Cisco PGW 2200 Softswitch Release 9.7 Software Installation and Configuration Guide
Chapter 3. Installing Cisco PGW 2200 Softswitch Software Release 9.7 and Higher
Downloads: This chapterpdf (PDF - 248.0KB) The complete bookPDF (PDF - 4.59MB) | Feedback

Installing the Cisco PGW 2200 Softswitch Software Release 9.7 and Higher

Table Of Contents

Installing the Cisco PGW 2200 Softswitch Software Release 9.7 and Higher

Before You Start

Cautions, Notes, and Tips

Installing Cisco PGW 2200 Softswitch Software 9.7 and Higher Releases

Installing Cisco PGW 2200 Softswitch Software on a Simplex System

Installing the Cisco Security Package (CSCOh020)

Enabling Sudo

Installing the License File

Installing the License File if the PGW 2200 is NOT Running

Installing the License File if the PGW 2200 is Running

Installing on a Fault Tolerant System


Installing the Cisco PGW 2200 Softswitch Software Release 9.7 and Higher


Revised: May 18, 2011, OL-1150-30

This chapter describes how to install Release 9.7 and later releases of the Cisco PGW 2200 Softswitch software.

If you already have Cisco PGW 2200 Softswitch Release 9.7(3) installed, and you want to upgrade to the latest patch level, do not use this document. Use the following two documents:

Release Notes for the Cisco PGW 2200 Softswitch Release 9.7(3)

Patch Upgrade Procedure for Cisco PGW 2200 Softswitch Release 9.6 and Later


Note In Release 7.4 and later, the Cisco PGW 2200 Softswitch software files and processes are located in the /opt/CiscoMGC directory.


This chapter contains the following sections:

Before You Start

Installing Cisco PGW 2200 Softswitch Software 9.7 and Higher Releases


Note For information on provisioning the Cisco PGW 2200 Softswitch software, see the following publication:
Cisco PGW 2200 Softswitch Release 9 Provisioning Guide (through Release 9.7).


Before You Start

Before you start, perform the following steps:

1. Review the hardware and software requirements found in the document Release Notes for the
Cisco PGW 2200 Softswitch Release 9.7.

2. Have your company's internal support and Cisco support contact information readily available so you can get help with the installation if needed. (If you have questions or need assistance, see the "Obtaining Documentation and Submitting a Service Request" section on page x.)

3. Ensure that you have access to the console port on your Cisco PGW 2200 Softswitch host.

4. Before you begin installing the Cisco PGW 2200 Softswitch software, make sure that the Sun operating system is properly installed. Table 3-1 provides the location of the installation procedure you might require.

Table 3-1 Installation Overview and Reference Sections

Condition
Action

The Sun Solaris 10 operating system is not yet installed, you must first install it.

Start with Chapter 2, "Installing the Sun Solaris 10 Operating System."

The Sun Solaris 10 operating system is already installed and you are installing the Cisco PGW 2200 Softswitch software for the first time.

Follow the procedures found in the "Installing Cisco PGW 2200 Softswitch Software 9.7 and Higher Releases" section.

The Sun Solaris 10 operating system is already installed and you are upgrading a pre-release version of the Cisco PGW 2200 Softswitch 9.7 Software.

You must reinstall Sun Solaris 10. Start with Chapter 2, "Installing the Sun Solaris 10 Operating System."


Cautions, Notes, and Tips


Caution To prevent the system from running out of disk space during installation and to avoid removal of data files and databases to compensate, you must first verify that there is enough hard disk space to support your intended installation. To get free space, you can delete the following files:
\
   - Unnecessary log files (platform*.log)
   - User-generated trace files (*.btr)
   - Call detail record (CDR) files (.bin or .csv)
   - Old *.tar files
   - User-generated toolkit files (in the /var/cust_specific/toolkit directory)


Caution Be sure to follow the Cisco PGW 2200 Softswitch software installation sequence listed in "Installing Cisco PGW 2200 Softswitch Software 9.7 and Higher Releases" section.


Note If you modify any file in the /etc directory, you must reboot the Solaris 10 operating system for the changes to take effect.



Note Monitor system output frequently for error messages during the installation process and correct any error conditions before continuing with the installation.



Tip Allow for at least 2 hours to install the Sun Solaris 10 operating system and approximately 1 hour to install the Cisco PGW 2200 Softswitch software.


Installing Cisco PGW 2200 Softswitch Software 9.7 and Higher Releases


Note Before you begin this procedure, the Solaris 10 operating system and Solaris 10 operating environment should be already installed on your system.



Note Remove /usr/ucb from the path environment variable before the initial installation of the Cisco PGW 2200 Softswitch software. However, if /usr/ucb is needed, make sure that it is located in the path variable in the user profile after /usr/sbin.



Note In order for you to enable the SIP Improved Failover Support feature, both PGW 2200 systems must be in the same Virtual LANs (VLANs). A trunk line between the two switches must be connected and configured for the SIP Improved Failover Support feature to work. However, if SIP Improved Failover Support is not required on your system, then the trunk line is not mandatory.


Installing Cisco PGW 2200 Softswitch Software on a Simplex System

To install the Cisco PGW 2200 Softswitch software, complete the following steps:


Step 1 Log in as root.

Step 2 Load the Cisco PGW 2200 Softswitch software CD into the CD-ROM drive.

Step 3 Enter the following commands:

# cd /cdrom
# ./install.sh

The following prompt is displayed:

Use supplied admin file for unattended install? [n] [y,n,?,q] 

Step 4 Answer y to perform an unattended installation. If you answer n, you must answer prompts and press Enter for each package that is installed.

The following prompt is displayed:

Base directory for Toolkit (default /opt/Toolkit) [?,q]                         

Step 5 Press Enter to accept the default directory for the Toolkit.

Text similar to the following is displayed:

################################################################################
###########                                                                     
# The CSCOgu000 utilities package must be installed prior to other components   
          #                                                                     
# but has not been detected on your system.  This package contains all required 
system    #                                                                     
# parameters necessary for installing the rest of your software.  If you do not 
install   #                                                                     
# this package, the installation script will exit.                              
          #                                                                     
################################################################################
###########                                                                     

Would you like to install it now? [y] [y,n,?,q] y                               

Step 6 Answer y to install the CSCOgu000 utilities package on this host.

Step 7 The system begins to display various configuration settings for the Cisco PGW 2200 Softswitch software. We recommend that you accept the default values (by pressing Enter). You can, however, specify a different user ID and a group ID. If the ID you specify already exists on the system, the existing ID is reused, or you are prompted to enter another ID. The configuration settings are as follows:

Base directory for CiscoMGC (default /opt/CiscoMGC) [?,q]                       
Enter CiscoMGC user name [mgcusr]                                               
Enter CiscoMGC UID [20000]                                                      
Enter CiscoMGC group name [mgcgrp]                                              
Enter CiscoMGC GID [20000]                                                      
[mgcgrp] group added                                                            
[mgcusr] user added                                                             
Modifying /etc/init.d/inetinit                                                  
Inserting shmsys:shminfo_shmmax in /etc/system                                  
Inserting shmsys:shminfo_shmmin in /etc/system                                  
Inserting shmsys:shminfo_shmmni in /etc/system                                  
Inserting shmsys:shminfo_shmseg in /etc/system                                  
Inserting semsys:seminfo_semmsl in /etc/system                                  
Inserting semsys:seminfo_semmns in /etc/system                                  
Inserting semsys:seminfo_semmap in /etc/system                                  
Inserting semsys:seminfo_semmni in /etc/system                                  
Inserting semsys:seminfo_semmnu in /etc/system                                  
Inserting sq_max_size in /etc/system                                            
Inserting autoup in /etc/system                                                 


Caution No validation is performed on the IDs you enter. If you enter an invalid ID, the utilities package does not add any accounts.

The system returns the following message, stating that the CSCOgu000 utilities package was successfully installed:

Installation of <CSCOgu000> was successful.                                     

Step 8 If the system indicates that you need to reboot after installing the utilities package, proceed to Step 8a. Otherwise, proceed to Step 9.


Note Rebooting may take approximately 5 minutes.


a. Type the command displayed on the screen and press Enter.

# shutdown -y -g0 -i6

Note If the command shown on the screen does not work, you can enter the /usr/sbin/reboot command to reboot the system.



Note If you have installed the Solaris DiskSuite package (CSCOh023) on your system, the messages below are displayed during system boot. They are normal Solaris DiskSuite startup messages and do not indicate any problem with your system.

WARNING force load of misc /md-trans failed
WARNING force load of misc /md-raid failed
WARNING force load of misc /md-hotspares failed
WARNING force load of misc /md-sp failed


b. After the reboot finishes, restart install.sh to install the remaining packages. To restart install.sh, type the following commands at the # prompt and press Enter:

# cd /cdrom/cdrom0
# ./install.sh

The following prompt is displayed:

Use supplied admin file for unattended install? [n] [y,n,?,q]

c. Type y and press Enter.


Note This procedure can take approximately 1 hour to complete.


Text similar to the following is displayed, showing the packages that were installed:

Installation of <CSCOga000> was successful.

WARNING: /usr/lib/sparcv9/libxml2.so.2 <no longer a regular file>

Uncompressing EISUP
Uncompressing ISDNBRI
Uncompressing ISDNIP
Uncompressing ISDNL3
Uncompressing IUA
Uncompressing LI
Uncompressing LogServerd
Uncompressing M3UA
Uncompressing MGCP
Uncompressing QBE_V5
Uncompressing QBE_V6
Uncompressing SIP
Uncompressing SS7
Uncompressing SUA
Uncompressing TCAP
Uncompressing almM
Uncompressing amDmpr
Uncompressing cdrDmpr
Uncompressing cfgM
Installing chk_inv
Uncompressing diskmonitor
Uncompressing engine.no_smartalloc
Uncompressing engine.smartalloc
Uncompressing foverd
Uncompressing ioChanMgr
Uncompressing measMgr
Uncompressing mmBldCfg
Uncompressing mmSAgt
Uncompressing mmdbd
Uncompressing mml
Uncompressing pom
Uncompressing procM
Uncompressing replicator
Uncompressing sagt
Installing libACE.so
Installing libbtsUtil.so
Installing libcmg.so
Installing libconvutil.so
Installing libcxn.so
Installing libda.so
Installing libeng.so
Installing libengif.so
Installing libhelp.so
Installing libinf.so
Installing libmmdb.so
Installing libpem.so
Installing libpolbase.so
Installing libpolcomp.so
Installing libpolfiles.so
Installing libpolnuman.so
Installing libpolroute.so
Installing libpom.so
Installing libpxe.so
Installing libpxelog.so
Installing libqbe.so
Installing libqbe_v6.so
Installing librds.so
Installing librmg.so
Installing librudp.so
Installing libsa.so
Installing libstlport.so.1
Installing libtcpServer.so
Installing libxe.so
Installing libxml2.so.2
Updating parameters for CiscoMGC
Updating parameters for SW_Layout.cfg
Updating parameters for helpCommands.xsd
Updating parameters for mmlCommands.xml
Updating parameters for mmlLICommands.xml
Updating parameters for log_rotate.sh
Updating parameters for startAudit.sh
Updating parameters for diagdata
Updating parameters for .create_liusr
Updating parameters for .cshrc
Updating parameters for .delete_liusr
Updating parameters for .dump-prov
Updating parameters for .master.cks
Updating parameters for .perf_setup
Updating parameters for backup.sh
Updating parameters for config-lib
Updating parameters for config-snmp
Updating parameters for init.tcl
Updating parameters for mgcbackup
Updating parameters for mgcrestore
Updating parameters for restore.sh
Updating parameters for rmsem.sh
Updating parameters for startAudit.mml
Updating parameters for startLogServer


Installation of <CSCOga001> was successful.

Modifying /etc/syslog.conf
Updating parameters for .odbc.ini
Updating parameters for backupDb.sh
Updating parameters for restoreDb.sh
Set TOS for timesten replicator
  Untarring TimesTen image in /opt/ttdb-install


Preparing to install TimesTen in /opt on va-redskins


Executing TimesTen installation script...


NOTE: Each TimesTen installation is identified by a unique instance name.
      The instance name must be a non-null alphanumeric string, not longer
      than 255 characters.

Instance name will be 'tt60'.

Please select a product :

  [1] Oracle TimesTen In-Memory Database
  [2] Cache Connect to Oracle


Of the three components:

  [1] Client/Server and Data Manager
  [2] Data Manager Only
  [3] Client Only

Installing into /opt/TimesTen/tt60 ...
Creating /opt/TimesTen/tt60 ...
Uncompressing ...


The TimesTen Demo applications can take up to 64 Mbytes of disk space.
Depending on how your system is configured, you may not want to create the
DemoDataStore directory in the default location,/var/TimesTen/tt60/DemoDataStore

WARNING: It is advised that you do not install the DemoDataStore directory
         onto a networked drive. Please see the TimesTen install guide for
         more info.

Creating /var/TimesTen/tt60/DemoDataStore ...

NOTE: All installations that replicate to each other must use the same daemon
      port number that is set at installation time. The daemon port number can
      be verified by running 'ttVersion'.

The default port number is 16001.
The daemon will run on the default port number (16001).
Processing /opt/TimesTen/tt60/PERL/perl.tar ...
System logging appears to be configured correctly.
(TimesTen syslog messages should be recorded in the file '/var/adm/messages')
Installing server components ...
Starting the daemon ...
The tt60 daemon has started successfully.
Installing client components ...
Creating new /var/TimesTen/sys.ttconnect.ini
Extracting 3rd party tools ...
Creating /opt/TimesTen/tt60/doc ...
End of TimesTen installation.
   TimesTen installation script returned status 0   

Program complete
Restoring default schema.
Sun Microsystems Inc.	SunOS 5.10	Generic	January 2005
Copyright (c) 1996-2005, Oracle.  All rights reserved.

Installation of <CSCOga002> was successful.

Updating parameters for critagt.cnf
Updating parameters for startcia.sh
Updating inittab

Installation of <CSCOga003> was successful.

Installing /opt/Toolkit/Packages/Packages.tar.gz
Installing /opt/Toolkit/bytecode/XECfg/XECfg.tar.gz
Installing /opt/Toolkit/bytecode/am/am.tar.gz
Installing /opt/Toolkit/bytecode/cdr/cdr.tar.gz
Installing /opt/Toolkit/bytecode/log/Viewer.tar.gz
Installing /opt/Toolkit/bytecode/toolbar/toolbar.tar.gz
Installing /opt/Toolkit/bytecode/tv/tv.tar.gz
Installing /opt/Toolkit/tcl/tcl.tar.gz
Updating parameters for MGC_Setup
Updating parameters for MGC_Toolkit
Updating parameters for init.tcl
Updating parameters for toolbar.sh
Updating parameters for toslaveside
Setting VERSION=9.7(1.13)T in version.dat

Installation of <CSCOga004> was successful.

Installing /opt/CiscoMGC/lib/perl5/5.00503.tar.gz
Installing /opt/tibrv/tibco.tar.gz
Updating parameters for tibco.cfg
Updating parameters for tib4pgw.sh
Updating parameters for tibAdapter.pl
Updating parameters for tibsimulator.pl

Installation of <CSCOga006> was successful.

Installing ca
Uncompressing callver
Installing get_trc.sh
Installing sim
Uncompressing simWriter
Uncompressing siptool
Installing sp

Installation of <CSCOgt001> was successful.

Installing migrate_cpp_4_5
Installing migrate_cpp_5_6
Installing migrate_cpp_DB
Updating parameters for XECfgParm.dat
Updating parameters for trigger.dat
Updating parameters for di
Updating parameters for migrate
Updating parameters for migrateTKGFile
Installing /opt/CiscoMGC/etc/CONFIG_LIB/migrate_mod.tar.gz
Installing /opt/CiscoMGC/etc/migrate/migrate_scr.tar.gz
Installing new .dat files in /opt/CiscoMGC/etc

Installation of <CSCOgc001> was successful.

The following prompt is displayed:

Would you like to add a protocol set to your system? [y] 
[y,n,?,q] y

Step 9 Select y to add a protocol set.


Note The protocols that you select are specific to your system requirements. These should be decided prior to installation.


The following prompt is displayed:

Please insert a two digit package identifier and type <enter>
If you choose to add all protocols to your system, type "all": <package identifier>

Step 10 You can do either of the following:

a. Type all and press Enter to add all of the protocols to your system. If you do, more disk space is used and the installation process takes more time.

b. Select the specific protocol(s) you need from the following tables (instead of selecting all) and enter the protocol identifier(s).

Miscellaneous Protocols
####################################
##        01       ##     02      ##
####################################
##  BTNUP_BTNR167  ##  IETF_SIP   ##
##  BTNUP_IUP      ##             ##
##  DPNSS_BTNR188  ##             ##
####################################

SS7 Protocl Family            PRI Protocol Family
#########################     ######################
##          10         ##     ##        20        ##
#########################     ######################
##  ANSISS7_2K         ##     ##  ATT_41459       ##
##  ANSISS7_92         ##     ##  ATT_41459_C2    ##
##  ANSISS7_C2         ##     ##  BELL_1268       ##
##  ANSISS7_C3         ##     ##  BELL_1268_C2    ##
##  ANSISS7_E1         ##     ##  ETS_300_102     ##
##  ANSISS7_STANDARD   ##     ##  ETS_300_102_C2  ##
##  GR317              ##     ##  ETS_300_172     ##
#########################     ######################

Q761 Version 1 Protocol Family
#########################################################################################
##          30         ##        31         ##          32       ##       33           ##
#######################################################################h#################
##  ETS_300_121        ##  Q761_BASE        ##  Q761_GERMAN      ##  Q761_SINGAPORE    ##
##  ETS_300_356        ##  Q761_BELG        ##  Q761_INDIA       ##  Q761_SINGAPORE_C2 ##
##  HONGKONG           ##  Q761_BELG_97VER  ##  Q761_KOREAN      ##  Q761_TAIWAN       ##
##  ISUPV1_POLI        ##  Q761_CHILE       ##  Q761_NEWZEALAND  ##  Q761_THAILAND     ##
##  Q761_ARGENTINA     ##  Q761_CHINA       ##  Q761_97VER_BASE  ##  Q761_MALAYSIAN    ##
##  Q761_ARGENTINA_C2  ##  Q761_CHINA_C2    ##  Q761_PERU        ##  Q761_99VER_BASE   ##
##  Q761_AUSTRL        ##  Q761_DANISH      ##  Q761_PORTUGAL    ##Q761_99VER_AUSTRL_C3##
##  Q761_AUSTRL_C2     ##                   ##                   ##                    ##
#########################################################################################




Q761 Version 2 Protocol Family                              Q761 Version 3 Protocol Family
####################################################################  ####################
##         40         ##          41         ##          42       ##  ##       50       ##
####################################################################  ####################
##  ISUPV2_32DIG      ##  ISUPV2_JAPAN       ##  ISUPV2_VIETNAM   ##  ##  ISUPV3        ##
##  ISUPV2_AUSTRIAN   ##  ISUPV2_JAPAN_C2    ## ISUPV2_AUSTRIAN_C2##  ##  ISUPV3_UK     ##
##  ISUPV2_CZECH      ##  ISUPV2_NORWEGIAN   ##                   ##  ##  ISUPV3_UK_C2  ##
##  ISUPV2_DUTCH      ##  ISUPV2_POLISH      ##                   ##  ##  ISUPV3_UK_C3  ##
##  ISUPV2_FINNISH96  ##  ISUPV2_SPANISH     ##                   ##  ##  ISUPV3_UK_C4  ##
##  ISUPV2_FRENCH     ##  ISUPV2_SPANISH_C2  ##                   ##  ##                ##
##  ISUPV2_GERMAN     ##  ISUPV2_SWISS       ##                   ##  ##                ##
##  ISUPV2_ISRAEL     ##  ISUPV2_SWISS_C2    ##                   ##  ##                ##
####################################################################  ####################

Q721 Protocol Family        Q767 Protocol Family
#######################     ##########################################
##         60        ##     ##        70        ##        71        ##
#######################     ##########################################
##  Q721_BASE        ##     ##  Q767_AUSTRALIA  ##  Q767_MEXICAN    ##
##  Q721_BRAZILIAN   ##     ##  Q767_BASE       ##  Q767_NIGERIAN   ##
##  Q721_CHINA       ##     ##  Q767_BRAZIL     ##  Q767_RUSS       ##
##  Q721_FRENCH      ##     ##  Q767_COLOMBIA   ##  Q767_SINGAPORE  ##
##  Q721_PHILLIPINE  ##     ##  Q767_GUATEMALA  ##  Q767_SPAN       ##
##                   ##     ##  Q767_INDONESIA  ##  Q767_SWED       ##
##                   ##     ##  Q767_ITAL       ##  Q767_TURKISH    ##
##                   ##     ##  Q767_ITAL_C2    ##                  ##
#######################     ##########################################

Q931 Protocol Family
######################
##       80         ##
######################
##  Q931            ##
##  Q931_AUSTRALIA  ##
##  Q931_SINGAPORE  ##
######################

The following prompt is displayed:

Would you like to add another protocol set to your system? [y] [y,n,?,q] 

Step 11 Select one of the following options:

a. If you select y, you are prompted by the system to enter another protocol identifier (see Step 10).

b. If you select n, the system begins installing the protocols you specify, resulting in text similar to the following for each protocol group:

Uncompressing ISUPV2_AUSTRIAN.mdo
Uncompressing ISUPV2_AUSTRIAN.so
Uncompressing ISUPV2_CZECH.mdo
Uncompressing ISUPV2_CZECH.so
Uncompressing ISUPV2_DUTCH.mdo
Uncompressing ISUPV2_DUTCH.so
Uncompressing ISUPV2_FINNISH96.mdo
Uncompressing ISUPV2_FINNISH96.so
Uncompressing ISUPV2_FRENCH.mdo
Uncompressing ISUPV2_FRENCH.so
Uncompressing ISUPV2_GERMAN.mdo
Uncompressing ISUPV2_GERMAN.so
Uncompressing ISUPV2_ISRAEL.mdo
Uncompressing ISUPV2_ISRAEL.so

Installation of <CSCO40000> was successful.

Once the all of your selected protocol groups have been installed, the system displays text similar to the following:

Beginning Check of System Performance Requirements

Number of CPUs in system  4
Memory size: 4096 Megabytes
The sparcv9 processor operates at 440 MHz,

Swap is total: 59984k bytes allocated + 12320k reserved = 72304k used, 5452240k available
Please Verify that you have over 4000000K Available swap

The tt60 daemon has stopped successfully.
Installation completed Wed Feb 15 11:02:57 EST 2006
Installation log can be found in /var/adm/MGC_install.log

Step 12 Type eject and press Enter to open the CD-ROM drive door. Remove the Cisco PGW 2200 Softswitch software CD from the tray.

Step 13 (Optional) Perform the procedure in the "Installing the Cisco Security Package (CSCOh020)" section to install the Cisco Security Package.

This completes installation of the Cisco PGW 2200 Softswitch software on a simplex host system. If you have a fault-tolerant system, proceed to the "Installing on a Fault Tolerant System" section.

Otherwise, proceed to the next step.

Step 14 You can now begin configuring your Cisco PGW 2200 Softswitch software in the "Using the Cisco MGC Environment Configuration Tool" section on page 4-9.



Note During installation of the Cisco PGW 2200 Softswitch software, the system is automatically installed, using a standard performance profile satisfactory for both nailed and switched solutions.


See the Cisco PGW 2200 Softswitch Release 9 Provisioning Guide (through Release 9.7) for information on provisioning the Cisco PGW 2200 Softswitch software on a simplex system.

If you have questions or need assistance, see the "Obtaining Documentation and Submitting a Service Request" section on page x.

Installing the Cisco Security Package (CSCOh020)

Perform the following procedure to install the Cisco Security package (CSCOh020):


Step 1 If you are using the CD-ROM, load the Cisco Solaris 10 Operating Environment CD into the CD-ROM drive. Enter the following command:

# pkgadd -d /cdrom/cdrom0/CSCOh020.pkg

Text similar to the following is displayed:

The following packages are available:
  1  CSCOh020     Media Gateway Controller Security package compatible with Solaris 10
                  (sparc, i386) 3.0(6)

Select package(s) you wish to process (or 'all' to process
all packages). (default: all) [?,??,q]: 


Note You can also download the Cisco Security package (CSCOh020) from Cisco.com. For example, download the CSCOh020 package to the /opt/SW folder on the platform and use the command, pkgadd -d /opt/SW/CSCOh020.pkg. Make sure you downloads the platform-specific package for your platform (Sparc-based or Opteron-based).


Step 2 Press Enter to select the default value. Text similar to the following is displayed:

Processing package instance <CSCOh020> from </var/tmp/CSCOh020.pkg>

Media Gateway Controller Security package compatible with Solaris 10(sparc, i386) 3.0(6)

This appears to be an attempt to install the same architecture and
version of a package which is already installed.  This installation
will attempt to overwrite this package.

Cisco Systems, Inc.
## Executing checkinstall script.
CSCOh020 checkinstall log file at /var/tmp/CSCOh020.checkinstall.log
Platform is i86pc
This machine is running Solaris 5.10
Using </opt/sun_install> as the package base directory.
## Processing package information.
## Processing system information.
   4 package pathnames are already properly installed.
## Verifying disk space requirements.
## Checking for conflicts with packages already installed.
## Checking for setuid/setgid programs.

This package contains scripts which will be executed with super-user
permission during the process of installing this package.

Do you want to continue with the installation of <CSCOh020> [y,n,?] 

Step 3 Type y and press Enter to continue. Text similar to the following is displayed:

Installing Media Gateway Controller Security package compatible with Solaris 10 as 
<CSCOh020>

## Executing preinstall script.
Cisco MGC software or an adjunct was found.
## Installing part 1 of 1.
[ verifying class <none> ]
## Executing postinstall script.
You must now run the install security script

Log in as root

cd /opt/sun_install

and run the command:

./CiscoSec.sh install /tmp/security.log

The machine will have to be rebooted
after the script is run

Installation of <CSCOh020> was successful.

Step 4 Change directory to /opt/sun_install and run the install script by entering the following commands:

# cd /opt/sun_install
# ./CiscoSec.sh install /tmp/security.log

Text similar to the following is displayed:

Output will be logged in  install

You are running as root - Good...

Operating System: SunOS 5.10

For security reasons, root access from outside the console
is disabled by default.
Do you want to allow remote root logins? (y/n) [N] 

Step 5 If you want to allow remote users to log in as root, perform the following steps. If you do not want to allow remote users to log in as root, type n and press Enter, then proceed to Step 6.

a. Type y and press Enter.

Text similar to the following is displayed:

Allowing remote (ie. non-console) root logins
may pose a serious security risk.
Are you sure you want to allow remote root logins? (y/n) [N] 

b. Type y and press Enter to continue.

Text similar to the following is displayed:

For security reasons, ftp access is disabled by default.
Do you want to allow ftp access? (y/n) [N] 

Step 6 If you want to allow ftp access, perform the following steps. If you do not want to allow ftp access, type n and press Enter, then proceed to Step 7.

a. Type y and press Enter.

Text similar to the following is displayed:

Allowing ftp access may pose a serious security risk.
Are you sure you want to allow ftp access? (y/n) [N] 

b. Type y and press Enter to continue.

Text similar to the following is displayed:

For security reasons, telnet access is disabled by default.
Do you want to allow telnet access? (y/n) [N] 

Step 7 If you want to allow telnet access, perform the following steps. If you do not want to allow telnet access, type n and press Enter, then proceed to Step 8.

a. Type y and press Enter.

Text similar to the following is displayed:

Allowing telnet access may pose a serious security risk.
Are you sure you want to allow telnet access? (y/n) [N] 

b. Type y and press Enter to continue.

Text similar to the following is displayed:

For security reasons, the sudo command is disabled by default.
Do you want to enable sudo? (y/n) [N] 

Step 8 If you want to enable Sudo, perform the following steps. If you do not want to enable Sudo, type n and press Enter, then proceed to Step 9.

a. Type y and press Enter.

Text similar to the following is displayed:

Enabling sudo may pose a serious security risk.
Are you sure you want to enable sudo? (y/n) [N] 

b. Type y and press Enter to continue.

Text similar to the following is displayed:

The user will still need to edit the sudoers file
to allow specific users to run the command

Note To complete enabling Sudo, you must also complete the "Enabling Sudo" section after installing the Cisco Security Package.


**************************************************
**************************************************
**                                              **
** NOTE!! The machine must be REBOOTED in order **
**        for these changes to take effect      **
**                                              **
**************************************************
**************************************************
Do you want to reboot the machine now? (y/n) [N] 

Step 9 Type y and press Enter to reboot the system and reset your security settings.

Step 10 Once the system has completed the reboot, type eject and press Enter to open the CD-ROM drive door. Remove the Cisco PGW 2200 Softswitch software CD from the tray.

This completes installation of the Cisco Security package on a simplex host system. If you have a fault-tolerant system, proceed to the "Installing on a Fault Tolerant System" section.

Otherwise, proceed to the next step.


Note If the installation of this package returns an error code of 1 for any of the associated files, you can ignore the error. Those files have encountered an error, but the installation is correct.


Step 11 You can now begin configuring your Cisco PGW 2200 Softswitch software in the "Using the Cisco MGC Environment Configuration Tool" section on page 4-9.


Enabling Sudo

The Sudo application allows you to run programs with the security privileges of another user such as the superuser. Follow these steps to enable Sudo on the PGW:


Step 1 Enter ln -s /opt/sfw/bin/sudo /usr/bin/sudo and press Enter.

Step 2 Enter ln -s /opt/sfw/etc/sudoers /etc/sudoers and press Enter.

Step 3 Change to the /opt/sfw/etc directory using the following command:

# cd /opt/sfw/etc

Step 4 Use vi to open the sudoers file.

# vi sudoers

Step 5 Uncomment the line under the section title, Same thing without a password, and add the group name that you want to allow the people in that group to run all commands.

In this example, you allow the people in the mgcusr group to run all commands. The file should have a section similar to the following one:

# Same thing without a password
mgcusr     ALL=(ALL)     NOPASSWD:ALL

Note You must also have enabled sudo in step 8 of the Installing the Cisco Security Package (CSCOh020) section.


If you need to make further changes to the sudo policy, edit the policy in /etc/sudoers.


Installing the License File

To manage licenses, PGW 2200 provides license files that are stored in a directory where PGW 2200 obtains the required license information. PGW 2200 uses the license file to enforce the capacity and features available. For more information about License features on the PGW 2200, refer to Licensing Features for the PGW 2200 at:

http://www.cisco.com/en/US/docs/voice_ip_comm/pgw/9/feature/module/9.7_3_/FlexLM.html


Note You must install the license file on both the active and the standby PGW 2200 for it to function properly.


Installing the License File if the PGW 2200 is NOT Running

If the PGW 2200 is not in a running state, perform the following steps.


Step 1 Save the license file (.lic) to a temporary directory on your hard disk.

Step 2 Copy the license file to the /opt/CiscoMGC/license directory of the PGW. Licenses are cumulative, so there can be multiple license files of the same type.

Step 3 Log in as root.

Step 4 Enter the following command to start the PGW:

/etc/init.d/CiscoMGC start

The license file loads automatically.


Installing the License File if the PGW 2200 is Running

If the PGW 2200 is in a running state, perform the following steps.


Step 1 Save the license file (.lic) to a temporary directory on your hard disk.

Step 2 Copy the license file(s) to the /opt/CiscoMGC/license directory of the PGW. Licenses are cumulative, so there can be multiple license files of the same type.

Step 3 Log in as mgcusr.


Tip For more information about managing MML users, see Using the Cisco MGC Environment Configuration Tool, page 4-9.


Step 4 Go to the /opt/CiscoMGC/bin directory of the PGW.

Step 5 Run the reload_lics.sh script.

The following is a sample out put from the script:

Copyright © 1998-2002, Cisco Systems, Inc.
MGC-01 - Media Gateway Controller 2006-05-18 08:07:37.051 EDT M COMPLD
''LMAgent:
------------------------------------------------------------------
PGW License 9.7 permanent
------------------------------------------------------------------
Interface Name Entitled Provisioned
SS7Interface       Y           Y
PRIInterface       Y           N
PBXInterface      Y           N
INAPInterface     Y           N
LIInterface          Y           N/A
------------------------------------------------------------------
Configure TDM Ports Entitled  Provisioned Available
Call Control                 1500      1384            116
------------------------------------------------------------------ 
Run Time License      Entitled
SIP                               1500
H323                             1500
------------------------------------------------------------------''


Installing on a Fault Tolerant System


Caution To ensure the successful installation of a fault tolerant configuration, you must provision the software for the active Cisco PGW 2200 Softswitch host after Step 10 of the "Installing the Cisco Security Package (CSCOh020)" section, before proceeding to Step 1, below. Refer to the Cisco PGW 2200 Softswitch Release 9 Provisioning Guide (through Release 9.7) for information about the following:

- Provisioning the active Cisco PGW 2200 Softswitch host
- Procedures for converting the active Cisco PGW 2200 Softswitch host to standby host

Only one active provisioning session is permitted, and provisioning is permitted only on the active Cisco PGW 2200 Softswitch host.

Exit the provisioning session on the active host and continue to Step 1, below. If the software is not provisioned after it is installed on the active Cisco PGW 2200 Softswitch host, the standby host is not synchronized with the active host. As a result, a forced switchover might cause the switchover to fail.

To install the Cisco PGW 2200 Softswitch software on a fault-tolerant system (one with two Cisco PGW 2200 Softswitch hosts and Cisco SS7 interfaces), complete the following steps.


Note The MGC_install.log and the MGC_pkgerrors.log are stored in the /var/adm directory.



Step 1 Continuing from Step 10 of the "Installing the Cisco Security Package (CSCOh020)" section, exit server 1.

Step 2 Log on to server 2 as root and go to the # prompt.

Step 3 Load the Cisco PGW 2200 Softswitch software CD into the server 2 CD-ROM drive.

Step 4 Follow the instructions in Step 3 through Step 12 of the "Installing Cisco PGW 2200 Softswitch Software on a Simplex System" section.

Step 5 Follow the instructions in Step 1 through Step 10 of the "Installing the Cisco Security Package (CSCOh020)" section.

Step 6 Install the license using the instructions in the "Installing the License File" section.

Step 7 Configure the execution environment parameters and database replication for fault tolerant systems described in XECfgParm.dat File Parameters.


This completes the installation of the Cisco PGW 2200 Softswitch software. Continue to the "Using the Cisco MGC Environment Configuration Tool" section on page 4-9 to configure groups and users. If you have questions or need assistance, see the "Obtaining Documentation and Submitting a Service Request" section on page x.


Note Always check Release Notes for the Cisco PGW 2200 Softswitch Release 9.7(3) to ensure that you have the latest required patch version released by Cisco on your system, CD, or file system (if downloaded previously from cisco.com).