and start creating rules. Refer to the CajunRules Policy Manager User Guide, Version 2.0. Starting the CajunRules License Manager from Solaris * Note: Run this application if you are managing Cisco devices using CajunRules. You must obtain a license key before running this procedure. If you have not yet obtained a license key, please contact your Avaya Sales representative. To start the CajunRules License Manager application from Solaris: 1. Enter./licensekey.sh from your../ CajunRules2.0/bin directory. The CajunRules License Manager dialog box opens (Figure 3-3). 3-3

Chapter 3 Figure 3-3. CajunRules License Manager Dialog Box 2. Enter your license key information. 3. Click OK. * Note: If you entered the license key information properly, a dialog box opens informing you that registration was successful and that you need to restart your CajunRules server, if it was previously running. 4. Click OK. If the license information was entered incorrectly the Incorrect License Key dialog box displays (Figure 3-4). Figure 3-4. CajunRules Incorrect License Key Dialog Box 5. Click OK. The CajunRules License Manager dialog box displays again, allowing you to re-enter your license key. If you receive the error message again, contact your Avaya Sales representative or Avaya Customer Support. * Note: If you click Cancel, a dialog box opens informing you that Cisco support is disabled and that you must contact your Avaya Sales representative to enable this function. 6. Restart your CajunRules server (if it was running). 3-4

Index A Avaya product information viii C Cajun P330 software requirements 1-3 Cajun P550/P880 software requirements 1-3 Cisco 2500/7500 software requirements 1-3 client 1-1 console 1-1 requirements 1-3 starting 3-2 contacting technical support v D document conventions vi documentation feedback viii related vii documentation conventions vi H help online vii I installing CajunRules 1-1 L LDAP directory 1-5 LDAP port 1-5 LDAP root 1-5 LDAP servers requirements 1-4 N Netscape schema updating 2-6 O online documentation web site vii online help vii P policy engine 1-1 requirements 1-3 starting 3-1 preinstallation requirements 1-5 product information viii R related documentation vii requirements Cajun P330 software 1-3 Cajun P550/P880 software 1-3 Cisco 2500/7500 software 1-3 console 1-3 LDAP servers 1-4 policy engine 1-3 preinstallation 1-5 system 1-3 S schema updating Netscape 2-6 server 1-1 starting 3-1 software Cajun P330 1-3 Cajun P550/P880 1-3 Cisco 2500/7500 1-3 software version v starting the license manager 3-3 1

starting console 3-2 policy engine 3-1 server 3-1 system requirements 1-3 T technical support contacting v U updating Netscape schema 2-6 W web address documentation viii 2