Feedback
Contents
PAWS Management installation
Important considerations
Before you proceed with the installation, consider the following requirements and recommendations:
- Be aware that when you install on an existing server, the hard drive gets formatted and all existing data on the drive gets overwritten.
- Configure Cisco PAWS-M by using static IP addressing to ensure that the Cisco PAWS-M obtains a fixed IP address.
- You must enable Domain Network Server (DNS) and configure NTP during installation.
- Do not attempt to perform any configuration tasks during the installation.
- Do not install any Cisco-verified applications until you complete the installation.
- Carefully read the information that follows before you proceed with the installation.
Frequently Asked Questions about the installation
The following section contains commonly asked questions and responses. Review this section carefully before you begin the installation. The section includes the following topics:
How Much Time Does the Installation Require?
The entire PAWS-M installation process, excluding pre- and post-installation tasks, takes 20 to 30 minutes.
What Usernames and Passwords Do I Need to Specify?
NoteThe system checks your passwords for strength. For guidelines on creating a strong passwords, see the “What Is a Strong Password?” section.
During the installation, you must specify the following usernames and passwords:
You use the Administrator account username and password to log in to the following areas:
To specify the Administrator account username and password, follow these guidelines:
- Administrator account username—The Administrator account username must start with an alphabetic character and can contain alphanumeric characters, hyphens, and underscores.
- Administrator account password—The Administrator account password must be at least six characters long and can contain alphanumeric characters, hyphens, and underscores.
You can change the Administrator account password or add a new Administrator account by using the command line interface. For more information, see the “Command Line Interface for Cisco PAWS-M" section.
For the security password, the password must be at least six characters long and can contain alphanumeric characters, hyphens, and underscores.
What is a Strong Password?
The Installation wizard checks to ensure that you enter a strong password. To create a strong password, follow these recommendations:
- Mix uppercase and lowercase letters.
- Mix letters and numbers.
- Include hyphens and underscores.
- Remember that longer passwords are stronger and more secure than shorter ones.
Avoid the following types of passwords:
- Do not use recognizable words, such as proper names and dictionary words, even when combined with numbers.
- Do not invert recognizable words.
- Do not use word or number patterns, such as aaabbb, qwerty, zyxwvuts, 123321, and so on.
- Do not use recognizable words from other languages.
- Do not use personal information of any kind, including birthdays, postal codes, names of children or pets, and so on.
What Is the Cisco Unified Communications Answer File Generator?
Cisco Unified Communications Answer File Generator, a web application, generates answer files for unattended installations of Cisco PAWS-M. Individual answer files get copied to the root directory of a floppy disk and are used in addition to the Cisco PAWS-M DVD during the installation process.
The web application provides:
- Syntactical validation of data entries
- Online help and documentation
- Support for fresh installations (but does not support upgrades)
You can access the Cisco Unified Communications Answer File Generator at the following URL:
http://www.cisco.com/web/cuc_afg/index.html
The Cisco Unified Communications Answer File Generator supports Internet Explorer version 6.0 or higher and Mozilla version 1.5 or later.
Cisco requires that you use virtual floppy image (.flp) that is compatible with Linux 2.4. Cisco recommends that you use virtual floppy that is preformatted to be compatible with Linux 2.4 for the configuration file. These virtual floppies use a W95 FAT32 format.
Which SFTP Servers Does Cisco Support?
SFTP servers are used for backups and restores, upgrades, and troubleshooting. Cisco allows you to use any SFTP server product but recommends SFTP products that have been certified with Cisco through the Cisco Technology Developer Partner program (CTDP). CTDP partners, such as GlobalSCAPE, certify their products with specified versions of Cisco Unified Communications Manager. For information on which vendors have certified their products with your version of Cisco Unified Communications Manager, see the following URL:
http://marketplace.cisco.com/catalog
For information on using GlobalSCAPE with supported Cisco Unified Communications versions, see the following URL:
http://www.globalscape.com/gsftps/cisco.aspx
Cisco uses the following servers for internal testing. You may use one of the servers, but you must contact the vendor for support:
- Open SSH (refer to http://sshwindows.sourceforge.net/)
- Cygwin (refer to http://www.cygwin.com/ )
- Titan (refer to http://www.titanftp.com/)
NoteFor issues with third-party products that have not been certified through the CTDP process, contact the third-party vendor for support.
Preinstallation tasks
The following table contains a list of preinstallation tasks that you need to perform to ensure that you can successfully install Cisco PAWS-M.
Table 2 Preinstallation Tasks Task Step 1
Read this entire document to familiarize yourself with the installation procedure.
Step 2
Verify that all servers on which you plan to install Cisco PAWS-M are properly registered in DNS.
Step 3
Record the configuration settings for each server that you plan to install.
Allow network traffic
This section describes the minimum required ports that need to be configured to support PAWS-M server. The following table provides a summary of the ports that need to be configured on a corporate firewall. The port configurations shown in this table are based on default settings. If you change the default settings, you need to update these configurations.
If you have other servers/ports required on your network, you need to allow for that traffic.
Table 3 Corporate firewall configuration Direction Source Destination Protocol Port Description Outbound PAWS-M IP address of the ftp server TCP 21 FTP access to PAWS-M server for uploading licenses/software, upgrade, and CLI access Outbound PAWS-M IP address of the sftp server TCP 22 SFTP access to PAWS-M server for uploading licenses/software, upgrade, and CLI access Inbound Internal network or any management workstation PAWS-M server DMZ IP address HTTP 80 HTTP access to non-secured GUI and web APIs (e.g. login page) Inbound Internal network or any management workstation PAWS-M server DMZ IP address HTTPS 443 HTTPS access to secured GUI and web APIs Inbound UC application servers PAWS-M server DMZ IP address HTTPS 6060 Asynchronous SOAP messages from application servers Inbound Internal network or any management workstation PAWS-M server DMZ IP address HTTPS 8443 HTTP alternate Inbound Internal network or any management workstation PAWS-M server DMZ IP address HTTP 8080 HTTP alternate Additional Information
Create virtual machines
Cisco provides a VM template for you to download and transfer to your virtual host. Use this template to create the VMs for PAWS-M platform installation.
Before you deploy the template and create VMs, you should have the VM name, VLAN, hostname, and the IP address allocated for each new VM.
Follow these steps to create a VM and to prepare the PAWS-M installation on it:
Procedure
Step 1
Download the PAWS-M VM template for your application. Go to http://docwiki.cisco.com/wiki/Unified_Communications_Virtualization_Downloads_%28including_OVA/OVF_Templates%29
Step 2
Download the template to a location on your PC or at a designated URL.
Step 3
Deploy the template file using vSphere Client. Enter the following information for the new VM:
Step 4
Make sure that you complete the procedure to create the VM.
At this point a new VM is created with the correct amount of RAM, number of CPUs, size and number of disks for the intended application.
Set up virtual machine
This section provides information on how to set up a virtual machine.
Procedure
Step 1
Open the Open Virtualization Format (OVF) or OVA Template from File > Deployed OVF Template...
Step 2
Use the Browse option to find the location of the OVA file.
Note The OVA file can be located on the PC or at an URL address. Step 3
Follow the wizard to complete the OVA installation process.
Gather information for installation
Use the following table to record the information about PAWS-M. You may not need to obtain all the information; gather only the information that is pertinent to your system and network configuration.
Note
Because some of the fields are optional, they may not apply to your configuration.
Caution
You cannot change some of the fields after installation without reinstalling the software, so be sure to enter the values that you want. The last column in the table shows whether you can change a field after installation; if so, the appropriate CLI command is shown.
Table 4 Server configuration data Parameter Description Can Entry Be Changed After Installation? Administrator ID
This field specifies the Administrator account user ID that you use for secure shell access to the CLI on PAWS-M.
No, you cannot change the entry after installation.
Note After installation, you can create additional Administrator accounts, but you cannot change the original Administrator account user ID. Administrator Password
This field specifies the password for the Administrator account, which you use for secure shell access to the CLI.
You also use this password with the adminsftp user. You use the adminsftp user to access local backup files, upload server licenses, and so on.
Ensure the password is at least six characters long; the password can contain alphanumeric characters, hyphens, and underscores.
Yes, you can change the entry after installation by using the following CLI command:
CLI > set password admin
Country
From the list, choose the appropriate country for your installation.
Yes, you can change the entry after installation by using the following CLI command:
CLI > set web-security
DHCP
Cisco requires that you choose No to the DHCP option. After you choose No, enter a hostname, IP address, IP mask, and gateway.
No, you should not change the entry after installation.
DNS Enable
A DNS server resolves a hostname into an IP address or an IP address into a hostname.
PAWS-M requires that you use a DNS server. Choose Yes to enable DNS.
No, you should not change the entry after installation.
DNS Primary
Enter the IP address of the DNS server that you want to specify as the primary DNS server. Enter the IP address in dotted decimal format as ddd.ddd.ddd.ddd.
Yes, you can change the entry after installation by using the following CLI command:
CLI > set network dns
To view DNS and network information, use the following CLI command:
CLI > network eth0 detail
DNS Secondary (optional)
Enter the IP address of the DNS server that you want to specify as the optional secondary DNS server.
Yes, you can change the entry after installation by using the following CLI command:
CLI > set network dns
Gateway Address
Enter the IP address of the network gateway.
If you do not have a gateway, you must still set this field to 255.255.255.255. Not having a gateway may limit you to being able to communicate only with devices on your subnet.
Yes, you can change the entry after installation by using the following CLI command:
CLI > set network gateway
Hostname
Enter a hostname that is unique to your server.
The hostname can comprise up to 64 characters and can contain alphanumeric characters and hyphens. The first character cannot be a hyphen.
Yes, you can change the entry after installation.
CLI > set network hostname
IP Address
Enter the IP address of your server.
Yes, you can change the entry after installation.
CLI > set network ip eth0
Note If you have network fault tolerance enabled, you must disable it before you change the IP address by entering set network failover dis. Then, re-enable network fault tolerance after you change the IP address by entering set network failover ena. IP Mask
Enter the IP subnet mask of this machine.
Yes, you can change the entry after installation by using the following CLI command:
CLI > set network ip eth0
Location
Enter the location of the server.
You can enter any location that is meaningful within your organization. Examples include the state or the city where the server is located.
Yes, you can change the entry after installation by using the following CLI command:
CLI > set web-security
MTU Size
The maximum transmission unit (MTU) represents the largest packet, in bytes, that this host will transmit on the network.
Enter the MTU size in bytes for your network. If you are unsure of the MTU setting for your network, use the default value.
Default specifies 1500 bytes.
Yes, you can change the entry after installation by using the following CLI command:
CLI > set network mtu
NIC Duplex
Choose the duplex mode for the network interface card (NIC), either Full or Half.
Note This parameter appears only when you choose not to use Automatic Negotiation. Yes, you can change the entry after installation by using the following CLI command:
CLI > set network nic
NIC Speed
Choose the speed for the NIC, 1 Gigabits per second or higher.
Note This parameter appears only when you choose not to use Automatic Negotiation. Yes, you can change the entry after installation by using the following CLI command:
CLI > set network nic
NTP Server
Enter the hostname or IP address of one or more Network Time Protocol (NTP) servers with which you want to synchronize.
You can enter up to five NTP servers.
Note To avoid potential compatibility, accuracy, and network jitter problems, the external NTP servers that you specify for the primary node can be NTP v4 (version 4). If you are using IPv6 addressing, external NTP servers must be NTP v4. Yes, you can change the entry after installation Yes, you can change the entry after installation
CLI > utils ntp server
Organization
Enter the name of your organization.
Tip You can use this field to enter multiple organizational units. To enter more than one organizational unit name, separate the entries with a comma. For entries that already contain a comma, enter a backslash before the comma that is included as part of the entry. Yes, you can change the entry after installation by using the following CLI command:
CLI > set web-security
Security Password
The password must contain at least six alphanumeric characters. The password can contain hyphens and underscores, but it must start with an alphanumeric character.
Note Save this password. Yes, you can change the entry after installation by using the following CLI command:
CLI > set password security
State
Enter the state that the server is located.
Yes, you can change the entry after installation by using the following CLI command:
CLI > set web-security
Time Zone
This field specifies the local time zone and offset from Greenwich Mean Time (GMT).
Choose the time zone that most closely matches the location of your machine.
Yes, you can change the entry after installation by using the following CLI command:
CLI > set timezone
To view the current time zone configuration, use the following CLI command:
CLI > show timezone config
Unit
Enter your unit.
Yes, you can change the entry after installation by using the following CLI command:
CLI > set password admin
Begin installation
This section describes how to install PAWS-M. You install the operating system and PAWS-M by running one installation program.
For information on how to navigate within the installation wizard, refer to the following table.
Table 5 Installation Wizard Navigation To Do This Press This Move to the next field
Tab
Move to the previous field
Alt-Tab
Choose an option
Space bar or Enter
Scroll up or down in a list
Up Arrow or Down Arrow key
Go to the previous window
Space bar or Enter to choose Back (when available)
Get help information for a window
Space bar or Enter to choose Help (when available)
Install PAWS-M
Procedure
Step 1 Insert the CD into the client machine running vSphere client. Edit the settings of the virtual machine's CD/DVD drive to use the client drive. Step 2 Reboot and start the virtual machine.
Note An installation screen appears to start the installation of the PAWS-M.
Step 3 Follow the wizard installation as shown in the following table
Sequence
Wizard Task
Remarks
Step 1
Media Check Screen
Click Yes if media has not been verified previously. If the media has been verified, you may click No to skip the media check.
Step 2
Product Deployment Selection
Click OK.
Step 3
Override Previous Installation
Select Yes or No.
Note For the DNS option, if the virtual machine cannot reach the DNS and the hostname of the PAWS-M server is not resolvable using that DNS server then the installation gives an error and does not proceed.
Step 4
Platform Installation Wizard
Select Proceed.
Step 5
Basic Installation
Select Continue.
Step 6
Timezone Configuration
Select the time zone from the drop-down list, and click OK.
Step 7
Auto Negotiation Configuration
Select Continue.
Step 8
MTU Configuration
Select No for no change, or Yes to enter new values.
Note The virtual machine must be able to reach the gateway that is entered for the static configuration, or else the installation gives an error and does not proceed.
Note For the DNS option, if the virtual machine cannot reach the DNS and the hostname of the PAWS-M server is not resolvable using that DNS server then the installation gives an error and does not proceed.
Step 9
DHCP Configuration
The IP address is hardcoded. Select Yes for no change. Select No for DHCP.
Step 10
Static Network Configuration
Fill the fields Host Name, IP Address, IP Mask, Gateway Address. Click OK.
Step 11
DNS Client Configuration
If you select Yes to DNS client configuration, perform Step 12. If you select No, perform Step 13.
Step 12
DNS Client Configuration
Select Primary DNS, Secondary DNS, or Domain.
Step 13
Administrator Login Configuration
Fill the fields Administrator ID, Password, and Confirm Password. Click OK.
Step 14
Certificate Information
Enter the appropriate information in each field. Click OK.
Step 15
Network Time Protocol Client Configuration
Enter the appropriate information in each field. Click OK.
Step 16
Security Configuration
Fill the fields Security Password and Confirm Password. Click OK.
Step 17
Platform Configuration Confirmation
Click OK to start the installation.
Step 4 When the installation process is complete, you get prompted to log in by using the Administrator account and password. Step 5 Complete the post-installation tasks in the Post-Installation Tasks section.
Reset administrator and security passwords
ProcedureIf you lose the Administrator password or security password, use the following procedure to reset these passwords.
To perform the password reset process, you must connect to the system through the system console; that is, you must connect to the server with a keyboard and monitor. You cannot reset a password when you connect to the system through a secure shell session.
NoteDuring this procedure, you must remove and then insert a valid CD or DVD in the disk drive to prove that you have physical access to the system.
