I-Juniper NETWORKS Version 2.34 Isikhungo Sokulawula Sokuthuthukisa

Imininingwane

• Igama Lomkhiqizo: Isikhungo Sokulawula
• Inguqulo: 4.4
• Kushicilelwe: 2024-03-21

Ulwazi Lomkhiqizo
I-Control Center wuhlelo lwesofthiwe olwakhelwe ukuphatha nokuthuthukisa izinhlelo ze-Ubuntu ngendlela efanele. Ivumela abasebenzisi ukuthi bathuthe idatha isuka kusenzakalo esidala seSikhungo Sokulawula iye kusenzakalo esisha kalula.

Imiyalo yokusetshenziswa komkhiqizo

Isimo A: Ukuthuthukiswa kwe-Ubuntu 16.04 kuya ku-Ubuntu 18.04

1. Gcina i-database ye-PostgreSQL:
   • Qalisa umyalo: pg_dump -h localhost -U netrounds netrounds > ncc_postgres.sql
   • Kungenjalo, ungagcina ngefomethi kanambambili usebenzisa: pg_dump -h localhost -U netrounds -Fc netrounds > ncc_postgres.binary
   • Yenza isipele okhiye be-OpenVPN usebenzisa: sudo tar -czf ncc_openvpn.tar.gz /var/lib/netrounds/openvpn
   • Yenza isipele se-RRD files (idatha yamamethrikhi) isebenzisa: sudo tar -czf ncc_rrd.tar.gz /var/lib/netrounds/rrd
2. Kopisha ukucushwa kwe-Apache file: sudo cp /etc/apache2/sites-available/netrounds-ssl.conf /etc/apache2/sites-available/netrounds-ssl.conf.old
3. Thuthukisa inguqulo yeqoqo le-PostgreSQL:
   • Vala iseva bese ususa iqoqo usebenzisa: sudo pg_dropcluster 10 main --stop
   • Thuthukisa inguqulo yeqoqo usebenzisa: sudo pg_upgradecluster 9.5 main
4. Susa inguqulo yeqoqo elidala futhi uhlanze amaphakheji amadala we-PostgreSQL usebenzisa: sudo pg_dropcluster 9.5 main
5. Faka inguqulo entsha Yesikhungo Sokulawula:
   • Khipha iphakheji Yesikhungo Sokulawula: tar -xzf netrounds-control-center_${CC_VERSION}.tar.gz
   • Buyekeza futhi ufake inguqulo entsha usebenzisa: sudo apt update && sudo apt install ./netrounds-control-center_${CC_VERSION}/*.deb
6. Thuthela idatha enguqulweni entsha usebenzisa: sudo ncc migrate

Imibuzo Evame Ukubuzwa (FAQ)

• Q: Yini okufanele ngiyenze uma iskripthi sokuthutha sikhipha izexwayiso?
  Uma umbhalo wokuthutha ukhipha izexwayiso, ungaqhubeki nenqubo yokuthutha egciniwe. Xhumana nosekelo lweJuniper ukuze uthole usizo futhi ubanikeze okuphumayo kuskripthi ukuze uxazulule noma yiziphi izinkinga zesizindalwazi ngaphambi kokuqhubeka nokuthuthukisa.
• Q: Uthatha isikhathi esingakanani umyalo othi 'i-ncc migrate' ukuze uqalise?
  Umyalo 'we-ncc migrate' ungase uthathe amaminithi ambalwa ukuze uqalise njengoba uthuthela idatha enguqulweni entsha. Sicela ubekezele phakathi nalolu hlelo.

Isingeniso

Lo mbhalo uphathelene nokuthuthukiswa kwe-Paragon Active Assurance Control Center isuka enguqulweni engu-2.34 iye kweyakamuva. Ukuthuthukiswa kuhlanganisa izinqubo ezikhethekile njengoba kuhilela ukuthuthukisa i-Ubuntu OS isuka ku-16.04 iye ku-18.04. Idokhumenti ihlanganisa izimo ezimbili:

• Ukuthuthukiswa kwe-Ubuntu 16.04 (ene-Control Center efakiwe) ku-Ubuntu 18.04.
• Ukufakwa okusha kwe-Ubuntu 18.04 kulandelwa ukufakwa kweSikhungo Sokulawula kanye nokudluliselwa kwedatha eyisipele kusukela kusenzakalo esidala seSikhungo Sokulawula kuya esimweni esisha.

Ukuze uthole okunye ukuthuthukiswa, sicela ubheke Umhlahlandlela Wokuthuthukisa.

Isimo A: Ukuthuthukiswa kwe-Ubuntu 16.04 kuya ku-Ubuntu 18.04

• Qala ngokukhubaza izinsiza ze-apache2 kanye ne-netrounds-callexecuter:
  sudo systemctl khubaza i-apache2 netrounds-callexecuter
• Misa zonke izinsiza Zokuqinisekisa I-Paragon Active:
  I-sudo systemctl yeka “amanethiwekhi-*” apache2 openvpn@netrounds
• Thatha izipele zedatha yomkhiqizo we-Paragon Active Assurance.
  QAPHELA: Lena inqubo yokwenza ikhophi yasenqolobaneni echazwe Kumhlahlandlela Wokusebenza, isahluko Ukulondoloza Idatha Yomkhiqizo, okubhalwe kafushane nje kuphela.

Qalisa le miyalo:

• # Gcina i-database ye-PostgreSQL
  • pg_dump -help
  • pg_dump -h localhost -U netrounds netrounds > ncc_postgres.sql
• # (Okunye, ukulondoloza ngefomethi kanambambili:)
• # pg_dump -h localhost -U netrounds -Fc networks > ncc_postgres.binary
• # Yenza isipele okhiye be-OpenVPN
  sudo tar -czf ncc_openvpn.tar.gz /var/lib/netrounds/openvpn
• # Qaphela: Qiniseka ukuthi uzigcina endaweni ephephile.
• # Gcina i-RRD files (idatha yamamethrikhi)
• # Hlola file usayizi ngaphambi kokucindezela ama-RRD. Ukusetshenziswa komyalo we-tar akunconyiwe # uma ama-RRD amakhulu kuno-50 GB; bheka inothi elingezansi.
  • du -hs /var/lib/netrounds/rrd
  • sudo tar -czf ncc_rrd.tar.gz /var/lib/netrounds/rrd

QAPHELA: Umyalo we- pg_dump uzocela igama-mfihlo elingatholakala ku/etc/netrounds/netrounds.conf ngaphansi kokuthi “postgres database”. Iphasiwedi ezenzakalelayo ithi “netrounds”.
QAPHELA: Ngokusethwa kwezinga elikhulu (> 50 GB), ukwenza i-tarball ye-RRD files kungase kuthathe isikhathi eside kakhulu, futhi ukuthatha isifinyezo sevolumu kungaba umqondo ongcono. Izixazululo ezingenzeka zokwenza lokhu zihlanganisa: ukusebenzisa a file uhlelo olusekela izifinyezo, noma ukuthatha isifinyezo sevolumu ebonakalayo uma iseva isebenza endaweni ebonakalayo.

• Hlola ubuqotho besizindalwazi usebenzisa umbhalo onikeziwe we-netrounds_2.35_validate_db.sh.

ISEXWAYISO: Uma lesi sikripthi sikhipha izexwayiso, ungazami inqubo yokuthutha echazwe “ngezansi” ekhasini lesi-5. Xhumana nosekelo lweJuniper ngokugcwalisa ithikithi ku https://support.juniper.net/support/requesting-support (ukunikeza okukhiphayo kuskripthi) ukuze izinkinga ngesizindalwazi zixazululwe ngaphambi kokuthi uqhubeke nokuthuthukisa.

• Thatha izipele zokucushwa Kwesikhungo Sokulawula files:
  • /etc/apache2/sites-available/netrounds-ssl.conf
  • /etc/apache2/sites-available/netrounds.conf
  • /etc/netrounds/netrounds.conf
  • /etc/netrounds/probe-connect.conf
  • /etc/netrounds/restol.conf
  • /etc/netrounds/secret_key
  • /etc/netrounds/test-agent-gateway.yaml
  • /etc/openvpn/netrounds.conf

Okwesiboneloample:
sudo cp /etc/apache2/sites-available/netrounds-ssl.conf /etc/apache2/sites-available/netrounds-ssl.conf.old

• Thuthukisa Ubuntu ukuze ube yinguqulo 18.04. Inqubo evamile yokuthuthukisa imi kanje (ithathwe ku-https://wiki.ubuntu.com/BionicBeaver/ReleaseNotes):
  • Ukuze uthuthukise kusistimu yeseva:
    • Faka i-update-manager-core uma ingakafakwa.
    • Qinisekisa ukuthi umugqa Wokusheshisa kokuthi /etc/update-manager/release-upgrades usethelwe ku-'lts' (ukuqinisekisa ukuthi i-OS ithuthukele ku-18.04, inguqulo elandelayo ye-LTS ngemva kuka-16.04).
    • Yethula ithuluzi lokuthuthukisa ngomyalo we-sudo do-release-upgrade.
    • Landela imiyalelo ekusikrini. Ngokuphathelene ne-Paragon Active Assurance, ungagcina okumisiwe kukho konke. (Kungenzeka ngempela ukuthi udinga ukukhetha okuhlukile ngezizathu ezingahlobene ne-Paragon Active Assurance.)
• Uma Ubuntu sebuthuthukisiwe, qalisa kabusha uhlelo. Bese wenza lezi zinyathelo ezilandelayo:
• Thuthukisa i-PostgreSQL.
• Buyekeza isizindalwazi se-PostgreSQL files kusuka kunguqulo 9.5 kuya kunguqulo 10:
  sudo pg_dropcluster 10 main -stop # Vala iseva bese ususa ngokuphelele i-cluster# “main” version 10 (lokhu kulungiselela ukuthuthukiswa# kumyalo olandelayo)
  sudo pg_upgradecluster 9.5 main # Thuthukisa iqoqo “main” inguqulo 9.5 kuya yakamuva#
  inguqulo etholakalayo (10) sudo pg_dropcluster 9.5 main# Susa ngokuphelele iqoqo “eliyinhloko” inguqulo 9.5
• Susa inguqulo yakudala ye-PostgreSQL:
  I-sudo apt purge postgresql-9.5 postgresql-client-9.5 postgresql-contrib-9.5
• Buyekeza amaphakheji e-Paragon Active Assurance.
  • Bala i-checksum ye-tarball equkethe inguqulo entsha Yesikhungo Sokulawula futhi uqinisekise ukuthi ilingana ne-SHA256 checksum enikezwe ekhasini lokulanda:
    sha256sum paa-control-center_${CC_VERSION}.tar.gz
• Khipha i-tarball Yesikhungo Sokulawula:
  thekelisa CC_VERSION=
  tar -xzf netrounds-control-center_${CC_VERSION}.tar.gz
• Faka amaphakheji amasha Esikhungo Sokulawula:
  sudo apt update
  ukufaka i-sudo apt ./netrounds-control-center_${CC_VERSION}/*.deb
• Susa amaphakheji aphelelwe yisikhathi:

QAPHELA: Kubalulekile ukususa lawa maphakheji.

• # I-ejenti yokuhlola i-Lite isekela i-sudo apt purge netrounds-agent-login
• # Iphakethe le-jsonfield elingasekelwe sudo apt susa i-python-django-jsonfield

Ngaphambi kokwenza ukuthutha kwesizindalwazi, udinga ukwenza ezinye izinyathelo ezengeziwe. Iya kulesi sihloko sesisekelo solwazi, skrolela phansi esigabeni esithi Izenzo uma ukukhishwa kufakiwe, futhi wenze izinyathelo 1 ukuya kwezi-4 zaleyo miyalelo.
QAPHELA: Musa ukwenza isinyathelo sesi-5 kuleli phuzu.

• Qalisa ukuthutha kwesizindalwazi:
  QAPHELA: Ngaphambi kokuthutha, kufanele uqinisekise ukuthi ukuhlola ubuqotho besizindalwazi esichazwe “ngenhla” ekhasini lesi-2 kuqeda ngaphandle kwephutha.
  sudo ncc fuduka
  Umyalo we-ncc migrate uthatha isikhathi eside ukuwusebenzisa (imizuzu eminingi). Kufanele iphrinte okulandelayo (imininingwane ishiywe ngezansi):
  • Ithutha isizindalwazi...
  • Imisebenzi okumele yenziwe:
    <…>
  • Ukuvumelanisa izinhlelo zokusebenza ngaphandle kokuthutha:
    <…>
  • Ukuthutha okusebenzayo:
    <…>
  • Idala ithebula lenqolobane...
    <…>
  • Ivumelanisa izikripthi zokuhlola...
• (Ongakukhetha) Buyekeza iphakheji ye-ConfD uma udinga i-ConfD:
  tar -xzf netrounds-confd_${NCC_VERSION}.tar.gz
  i-sudo apt install ./netrounds-confd_${NCC_VERSION}\_all.deb
• Qhathanisa ukucushwa okwenziwe isipele ngaphambilini files nalezi ezisanda kufakwa, bese uhlanganisa ngokwakho okuqukethwe kwamasethi amabili we files (kufanele zihlale ezindaweni ezifanayo).
• Nika amandla izinsiza ze-apache2, i-kafka, ne-netrounds-callexecuter:
  I-sudo systemctl inika amandla i-apache2 kafka netrounds-callexecuter
• Qala i-Paragon Active Assurance services:
  I-sudo systemctl iqala -all "netrounds-*" apache2 kafka openvpn@netrounds
• Ukuze wenze kusebenze ukumisa okusha, udinga futhi ukuqalisa:
  sudo systemctl layisha kabusha i-apache2
• Faka amakhosombe amasha omenzeli wokuhlola:
  TA_APPLIANCE_VERSION=
  TA_APPLICATION_VERSION=
  • # Okwezinguqulo zangaphambi kwe-3.0:
  • # Qinisekisa ubuqotho bamakhosombe (impendulo kufanele ibe “KULUNGILE”) shasum -c netrounds-test-agent_${TA_APPLIANCE_VERSION}_all.sha256 shasum -c netrounds-test-ejenti application_${TA_APPLICATION_VERSION}.sha256.sum.
  • # Ngenguqulo 3.0 nakamuva:
  • # Bala amasheke amasheke bese uqinisekisa ukuthi ayahambisana
  • # SHA256 amasheke anikeziwe ekhasini lokulanda sha256sum paa-test-agent_${TA_APPLIANCE_VERSION}_all.deb sha256sum paa-test-agent-application_${TA_APPLICATION_VERSION}.tar.gz
  • # Qala ukufaka i-sudo apt-get install \ netrounds-test-agent_${TA_APPLIANCE_VERSION}_all.deb
    I-sudo cp netrounds-test-agent-application_${TA_APPLICATION_VERSION}.tar.gz \ /usr/lib/python2.7/dist-packages/netrounds/static/test_agent/
• Njengoba usekelo lwe-Test Agent Lite lwehliswa enguqulweni engu-2.35, kufanele ususe amaphakheji amadala we-Test Agent Lite uma uwafakile:
  sudo rm -rf /usr/lib/python2.7/dist-packages/netrounds/static/test_agent/netrounds-test-agent-lite*

QAPHELA: Uma uthuthukela ku-3.x ngokuhamba kwesikhathi, kufanele uqale ngokusebenzisa lo myalo: sudo apt-mark unhold python-django python-django-common

Isimo B: Ukufakwa Okusha kwe-Ubuntu 18.04

• Esibonelweni se-Ubuntu 16.04, thatha izipele zedatha yomkhiqizo weParagon Active Assurance.
  QAPHELA: Lena inqubo yokwenza ikhophi yasenqolobaneni echazwe Kumhlahlandlela Wokusebenza, isahluko “Ukwenza Ikhophi yasenqolobaneni Idatha Yomkhiqizo”, okubhalwe kafushane nje kuphela.
  Qalisa le miyalo:
  • # Yenza isipele i-PostgreSQL database pg_dump -help pg_dump -h localhost -U netrounds > ncc_postgres.sql
  • # (Okunye, ukulondoloza ngefomethi kanambambili:)
  • # pg_dump -h localhost -U netrounds -Fc networks > ncc_postgres.binary
  • # Yenza isipele okhiye be-OpenVPN sudo tar -czf ncc_openvpn.tar.gz /var/lib/netrounds/openvpn
  • # Qaphela: Qiniseka ukuthi uzigcina endaweni ephephile.
  • # Gcina i-RRD files (idatha yamamethrikhi)
  • # Hlola file usayizi ngaphambi kokucindezela ama-RRD. Ukusetshenziswa komyalo we-tar akunconyiwe # uma ama-RRD amakhulu kuno-50 GB; bheka inothi elingezansi.
  • du -hs /var/lib/netrounds/rrd sudo tar -czf ncc_rrd.tar.gz /var/lib/netrounds/rrd

QAPHELA: Umyalo we- pg_dump uzocela igama-mfihlo elingatholakala ku/etc/netrounds/netrounds.conf ngaphansi kokuthi “postgres database”. Iphasiwedi ezenzakalelayo ithi “netrounds”.
QAPHELA: Ngokusethwa kwezinga elikhulu (> 50 GB), ukwenza i-tarball ye-RRD files kungase kuthathe isikhathi eside kakhulu, futhi ukuthatha isifinyezo sevolumu kungaba umqondo ongcono. Izixazululo ezingenzeka zokwenza lokhu zihlanganisa: ukusebenzisa a file uhlelo olusekela izifinyezo, noma ukuthatha isifinyezo sevolumu ebonakalayo uma iseva isebenza endaweni ebonakalayo.

• Esibonelweni se-Ubuntu 16.04, thatha izipele zokucushwa kweSikhungo Sokulawula files:
  • /etc/apache2/sites-available/netrounds-ssl.conf
  • /etc/apache2/sites-available/netrounds.conf
  • /etc/netrounds/netrounds.conf
  • /etc/netrounds/probe-connect.conf
  • /etc/openvpn/netrounds.conf
    Okwesiboneloample:
    sudo cp /etc/apache2/sites-available/netrounds-ssl.conf /etc/apache2/sites-available/netrounds-ssl.conf.old
• Esibonelweni se-Ubuntu 16.04, yenza isipele ilayisense file.
• Isenzakalo esisha sidinga ukwanelisa okungenani izimfuneko zehadiwe efanayo nendala.
• Esimweni esisha, faka Ubuntu 18.04. Sincoma okokufundisa okulandelayo:
• https://ubuntu.com/tutorials/install-ubuntu-server
  Ngokuphathelene ne-Paragon Active Assurance, ungagcina okumisiwe kukho konke. (Kungenzeka ngempela ukuthi udinga ukukhetha okuhlukile ngezizathu ezingahlobene ne-Paragon Active Assurance.)
• Uma i-Ubuntu 18.04 isifakiwe, qalisa kabusha uhlelo.
• Ukuhlukaniswa kwediski okulandelayo kuyanconywa, ikakhulukazi kuma-backups wesithombe (kodwa kukuwe njengomsebenzisi ukuthi unqume):
  • Ukuhlukaniswa okunconyiwe kokusetha ilebhu:
    • /: Idiski ephelele, ext4.
  • Ukuhlukaniswa okunconyiwe kokusethwa kokukhiqiza:
    • /: 10% yesikhala sediski, ext4.
    • / var: 10% yesikhala sediski, ext4.
    • /var/lib/netrounds/rrd: 80% yesikhala sediski, ext4.
  • Akukho ukubethela
• Setha izoni yesikhathi ku-UTC, isiboneloampkanje kanje:
  I-sudo timedatectl set-timezone Etc/UTC
• Setha zonke izifunda zibe yi-en_US.UTF-8.
  • Enye indlela yokwenza lokhu ukuhlela ngesandla i- file /etc/default/locale. Example:
    LANG=zu_US.UTF-8 LC_ALL=zu_US.UTF-8 LANGUAGE=zu_US.UTF-8
  • Qiniseka ukuthi ulayini olandelayo AKUKHO mazwana ku/etc/locale.gen:
    en_US.UTF-8 UTF-8
  • Khiqiza kabusha indawo files ukuqinisekisa ukuthi ulimi olukhethiwe luyatholakala:
    sudo apt-get ukufaka izindawo sudo locale-gen
• Qiniseka ukuthi ithrafikhi ezimbobeni ezilandelayo ivunyelwe ukuya noma ukusuka Esikhungweni Sokulawula:
  • Kwangaphakathi:
    • Imbobo ye-TCP 443 (HTTPS): Web esibonakalayo
    • I-TCP port 80 (HTTP): Web interface (esetshenziswa i-Speedtest, iqondisa kabusha enye URLs kuya ku-HTTPS)
    • Imbobo ye-TCP 830: ConfD (kuyakhetheka)
    • I-TCP port 6000: Uxhumano olubethelwe lwe-OpenVPN lweZisetshenziswa Zomenzeli Wokuhlola
    • Imbobo ye-TCP 6800: Ibethelwe WebUxhumano lwesokhethi lwezicelo zomenzeli wokuhlola
  • Okuphumayo:
    • I-TCP port 25 (SMTP): Ukulethwa kwemeyili
    • I-UDP port 162 (SNMP): Ithumela izicupho ze-SNMP zama-alamu
    • Imbobo ye-UDP 123 (NTP): Ukuvumelanisa isikhathi
• Faka i-NTP:
  • Okokuqala vala i-timedatectl:
    sudo timedatectl set-ntp no
  • Qalisa lo myalo:
    i-timedatectl
    futhi uqinisekise lokho
  • i-systemd-timesyncd.service iyasebenza: cha
  • Manje usungaqalisa ukufakwa kwe-NTP:
    sudo apt-get ukufaka ntp
  • Qiniseka ukuthi amaseva e-NTP amisiwe ayafinyeleleka:
    ntpq -np
  • Okukhiphayo ngokuvamile kufanele kube "zonke" ezivezwe nge-octal. 1

1 Kokuphumayo, inani “lokufinyelela” lamaseva e-NTP liyinani le-octal elibonisa umphumela wemisebenzi eyisishiyagalombili yokugcina ye-NTP. Uma zonke eziyisishiyagalombili ziphumelele, inani lizoba i-octal 377 (= kanambambili

• Faka i-PostgreSQL bese usetha umsebenzisi Wesikhungo Sokulawula:
  • sudo apt-get update
  • sudo apt-get ukufaka i-postgresql
  • sudo -u postgres psql -c “DALA amanetha ENXENYE NGENXA YOKUBHESHWA NGEPHASWEDI 'ehlanganisa' UKUNGENA KWE-SUPERUSER;”
  • sudo -u postgres psql -c “DALA IDATABASE izungeza u-OWNER izungeza i-ENCODING 'UTF8' TEMPLATE 'template0';”
    Ukusebenzisa iseva ye-PostgreSQL yangaphandle akunconyiwe.
• Faka futhi ulungise iseva ye-imeyili.
  • Isikhungo Sokulawula sizothumela ama-imeyili kubasebenzisi:
    • lapho bemenywe ku-akhawunti,
    • lapho kuthunyelwa ama-alamu e-imeyili (okungukuthi uma i-imeyili kune-SNMP isetshenziselwa le njongo), futhi
    • lapho uthumela imibiko ngezikhathi ezithile.
  • Qalisa umyalo
    sudo apt-get ukufaka postfix
  • Ukuze uthole ukusetha okulula lapho i-postfix ingathumela khona ngqo kuseva yendawo okuyiwa kuyo, ungasetha uhlobo olujwayelekile lokucushwa kwemeyili libe “Isizindalwazi se-inthanethi”, futhi Igama lemeyili yesistimu ngokuvamile lingashiywa linjengoba linjalo. Uma kungenjalo, i-postfix idinga ukulungiselelwa ngokuvumelana nemvelo. Ukuze uthole isiqondiso, bheka imibhalo esemthethweni ye-Ubuntu kokuthi https://help.ubuntu.com/lts/serverguide/postfix.html.
• Faka Isikhungo Sokulawula ku-Ubuntu 18.04 isibonelo.
  • Le nqubo iphinde ifake i-Paragon Active Assurance REST API.
    • thekelisa CC_VERSION=
    • # Bala i-checksum yetiyela file futhi uqinisekise ukuthi ilingana ne-SHA256
• 0b11111111). Kodwa-ke, uma usanda kufaka i-NTP, kungenzeka ukuthi kungaphansi kweziyisishiyagalombili izinkokhelo ze-NTP ezenzeke, ukuze inani libe lincane: okukodwa koku-1, 3, 7, 17, 37, 77, noma 177 uma konke ukuthengiselana kube yimpumelelo. .
  • # isheke elinikezwe ekhasini lokulanda sha256sum paa-control-center_${CC_VERSION}.tar.gz
  • # Khipha i-tarball tar -xzf netrounds-control-center_${CC_VERSION}.tar.gz
  • # Qinisekisa ukuthi amaphakheji asesikhathini i-sudo apt-get update
  • # Qala ukufaka i-sudo apt-get install ./netrounds-control-center_${CC_VERSION}/*.deb
• Misa zonke izinsiza Zokuqinisekisa I-Paragon Active:
  I-sudo systemctl yeka “amanethiwekhi-*” apache2 openvpn@netrounds
• Buyisela isipele sesizindalwazi:
  sudo -u postgres psql -set ON_ERROR_STOP=kunethiwekhi <ncc_postgres.sql
• Ngaphambi kokwenza ukuthutha kwesizindalwazi, udinga ukwenza ezinye izinyathelo ezengeziwe. Iya kulesi sihloko sesisekelo solwazi, skrolela phansi esigabeni esithi Izenzo uma ukukhishwa kufakiwe, futhi wenze izinyathelo 1 ukuya kwezi-4 zaleyo miyalelo.
  QAPHELA: Musa ukwenza isinyathelo sesi-5 kuleli phuzu.
• Qalisa ukuthutha kwesizindalwazi:
  QAPHELA: Lona umyalo obucayi, futhi kufanele uqikelele lapho uwenza emshinini oqhelile. Esimeni esinjalo kunconywa kakhulu ukuthi usebenzise uhlelo olufana nesikrini noma i-tmux ukuze umyalo wokuthutha uzoqhubeka nokusebenza noma ngabe iseshini ye-ssh iphuka.
  • sudo ncc fuduka
• Umyalo we-ncc migrate uthatha isikhathi eside ukuwusebenzisa (imizuzu eminingi). Kufanele iphrinte okulandelayo (imininingwane ishiywe ngezansi
  • Ithutha isizindalwazi...
  • Imisebenzi okumele yenziwe:
    <…>
  • Ukuvumelanisa izinhlelo zokusebenza ngaphandle kokuthutha:
    <…>
  • Ukuthutha okusebenzayo:
    <…>
  • Idala ithebula lenqolobane...
    <…>
  • Ivumelanisa izikripthi zokuhlola...
• Dlulisela idatha eyisipele esimweni se-18.04 usebenzisa i-scp noma elinye ithuluzi.
• Buyisela okhiye be-OpenVPN:
  • # Susa noma yiziphi izinkinobho ze-OpenVPN ezikhona sudo rm -rf /var/lib/netrounds/openvpn
  • # Khipha okhiye abenziwe isipele sudo tar -xzf ncc_openvpn.tar.gz -C /
• Buyisela idatha ye-RRD:
  • # Susa noma yimaphi ama-RRD akhona sudo rm -rf /var/lib/netrounds/rrd
  • # Khipha ama-RRD asekelwe isipele sudo tar -xzf ncc_rrd.tar.gz -C /
• Qhathanisa ukucushwa okwenziwe isipele files nalezi ezisanda kufakwa, bese uhlanganisa ngokwakho okuqukethwe kwamasethi amabili we files (kufanele zihlale ezindaweni ezifanayo).
• Yenza ilayisensi yomkhiqizo isebenze usebenzisa ilayisensi file kuthathwe kusibonelo sakudala:
  • ilayisensi ye-ncc yenza kusebenze i-ncc_license.txt
• Qala i-Paragon Active Assurance services:
  I-sudo systemctl iqala -all "netrounds-*" apache2 kafka openvpn@netrounds
• Ukuze wenze kusebenze ukumisa okusha, udinga futhi ukuqalisa:
  sudo systemctl layisha kabusha i-apache2
• Faka amakhosombe amasha omenzeli wokuhlola:
  • TA_APPLIANCE_VERSION=
  • TA_APPLICATION_VERSION=
  • # Okwezinguqulo zangaphambi kwe-3.0:
  • # Qinisekisa ubuqotho bezindawo zokugcina (impendulo kufanele “KULUNGILE”)
    I-shasum -c netrounds-test-ejenti_${TA_APPLIANCE_VERSION}_all.sha256
    I-shasum -c netrounds-test-agent-application_${TA_APPLICATION_VERSION}.sha256.sum
  • # Ngenguqulo 3.0 nakamuva:
  • # Bala amasheke amasheke bese uqinisekisa ukuthi ayahambisana
  • # Amasheke e-SHA256 anikezwe ekhasini lokulanda
    sha256sum paa-test-ejenti_${TA_APPLIANCE_VERSION}_all.deb
    sha256sum paa-test-agent-application_${TA_APPLICATION_VERSION}.tar.gz
  • # Qala ukufaka i-sudo apt-get install \netrounds-test-agent_${TA_APPLIANCE_VERSION}_all.deb
  • I-sudo cp netrounds-test-agent-application_${TA_APPLICATION_VERSION}.tar.gz \ /usr/lib/python2.7/dist-packages/netrounds/static/test_agent/
• (Ongakukhetha) Landela i-NETCONF & YANG API Orchestration Guide ukuze ufake futhi ulungiselele i-ConfD uma uyidinga.

QAPHELA: Uma uthuthukela ku-3.x ngokuhamba kwesikhathi, kufanele uqale ngokusebenzisa lo myalo: sudo apt-mark unhold python-django python-django-common

Ukuxazulula inkinga

KULESI SIGABA

• Izinkinga Zokuqala I-ConfD | 15
• Izinkinga Ukuqala callexecuter | 15
• Web Iseva Ayiphenduli | 16
• Ukuqalisa kabusha Izinkonzo Zokuqinisekisa Ezisebenzayo Ze-Paragon Kwehlulekile | 17

Izinkinga Zokuqala I-ConfD
Uma unezinkinga zokuqalisa i-ConfD ngemva kokuthuthukisa, sicela uxhumane nozakwenu weJuniper noma umphathi we-akhawunti yakho yasendaweni yeJuniper noma omele ukuthengisa ukuze uthole ukubhalisa okusha.

Izinkinga Ukuqalisa i-callexecuter
Hlola izingodo ze-callexecuter ngomyalo

• I-sudo journalctl xeu netrounds-callexecuter

Ungase ubone iphutha elifana nelilandelayo:

• Jun 03 09:53:27 myhost django-admin[6290]: IPHUTHA netrounds.manager.callexecuter Okuhlukile okungabanjwanga kokuthi CallExecuter.run [igama=netrounds.manager.callexecuter, thread=140364632504128, fun
• Jun 03 09:53:27 myhost django-admin[6290]: I-Traceback (ucingo lwakamuva kakhulu lugcine):
• Jun 03 09:53:27 myhost django-admin[6290]: File “debian/tmp/usr/lib/python2.7/dist-packages/netrounds/manager/management/commands/runcallexecuter.py”, umugqa 65, esibambo
• Jun 03 09:53:27 myhost django-admin[6290]: File “debian/tmp/usr/lib/python2.7/dist-packages/netrounds/manager/calldispatcher.py”, umugqa 164, uyasebenza
• Jun 03 09:53:27 myhost django-admin[6290]: File “debian/tmp/usr/lib/python2.7/dist-packages/netrounds/manager/models.py”, umugqa 204, inwait
• Jun 03 09:53:27 myhost django-admin[6290]: File “debian/tmp/usr/lib/python2.7/dist-packages/netrounds/manager/models.py”, umugqa 42, ku-__unicode__
• Jun 03 09:53:27 myhost django-admin[6290]: AttributeError: 'unicode' into ayinayo imfanelo 'iteritems'

Okwenzekile ukuthi iphakheji ye-netrounds-callexecuter*.deb iye yathuthukiswa ngaphandle kokuqinisekisa ukuthi isevisi ye-netrounds-callexecuter systemd imisiwe futhi ivaliwe. Isizindalwazi sisesimweni esingalungile; idinga ukubuyiselwa ekulondolozeni, futhi ukuthuthukiswa kudinga ukuphindwa.
Yenza okulandelayo ukuze ukhubaze futhi umise isevisi ye-netrounds-callexecuter:

• I-sudo systemctl ikhubaza i-netrounds-callexecuter
• I-sudo systemctl yeka i-netrounds-callexecuter

Web Iseva Ayiphenduli
Hlola izingodo ze-apache ngomyalo

• umsila -n 50 /var/log/apache2/netrounds_error.log

Uma ubona iphutha elilandelayo, kusho ukuthi i-Control Center version 2.34 isebenza ku-Ubuntu 18.04, okungukuthi, i-Control Center ayithuthukisiwe ngempumelelo. Isixazululo siwukuthuthukisa Isikhungo Sokulawula sibe yinguqulo yakamuva njengoba kuchazwe kulo mbhalo.

• # Isikhathiamps, ama-pids, njll. aphucwe ngezansi
  Isikripthi se-WSGI esiqondiwe '/usr/lib/python2.7/dist-packages/netrounds/wsgi.py' asikwazi ukulayishwa njengemojula yePython.
  Kwenzeke okuhlukile kucutshungulwa umbhalo we-WSGI '/usr/lib/python2.7/dist-packages/netrounds/wsgi.py'. I-Traceback (ucingo lwakamuva lugcine):
  • File “/usr/lib/python2.7/dist-packages/netrounds/wsgi.py”, umugqa wesi-6, ku isicelo = get_wsgi_application()
  • File “/usr/lib/python2.7/dist-packages/django/core/wsgi.py”, umugqa 13, ku-get_wsgi_application django.setup(set_prefix=False)
  • File “/usr/lib/python2.7/dist-packages/django/__init__.py”, umugqa 27, ekusetheni izinhlelo zokusebenza.populate(settings.INSTALLED_APPS)
  • File “/usr/lib/python2.7/dist-packages/django/apps/registry.py”, umugqa 85, ku-populate app_config = AppConfig.create(entry)
  • File “/usr/lib/python2.7/dist-packages/django/apps/config.py”, umugqa 94, kumojula yokudala = import_module(entry)
  • File “/usr/lib/python2.7/importlib/__init__.py”, umugqa 37, kumoduli_yokungenisa __import__(igama)
  • File “/usr/lib/python2.7/dist-packages/grappelli/dashboard/__init__.py”, umugqa 1, ku kusuka ku-grappelli.dashboard.dashboards import *
  • File “/usr/lib/python2.7/dist-packages/grappelli/dashboard/dashboards.py”, umugqa 14, ku kusuka kumamojula wokungenisa we-grappelli.dashboard
  • File “/usr/lib/python2.7/dist-packages/grappelli/dashboard/modules.py”, umugqa 9, ku kusuka ku-django.contrib.contenttypes.models ingenisa i-ContentType
  • File “/usr/lib/python2.7/dist-packages/django/contrib/contenttypes/models.py”, umugqa 139, ku Uhlobo Lokuqukethwe lwekilasi(amamodeli.Imodeli):
  • File “/usr/lib/python2.7/dist-packages/django/db/models/base.py”, umugqa 110, kokuthi __new__ app_config = apps.get_containing_app_config(module)
  • File “/usr/lib/python2.7/dist-packages/django/apps/registry.py”, umugqa 247, ku-get_containing_app_config self.check_apps_ready()
  • File “/usr/lib/python2.7/dist-packages/django/apps/registry.py”, umugqa 125, ku-check_apps_ready phakamisa i-AppRegistryNotReady(“Izinhlelo zokusebenza azikakalayishwa.”) I-AppRegistryNotReady: Izinhlelo zokusebenza azikakalayishwa.

Ukuqalisa kabusha Izinkonzo Zokuqinisekisa Ezisebenzayo Ze-Paragon Kwehlulekile

• Iqalisa kabusha izinsiza ze-netrounds-* nge
  • I-sudo systemctl iqala -all "netrounds-*" apache2 openvpn@netrounds
• ikhiqiza umlayezo olandelayo:
  • Yehlulekile ukuqalisa i-netrounds-agent-ws-server.service: Iyunithi netrounds-agent-ws-server.service ifihliwe.
  • Yehlulekile ukuqalisa i-netrounds-agent-daemon.service: Iyunithi netrounds-agent-daemon.service ifihliwe.
• Lokhu kusho ukuthi izinsiza ezishiwo ziye zafihlwa phakathi nenqubo yokususa iphakheji futhi zidinga ukuhlanzwa mathupha. Inqubo yokuhlanza iboniswe ngezansi
  • sudo apt-get purge netrounds-agent-login
  • sudo thola /etc/systemd/system -name “netrounds-agent-*.service” -delete sudo systemctl daemon-reload

I-Juniper Networks, ilogo ye-Juniper Networks, i-Juniper, ne-Junos yizimpawu zokuthengisa ezibhalisiwe ze-Juniper Networks, Inc. e-United States nakwamanye amazwe. Zonke ezinye izimpawu zokuthengisa, izimpawu zesevisi, amamaki abhalisiwe, noma izimpawu zesevisi ezibhalisiwe ziyimpahla yabanikazi bazo. IJuniper Networks ayinaso isibopho sanoma yikuphi ukungalungi kulo mbhalo. I-Juniper Networks igodla ilungelo lokushintsha, ukulungisa, ukudlulisa, noma ukubuyekeza lokhu kushicilelwa ngaphandle kwesaziso. Copyright © 2024 Juniper Networks, Inc. Wonke amalungelo agodliwe.

Amadokhumenti / Izinsiza

I-Juniper NETWORKS Version 2.34 Isikhungo Sokulawula Sokuthuthukisa [pdf] Umhlahlandlela Womsebenzisi Inguqulo engu-2.34 Isikhungo Sokulawula Esithuthukisiwe, Isikhungo Sokulawula Esithuthukisiwe, Isikhungo Sokulawula, Isikhungo

Izithenjwa

• Imaniwali yosebenzisayo