Transcript
SteelCentral™ Enterprise NetProfiler Appliance Installation Guide Models SCNP-04270-xx Version 10.10.x June 2017
© 2017 Riverbed Technology, Inc. All rights reserved. Riverbed®, SteelApp™, SteelCentral™, SteelFusion™, SteelHead™, SteelScript™, SteelStore™, Steelhead®, Cloud Steelhead®, Virtual Steelhead®, Granite™, Interceptor®, Stingray™, Whitewater®, WWOS™, RiOS®, Think Fast®, AirPcap®, BlockStream™, FlyScript™, SkipWare®, TrafficScript®, TurboCap®, WinPcap®, Mazu®, OPNET®, and Cascade® are all trademarks or registered trademarks of Riverbed Technology, Inc. (Riverbed) in the United States and other countries. Riverbed and any Riverbed product or service name or logo used herein are trademarks of Riverbed. All other trademarks used herein belong to their respective owners. The trademarks and logos displayed herein cannot be used without the prior written consent of Riverbed or their respective owners. F5, the F5 logo, iControl, iRules and BIG-IP are registered trademarks or trademarks of F5 Networks, Inc. in the U.S. and certain other countries. Linux is a trademark of Linus Torvalds in the United States and in other countries. VMware, ESX, ESXi are trademarks or registered trademarks of VMware, Incorporated in the United States and in other countries. This documentation is furnished "AS IS" and is subject to change without notice and should not be construed as a commitment by Riverbed Technology. This documentation may not be copied, modified or distributed without the express authorization of Riverbed Technology and may be used only in connection with Riverbed products and services. Use, duplication, reproduction, release, modification, disclosure or transfer of this documentation is restricted in accordance with the Federal Acquisition Regulations as applied to civilian agencies and the Defense Federal Acquisition Regulation Supplement as applied to military agencies. This documentation qualifies as "commercial computer software documentation" and any use by the government shall be governed solely by these terms. All other use is prohibited. Riverbed Technology assumes no responsibility or liability for any errors or inaccuracies that may appear in this documentation. Individual license agreements can be viewed at the following location: https://
/license.php This manual is for informational purposes only. Addresses shown in screen captures were generated by simulation software and are for illustrative purposes only. They are not intended to represent any real traffic or any registered IP or MAC addresses.
Riverbed Technology 680 Folsom Street San Francisco, CA 94107 Phone: 415.247.8800 Fax: 415.247.8801 Web: http://www.riverbed.com
Part Number 712-00267-06
Contents
Chapter 1 - Introduction.............................................................................................................................1 Additional Resources........................................................................................................................................1 Safety Guidelines..............................................................................................................................................2 Contacting Riverbed .........................................................................................................................................2 Chapter 2 - Preparation..............................................................................................................................3 Requirements ....................................................................................................................................................3 Data sources......................................................................................................................................................4 Cable connections.............................................................................................................................................4 Power.........................................................................................................................................................4 Console port...............................................................................................................................................4 Primary ports .............................................................................................................................................4 Access to the network................................................................................................................................5 Configuration information ................................................................................................................................6 Licensing strategy.............................................................................................................................................7 Downloading and adding license keys ......................................................................................................7 Chapter 3 - Cabling.....................................................................................................................................9 Cabling to the console port ...............................................................................................................................9 Cabling to the management network ..............................................................................................................10 Primary port.............................................................................................................................................10 Remote management ...............................................................................................................................10 Dispatcher Module cabling......................................................................................................................11 Power cabling .................................................................................................................................................11 Chapter 4 - Configuration ........................................................................................................................ 13 Installation time considerations ......................................................................................................................13 Step 1 - Configure the Database Module........................................................................................................14 Step 2 - Configure the User Interface Module................................................................................................15
SteelCentral™ Enterprise NetProfiler Appliance Installation Guide
iii
Contents
Step 3 - Configure the Analysis Module ........................................................................................................16 Step 4 - Log into the web user interface .........................................................................................................17 Step 5 - Configure Expansion Modules 1 through 4 ......................................................................................17 Step 6 - Configure the Dispatcher Module .....................................................................................................18 Step 7 - Configure Expansion Modules 5 through 9 ......................................................................................19 Next Steps.......................................................................................................................................................20 Chapter 5 - Installing new software ........................................................................................................ 21 Overview ........................................................................................................................................................21 Checklist .........................................................................................................................................................22 Step 1 - Download the software .....................................................................................................................23 Step 2 - Create bootable USB memory sticks ................................................................................................23 Step 3 - Insert the bootable USB memory stick into the system ....................................................................24 Step 4 - Connect to the console port...............................................................................................................24 Step 5 - Configure the BIOS...........................................................................................................................24 Step 6 - Install the software ............................................................................................................................25 Step 7 - Remove the USB memory stick ........................................................................................................25 Steps 8 through 11 - Run the configuration wizard ........................................................................................25 Configure the Database Module..............................................................................................................25 Configure the User Interface Module......................................................................................................26 Configure the Analysis Module...............................................................................................................27 Step 12 - Log into the web user interface .......................................................................................................27 Expansion Modules ........................................................................................................................................28 Dispatcher Module .........................................................................................................................................29 Chapter 6 - Licensing ............................................................................................................................... 31 Automatic licensing ........................................................................................................................................31 Manual licensing.............................................................................................................................................32 Licensing multiple products with different features.......................................................................................33 Chapter 7 - Installation verification......................................................................................................... 35 Chapter 8 - Expanding capacity .............................................................................................................. 37 Overview ........................................................................................................................................................37 Step 1 - Create an installation directory on the UI Module............................................................................38 Step 2 - Identify the software version.............................................................................................................38 Step 3 - Locate the installation file .................................................................................................................38 Step 4 - Place the installation file in the installation directory .......................................................................38
iv
SteelCentral™ Enterprise NetProfiler Appliance Installation Guide
Contents
Step 5 - Configure the new Expansion Module..............................................................................................39 Step 6 - Configure the new Dispatcher Module .............................................................................................40 Step 7 - Configure any remaining Expansion Modules..................................................................................41 Appendix A - Specifications .................................................................................................................... 43 Console cable wiring ......................................................................................................................................43 Controls and indicators ...................................................................................................................................44 Front panel...............................................................................................................................................44 Disk fault indicators ................................................................................................................................45 Mechanical and electrical specifications ........................................................................................................46 Rack space ...............................................................................................................................................46 Power.......................................................................................................................................................47 Cooling ....................................................................................................................................................47
SteelCentral™ Enterprise NetProfiler Appliance Installation Guide
v
Contents
vi
SteelCentral™ Enterprise NetProfiler Appliance Installation Guide
CHAPTER 1
Introduction
This guide describes installing the Riverbed® SteelCentral™ Enterprise NetProfiler. It assumes that the product has already been mounted in the rack as described in the Rack Installation Guide for SteelCentral model xx70 series products. It describes preparations, cabling the product, configuring it on your network, activating the licenses, and verifying that the appliance is receiving and processing traffic data. When these tasks are completed, the Enterprise NetProfiler is ready to configure operationally. Operational configuration is described in the online help system of each product. This guide also describes downloading new software from the Riverbed Support site and installing it, in case you choose to do that instead of running the factory-installed software. This guide includes:
Chapter 1, “Introduction”
Chapter 2, “Preparation”
Chapter 3, “Cabling”
Chapter 4, “Configuration”
Chapter 5, “Installing new software”
Chapter 6, “Licensing”
Chapter 7, “Installation verification”
Chapter 8, “Expanding capacity”
Appendix A, “Specifications”
Additional Resources The primary source of product information is the online help system. Additional information is available from the Riverbed Support site at https://support.riverbed.com. This includes:
Release Notes - posted in the software section of the page for your product.
Users Guides - posted in the documentation section of the page for your product.
Tech Notes - posted in the documentation section of the page for your product where applicable.
Knowledge Base - a database of known issues and how-to documents. You can browse titles or search for key words and strings. Choose “Search the Knowledge Base” from the Knowledge Base menu.
SteelCentral™ Enterprise NetProfiler Appliance Installation Guide
1
Introduction
Safety Guidelines
Safety Guidelines Follow the safety precautions outlined in the Safety and Compliance Guide when installing and setting up your equipment.
Important: Failure to follow these safety guidelines can result in injury or damage to the equipment. Mishandling of the equipment voids all warranties. Please read and follow safety guidelines and installation instructions carefully.
Many countries require the safety information to be presented in their national languages. If this requirement applies to your country, consult the Safety and Compliance Guide. Before you install, operate, or service the Riverbed product, you must be familiar with the safety information. Refer to the Safety and Compliance Guide if you do not clearly understand the safety information provided in this guide.
Contacting Riverbed Options for contacting Riverbed include:
Internet - Find out about Riverbed products at http://www.riverbed.com.
Support - If you have problems installing, using, or replacing Riverbed products, contact Riverbed Technical Support or your channel partner who provides support. To contact Riverbed Technical Support, please open a trouble ticket at https://support.riverbed.com or call 1-888-RVBD-TAC (1-888-782-3822) in the United States and Canada or +1 415 247 7381 outside the United States.
Professional Services - Riverbed has a staff of engineers who can help you with installation, provisioning, network redesign, project management, custom designs, consolidation project design, and custom-coded solutions. To contact Riverbed Professional Services, go to http://www.riverbed.com or email [email protected].
Documentation - Riverbed continually strives to improve the quality and usability of its documentation. We appreciate any suggestions you may have about our online documentation or printed materials. Send documentation comments to [email protected].
2
SteelCentral™ Enterprise NetProfiler Appliance Installation Guide
CHAPTER 2
Preparation
This chapter describes equipment, network access, and configuration information that is necessary for installing the Enterprise NetProfiler. The topics include:
“Requirements” on page 3
“Data sources” on page 4
“Cable connections” on page 4
“Configuration information” on page 6
“Licensing strategy” on page 7
Requirements
Data sources
Cables for connection to management network
Access to the network
Terminal emulator set to 9600 baud, 8 data bits, 1 stop bit, no parity and no flow-control
Console cable provided in the accessory kit shipped with the chassis. This cable has a 9-pin D-subminiature connector on one end and an RJ45 connector on the other end for connecting to the console port. The cable wiring is listed in Appendix A, “Specifications.”
Configuration information for placing Enterprise NetProfiler on your network
Customer account on the Riverbed Support site
Licensing strategy
If you will be downloading new software from the Riverbed Support site instead of running the factory-installed software, you will also need:
USB memory sticks with at least 1 GB capacity (preferably three to reduce the installation time)
Universal USB installer utility
All Enterprise NetProfiler modules must be running the same version of the software. If you have Expansion Modules or a Dispatcher Module that is running a version different from the UI Module, refer to Chapter 8, “Expanding capacity” for instructions on adding them to the system.
SteelCentral™ Enterprise NetProfiler Appliance Installation Guide
3
Preparation
Data sources
Data sources Enterprise NetProfiler obtains traffic information from SteelCentral Flow Gateway, NetShark and AppResponse appliances and Cascade Sensor appliances. It must be receiving traffic information from at least one source in order for you to verify successful installation and configuration. There are two approaches to setting up data sources:
Set up the available data sources and point them to the IP address of the Enterprise NetProfiler Analysis Module before you install the appliance.
Install the Enterprise NetProfiler up to the point of verification, then install or configure the data sources, and then return to the Enterprise NetProfiler to complete the installation verification.
It is preferable to configure all the data sources that are available at the time you install the Enterprise NetProfiler. However, product operation can be confirmed with just one data source.
Cable connections Power Each Enterprise NetProfiler module has two power supplies. Plug these into two different circuits, if they are available.
Console port The initial setup is performed using the console port. Ensure that you have a terminal server or a system running a terminal emulation program and a cable for connecting to the console port, such as the cable supplied in the accessory kit shipped with the chassis. This cable has a 9-pin D-subminiature connector on one end and an RJ45 connector on the other end for connecting to the console port. The cable wiring is listed in Appendix A, “Specifications.”
Primary ports Modules in the Enterprise NetProfiler communicate with one another by means of a customer-supplied switch. Each module is equipped with a 100/1000baseTX primary management port that must connect to a hub or switch on the management network. The primary port is set by default for auto-negotiation. Ensure that:
The management network has a switch port for each Enterprise NetProfiler module.
Straight-through cables are available at the rack locations for connecting the Enterprise NetProfiler modules to the switch. (One cable per chassis.)
The management network switch port is set to establish a connection at 1000 Mb/s and full duplex.
A terminal device (laptop, KVM, etc.) is available on the management network for logging in to the Enterprise NetProfiler user interface.
4
SteelCentral™ Enterprise NetProfiler Appliance Installation Guide
Cable connections
Preparation
Access to the network The Enterprise NetProfiler uses the management network:
For communication between its modules.
To access network services.
To provide access to its user interface.
Communication between SteelCentral products If you lock down your network on a port-by-port basis, ensure that the following ports are open between SteelCentral products:
TCP/22 – (ssh) This is needed for the NetProfiler to transfer upgrade packages to other SteelCentral devices that are connected to it.
TCP/443 – Packet Analyzer communicates with the web interface of the NetShark over this port.
TCP/8443 – Exchange of encryption certificates between SteelCentral products.
TCP/41017 – Encrypted communication between NetProfiler and Flow Gateway, NetShark and AppResponse appliances.
UDP/123 – (ntp) Synchronization of time between a Flow Gateway and NetProfiler.
Access to and from network access services
TCP/22 – (ssh) This is needed for secure shell access to SteelCentral software components and for the appliance to obtain information from servers via scripts.
UDP/161 – (snmp) The NetProfiler uses SNMP to obtain interface information from switches. Also, management systems use this port to read the SteelCentral product MIB.
TCP/443 – (https) Secure web-based management interfaces.
TCP/5432 – (odbc) If you will be allowing other applications to access the NetProfiler internal database via ODBC, then you must allow traffic on this port.
42999 – If you will be using the NetProfiler user identification feature with a Microsoft Active Directory domain controller, then you must allow traffic on port 42999.
Vulnerability scanner ports – If you will be using the NetProfiler vulnerability scan feature, then you must allow traffic on the port that the SteelCentral product is to use for accessing the vulnerability scanner server. Obtain vulnerability scanner server addresses and port numbers from the administrator of those systems. The default ports are as follows:
Nessus: 1241
nCircle: 443
Rapid7: 3780
Qualys: Requires external https access to qualysapi.qualys.com (Note: This is separate from qualysguard.qualys.com.)
Foundstone: 3800
SteelCentral™ Enterprise NetProfiler Appliance Installation Guide
5
Preparation
Configuration information
Configuration information When you configure the Enterprise NetProfiler, you will be asked to provide configuration information. Information that is required to complete the installation is listed in the table that follows with an asterisk (*). Items not marked with an asterisk are optional during installation and can be specified afterwards on the NetProfiler Configuration > General Settings page if necessary. It may be useful to write the configuration values in the blank column of the checklist below so that you can refer to them during the configuration step or afterward. NetProfiler host name:* NetProfiler IP address:* Netmask:* Default gateway:* DNS name resolution for hosts (enable or disable): Primary DNS server IP address: Secondary DNS server IP address: DNS search domain: NTP server IP addresses:* Applies only if NetProfiler is being synchronized to an external NTP server. Enter one or more addresses as a commaseparated list. Time Zone: Flow encryption certificate (default or new certificate): For faster installation, use the default encryption certificate shipped with the NetProfiler and then generate a new certificate later. NetProfiler User Interface (UI) Module IP address: * NetProfiler Database (DB) Module IP address: * NetProfiler Analysis (AN) Module IP address:* NetProfiler Expansion (EX) Module IP addresses (if present):* NetProfiler Dispatcher (DP) Module IP address (if present):* SNMP information: NetProfiler is set by default to use SNMP Version 1 and to allow MIB browsing. If you are configuring SNMP at this time, obtain the necessary V1 or V3 information. Outgoing mail server name, port number, and “From” address. Applies only if you will be specifying a server that NetProfiler is to use for sending reports or alert notifications. Inside addresses: IP addresses or address ranges of hosts that the NetProfiler is to track individually. The default values are 10/8,172.16/ 12,192.168/16
6
SteelCentral™ Enterprise NetProfiler Appliance Installation Guide
Licensing strategy
Preparation
Security Profile settings:* You can use either three traffic collection profiles (weekdays, weeknights, and weekends) or four (weekdays, weeknights, Saturdays, and Sundays). After installation, you can define others. You can also specify the times when weekdays begin and end (default times are 9:00 am to 5:00 pm). Password to use for your initial NetProfiler login:* The default password admin. New password to enter when prompted to change the initial NetProfiler password:* Applies only to systems not previously configured. Service Management Leave this set to ByLocation unless you are required to choose another group type for service locations.
Licensing strategy Capacity and feature licenses must be activated on the Riverbed licensing web site. SteelCentral products that have been configured and have access to Internet automatically download the license keys that have been assigned to their serial numbers on the licensing web site. If the appliance does not have Internet access, then you must add its license keys manually. The licensing web site provides the flexibility to assign different feature and capacity licenses to different appliances. You can ship appliances to remote locations without concern for which appliance is to have which license. When you have the serial numbers and know where the appliances are deployed in the network, you can make the license assignments on the Riverbed licensing web site. When all the appliances are to be licensed for the same features and capacities, the licensing web site handles this automatically. The appliances can automatically download their licenses without your needing to visit the licensing web site.
Downloading and adding license keys If the NetProfiler is configured and has Internet connectivity, it can download its license keys automatically. Otherwise, someone must email the keys from the Riverbed licensing web site and then copy them from the email, or else copy them directly from the Riverbed licensing web site, and then someone must add them to the NetProfiler manually. Determine which strategy you are using.
Will you activate the licenses on the Riverbed licensing web site yourself? Or will someone else do that?
If the NetProfiler you are installing does not have Internet access, how will you ensure that it gets its assigned license keys? Will you email them to yourself from the Riverbed licensing site? Will you copy them from the Riverbed licensing site? Or will someone else provide the license keys for you to add to the NetProfiler manually?
Typically the installer: 1. Mounts, cables and configures this appliance and the other SteelCentral products that were ordered with it. 2. Records the product serial number from the chassis of each appliance. The number identified as “SN” is the product serial number. It is located on the pull-out tab near the upper-left corner of the front of the chassis.
SteelCentral™ Enterprise NetProfiler Appliance Installation Guide
7
Preparation
Licensing strategy
3. Sends the serial number for each appliance, along with the appliance location on the network, to the network manager. Then the network manager: 1. Logs in to the Riverbed licensing web site. 2. Enters the product serial number of the first SteelCentral product to gain access to the licensing page. The Riverbed licensing page lists the serial numbers of all SteelCentral products that were included in the same purchase order. 3. For each serial number, activates the licenses that apply to that serial number. Using the Riverbed licensing web site is described in Chapter 6, “Licensing.” After the licenses have been activated on the Riverbed licensing web site, the license keys can be added to the NetProfiler either automatically or manually. If only one appliance is being installed, or if all the appliances are to be licensed for the same features and capacities, the licensing web site handles this automatically. The appliances can automatically download their licenses without your needing to visit the licensing web site. Licensing is described in Chapter 6, “Licensing.”
8
SteelCentral™ Enterprise NetProfiler Appliance Installation Guide
CHAPTER 3
Cabling
Installation requires connecting to the console port for initial software configuration and connecting to the primary port for operations.
“Cabling to the console port” on page 9
“Cabling to the management network” on page 10
“Power cabling” on page 11
Cabling to the console port If there is to be a permanent connection from the console port to a terminal server, make the connections now. Refer to Appendix A, “Specifications.” for console port pin assignments. If you will temporarily connect to each console port in succession for configuring the software, ensure that you have:
Laptop or other device running a terminal emulation program. Set the device’s terminal emulator to 9600 Baud, 8 data bits, 1 stop bit, no parity bit, and no flow control.
A cable for connecting to the console port, such as the cable supplied in the accessory kit shipped with the chassis. This cable has a 9-pin D-subminiature connector on one end and an RJ45 connector on the other end for connecting to the console port. The cable wiring is listed in Appendix A, “Specifications.”
The configuration procedure begins with the Database (DB) Module. The User Interface (UI) Module must be set up next, the Analysis (AN) Module after that, and any Expansion (EX) or Dispatcher (DP) Modules last. Database Module and User Interface Module
SteelCentral™ Enterprise NetProfiler Appliance Installation Guide
9
Cabling
Cabling to the management network
Analysis Module and Expansion Module
Dispatcher Module
Cabling to the management network Primary port Connect a straight-through cable from the management network to the Primary (PRI) connector on back of each chassis.
Remote management If you plan to use the web user interface to the BMC (baseboard management controller) for remotely performing chassis-level functions, connect a network cable to the Remote (REM) connector on the Analysis Module and any Expansion Modules. Also connect straight-through cables from the management network to the AUX connectors on the User Interface, Database and Dispatcher Modules. The remote management connections do not need to be on the same network as the Primary port. When the remote management feature is used, the network address and login credentials for remote BMC access are usually configured by a system administrator as part of the operational configuration after NetProfiler has been installed. For additional information, complete the installation and then consult the online help for the Configuration > General Settings page of the web user interface.
10
SteelCentral™ Enterprise NetProfiler Appliance Installation Guide
Power cabling
Cabling
Dispatcher Module cabling If you are installing an Enterprise NetProfiler with a Dispatcher (DP) Module, you can improve performance by using link aggregation. In addition to connecting the Primary port to a switch on your management network, you can also connect the ETH0_0 port to your switch. Then if you configure XOR (balance-xor) channel bonding on your switch, communications between the Enterprise NetProfiler Analysis and Expansion Modules and the Dispatcher can be loadbalanced across the combined throughput of the bonded channels. Link aggregation is recommended for large-capacity configurations. When Enterprise NetProfiler capacity is scaled beyond five million flows per minute, a single Ethernet connection becomes saturated and begins to drop data. Configuring link aggregation on the Primary and ETH0_0 ports increases the available bandwidth to 2 Gbps, allowing greater capacity. The ETH0_1 port is reserved for future use. Dispatcher Module
Power cabling If the power cables were not installed when the chassis were mounted in the racks, install them at this time. If possible, plug the two power supplies into different power sources. The chassis are configured to initialize when power is connected.
SteelCentral™ Enterprise NetProfiler Appliance Installation Guide
11
Cabling
12
Power cabling
SteelCentral™ Enterprise NetProfiler Appliance Installation Guide
CHAPTER 4
Configuration
The Enterprise NetProfiler is shipped from the factory with its software already installed. This chapter describes configuring the factory-installed software. If instead you want to install and configure new software downloaded from the Riverbed Support site, refer to Chapter 5, “Installing new software.” For instructions on adding an Expansion Module to an existing Enterprise NetProfiler, refer to Chapter 8, “Expanding capacity.” This chapter includes:
“Installation time considerations” on page 13
“Step 1 - Configure the Database Module” on page 14
“Step 2 - Configure the User Interface Module” on page 15
“Step 3 - Configure the Analysis Module” on page 16
“Step 4 - Log into the web user interface” on page 17
“Step 5 - Configure Expansion Modules 1 through 4” on page 17
“Step 6 - Configure the Dispatcher Module” on page 18
“Step 7 - Configure Expansion Modules 5 through 9” on page 19
“Next Steps” on page 20
Installation time considerations The time required for installing the Enterprise NetProfiler is shortest if you configure and run the factory-installed software. If you will be running a version of the software later than the version that was installed at the factory, then there are two approaches to installing that version:
Configure the factory-installed software as described in this chapter and then update it to the latest version.
Perform a full installation of new software downloaded from the Riverbed Support site. This replaces the factoryinstalled software.
If the software version on the Support site is only one or two versions later than the factory-installed version, it may be faster to configure the factory-installed software and then update it to the latest version. If the software on the Support site is several versions later than the factory-installed version, it may be faster to download the latest version from the Support site and perform a full installation. This is described in Chapter 5, “Installing new software.” To configure and run the factory-installed software, follow the instructions in the sections that follow.
SteelCentral™ Enterprise NetProfiler Appliance Installation Guide
13
Configuration
Step 1 - Configure the Database Module
Step 1 - Configure the Database Module 1. Using a console cable, connect a laptop or other device to the CONSOLE connector of the Database (DB) Module.
Note: It is necessary to run the configuration wizard on the Database Module first, then on the User Interface Module, and finally on the Analysis Module, in that order.
2. Set the device’s terminal emulator to 9600 Baud, 8 data bits, 1 stop bit, no parity bit, and no flow control. 3. Log in at the login prompt using “admin” for your user name and “admin” for your password. 4. When the configuration wizard starts, it displays the product model and serial number. If you will be activating the licenses manually, record this information to use during license activation. 5. Enter the required information at the following prompts. For example: Press up arrow to access these addresses or ctrl+c to restart Discovered IPv4 address 10.38.130.34/18 Discovered IPv6 address 2600:809:200:1a02:100:0:a26:8222/64 Please enter the UI MODULE MGMT IP ADDRESS ip/prefixlen: 10.38.130.33/18 Please enter the DB MODULE MGMT IP ADDRESS ip/prefixlen: 10.38.130.34/18 Please enter the AN MODULE MGMT IP ADDRESS ip/prefixlen: 10.38.127.157/18 Please enter the GATEWAY IP ADDRESS ip: 10.38.128.1 Please enter the password for the mazu, dhcp, root, and admin shell users: ******** Please re-enter the password: ******** New Settings: Product: IP Address: Gateway:
CAP-04270-DB 10.38.130.34/18 10.38.128.1
NOTE: Setup will conclude with a reboot of this SteelCentral device. After all modules have rebooted, setup can be completed by logging into the UI at https://10.38.130.33/ Login as admin/admin. NOTICE: All existing settings and logs will be lost.
14
SteelCentral™ Enterprise NetProfiler Appliance Installation Guide
Step 2 - Configure the User Interface Module
Configuration
Finish Setup and Reboot? (yes/no): yes
6. Wait until the system reboots before configuring the User Interface Module.
Step 2 - Configure the User Interface Module 1. Using a console cable, connect a laptop or other device to the CONSOLE connector of the User Interface (UI) Module. 2. Log in at the login prompt using “admin” for your user name and “admin” for your password. 3. When the configuration wizard starts, it displays the product model and serial number. If you will be activating the licenses manually, record this information to use during license activation. 4. Enter the required information at the following prompts. For example: Press up arrow to access these addresses or ctrl+c to restart Discovered IPv4 address 10.38.130.33/18 Discovered IPv6 address 2600:809:200:1a02:100:0:a26:8221/64 Please enter the UI MODULE MGMT IP ADDRESS ip/prefixlen: 10.38.130.33/18 Please enter the DB MODULE MGMT IP ADDRESS ip/prefixlen: 10.38.130.34/18 Please enter the AN MODULE MGMT IP ADDRESS ip/prefixlen: 10.38.129.157/18 Please enter the GATEWAY IP ADDRESS ip: 10.38.128.1 New Settings: Product: IP Address: Gateway:
CAP-04270-UI 10.38.130.33/18 10.38.128.1
NOTE: Setup will conclude with a reboot of this SteelCentral device. After all modules have rebooted, setup can be completed by logging into the UI at https://10.38.130.33/ Login as admin/admin. NOTICE: All existing settings and logs will be lost. Finish Setup and Reboot? (yes/no):yes
5. Wait until the system reboots before configuring the Analysis Module.
SteelCentral™ Enterprise NetProfiler Appliance Installation Guide
15
Configuration
Step 3 - Configure the Analysis Module
Step 3 - Configure the Analysis Module 1. Using a console cable, connect a laptop or other device to the CONSOLE connector of the Analysis (AN) Module.
2. Log in at the login prompt using “admin” for your user name and “admin” for your password. 3. When the configuration wizard starts, it displays the product model and serial number. If you will be activating the licenses manually, record this information to use during license activation. 4. Enter the required information at the following prompts. For example: Press up arrow to access these addresses or ctrl+c to restart Discovered IPv4 address 10.38.129.231/18 Discovered IPv6 address 2600:809:200:1a02:100:0:a26:8221/64 Please enter the UI MODULE MGMT IP ADDRESS ip/prefixlen: 10.38.130.33/18 Please enter the DB MODULE MGMT IP ADDRESS ip/prefixlen: 10.38.130.34/18 Please enter the AN MODULE MGMT IP ADDRESS ip/prefixlen: 10.38.129.231/18 Please enter the GATEWAY IP ADDRESS ip: 10.38.128.1 New Settings: Product: IP Address: Gateway:
CAP-04270-AN 10.38.129.231/18 10.38.128.1
NOTE: Setup will conclude with a reboot of this SteelCentral device. After all modules have rebooted, setup can be completed by logging into the UI at https://10.38.130.33/ Login as admin/admin. NOTICE: All existing settings and logs will be lost. Finish Setup and Reboot? (yes/no):yes
5. Wait until the system reboots before continuing to the next step.
16
SteelCentral™ Enterprise NetProfiler Appliance Installation Guide
Step 4 - Log into the web user interface
Configuration
Step 4 - Log into the web user interface Using a system on the management network, log into the web user interface as follows: 1. Point your web browser to the IP address that you specified for the User Interface Module in the configuration wizard. 2. Log into the web user interface using “admin” for your user name and “admin” for your password. 3. The first time you log in, the initial Setup page is displayed. Enter the required information in all the fields marked with an asterisk (*). 4. At the bottom of the Setup page, click Configure Now to complete the configuration. 5. When prompted, enter a new password for the web user interface. This completes the installation of the three basic modules of the Enterprise NetProfiler. If the NetProfiler has an Internet connection, it will attempt to download licenses from the Riverbed licensing server. Alternatively, you can either add or download applicable licenses using the NetProfiler Configuration > Licenses page. Refer to Chapter 6, “Licensing.” If your system includes Expansion Modules and Dispatcher Modules, you can install them now by performing the same actions described for the other modules.
Step 5 - Configure Expansion Modules 1 through 4 Up to nine Expansion Modules can be configured. If your system includes more than four Expansion Modules, a Dispatcher Module must be installed before you install the fifth Expansion Module. It is not necessary to log into the web user interface to complete their configuration. All Enterprise NetProfiler modules must be running the same version of the software. If you have Expansion Modules or a Dispatcher Module that is running a version different from the UI Module, refer to Chapter 8, “Expanding capacity” for instructions on adding them to the system. For each Expansion Module: 1. Using a console cable, connect a laptop or other device to the CONSOLE connector of the Expansion (EX) Module. 2. Log in at the login prompt using “admin” for your user name and “admin” for your password. 3. When the configuration wizard starts, it displays the product model and serial number. If you will be activating the licenses manually, record this information to use during license activation. 4. Enter the required information at the following prompts. For example: Press up arrow to access these addresses or ctrl+c to restart Discovered IPv4 address 10.38.129.232/18 Discovered IPv6 address 2600:809:200:1a02:100:0:a26:8221/64 Please enter the UI MODULE MGMT IP ADDRESS ip/prefixlen: 10.38.130.33/18
SteelCentral™ Enterprise NetProfiler Appliance Installation Guide
17
Configuration
Step 6 - Configure the Dispatcher Module
Please enter the DB MODULE MGMT IP ADDRESS ip/prefixlen: 10.38.130.34/18 Please enter the AN MODULE MGMT IP ADDRESS ip/prefixlen: 10.38.129.231/18 Please enter the GATEWAY IP ADDRESS ip: 10.38.128.1 New Settings: Product: IP Address: Gateway:
CAP-04270-EX 10.38.129.232/18 10.38.128.1
NOTE: Setup will conclude with a reboot of this SteelCentral device. After all modules have rebooted, setup can be completed by logging into the UI at https://10.38.130.33/ Login as admin/admin. NOTICE: All existing settings and logs will be lost. Finish Setup and Reboot? (yes/no):yes
When the Expansion Module reboots, it communicates with the other Enterprise NetProfiler modules as necessary to be added to the system.
Step 6 - Configure the Dispatcher Module A Dispatcher Module must be installed if your Enterprise NetProfiler has more than four Expansion Modules. It must be configured before you install the fifth and additional Expansion Modules. You do not need to log in to the web user interface as part of the configuration. To configure a Dispatcher Module: 1. Using a console cable, connect a laptop or other device to the CONSOLE connector of the Dispatcher (DP) Module. 2. Log in at the login prompt using “admin” for your user name and “admin” for your password. 3. When the configuration wizard starts, it displays the product model and serial number. If you will be activating the licenses manually, record this information to use during license activation. 4. Enter the required information at the following prompts. For example: Press up arrow to access these addresses or ctrl+c to restart Discovered IPv4 address 10.38.129.233/18 Discovered IPv6 address 2600:809:200:1a02:100:0:a26:8221/64 Please enter the UI MODULE MGMT IP ADDRESS ip/prefixlen: 10.38.130.33/18 Please enter the DB MODULE MGMT IP ADDRESS ip/prefixlen: 10.38.130.34/18 Please enter the AN MODULE MGMT IP ADDRESS ip/prefixlen: 10.38.129.231/18
18
SteelCentral™ Enterprise NetProfiler Appliance Installation Guide
Step 7 - Configure Expansion Modules 5 through 9
Configuration
Please enter the GATEWAY IP ADDRESS ip: 10.38.128.1 New Settings: Product: IP Address: Gateway:
CAP-04270-DP 10.38.129.233/18 10.38.128.1
NOTE: Setup will conclude with a reboot of this SteelCentral device. After all modules have rebooted, setup can be completed by logging into the UI at https://10.38.130.33/ Login as admin/admin. NOTICE: All existing settings and logs will be lost. Finish Setup and Reboot? (yes/no):yes
When the Dispatcher Module reboots, it takes the IP address that you assigned to the Analysis Module and gives the Analysis Module the IP address that you assigned to the Dispatcher Module in the dialog above. The exchange of IP addresses between the Dispatcher and Analysis Modules is performed automatically. If you plan to use link aggregation to improve performance and you have connected multiple cables to the Dispatcher Module as described in Chapter 3, “Cabling,” then the Dispatcher Module is ready for you to configure port channel bonding on your switch.
Step 7 - Configure Expansion Modules 5 through 9 A Dispatcher Module must be installed before you install the fifth and additional Expansion Modules. It is not necessary to log into the web user interface to complete the Expansion Module configuration. For each Expansion Module: 1. Using a console cable, connect a laptop or other device to the CONSOLE connector of the Expansion (EX) Module. 2. Log in at the login prompt using “admin” for your user name and “admin” for your password. 3. When the configuration wizard starts, it displays the product model and serial number. If you will be activating the licenses manually, record this information to use during license activation. 4. Enter the required information at the following prompts. For example: Press up arrow to access these addresses or ctrl+c to restart Discovered IPv4 address 10.38.129.232/18 Discovered IPv6 address 2600:809:200:1a02:100:0:a26:8221/64 Please enter the UI MODULE MGMT IP ADDRESS ip/prefixlen: 10.38.130.33/18 Please enter the DB MODULE MGMT IP ADDRESS ip/prefixlen: 10.38.130.34/18 Please enter the AN MODULE MGMT IP ADDRESS ip/prefixlen: 10.38.129.231/18 Please enter the GATEWAY IP ADDRESS ip: 10.38.128.1
SteelCentral™ Enterprise NetProfiler Appliance Installation Guide
19
Configuration
Next Steps
New Settings: Product: IP Address: Gateway:
CAP-04270-EX 10.38.129.232/18 10.38.128.1
NOTE: Setup will conclude with a reboot of this SteelCentral device. After all modules have rebooted, setup can be completed by logging into the UI at https://10.38.130.33/ Login as admin/admin. NOTICE: All existing settings and logs will be lost. Finish Setup and Reboot? (yes/no):yes
When the Expansion Module reboots, it communicates with the other Enterprise NetProfiler modules as necessary to be added to the system.
Next Steps After the software is configured, the next steps are licensing it and verifying the installation. Refer to:
Chapter 6, “Licensing”
Chapter 7, “Installation verification”
20
SteelCentral™ Enterprise NetProfiler Appliance Installation Guide
CHAPTER 5
Installing new software
This chapter describes how to download the software from the Riverbed Support site and install it in the Enterprise NetProfiler. It provides a checklist section that can be used as a guide for those familiar with installing software from a USB memory stick, and more detailed step-by-step instructions explaining items on the checklist.
“Overview” on page 21
“Checklist” on page 22
“Step 1 - Download the software” on page 23
“Step 2 - Create bootable USB memory sticks” on page 23
“Step 3 - Insert the bootable USB memory stick into the system” on page 24
“Step 4 - Connect to the console port” on page 24
“Step 5 - Configure the BIOS” on page 24
“Step 6 - Install the software” on page 25
“Step 7 - Remove the USB memory stick” on page 25
“Steps 8 through 11 - Run the configuration wizard” on page 25
“Step 12 - Log into the web user interface” on page 27
“Expansion Modules” on page 28
“Dispatcher Module” on page 29
Overview The Enterprise NetProfiler is shipped from the factory with its software already installed. You can configure the factory-installed software and begin using the product, or you can perform a complete installation of software downloaded from the Riverbed Support site. To configure and run the factory-installed software, refer to Chapter 4, “Configuration.” To download a new copy of the software from the Riverbed Support site, follow the instructions in this chapter.
SteelCentral™ Enterprise NetProfiler Appliance Installation Guide
21
Installing new software
Checklist
Checklist Briefly, the installation procedure involves the following tasks: 1. Download the software installation image file from the Riverbed Support site. 2. Create three bootable (live) USB memory sticks; one for each of the basic three Enterprise NetProfiler Modules. Alternatively, you can install the software on one module at a time. 3. Plug the bootable USB memory stick into a USB connector on the back of the Database Module chassis. 4. Connect a laptop or other device to the CONSOLE connector using the RJ45 to 9-pin D-subminiature cable supplied in the accessory kit and any necessary connector converter. The cable wiring is listed in Appendix A, “Specifications.” 5. Switch on or power-cycle the Database Module. During the power-on self-test (POST) sequence, configure the BIOS to boot from an external USB device. The power switch is located in the upper right corner of the front of the chassis. 6. When the system boots from your USB stick and displays the boot prompt, enter “install” and wait for the system to install the software. This requires approximately 20 minutes. During this time you can perform Steps 3 through 6 on the User Interface Module and the Analysis Module. That is, all three modules can be installing the software at the same time from separate USB memory sticks. However, the initial software configuration must be performed on the Database Module first, then on the UI Module, and finally on the Analysis Module, in that order After the installation process completes, the USB memory stick can be removed. If it is not removed, the system boots from the USB and presents the “boot” prompt again. 7. When the software installation has completed and the “boot” prompt is displayed, remove the USB memory stick and power-cycle the appliance. After the system reboots, the login prompt is displayed. 8. Run the configuration wizard.
Note: It is necessary to run the configuration wizard on the Database Module first, then on the UI Module, and finally on the Analysis Module, in that order.
To run the configuration wizard, log in using “admin” for your user name and “admin” for your password. 9. Enter the required information when prompted by the configuration wizard. The system reboots when you exit from the configuration wizard. Wait for it to finish rebooting before continuing to the next step. 10. After the Database Module finishes rebooting, perform Steps 7, 8 and 9 on the User Interface Module. (Remove the USB stick, log in using admin/admin, and run the configuration wizard.) 11. After the User Interface Module finishes rebooting, perform Steps 7, 8 and 9 on the Analysis Module. (Remove the USB stick, log in, and run the configuration wizard.)
22
SteelCentral™ Enterprise NetProfiler Appliance Installation Guide
Step 1 - Download the software
Installing new software
12. Log into the web user interface from a management console on the network. Point your web browser to the IP address that you specified for the UI Module in the configuration wizard and log in using “admin” for your user name and “admin” for your password. 13. The first time you log in, the initial Setup page is displayed. Enter the required information in all the fields marked with an asterisk (*). 14. At the bottom of the Setup page, click Configure Now to complete the configuration. 15. When prompted, enter a new password for the web user interface. If the NetProfiler has an Internet connection, it will attempt to download licenses from the Riverbed licensing server. Alternatively, you can either add or download applicable licenses using the NetProfiler Configuration > Licenses page. Refer to Chapter 6, “Licensing.” If your system includes Expansion Modules and a Dispatcher Module, you can install them now by performing the same actions described in Steps 3 through 9 for the other modules. With no external USB memory stick installed, the modules will boot off their internal disks if they lose power or are power-cycled. However, it may be preferable to reconfigure the BIOS to exclude external USB sticks from the boot order. The sections that follow describe the installation process in greater detail.
Step 1 - Download the software Download the installation software from the Riverbed Support site: https://support.riverbed.com This requires an account on the Support site. If you do not have an account, follow the directions on the Support site to set one up. The Support site provides both .usb and .iso versions of the installation file.
Step 2 - Create bootable USB memory sticks You can install the software on each Enterprise NetProfiler Module individually from a single USB memory stick, or, to save time, you can load the Database Module, User Interface Module and Analysis Module simultaneously, using three USB memory sticks. Enterprise NetProfiler software can be loaded on to a USB memory stick using standard procedures. For example, on a Linux system you can create a bootable (live) USB stick from the downloaded .usb file by mounting the USB stick and entering: sudo dd if=/ of=/dev/usb bs=1M
Or you can use a universal USB installer tool to transfer the .iso file to a USB memory stick in a Microsoft Windows environment.
SteelCentral™ Enterprise NetProfiler Appliance Installation Guide
23
Installing new software
Step 3 - Insert the bootable USB memory stick into the system
Step 3 - Insert the bootable USB memory stick into the system USB connectors are located on the front of the chassis. Insert the memory stick into any USB connector on the Database Module.
Step 4 - Connect to the console port 1. Using a console cable, connect a laptop or other device to the CONSOLE connector. 2. Set the device’s terminal emulator to 9600 Baud, 8 data bits, 1 stop bit, no parity bit, and no flow control.
Step 5 - Configure the BIOS The default BIOS configuration causes the product to boot the factory-installed software from an internal disk. To boot from an external USB memory stick, you must change the BIOS configuration as follows: 1. Use the power switch to power-cycle the system. The power switch is located in the upper right corner of the front of the chassis. 2. During the POST (power-on self-test) sequence, press F2 to start the BIOS configuration tool. 3. On the Advanced menu:
Select “USB Configuration” and press Enter.
Select “Make USB Devices Non-bootable” and press Enter.
Select “Disabled” and press Enter.
Press Esc to go back to the previous menu.
4. From the EXIT menu, select “Save Changes and Exit” and press Enter. 5. Select OK in the resulting screen to save the changes and exit the BIOS configuration tool.
24
SteelCentral™ Enterprise NetProfiler Appliance Installation Guide
Step 6 - Install the software
Installing new software
Step 6 - Install the software 1. When the system finishes booting from your USB memory stick, enter “install” at the prompt. Software installation requires approximately 20 minutes and can be performed on all three modules concurrently. However, the initial software configuration must be performed on the Database Module first, then on the UI Module, and finally on the Analysis Module, in that order. After the installation process completes, the USB memory stick can be removed. If it is not removed, the system boots from the USB and presents the “boot” prompt again. 2. Perform Steps 3 through 6 on the User Interface Module and the Analysis Module.
Step 7 - Remove the USB memory stick When the software installation has completed and the “boot” prompt is displayed, remove the USB memory stick and power-cycle the appliance. After the system reboots, the login prompt is displayed.
Steps 8 through 11 - Run the configuration wizard Note: It is necessary to run the configuration wizard on the Database Module first, then on the User Interface Module, and finally on the Analysis Module, in that order.
Configure the Database Module Configure the Database (DB) Module as follows: 1. Using a terminal emulator connected to the console port of the chassis as described in Step 4 above, log in at the localhost.localdomain login prompt using “admin” for your user name and “admin” for your password. 2. When the configuration wizard starts, enter the required information at the prompts. For example: Press up arrow to access these addresses or ctrl+c to restart Discovered IPv4 address 10.38.130.34/18 Discovered IPv6 address 2600:809:200:1a02:100:0:a26:8222/64
SteelCentral™ Enterprise NetProfiler Appliance Installation Guide
25
Installing new software
Steps 8 through 11 - Run the configuration wizard
Please enter the UI MODULE MGMT IP ADDRESS ip/prefixlen: 10.38.130.33/18 Please enter the DB MODULE MGMT IP ADDRESS ip/prefixlen: 10.38.130.34/18 Please enter the AN MODULE MGMT IP ADDRESS ip/prefixlen: 10.38.127.157/18 Please enter the GATEWAY IP ADDRESS ip: 10.38.128.1 Please enter the password for the mazu, dhcp, root, and admin shell users: ******** Please re-enter the password: ******** New Settings: Product: IP Address: Gateway:
CAP-04270-DB 10.38.130.34/18 10.38.128.1
NOTE: Setup will conclude with a reboot of this SteelCentral device. After all modules have rebooted, setup can be completed by logging into the UI at https://10.38.130.33/ Login as admin/admin. NOTICE: All existing settings and logs will be lost. Finish Setup and Reboot? (yes/no): yes
3. Wait until the system reboots before configuring the User Interface Module.
Configure the User Interface Module Configure the User Interface (UI) Module as follows: 1. Using a terminal emulator connected to the console port of the chassis as described in Step 4 above, log in at the localhost.localdomain login prompt using “admin” for your user name and “admin” for your password. 2. When the configuration wizard starts, enter the required information at the prompts. For example: Press up arrow to access these addresses or ctrl+c to restart Discovered IPv4 address 10.38.130.33/18 Discovered IPv6 address 2600:809:200:1a02:100:0:a26:8221/64 Please enter the UI MODULE MGMT IP ADDRESS ip/prefixlen: 10.38.130.33/18 Please enter the DB MODULE MGMT IP ADDRESS ip/prefixlen: 10.38.130.34/18 Please enter the AN MODULE MGMT IP ADDRESS ip/prefixlen: 10.38.129.157/18 Please enter the GATEWAY IP ADDRESS ip: 10.38.128.1 New Settings: Product: IP Address: Gateway:
26
CAP-04270-UI 10.38.130.33/18 10.38.128.1
SteelCentral™ Enterprise NetProfiler Appliance Installation Guide
Step 12 - Log into the web user interface
Installing new software
NOTE: Setup will conclude with a reboot of this SteelCentral device. After all modules have rebooted, setup can be completed by logging into the UI at https://10.38.130.33/ Login as admin/admin. NOTICE: All existing settings and logs will be lost. Finish Setup and Reboot? (yes/no):yes
3. Wait until the system reboots before configuring the Analysis Module.
Configure the Analysis Module Configure the analysis (AN) Module as follows: 1. Using a terminal emulator connected to the console port of the chassis as described in Step 4 above, log in at the localhost.localdomain login prompt using “admin” for your user name and “admin” for your password. 2. When the configuration wizard starts, enter the required information at the prompts. For example: Press up arrow to access these addresses or ctrl+c to restart Discovered IPv4 address 10.38.129.231/18 Discovered IPv6 address 2600:809:200:1a02:100:0:a26:8221/64 Please enter the UI MODULE MGMT IP ADDRESS ip/prefixlen: 10.38.130.33/18 Please enter the DB MODULE MGMT IP ADDRESS ip/prefixlen: 10.38.130.34/18 Please enter the AN MODULE MGMT IP ADDRESS ip/prefixlen: 10.38.129.231/18 Please enter the GATEWAY IP ADDRESS ip: 10.38.128.1 New Settings: Product: IP Address: Gateway:
CAP-04270-AN 10.38.129.231/18 10.38.128.1
NOTE: Setup will conclude with a reboot of this SteelCentral device. After all modules have rebooted, setup can be completed by logging into the UI at https://10.38.130.33/ Login as admin/admin. NOTICE: All existing settings and logs will be lost. Finish Setup and Reboot? (yes/no):yes
3. After the system reboots, continue to the next step.
Step 12 - Log into the web user interface Using a system on the management network, log into the web user interface as follows:
SteelCentral™ Enterprise NetProfiler Appliance Installation Guide
27
Installing new software
Expansion Modules
1. Point your web browser to the IP address that you specified for the User Interface Module in the configuration wizard. 2. Log into the web user interface using “admin” for your user name and “admin” for your password. 3. The first time you log in, the initial Setup page is displayed. Enter the required information in all the fields marked with an asterisk (*). 4. At the bottom of the Setup page, click Configure Now to complete the configuration. 5. When prompted, enter a new password for the web user interface. This completes the installation of the three basic modules of the Enterprise NetProfiler. If the NetProfiler has an Internet connection, it will attempt to download licenses from the Riverbed licensing server. Alternatively, you can either add or download applicable licenses from the NetProfiler Configuration > Licenses page. Refer to the next chapter on Licensing. If your system includes Expansion Modules and Dispatcher Modules, you can install them now by performing the same actions described for the other modules.
Expansion Modules Expansion Modules can be installed and configured concurrently and in any order. Also, it is not necessary to log into the web user interface to complete their installation. For each Expansion Module: 1. Plug in the bootable USB memory stick. 2. Use a terminal emulator program and a console cable to connect a laptop or other device to the CONSOLE connector as described in Step 4 - Connect to the console port above. 3. Switch on or power-cycle the module. The power switch is located in the upper right corner of the front of the chassis. During the POST sequence, configure the BIOS to boot from an external USB device as described in Step 5 - Configure the BIOS above. 4. When the system boots from your USB stick and displays the boot prompt, enter “install” and wait for the system to install the software. This requires approximately 20 minutes. After the installation process completes, the USB memory stick can be removed. If it is not removed, the system boots from the USB and presents the “boot” prompt again. During this time you can perform Steps 1 through 3 on any other Expansion Modules you are installing. 5. When the software installation has completed and the “boot” prompt is displayed, remove the USB memory stick and power-cycle the appliance. After the system reboots, the login prompt is displayed. 6. Log in at the login prompt using “admin” for your user name and “admin” for your password. 7. When the configuration wizard starts, enter the required information at the prompts. For example: Press up arrow to access these addresses or ctrl+c to restart Discovered IPv4 address 10.38.129.232/18 Discovered IPv6 address 2600:809:200:1a02:100:0:a26:8221/64
28
SteelCentral™ Enterprise NetProfiler Appliance Installation Guide
Dispatcher Module
Installing new software
Please enter the UI MODULE MGMT IP ADDRESS ip/prefixlen: 10.38.130.33/18 Please enter the DB MODULE MGMT IP ADDRESS ip/prefixlen: 10.38.130.34/18 Please enter the AN MODULE MGMT IP ADDRESS ip/prefixlen: 10.38.129.231/18 Please enter the GATEWAY IP ADDRESS ip: 10.38.128.1 New Settings: Product: IP Address: Gateway:
CAP-04270-EX 10.38.129.232/18 10.38.128.1
NOTE: Setup will conclude with a reboot of this SteelCentral device. After all modules have rebooted, setup can be completed by logging into the UI at https://10.38.130.33/ Login as admin/admin. NOTICE: All existing settings and logs will be lost. Finish Setup and Reboot? (yes/no):yes
When the Expansion Module reboots, it communicates with the other Enterprise NetProfiler modules as necessary to be added to the system.
Dispatcher Module A Dispatcher Module must be installed if your Enterprise NetProfiler has more than three Expansion Modules. It can be installed before or after the Expansion Modules. You do not need to log in to the web user interface as part of the installation. To install a Dispatcher Module: 1. Plug in the bootable USB memory stick. 2. Use a terminal emulator program and a console cable to connect a laptop or other device to the CONSOLE connector as described in Step 4 - Connect to the console port above. 3. Switch on or power-cycle the module. During the POST sequence, configure the BIOS to boot from an external USB device as described in Step 5 - Configure the BIOS above. 4. When the system boots from your USB stick and displays the boot prompt, enter “install” and wait for the system to install the software. This requires approximately 20 minutes. After the installation process completes, the USB memory stick can be removed. If it is not removed, the system boots from the USB and presents the “boot” prompt again. 5. When the software installation has completed and the “boot” prompt is displayed, remove the USB memory stick and power-cycle the appliance. After the system reboots, the login prompt is displayed. 6. Log in at the login prompt using “admin” for your user name and “admin” for your password.
SteelCentral™ Enterprise NetProfiler Appliance Installation Guide
29
Installing new software
Dispatcher Module
7. When the configuration wizard starts, enter the required information at the prompts. For example: Press up arrow to access these addresses or ctrl+c to restart Discovered IPv4 address 10.38.129.233/18 Discovered IPv6 address 2600:809:200:1a02:100:0:a26:8221/64 Please enter the UI MODULE MGMT IP ADDRESS ip/prefixlen: 10.38.130.33/18 Please enter the DB MODULE MGMT IP ADDRESS ip/prefixlen: 10.38.130.34/18 Please enter the AN MODULE MGMT IP ADDRESS ip/prefixlen: 10.38.129.231/18 Please enter the GATEWAY IP ADDRESS ip: 10.38.128.1 New Settings: Product: IP Address: Gateway:
CAP-04270-DP 10.38.129.233/18 10.38.128.1
NOTE: Setup will conclude with a reboot of this SteelCentral device. After all modules have rebooted, setup can be completed by logging into the UI at https://10.38.130.33/ Login as admin/admin. NOTICE: All existing settings and logs will be lost. Finish Setup and Reboot? (yes/no):yes
When the Dispatcher Module reboots, it takes the IP address that you assigned to the Analysis Module and gives the Analysis Module the IP address that you assigned to the Dispatcher Module in the dialog above. The exchange of IP addresses between the Dispatcher and Analysis Modules is performed automatically. After the new software is installed and configured, the next steps are licensing it and verifying the installation.
30
SteelCentral™ Enterprise NetProfiler Appliance Installation Guide
CHAPTER 6
Licensing
After Enterprise NetProfiler has been installed and configured to be reachable on the management network, the licenses must be set up. This chapter describes:
“Automatic licensing” on page 31
“Manual licensing” on page 32
“Licensing multiple products with different features” on page 33
Automatic licensing Licensing can be performed automatically if Enterprise NetProfiler has Internet access and:
You are licensing only one Enterprise NetProfiler, or
You are licensing multiple Enterprise NetProfiler appliances that all have the same features and capacities.
If you are licensing multiple Enterprise NetProfiler appliances to run with different features or capacities, then it is necessary to go to the Riverbed licensing web site and assign the licenses to the serial numbers of the products. See “Licensing multiple products with different features” on page 33. To license a single Enterprise NetProfiler that has Internet access, it is not necessary to go to the licensing website. Instead, just confirm that the licenses are active as follows: 1. Log in to the Enterprise NetProfiler web user interface “admin” account. 2. Go to the Configuration > Licenses page and check the License Key column.
If the License Key column lists an “MSPEC” license key, then NetProfiler has downloaded its licenses from the licensing web site and you can proceed with installation verification. See Chapter 7, “Installation verification.”
If no “MSPEC” license key is listed, then NetProfiler has not downloaded its license keys.
3. If the license keys have not been downloaded, click Fetch Updates Now. The license keys will be listed within a few minutes. 4. Confirm that the licenses are listed on the Configuration > Licenses page and that the status of each is green. If you select the Enable automatic license download from Riverbed option on the Configuration > Licenses page, the appliance checks for any additional licenses once per day.
SteelCentral™ Enterprise NetProfiler Appliance Installation Guide
31
Licensing
Manual licensing
When the license key for flow capacity is listed, the product is ready for operation and you can proceed with installation verification. See Chapter 7, “Installation verification.”
Manual licensing If the NetProfiler does not have access to the Internet, then it is necessary to add the license keys manually, as follows: 1. Obtain the serial numbers for the appliance to be licensed. If you did not record them during the configuration step, you can find them on the chassis. The number identified as “SN” is the product serial number of a chassis. It is located on the pull-out tab near the upper-left corner of the front of the chassis. 2. Point your browser to the Riverbed licensing portal: https://licensing.riverbed.com 3. Enter the product serial number. This displays a table listing the serial numbers of all the SteelCentral products purchased on the same purchase order as the appliance whose serial numbers you entered. 4. Follow the instructions of the licensing wizard to generate the license keys. 5. Either choose the option to email the license keys to yourself, or else copy the keys from the Activated License Key column of the table. 6. Place the keys in a file that is accessible to the machine you are using for configuring Enterprise NetProfiler. 7. Log in to the Enterprise NetProfiler web user interface “admin” account. 8. On the NetProfiler, navigate to the Configuration > Licenses page and click Add License(s). 9. Paste or type the license keys into the Licenses page. When entering more than one license key, use a commaseparated list. 10. Confirm that the licenses are listed on the Configuration > Licenses page and that the status of each is green.
32
SteelCentral™ Enterprise NetProfiler Appliance Installation Guide
Licensing multiple products with different features
Licensing
When the license keys have been added, Enterprise NetProfiler ready for installation verification. See Chapter 7, “Installation verification.”
Licensing multiple products with different features If you are licensing multiple Enterprise NetProfiler appliances with different features or capacities, ensure that the correct capacity licenses are assigned to the correct appliance as follows: 1. Obtain the serial number for each appliance to be licensed. If you did not record them during the configuration step, you can find them on the chassis. The number identified as “SN” is the product serial number for the chassis. It is located on the pull-out tab near the upper-left corner of the front of the chassis. 2. Point your browser to the Riverbed licensing portal: https://licensing.riverbed.com 3. Enter the product serial number. This displays a table listing the serial numbers of all the SteelCentral products purchased on the same purchase order as the appliance whose serial numbers you entered. 4. Use the drop-down list boxes in the Software column for each serial number to assign the correct licenses to each appliance. Select or multi-select the licenses you want to activate for each Enterprise NetProfiler module or other SteelCentral product. 5. Follow the instructions of the licensing wizard to continue the process and generate the license keys. 6. For products that do not have Internet access, email the license keys to yourself or copy and paste them into a text file for manually loading them. 7. Log in to the Enterprise NetProfiler web user interface “admin” account. 8. Go to the Configuration > Licenses page. 9. Click Add License(s) and paste or type the license keys into the Licenses page. When entering more than one license key, use a comma-separated list.
10. Confirm that the licenses are listed on the Configuration > Licenses page and that the status of each is green. When the license keys have been added, Enterprise NetProfiler is ready for installation verification. See Chapter 7, “Installation verification.”
SteelCentral™ Enterprise NetProfiler Appliance Installation Guide
33
Licensing
34
Licensing multiple products with different features
SteelCentral™ Enterprise NetProfiler Appliance Installation Guide
CHAPTER 7
Installation verification
Installation verification requires Enterprise NetProfiler to be receiving traffic data from at least one source. To determine if it is receiving data, log in and navigate to the System > Devices/Interfaces page. Check the status of Flow Gateway, NetShark or other data source devices on the Devices tab. When a data source comes online, Enterprise NetProfiler begins collecting data.
If no data sources are listed on the System > Devices/Interfaces page Devices tab, then the Enterprise NetProfiler installation and configuration cannot be verified. Set up at least one data source device (preferably all data source devices) and then perform the installation verification as follows. 1. Go to the Dashboard page and verify that the graphs display data. 2. Go to the System > Information page and assure that all status indications are displaying OK. 3. Go to the System > Devices/Interfaces page and assure that each data source that is expected to be available is listed and that no status indicators are red. 4. Go to the Reports > Traffic page. 5. Near the bottom of the Report Criteria section, click Run now. 6. Verify that a traffic report is displayed. (It will take a short time for the report to display.)
SteelCentral™ Enterprise NetProfiler Appliance Installation Guide
35
Installation verification
This completes the installation process. Enterprise NetProfiler can now be turned over to those who are responsible for setting up user accounts and operational parameters. Refer to the on line help system for further configuration procedures.
36
SteelCentral™ Enterprise NetProfiler Appliance Installation Guide
CHAPTER 8
Expanding capacity
The capacity of an Enterprise NetProfiler can be expanded by adding Expansion Modules to your existing system. NetProfiler can include up to nine Expansion Modules. If your system includes more than four Expansion Modules, a Dispatcher Module must be installed before you install the fifth Expansion Module. The new Expansion Modules and Dispatcher Modules must run the same version of the software as the rest of the system.
Overview The procedure for adding Expansion Modules is as follows. 1. Create an installation directory on the UI Module. 2. Identify the software version of your Enterprise NetProfiler. 3. Locate the installation file on the Riverbed Support site. 4. Place the installation file in the installation directory. 5. Configure the new Expansion Modules up to a total of four Expansion Modules for the system. 6. Configure the new Dispatcher Module (if a fifth Expansion Module will be installed). 7. Configure any remaining Expansion Modules. While the installation of the first Expansion Module is in progress, you can move on to install the next one. If the expanded system will include more than four Expansion Modules, then you must install a Dispatcher Module before installing the fifth Expansion Module. The Dispatcher Module installation uses the same .iso file as the Expansion Modules, so the installation procedure is the same except for when entering the product code in the setup wizard. After installing the Dispatcher Module, you can continue to install the remaining Expansion Modules. Each of these steps is described in more detail in the sections that follow.
SteelCentral™ Enterprise NetProfiler Appliance Installation Guide
37
Expanding capacity
Step 1 - Create an installation directory on the UI Module
Step 1 - Create an installation directory on the UI Module 1. Use a terminal emulator to open an SSH connection to the CLI of the UI Module. 2. Log in to the mazu account. 3. Create a directory to contain the software image: sudo mkdir /mnt/spare/install This specific name is required.
Step 2 - Identify the software version The NetProfiler software version is listed on the “About” page. Pull down the Help menu in the upper right corner of the NetProfiler user interface page and click About to open the page.
Step 3 - Locate the installation file 1. Go to support.riverbed.com and navigate to Software & Documentation > SteelCentral Network Performance Management > SteelCentral NetProfiler. 2. Display the page for the version of the software your NetProfiler is running. 3. Choose SteelCentral Install (ISO Image) and enter your credentials when prompted.
Step 4 - Place the installation file in the installation directory There are several possible ways to do this. If the NetProfiler has Internet access, you could download the installation file directly from the UI Module CLI: cd /mnt/spare/install/ sudo wget Alternatively, you could download the installation file to another location on the management network and use sudo scp mnt/spare/install to copy it from that location to the installation directory on the UI Module.
38
SteelCentral™ Enterprise NetProfiler Appliance Installation Guide
Step 5 - Configure the new Expansion Module
Expanding capacity
Step 5 - Configure the new Expansion Module For each Expansion Module up to the fourth module in the system: 1. Ensure that the Expansion Module is connected to line power and to the same switch on the management network as the UI Module. 2. Using a console cable, connect a laptop or other device to the CONSOLE connector of the Expansion Module.
3. Log in at the login prompt using “admin” for your user name and “admin” for your password. 4. When the configuration wizard starts, it displays the product model and serial number. 5. Enter the required information at the following prompts. For example: Press up arrow to access these addresses or ctrl+c to restart Discovered IPv4 address 10.38.129.232/18 Discovered IPv6 address 2600:809:200:1a02:100:0:a26:8221/64 Please enter the UI MODULE MGMT IP ADDRESS ip/prefixlen: 10.38.130.33/18 Please enter the DB MODULE MGMT IP ADDRESS ip/prefixlen: 10.38.130.34/18 Please enter the AN MODULE MGMT IP ADDRESS ip/prefixlen: 10.38.129.231/18 Please enter the GATEWAY IP ADDRESS ip: 10.38.128.1 New Settings: Product: IP Address: Gateway:
CAP-04270-EX 10.38.129.232/18 10.38.128.1
NOTE: Setup will conclude with a reboot of this SteelCentral device. After all modules have rebooted, setup can be completed by logging into the UI at https://10.38.130.33/ Login as admin/admin. NOTICE: All existing settings and logs will be lost. Finish Setup and Reboot? (yes/no):yes
SteelCentral™ Enterprise NetProfiler Appliance Installation Guide
39
Expanding capacity
Step 6 - Configure the new Dispatcher Module
When the Expansion Module reboots, it communicates with the other Enterprise NetProfiler modules as necessary to install the software and be added to the system. The Expansion Module may reboot several times during the installation process, and it may take one to two hours for the module to be fully integrated and functioning as part of the system.
Step 6 - Configure the new Dispatcher Module If the configuration will include more than four Expansion Modules, install a Dispatcher Module as follows before installing the fifth Expansion Module. 1. Ensure that the Expansion Module is connected to line power and to the same switch on the management network as the UI Module. 2. Using a console cable, connect a laptop or other device to the CONSOLE connector of the Dispatcher (DP) Module.
3. Log in at the login prompt using “admin” for your user name and “admin” for your password. 4. When the configuration wizard starts, it displays the product model and serial number. If you will be activating the licenses manually, record this information to use during license activation. 5. Enter the required information at the following prompts. For example: Press up arrow to access these addresses or ctrl+c to restart Discovered IPv4 address 10.38.129.233/18 Discovered IPv6 address 2600:809:200:1a02:100:0:a26:8221/64 Please enter the UI MODULE MGMT IP ADDRESS ip/prefixlen: 10.38.130.33/18 Please enter the DB MODULE MGMT IP ADDRESS ip/prefixlen: 10.38.130.34/18 Please enter the AN MODULE MGMT IP ADDRESS ip/prefixlen: 10.38.129.231/18 Please enter the GATEWAY IP ADDRESS ip: 10.38.128.1 New Settings: Product: IP Address: Gateway:
CAP-04270-DP 10.38.129.233/18 10.38.128.1
NOTE: Setup will conclude with a reboot of this SteelCentral device. After all modules have rebooted, setup can be completed by logging into the UI at https://10.38.130.33/ Login as admin/admin.
40
SteelCentral™ Enterprise NetProfiler Appliance Installation Guide
Step 7 - Configure any remaining Expansion Modules
Expanding capacity
NOTICE: All existing settings and logs will be lost. Finish Setup and Reboot? (yes/no):yes
When the Dispatcher Module reboots, it takes the IP address that you assigned to the Analysis Module and gives the Analysis Module the IP address that you assigned to the Dispatcher Module in the dialog above. The exchange of IP addresses between the Dispatcher and Analysis Modules is performed automatically. The Dispatcher Module may reboot several times during the installation process, and it may take one to two hours for the module to be fully integrated and functioning as part of the system. When the installation is complete you can set up link aggregation (channel bonding) to improve performance as described in Chapter 3, “Cabling.”
Step 7 - Configure any remaining Expansion Modules If there are additional Expansion Modules to install, install and configure them as described in Step 5.
SteelCentral™ Enterprise NetProfiler Appliance Installation Guide
41
Expanding capacity
42
Step 7 - Configure any remaining Expansion Modules
SteelCentral™ Enterprise NetProfiler Appliance Installation Guide
APPENDIX A
Specifications
This chapter describes:
“Console cable wiring” on page 43
“Controls and indicators” on page 44
“Mechanical and electrical specifications” on page 46
Console cable wiring The console cable provided in the accessory kit has an RJ45 connector on one end and a 9-pin D-subminiature connector on the other end. The connectors are wired as follows: RJ45 Connector
9-pin D-subminiature Connector
1
8
RTS
Request to send
2
6
DTR
Data terminal ready
3
2
SOUT (TxD)
Serial output (Transmit data)
4
5
GND
Ground
5
5
RI
Ring indicator
6
3
SIN (RxD)
Serial input (Receive data)
7
4
DCD or DSR
Data carrier detect or Data set ready
8
7
CTS
Clear to send
RJ45
Signal Name
Description
D-subminiature
SteelCentral™ Enterprise NetProfiler Appliance Installation Guide
43
Specifications
Controls and indicators
Controls and indicators Front panel The panel near the upper right corner of the front of the User Interface, Database and Dispatcher Modules includes the following controls and indicators:
The panel on the right ear of the front of the Analysis and Expansion Modules includes the following controls and indicators:
Callout
44
Name
Description
A
System ID button
Press this button to light a blue LED in the button and on the back of the chassis. This makes it easier to identify the chassis from the front and back of the rack.
B
Non-maskable Interrupt
This button is recessed and is not for customer use.
C
Primary port activity indicator
When a connection is detected on the Primary (PRI) port, this green LED lights. When there is activity on the connection, the LED blinks.
D
Not used.
E
Reset button
Press this button to reboot the system.
F
System status indicator
Described below.
G
Power button
Switches power on and off. Lights green to indicate the chassis is powered on. Lights amber to indicate a problem in the chassis.
H
Hard drive activity indicator
Indicates hard drive activity in the chassis.
I
Not used.
J
Auxiliary port activity indicator
When a connection is detected on the Auxiliary (AUX) port, this green LED lights. When there is activity on the connection, the LED blinks.
SteelCentral™ Enterprise NetProfiler Appliance Installation Guide
Controls and indicators
Specifications
System status indicator The hardware system status indicator is located on the panel on the right ear of the front of the 2U chassis and on the panel in the upper right corner of the 1U chassis. It indicates the overall health of the power supplies, fans, CPU and memory chips, BMC firmware, storage devices and chassis temperature as follows:
Off - the product is not operating.
Green
–
Continuously on - Normal operation.
–
Blinking - Minor alarm. Degraded operation. The hardware platform is operating, but is not fully functional.
Amber –
Blinking - Major alarm. Non-fatal failure. The hardware platform is still operating in a degraded condition, but is likely to soon halt.
–
Continuously on - Critical alarm. The hardware platform has failed or shut down.
Disk fault indicators Each disk drive has an amber fault indicator. It is necessary to remove the bezel to see the fault indicators. Pull the left end of the bezel to remove it. To reinstall it, hook the right end on to the chassis first.
SteelCentral™ Enterprise NetProfiler Appliance Installation Guide
45
Specifications
Mechanical and electrical specifications
On the User Interface, Database and Dispatcher Modules, the fault indicator on a disk drive lights amber continuously if the disk has failed or if it has not yet been added to the RAID configuration. On the Analysis and Expansion Modules, the fault indicator on a disk drive blinks amber if the disk has failed or if it has not yet been added to the RAID configuration.
Mechanical and electrical specifications Rack space The User Interface (UI) module, Database (DB) module and Dispatcher (DP) module each require one rack unit (1U). The Analysis (AN) and Expansion (EX) modules each require two rack units (2U).
1U Chassis Regulatory compliance code: 1UACA Product models:
SCNP-04270-UI User Interface module
SCNP-04270-DB Database module
SCNP-04270-DP Dispatcher module
Dimensions Height: 43.2 mm, 1.7 in. Width 438 mm, 17.2 in. Depth: 640.4 mm, 25.2 in. Weight: User Interface Module and Database Module: 10.9 kg, 24 lbs Dispatcher Module: 12.2 kg, 27 lbs
2U Chassis Regulatory compliance code: 2UACA Product models:
SCNP-04270-AN Analysis module
SCNP-04270-EX Expansion module
Dimensions Height: 87.6 mm, 3.5 in. Width 438 mm, 17.2 in. Depth: 707.8 mm, 27.9 in. Weight: 24.5 kg, 54 lbs
46
SteelCentral™ Enterprise NetProfiler Appliance Installation Guide
Mechanical and electrical specifications
Specifications
Power All Enterprise NetProfiler modules require:
90V-132V, 47 - 63 Hz
180V-264V, 47 - 63 Hz
The User Interface (UI) module, Database (DB) module and Dispatcher (DP) module each consume up to 128W. The Analysis (AN) module and Expansion (EX) module each consume up to 308W.
Cooling The User Interface (UI) module, Database (DB) module and Dispatcher (DP) module each require approximately435 Btu/hr of cooling. The Analysis (AN) module and Expansion (EX) module each require approximately1049 Btu/hr of cooling. Ambient air should be:
Air temperature: 10° to 35° C (50° to 95° F)
Humidity: 20% to 90% non-condensing
Operating acoustic noise (typical):
7.0 BA (Operating condition in a typical office ambient temperature of 23 +/- 2 deg C)
SteelCentral™ Enterprise NetProfiler Appliance Installation Guide
47
Specifications
48
Mechanical and electrical specifications
SteelCentral™ Enterprise NetProfiler Appliance Installation Guide
SteelCentral™ Enterprise NetProfiler Appliance Installation Guide
49
Riverbed Technology 680 Folsom Street San Francisco, CA 94107 Phone: 415.247.8800 Fax: 415.247.8801 Web: http://www.riverbed.com
Part Number 712-00267-05
