manual allot netenforcer-installation-guide r3

44

Click here to load reader

Upload: frankmaginga

Post on 18-Jan-2016

170 views

Category:

Documents


41 download

DESCRIPTION

Manual Allot Netenforcer-Installation-guide R3

TRANSCRIPT

Page 1: Manual Allot Netenforcer-Installation-guide R3
Page 2: Manual Allot Netenforcer-Installation-guide R3

NetXplorer Centralized NetEnforcer Management Software

Installation Guide

P/N D357006 R3

Page 3: Manual Allot Netenforcer-Installation-guide R3
Page 4: Manual Allot Netenforcer-Installation-guide R3

Important Notice

NetXplorer Installation Guide ii

Important Notice Allot Communications Ltd. ("Allot") is not a party to the purchase agreement under which NetEnforcer was purchased, and will not be liable for any damages of any kind whatsoever caused to the end users using this manual, regardless of the form of action, whether in contract, tort (including negligence), strict liability or otherwise. SPECIFICATIONS AND INFORMATION CONTAINED IN THIS MANUAL ARE FURNISHED FOR INFORMATIONAL USE ONLY, AND ARE SUBJECT TO CHANGE AT ANY TIME WITHOUT NOTICE, AND SHOULD NOT BE CONSTRUED AS A COMMITMENT BY ALLOT OR ANY OF ITS SUBSIDIARIES. ALLOT ASSUMES NO RESPONSIBILITY OR LIABILITY FOR ANY ERRORS OR INACCURACIES THAT MAY APPEAR IN THIS MANUAL, INCLUDING THE PRODUCTS AND SOFTWARE DESCRIBED IN IT. Please read the End User License Agreement and Warranty Certificate provided with this product before using the product. Please note that using the products indicates that you accept the terms of the End User License Agreement and Warranty Certificate. WITHOUT DEROGATING IN ANY WAY FROM THE AFORESAID, ALLOT WILL NOT BE LIABLE FOR ANY SPECIAL, EXEMPLARY, INDIRECT, INCIDENTAL OR CONSEQUENTIAL DAMAGES OF ANY KIND, REGARDLESS OF THE FORM OF ACTION WHETHER IN CONTRACT, TORT (INCLUDING NEGLIGENCE), STRICT LIABILITY OR OTHERWISE, INCLUDING, BUT NOT LIMITED TO, LOSS OF REVENUE OR ANTICIPATED PROFITS, OR LOST BUSINESS, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

Copyright Copyright © 1997-2008 Allot Communications. All rights reserved. No part of this document may be reproduced, photocopied, stored on a retrieval system, transmitted, or translated into any other language without a written permission and specific authorization from Allot Communications Ltd.

Trademarks Products and corporate names appearing in this manual may or may not be registered trademarks or copyrights of their respective companies, and are used only for identification or explanation and to the owners' benefit, without intent to infringe. NetEnforcer® and the Allot Communications logo are registered trademarks of Allot Communications Ltd.

Page 5: Manual Allot Netenforcer-Installation-guide R3

Table of Contents Important Notice .................................................................................................................................. ii Table of Contents ............................................................................................................................... 1-1 

CHAPTER 1: INSTALLING NETXPLORER ........................................................... 1-1 Windows Server Installation ............................................................................................................ 1-2 

Installation Prerequisites .................................................................................................................. 1-2 Pre-Installation Checklist ................................................................................................................. 1-3 Installing Java 1.6 SDK ................................................................................................................... 1-3 Installation Instructions .................................................................................................................... 1-4 Upgrading NetXplorer ..................................................................................................................... 1-8 

Linux Server Installation ................................................................................................................ 1-10 Installation Prerequisites ................................................................................................................ 1-10 Installation Instructions .................................................................................................................. 1-12 

NetXplorer Client Installation ........................................................................................................ 1-13 Java, WebStart and the NetXplorer Client ..................................................................................... 1-13 Accessing NetXplorer .................................................................................................................... 1-16 Enabling NetXplorer Servers ......................................................................................................... 1-17 

CHAPTER 2: INSTALLING NX ACCOUNTING .................................................... 2-1 NX Accounting on Windows Server ................................................................................................ 2-2 

Installation Prerequisites .................................................................................................................. 2-2 Software Requirements .................................................................................................................... 2-2 Pre-Installation Checklist ................................................................................................................. 2-3 Installation Instructions .................................................................................................................... 2-3 

NX Accounting on Linux Server ........................................................................................................... 2-7 Installation Prerequisites .................................................................................................................. 2-7 Installation Instructions .................................................................................................................... 2-9 

CHAPTER 3: INSTALLING NPP ............................................................................... 3-1 NPP on Windows Server ................................................................................................................... 3-2 

Installation Prerequisites .................................................................................................................. 3-2 Software Requirements .................................................................................................................... 3-2 Pre-Installation Checklist ................................................................................................................. 3-3 Installation Instructions .................................................................................................................... 3-3 

Page 6: Manual Allot Netenforcer-Installation-guide R3

Chapter 1: Installing NetXplorer

NetXplorer Installation Guide 1-2

NPP on Linux Server ........................................................................................................................... 3-7 Installation Prerequisites ................................................................................................................. 3-7 Installation Instructions ................................................................................................................... 3-9 

Page 7: Manual Allot Netenforcer-Installation-guide R3

Chapter 1: Installing NetXplorer

This chapter explains how to install NetXplorer management software.

This chapter includes the following sections:

Windows Server Installation, page 1-2, describes the hardware and software requirements and instructions for installing NetXplorer on a Windows Server.

Linux Server Installation, page1-10, describes the hardware and software requirements and instructions for installing NetXplorer on a Linux Server.

NetXplorer Client Installation, page1-13, describes the hardware and software requirements and instructions for installing the NetXplorer Client.

Page 8: Manual Allot Netenforcer-Installation-guide R3

Chapter 1: Installing NetXplorer

NetXplorer Installation Guide 1-2

Windows Server Installation Installation Prerequisites This section describes the minimum hardware and software requirements for installing NetXplorer on a Windows Server.

Server Hardware Requirements Minimum Specifications

• Intel Pentium 4 2.8 GHz and up • Intel Chipset based (925 or 955) • 2 GB RAM DDR Dual channel • 1 x 80 GB HDD, 8 MB Cache (SATA interface recommended) • Windows XP Professional Service Pack 2

Recommended Specifications

• Dual Xeon 3.0 GHz and up • 4 GB RAM DDR Dual channel • RAID (0 or 10) Controller with 256MB Battery Backed Write Cache

(BBWC) • 5x36 GB HDD SCSI U320 15k RPM or larger (capacity depends on overall

storage needs, allowing for 20 GB per AC-2500/AC-1000 and 10 GB per AC-800/AC-400)

• Windows Server 2003 Service Pack 1

Software Requirements • Any Real-Time Virus Protection programs or automatic

Defragmentation/Backup software must be disabled on the NetXplorer server or the Allot folder needs to be excluded from protection/defragmentation.

• Java SDK 1.6 should be installed on the Server machine. For details on how to install the Java SDK see Installing Java 1.6 SDK on page 1-3

• No other database applications (for example, SQL database) should be installed on the NetXplorer server machine.

• No application should be listening to port 80 at the time of the installation.

Page 9: Manual Allot Netenforcer-Installation-guide R3

Chapter 1: Installing NetXplorer

NetXplorer Installation Guide 1-3

Pre-Installation Checklist Before you begin the installation process, it is important that you perform the following steps.

1. Verify that a minimum of 20 GB is available on the disk.

2. Verify that there is at least 4 GB of available Virtual Memory.

NOTE: Set the Virtual Memory on your computer by selecting Start/Settings/Control Panel/System. Open the Advanced tab and click the Performance Settings button. Open the Advanced tab and click the Change button under Virtual Memory to select a new value.

3. Verify that the Java SDK 1.6 is installed, including runtime environment. If it is not installed, install it now, as described in Installing Java 1.6 SDK below.

Installing Java 1.6 SDK

The Java 1.6 SDK, including the run time environment, must be installed before you can install NetXplorer.

To install the Java SDK:

1. Browse to <target folder> and run the jdk-1_6_0_10-windows-i586-p.exe file on the installation CD. The Security Warning is displayed.

2. Click Run. The License Agreement is displayed.

3. Read the license agreement and select I accept the terms … to indicate your agreement, and then click Next. The Custom Setup dialog is displayed.

4. Click Next to accept the default installation location,

OR

Click Change to browse and select an alternate installation location, and then click Next.

NOTE The necessary program features are selected by default. You do not need to change these default settings.

Page 10: Manual Allot Netenforcer-Installation-guide R3

Chapter 1: Installing NetXplorer

NetXplorer Installation Guide 1-4

The Browser Registration dialog is displayed.

5. Verify that Microsoft Internet Explorer is selected and click Install. The Installing Java SDK dialog is displayed. The progress bar indicates the status of the installation process.

6. When the installation process is done, the Complete window is displayed.

7. Click Finish.

Installation Instructions

After you have performed the pre-installation checks and have verified that the Java SDK is installed, you are ready to install NetXplorer.

To install NetXplorer:

1. Run the setup.exe file on the installation CD or from a net-mounted disk.

NOTE Do not attempt to run the setup file from a net long address, such as \\file_server\.

2. The following dialog is displayed.

Figure 1-1: Security Warning

Page 11: Manual Allot Netenforcer-Installation-guide R3

Chapter 1: Installing NetXplorer

NetXplorer Installation Guide 1-5

3. Click Run. The following window is displayed.

Figure 1-2: NetXplorer InstallShield Wizard Welcome Window

Click Next to continue.

4. The NetXplorer License Agreement is displayed.

Click Next to continue

5. Read the license agreement and select I accept the term … to indicate your agreement, and then click Next. The Choose Setup Type dialog is displayed.

Figure 1-3: Choose Setup Type

6. To install all program components in a single location, select Typical and click Next. Then skip ahead to step 10.

OR

To install each component in a different location, select Custom and click Next.

NOTE Allot strongly recommends using the Custom installation option.

Page 12: Manual Allot Netenforcer-Installation-guide R3

Chapter 1: Installing NetXplorer

NetXplorer Installation Guide 1-6

7. If you selected Custom in step 5, the following dialogs are displayed.

Figure 1-4: Choose Destination Location - Custom

8. Accept the default destination locations or browse and select an alternate location for one or more of the components, and then click Next. The Choose NTP configuration option dialog is displayed.

NOTE If alternate locations are chosen for one or more components, they must be in subdirectory on one of the root directories (like C:\Allot or D:\Allot) and not on the root directory itself (C:\ or D:\).

NOTE It is recommended that the system files and the different monitoring files be installed on different physical drives in order to improve overall performance.

Figure 1-5: Choose NTP configuration option - Custom

9. Select either the Use local clock or the Use External NTP server radio button. If you select an external NTP server, enter the server’s IP address in the field provided. Click Next. The Ready to Install the Program dialog is displayed (Error! Reference source not found.).

NOTE Allot strongly recommends using an external NTP server.

Page 13: Manual Allot Netenforcer-Installation-guide R3

Chapter 1: Installing NetXplorer

NetXplorer Installation Guide 1-7

10. If you selected Typical in step 5 the following dialog is displayed.

Figure 1-6: Choose Destination Location - Typical

11. Accept the default destination location or browse and select an alternate location, and then click Next.

The Ready to Install the Program dialog is displayed (Error! Reference source not found.).

Figure 1-7: Ready to Install the Program

12. Click Install to begin the installation. The Setup Status dialog is displayed.

After a few moments the following popup is displayed.

Figure 1-8: Setup Initializing

NOTE The installation may take up to 30 minutes to complete.

Page 14: Manual Allot Netenforcer-Installation-guide R3

Chapter 1: Installing NetXplorer

NetXplorer Installation Guide 1-8

13. When the installation is complete the following dialog is displayed.

Figure 1-9: NetXplorer InstallShield Wizard Complete

14. Select Yes, I want to restart my computer now and click Finish. The installation process is complete.

Upgrading NetXplorer Server Existing installations of NetXplorer Server can be upgraded from the installation CD without requiring the existing version to be uninstalled.

To upgrade NetXplorer:

1. Browse to <location…> and run the setup.exe file on the installation CD or from a net-mounted disk.

NOTE: Do not attempt to run the setup file from a net long address, such as \\file_server\.

2. The following dialog is displayed.

Figure 1-10: Security Warning

Page 15: Manual Allot Netenforcer-Installation-guide R3

Chapter 1: Installing NetXplorer

NetXplorer Installation Guide 1-9

3. Click Run. The following window is displayed.

Figure 1-11: NetXplorer InstallShield Wizard Welcome Window

4. Click Next to continue.

5. A message appears indicating that the NetXplorer Server will shut down for the upgrade. Click Yes to initiate the upgrade.

6. When the upgrade is complete, a message appears indicating success or failure.

NOTE If upgrading the server from version NX7.X.X to NX8.1.X, after the server recovers from reboot, enter the new key for the relevant version; otherwise the GUI window will automatically close.

Page 16: Manual Allot Netenforcer-Installation-guide R3

Chapter 1: Installing NetXplorer

NetXplorer Installation Guide 1-10

Linux Server Installation Installation Prerequisites This section describes the minimum hardware and software requirements for installing NetXplorer on a Linux Server.

Server Hardware Requirements Minimum Specifications

• Intel Pentium 4 2.8 GHz and up • Intel Chipset based (925 or 955) • 1 GB RAM DDR Dual channel • 1 x 100 GB HDD, 8 MB Cache (SATA interface recommended) • Red Hat Enterprise Linux Server 5 32 or 64 bit installed

Recommended Specifications

• DUAL Xeon 2.8 GHz and up • 4 GB RAM DDR Dual channel • RAID (0 or 10) Controller with 256MB Battery Backed Write Cache

(BBWC) • 5x36 GB HDD SCSI U320 15k RPM or larger (capacity depends on overall

storage needs, allowing for 20 GB per AC-2500/AC-1000 and 10 GB per AC-800/AC-400)

• Red Hat Enterprise Linux Server 5 32 or 64 bit installed

Software Requirements • NetXplorer Server should be installed on a machine running Red Hat

Enterprise Linux Server 5 32 or 64 bit.

• NetXplorer Client software should be installed on a machine running Windows XP Professional and Microsoft Internet Explorer.

• Any Real-Time Virus Protection programs or automatic Defragmentation/Backup software must be disabled on the NetXplorer server or the Allot folder needs to be excluded from protection/defragmentation.

• No other database applications (for example, SQL database) should be installed on the NetXplorer server machine.

Page 17: Manual Allot Netenforcer-Installation-guide R3

Chapter 1: Installing NetXplorer

NetXplorer Installation Guide 1-11

• No application should be listening to port 80 at the time of the installation.

• FQDN of the server should be defined (to check run ‘hostname -f’).

• Check that NTP service is installed. The Config ntp service should be configured to start when the unit is rebooted by entering the following command: chkconfig --levels 35 ntpd on

• NTP service should be configured to update the time from an external NTP server and deliver the time service to Allot devices.

• If the OS is not installed yet, configure the server so that the CD is the first boot device, insert the RedHat5 Installation CD #1 and reboot the host. Follow the on-screen instructions using the default installation options on all steps except for the steps listed below

• Hostname: give fully qualified host name (e.g., NXlinx.allot.local);

• Firewall: disabled (during configuration after reboot),

• SELinux: disabled (during configuration after reboot),

• Time: configure correct time according to time zone chosen

• NTP server: may be configured during configuration after the IP address is configured (select the checkbox about synchronize before starting)

Page 18: Manual Allot Netenforcer-Installation-guide R3

Chapter 1: Installing NetXplorer

NetXplorer Installation Guide 1-12

Installation Instructions 1. Confirm all the hardware and software requirements.

2. Run rpm -ivh NetXplorer-8.1-1.i386.rpm

Package dependencies are checked, and error message issued if additional are packages needed. JDK 6 (Java development kit) and Xvfb (X virtual frame buffer) packages are included in the installation set.

3. To install the packages, run rpm -ivh jdk-6u1-linux-i586.rpm and rpm -ivh xorg-x11-server-Xvfb-1.1.1-48.13.el5.i386.rpm accordingly (version numbers may differ).

4. Configure the NTP service to start on system start by entering the following command: chkconfig --levels 35 ntpd on

5. Manually edit the /etc/host files as follows: 127.0.0.1 localhost.localdomain localhost 10.50.18.1 NX1-lin.allot.local NX1-lin

6. Reboot the machine. Confirm that NTP and NetXplorer services are running.

7. To start/stop/check the status of the services use commands such as:

service ntpd start

service netxplorer stop

service netxplorer status

Page 19: Manual Allot Netenforcer-Installation-guide R3

Chapter 1: Installing NetXplorer

NetXplorer Installation Guide 1-13

NetXplorer Client Installation Java, WebStart and the NetXplorer Client NetXplorer works with a technology known as WebStart from Sun Microsystems. WebStart enables you to run the NetXplorer Client software by simply double-clicking an icon on your computer’s desktop. This mode of operation is more convenient than having to access the NetXplorer Client through an Internet browser.

Hardware Requirements It is recommended that the NetXplorer Client be installed on a machine with the following minimum specifications:

• Pentium 4 • 512MB RAM • Windows XP/Microsoft Internet Explorer

Software Requirements • NetXplorer Client software should be installed on a machine running

Windows XP Professional and Microsoft Internet Explorer.

• Any Real-Time Virus Protection programs or automatic Defragmentation/Backup software must be disabled on the NetXplorer client or the Allot folder needs to be excluded from protection/defragmentation.

• Java JRE 1.6 should be installed on the client machine. For details on how to install the Java JRE see Installing Java 1.6 JRE on page 1-15.

• No application should be listening to port 80 at the time of the installation.

Firewall Settings In some networks, workstations running the NetXplorer GUI or NetEnforcer can be separated from the NetXplorer server by a firewall for security reasons. In order to allow the client to communicate with the NetXplorer server the following ports should be opened in the Firewall:

• TCP/80 HTTP

• TCP/1098 The RMI service bind address

• TCP/1099 JNP server bind address

• TCP/4444 RMI Object ports

Page 20: Manual Allot Netenforcer-Installation-guide R3

Chapter 1: Installing NetXplorer

NetXplorer Installation Guide 1-14

To enable the communication between the NetXplorer and the NetEnforcers the following ports in the Firewall should be opened:

• TCP/80 HTTP

• UDP/161 SNMP

• UDP/162 SNMP Trap

• UDP/123 NTP

• TCP/123 NTP

Page 21: Manual Allot Netenforcer-Installation-guide R3

Chapter 1: Installing NetXplorer

NetXplorer Installation Guide 1-15

Installing Java 1.6 JRE The Java 1.6 JRE must be installed on your computer as a prerequisite to working with the NetXplorer User Interface.

To install Java 1.6 JRE:

1. Open your Internet browser, and access http://<<NetX-addr>> The following window is displayed.

Figure 1-12: NetXplorer Java Installation Screen

2. Click the Install Java JRE First link if you do not have Java 1.6 JRE installed on your computer.

3. Click on the appropriate link and follow the on-screen instructions to install the Java 1.6 JRE on your computer.

Initializing WebStart 1. With the Java 1.6 JRE installed, access http://<<NetXplorer-IP-

address> once again. The Application Starting window is displayed.

When the loading process is complete for the first time, the Security Warning is displayed, prompting you to confirm that you want to allow NetXplorer User Interface software access to your computer.

Page 22: Manual Allot Netenforcer-Installation-guide R3

Chapter 1: Installing NetXplorer

NetXplorer Installation Guide 1-16

2. The NetXplorer Log On window is displayed.

Figure 1-13: NetXplorer Log On Window

A shortcut icon to the NetXplorer installation is placed on your desktop and in your system’s Start menu.

Accessing NetXplorer Once you have completed the initial setup, as described in the previous chapter, you can access to NetEnforcer via your Web browser. The first time that you connect to NetEnforcer, you may be prompted to install Java plug-in 1.6. Refer to Installing Java 1.6 JRE, page 1-13, for further information.

To connect to NetXplorer:

1. In Internet Explorer, browse to http:<<NetXplorer IP>> and select Launch NetXplorer in the NetXplorer Control Panel.

OR

Double click the shortcut icon on the desktop or in the system’s Start menu.

Page 23: Manual Allot Netenforcer-Installation-guide R3

Chapter 1: Installing NetXplorer

NetXplorer Installation Guide 1-17

2. The Java Application Starting window is displayed.

3. The NetXplorer Log On dialog is displayed.

Figure 1-14 – NetXplorer Log On Dialog Box

4. In the User Name field, enter admin and in the Password field, enter allot or the password that was established at set up. This is the default user name and password. They may be different if you changed them during the initial configuration.

5. Click Log On. The NetXplorer GUI is displayed.

NOTE It may take a few moments to display the NetXplorer GUI.

Enabling NetXplorer Servers In order to manage more than one NetEnforcer as well as certain features using NetXplorer, NetXplorer Server must be enabled by entering the appropriate key. This key may be entered at installation or at any time following. For more information concerning the NetXplorer Server contact Allot Customer Support at [email protected].

Page 24: Manual Allot Netenforcer-Installation-guide R3

Chapter 1: Installing NetXplorer

NetXplorer Installation Guide 1-18

To enable NetXplorer Server:

1. Select Tools > NetXplorer Application Server Registration from the NetXplorer Menu bar. The NetXplorer Application Server Registration dialog box appears.

Figure 1-15: NetXplorer Application Server Registration Dialog

2. Enter the Server Registration Key and Serial Number provided by Allot to enable the NetXplorer Server functionality.

3. An Expiration Date will be generated automatically after clicking Save.

4. If Subscriber Management is enabled by the key that has been entered, it will be indicated (along with the type and the maximum number of subscribers) after SMP Enabled. For more information, see the SMP User Guide.

5. If Policy Provisioning is enabled by the key that has been entered, it will be indicated (along with the maximum number of accounts) after NPP Enabled. For more information, see the NPP User Guide.

6. If Classification of Hosts by Country is enabled by the key that has been entered, it will be indicated after Host Catalog Country Classification Enabled.

7. If Accounting information is enabled by the key that has been entered, it will be indicated after Accounting Enabled.

8. If Service Catalog updates via the web are enabled by the key that has been entered, it will be indicated after Protocol Updates Enabled.

9. The Maximum number of devices covered by the entered key is indicated.

10. Click Save to enter the key and close the dialog box.

Page 25: Manual Allot Netenforcer-Installation-guide R3

Chapter 2: Installing NX Accounting

This chapter explains how to install the Accounting module of NetXplorer management software.

This chapter includes the following sections:

NX Accounting on Windows Server, page2-2, describes the hardware and software requirements and instructions for installing NX Accounting on a Windows Server.

NX Accounting on Linux Server, page 2-7, describes the hardware and software requirements and instructions for installing NX Accounting on a Linux Server.

Page 26: Manual Allot Netenforcer-Installation-guide R3

Chapter 2: Installing NX Accounting

NetXplorer Installation Guide 2-2

NX Accounting on Windows Server By default, NX Accounting software is installed on the same machine as NetXplorer Server during the standard NetXplorer installation. Accounting functionality is then enabled by entering the appropriate License Key.

The following procedure is for installing the Accounting software on another Windows Server, without NetXplorer.

Installation Prerequisites Hardware Requirements Minimum Specifications

• Intel Pentium 4 2.8 GHz and up • Intel Chipset based (925 or 955) • 2 GB RAM DDR Dual channel • 1 x 80 GB HDD, 8 MB Cache (SATA interface recommended) • Windows XP Professional Service Pack 2

Recommended Specifications

• Dual Xeon 3.0 GHz and up • 4 GB RAM DDR Dual channel • RAID (0 or 10) Controller with 256MB Battery Backed Write Cache

(BBWC) • 5x36 GB HDD SCSI U320 15k RPM or larger (capacity depends on overall

storage needs, allowing for 20 GB per AC-2500/AC-1000 and 10 GB per AC-800/AC-400)

• Windows Server 2003 Service Pack 1

Page 27: Manual Allot Netenforcer-Installation-guide R3

Chapter 2: Installing NX Accounting

NetXplorer Installation Guide 2-3

Software Requirements • NetXplorer Accounting software should be installed on a machine running

Windows 2003 Server or Windows XP Professional.

• Any Real-Time Virus Protection programs or automatic Defragmentation/Backup software must be disabled on the NetXplorer server or the Allot folder needs to be excluded from protection/defragmentation.

• Java SDK 1.6 should be installed on the Accounting Server. For details on how to install the Java SDK see Installing Java 1.6 SDK on page 1-3.

• No other database applications (for example, SQL database) should be installed on the NetXplorer Accounting machine.

• No application should be listening to port 80 at the time of the installation.

Pre-Installation Checklist Before you begin the installation process, it is important that you perform the following steps.

1. Verify that a minimum of 20 GB is available on the disk.

2. Verify that there is at least 4 GB of available Virtual Memory.

NOTE Set the Virtual Memory on your computer by selecting Start/Settings/Control Panel/System. Open the Advanced tab and click the Performance Settings button. Open the Advanced tab and click the Change button under Virtual Memory to select a new value.

3. Verify that the Java SDK 1.6 is installed, including runtime environment. If it is not installed, install it now, as described in Installing Java 1.6 SDK on page 1-3.

Installation Instructions NX Accounting may be installed on the same machine as NetXplorer Server, or on a separate machine. In either case you need to identify the IP address of the NetXplorer during the installation process.

Page 28: Manual Allot Netenforcer-Installation-guide R3

Chapter 2: Installing NX Accounting

NetXplorer Installation Guide 2-4

NOTE Be sure that all the Ports are operable as detailed in the Firewall section in this Installation and User Guide, and that Java SDK is installed.

On the NetXplorer CD (or in a folder supplied to the End-User) the installation files are in a directory called ACCT.

To install the accounting manager:

1. Browse to the ACCT directory and run the setup.exe file on the installation CD or from a net-mounted disk.

NOTE Do not attempt to run the setup file from a long address

2. The following dialog is displayed.

Figure 2-1: Security Warning

3. Click Run. The following window is displayed.

Figure 2-2: Accounting Manager InstallShield Welcome Window

Page 29: Manual Allot Netenforcer-Installation-guide R3

Chapter 2: Installing NX Accounting

NetXplorer Installation Guide 2-5

4. Click Next.

The NetXplorer License Agreement is displayed.

5. Read the license agreement and select I accept the term … to indicate your agreement, and then click Next. The Choose Destination Location window is displayed.

Figure 2-3: Choose Destination Location

6. Accept the default destination locations or browse and select an alternate location, and then click Next.

The Enter NetXplorer Server IP Address window is displayed.

7. Type in the IP address of the NetXplorer Server, and click Next.

Figure 2-4: Ready to Install Window

Page 30: Manual Allot Netenforcer-Installation-guide R3

Chapter 2: Installing NX Accounting

NetXplorer Installation Guide 2-6

8. Click Install to begin the installation. The Setup Status window is displayed.

When the installation is complete the following dialog is displayed.

Figure 2-5: NetXplorer InstallShield Wizard Complete

9. Select Yes, I want to restart my computer now and click Finish. The installation process is complete.

10. The NX Accounting functionality must be enabled by entering the appropriate key in the NetXplorer GUI. This key may be entered at installation or at any time following. For information, see the NetXplorer Operations Guide.

Page 31: Manual Allot Netenforcer-Installation-guide R3

Chapter 2: Installing NX Accounting

NetXplorer Installation Guide 2-7

NX Accounting on Linux Server By default, NX Accounting software is installed on the same machine as NetXplorer Server during the standard NetXplorer installation. Accounting functionality is then enabled by entering the appropriate License Key.

The following procedure is for installing the Accounting software on another Linux Server, without NetXplorer.

Installation Prerequisites This section describes the minimum hardware and software requirements for installing NetXplorer on a Linux Server.

Server Hardware Requirements Minimum Specifications

• Intel Pentium 4 2.8 GHz and up • Intel Chipset based (925 or 955) • 1 GB RAM DDR Dual channel • 1 x 100 GB HDD, 8 MB Cache (SATA interface recommended) • Red Hat Enterprise Linux Server 5 32 or 64 bit installed

Recommended Specifications

• DUAL Xeon 2.8 GHz and up • 4 GB RAM DDR Dual channel • RAID (0 or 10) Controller with 256MB Battery Backed Write Cache

(BBWC) • 5x36 GB HDD SCSI U320 15k RPM or larger (capacity depends on overall

storage needs, allowing for 20 GB per AC-2500/AC-1000 and 10 GB per AC-800/AC-400)

• Red Hat Enterprise Linux Server 5 32 or 64 bit installed

Page 32: Manual Allot Netenforcer-Installation-guide R3

Chapter 2: Installing NX Accounting

NetXplorer Installation Guide 2-8

Software Requirements • NetXplorer Server should be installed on a machine running Red Hat

Enterprise Linux Server 5 32 or 64 bit.

• NetXplorer Client software should be installed on a machine running Windows XP Professional and Microsoft Internet Explorer.

• Any Real-Time Virus Protection programs or automatic Defragmentation/Backup software must be disabled on the NetXplorer server or the Allot folder needs to be excluded from protection/defragmentation.

• No other database applications (for example, SQL database) should be installed on the NetXplorer server machine.

• No application should be listening to port 80 at the time of the installation.

• FQDN of the server should be defined (to check run ‘hostname -f’).

• Check that NTP service is installed. The Config ntp service should be configured to start when the unit is rebooted by entering the following command: chkconfig --levels 35 ntpd on

• NTP service should be configured to update the time from an external NTP server and deliver the time service to Allot devices.

• If the OS is not installed yet, configure the server so that the CD is the first boot device, insert the RedHat5 Installation CD #1 and reboot the host. Follow the on-screen instructions using the default installation options on all steps except for the steps listed below

• Hostname: give fully qualified host name (e.g., NXlinx.allot.local);

• Firewall: disabled (during configuration after reboot),

• SELinux: disabled (during configuration after reboot),

• Time: configure correct time according to time zone chosen

• NTP server: may be configured during configuration after the IP address is configured (select the checkbox about synchronize before starting)

Page 33: Manual Allot Netenforcer-Installation-guide R3

Chapter 2: Installing NX Accounting

NetXplorer Installation Guide 2-9

Installation Instructions To install the accounting manager server in Linux:

1. Confirm all the software and disc pre-installation requirements are available.

2. Run the rpm -ivh Accounting-Manager-8.1.0-5.i386.rpm Package. Dependencies are checked and error message issued if additional packages are needed. JDK 6 (Java development kit) and Xvfb (X virtual frame buffer) packages are included in the installation set.

3. To install the packages, run rpm -ivh jdk-6u1-linux-i586.rpm (version numbers may differ). After the installation is finished, you see the following:

rpm -ivh Accounting-Manager-8.1.0-5.i386.rpm Preparing... ########################################### [100%]

1: Accounting-Manager ########################################### [100%]

Installation finished.

Please set NetXplorer IP Address by running accounting/bin/set_acct_nx_ip.sh.

Than, please reboot your device.

4. Manually edit the /etc/host files as follows: 127.0.0.1 localhost.localdomain localhost 10.50.18.1 NX1-lin.allot.local NX1-lin

5. To set the NetXplorer IP address, run the following: /opt/allot/accounting/bin/set_acct_nx_ip.sh

6. Reboot the machine.

7. Check that NTP and NetXplorer services are running.

8. To start/stop/check the status of the services use commands such as:

service ntpd start

Page 34: Manual Allot Netenforcer-Installation-guide R3

Chapter 2: Installing NX Accounting

NetXplorer Installation Guide 2-10

service accounting_manager stop

service accounting_manager status

9. The NX Accounting functionality must be enabled by entering the appropriate key in the NetXplorer GUI. This key may be entered at installation or at any time following. For information, see the NetXplorer Operations Guide.

Page 35: Manual Allot Netenforcer-Installation-guide R3

Chapter 3: Installing NPP

This chapter explains how to install the NetPolicy Provisioner (NPP) module of NetXplorer management software.

This chapter includes the following sections:

NPP on Windows Server, page 3-2, describes the hardware and software requirements and instructions for installing NPP on a Windows Server.

NPP on Linux Server, page 3-7, describes the hardware and software requirements and instructions for installing NPP on a Linux Server.

Page 36: Manual Allot Netenforcer-Installation-guide R3

Chapter 3: Installing NPP

NetXplorer Installation Guide 3-2

NPP on Windows Server By default, the NetPolicy Provisioner is installed on the same machine as NetXplorer Server during the standard NetXplorer installation. NPP functionality is then enabled by entering the appropriate License Key.

The following procedure is for installing NPP on another Windows Server, without NetXplorer.

Installation Prerequisites Hardware Requirements Minimum Specifications

• Intel Pentium 4 2.8 GHz and up • Intel Chipset based (925 or 955) • 2 GB RAM DDR Dual channel • 1 x 80 GB HDD, 8 MB Cache (SATA interface recommended) • Windows XP Professional Service Pack 2

Recommended Specifications

• Dual Xeon 3.0 GHz and up • 4 GB RAM DDR Dual channel • RAID (0 or 10) Controller with 256MB Battery Backed Write Cache

(BBWC) • 5x36 GB HDD SCSI U320 15k RPM or larger (capacity depends on overall

storage needs, allowing for 20 GB per AC-2500/AC-1000 and 10 GB per AC-800/AC-400)

• Windows Server 2003 Service Pack 1

Software Requirements • NetPolicy Provisioner software should be installed on a machine running

Windows 2003 Server or Windows XP Professional.

• Any Real-Time Virus Protection programs or automatic Defragmentation/Backup software must be disabled on the NetXplorer server or the Allot folder needs to be excluded from protection/defragmentation.

Page 37: Manual Allot Netenforcer-Installation-guide R3

Chapter 3: Installing NPP

NetXplorer Installation Guide 3-3

• Java SDK 1.6 should be installed on the NPP Server. For details on how to install the Java SDK see Installing Java 1.6 SDK on page 1-3.

• No other database applications (for example, SQL database) should be installed on the NPP machine.

• No application should be listening to port 80 at the time of the installation.

Pre-Installation Checklist Before you begin the installation process, it is important that you perform the following steps.

1. Verify that a minimum of 20 GB is available on the disk.

2. Verify that there is at least 4 GB of available Virtual Memory.

NOTE: Set the Virtual Memory on your computer by selecting Start/Settings/Control Panel/System. Open the Advanced tab and click the Performance Settings button. Open the Advanced tab and click the Change button under Virtual Memory to select a new value.

3. Verify that the Java SDK 1.6 is installed, including runtime environment. If it is not installed, install it now, as described in Installing Java 1.6 SDK on page 1-3.

Installation Instructions NPP may be installed on the same machine as NetXplorer Server, or on a separate machine. In either case you need to identify the IP address of the NetXplorer during the installation process.

NOTE Be sure that all the Ports are operable as detailed in the Firewall section in this Installation and User Guide, and that Java SDK is installed.

On the NetXplorer CD (or in a folder supplied to the End-User) the installation files are in a directory called NPP.

To install NPP:

1. Browse to the NPP directory and run the setup.exe file on the installation CD or from a net-mounted disk.

NOTE Do not attempt to run the setup file from a long address

Page 38: Manual Allot Netenforcer-Installation-guide R3

Chapter 3: Installing NPP

NetXplorer Installation Guide 3-4

2. The following dialog is displayed.

Figure 3-1: Security Warning

3. Click Run. The following window is displayed.

Figure 3-2: NetPolicy Provisioner InstallShield Welcome Window

4. Click Next. The NetXplorer License Agreement is displayed.

5. Read the license agreement and select I accept the term … to indicate your agreement, and then click Next. The Choose Destination Location window is displayed.

Figure 3-3: Choose Destination Location

Page 39: Manual Allot Netenforcer-Installation-guide R3

Chapter 3: Installing NPP

NetXplorer Installation Guide 3-5

6. Accept the default destination locations or browse and select an alternate location for one or more of the components, and then click Next. The Enter NetXplorer Server IP Address window is displayed.

Figure 3-4: NetXplorer IP Address Window

7. Type in the IP address of the NetXplorer Server, and click Next.

Figure 3-5: Ready to Install Window

8. Click Install to begin the installation. The Setup Status window is displayed.

When the installation is complete the following dialog is displayed.

Figure 3-6: NPP InstallShield Wizard Complete

9. Select Yes, I want to restart my computer now and click Finish. The installation process is complete.

Page 40: Manual Allot Netenforcer-Installation-guide R3

Chapter 3: Installing NPP

NetXplorer Installation Guide 3-6

10. NPP functionality must be enabled by entering the appropriate key in the NetXplorer GUI. This key may be entered at installation or at any time following. For information, see the NetXplorer Operations Guide.

Page 41: Manual Allot Netenforcer-Installation-guide R3

Chapter 3: Installing NPP

NetXplorer Installation Guide 3-7

NPP on Linux Server By default, the NetPolicy Provisioner is installed on the same machine as NetXplorer Server during the standard NetXplorer installation. NPP functionality is then enabled by entering the appropriate License Key.

The following procedure is for installing NPP on another Linux Server, without NetXplorer.

Installation Prerequisites This section describes the minimum hardware and software requirements for installing NetXplorer on a Linux Server.

Server Hardware Requirements Minimum Specifications

• Intel Pentium 4 2.8 GHz and up • Intel Chipset based (925 or 955) • 1 GB RAM DDR Dual channel • 1 x 100 GB HDD, 8 MB Cache (SATA interface recommended) • Red Hat Enterprise Linux Server 5 32 or 64 bit installed

Recommended Specifications

• DUAL Xeon 2.8 GHz and up • 4 GB RAM DDR Dual channel • RAID (0 or 10) Controller with 256MB Battery Backed Write Cache

(BBWC) • 5x36 GB HDD SCSI U320 15k RPM or larger (capacity depends on overall

storage needs, allowing for 20 GB per AC-2500/AC-1000 and 10 GB per AC-800/AC-400)

• Red Hat Enterprise Linux Server 5 32 or 64 bit installed

Software Requirements • NetXplorer Server should be installed on a machine running Red Hat

Enterprise Linux Server 5 32 or 64 bit.

• NetXplorer Client software should be installed on a machine running Windows XP Professional and Microsoft Internet Explorer.

Page 42: Manual Allot Netenforcer-Installation-guide R3

Chapter 3: Installing NPP

NetXplorer Installation Guide 3-8

• Any Real-Time Virus Protection programs or automatic Defragmentation/Backup software must be disabled on the NetXplorer server or the Allot folder needs to be excluded from protection/defragmentation.

• No other database applications (for example, SQL database) should be installed on the NetXplorer server machine.

• No application should be listening to port 80 at the time of the installation.

• FQDN of the server should be defined (to check run ‘hostname -f’).

• Check that NTP service is installed. The Config ntp service should be configured to start when the unit is rebooted by entering the following command: chkconfig --levels 35 ntpd on

• NTP service should be configured to update the time from an external NTP server and deliver the time service to Allot devices.

• If the OS is not installed yet, configure the server so that the CD is the first boot device, insert the RedHat5 Installation CD #1 and reboot the host. Follow the on-screen instructions using the default installation options on all steps except for the steps listed below

• Hostname: give fully qualified host name (e.g., NXlinx.allot.local);

• Firewall: disabled (during configuration after reboot),

• SELinux: disabled (during configuration after reboot),

• Time: configure correct time according to time zone chosen

• NTP server: may be configured during configuration after the IP address is configured (select the checkbox about synchronize before starting)

Page 43: Manual Allot Netenforcer-Installation-guide R3

Chapter 3: Installing NPP

NetXplorer Installation Guide 3-9

Installation Instructions To install the NPP on Linux:

1. Confirm all the software and disc pre-installation requirements are available.

2. Run the ‘rpm –ivh NetPolicy-Provisioner-8.1.0-5.i386.rpm’ Package. Dependencies are checked, and error message issued if additional packages are needed. JDK 6 (Java development kit) and Xvfb (X virtual frame buffer) packages are included in the installation set.

3. To install the packages, run ‘run ‘rpm -ivh jdk-6u1-linux-i586.rpm’ (version numbers may differ). After the installation is finished, you see the following: rpm -ivh NetPolicy-Provisioner-8.1.0-5.i386.rpm

Preparing... ########################################### [100%]

1:NetPolicy-Provisioner ########################################### [100%]

Installation finished.

Please set NetXplorer IP Address by running /opt/allot/npp/bin/set_npp_nx_ip.sh.

Then, please reboot your device.

4. Manually edit the /etc/host files as follows: 127.0.0.1 localhost.localdomain localhost 10.50.18.1 NX1-lin.allot.local NX1-lin

5. To set the NetXplorer IP address, run the following: /opt/allot/accounting/bin/set_acct_nx_ip.sh

6. Reboot the machine.

7. Check that NTP and NetXplorer services are running.

8. To start/stop/check the status of the services use commands such as:

service ntpd start

service npp stop

service npp status

Page 44: Manual Allot Netenforcer-Installation-guide R3

Chapter 3: Installing NPP

NetXplorer Installation Guide 3-10

9. NPP functionality must be enabled by entering the appropriate key in the NetXplorer GUI. This key may be entered at installation or at any time following. For information, see the NetXplorer Operations Guide.