Juniper NETWORKS Setsi sa Taolo ea ntlafatso ho tloha ho Version 2.34 Guide Guide

Litaba pata

1 Juniper NETWORKS Setsi sa Taolo ea ntlafatso ho tsoa ho Version 2.34

2 Selelekela

3 Boemo B: Kenyelletso e ncha ea Ubuntu 18.04

4 Ho batle phoso

5 Web Seva ha e Arabe

6 Litokomane / Lisebelisoa

6.1 Litšupiso

7 Related Posts

Juniper NETWORKS Setsi sa Taolo ea ntlafatso ho tsoa ho Version 2.34

Selelekela

Tokomane ena e bua ka ntlafatso ea Setsi sa Taolo ea Tiisetso ea Paragon ho tloha ho mofuta oa 2.34 ho ea mofuta oa morao-rao. Ntlafatso e kenyelletsa lits'ebetso tse ikhethang kaha e kenyelletsa ho ntlafatsa Ubuntu OS ho tloha 16.04 ho isa 18.04. Tokomane e akaretsa maemo a mabeli:

Ntlafatso ea Ubuntu 16.04 (e nang le Control Center e kentsoe) ho Ubuntu 18.04.

Ho kengoa bocha ha Ubuntu 18.04 ho lateloe ke ho kenya Setsi sa Taolo le phetisetso ea data ea bekapo ho tloha ketsahalong ea khale ea Setsi sa Taolo ho ea ho e ncha.

Bakeng sa lintlafatso tse ling, ka kopo sheba Tataiso ea Ntlafatso.

Boemo ba A: Ntlafatso ea Ubuntu 16.04 ho Ubuntu 18.04

Qala ka ho tima lits'ebeletso tsa ho etsa li-apache2 le net rounds-call:

Emisa lits'ebeletso tsohle tsa Tiisetso ea Paragon Active:
Fumana likopi tsa data ea sehlahisoa sa Paragon Active Assurance.

HLOKOMELA: Ona ke mokhoa oa ho boloka bekapo o hlalosoang ho Bukana ea Ts'ebetso, khaolo ea Ho Boloka Lintlha tsa Sehlahisoa, e ngotsoeng ka bokhuts'oane feela.

Etsa litaelo tsena:

HLOKOMELA: Taelo ea pg_dump e tla kopa password e ka fumanoang ho /etc/netrounds/netrounds.conf tlas'a "postgres database". Lekunutu la kamehla ke "netrounds".

HLOKOMELA: Bakeng sa ho seta ka bongata bo boholo (> 50 GB), ho etsa tarball ea RRD files e kanna ea nka nako e telele haholo, 'me ho nka senepe sa molumo e ka ba mohopolo o betere. Litharollo tse ka bang teng ho etsa sena li kenyelletsa: ho sebelisa a file Sistimi e ts'ehetsang linepe, kapa ho nka senepe sa molumo o hlakileng haeba seva se sebetsa sebakeng se fumanehang.

Sheba botšepehi ba polokelo ea boitsebiso u sebelisa script e fanoeng netrounds_2.35_validate_db.sh.

TLHOKOMELISO: Haeba mongolo ona o hlahisa litemoso, u se ke ua leka mokhoa oa ho falla ha database o hlalositsoeng "ka tlase" leqepheng la 5. Ikopanye le tšehetso ea Juniper ka ho kenya tekete ho. https://support.juniper.net/support/requesting-support (ho fana ka tlhahiso ho tsoa ho script) ho rarolla mathata le database pele o tsoela pele ka ntlafatso.

Nka li-backups tsa tlhophiso ea Setsi sa Taolo files:

Bakeng sa mohlalaampLe:

Ntlafatsa Ubuntu ho mofuta oa 18.04. Mokhoa o tloaelehileng oa ntlafatso ke o latelang (o fetotsoe ho tloha ho https://wiki.ubuntu.com/BionicBeaver/ReleaseNotes):

Ho ntlafatsa ho sistimi ea seva:
Kenya update-manager-core haeba e so instole.

Etsa bonnete ba hore molaetsa oa Prompt ho /etc/update-manager/release-upgrades o behiloe ho 'lts' (ho netefatsa hore OS e ntlafatsoa ho 18.04, phetolelo e latelang ea LTS ka mor'a 16.04).
Qala sesebelisoa sa ntlafatso ka taelo ea sudo do-release-upgrade.

Latela litaelo tse skrineng. Mabapi le Paragon Active Assurance e amehang, o ka boloka mefokolo hohle. (Ehlile ho ka etsahala hore o hloka ho etsa likhetho tse fapaneng ka mabaka a sa amaneng le Paragon Active Assurance.)
Ha Ubuntu e se e ntlafalitsoe, qala sistimi hape. Ebe u etsa mehato e latelang:

Ntlafatsa PostgreSQL.
Ntlafatsa database ea PostgreSQL files ho tloha ho 9.5 ho ea ho version 10:

Tlosa mofuta oa khale oa PostgreSQL:
Ntlafatsa liphutheloana tsa Paragon Active Assurance.

Kopanya cheke bakeng sa tarball e nang le mofuta o mocha oa Setsi sa Taolo 'me u netefatse hore e lekana le cheke ea SHA256 e fanoeng leqepheng la download:
Tlosa tarball ea Center Center:
Kenya liphutheloana tse ncha tsa Center Center:
Tlosa liphutheloana tse sa sebetseng:

HLOKOMELA: Ho bohlokoa ho tlosa liphutheloana tsena.

Pele o etsa phalliso ea database, o hloka ho etsa mehato e meng e eketsehileng. Eya ho sengoloa sena sa motheo sa Tsebo, tsamaisetsa tlase karolong ea Liketso haeba tokollo e kentsoe, 'me u etse mehato ea 1 ho isa ho ea 4 ea litaelo tseo.

HLOKOMELA: U se ke ua etsa mohato oa 5 nakong ena.

Tsamaisa ho falla ha database:

HLOKOMELA: Pele o falla, o tlameha ho etsa bonnete ba hore cheke ea botšepehi ba polokelo ea boitsebiso e hlalositsoeng "ka holimo" leqepheng la 2 e phethela ntle le phoso.

Taelo ea ncc migrate e nka nako e telele ho e etsa (metsotso e mengata). E tlameha ho hatisa tse latelang (lintlha li siiloe ka tlase):

(Ka boikhethelo) Nchafatsa sephutheloana sa ConfD haeba u hloka ConfD:
Bapisa litlhophiso tse bolokiloeng pele files le tse sa tsoa kenngoa, 'me ka letsoho u kopanye likahare tsa lihlopha tse peli tsa files (li lokela ho lula libakeng tse tšoanang).
Numella litšebeletso tsa ho etsa li-apache2, Kafka, le lits'ebeletso tsa ho etsa mehala:
Qala lits'ebeletso tsa Tiisetso ea Paragon Active:
Ho kenya tšebetsong tlhophiso e ncha, o boetse o hloka ho tsamaisa:

Kenya lipolokelo tse ncha tsa Moemeli oa Teko:
Kaha tšehetso ea Test Agent Lite e theohile ka mofuta oa 2.35, o lokela ho tlosa liphutheloana tsa khale tsa Test Agent Lite haeba u li kentse:

HLOKOMELA: Ha u ntlafatsa ho 3.x hamorao, u tlameha ho qala ka ho sebelisa taelo ena: sudo apt-mark unhold python-django python-django-common

Boemo B: Kenyelletso e ncha ea Ubuntu 18.04

Mohlala oa Ubuntu 16.04, nka li-backups tsa data ea sehlahisoa sa Paragon Active Assurance.

HLOKOMELA: Ona ke mokhoa oa ho boloka bekapo o hlalositsoeng ho Tataiso ea Ts'ebetso, khaolo ea "Backing Up Product Data", e ngotsoeng ka bokhutšoanyane feela.

Etsa litaelo tsena:

HLOKOMELA: Taelo ea pg_dump e tla kopa password e ka fumanoang ho /etc/netrounds/netrounds.conf tlas'a "postgres database". Lekunutu la kamehla ke "netrounds".

Mohlala oa Ubuntu 16.04, nka li-backups tsa tlhophiso ea Setsi sa Taolo files:
/etc/apache2/sites-available/netrounds-ssl.conf
/etc/apache2/sites-available/netrounds.conf

Bakeng sa mohlalaampLe:

Mohlala oa Ubuntu 16.04, boloka laesense file.

Mohlala o mocha o hloka ho khotsofatsa bonyane litlhoko tsa hardware tse tšoanang le tsa khale.
Ketsahalong e ncha, kenya Ubuntu 18.04. Re khothaletsa thuto e latelang:
https://ubuntu.com/tutorials/install-ubuntu-server

Mabapi le Paragon Active Assurance e amehang, o ka boloka mefokolo hohle. (Ehlile ho ka etsahala hore o hloka ho etsa likhetho tse fapaneng ka mabaka a sa amaneng le Paragon Active Assurance.)

Hang ha Ubuntu 18.04 e kentsoe, qala sistimi hape.
Ho khothalletsoa ho arola li-disk tse latelang, haholo-holo bakeng sa li-backups tsa snapshot (empa ho ho uena joalo ka mosebelisi ho etsa qeto):

Karohano e khothalelitsoeng bakeng sa ho seta lab:
/: disk eohle, ext4.
Karohano e khothalelitsoeng bakeng sa ho seta tlhahiso:

/: 10% ea sebaka sa disk, ext4.
/ var: 10% ea sebaka sa disk, ext4.
/var/lib/netrounds/rrd: 80% ea sebaka sa disk, ext4.

Ha ho encryption
Beha sebaka sa nako ho UTC, mohlalaampka tsela e latelang:

Beha libaka tsohle ho en_US.UTF-8.
Tsela e 'ngoe ea ho etsa sena ke ho fetola ka letsoho file /etc/default/locale. ExampLe:

Etsa bonnete ba hore mola o latelang HA UA hlalosoa ho /etc/locale.gen:
Hlahisa sebaka bocha files ho etsa bonnete ba hore puo e khethiloeng e teng:
Etsa bonnete ba hore sephethephethe likoung tse latelang se lumelloa ho ea le ho tsoa Setsing sa Taolo:

Inbound:
TCP port 443 (HTTPS): Web segokahanyi
TCP port 80 (HTTP): Web interface (e sebelisoang ke Speedtest, e tsamaisa tse ling hape URLs ho HTTPS)

TCP port 830: ConfD (boikhethelo)
TCP port 6000: Khokahano e patiloeng ea OpenVPN bakeng sa Lisebelisoa tsa Moemeli oa Teko
TCP port 6800: E patiloe WebKhokelo ea sokete bakeng sa Likopo tsa Akhente ea Teko

E yang kantle:
TCP port 25 (SMTP): Ho tsamaisoa ha poso
UDP port 162 (SNMP): Ho romela maraba a SNMP bakeng sa lialamo

UDP port 123 (NTP): Ho hokahanya nako
Kenya NTP:
Taba ea pele, tima timedatectl:

Sephethong, boleng ba "fihlella" bakeng sa li-server tsa NTP ke boleng ba octal bo bontšang sephetho sa litšebelisano tse robeli tsa ho qetela tsa NTP. Haeba tse robeli kaofela li atlehile, boleng e tla ba octal 377 (= binary
- Kenya PostgreSQL 'me u hlophise mosebelisi bakeng sa Setsi sa Taolo:
  Ho sebelisa seva ea kantle ea PostgreSQL ha ho khothalletsoe.
- Kenya le ho lokisa seva sa imeile.
- Control Center e tla romela mangolo-tsoibila ho basebelisi:
- ha ba memeloa tlalehong,
- ha o romella li-alamo tsa lengolo-tsoibila (ke hore haeba lengolo-tsoibila ho fapana le SNMP le sebelisetsoa morero ona), le
- ha o romela litlaleho nako le nako.
- Matha taelo
- Bakeng sa ho seta ha bonolo moo postfix e ka romellang ka kotloloho ho seva ea lengolo-tsoibila ea moo e eang teng, o ka seta mofuta o akaretsang oa tlhophiso ea lengolo-tsoibila ho "Internet Site", mme Lebitso la poso la Sistimi hangata le ka tloheloa joalo ka ha le le joalo. Ho seng joalo, postfix e hloka ho hlophisoa ho latela tikoloho. Bakeng sa tataiso, sheba litokomane tsa semmuso tsa Ubuntu ho https://help.ubuntu.com/lts/serverguide/postfix.html.
- Kenya Setsi sa Taolo ho mohlala oa Ubuntu 18.04. Ts'ebetso ena e boetse e kenya Paragon Active Assurance REST API.

0b11111111). Leha ho le joalo, ha u sa tsoa kenya NTP, ho ka etsahala hore ebe ho na le litšebelisano tse ka tlase ho tse robeli tsa NTP, e le hore boleng bo be bonyenyane: e 'ngoe ea 1, 3, 7, 17, 37, 77, kapa 177 haeba litšebelisano tsohle li atlehile. .

Emisa lits'ebeletso tsohle tsa Tiisetso ea Paragon Active:

Khutlisa backup ea database:
Pele o etsa phalliso ea database, o hloka ho etsa mehato e meng e eketsehileng. Eya ho sengoloa sena sa motheo sa Tsebo, tsamaisetsa tlase karolong ea Liketso haeba tokollo e kentsoe, 'me u etse mehato ea 1 ho isa ho ea 4 ea litaelo tseo.
HLOKOMELA: U se ke ua etsa mohato oa 5 nakong ena.
Tsamaisa ho falla ha database:

HLOKOMELA: Ena ke taelo e hlokolosi, 'me ho lokela ho hlokomeloa ha u e phetha ka mochine o hōle. Boemong bo joalo ho khothaletsoa ka matla hore u sebelise lenaneo le kang skrini kapa tmux e le hore taelo ea migrate e tsoelepele ho sebetsa le ha ssh session e ka robeha.

Taelo ea ncc migrate e nka nako e telele ho e etsa (metsotso e mengata). E tlameha ho hatisa tse latelang (lintlha li siiloe ka tlase):

Fetisetsa data ea "backup" ketsahalong ea 18.04 u sebelisa scp kapa sesebelisoa se seng.

Khutlisetsa linotlolo tsa OpenVPN:
Khutlisa lintlha tsa RRD:
Bapisa tlhophiso ea backup files le tse sa tsoa kenngoa, 'me ka letsoho u kopanye likahare tsa lihlopha tse peli tsa files (li lokela ho lula libakeng tse tšoanang).

Kenya tšebetsong laesense ea sehlahisoa u sebelisa laesense file e nkiloe ketsahalong ea khale:
Qala lits'ebeletso tsa Tiisetso ea Paragon Active:
Ho kenya tšebetsong tlhophiso e ncha, o boetse o hloka ho tsamaisa:

Kenya lipolokelo tse ncha tsa Moemeli oa Teko:
(Ka boikhethelo) Latela Tataiso ea NETCONF & YANG API ea Orchestration ho kenya le ho lokisa ConfD haeba u e hloka.

HLOKOMELA: Ha u ntlafatsa ho 3.x hamorao, u tlameha ho qala ka ho sebelisa taelo ena: sudo apt-mark unhold python-django python-django-common

Ho batle phoso

Mathata a ho Qala ConfD
Haeba u na le mathata a ho qala ConfD kamora ho ntlafatsoa, ka kopo ikopanye le molekane oa hau oa Juniper kapa mookameli oa ak'haonte ea heno ea Juniper kapa moemeli oa thekiso ho fumana peeletso e ncha.

Mathata Ho qala call execute
Sheba li-callexecuter logs ka taelo

U ka bona phoso e kang e latelang:

Ho etsahetseng ke hore sephutheloana sa net rounds-call execute*.deb se ile sa ntlafatsoa ntle le ho etsa bonnete ba hore ts'ebeletso ea sistimi ea net rounds-call e emisitsoe mme ea koaloa. Database e maemong a fosahetseng; e hloka ho khutlisoa ho tsoa ho bekapo, 'me ntlafatso e hloka ho phetoa. Etsa se latelang ho tima le ho emisa ts'ebeletso ea ho etsa mehala ea marang-rang:

Web Seva ha e Arabe

Sheba li-apache logs ka taelo

Haeba u bona phoso e latelang, ho bolela hore mofuta oa Control Center 2.34 o sebetsa ho Ubuntu 18.04, ke hore, Control Center ha e so ntlafatsoe ka katleho. Tharollo ke ho ntlafatsa Center Center ho mofuta oa morao-rao joalo ka ha ho hlalositsoe tokomaneng ena.

Ho qala bocha ha Paragon Active Assurance Services Ho hloleha

Ho qala lits'ebeletso tsa marang-rang-* ka

e hlahisa molaetsa o latelang:
Sena se bolela hore litšebeletso tse boletsoeng li 'nile tsa koaheloa nakong ea ts'ebetso ea ho tlosa sephutheloana' me li hloka ho hloekisoa ka letsoho. Mokhoa oa ho hloekisa o bontšitsoe ka tlase:

Juniper Networks, logo ea Juniper Networks, Juniper, le Junos ke matšoao a ngolisitsoeng a Juniper Networks, Inc. United States le linaheng tse ling. Matshwao a mang kaofela a kgwebo, matshwao a tshebeletso, matshwao a ngodisitsweng, kapa matshwao a tshebeletso a ngodisitsweng ke thepa ya beng ba ona ka ho fapana. Juniper Networks ha e nke boikarabello bakeng sa ho se nepahale hofe kapa hofe ho tokomane ena. Juniper Networks e na le tokelo ea ho fetola, ho fetola, ho fetisa, kapa ho ntlafatsa sengoliloeng sena ntle le tsebiso. Copyright © 2022 Juniper Networks, Inc. Litokelo tsohle li sirelelitsoe.

Litokomane / Lisebelisoa

Juniper NETWORKS Setsi sa Taolo ea ntlafatso ho tsoa ho Version 2.34 [pdf] Bukana ea Mosebelisi
Ntlafatso ea Setsi sa Taolo ho tloha ho Version 2.34, Control Center ho tloha Version 2.34, Center ho tloha Version 2.34, Version 2.34

Litšupiso

Bukana ea Mosebelisi