background image

Enabling firewall settings

Issue 8 May 2009

51

Enabling firewall settings 

For the server to receive SNMP traps from the UPS and the Avaya Ethernet switch, you must 
enable the snmptrap,162/udp port. The default is disabled.

1.  

Firewall

.

2. Scroll down to the snmptrap 162/udp row and select (check) the 

Input to Server

 box.

The 

Output to Server

 box can be left as is, either checked or clear.

3. Click 

Submit

.

Enabling network time servers 

!

Important:

Important:

Avaya strongly recommends that you enable Network Time Protocol (NTP) and 
configure at least one network time server. If a network time server is not used the 
Date/Time settings on the server must be reset regularly, at least monthly, using 
the System Management Interface. The network time strategy is determined by 
the network administrator.

With NTP, you can specify one, two, or three network time servers to provide the accurate time 
of day data to the clocks on the servers. The network time servers, in turn, get their source 
timing from one of several highly accurate time services that are available on the Internet.

To use a network time server, the NTP service must be enabled. The Avaya Installation Wizard 
prompts you to enable the NTP service. If you do not use the Installation Wizard, use the 
Configure Server function on the System Management Interface to configure the network time 
servers.

1. From the 

Installation

 menu of the System Management Interface, click 

Configure 

Server

.

2. On the Review Notices page and the Backup Up Data page, click 

Continue

.

3. On the "Specify how you want to use this wizard" page, select 

Configure individual 

services

 and then click 

Continue

.

4. In the menu on the left side of the Configure Server page, click 

Configure Timer Server.

5. Enter the NTS information on the 

Configure Time Server 

screen and click 

Change.

6. On the main menu, under Security, click 

Firewall

.

7. In the "Output from Server" column, select 

ntp 123/udp

.

Содержание S8700-Series

Страница 1: ...Installing and Configuring the Avaya S8700 Series Server Release 5 2 03 300145 Release 5 2 May 2009 Issue 8...

Страница 2: ...es and can be without limitation an agent port or user an e mail or voice mail account in the name of a person or corporate function e g webmaster or helpdesk or a directory entry in the administrativ...

Страница 3: ......

Страница 4: ...armful tampering data loss or alteration regardless of motive or intent Be aware that there may be a risk of unauthorized intrusions associated with your system and or its networked equipment Also rea...

Страница 5: ...or you to make necessary modifications to maintain uninterrupted service If trouble is experienced with this equipment for repair or warranty information please contact the Technical Service Center at...

Страница 6: ...the shipment or associated with the product is meant to be used with the said product only Do not use the cord set for any other purpose Any non recommended usage could lead to hazardous incidents li...

Страница 7: ...ateways 24 About Processor Ethernet 24 About software duplication 25 About SSH 25 Chapter 2 SNMP configuration 27 Configuring the SNMP modules in the UPS 27 Default UPS IP addresses for S8700 series S...

Страница 8: ...he Avaya Installation Wizard 46 Running the Avaya Installation Wizard 47 Verifying the server connection to the customer LAN if provided 47 Configuring the modem 48 Configuring memory for an S8720 Ser...

Страница 9: ...3 Verifying translations 73 Setting rules for daylight savings time 74 Setting locations if necessary 75 Verifying the date and the time main server only 76 Clearing and resolving alarms 77 Enabling a...

Страница 10: ...nagement Interface 101 Accessing the SAT 103 Logins for Avaya technicians and Business Partners 103 Configuring the network for Windows 2000 and XP 104 Setting the browser options for Internet Explore...

Страница 11: ...terminal emulation program such as Avaya Native Configuration Manager This installation document includes the following information l Preinstallation tasks to complete at the customer site on page 13...

Страница 12: ...n components skip the procedures for those components Configuring the SNMP modules in the UPS on page 27 Server configuration on page 39 IP interface translations on page 57 l See the appropriate sect...

Страница 13: ...ases you always select platform 6 multiconnect in a license for an S8700 series Server Preinstallation tasks to complete at the customer site You must complete the following preinstallation tasks befo...

Страница 14: ...beled and run from the control hardware rack to the port networks or that appropriate connectivity is provided Equipment specifications Important Important The TN8400BP cicuit pack is compatible with...

Страница 15: ...9 cm DAL2 hardware duplication cards Used for the hardware duplication configuration only Not used for the software duplication configuration Physical dimensions S8710 S8720 Height 3 4 inches 8 6 cm 2...

Страница 16: ...to 90 Nonoperating 5 to 85 S8730 5 to 95 NOTE The storage maximum humidity of 95 is based on a maximum temperature of 113 F 45 C The altitude maximum for storage corresponds to a pressure minimum of...

Страница 17: ...ovement of drives is necessary the server must be reinstalled About RAID One or more hard drives may be added to an S8730 Server in order to take advantage of the RAID level 1 feature which provides d...

Страница 18: ...ion and control network cabling for hardware duplication S8730 on page 19 l For a guide to connect the cables to the servers for hardware duplication on the S8720 or S8710 Server see Figure 2 Duplicat...

Страница 19: ...lication link duplication crossover cable 2 Eth0 CNA also LAN for nondedicated control network 3 Eth3 To an Ethernet switch and or the corporate LAN for control network B CNB 4 Eth4 To the customer LA...

Страница 20: ...thernet switch and or the corporate LAN for control network A CNA 2 Eth2 Server Duplication Link 3 Eth3 To an Ethernet switch and or the corporate LAN for control network B CNB 4 Eth4 To the customer...

Страница 21: ...ments for Eth2 Eth3 and Eth4 Figure notes 1 Eth0 Server Duplication Link duplication crossover cable 2 Eth2 To an Ethernet switch and or the corporate LAN for control network A CNA 3 Eth3 To an Ethern...

Страница 22: ...different assignments for Eth2 Eth3 and Eth4 Figure notes 1 Eth0 Server Duplication Link 2 Eth2 To an Ethernet switch and or the corporate LAN for control network A CNA 3 Eth3 To an Ethernet switch a...

Страница 23: ...Install two RJ11 jack outlets wired to a single 1 Measured Business telephone line 2 Use the modular telephone cord that is supplied with the modem to connect one RJ11 jack to each modem 3 Use the US...

Страница 24: ...et interface or through a TN799DP C LAN circuit pack Media gateways usually are installed in the same equipment room as the server rack hardware or control network However you can install the media ga...

Страница 25: ...that is hardware or software is administered as a Configure Server step on the Server Duplication Web page in the System Management Interface About SSH Secure Shell SSH is both a computer program and...

Страница 26: ...and Configuring the Avaya S8500 Series Server Important Important You cannot use SSH with the G700 From within the Linux command line of a server you can use SSH to access the G250 350 and G450 but yo...

Страница 27: ...ust configure the SNMP module in the UPS to report alarms to the server when hardware problems occur The module reports an alarm if commercial power is lost or battery resources are depleted For the S...

Страница 28: ...ause an interchange If the UPS sends the trap to the wrong server trap receiver address that server interchanges to the server that is plugged into the failing UPS Thus server 1 must be plugged into U...

Страница 29: ...assignment of community names with the network administrator If an NMS is not used you can set the community names to any unique string values SECURITY ALERT SECURITY ALERT The Get and Set community...

Страница 30: ...ble to the next available port on the Ethernet switch for Control Network A CNA For a connectivity guide see the Quick Start for Hardware Installation Avaya S8700 Series Server 555 245 703 10 Repeat S...

Страница 31: ...t a minimum you must configure the following items l The IP address l The subnet mask l The gateway IP address l The trap receiver IP address l The community string get set trap The brand the model or...

Страница 32: ...hernet switch 1 for Control Network A CNA into UPS 1 For a duplicated control network connect the Ethernet switch 1 for CNA into UPS 1 and connect the Ethernet switch 2 for Control Network B CNB into...

Страница 33: ...he 162 udp port for input to server is enabled and the default is disabled If you do not enable the 162 udp port and disable the default the server cannot receive the traps from either UPS See Enablin...

Страница 34: ...rmation on the spanning tree CLI commands see Installation and Configuration Guide Avaya C360 and Reference Guide Avaya C360 These documents are available at the Avaya Support Web site http www avaya...

Страница 35: ...Installing Communication Manager on page 37 Clearing the ARP cache on the laptop Depending on the operating system of your Services laptop computer you might need to clear the Address Resolution Prot...

Страница 36: ...e ping t 192 11 13 6 and press Enter The t causes the ping to repeat continuously When you get a response in approximately three minutes wait an additional 30 seconds before you start a Telnet session...

Страница 37: ...s In this interim state special consideration must be given to the administration for the duplicated ESS Use a Telnet session to access the information on the CD ROM 1 On your Services laptop computer...

Страница 38: ...Server 6 When the server is ready to reboot the drawer of the CD ROM drive opens At this time the CD must be removed from the CD drive The reboot can take approximately three minutes The Telnet sessio...

Страница 39: ...l Configuring memory for an S8720 Server on page 49 l Enabling firewall settings on page 51 l Enabling network time servers on page 51 Note Note Ensure that you have the completed Electronic Preinsta...

Страница 40: ...r user login To create a login Note Note Make sure the customer can change this login its password or its permissions later 1 On the System Management Interface click Administration Server Maintenance...

Страница 41: ...le I previously downloaded l If you have not downloaded the file to this server select Install the license file specified below and perform one of the following steps l In the File Path box browse to...

Страница 42: ...server Failure to do so may cause network problems To set the date time and time zone 1 From the Main Menu under Server click Server Date Time 2 In the Server Date Time window verify the date and tim...

Страница 43: ...er Role Use the Specify Server Role page to assign the server one of the following roles Main server Enterprise survivable server ESS Local survivable server LSP Note Note You must download and instal...

Страница 44: ...t is configured as extra large provides higher capacities l Configure UPS Use this page to specify the number of UPS units and the IP address for any Ethernet adjuncts that the Avaya server controls t...

Страница 45: ...rd and click Continue to get to the Set Server Identities page 5 Fill in the fields on the Set Identities page and subsequent pages l Configure Interfaces l Configure ESS l Configure Memory S8720 only...

Страница 46: ...nd the time zone l Configure the server l Install the RFA license file Note Note To install the license file the server does not have to be connected to the reference IPSI However you have only 30 min...

Страница 47: ...rvices port on the front panel of the TN8400 board and type https 192 11 13 6 The system displays the Logon page 2 In the Logon ID box type craft and click Logon The system displays the Password box 3...

Страница 48: ...Verify that the ping was successful 5 If DNS is administered type ping servername and press Enter where servername is the host name of the server 6 Verify that the ping was successful Configuring the...

Страница 49: ...f Logged In Agents the customer will need to get a new License File with increased capacities Note Note If the main servers are S8720 configured as Extra Large XL ESSs and LSPs must be configured as X...

Страница 50: ...ng the bash command start ac 10 Run the bash command swversion Ensuring ESS and LSP compatibility If the main servers are S8730 or if the main servers are S8720 configured as XL ESSs and LSPs must be...

Страница 51: ...vers to provide the accurate time of day data to the clocks on the servers The network time servers in turn get their source timing from one of several highly accurate time services that are available...

Страница 52: ...ddress for the network time server you must specify the IP address of the DNS server on the DNS DHCP Web page For more information see About the Avaya Installation Wizard on page 46 For more informati...

Страница 53: ...first server Repeat Clearing the ARP cache on the laptop on page 35 through Release the server on page 53 for the second server Interchanging servers Perform an interchange between the two servers to...

Страница 54: ...rface translations on page 57 3 Click Interchange The system displays a confirmation message that the interchange has taken place This server is now the active server To perform another interchange so...

Страница 55: ...Interchanging servers Issue 8 May 2009 55 6 Verify all operations are UP Note Note Secure services will be OFF if not implemented For example secure services 0 2 OFF...

Страница 56: ...Chapter 4 Server configuration 56 Installing and Configuring the Avaya S8500 Series Server...

Страница 57: ...59 l Adding the IPSI to the system on page 60 l Enabling IPSI duplication duplicated control network only on page 61 l Setting the alarm activation level on page 61 l Saving translations on page 61 l...

Страница 58: ...ed by one TN2312BP IPSI circuit pack A cabinet is defined as a group of up to five G650 Media Gateways that are mounted in a rack and TDM connected 2 Fill in the carrier location letter and the carrie...

Страница 59: ...s incorrect 3 If the information in the Primary Control Subnet Address field the Secondary Control Subnet Address field or both fields is incorrect use the System Management Interface to change the se...

Страница 60: ...field enter the IP address for the IPSI that is listed in the Location field add ipserver interface 8 Page 1 of 1 IP SERVER INTERFACE IPSI ADMINISTRATION PORT NETWORK 8 IP Control y Ignore Connectivi...

Страница 61: ...rimary IPSI circuit packs must be active Use the System Parameters Duplication SAT screen to enable IPSI duplication 1 Enter change system parameters duplication 2 Enter y in the Enable Operation of I...

Страница 62: ...correctly Verifying that the IPSIs are translated Note Note You must be on the active server to use SAT commands 1 Use SSH to open a SAT session on the server 2 Type list ipserver interface and press...

Страница 63: ...on before you enable IPSI control See Enabling IPSI duplication duplicated control network only on page 61 On the SAT type change system parameters ipserver interface and press Enter 3 Ensure the IPSI...

Страница 64: ...Chapter 5 IP interface translations 64 Installing and Configuring the Avaya S8500 Series Server...

Страница 65: ...ops automatically once you upgrade the IPSI firmware Connecting to the IPSIs Connect CAT5 cables from the IPSI circuit packs to the dedicated control network or to the customer LAN IPSI address config...

Страница 66: ...h the Enterprise Survivable Server ESS option you must use static addressing for the ESS to provide service to the port network You administer the static IP address for the circuit pack directly throu...

Страница 67: ...ine window 3 Clear the Address Resolution Protocol ARP cache in the laptop 4 To log into the IPSI use SSH and the IP address 192 11 13 6 For information on how to use SSH see Accessing the command lin...

Страница 68: ...system displays IP address subnet mask and default gateway information Verify that the proper information was entered 12 If a default gateway is used enter the gateway IP address with set control gat...

Страница 69: ...Ethernet switches l set vlan priority 6 l set diffserv 46 l set vlan tag on l set port negotiation 1 disable l set port duplex 1 full l set port speed 1 100 4 Type show qos and press Enter to check t...

Страница 70: ...op and does not connect to the next IPSI 9 Repeat this procedure for each IPSI circuit pack Programming the IPSI for DHCP addressing Important Important If an IPSI is in a port network that is backed...

Страница 71: ...rt step 2 within 5 seconds after inserting the circuit pack 1 Fully insert the TN2312BP IPSI circuit pack If necessary reseat the circuit pack to start the programming sequence Note Note For the follo...

Страница 72: ...digit 0 through 6 for the cabinet number shows on the display When the correct digit appears stop The digit flashes for about 5 seconds then stops Then the second digit starts flashing 5 While the sec...

Страница 73: ...iles to the compact flash media on page 80 l Enabling alarms to INADS by way of a modem on page 79 l Enabling alarms to INADS by way of the SNMP module on page 80 l Before leaving the site on page 81...

Страница 74: ...1 00 in the Increment field means to move the clock forward or back by one hour at the transition point You can set up to 15 customized daylight savings time rules If you have media gateways in severa...

Страница 75: ...hanges Note Note The location of a port network is defined on the Cabinet SAT screen change cabinet X The location of a network region is defined on the ip network region SAT screen change ip network...

Страница 76: ...ion to any administered Network Time Server c Resolve any connection or administration issues related to the Network Time Server If the Network Time Server is not administered 1 On the left navigation...

Страница 77: ...e Additional daylight savings rules can be implemented for the specific locations of hardware supported by the Communication Manager software For more information see Setting locations if necessary on...

Страница 78: ...Chapter 7 Postinstallation administration 78 Installing and Configuring the Avaya S8500 Series Server 1 To select an Ethernet switch to administer under Security click Ethernet Switch Ports...

Страница 79: ...nt to administer and click Submit 3 Locate the ports that you want to disable and select Disable in that row 4 Click Submit Changes Enabling alarms to INADS by way of a modem Note Note Enable alarms o...

Страница 80: ...entered 4 Type almenable s y and press Enter 5 Type almenable and press Enter and verify that alarm origination is enabled on the SNMP module If used also verify that alarm origination by way of a mo...

Страница 81: ...on the Compact Flash card 7 To view the status of the backup click Backup Status Before leaving the site l Provide the default LAN security settings to the customer l Ensure that the customer knows th...

Страница 82: ...Chapter 7 Postinstallation administration 82 Installing and Configuring the Avaya S8500 Series Server...

Страница 83: ...n the TN2312BP IPSI circuit pack Note Note With duplicated servers use the active server 1 In a SAT command line type test ipserver interface UUC and press Enter where UUC is the cabinet and the carri...

Страница 84: ...nstalling and Configuring the Avaya S8500 Series Server Figure 7 S8730 LEDs Figure 8 LEDs on the front panel of the S8730 Server on page 85 and Figure 9 LEDs on the back panel of the S8730 Server on p...

Страница 85: ...ure notes 1 Active standby LED 2 Internal health 3 External health 4 NIC 1 Eth0 link activity 5 NIC 2 Eth1 link activity 6 Power on standby button system power Amber means system shut down but power s...

Страница 86: ...l of the S8730 Server on page 86 show the LEDs on the S8710 and the S8720 Servers You cannot test the LEDs on the S8710 Server Figure notes 1 NIC activity LED 2 NIC link LED 3 Power supply LED 4 Activ...

Страница 87: ...onds after the button is pushed Figure notes 1 Internal health 2 Power supply 3 NIC 1 Eth0 link activity green 4 NIC 2 Eth1 link activity green 5 Indicates active when on steady or standby mode when b...

Страница 88: ...ecomes active The raising of this alarm also lights the red alarm LED on the faceplate of the S8400 circuit pack Figure notes 1 Not used 2 Not used 3 For hardware duplication mode on the S8710 DAL2 fa...

Страница 89: ...onal PoE LED The port function LEDs are selectable with a set of two left right buttons The port LEDs display the status of the selected function for each port For more information about the on off an...

Страница 90: ...es after a self test to indicate that the UPS is in standby mode For more information see the UPS user guide for the Powerware UPS Figure 12 LEDs on the Powerware 9125 UPS Figure notes 1 Normal mode i...

Страница 91: ...mic address the display shows media gateway the location of the media gateway For a static address the display shows I P Figure 14 IPSI LED display for a static IP address on page 93 l Connectivity If...

Страница 92: ...D ON indicates circuit pack in use 3 Amber LED ON indicates maintenance diagnostics testing 4 Yellow LED tone clock status 5 Emergency transfer LED 6 Services RJ45 connector 7 Network control RJ45 con...

Страница 93: ...Issue 8 May 2009 93 Figure 14 IPSI LED display for a static IP address Figure notes 1 The IPSI has a static IP address 2 The IPSI has connectivity and an IP address ledlip1 KLC 030502 1 2 CLK S E R V...

Страница 94: ...I LED display indicating connectivity status for a DHCP IP address Connectivity status 1 2 3 4 5 The IPSI is connected to a server No Yes Yes Yes Yes The IPSI has an IP address No No Yes Yes No The Se...

Страница 95: ...essing the command line interface of the server with SSH The procedure in this section shows how to use SSH to log on to the server from a Services laptop computer SSH is the recommended method for se...

Страница 96: ...l with other settings such as for color For documentation on PuTTY see http www putty nl docs html 8 In the Backspace key area select Control H This activates the backspace key while you are using the...

Страница 97: ...drive 1 Plug one end of the CAT5 cable into the Services access port on the back of the server For more information see Figure 16 Services laptop computer connected directly to the S8730 Server on pag...

Страница 98: ...ptop computer connected directly to the S8730 Server Figure notes 1 Services laptop computer 2 Network interface card NIC 3 NIC adapter cable if necessary 4 CAT5 cross over cable DAL1 DUP MEMORY RECEI...

Страница 99: ...tly to the S8710 or S8720 Server Figure notes 1 Services laptop computer 2 Network interface card NIC 3 NIC adapter cable if necessary 4 CAT5 cross over cable 2 3 iLO VDCI 1 2 3 133 MGz 100 MGz 100 MG...

Страница 100: ...Launch the dial up connection program which varies depending on your operating system Generally you can access the program through the My Computer or the Control Panel folders For more information see...

Страница 101: ...erver IP address This is the IP address for the server that you are connected to Accessing the System Management Interface You can administer the server through the System Management Interface Access...

Страница 102: ...ype in the IP address or the DNS host name of the server Note Note The first time that you log in you see a message that asks you to install a security certificate Follow the instructions for your par...

Страница 103: ...through ASG except for logins over the service port which require a password The revised password is recorded by RFA and is obtained from ASG Conversant at 1 800 248 1234 or 1 720 444 5557 Type of con...

Страница 104: ...your system and create a LAN connection More than one connection might appear 2 Right click the correct Local Area Connection and left click Properties to display the Local Area Connection Properties...

Страница 105: ...o the list of host names and IP addresses To set browser options for Internet Explorer 6 0 1 In Internet Explorer 6 0 click Tools Internet Options 2 Select the Connection tab 3 Click LAN settings then...

Страница 106: ...Appendix A Server access 106 Installing and Configuring the Avaya S8500 Series Server...

Страница 107: ...et l Ensure that the outlet has power l For other solutions see the user guide for the UPS No power to the Ethernet switch l Ensure that the Ethernet switch is plugged into the UPS or the outlet l Ens...

Страница 108: ...l Ensure that the network card on the Services laptop computer is configured correctly Cannot log in to the server l Check the link LED on the server If the LED is off a cable or hardware problem exis...

Страница 109: ...erver The LED display on IPSI is flashing l The IPSI LED is not programmed with the switch and the location DHCP l An IP address is not assigned to the IPSI LED static IP addressing Cannot access the...

Страница 110: ...Use binary mode to upload the file The server is in no license mode l The license file does not have an IP address yet This situation is normal when the license file is first installed because the fil...

Страница 111: ...Installing and Configuring the Avaya S8700 Series Server January 2008 111...

Страница 112: ...112 Installing and Configuring the Avaya S8700 Series Server January 2008...

Страница 113: ...Installing and Configuring the Avaya S8700 Series Server January 2008 113...

Страница 114: ...114 Installing and Configuring the Avaya S8700 Series Server January 2008...

Страница 115: ...Installing and Configuring the Avaya S8700 Series Server January 2008 115...

Страница 116: ...116 Installing and Configuring the Avaya S8700 Series Server January 2008...

Страница 117: ...Installing and Configuring the Avaya S8700 Series Server January 2008 117...

Страница 118: ...118 Installing and Configuring the Avaya S8700 Series Server January 2008...

Страница 119: ...command line interface 103 Communication Manager installing software 35 compact flash backing up to 80 configure Avaya C363T or C364T Ethernet switch 31 media server 2 53 modem 48 network interface c...

Страница 120: ...dia server 2 configuring 53 modem access to server 100 configuring 48 connect to server 23 modem options setting 24 modem enabling alarms to INADS 79 N network interface card NIC configuring 52 networ...

Страница 121: ...aceplate 91 LEDs 91 program switch ID and cabinet 65 TN2312BP testing 83 translation file installing 61 translations inputting 57 IP interface 57 saving 57 61 verifying 73 troubleshooting server insta...

Страница 122: ...122 Installing and Configuring the Avaya S8700 Series Server January 2008 Index...

Отзывы: