Preparing for the Installation
This chapter describes how to set up the environment for installation. To ensure a successful installation, use the checklist provided in Installation Scenarios and Checklists for the installation setup that applies to you. Print the appropriate checklist from the PDF and check off each task as you complete it.
This section contains the following information:
Note
Before performing a fresh installation, remove all previous Cisco Transport Manager or Prime Optical installations including softlinks.
Enabling SSH on the Prime Optical Server and Database Workstation
Enable the SSH service before starting the Prime Optical server and database installation.
To verify that SSH is enabled:
Step 1
As a root user, enter the following command to start the SSH service on the Prime Optical server workstation:
Step 2
Edit the /etc/ssh/sshd_config file on the Prime Optical server workstation and change the PermitRootLogin value to yes.
Step 3
Enter the following command on the Prime Optical server workstation to make the changes take effect:
Step 4
If you are installing the Prime Optical server and database on two different workstations, repeat the preceding steps on the Prime Optical database workstation.
Note
Make sure that the file /etc/hosts contains the following row:
ipaddress hostname
where ipaddress and hostname are the IP address and the hostname of the local servers.
Configuring yum Commands on the Server
To install the required Red Hat Package Manager (RPM) utility for the Linux server and database, you must enable yum commands.
Before you begin
Ensure that yum command is properly configured and that the yum repository is available. Enter the following command to verify that at least one valid repository is configured:
If yum is not configured, you can register your system on Red Hat Network (RHN) or configure yum on a local repository.
Note
If yum is configured on RHEL registration, ensure that the system has access to the external network.
Note
You must require the RHEL DVD to configure yum on a local repository.
To configure yum commands on a local repository:
Create a local.repo file in /etc/yum.repos.d directory and configure the local.repo file to the RHEL DVD.
Step 1
Copy the proper local.repo file template from DVD-mount-point/Disk1 to /etc/yum.repos.d directory.
You can find a local.repo template for RHEL5.x and for RHEL6.x in Disk1 of the Prime Optical installation DVD.
For RHEL 5.x installation, use the following command:
cp <DVD-mount-point>/Disk1/local.repo.5x /etc/yum.repos.d/local.repo
For RHEL 6.x installation, use the following command:
cp <DVD-mount-point>/Disk1/local.repo.6x /etc/yum.repos.d/local.repo
For RHEL 7.x installation, use the following command:
cp <DVD-mount-point>/Disk1/local.repo.7x /etc/yum.repos.d/local.repo
Step 2
Open your /etc/yum.repos.d/local.repo file and follow instructions to mount RHEL DVD and configure yum local repository on RHEL DVD.
Preparing the Environment for a Single-Server Installation
This section describes how to prepare the environment for Prime Optical server and Oracle database installation on the same server.
Verify the following:
- The ping command is included in your path environment variable.
- A reliable network connection is available for an installation on a remote workstation.
- You have reviewed Chapter2, “Installation Requirements”
Step 1
Log in as a root user.
Step 2
Enter the following command to verify that the disk directories shown in Table 3-1 exist:
Table 3-1 Disk Directories
|
|
/cisco |
Used for Prime Optical installation. It includes.jar files, executable shell scripts, and so on. |
/db01 |
Used for the Oracle system tablespace. |
/db01_rd |
Used as an optional partition for the redo logs. |
/db02 |
Used for the base data tablespace, alarm data tablespace, and event data tablespace. |
/db02_rd 1 |
Used as an optional partition for the redo logs. |
/db03 |
Used for the Prime Optical Prime data tablespace. |
/db04 |
Used for the Prime Optical index tablespace. |
/db05 |
Used for the Prime Optical archived and undo tablespace. |
/ctm_backup, |
Used for the backed-up database and configuration files. Note The /ctm_backup partition is required for backups. |
/oracle |
Used for Oracle software. |
/tftpboot |
Used for the TFTP directory. Note Disk partitioning is not required for /tftpboot, but the directory is required. |
Step 3
Check the content of the file /etc/sysconfig/selinux.
If the file contains SELINUX=enforcing, you must change it to SELINUX=disabled (SELinux is fully disabled) or SELINUX=permissive (prints warnings instead of enforcing), and then reboot the server.
Step 4
Disable the firewall on the server by entering one of the following commands:
Step 5
If you are installing Prime Optical and an external database, see Checklist for Installing Prime Optical and an External Database on the Same Workstation for the next task.
If you are installing Prime Optical and an embedded database, see Checklist for Installing Prime Optical and an Embedded Database on the Same Workstation for the next task.
Preparing the Environment for a Dual-Server Installation
This section describes how to prepare the environment for Prime Optical server and Oracle database installation on separate Red Hat Linux servers.
There are two scenarios for installing the Prime Optical server and Oracle on separate servers:
- Standard dual-server installation.
- Dual-server installation with a dedicated connection between servers (for example, a cross-cable connection).
The following figure illustrates the standard dual-server installation. Server 1 is the Prime Optical server and Server 2 is the database server.
Note
The Prime Optical server, Prime Optical client, and Prime Optical database work only with IPv4 addresses. IPv6 is not supported.
Figure 3-1 Standard Dual-Server Installation
The following figure illustrates the dual-server installation with a dedicated connection between servers.
Figure 3-2 Dual-Server Installation with a Dedicated Connection Between Servers
Before performing a dual-server installation, complete the tasks described in the following topics:
Verifying the Environment for the Prime Optical Database Installation
This section describes how to verify that the appropriate settings are configured on the Prime Optical database.
Step 1
Log in as a root user.
Step 2
Enter the following command to verify that the disk directories shown in Table 3-2 exist:
Table 3-2 Disk Directories
|
|
/db01 |
Used for the Oracle system tablespace. |
/db01_rd |
Used as an optional partition for the redo logs. |
/db02 |
Used for the basedata tablespace, alarmdata tablespace, and eventdata tablespace. |
/db02_rd 1 |
Used as an optional partition for the redo logs. |
/db03 |
Used for the Prime Optical Primedata tablespace. |
/db04 |
Used for the Prime Optical index tablespace. |
/db05 |
Used for the Prime Optical archived and undo tablespace. |
/ctm_backup, |
Used for the backed-up database and configuration files. Note The /ctm_backup partition is required for backups. |
Step 3
Check the content of the file /etc/sysconfig/selinux.
If the file contains SELINUX=enforcing, you must change it to SELINUX=disabled or SELINUX=permissive, and then reboot the server.
Step 4
Disable the firewall on the server by entering one of the following commands:
Step 5
If you are installing Prime Optical and an external database, see Checklist for Installing Prime Optical and an External Database on Separate Workstations for the next task.
If you are installing Prime Optical and an embedded database, see Checklist for Installing Prime Optical and an Embedded Database on Separate Workstations for the next task.
Verifying the Environment for the Prime Optical Server Installation
Tip
Use the checklist provided in Installation Scenarios and Checklists to identify when this task should be performed.
This section describes how to verify that the appropriate settings are configured on the Prime Optical server.
Step 1
Log in as a root user.
Step 2
Enter the following command to verify that the /cisco directory exists:
Step 3
Check the content of the file /etc/sysconfig/selinux.
If the file contains SELINUX=enforcing, you must change it to SELINUX=disabled or SELINUX=permissive, and then reboot the server.
Step 4
Disable the firewall on the server by entering one of the following commands:
Step 5
To ensure that you proceed to the correct task, refer to the checklist in Installation Scenarios and Checklists for the installation setup that applies to you.
ISO Image or OVA Package Verification
Before installing Cisco Prime Optical, you need to verify the ISO image or OVA package.
Download the product installation file (OVA or ISO), its signature, and the certificate file to a separate Unix/Linux system and perform the following steps:
Step 1
If you do not have openssl installed, download and install it (see http://www.openssl.org).
Step 2
Place the following files in a temporary directory:
- The product file to be verified (*.iso or *.ova).
- The signature file (*.signature) that is packaged with the product file.
- The certificate files (*.pem).
Step 3
Move to the temporary directory and execute the following command:
openssl dgst -sha512 -verify cert-file -signature sig-file product-file
Where:
cert-file is the Cisco Prime Optical certificate file
sig-file is the Cisco Prime Optical signature file
product-file is the Cisco Prime Optical ISO file or OVA image to be verified
Step 4
If the result is Verified OK :
- For a product ISO file, proceed with the installation (you do not have to perform any more steps as part of this validation procedure).
- For an OVA package, proceed to Step 5.
Step 5
(OVA package only) Verify the publisher and certificate chain using the VMware vSphere client.
a.
Verify that Cisco Systems is the publisher
–
In the vSphere client, choose File > Deploy OVF Template.
–
Browse to the OVA installation file (*.ova) and select it, then click Next.
–
Check whether the Publisher field in the OVF Template Details window displays Cisco Systems, Inc with a green check mark next to it.
Note
- Do not validate the image using the information in the Vendor field as this field does not authenticate Cisco Systems as the publisher.
- Do not proceed if the Publisher field displays No certificate present. This indicate that the image is not signed or the file is not from Cisco Systems or it has been tampered with. Contact your Cisco representative.
b.
Check the certificate chain.
–
In the OVF Template Details window, click the Cisco Systems, Inc. hyperlink in the Publisher field.
–
In the Certificate window, click the Certification Path tab.
–
In the Certification Path tab (which lists the certificate chain), ensure that the Certification Path area displays Cisco Systems, Inc. and the Certificate Status displays The certificate is OK.
Note
The ISO Image or OVA Package Verification is valid only if the OVA/OVF file is obtained as a BU Digital download through cisco.com.