Nortel Networks NN43001-315 manuel d'utilisation

Nortel Communication Server 1000 Lin ux Platf or m Base and Applications Installation and Commissioning Release: Release 5.5 Document Revision: 02.09 www.nortel.com NN43001-315 .[...]

Nortel Communication Server 1000 Release: Release 5.5 Publication: NN43001-315 Document release date: 29 October 2008 Copyright © 2007–2008 Nortel Networks All Rights Reserved. Sourced in Canada LEGAL NOTICE While the information in this document is believed to be accurate and reliable, except as otherwise expressly agreed to in writing NORTEL P[...]

3 . Contents New in this Release 5 Security hardening 5 Features 5 Installation times 5 CLI commands 6 Upgrade procedure 6 Alarms 6 Screen captures 6 Firewall ports 6 Task flow diagrams 6 Other changes 6 Revision history 7 How to get help 9 Getting help from the Nortel Web site 9 Getting help over the telephone from a Nortel Solutions Center 9 Gett[...]

4 Upgrading Nortel Linux base 54 Installation and configuration of applications on Linux base 69 Prerequisites to install and configure applications 70 Install the CS 1000 applications 70 Installing the NRS applications 71 Install the Element Manager applications 82 Configuration for Network Routing Service or Element Manager applications in ECM 99[...]

5 . Ne w in this Release ATTENTION Do not contact Red Hat for technical support on your Nortel version of the Linux base operating system. If technical support is required for the Nortel version of the Linux base operating system, contact Nortel technical support through your regular channels. The following sections detail what’s new in Linux Pla[...]

6 New in this Release CLI commands Several new CLI commands are added for Release 5.5. The CLI commands and a brief definition are listed in the following table: • Table 11 "Nortel Linux base CLI commands" (page 141) Upgrade procedure A procedure is added to upgrade the Linux base and applications from Release 5.0 to 5.5. The procedure [...]

Other changes 7 Revision history October 29, 2008 Standard 02.09. This document is up-issued to include a note under Disaster Recovery. May 01, 2008 Standard 02.08. This document is up-issued to update information in the Upgrading Nortel Linux base procedures. April 18, 2008 Standard 02.07. This document is up-issued to add information to the proce[...]

8 New in this Release December 7, 2007 Standard 02.01. This document is up-issued to support Nortel Communication Server 1000 Release 5.5. This document contains new information on CLI commands, an upgrade procedure, firewall ports, and alarms. Screen captures for the Linux base installation procedure are updated. November 27, 2007 Standard 01.04. [...]

9 . Ho w to g et help This chapter explains how to get help for Nortel products and services. Getting help fr om the Nortel Web site The best way to get technical support for Nortel products is from the Nortel Technical Support Web site: www.nortel.com/support This site provides quick access to software, documentation, bulletins, and tools to addre[...]

10 How to get help Getting help fr om a specialist b y using an Express Routing Code To access some Nortel Technical Solutions Centers, you can use an Express Routing Code (ERC) to quickly route your call to a specialist in your Nortel product or service. To locate the ERC for your product or service, go to: w ww.nortel.com/erc Getting help thr oug[...]

11 . Intr oduction ATTENTION Do not contact Red Hat for technical support on your Nortel version of the Linux base operating system. If technical support is required for the Nortel version of the Linux base operating system, contact Nortel technical support through your regular channels. Linux Platform Base and Applications Installation and Commiss[...]

12 Introduction To view licensing information, see “ Passthrough end user license agreement” (page 121) . Linux base o verview The Communication Server 1000 (CS 1000) Linux base system provides a Linux server platform for applications on a commercial off-the-shelf (COTS) Pentium server. The platform can support the new Session Initiation Protoc[...]

13 . Linux base and applications installation and upgrade task flow Linux Platform Base and Applications Installation and Commissioning (NN43001-315) () provides installation and upgrade information for the Linux base and applications. You must follow the proper sequence of events to correctly install or upgrade the Linux base and applications. Us[...]

14 Linux base and applications installation and upgrade task flow • Common Network Directory 2.2 Administration (NN43050-101) () • Network Routing Service Installation and Commissioning (NN43001-564) () This section contains the following task flows: • Figure 1 "Linux base and applications install for primary or backup ECM server " [...]

Task flows for individual servers 15 Figure 1 Linux base and applications install for primary or backup ECM server Nortel Communication Server 1000 Linux Platform Base and Applications Installation and Commissioning NN43001-315 02.09 29 October 2008 Copyright © 2007–2008 Nortel Networks .[...]

16 Linux base and applications installation and upgrade task flow Figure 2 Linux base and applications install for member server Nortel Communication Server 1000 Linux Platform Base and Applications Installation and Commissioning NN43001-315 02.09 29 October 2008 Copyright © 2007–2008 Nortel Networks .[...]

Task flows for individual servers 17 Figure 3 Linux base and applications upgrade for primary or backup ECM server with NRS Nortel Communication Server 1000 Linux Platform Base and Applications Installation and Commissioning NN43001-315 02.09 29 October 2008 Copyright © 2007–2008 Nortel Networks .[...]

18 Linux base and applications installation and upgrade task flow Figure 4 Linux base and applications upgrade for primary or backup ECM server with EM Nortel Communication Server 1000 Linux Platform Base and Applications Installation and Commissioning NN43001-315 02.09 29 October 2008 Copyright © 2007–2008 Nortel Networks .[...]

Task flows for individual servers 19 Figure 5 Linux base and applications upgrade for primary or backup ECM server with EM and adding SM Nortel Communication Server 1000 Linux Platform Base and Applications Installation and Commissioning NN43001-315 02.09 29 October 2008 Copyright © 2007–2008 Nortel Networks .[...]

20 Linux base and applications installation and upgrade task flow Figure 6 Linux base and applications upgrade for member server Nortel Communication Server 1000 Linux Platform Base and Applications Installation and Commissioning NN43001-315 02.09 29 October 2008 Copyright © 2007–2008 Nortel Networks .[...]

Task flows for common combinations of servers 21 T ask flo ws for common combinations of ser ver s This section provides high-level task flows for the installation and upgrade of common combinations of primary ECM servers, backup ECM servers, single ECM servers, and member servers. Refer to the chapters “Install Nortel Linux base ” (page 35) a[...]

22 Linux base and applications installation and upgrade task flow • CND: Common Network Directory • NRS: Network Routing Service Figure 7 Linux base and applications install for primary server with backup ECM server Nortel Communication Server 1000 Linux Platform Base and Applications Installation and Commissioning NN43001-315 02.09 29 October [...]

Task flows for common combinations of servers 23 Figure 8 Linux base and applications install for primary server with backup ECM server and member servers Nortel Communication Server 1000 Linux Platform Base and Applications Installation and Commissioning NN43001-315 02.09 29 October 2008 Copyright © 2007–2008 Nortel Networks .[...]

24 Linux base and applications installation and upgrade task flow Figure 9 Linux base and applications install for primary ECM server with member servers Nortel Communication Server 1000 Linux Platform Base and Applications Installation and Commissioning NN43001-315 02.09 29 October 2008 Copyright © 2007–2008 Nortel Networks .[...]

Task flows for common combinations of servers 25 Figure 10 Linux base and applications upgrade for primary with backup ECM server Nortel Communication Server 1000 Linux Platform Base and Applications Installation and Commissioning NN43001-315 02.09 29 October 2008 Copyright © 2007–2008 Nortel Networks .[...]

26 Linux base and applications installation and upgrade task flow Figure 11 Linux base and applications upgrade for primary server with backup ECM server and member servers Nortel Communication Server 1000 Linux Platform Base and Applications Installation and Commissioning NN43001-315 02.09 29 October 2008 Copyright © 2007–2008 Nortel Networks .[...]

Task flows for common combinations of servers 27 Figure 12 Linux base and applications upgrade for primary ECM server with member servers Nortel Communication Server 1000 Linux Platform Base and Applications Installation and Commissioning NN43001-315 02.09 29 October 2008 Copyright © 2007–2008 Nortel Networks .[...]

28 Linux base and applications installation and upgrade task flow Figure 13 Subscriber Manager installation and configuration ECM Upgrade Procedures The following describes the procedures for upgrading an Enterprise Common Manager (ECM) system from Rls 5.00 to Rls 5.50. Nortel Communication Server 1000 Linux Platform Base and Applications Installat[...]

ECM Upgrade Procedures 29 There are several procedures in this section. Perform the first procedure based on your system configuration: • “1a: Upgrade Primary server without Backup server and less than three or no Member servers” (page 29) • “1b: Upgrade Primary server without Backup server and less than three or no Member servers” (pag[...]

30 Linux base and applications installation and upgrade task flow Step Action There are no prerequisites for this procedure. 1 Open a command line interface session to the Primary ECM Security Server through the serial port with the nortel account. 2 Switch user to the root account by typing SU and press <enter>. 3 Enter the root user passwor[...]

ECM Upgrade Procedures 31 3 Enter the root user password when prompted. 4 Execute the following script: /opt/nortel/isclient/setup_ssha.sh deconfig 5 If a Backup ECM Security server is present in the system, switch user to the root account and execute the script /opt/nortel/isclient/failOver.sh <FQDN of Primary ECM Security Server> where <[...]

32 Linux base and applications installation and upgrade task flow Step Action Prior to upgrading the Backup ECM Security server, the Primary ECM Security server must be upgraded using one of the previous Upgrade a Primary ECM Security server procedures. 1 Open a command line interface session to the Primary ECM Security Server through the serial po[...]

ECM Upgrade Procedures 33 This procedure describes upgrading an ECM Member server from Rls 5.00 to Rls 5.50. Perform this procedure for each ECM Member server in the system.Prior to upgrading the Backup ECM Security server, the Primary ECM Security server must be upgraded using one of the Upgrade a Primary ECM Security server procedures. Upgrade EC[...]

34 Linux base and applications installation and upgrade task flow Nortel Communication Server 1000 Linux Platform Base and Applications Installation and Commissioning NN43001-315 02.09 29 October 2008 Copyright © 2007–2008 Nortel Networks .[...]

35 . Install Nor tel Linux base Nortel Communication Server 1000 (CS 1000) Linux base introduces a two-stage installation procedure. The operating system is installed, and then the applications. You can upgrade the current application configuration using the existing operating system, or you can reinstall an application configuration using the exis[...]

36 Install Nortel Linux base — The domain name Note: A Fully Qualified Domain Name (FQDN) consists of a host name and a domain name, and includes a top-level domain name. Using kwei.ca.nortel.com as an example, kwei is the host name, ca.nortel.com is the domain name, and .com is the top-level domain name. The FQDN must contain at least three fiel[...]

Install the Linux base software on the IBM x306m and HP DL320 G4 servers 37 networkconfig , ntpconfig , datetimeconfig , and dnsconfig . For a list of Nortel Linux base CLI commands see Table 11 "Nortel Linux base CLI commands" (page 141) . Note: Figure 114 "HP DL320 G4 rear view" (page 125) shows the ELAN and TLAN network inter[...]

38 Install Nortel Linux base Figure 14 CS 1000 Linux base system installer 5 Type Y and press Enter as shown in Figure 15 "CS 1000 Linux base system installer" (page 38) . Figure 15 CS 1000 Linux base system installer 6 The Format all partitions screen appears, as shown in Figure 16 "Format all partitions" (page 39) . Press Ente[...]

Install the Linux base software on the IBM x306m and HP DL320 G4 servers 39 Figure 16 Format all partitions 7 At the prompt, select the type of configuration data you wish to use. Type 1 for Normal installation and press Enter , and then press Enter again when prompted, as shown in Figure 17 "Configuration data selection window" (page 39)[...]

40 Install Nortel Linux base Figure 18 System configuration window 9 When prompted, in the Network configuration screen, enter the customer information for ELAN IP address, ELAN gateway, ELAN netmask, hostname, domain name, Machine TLAN IP address, TLAN gateway, Default gateway, and TLAN netmask , as shown in Figure 19 "Network configuration w[...]

Install the Linux base software on the IBM x306m and HP DL320 G4 servers 41 DL320 G4 server. Figure 123 "IBM x306m rear view" (page 133) shows the ELAN and TLAN network interfaces for the IBM x306m server. For a definition of ELAN and TLAN see “Network configuration” (page 143) . Note 2: You can accept the default gateway values or ch[...]

42 Install Nortel Linux base Figure 21 Time zone selection window The Time zone selection for region screen appears. 12 At the prompt, in the Timezone Selection for Region screen, type the appropriate time zone number and then press Enter to continue. Nortel Communication Server 1000 Linux Platform Base and Applications Installation and Commissioni[...]

Install the Linux base software on the IBM x306m and HP DL320 G4 servers 43 Figure 22 Time zone selection for region window 13 In the Configuration Validation 1 screen, type Y for yes or N for no, and then press Enter to confirm the customer information for Machine ELAN IP address, ELAN Gateway , ELAN Netmask, Hostname, FQDN, Machine TLAN IP addres[...]

44 Install Nortel Linux base Figure 23 Configuration validation 1 window 14 In the Network Time Protocol (NTP) Configuration screen, type Y or N to choose the NTP transfer mode for the system. Type 1 , 2 , or 3 and then press Enter to indicate the clock source function of the Linux system, as shown in Figure 24 "Network time protocol configura[...]

Install the Linux base software on the IBM x306m and HP DL320 G4 servers 45 Figure 24 Network time protocol configuration window 15 In the NTP Clock Source Configuration screen type E for an external clock source, or I for an internal clock source, as shown in Figure 25 "NTP clock source configuration window" (page 45) . Press Enter to co[...]

46 Install Nortel Linux base Figure 26 NTP clock source configuration window Press Enter to continue. 17 At the prompt, configure the primary DNS server IP address as shown in Figure 27 "DNS server configuration window" (page 46) . Figure 27 DNS server configuration window Type Y to configure and N if you do not wish to configure and then[...]

Install the Linux base software on the IBM x306m and HP DL320 G4 servers 47 The Configuration Validation 2 screen appears with the correct information. Press Enter to continue. Figure 28 Configuration Validation 2 window 19 In the Date and Time Configuration screen, configure the date and time, as shown in Figure 29 "Date and Time Configuratio[...]

48 Install Nortel Linux base Figure 30 root password configuration window Note: Guidelines for the creation and use of passwords are described at “Passwords” (page 110) . 21 Enter the sysadmin password as shown in Figure 31 "sysadmin password configuration window" (page 48) . Figure 31 sysadmin password configuration window 22 Enter t[...]

Install the Linux base software on the IBM x306m and HP DL320 G4 servers 49 and creation guidelines are described at “Passwords” (page 110) . Figure 32 nortel password configuration window Press Enter to continue. The Configuration File Backup screen appears as shown in Figure 33 "Configuration File Backup window" (page 50) . 23 From [...]

50 Install Nortel Linux base Figure 33 Configuration File Backup window The naming convention for the Linux base backup archive is hostname-install-yyyy.mm.dd.hh.MM.ss.tar.gz The name for the backup archive is automatically generated and includes the key word install to indicate that the archive is generated as part of the installation or upgrade p[...]

Install the Linux base software on the IBM x306m and HP DL320 G4 servers 51 After you back up the configuration data, the Package Installation screen appears, as shown in Figure 34 "Package Installation window" (page 51) . Figure 34 Package Installation window The Post System Configuration screen appears, as shown in Figure 35 "Post [...]

52 Install Nortel Linux base Nortel Communication Server 1000 Linux Platform Base and Applications Installation and Commissioning NN43001-315 02.09 29 October 2008 Copyright © 2007–2008 Nortel Networks .[...]

53 . Upgrade Nor tel Linux base This chapter documents the process of upgrading Nortel Linux base. Prerequisites to upgrade Nor tel Linux base Before you perform the upgrade you must gather the following information: • ELAN IP address • ELAN gateway IP address • ELAN netmask • The host name associated with the TLAN • The domain name Note:[...]

54 Upgrade Nortel Linux base interfaces for the IBM x306m server. For a definition of ELAN and TLAN see “Network configuration” (page 143) . Note 2: Use the CLI command routeconfig to add routing entries. The choice of routing entries will depend upon the network topology and application deployment. For a list of Nortel Linux base CLI commands [...]

Upgrading Nortel Linux base 55 Figure 36 Backup data window 2 Confirm the values for the Local machine IP address, Local machine netmask, Gateway, SFTP server’s IP address, SFTP userid, SFTP password, and the SFTP directory as shown in the Figure 37 "Remote Configuration File Validation window" (page 56) . Type Y to confirm the values a[...]

56 Upgrade Nortel Linux base Figure 37 Remote Configuration File Validation window 3 The backup archive name generates and you are prompted to continue, as shown in Figure 38 "Backup data window 2" (page 56) . Type Y to continue. The backup operation finishes and you are prompted to insert the Linux base upgrade CD. Press Enter after you [...]

Upgrading Nortel Linux base 57 • To install using a serial console on COM1, type com1 at the boot prompt and press Enter . to continue. • To install using an attached keyboard, video monitor, and mouse, type kvm at the boot prompt and press Enter .t o continue. Note: It is not required to attach a keyboard, video monitor and mouse (KVM) to view[...]

58 Upgrade Nortel Linux base Figure 40 Installation of New Linux Base Operating System window 6 The Existing Configuration Partition Usage window appears, as shown in Figure 41 "Existing Configuration Partition Usage window" (page 59) . If this re-installation is due to a possible disk corruption, Nortel recommends that you format this pa[...]

Upgrading Nortel Linux base 59 Figure 41 Existing Configuration Partition Usage window 7 The Existing Partitions window appears as shown in Figure 42 "Existing Partitions window" (page 59) . Press Enter to continue. Figure 42 Existing Partitions window 8 The Configuration Data Selection window appears, as shown in Figure 43 "Configur[...]

60 Upgrade Nortel Linux base Figure 43 Configuration Data Selection window Type the option number corresponding to the data source that you want to use and press Enter to continue. Note: In this example the Figure 44 "Remote Configuration File Operation window" (page 61) appears because option 3 is selected in the Figure 17 "Configur[...]

Upgrading Nortel Linux base 61 Figure 44 Remote Configuration File Operation window Press Enter to continue. 10 Confirm the values for the Local machine IP address, Local machine netmask, Gateway, SFTP server’s IP address, SFTP userid, SFTP password, and the SFTP directory as shown in the Figure 45 "Remote Configuration File Validation windo[...]

62 Upgrade Nortel Linux base Figure 46 File Selection window 12 In the Configuration Validation 1 screen, type Y for yes or N for no, and then press Enter to confirm the customer information for Machine ELAN IP, ELAN Gateway, ELAN Netmask, Hostname, FQDN, Machine TLAN IP, Default TLAN Gateway, TLAN Netmask, and Timezone, as shown in Figure 47 "[...]

Upgrading Nortel Linux base 63 Figure 47 Configuration validation 1 window 13 In the Configuration Validation 2 screen, type Y if the information is correct and press Enter , as shown in n the Figure 48 "Configuration Validation 2 window" (page 64) . If the information is incorrect, type N , make the required changes, and then press Enter[...]

64 Upgrade Nortel Linux base Figure 48 Configuration Validation 2 window 14 In the Date and Time Configuration screen, configure the date and time, as shown in Figure 49 "Date and Time Configuration window" (page 64) . Figure 49 Date and Time Configuration window Type Y to keep the date and time, and then press Enter .T o change the date [...]

Upgrading Nortel Linux base 65 Figure 50 Existing Password Data window 16 The System-wide data recovery screen appears, as show in Figure 51 "System-Wide Data Recovery window" (page 65) . If you want to recover the system-wide data, select Y . If you do not want to recover the system-wide data, select N . Press Enter to continue. Figure 5[...]

66 Upgrade Nortel Linux base • yyyy—year • mm—month • dd—day • hh—hour • MM—minutes • ss—seconds Note: Nortel Linux base uses the CLI command sysbackup to backup system data to external storage. You can choose to back up the data to a USB device or to an SFTP server. For more information about SFTP data back up, see “Netwo[...]

Upgrading Nortel Linux base 67 The Post System Configuration screen appears, as shown in Figure 54 "Post system configuration window" (page 67) . The system automatically reboots as a Linux server. Figure 54 Post system configuration window 18 Insert the appropriate application CD or DVD and type the CLI command appinstall . The Installat[...]

68 Upgrade Nortel Linux base Figure 56 Application Installation window 19 In the Figure 57 "Restore Application Data window" (page 68) you are given a prompt to restore application data. Type Y or N to restore or reject the data. Press Enter to continue. Figure 57 Restore Application Data window At this point see the chapter “Installati[...]

69 . Installation and configuration of applications on Linux base This section provides information about the following tasks that you must complete to install and configure applications after you install the Linux base. • Configure the Primary Security Service (PSS) and Backup Security Service (BSS) • Configure the Network Routing Service (NR[...]

70 Installation and configuration of applications on Linux base Prerequisites to install and configure applications You must install the Communication Server 1000 (CS 1000) Linux base software on the HP DL320 G4 or the IBM x306m servers before they can install the applications. The Linux base software contains the Linux operating system, the frame[...]

Install the CS 1000 applications 71 • Primary ECM Server (install EM, Subscriber Manager, and the primary ECM security service) • Backup ECM Server (install EM, Subscriber Manager, and a backup ECM security service) ATTENTION The first Linux server must be installed with the primary security service. Install the second Linux server with the bac[...]

72 Installation and configuration of applications on Linux base 3 Enter the appinstall CLI command. 4 At the prompt, enter the root account password. The system then prompts you to check the media. 5 Enter Y to check the media, or N to proceed without checking the media, and press Enter . 6 The Application installation screen appears, as shown in F[...]

Install the CS 1000 applications 73 Figure 59 Solid server configuration window 8 The Solid server configuration confirmation screen appears. Type the option number for the Solid server to install. To determine which option to select, review the Network Routing Service Installation and Commissioning (NN43001-564) Database and Database synchronizati[...]

74 Installation and configuration of applications on Linux base Figure 60 Private CA certificate window 10 The Private CA Certificate confirmation screen appears as shown in Figure 61 "Private CA Certificate confirmation window" (page 74) . Verify that the common name information is correct. Type yes if correct or no if incorrect, and the[...]

Install the CS 1000 applications 75 Figure 62 Making a Private CA certificate window 11 The Security services administrator default password screen appears, as shown in Figure 63 "Security services administrator default password window" (page 76) . Enter a new default password for the security services administrator accounts, and then re-[...]

76 Installation and configuration of applications on Linux base Figure 63 Security services administrator default password window --End-- The installation takes approximately 30 minutes to complete. After the installation is complete the disk automatically ejects from the drive and a summary of the installation is shown on the screen. For detailed [...]

Install the CS 1000 applications 77 6 The Application installation screen appears, as shown in Figure 64 "Application Installation window" (page 77) . From the Application installation window select 2 to install the Backup Security Service with NRS. The appropriate packages are installed to the hard drive. Figure 64 Application Installati[...]

78 Installation and configuration of applications on Linux base Solid server configuration window by selecting No . Press Enter to continue. 9 The Primary Security Service server TLAN IP address screen appears as shown in Figure 66 "Primary Security Service server TLAN IP address window" (page 78) . Enter the IP address of the TLAN networ[...]

Install the CS 1000 applications 79 Figure 68 Primary Security Service fingerprint window 12 The nortel password screen appears. Type the password of the nortel account and press Enter . The connection to the Primary Security Service server is complete. The installation takes approximately 30 minutes to complete. After the installation is complete [...]

80 Installation and configuration of applications on Linux base Figure 69 Application Installation window 7 The Solid server configuration window appears, as shown in Figure 70 "Solid server configuration window" (page 80) . In the Solid server configuration screen, type the number of the Solid server to install. Figure 70 Solid server co[...]

Install the CS 1000 applications 81 TLAN network interface Primary Security Service server. Type Yes to confirm the TLAN IP address is correct. Figure 71 Primary Security Service server TLAN IP address window 10 The Primary Security Service server Fully Qualified Domain Name (FQDN) appears as shown in Figure 72 "Primary Security Service server[...]

82 Installation and configuration of applications on Linux base Figure 73 Primary Security Service fingerprint window 12 The nortel password screen appears. Type the password of the nortel account and press Enter . The connection to the Primary Security Service server is complete. The installation takes approximately 30 minutes to complete. After t[...]

Install the CS 1000 applications 83 Figure 74 Application Installation window 7 The Solid server configuration window appears, as shown in Figure 75 "Solid server configuration window" (page 83) . In the Solid server configuration screen, type the number of the Solid server to install. Figure 75 Solid server configuration window Press Ent[...]

84 Installation and configuration of applications on Linux base Figure 76 Private CA certificate window 10 The Private CA Certificate confirmation window appears as shown in Figure 77 "Private CA Certificate confirmation window" (page 84) . Verify that the common name information is correct. Type Yes if correct or No if incorrect, and pre[...]

Install the CS 1000 applications 85 Figure 78 Making a Private CA certificate window 11 The Security services administrator default password screen appears, as shown in Figure 79 "Security services administrator default password window" (page 86) . Enter a new default password for the security services administrator accounts, and then re-[...]

86 Installation and configuration of applications on Linux base Figure 79 Security services administrator default password window --End-- The installation takes approximately 30 minutes to complete. After the installation is complete the disk automatically ejects from the drive and a summary of the installation is shown on the screen. For detailed [...]

Install the CS 1000 applications 87 6 The Application Installation screen appears, as shown in Figure 74 "Application Installation window" (page 83) . From the Application installation window select 2 to install the Backup Security Service with Element Manager. The appropriate packages are installed to the hard drive. Figure 80 Applicatio[...]

88 Installation and configuration of applications on Linux base to return to the Primary Security Service server TLAN IP address screen. Press Enter to continue. Figure 82 Primary Security Service server TLAN IP address window 10 The Primary Security Service server Fully Qualified Domain Name (FQDN) screen appears as shown in Figure 83 "Primar[...]

Install the CS 1000 applications 89 Figure 84 Primary Security Service fingerprint window 12 The nortel password screen appears. Type the password of the nortel account and press Enter . The connection to the Primary Security Service server is complete and the installation finishes. The installation takes approximately 30 minutes to complete. After[...]

90 Installation and configuration of applications on Linux base Figure 85 Application Installation window 7 The Solid server configuration window appears, as shown in Figure 86 "Solid server configuration window" (page 90) . In the Solid server configuration screen, type the number of the Solid server to install. Figure 86 Solid server co[...]

Install the CS 1000 applications 91 Figure 87 Primary Security Service server TLAN IP address window 10 The Primary Security Service server Fully Qualified Domain Name (FQDN) screen appears as shown in Figure 88 "Primary Security Service server Fully Qualified Domain name window" (page 91) . Enter the Fully Qualified Domain name of the Pr[...]

92 Installation and configuration of applications on Linux base Figure 89 Primary Security Service fingerprint window 12 The nortel password screen appears. Type the password of the nortel account and press Enter . The connection to the Primary Security Service server is complete and the installation finishes. The installation takes approximately 3[...]

Install the CS 1000 applications 93 Figure 90 Application Installation window 7 The Solid server configuration window appears, as shown in Figure 91 "Solid server configuration window" (page 93) . In the Solid server configuration screen, type the number of the Solid server to install. Figure 91 Solid server configuration window Press Ent[...]

94 Installation and configuration of applications on Linux base Figure 92 Private CA certificate window 10 The Private CA Certificate confirmation window appears as shown in Figure 93 "Private CA Certificate confirmation window" (page 94) . Verify that the common name information is correct. Type Yes if correct or No if incorrect, and pre[...]

Install the CS 1000 applications 95 Figure 94 Making a Private CA certificate window 11 The Security services administrator default password screen appears, as shown in Figure 95 "Security services administrator default password window" (page 96) . Enter a new default password for the security services administrator accounts, and then re-[...]

96 Installation and configuration of applications on Linux base Figure 95 Security services administrator default password window --End-- The installation takes approximately 30 minutes to complete. After the installation is complete the disk automatically ejects from the drive and a summary of the installation is shown on the screen. For detailed [...]

Install the CS 1000 applications 97 4 At the prompt, enter the root account password. The system then prompts you to check the media. 5 Enter Y to check the media, or N to proceed without checking the media, and press Enter . 6 The Application Installation screen appears, as shown in Figure 96 "Application Installation window" (page 97) .[...]

98 Installation and configuration of applications on Linux base 9 The Primary Security Service server TLAN IP address screen appears as shown in Figure 98 "Primary Security Service server TLAN IP address window" (page 98) . Enter the IP address of the TLAN network interface Primary Security Service server. Type Yes to confirm the TLAN IP [...]

Install the CS 1000 applications 99 window" (page 99) . Type Yes to verify the Primary Security Service fingerprint. Figure 100 Primary Security Service fingerprint window 12 The nortel password screen appears. Type the password of the nortel account and press Enter . The connection to the Primary Security Service server is complete and the in[...]

100 Installation and configuration of applications on Linux base Nortel Communication Server 1000 Linux Platform Base and Applications Installation and Commissioning NN43001-315 02.09 29 October 2008 Copyright © 2007–2008 Nortel Networks .[...]

101 . CS 1000 on Linux base Linux Operating System and Distribution The selected distribution is Red Hat Enterprise Linux ES 4. This distribution is built on a 2.6 kernel, and supports many Open Source Development Lab (OSDL) Carrier Grade Linux (CGL) features. Red Hat Enterprise Linux ES 4 supports Linux kernel version 2.6 and the following for the[...]

102 CS 1000 on Linux base Network and fire wall All applications operate behind a network firewall. The firewall starts on system boot, which invokes the Linux iptables facility to load the firewall configuration. Each Linux server supports at least two Ethernet ports; one for ELAN subnet connectivity and another for TLAN subnet connectivity. By d[...]

Software reliability 103 MONIT is an open source package used for monitoring the important daemon services automatically initiated at startup. If a malfunction occurs, MONIT provides actions such as alert, start, stop, and restart. To provide these actions, applications must be registered with MONIT, and the appropriate actions for each application[...]

104 CS 1000 on Linux base Figure 101 Critical Set alarm example Figure 102 Critical Clear alarm example Hardware watchdog The IBM x306m and HP DL320 G4 servers offer a hardware watchdog. The watchdog timer is programmed during the server startup and requires continuous resets from a daemon running in Linux. The watchdog timer is based on the curren[...]

Linux Security Hardening 105 • Choose software you use to remove or clean the viruses, as well as send warning messages. • Choose software that uses a maximum of 10% of CPU for a scheduled scan and 3% for an active scan. BIOS setting and password protection To secure the server, Nortel recommends the following: • Disable boot from CD or DVD d[...]

106 CS 1000 on Linux base Note 1: To establish a connection using SSH or SFTP you need to have a valid server address, and you must connect through port 22. Note 2: If SFTP or SCP is not available, File Transfer Protocol (FTP) can be used. Invoke the CLI command ftpenable to access FTP; and invoke the CLI command ftpdisable to close FTP. The ftpena[...]

Patching 107 Figure 103 Installed applications and version numbers Note: Figure 103 "Installed applications and version numbers" (page 107) contains the base or application name in the left column and the corresponding version number in the right column. Make note of the version number for the base or application that you are patching. Yo[...]

108 CS 1000 on Linux base — Initiate an SFTP or Secure Shell (SSH) program. — Provide the Linux server’s IP address (or host name), the nortel user ID, and password as parameters. — Type the put command (for sftp ) or the scopy command (for scp ) to transfer the patch to the Linux server. Note: If you cannot access SFTP or SCP, File Transfe[...]

User accounts and access control 109 pstat Print a status summary of all loaded patches. plis Print detailed information about a specific patch. Note: The nortel user account is the designated user account for the execution of these CLI commands. Patch retention A patch is always retained until the poos CLI command explicitly puts the patch out of [...]

110 CS 1000 on Linux base Note 2: To log in directly as root you must log in through the COM1 console. • sysadmin: The user account designated for debugging and maintenance. This account is intended for Nortel support. • nortel: The user account for the basic Linux base operation, including patching and application installation. For a list of C[...]

User accounts and access control 111 Resetting Nortel Linux base passwords Nortel Linux base passwords can be reset if they are forgotten or lost. Use the following procedures to reset Nortel Linux base passwords. Resetting the Nor tel Linux base root passwor d ATTENTION Use this procedure to reset the local Nortel Linux base root password only. Yo[...]

112 CS 1000 on Linux base Figure 105 Installation of new Linux base operating system 5 Type cd/tmp/ and press Enter to change the path to the tmp directory. 6 Type mkdir mount and press Enter to create a new directory. 7 Type mount /dev/sda6 mount/ and press Enter to mount the system image. 8 Type chroot /tmp/mount and press Enter . 9 Type passwd ?[...]

User accounts and access control 113 Figure 106 Root password reset window 10 In the Figure 106 "Root password reset window" (page 113) type the new password and press Enter . You are then prompted to enter the password again. Type the password again and press Enter . If you typed the passwords correctly the message System error appears. [...]

114 CS 1000 on Linux base ATTENTION Use this procedure to reset local Nortel Linux base non-root passwords only. You must have a serial connection to the system to use this procedure. Step Action 1 Open the serial connection and logon as root. 2 Type the CLI command passwd (user) and press Enter . The Non-root password reset screen appears, as show[...]

SNMP 115 System upgrades The platform supports upgrades for the delivery of new interim releases. The installation or reinstallation provides the option to preserve the customer installation parameters for upgrade purposes. You can upgrade the complete platform including the operating system and Linux base applications. Nortel Linux base uses the C[...]

116 CS 1000 on Linux base (NN43001-116) () . For information about Network Routing Service (NRS) and SNMP on Linux base see Network Routing Service Installation and Commissioning (NN43001-564) () . Disaster recovery Hardware faults can occur that require disaster recovery. Recovery happens in two steps. First restore the Linux base (including opera[...]

Disaster recovery 117 • yyyy - year • mm - month • dd - day • hh - hour • MM - minutes • ss - seconds Nortel Linux base uses the CLI command sysbackup to backup system data to external storage. You can choose to back up the data to a USB device or to an SFTP server. For more information about SFTP data back up, see “Network configurat[...]

118 CS 1000 on Linux base Figure 109 Backup Scheduler 2 Note: The CLI command sysbackup can be used to make a system backup. For a list of Nortel Linux base CLI commands see Table 11 "Nortel Linux base CLI commands" (page 141) . You can use the command sysrestore to perform system recovery, as shown in Figure 110 "sysrestore command&[...]

Disaster recovery 119 The following figure shows the base system recovery option. Figure 111 Configuration Data Selection window When a server boot-up with bootable installation media occurs, you can choose from the following options: • Normal installation • Load recovery data from an external USB device • Load recovery data from a secure SFT[...]

120 CS 1000 on Linux base Nortel Communication Server 1000 Linux Platform Base and Applications Installation and Commissioning NN43001-315 02.09 29 October 2008 Copyright © 2007–2008 Nortel Networks .[...]

121 . Appendix P assthr ough end user license agreement ATTENTION Do not contact Red Hat for technical support on your Nortel version of the Linux base operating system. If technical support is required for the Nortel version of the Linux base operating system, contact Nortel technical support through your regular channels. This section governs the[...]

122 Passthrough end user license agreement Customer must modify any files identified as “REDHAT-LOGOS” and “anaconda-images” to remove all images containing the “Red Hat” trademark or the “Shadowman” logo. As required by U.S. law, Customer represents and warrants that it: (a) understands that the Software is subject to export contro[...]

123 . Appendix CO TS Servers The Linux base is installed on one of two commercial off-the-shelf (COTS) servers; the Hewlett Packard (HP) DL320-G4 1U server or the International Business Machines (IBM) x306m 1U server. This appendix provides a brief description of each server, HP DL320 G4 server The HP DL320 G4 server provides the following features[...]

124 COTS Servers Figure 112 HP DL320 G4 front view Figure 113 HP DL320 G4 front view: LEDs Table 5 HP DL320 G4 LED item description and status Item Description Status 1 UID button LED (Unit Identification) Blue – Identification is activated. Flashing blue – System is remotely managed. Off – Identification is deactivated. Nortel Communication [...]

HP DL320 G4 server 125 Item Description Status 2 Internal health LED Green –- System health is normal. Amber – System is degraded. To identify the component, check the system board LEDs. Red – Critical. To identify the component in a critical state, check the system board LEDs. Off – System health is normal (when in standby mode). 3 NIC 1 l[...]

126 COTS Servers HP DL320 G4 BIOS settings The Basic Input Output System (BIOS) settings on the HP DL320 G4 server shipped through Nortel are correct. The BIOS settings do not require adjustment unless they are reset due to a fault or through maintenance. If a reset of the BIOS settings occurs, check the serial port option. The HP DL320 G4 BIOS set[...]

HP DL320 G4 server 127 Figure 115 HP DL320 G4 server boot screen Note: If the server is already up and running, power the server off and on to reboot and receive the HP DL320 G4 boot screen. 2 Press F9 to invoke the ROM-based setup utility (RBSU) menu screen. The RBSU menu screen appears. Figure 116 HP DL320 G4 server RBSU menu 3 Navigate to the BI[...]

128 COTS Servers A BIOS Serial Console Port configuration screen appears. This screen presents you with four options: • 1 | Auto • 2 | Disabled • 3 | COM 1 • 4 | COM 2 5 Navigate to the COM 1 option and press Enter . This configures the COM 1 port as the serial port for communicating with the connected maintenance terminal. The BIOS Serial [...]

HP DL320 G4 server 129 Figure 117 HP DL320 G4 server boot screen Note: If the server is already up and running, power the server off and on to reboot and receive the HP DL320 G4 boot screen. 2 Press F9 to invoke the ROM-based Setup Utility (RBSU) menu screen. The RBSU menu screen appears. Figure 118 HP DL320 G4 server RBSU menu 3 Navigate to the BI[...]

130 COTS Servers A BIOS Serial Console Baud Rate configuration window appears. This window presents you with four settings for the serial port speed: • 9600 • 19200 • 57600 • 115200 5 Navigate to the 9600 setting and press Enter . This configures the serial port speed to 9600 b/ps. The BIOS Serial Console & EMS configuration menu screen[...]

IBM x306m server 131 Figure 120 HP DL320 G4 server RBSU menu 3 Select the Server Passwords option and press Enter . 4 Select the Set Admin Password option and press Enter . 5 At this point refer to the manufacturer’s manual for specific instructions on how to enable or disable the BIOS password. --End-- For additional operating information see th[...]

132 COTS Servers — You use this to load the Signaling Server software files for the Signaling Server, Voice Gateway Media Cards, and IP Phones • One serial port (back of Signaling Server) • A reset button Figure 121 IBM x306m front view Figure 122 IBM x306m front view: LEDs Nortel Communication Server 1000 Linux Platform Base and Applications[...]

IBM x306m server 133 Table 7 IBM x306m LED description and status Description Status Power LED If this LED is lit, it indicates that the server is turned on. If this LED is off, it indicates that AC power is not present, or the power supply or the LED itself failed. Hard disk LED If this LED is lit, it indicates that a hard disk drive is in use. Lo[...]

134 COTS Servers IBM x306m BIOS settings The BIOS settings on the IBM x306m server shipped through Nortel are correct. These settings can be viewed at Table 8 "IBM x306m default BIOS settings" (page 134) . Table 8 IBM x306m default BIOS settings BIOS value Default setting Devices and I/O port - serial port A Enabled Devices and I/O port -[...]

IBM x306m server 135 Figure 124 IBM x306m server Configuration/Setup Utility menu 3 Navigate to the Devices and I/O Ports option and press Enter . The Devices and I/O Ports menu screen appears. Figure 125 Devices and I/O Ports menu 4 Navigate to the Remote Console Redirection option and press Enter . The Remote Console Redirection screen appears. N[...]

136 COTS Servers Figure 126 IBM x306m server Remote Console Redirection 5 Navigate to the option you wish to change and enter the appropriate value. 6 Press Enter to change the setting. 7 Press ESC to exit the Remote Console Redirection option. The Devices and I/O Ports menu screen appears. 8 Press ESC to exit the Devices and I/O Ports option. The [...]

IBM x306m server 137 The server boots and the Press F1 for Configuration/Setup message appears on the maintenance terminal. Note: If the server is already up and running, power the server off and on or press the reset button to reboot and receive the Press F1 for Configuration/Setup message. 2 Press F1 to invoke the IBM x306m server Configuration/S[...]

138 COTS Servers Nortel Communication Server 1000 Linux Platform Base and Applications Installation and Commissioning NN43001-315 02.09 29 October 2008 Copyright © 2007–2008 Nortel Networks .[...]

139 . Appendix Nor tel Linux base CLI commands Table 11 "Nortel Linux base CLI commands" (page 141) contains a list of the command line interface (CLI) commands used in Nortel Linux base. Type (linuxbase-command) -h | --help at the command prompt to display a brief summary of the CLI command, as shown in Table 9 "Linux CLI command he[...]

140 Nortel Linux base CLI commands Table 10 Linux man command example $ man poos POOS(1) User Contributed Nortel Documentation POOS(1) NAME poos - Put a patch out of service. SYNOPSIS poos (patch_id)| -app (app_name) | --help,-h DESCRIPTION Remove a patch from service. The patch is removed from service from all processes in which it was in service.[...]

IBM x306m server 141 The patch 0 has been deactivated successfully. SEE ALSO pload, pout, pins, pstat, plis 5.50 2007-12-18 POOS(1) Table 11 Nortel Linux base CLI commands Command Description appinstall Install Nortel applications. appstart Stop, start, or restart Nortel applications. appVersionShow Print the server’s application software version[...]

142 Nortel Linux base CLI commands You might need to add the primary host entry in backup and member server before you can access them using the hostconfig command. The command syntax is nortel user ---> hostconfig add -ip <PRIMARY SERVER IP> -host <PRIMARY SERVER HOST NAME> -domain <PRIMARY SERVER DOMAIN NAME> . Nortel Communi[...]

143 . Appendix Netw ork configuration f or Secure File T ransfer Pr otocol (SFTP) data bac kup Use the guidelines in this appendix to assist in data backup to an SFTP server. The section “Network configuration” (page 143) provides details on network requirements and the section “SFTP logon” (page 143) provides SFTP logon details. The secti[...]

144 Network configuration for Secure File Transfer Protocol (SFTP) data backup numeric digits, and the special characters _ . - and $. You cannot use the character - at the beginning of the logon string and you can use $ only at the end of the logon string. Nortel Linux base does not recognize the character. Do not use the character when you sp[...]

145 . Index A Application installation 69 C Configuration Data Selection window 39 Configuration f or Network Routing Ser vice or Element Manager 99 Configuration V alidation 1 window 43, 62 Configuration V alidation 2 window 46, 63 D Date and Time Configuration 47, 64 Disaster recov er y 116 DNS Ser ver Configur ation window 46 E ECM upgrade[...]

146 Nortel Communication Server 1000 Linux Platform Base and Applications Installation and Commissioning NN43001-315 02.09 29 October 2008 Copyright © 2007–2008 Nortel Networks .[...]

[...]

Nortel Communication Server 1000 Linux Platform Base and Applications Installation and Commissioning Copyright © 2007–2008 Nortel Networks All Rights Reserved. Release: Release 5.5 Publication: NN43001-315 Document revision: 02.09 Document release date: 29 October 2008 To provide feedback or to report a problem in this document, go to www.nortel[...]