Table Of Contents
Installing the Gateway Server System
Using a Remote Database for Gateway Server Installation
Verifying the Gateway Processes
Installing the Cisco ANA Manage
Fixing Missing VLAN Information for Catalyst Devices
Verifying the Gateway Installation
Web Server and Webstart Configuration
Installing a Gateway
This chapter provides details about installing a single gateway for the first time.
Note
•
•
•
This chapter includes the following sections:
•
•
Before You Begin
Note
To locate the list of files, run the following commands:
cd /tmpls -l | grep sheerThen, to delete each file in the list, run this command:
rm <file_name>Before starting the installation, please verify the following:
•
•
•
Gateway Installation Overview
The gateway installation workflow that follows describes the steps required in the order in which they should be performed.
Figure 5-1 Gateway Installation Workflow
Step 1
Step 2
Step 3
Step 4
Note
Installing the Gateway Server System
During this procedure you will install tools that are required for the gateway functionality. These tools include the Apache Web Server and Third Party Tools, Java™ v1.4.2_13-b06 and Active Perl v5.8.3.
Note
To install the gateway server system:
Step 1
Step 2
Step 3
Step 4
Step 5
cd /cdrom/cdrom0/ServerStep 6
perl install.pl -encaped
Note
If you wish to change the installation directory, add the -dir [desired directory] switch at the end of the perl install.pl -encaped command.
For example: perl install.pl -encaped -dir /opt/sheerThe installation of the gateway starts. The installation procedure is automatic and requires no user input.
Note
Step 7
usermod -G <oracle_group> sheerTo get the Oracle Group, run the following command:
id <oracle-user>For example:
root@sh-nv210-223 [~]# id oracleuid=104(oracle) gid=101(dba)root@sh-nv210-223 [~]# usermod -G dba sheer
Note
Step 8
Step 9
passwdStep 10
sheer-conf.pl
Note
•
•
•
Step 11
Figure 5-2 Select Set Machine as Gateway
Step 12
Figure 5-3 Select PRODUCT.jar Scheme
Step 13
a.
- Checking package main installation status [OK]- Setup is updating the configuration directories, this might take a while- Setting up time server, Enter root password:- Done setting up the time server.b.
You will be prompted to:
–
–
+ ANA is being installed with 4 built-in user which can be usedfor logging into the system from ANA's client/interfaces.Setup will now request the user to enter the required passwords:- Enter the system root password:- Enter the system root password again for verification:- Enter the system bosenable password:- Enter the system bosenable password again for verification:- Enter the system bosconfig password:- Enter the system bosconfig password again for verification:- Enter the system bosusermngr password:- Enter the system bosusermngr password again for verification:+ ANA is being installed with a web based monitoring tool.Setup will now request the user to enter a username/passwordwhich will be used for accessing the web based monitoring tool:- Enter the web monitoring tool username: root- Enter the web monitoring tool password:- Enter the web monitoring tool password again for verification:c.
- Use defaults for WorkFlow Scheme ? (Y,N) [default Y]+ Setup will now try to connect to this machine's database,If you enter Y, then all the Cisco ANA database definitions will be applied to the DWE scheme.
If you enter N, you will be asked a series of questions similar to the ones asked when configuring Cisco ANA's database. An example of this is displayed here:
Provide the following database parameters:- Would you like to use a remote database? (y or n) [default n]
Note
- Enter the Oracle home directory (for e.g. /export/home/oracle/Ora920/) /export/home/oracle/Ora920- Enter root password in order to add user sheer to oracle group:- Enter the Oracle sid: MCDB- Enter the Oracle admin username: system- Enter the Oracle admin password:- Enter the password for the scheme sheer:- Enter the location of the data files: /export/home/oracle/Ora920/oradata- Enter the Oracle Listener port: 1521------------------------------------------------- Oracle home directory: /export/home/oracle/Ora920- DB address: 127.0.0.1- Oracle SID: MCDB- Oracle User: sheer- Oracle Port: 1521- Oracle Password: **********- DataFiles location: /export/home/oracle/Ora920/oradata- DB address: 127.0.0.1- Is this information correct? (y or n) [default y]
Note
WARNING: Cisco ANA requires Oracle version 9.2.0.8 while the given Oracle version is 9.2.0.5.0. Using the current version is not recommended as it may cause functionality/performance issues and will void the support for this product.Would you like to continue the installation using the current Oracle version anyway? (Y,N)[default N]d.
e.
–
–
–
–
–
–
–
f.
g.
An example of this is displayed here:
+ Setup will now try to connect to this machine's database,Provide the following database parameters:- Enter the Oracle home directory (for e.g. /export/home/oracle/Ora920/) /export/home/oracle/Ora920- Enter the Oracle sid: MCDB- Enter the Oracle admin username: system- Enter the Oracle admin password:- Enter the password for the scheme sheer:- Enter the location of the data files: /export/home/oracle/Ora920/oradata- Enter the Oracle Listener port: 1521------------------------------------------------- Oracle home directory: /export/home/oracle/Ora920- DB address: 127.0.0.1- Oracle SID: MCDB- Oracle User: sheer- Oracle Port: 1521- Oracle Password: **********- DataFiles location: /export/home/oracle/Ora920/oradata- Is this information correct? (y or n) [default y]- User sheer exist, updating password- Password changed successfully, scheme exist.- scheme sheer exist, loading plugins- updating avm11.xml- Enter root password in order to add user sheer to oracle group:If the Sheer scheme does not exist, the database configuration utility will prompt you for:
–
–
–
Figure 5-4 Password for Scheme Sheer
For information on configuring the gateway for high availability, refer to the Cisco Active Network Abstraction High Availability User Guide.
Using a Remote Database for Gateway Server Installation
If you want the gateway to use a remote database for server installation, some of the parameters you must enter differ to those that are required when using the gateway server.
The following provides an example of the database parameters required for remote database installation:
Provide the following database parameters:Would you like to use a remote database? (y or n) [default n] yPlease enter Oracle IP address [default 10.52.22.20] 10.56.56.94- Enter the SQLPlus home directory (for e.g. /export/home/oracle/Ora920/)/export/home/oracle/oracle/product/10.2.0/client_2- Enter root password in order to add user sheer to oracle group:- Enter the Oracle sid: MCDB- Enter the Oracle admin username: system- Enter the Oracle admin password:- Enter the password for the scheme sheer:- Enter the location of the data files: /export/home/oracle/Ora920/oradata- Enter the Oracle Listener port: 1521- Enter root password in order to create tnsnames file:Password:- Enter again root password in order to change owner of tnsnames file:Password:creating tnsnames.ora file for remote DB connectivity------------------------------------------------- Oracle home directory: /export/home/oracle/oracle/product/10.2.0/client_2- DB address: 10.56.56.94- Oracle SID: MCDB- Oracle User: sheer- Oracle Port: 1521- Oracle Password: **********- DB address: 10.56.56.94- Is this information correct? (y or n) [default y]- User sheer exist, updating password- Password changed successfully, scheme exist.- User dwe exist, updating password- Password changed successfully, scheme exist.
Note
WARNING: Cisco ANA requires Oracle version 9.2.0.8 while the given Oracle version is 10.2.0.1.0. Using the current version is not recommended as it may cause functionality/performance issues and will void the support for this product. Would you like to continue the installation using the current Oracle version anyway? (Y,N) [default N] Y
Important: If you are using a remote database with Oracle 10g, the installation process may corrupt the tnsnames.ora file. Prior to answering "Y", please check the tnsnames.ora file to verify that the hostname.sid is not missing the "sid". If you find this error, please fix it in the tnsnames.ora file, and then press Y to continue the installation.- scheme sheer exist, loading plugins- creating dwe tables...- updating avm11.xml- updating avm66.xml- Done setting the machine as gatewayLaunching the Gateway
After installing the server system and the gateway software you are ready to launch the gateway.
To launch the gateway:
Step 1
Step 2
mvm.cshThe gateway process is now loading.
Note
Note
Verifying the Gateway Processes
This section enables you to verify that the gateway processes are up and running. The gateway server processes are:
•
•
•
•
•
To verify the gateway process:
Step 1
statusThe following figure shows an example of the output which lists all the processes:
Figure 5-5 List of all the Processes
Note
Installing the Cisco ANA Manage
Cisco ANA Manage is the GUI tool used for performing various system administration activities. It provides an interface to perform the following:
•
•
•
•
•
For more information about installing the Cisco ANA Manage tool, see Using the Client Installation Wizard, page 8-1.
Note
Post-Installation
The installation script automatically creates the "sheer" user and an associated environment. The .cshrc file is the user initialization file where the required environment variables and aliases are defined.
An example of the common .cshrc file of user "sheer" follows:
# --- tcsh settingsset prompt="%B%n@%m%b [%~]# "set autolistset autoexpandset autocorrectset history=5000set savehist=5000set notifyset complete="enhance"set savehistset correct=cmdset autologout=0set colorset colorcat# --- env settingssetenv SHEERHOME ~sheersetenv PAGER lesssetenv JAVA_HOME $SHEERHOME/javasetenv PERL_HOME $SHEERHOME/perlsetenv PERL_VER "5.8.6"setenv MANPATH /usr/local/mrtg-2/man:/usr/local/net-snmp/man/usr/local/man:/usr/local/ActivePerlocal/samb a/man:/usr/local/ActivePerl-5.6/man:/usr/local/ssl/mansetenv EDITOR visetenv LD_LIBRARY_PATH $SHEERHOME/local/lib/gen:$SHEERHOME/Third_Party/libsetenv SHEERPATH .:$SHEERHOME/perl/bin:$SHEERHOME/local/lib/gen:$SHEERHOME/local/bin:$SHEERHOMEain/scripts: $SHEERHOME/python/bin:$SHEERHOME/Main/setupsetenv PATH ${SHEERPATH}:/usr/bin:/usr/sbin:/usr/etc:/usr/ucb:/usr/local/bin/:/usr/local/net-snsetenv PERLLIB "./:${SHEERHOME}/local/lib/perl/gen:${SHEERHOME}/local/lib/perl/sheer:${SHEERHOMperl/lib/$ {PERL_VER}:${SHEERHOME}/perl/lib/site_perl/${PERL_VER}/sun4-solaris-thread-multi:${SHite_p erl:${SHEERHOME}/Main"setenv SHEER_LOGIN_INFO 1setenv SHEER_COMMUNICATION_METHOD ssync# --- other settingslimit descriptors 1024# --- sourcingif ( -f $SHEERHOME/.aliases ) thensource $SHEERHOME/.aliasesendifif ( -f $SHEERHOME/db/.db ) thensource $SHEERHOME/db/.dbendifif ( -f $SHEERHOME/Main/.sheer ) thensource $SHEERHOME/Main/.sheerendifFor details on checking the gateway installation, see Verifying the Gateway Installation.
Fixing Missing VLAN Information for Catalyst Devices
After installing the gateway, trunk VLAN information may be missing on Catalyst devices that use the default catalyst product scheme. To overcome this problem, you must run a command that will update the contents of the site.xml in the relevant location.
From the server on which the gateway is installed, do the following:
Step 1
Step 2
Step 3
./runRegTool.sh -gs 127.0.0.1 set 0.0.0.0 "site/cisco-catalyst-scheme/com.sheer.metrocentral.coretech.common.investigator.GenericFor wardingInvestigator/trunk-encapsulations-catalyst/default" "cisco-catalyst-repository/trunk-encapsulations-catalyst-snmp"Step 4
The key trunk-encapsulations-catalyst has default entry of "cisco-catalyst-repository/trunk-encapsulations-catalyst-snmp", under the scheme cisco-catalyst-scheme.
The site.xml contains the following:
<key name="cisco-catalyst-scheme"> <key name="com.sheer.metrocentral.coretech.common.investigator.GenericForwardingInvestigator"> <key name="trunk-encapsulations-catalyst"> <entry name="default">cisco-catalyst-repository/trunk-encapsulations-catalyst-snmp</entry> </key> </key> </key>
Environment Variables
The installation script automatically defines the following environment variables:
SHEER_HOME
/export/home/sheer4
JAVA_HOME
/export/home/sheer4/java
SHEER_COMMUNICATION_METHOD
ssync
Note
Aliases
The installation script automatically defines the following aliases:
Users
The installation script automatically creates a Unix user called "sheer" with a default password "sheer". This user can launch Cisco ANA and perform all required functionality.
Verifying the Gateway Installation
This section describes how to check the installation of the gateway server:
•
•
•
•
•
•
•
SQL Plus Configuration
This step checks that the server is available and properly configured. In addition, it verifies that the database is up and running and has been configured properly.
Step 1
sqlplus USER/PASSWORDThe username is sheer, and the password was setup during installation.
Step 2
Successful Result
The following prompt appears:
SQL*Plus: Release 9.2.0.8.0 - Production on Sun Apr 10 09:40:01 2005Copyright (c) 1982, 2002, Oracle Corporation. All rights reserved.Connected to:Oracle9i Enterprise Edition Release 9.2.0.8.0 - ProductionWith the Partitioning, OLAP and Oracle Data Mining optionsJServer Release 9.2.0.8.0 - ProductionSQL>Failure
A test failure indicates a database error. Contact your local database administrator and repeat the test.
Cisco ANA Version Information
This step checks the version of Cisco ANA installed on the server. In addition, it also checks that the major parts of the Cisco ANA system are properly located and running.
Note
If there are any files missing or problems with the configuration, this check will fail.
Step 1
statusStep 2
The following is an example of the message that should be displayed.
---------------------------------------------------------------------Welcome to sh-nv210-1A5, running Cisco ANA gateway (v3.6.2 (PRODUCT))---------------------------------------------------------------------
Note
Drools Rules Configuration
This procedure checks that the Drools rules files that are being used have been properly created.
Step 1
~/Main/dataStep 2
–
–
Successful Result
The two Drools rules files exist in the directory.
Failure
Rerun the installation.
Web Server and Webstart Configuration
This procedure checks:
•
•
Step 1
Step 2
http://<GW-IP>:1310/webstart/networkvision.jnlpFor example, if the gateway IP address is 172.16.0.0, enter the following URL:
http://172.16.0.0:1310/webstart/networkvision.jnlpSuccessful Result
•
•
•
Note
An error occurred while launching/running the application.
Category: Launch File Error
The field <jnlp><information><homepage>href has an invalid value: home.htmlFailure
•
Check that the webserver daemon is up and running, enter status on the gateway server.
If the webserver daemon is down, load it by entering startWeb.cmd.
•
Graph Mechanism Configuration
This procedure checks that the graph mechanism is working correctly:
Step 1
Step 2
diagnostic_framework.cmd disableor
diagnostic_framework.cmd enableStep 3
https://<GW-IP:1311>/graphs/
Note
Successful Result
The graphs open properly in the web browser.
Failure
Check the configuration of the web browser.
Cisco ANA Configuration Files
This step checks the following Cisco ANA configuration files:
•
•
Step 1
~/Main/registry/ConfigurationFilesStep 2
•
•
Successful Result
•
•
Failure
Ensure the webserver daemon is up and running, enter status on the gateway server:
Figure 5-6 Command "Status" on the Gateway Server
If the webserver daemon is down, load it by entering startWeb.cmd.
Figure 5-7 Command startWeb.cmd
What's Next?
After the installation of the gateway has been checked, units can be installed. For information about checking the installation of the units see Verifying the Unit Installation, page 6-6.
Note
