Juniper NETWORKS Kukwidziridza Kudzora Center kubva mushanduro 2.34

Nhanganyaya

Gwaro iri rine chekuita nekukwidziridzwa kweParagon Active Assurance Control Center kubva mushanduro 2.34 kuenda kune imwe vhezheni. Iko kukwidziridzwa kunosanganisira maitiro akasarudzika sezvo kunosanganisira kusimudzira iyo Ubuntu OS kubva 16.04 kusvika 18.04. Gwaro racho rinobata zviitiko zviviri:

• Kukwidziridzwa kweUbuntu 16.04 (ine Control Center yakaiswa) kuUbuntu 18.04.
• Kuiswa patsva kweUbuntu 18.04 kuchiteverwa nekuiswa kweKudzora Center uye kuendesa data rekuchengetedza kubva kune yekare Kudzora Center muenzaniso kuenda kuchiitiko chitsva.

Kuti uwane mamwe magadzirirwo, ndapota tarisa kuKukwidziridza Gwaro.

Mamiriro A: Kukwidziridzwa kweUbuntu 16.04 kuUbuntu 18.04

• Tanga nekudzima apache2 uye net kutenderera-kufona execute masevhisi:
• Misa ese Paragon Active Assurance masevhisi:
• Tora mabhapu eParagon Active Assurance chigadzirwa data.

CHERECHEDZA: Iyi ndiyo nzira yekuchengetedza yakatsanangurwa muBhuku reKushanda, chitsauko Backing Up Product Data, inongotaurwa muchidimbu.

Mhanya mirairo iyi:

CHERECHEDZA: Mutemo we pg_dump uchakumbira password inogona kuwanikwa mukati /etc/netrounds/netrounds.conf pasi pe "postgres database". Iyo yakasarudzika password ndeye "netrounds".

CHERECHEDZA: Yekuseta kwakakura (> 50 GB), kugadzira tarball yeRRD files inogona kutora nguva yakareba, uye kutora mufananidzo wevhoriyamu inogona kuve iri nani zano. Mhinduro dzingangoitwa pakuita izvi dzinosanganisira: kushandisa a file system inotsigira snapshots, kana kutora snapshot yevhoriyamu chaiyo kana sevha iri kushanda munzvimbo chaiyo.

• Tarisa kuperera kwedatabase uchishandisa yakapihwa script netrounds_2.35_validate_db.sh.

YAMBIRO: Kana chinyorwa ichi chikabuda yambiro, usaedze nzira yekufambisa dhatabhesi inotsanangurwa "pazasi" papeji 5. Bata juniper rutsigiro nekuisa tikiti pa. https://support.juniper.net/support/requesting-support (kupa zvakabuda kubva muscript) kuti matambudziko ane database agadziriswe usati waenderera mberi nekusimudzira.

• Tora ma backups eiyo Control Center kumisikidzwa files:

For example:

• Simudzira Ubuntu kushanduro 18.04. A yakajairika kusimudzira maitiro ndeaya anotevera (akagadziriswa kubva https://wiki.ubuntu.com/BionicBeaver/ReleaseNotes):
• Kuvandudza pane server system:
• Isa update-maneja-core kana isati yatoiswa.
• Ita shuwa kuti Prompt line mu /etc/update-manager/release-upgrades yakaiswa ku'lts' (kuti ive nechokwadi chekuti OS inokwidziridzwa kusvika ku18.04, inotevera LTS vhezheni mushure me16.04).
• Tangisa chishandiso chekusimudzira nemurairo sudo do-release-upgrade.
• Tevera mirairo yepa-screen. Nekuda kweParagon Active Assurance ine chekuita, unogona kuchengeta izvo zvisiri izvo mukati mese. (Zvinogona kuitika kuti iwe unofanirwa kuita sarudzo dzakasiyana nekuda kwezvikonzero zvisingaenderane neParagon Active Assurance.)
• Kamwe Ubuntu hwave kukwidziridzwa, reboot system. Zvadaro ita matanho anotevera:
• Simudzira PostgreSQL.
• Gadziridza PostgreSQL database files kubva mushanduro 9.5 kusvika kushanduro 10:
• Bvisa iyo yekare vhezheni yePostgreSQL:
• Gadziridza Paragon Active Assurance mapakeji.
• Kokorodza cheki ye tarball ine itsva Control Center vhezheni uye simbisa kuti yakaenzana neSHA256 cheki inopihwa pane yekurodha peji:
• Bvisa iyo Control Center tarball:
• Isa mapeji matsva eKudzora Center:
• Bvisa mapakeji akasakara:

CHERECHEDZA: Zvakakosha kubvisa mapakeji aya.

• Usati waita dhatabhesi kutama, unofanirwa kuita mamwe matanho ekuwedzera. Enda kuchinyorwa chekutanga cheZivo, skira pasi kuchikamu cheZviito kana kuburitswa kwaiswa, uye ita nhanho 1 kusvika 4 yemirairo iyoyo.

CHERECHEDZA: Usaite nhanho yechishanu panguva ino.

• Mhanya kutama kwe database:

CHERECHEDZA: Usati watama, unofanirwa kuve nechokwadi chekuti cheki yekutendeseka yedatabase inotsanangurwa "pamusoro" papeji 2 inopera pasina kukanganisa.

Iyo ncc migrate command inotora nguva yakati rebei kuita (maminetsi mazhinji). Inofanira kudhinda zvinotevera (tsanangudzo dzakasiiwa pazasi):

• (Sarudzo) Gadzirisa iyo ConfD package kana uchida ConfD:
• Enzanisa zvakamboitwa-backup configuration files neachangobva kuiswa, uye nemaoko batanidza zviri mukati memaseti maviri e files (vanofanira kuramba vari munzvimbo dzakafanana).
• Gonesa iyo apache2, Kafka, uye net kutenderera-kufona execute masevhisi:
• Tanga Paragon Active Assurance masevhisi:
• Kuti uvhure iyo nyowani gadziriso, iwe zvakare unofanirwa kumhanya:
• Isa magwaro matsva eAgent Agent:
• Sezvo tsigiro yeTest Agent Lite yakadonhedzwa muvhezheni 2.35, iwe unofanirwa kubvisa ekare Test Agent Lite mapakeji kana iwe waaisa:

CHERECHEDZA: Paunosimudzira kusvika ku3.x gare gare, unofanira kutanga nekumhanyisa uyu murairo: sudo apt-mark unhold python-django python-django-common.

Mamiriro ezvinhu B: Nyowani Ubuntu 18.04 Kuiswa

• PaUbuntu 16.04 muenzaniso, tora mabhapu eParagon Active Assurance chigadzirwa data.

CHERECHEDZA: Iyi ndiyo nzira yekuchengetedza yakatsanangurwa muBhuku reKushanda, chitsauko "Backing Up Product Data", inongotaurwa muchidimbu.

Mhanya mirairo iyi:

CHERECHEDZA: Mutemo we pg_dump uchakumbira password inogona kuwanikwa mukati /etc/netrounds/netrounds.conf pasi pe "postgres database". Iyo yakasarudzika password ndeye "netrounds".

CHERECHEDZA: Yekuseta kwakakura (> 50 GB), kugadzira tarball yeRRD files inogona kutora nguva yakareba, uye kutora mufananidzo wevhoriyamu inogona kuve iri nani zano. Mhinduro dzingangoitwa pakuita izvi dzinosanganisira: kushandisa a file system inotsigira snapshots, kana kutora snapshot yevhoriyamu chaiyo kana sevha iri kushanda munzvimbo chaiyo.

• PaUbuntu 16.04 muenzaniso, tora ma backups eKudzora Center kumisikidzwa files:
• /etc/apache2/sites-available/netrounds-ssl.conf
• /etc/apache2/sites-available/netrounds.conf
• /etc/netrounds/netrounds.conf
• /etc/netrounds/probe-connect.conf
• /etc/openvpn/netrounds.conf

For example:

• PaUbuntu 16.04 muenzaniso, tsigira rezinesi file.
• Iyo nyowani nyowani inoda kugutsa kanenge zvakafanana nehardware zvinodiwa seyechinyakare.
• Pachiitiko chitsva, isa Ubuntu 18.04. Tinokurudzira dzidziso inotevera:
• https://ubuntu.com/tutorials/install-ubuntu-server

Nekuda kweParagon Active Assurance ine chekuita, unogona kuchengeta izvo zvisiri izvo mukati mese. (Zvinogona kuitika kuti iwe unofanirwa kuita sarudzo dzakasiyana nekuda kwezvikonzero zvisingaenderane neParagon Active Assurance.)

• Kamwe Ubuntu 18.04 yaiswa, reboot system.
• Iyo inotevera disk partitioning inokurudzirwa, kunyanya kune snapshot backups (asi zviri kwauri iwe semushandisi kusarudza):
• Inokurudzirwa partition yekuseta lab:
• /: Dhisiki rese, ext4.
• Inokurudzirwa partition yekugadzira kugadzirwa:
• /: 10% yedhisiki nzvimbo, ext4.
• / var: 10% yedhisiki nzvimbo, ext4.
• /var/lib/netrounds/rrd: 80% yedhisiki nzvimbo, ext4.
• Hapana encryption
• Isa iyo nguva yenguva kuUTC, semuenzanisoampizvi sezvinotevera:

• Isa nzvimbo dzese kuen_US.UTF-8.
• Imwe nzira yekuita izvi ndeye kugadzirisa nemaoko file /etc/default/locale. Example:

• Ita shuwa kuti mutsara unotevera HAUNA kutaurwa mu /etc/locale.gen:
• Gadzirisa nzvimbo yacho files kuve nechokwadi kuti mutauro wakasarudzwa uripo:
• Ita shuwa kuti traffic pazviteshi zvinotevera inotenderwa kuenda nekubva Kudzora Center:
• Inbound:
• TCP port 443 (HTTPS): Web interface
• TCP port 80 (HTTP): Web interface (inoshandiswa neSpeedtest, inotungamira imwe URLs kuHTTPS)
• TCP port 830: ConfD (inosarudza)
• TCP port 6000: Yakavharidzirwa OpenVPN yekubatanidza kune Test Agent Zvishandiso
• TCP port 6800: Encrypted WebSocket yekubatanidza yeTest Agent Application
• Outbound:
• TCP port 25 (SMTP): Kuendesa tsamba
• UDP port 162 (SNMP): Kutumira SNMP misungo yemaalarm
• UDP port 123 (NTP): Nguva yekubatanidza
• Isa NTP:
• Kutanga, dzima timedatectl:

1. Mune zvakabuda, kukosha kwe "kusvika" kwemaseva eNTP ikoshi yeoctal inoratidza mhedzisiro yemasere masere ekupedzisira eNTP transaction. Kana ese masere akabudirira, kukosha kuchave octal 377 (= binary
   • Isa PostgreSQL uye gadza mushandisi weKudzora Center:
     Kushandisa yekunze PostgreSQL server haina kukurudzirwa.
   • Isa uye gadzirisa email server.
   • Control Center inotumira maemail kune vashandisi:
   • kana vakokwa kuaccount,
   • paunenge uchitumira maalarm eemail (kureva kana email kwete SNMP ichishandiswa kune chinangwa ichi), uye
   • pakutumira nguva nenguva.
   • Mhanyai murairo
   • Nekuseta kwakareruka uko postfix inogona kutumira yakananga kune yekuenda email server, unogona kuseta Yakajairwa mhando yekumisikidzwa kwetsamba ku "Internet Site", uye zita reSystem mail rinowanzo kusiiwa sezvariri. Zvikasadaro, postfix inoda kugadzirwa zvinoenderana nenharaunda. Kuti uwane nhungamiro, tarisa kune zviri pamutemo Ubuntu zvinyorwa pa https://help.ubuntu.com/lts/serverguide/postfix.html.
   • Isa Kudzora Center pane iyo Ubuntu 18.04 muenzaniso. Iyi nzira zvakare inoisa iyo Paragon Active Assurance REST API.

0b11111111). Nekudaro, kana uchangobva kuisa NTP, zvinokwanisika kuti isingasviki masere matransactions eNTP aitika, kuitira kuti kukosha kuve kudiki: imwe ye1, 3, 7, 17, 37, 77, kana 177 kana zvese kutengeserana zvakabudirira. .

• Misa ese Paragon Active Assurance masevhisi:
• Dzosera kuchengetedza kwedatabase:
• Usati waita dhatabhesi kutama, unofanirwa kuita mamwe matanho ekuwedzera. Enda kuchinyorwa chekutanga cheZivo, skira pasi kuchikamu cheZviito kana kuburitswa kwaiswa, uye ita nhanho 1 kusvika 4 yemirairo iyoyo.
  CHERECHEDZA: Usaite nhanho yechishanu panguva ino.
• Mhanya kutama kwe database:

CHERECHEDZA: Uyu murairo unonzwa, uye kutarisirwa kunofanira kutorwa paunenge uchiuita pamuchina uri kure. Mumamiriro ezvinhu akadai zvinokurudzirwa kuti ushandise chirongwa senge skrini kana tmux kuitira kuti murairo wekufambisa urambe uchishanda kunyangwe ssh sesheni ikaputsika.

Iyo ncc migrate command inotora nguva yakati rebei kuita (maminetsi mazhinji). Inofanira kudhinda zvinotevera (tsanangudzo dzakasiiwa pazasi):

• Chinja data rekuchengetedza kune iyo 18.04 muenzaniso uchishandisa scp kana chimwe chishandiso.
• Dzosera makiyi eOpenVPN:
• Dzosera data reRRD:
• Enzanisa kudzoreredzwa-kugadziriswa files neachangobva kuiswa, uye nemaoko batanidza zviri mukati memaseti maviri e files (vanofanira kuramba vari munzvimbo dzakafanana).
• Shandisa rezinesi yechigadzirwa uchishandisa rezinesi file yakatorwa kubva kuchiitiko chekare:
• Tanga Paragon Active Assurance masevhisi:
• Kuti uvhure iyo nyowani gadziriso, iwe zvakare unofanirwa kumhanya:
• Isa magwaro matsva eAgent Agent:
• (Sarudzo) Tevera iyo NETCONF & YANG API Orchestration Guide kuti uise uye ugadzirise ConfD kana uchiida.

CHERECHEDZA: Paunosimudzira kusvika ku3.x gare gare, unofanira kutanga nekumhanyisa uyu murairo: sudo apt-mark unhold python-django python-django-common.

Kugadzirisa matambudziko

Matambudziko Kutanga ConfD
Kana uine matambudziko ekutanga ConfD mushure mekusimudzira, ndapota taura neJuniper mudiwa wako kana yemuno Juniper account maneja kana mumiriri wekutengesa kuti uwane kunyoreswa kutsva.

Matambudziko Kutanga kufona kuita
Tarisa ma callexecuter logs nemurairo

Unogona kuona kukanganisa sekutevera:

Chii chakaitika ndechekuti the net rounds-call execute*.deb package yakakwidziridzwa pasina kuita chokwadi chekuti net rounds-call execute system service yakamiswa uye yakadzimwa. Database iri mune zvisiri izvo; inoda kudzoserwa kubva kune backup, uye kukwidziridzwa kunoda kudzokororwa. Ita zvinotevera kudzima uye kumisa mambure kutenderera-kufona execute sevhisi:

Web Server Haipinduri

Tarisa maapache matanda nemurairo

Kana iwe ukaona chikanganiso chinotevera, zvinoreva kuti Control Center vhezheni 2.34 iri kushanda paUbuntu 18.04, kureva kuti, Control Center haina kubudirira kukwidziridzwa. Mhinduro ndeyekusimudzira Control Center kune yakazotevera vhezheni sezvakatsanangurwa mugwaro iri.

Kutangazve kweParagon Active Assurance Services Inokundikana

• Kutangazve manetrounds-* masevhisi ne
• inoburitsa meseji inotevera:
• Izvi zvinoreva kuti masevhisi ataurwa akavharwa mukati meiyo nzira yekubvisa mapakeji uye inoda kucheneswa kwemaoko. Nzira yekuchenesa inoratidzwa pasi apa:

Juniper Networks, iyo Juniper Networks logo, Juniper, uye Junos zviratidzo zvakanyoreswa zveJuniper Networks, Inc. muUnited States nedzimwe nyika. Zvimwe zviratidzo zvese, mamakisi ebasa, mamakisi akanyoreswa, kana mamakisi ebasa akanyoreswa zvinhu zvevaridzi vazvo. Juniper Networks haitore mutoro kune chero zvisiri izvo mugwaro iri. Juniper Networks inochengetera kodzero yekuchinja, kugadzirisa, kuendesa, kana kudzokorora chinyorwa ichi pasina chiziviso. Copyright © 2022 Juniper Networks, Inc. Kodzero dzese dzakachengetwa.

Zvinyorwa / Zvishandiso

Juniper NETWORKS Kukwidziridza Kudzora Center kubva mushanduro 2.34 [pdf] Bhuku reMushandisi Upgrading Control Center kubva muVersion 2.34, Control Center kubva muVersion 2.34, Center kubva muVersion 2.34, Version 2.34

References

• User Manual