NetXplorer Centralized NetEnforcer Management Software Installation Guide P/N D357006 R3
Important Notice Important Notice Allot Communications Ltd. ("Allot") is not a party to the purchase agreement under which NetEnforcer was purchased, and will not be liable for any damages of any kind whatsoever caused to the end users using this manual, regardless of the form of action, whether in contract, tort (including negligence), strict liability or otherwise. SPECIFICATIONS AND INFORMATION CONTAINED IN THIS MANUAL ARE FURNISHED FOR INFORMATIONAL USE ONLY, AND ARE SUBJECT TO CHANGE AT ANY TIME WITHOUT NOTICE, AND SHOULD NOT BE CONSTRUED AS A COMMITMENT BY ALLOT OR ANY OF ITS SUBSIDIARIES. ALLOT ASSUMES NO RESPONSIBILITY OR LIABILITY FOR ANY ERRORS OR INACCURACIES THAT MAY APPEAR IN THIS MANUAL, INCLUDING THE PRODUCTS AND SOFTWARE DESCRIBED IN IT. Please read the End User License Agreement and Warranty Certificate provided with this product before using the product. Please note that using the products indicates that you accept the terms of the End User License Agreement and Warranty Certificate. WITHOUT DEROGATING IN ANY WAY FROM THE AFORESAID, ALLOT WILL NOT BE LIABLE FOR ANY SPECIAL, EXEMPLARY, INDIRECT, INCIDENTAL OR CONSEQUENTIAL DAMAGES OF ANY KIND, REGARDLESS OF THE FORM OF ACTION WHETHER IN CONTRACT, TORT (INCLUDING NEGLIGENCE), STRICT LIABILITY OR OTHERWISE, INCLUDING, BUT NOT LIMITED TO, LOSS OF REVENUE OR ANTICIPATED PROFITS, OR LOST BUSINESS, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. Copyright Copyright 1997-2008 Allot Communications. All rights reserved. No part of this document may be reproduced, photocopied, stored on a retrieval system, transmitted, or translated into any other language without a written permission and specific authorization from Allot Communications Ltd. Trademarks Products and corporate names appearing in this manual may or may not be registered trademarks or copyrights of their respective companies, and are used only for identification or explanation and to the owners' benefit, without intent to infringe. NetEnforcer and the Allot Communications logo are registered trademarks of Allot Communications Ltd. ii NetXplorer Installation Guide
Table of Contents Important Notice... ii Table of Contents... 1-1 CHAPTER 1: INSTALLING NETXPLORER... 1-1 Windows Server Installation... 1-2 Installation Prerequisites... 1-2 Pre-Installation Checklist... 1-3 Installing Java 1.6 SDK... 1-3 Installation Instructions... 1-4 Upgrading NetXplorer... 1-8 Linux Server Installation... 1-10 Installation Prerequisites... 1-10 Installation Instructions... 1-12 NetXplorer Client Installation... 1-13 Java, WebStart and the NetXplorer Client... 1-13 Accessing NetXplorer... 1-16 Enabling NetXplorer Servers... 1-17 CHAPTER 2: INSTALLING NX ACCOUNTING... 2-1 NX Accounting on Windows Server... 2-2 Installation Prerequisites... 2-2 Software Requirements... 2-2 Pre-Installation Checklist... 2-3 Installation Instructions... 2-3 NX Accounting on Linux Server... 2-7 Installation Prerequisites... 2-7 Installation Instructions... 2-9 CHAPTER 3: INSTALLING NPP... 3-1 NPP on Windows Server... 3-2 Installation Prerequisites... 3-2 Software Requirements... 3-2 Pre-Installation Checklist... 3-3 Installation Instructions... 3-3
Chapter 1: Installing NetXplorer NPP on Linux Server... 3-7 Installation Prerequisites... 3-7 Installation Instructions... 3-9 1-2 NetXplorer Installation Guide
Chapter 1: Installing NetXplorer This chapter explains how to install NetXplorer management software. This chapter includes the following sections: Windows Server Installation, page 1-2, describes the hardware and software requirements and instructions for installing NetXplorer on a Windows Server. Linux Server Installation, page1-10, describes the hardware and software requirements and instructions for installing NetXplorer on a Linux Server. NetXplorer Client Installation, page1-13, describes the hardware and software requirements and instructions for installing the NetXplorer Client.
Chapter 1: Installing NetXplorer Windows Server Installation Installation Prerequisites This section describes the minimum hardware and software requirements for installing NetXplorer on a Windows Server. Server Hardware Requirements Minimum Specifications Intel Pentium 4 2.8 GHz and up Intel Chipset based (925 or 955) 2 GB RAM DDR Dual channel 1 x 80 GB HDD, 8 MB Cache (SATA interface recommended) Windows XP Professional Service Pack 2 Recommended Specifications Dual Xeon 3.0 GHz and up 4 GB RAM DDR Dual channel RAID (0 or 10) Controller with 256MB Battery Backed Write Cache (BBWC) 5x36 GB HDD SCSI U320 15k RPM or larger (capacity depends on overall storage needs, allowing for 20 GB per AC-2500/AC-1000 and 10 GB per AC-800/AC-400) Windows Server 2003 Service Pack 1 Software Requirements Any Real-Time Virus Protection programs or automatic Defragmentation/Backup software must be disabled on the NetXplorer server or the Allot folder needs to be excluded from protection/defragmentation. Java SDK 1.6 should be installed on the Server machine. For details on how to install the Java SDK see Installing Java 1.6 SDK on page 1-3 No other database applications (for example, SQL database) should be installed on the NetXplorer server machine. No application should be listening to port 80 at the time of the installation. 1-2 NetXplorer Installation Guide
Pre-Installation Checklist Chapter 1: Installing NetXplorer Before you begin the installation process, it is important that you perform the following steps. 1. Verify that a minimum of 20 GB is available on the disk. 2. Verify that there is at least 4 GB of available Virtual Memory. NOTE: Set the Virtual Memory on your computer by selecting Start/Settings/Control Panel/System. Open the Advanced tab and click the Performance Settings button. Open the Advanced tab and click the Change button under Virtual Memory to select a new value. 3. Verify that the Java SDK 1.6 is installed, including runtime environment. If it is not installed, install it now, as described in Installing Java 1.6 SDK below. Installing Java 1.6 SDK The Java 1.6 SDK, including the run time environment, must be installed before you can install NetXplorer. To install the Java SDK: 1. Browse to <target folder> and run the jdk-1_6_0_10-windows-i586- p.exe file on the installation CD. The Security Warning is displayed. 2. Click Run. The License Agreement is displayed. 3. Read the license agreement and select I accept the terms to indicate your agreement, and then click Next. The Custom Setup dialog is displayed. 4. Click Next to accept the default installation location, NOTE OR Click Change to browse and select an alternate installation location, and then click Next. The necessary program features are selected by default. You do not need to change these default settings. NetXplorer Installation Guide 1-3
Chapter 1: Installing NetXplorer The Browser Registration dialog is displayed. 5. Verify that Microsoft Internet Explorer is selected and click Install. The Installing Java SDK dialog is displayed. The progress bar indicates the status of the installation process. 6. When the installation process is done, the Complete window is displayed. 7. Click Finish. Installation Instructions After you have performed the pre-installation checks and have verified that the Java SDK is installed, you are ready to install NetXplorer. To install NetXplorer: 1. Run the setup.exe file on the installation CD or from a net-mounted disk. NOTE Do not attempt to run the setup file from a net long address, such as \\file_server\. 2. The following dialog is displayed. Figure 1-1: Security Warning 1-4 NetXplorer Installation Guide
Chapter 1: Installing NetXplorer 3. Click Run. The following window is displayed. Figure 1-2: NetXplorer InstallShield Wizard Welcome Window Click Next to continue. 4. The NetXplorer License Agreement is displayed. Click Next to continue 5. Read the license agreement and select I accept the term to indicate your agreement, and then click Next. The Choose Setup Type dialog is displayed. Figure 1-3: Choose Setup Type 6. To install all program components in a single location, select Typical and click Next. Then skip ahead to step 10. NOTE OR To install each component in a different location, select Custom and click Next. Allot strongly recommends using the Custom installation option. NetXplorer Installation Guide 1-5
Chapter 1: Installing NetXplorer 7. If you selected Custom in step 5, the following dialogs are displayed. Figure 1-4: Choose Destination Location - Custom 8. Accept the default destination locations or browse and select an alternate location for one or more of the components, and then click Next. The Choose NTP configuration option dialog is displayed. NOTE NOTE If alternate locations are chosen for one or more components, they must be in subdirectory on one of the root directories (like C:\Allot or D:\Allot) and not on the root directory itself (C:\ or D:\). It is recommended that the system files and the different monitoring files be installed on different physical drives in order to improve overall performance. Figure 1-5: Choose NTP configuration option - Custom 9. Select either the Use local clock or the Use External NTP server radio button. If you select an external NTP server, enter the server s IP address in the field provided. Click Next. The Ready to Install the Program dialog is displayed (Error! Reference source not found.). NOTE Allot strongly recommends using an external NTP server. 1-6 NetXplorer Installation Guide
10. If you selected Typical in step 5 the following dialog is displayed. Chapter 1: Installing NetXplorer Figure 1-6: Choose Destination Location - Typical 11. Accept the default destination location or browse and select an alternate location, and then click Next. The Ready to Install the Program dialog is displayed (Error! Reference source not found.). Figure 1-7: Ready to Install the Program 12. Click Install to begin the installation. The Setup Status dialog is displayed. After a few moments the following popup is displayed. Figure 1-8: Setup Initializing NOTE The installation may take up to 30 minutes to complete. NetXplorer Installation Guide 1-7
Chapter 1: Installing NetXplorer 13. When the installation is complete the following dialog is displayed. Figure 1-9: NetXplorer InstallShield Wizard Complete 14. Select Yes, I want to restart my computer now and click Finish. The installation process is complete. Upgrading NetXplorer Server Existing installations of NetXplorer Server can be upgraded from the installation CD without requiring the existing version to be uninstalled. To upgrade NetXplorer: 1. Browse to <location > and run the setup.exe file on the installation CD or from a net-mounted disk. NOTE: Do not attempt to run the setup file from a net long address, such as \\file_server\. 2. The following dialog is displayed. Figure 1-10: Security Warning 1-8 NetXplorer Installation Guide
Chapter 1: Installing NetXplorer 3. Click Run. The following window is displayed. Figure 1-11: NetXplorer InstallShield Wizard Welcome Window 4. Click Next to continue. 5. A message appears indicating that the NetXplorer Server will shut down for the upgrade. Click Yes to initiate the upgrade. 6. When the upgrade is complete, a message appears indicating success or failure. NOTE If upgrading the server from version NX7.X.X to NX8.1.X, after the server recovers from reboot, enter the new key for the relevant version; otherwise the GUI window will automatically close. NetXplorer Installation Guide 1-9
Chapter 1: Installing NetXplorer Linux Server Installation Installation Prerequisites This section describes the minimum hardware and software requirements for installing NetXplorer on a Linux Server. Server Hardware Requirements Minimum Specifications Intel Pentium 4 2.8 GHz and up Intel Chipset based (925 or 955) 1 GB RAM DDR Dual channel 1 x 100 GB HDD, 8 MB Cache (SATA interface recommended) Red Hat Enterprise Linux Server 5 32 or 64 bit installed Recommended Specifications DUAL Xeon 2.8 GHz and up 4 GB RAM DDR Dual channel RAID (0 or 10) Controller with 256MB Battery Backed Write Cache (BBWC) 5x36 GB HDD SCSI U320 15k RPM or larger (capacity depends on overall storage needs, allowing for 20 GB per AC-2500/AC-1000 and 10 GB per AC-800/AC-400) Red Hat Enterprise Linux Server 5 32 or 64 bit installed Software Requirements NetXplorer Server should be installed on a machine running Red Hat Enterprise Linux Server 5 32 or 64 bit. NetXplorer Client software should be installed on a machine running Windows XP Professional and Microsoft Internet Explorer. Any Real-Time Virus Protection programs or automatic Defragmentation/Backup software must be disabled on the NetXplorer server or the Allot folder needs to be excluded from protection/defragmentation. No other database applications (for example, SQL database) should be installed on the NetXplorer server machine. 1-10 NetXplorer Installation Guide
Chapter 1: Installing NetXplorer No application should be listening to port 80 at the time of the installation. FQDN of the server should be defined (to check run hostname -f ). Check that NTP service is installed. The Config ntp service should be configured to start when the unit is rebooted by entering the following command: chkconfig --levels 35 ntpd on NTP service should be configured to update the time from an external NTP server and deliver the time service to Allot devices. If the OS is not installed yet, configure the server so that the CD is the first boot device, insert the RedHat5 Installation CD #1 and reboot the host. Follow the on-screen instructions using the default installation options on all steps except for the steps listed below Hostname: give fully qualified host name (e.g., NXlinx.allot.local); Firewall: disabled (during configuration after reboot), SELinux: disabled (during configuration after reboot), Time: configure correct time according to time zone chosen NTP server: may be configured during configuration after the IP address is configured (select the checkbox about synchronize before starting) NetXplorer Installation Guide 1-11
Chapter 1: Installing NetXplorer Installation Instructions 1. Confirm all the hardware and software requirements. 2. Run rpm -ivh NetXplorer-8.1-1.i386.rpm Package dependencies are checked, and error message issued if additional are packages needed. JDK 6 (Java development kit) and Xvfb (X virtual frame buffer) packages are included in the installation set. 3. To install the packages, run rpm -ivh jdk-6u1-linux-i586.rpm and rpm -ivh xorg-x11-server-xvfb-1.1.1-48.13.el5.i386.rpm accordingly (version numbers may differ). 4. Configure the NTP service to start on system start by entering the following command: chkconfig --levels 35 ntpd on 5. Manually edit the /etc/host files as follows: 127.0.0.1 localhost.localdomain localhost 10.50.18.1 NX1-lin.allot.local NX1-lin 6. Reboot the machine. Confirm that NTP and NetXplorer services are running. 7. To start/stop/check the status of the services use commands such as: service ntpd start service netxplorer stop service netxplorer status 1-12 NetXplorer Installation Guide
Chapter 1: Installing NetXplorer NetXplorer Client Installation Java, WebStart and the NetXplorer Client NetXplorer works with a technology known as WebStart from Sun Microsystems. WebStart enables you to run the NetXplorer Client software by simply doubleclicking an icon on your computer s desktop. This mode of operation is more convenient than having to access the NetXplorer Client through an Internet browser. Hardware Requirements It is recommended that the NetXplorer Client be installed on a machine with the following minimum specifications: Pentium 4 512MB RAM Windows XP/Microsoft Internet Explorer Software Requirements NetXplorer Client software should be installed on a machine running Windows XP Professional and Microsoft Internet Explorer. Any Real-Time Virus Protection programs or automatic Defragmentation/Backup software must be disabled on the NetXplorer client or the Allot folder needs to be excluded from protection/defragmentation. Java JRE 1.6 should be installed on the client machine. For details on how to install the Java JRE see Installing Java 1.6 JRE on page 1-15. No application should be listening to port 80 at the time of the installation. Firewall Settings In some networks, workstations running the NetXplorer GUI or NetEnforcer can be separated from the NetXplorer server by a firewall for security reasons. In order to allow the client to communicate with the NetXplorer server the following ports should be opened in the Firewall: TCP/80 HTTP TCP/1098 The RMI service bind address TCP/1099 JNP server bind address TCP/4444 RMI Object ports NetXplorer Installation Guide 1-13
Chapter 1: Installing NetXplorer To enable the communication between the NetXplorer and the NetEnforcers the following ports in the Firewall should be opened: TCP/80 HTTP UDP/161 SNMP UDP/162 SNMP Trap UDP/123 NTP TCP/123 NTP 1-14 NetXplorer Installation Guide
Chapter 1: Installing NetXplorer Installing Java 1.6 JRE The Java 1.6 JRE must be installed on your computer as a prerequisite to working with the NetXplorer User Interface. To install Java 1.6 JRE: 1. Open your Internet browser, and access http://<<netx-addr>> The following window is displayed. Figure 1-12: NetXplorer Java Installation Screen 2. Click the Install Java JRE First link if you do not have Java 1.6 JRE installed on your computer. 3. Click on the appropriate link and follow the on-screen instructions to install the Java 1.6 JRE on your computer. Initializing WebStart 1. With the Java 1.6 JRE installed, access http://<<netxplorer-ipaddress> once again. The Application Starting window is displayed. When the loading process is complete for the first time, the Security Warning is displayed, prompting you to confirm that you want to allow NetXplorer User Interface software access to your computer. NetXplorer Installation Guide 1-15
Chapter 1: Installing NetXplorer 2. The NetXplorer Log On window is displayed. Figure 1-13: NetXplorer Log On Window A shortcut icon to the NetXplorer installation is placed on your desktop and in your system s Start menu. Accessing NetXplorer Once you have completed the initial setup, as described in the previous chapter, you can access to NetEnforcer via your Web browser. The first time that you connect to NetEnforcer, you may be prompted to install Java plug-in 1.6. Refer to Installing Java 1.6 JRE, page 1-13, for further information. To connect to NetXplorer: 1. In Internet Explorer, browse to http:<<netxplorer IP>> and select Launch NetXplorer in the NetXplorer Control Panel. OR Double click the shortcut icon on the desktop or in the system s Start menu. 1-16 NetXplorer Installation Guide
2. The Java Application Starting window is displayed. 3. The NetXplorer Log On dialog is displayed. Chapter 1: Installing NetXplorer Figure 1-14 NetXplorer Log On Dialog Box 4. In the User Name field, enter admin and in the Password field, enter allot or the password that was established at set up. This is the default user name and password. They may be different if you changed them during the initial configuration. 5. Click Log On. The NetXplorer GUI is displayed. NOTE It may take a few moments to display the NetXplorer GUI. Enabling NetXplorer Servers In order to manage more than one NetEnforcer as well as certain features using NetXplorer, NetXplorer Server must be enabled by entering the appropriate key. This key may be entered at installation or at any time following. For more information concerning the NetXplorer Server contact Allot Customer Support at support@allot.com. NetXplorer Installation Guide 1-17
Chapter 1: Installing NetXplorer To enable NetXplorer Server: 1. Select Tools > NetXplorer Application Server Registration from the NetXplorer Menu bar. The NetXplorer Application Server Registration dialog box appears. Figure 1-15: NetXplorer Application Server Registration Dialog 2. Enter the Server Registration Key and Serial Number provided by Allot to enable the NetXplorer Server functionality. 3. An Expiration Date will be generated automatically after clicking Save. 4. If Subscriber Management is enabled by the key that has been entered, it will be indicated (along with the type and the maximum number of subscribers) after SMP Enabled. For more information, see the SMP User Guide. 5. If Policy Provisioning is enabled by the key that has been entered, it will be indicated (along with the maximum number of accounts) after NPP Enabled. For more information, see the NPP User Guide. 6. If Classification of Hosts by Country is enabled by the key that has been entered, it will be indicated after Host Catalog Country Classification Enabled. 7. If Accounting information is enabled by the key that has been entered, it will be indicated after Accounting Enabled. 8. If Service Catalog updates via the web are enabled by the key that has been entered, it will be indicated after Protocol Updates Enabled. 9. The Maximum number of devices covered by the entered key is indicated. 10. Click Save to enter the key and close the dialog box. 1-18 NetXplorer Installation Guide
Chapter 2: Installing NX Accounting This chapter explains how to install the Accounting module of NetXplorer management software. This chapter includes the following sections: NX Accounting on Windows Server, page2-2, describes the hardware and software requirements and instructions for installing NX Accounting on a Windows Server. NX Accounting on Linux Server, page 2-7, describes the hardware and software requirements and instructions for installing NX Accounting on a Linux Server.
Chapter 2: Installing NX Accounting NX Accounting on Windows Server By default, NX Accounting software is installed on the same machine as NetXplorer Server during the standard NetXplorer installation. Accounting functionality is then enabled by entering the appropriate License Key. The following procedure is for installing the Accounting software on another Windows Server, without NetXplorer. Installation Prerequisites Hardware Requirements Minimum Specifications Intel Pentium 4 2.8 GHz and up Intel Chipset based (925 or 955) 2 GB RAM DDR Dual channel 1 x 80 GB HDD, 8 MB Cache (SATA interface recommended) Windows XP Professional Service Pack 2 Recommended Specifications Dual Xeon 3.0 GHz and up 4 GB RAM DDR Dual channel RAID (0 or 10) Controller with 256MB Battery Backed Write Cache (BBWC) 5x36 GB HDD SCSI U320 15k RPM or larger (capacity depends on overall storage needs, allowing for 20 GB per AC-2500/AC-1000 and 10 GB per AC-800/AC-400) Windows Server 2003 Service Pack 1 2-2 NetXplorer Installation Guide
Software Requirements Chapter 2: Installing NX Accounting NetXplorer Accounting software should be installed on a machine running Windows 2003 Server or Windows XP Professional. Any Real-Time Virus Protection programs or automatic Defragmentation/Backup software must be disabled on the NetXplorer server or the Allot folder needs to be excluded from protection/defragmentation. Java SDK 1.6 should be installed on the Accounting Server. For details on how to install the Java SDK see Installing Java 1.6 SDK on page 1-3. No other database applications (for example, SQL database) should be installed on the NetXplorer Accounting machine. No application should be listening to port 80 at the time of the installation. Pre-Installation Checklist Before you begin the installation process, it is important that you perform the following steps. 1. Verify that a minimum of 20 GB is available on the disk. 2. Verify that there is at least 4 GB of available Virtual Memory. NOTE Set the Virtual Memory on your computer by selecting Start/Settings/Control Panel/System. Open the Advanced tab and click the Performance Settings button. Open the Advanced tab and click the Change button under Virtual Memory to select a new value. 3. Verify that the Java SDK 1.6 is installed, including runtime environment. If it is not installed, install it now, as described in Installing Java 1.6 SDK on page 1-3. Installation Instructions NX Accounting may be installed on the same machine as NetXplorer Server, or on a separate machine. In either case you need to identify the IP address of the NetXplorer during the installation process. NetXplorer Installation Guide 2-3
Chapter 2: Installing NX Accounting NOTE Be sure that all the Ports are operable as detailed in the Firewall section in this Installation and User Guide, and that Java SDK is installed. On the NetXplorer CD (or in a folder supplied to the End-User) the installation files are in a directory called ACCT. To install the accounting manager: 1. Browse to the ACCT directory and run the setup.exe file on the installation CD or from a net-mounted disk. NOTE Do not attempt to run the setup file from a long address 2. The following dialog is displayed. Figure 2-1: Security Warning 3. Click Run. The following window is displayed. Figure 2-2: Accounting Manager InstallShield Welcome Window 2-4 NetXplorer Installation Guide
Chapter 2: Installing NX Accounting 4. Click Next. The NetXplorer License Agreement is displayed. 5. Read the license agreement and select I accept the term to indicate your agreement, and then click Next. The Choose Destination Location window is displayed. Figure 2-3: Choose Destination Location 6. Accept the default destination locations or browse and select an alternate location, and then click Next. The Enter NetXplorer Server IP Address window is displayed. 7. Type in the IP address of the NetXplorer Server, and click Next. Figure 2-4: Ready to Install Window NetXplorer Installation Guide 2-5
Chapter 2: Installing NX Accounting 8. Click Install to begin the installation. The Setup Status window is displayed. When the installation is complete the following dialog is displayed. Figure 2-5: NetXplorer InstallShield Wizard Complete 9. Select Yes, I want to restart my computer now and click Finish. The installation process is complete. 10. The NX Accounting functionality must be enabled by entering the appropriate key in the NetXplorer GUI. This key may be entered at installation or at any time following. For information, see the NetXplorer Operations Guide. 2-6 NetXplorer Installation Guide
NX Accounting on Linux Server Chapter 2: Installing NX Accounting By default, NX Accounting software is installed on the same machine as NetXplorer Server during the standard NetXplorer installation. Accounting functionality is then enabled by entering the appropriate License Key. The following procedure is for installing the Accounting software on another Linux Server, without NetXplorer. Installation Prerequisites This section describes the minimum hardware and software requirements for installing NetXplorer on a Linux Server. Server Hardware Requirements Minimum Specifications Intel Pentium 4 2.8 GHz and up Intel Chipset based (925 or 955) 1 GB RAM DDR Dual channel 1 x 100 GB HDD, 8 MB Cache (SATA interface recommended) Red Hat Enterprise Linux Server 5 32 or 64 bit installed Recommended Specifications DUAL Xeon 2.8 GHz and up 4 GB RAM DDR Dual channel RAID (0 or 10) Controller with 256MB Battery Backed Write Cache (BBWC) 5x36 GB HDD SCSI U320 15k RPM or larger (capacity depends on overall storage needs, allowing for 20 GB per AC-2500/AC-1000 and 10 GB per AC-800/AC-400) Red Hat Enterprise Linux Server 5 32 or 64 bit installed NetXplorer Installation Guide 2-7
Chapter 2: Installing NX Accounting Software Requirements NetXplorer Server should be installed on a machine running Red Hat Enterprise Linux Server 5 32 or 64 bit. NetXplorer Client software should be installed on a machine running Windows XP Professional and Microsoft Internet Explorer. Any Real-Time Virus Protection programs or automatic Defragmentation/Backup software must be disabled on the NetXplorer server or the Allot folder needs to be excluded from protection/defragmentation. No other database applications (for example, SQL database) should be installed on the NetXplorer server machine. No application should be listening to port 80 at the time of the installation. FQDN of the server should be defined (to check run hostname -f ). Check that NTP service is installed. The Config ntp service should be configured to start when the unit is rebooted by entering the following command: chkconfig --levels 35 ntpd on NTP service should be configured to update the time from an external NTP server and deliver the time service to Allot devices. If the OS is not installed yet, configure the server so that the CD is the first boot device, insert the RedHat5 Installation CD #1 and reboot the host. Follow the on-screen instructions using the default installation options on all steps except for the steps listed below Hostname: give fully qualified host name (e.g., NXlinx.allot.local); Firewall: disabled (during configuration after reboot), SELinux: disabled (during configuration after reboot), Time: configure correct time according to time zone chosen NTP server: may be configured during configuration after the IP address is configured (select the checkbox about synchronize before starting) 2-8 NetXplorer Installation Guide
Installation Instructions Chapter 2: Installing NX Accounting To install the accounting manager server in Linux: 1. Confirm all the software and disc pre-installation requirements are available. 2. Run the rpm -ivh Accounting-Manager-8.1.0-5.i386.rpm Package. Dependencies are checked and error message issued if additional packages are needed. JDK 6 (Java development kit) and Xvfb (X virtual frame buffer) packages are included in the installation set. 3. To install the packages, run rpm -ivh jdk-6u1-linux-i586.rpm (version numbers may differ). After the installation is finished, you see the following: rpm -ivh Accounting-Manager-8.1.0-5.i386.rpm Preparing... ########################################### [100%] 1: Accounting-Manager ########################################### [100%] Installation finished. Please set NetXplorer IP Address by running accounting/bin/set_acct_nx_ip.sh. Than, please reboot your device. 4. Manually edit the /etc/host files as follows: 127.0.0.1 localhost.localdomain localhost 10.50.18.1 NX1-lin.allot.local NX1-lin 5. To set the NetXplorer IP address, run the following: /opt/allot/accounting/bin/set_acct_nx_ip.sh 6. Reboot the machine. 7. Check that NTP and NetXplorer services are running. 8. To start/stop/check the status of the services use commands such as: service ntpd start NetXplorer Installation Guide 2-9
Chapter 2: Installing NX Accounting service accounting_manager stop service accounting_manager status 9. The NX Accounting functionality must be enabled by entering the appropriate key in the NetXplorer GUI. This key may be entered at installation or at any time following. For information, see the NetXplorer Operations Guide. 2-10 NetXplorer Installation Guide
Chapter 3: Installing NPP This chapter explains how to install the NetPolicy Provisioner (NPP) module of NetXplorer management software. This chapter includes the following sections: NPP on Windows Server, page 3-2, describes the hardware and software requirements and instructions for installing NPP on a Windows Server. NPP on Linux Server, page 3-7, describes the hardware and software requirements and instructions for installing NPP on a Linux Server.
Chapter 3: Installing NPP NPP on Windows Server By default, the NetPolicy Provisioner is installed on the same machine as NetXplorer Server during the standard NetXplorer installation. NPP functionality is then enabled by entering the appropriate License Key. The following procedure is for installing NPP on another Windows Server, without NetXplorer. Installation Prerequisites Hardware Requirements Minimum Specifications Intel Pentium 4 2.8 GHz and up Intel Chipset based (925 or 955) 2 GB RAM DDR Dual channel 1 x 80 GB HDD, 8 MB Cache (SATA interface recommended) Windows XP Professional Service Pack 2 Recommended Specifications Dual Xeon 3.0 GHz and up 4 GB RAM DDR Dual channel RAID (0 or 10) Controller with 256MB Battery Backed Write Cache (BBWC) 5x36 GB HDD SCSI U320 15k RPM or larger (capacity depends on overall storage needs, allowing for 20 GB per AC-2500/AC-1000 and 10 GB per AC-800/AC-400) Windows Server 2003 Service Pack 1 Software Requirements NetPolicy Provisioner software should be installed on a machine running Windows 2003 Server or Windows XP Professional. Any Real-Time Virus Protection programs or automatic Defragmentation/Backup software must be disabled on the NetXplorer server or the Allot folder needs to be excluded from protection/defragmentation. 3-2 NetXplorer Installation Guide
Java SDK 1.6 should be installed on the NPP Server. For details on how to install the Java SDK see Installing Java 1.6 SDK on page 1-3. No other database applications (for example, SQL database) should be installed on the NPP machine. No application should be listening to port 80 at the time of the installation. Pre-Installation Checklist Chapter 3: Installing NPP Before you begin the installation process, it is important that you perform the following steps. 1. Verify that a minimum of 20 GB is available on the disk. 2. Verify that there is at least 4 GB of available Virtual Memory. NOTE: Set the Virtual Memory on your computer by selecting Start/Settings/Control Panel/System. Open the Advanced tab and click the Performance Settings button. Open the Advanced tab and click the Change button under Virtual Memory to select a new value. 3. Verify that the Java SDK 1.6 is installed, including runtime environment. If it is not installed, install it now, as described in Installing Java 1.6 SDK on page 1-3. Installation Instructions NPP may be installed on the same machine as NetXplorer Server, or on a separate machine. In either case you need to identify the IP address of the NetXplorer during the installation process. NOTE Be sure that all the Ports are operable as detailed in the Firewall section in this Installation and User Guide, and that Java SDK is installed. On the NetXplorer CD (or in a folder supplied to the End-User) the installation files are in a directory called NPP. To install NPP: 1. Browse to the NPP directory and run the setup.exe file on the installation CD or from a net-mounted disk. NOTE Do not attempt to run the setup file from a long address NetXplorer Installation Guide 3-3
Chapter 3: Installing NPP 2. The following dialog is displayed. Figure 3-1: Security Warning 3. Click Run. The following window is displayed. Figure 3-2: NetPolicy Provisioner InstallShield Welcome Window 4. Click Next. The NetXplorer License Agreement is displayed. 5. Read the license agreement and select I accept the term to indicate your agreement, and then click Next. The Choose Destination Location window is displayed. Figure 3-3: Choose Destination Location 3-4 NetXplorer Installation Guide
6. Accept the default destination locations or browse and select an alternate location for one or more of the components, and then click Next. The Enter NetXplorer Server IP Address window is displayed. Chapter 3: Installing NPP Figure 3-4: NetXplorer IP Address Window 7. Type in the IP address of the NetXplorer Server, and click Next. Figure 3-5: Ready to Install Window 8. Click Install to begin the installation. The Setup Status window is displayed. When the installation is complete the following dialog is displayed. Figure 3-6: NPP InstallShield Wizard Complete 9. Select Yes, I want to restart my computer now and click Finish. The installation process is complete. NetXplorer Installation Guide 3-5
Chapter 3: Installing NPP 10. NPP functionality must be enabled by entering the appropriate key in the NetXplorer GUI. This key may be entered at installation or at any time following. For information, see the NetXplorer Operations Guide. 3-6 NetXplorer Installation Guide
NPP on Linux Server Chapter 3: Installing NPP By default, the NetPolicy Provisioner is installed on the same machine as NetXplorer Server during the standard NetXplorer installation. NPP functionality is then enabled by entering the appropriate License Key. The following procedure is for installing NPP on another Linux Server, without NetXplorer. Installation Prerequisites This section describes the minimum hardware and software requirements for installing NetXplorer on a Linux Server. Server Hardware Requirements Minimum Specifications Intel Pentium 4 2.8 GHz and up Intel Chipset based (925 or 955) 1 GB RAM DDR Dual channel 1 x 100 GB HDD, 8 MB Cache (SATA interface recommended) Red Hat Enterprise Linux Server 5 32 or 64 bit installed Recommended Specifications DUAL Xeon 2.8 GHz and up 4 GB RAM DDR Dual channel RAID (0 or 10) Controller with 256MB Battery Backed Write Cache (BBWC) 5x36 GB HDD SCSI U320 15k RPM or larger (capacity depends on overall storage needs, allowing for 20 GB per AC-2500/AC-1000 and 10 GB per AC-800/AC-400) Red Hat Enterprise Linux Server 5 32 or 64 bit installed Software Requirements NetXplorer Server should be installed on a machine running Red Hat Enterprise Linux Server 5 32 or 64 bit. NetXplorer Client software should be installed on a machine running Windows XP Professional and Microsoft Internet Explorer. NetXplorer Installation Guide 3-7
Chapter 3: Installing NPP Any Real-Time Virus Protection programs or automatic Defragmentation/Backup software must be disabled on the NetXplorer server or the Allot folder needs to be excluded from protection/defragmentation. No other database applications (for example, SQL database) should be installed on the NetXplorer server machine. No application should be listening to port 80 at the time of the installation. FQDN of the server should be defined (to check run hostname -f ). Check that NTP service is installed. The Config ntp service should be configured to start when the unit is rebooted by entering the following command: chkconfig --levels 35 ntpd on NTP service should be configured to update the time from an external NTP server and deliver the time service to Allot devices. If the OS is not installed yet, configure the server so that the CD is the first boot device, insert the RedHat5 Installation CD #1 and reboot the host. Follow the on-screen instructions using the default installation options on all steps except for the steps listed below Hostname: give fully qualified host name (e.g., NXlinx.allot.local); Firewall: disabled (during configuration after reboot), SELinux: disabled (during configuration after reboot), Time: configure correct time according to time zone chosen NTP server: may be configured during configuration after the IP address is configured (select the checkbox about synchronize before starting) 3-8 NetXplorer Installation Guide
Installation Instructions Chapter 3: Installing NPP To install the NPP on Linux: 1. Confirm all the software and disc pre-installation requirements are available. 2. Run the rpm ivh NetPolicy-Provisioner-8.1.0-5.i386.rpm Package. Dependencies are checked, and error message issued if additional packages are needed. JDK 6 (Java development kit) and Xvfb (X virtual frame buffer) packages are included in the installation set. 3. To install the packages, run run rpm -ivh jdk-6u1-linux-i586.rpm (version numbers may differ). After the installation is finished, you see the following: rpm -ivh NetPolicy-Provisioner-8.1.0-5.i386.rpm Preparing... ########################################### [100%] 1:NetPolicy-Provisioner ########################################### [100%] Installation finished. Please set NetXplorer IP Address by running /opt/allot/npp/bin/set_npp_nx_ip.sh. Then, please reboot your device. 4. Manually edit the /etc/host files as follows: 127.0.0.1 localhost.localdomain localhost 10.50.18.1 NX1-lin.allot.local NX1-lin 5. To set the NetXplorer IP address, run the following: /opt/allot/accounting/bin/set_acct_nx_ip.sh 6. Reboot the machine. 7. Check that NTP and NetXplorer services are running. 8. To start/stop/check the status of the services use commands such as: service ntpd start service npp stop service npp status NetXplorer Installation Guide 3-9
Chapter 3: Installing NPP 9. NPP functionality must be enabled by entering the appropriate key in the NetXplorer GUI. This key may be entered at installation or at any time following. For information, see the NetXplorer Operations Guide. 3-10 NetXplorer Installation Guide