Sei sulla pagina 1di 86

Section 3

System operation

Module 1
Operating and File System

Software Release Media

Copyright 2010 Alcatel-Lucent. All rights reserved. XXXXX

System Initialization

Copyright 2010 Alcatel-Lucent. All rights reserved. XXXXX

Managing the BOF

Boot Alcatel 7750 SR uses the BOF file to perform the following tasks:
Option
1) Set up the CPM Ethernet port (speed, duplex, auto)
File
2) Create an IP address for the CPM Ethernet port
3)
4)
5)
6)
7)
8)
9)

Create a Static route for the CPM Ethernet port


Set the console port speed.
Configure the DNS Domain name
Configure Primary, Secondary, Tertiary configuration source
Configure Primary, Secondary, Tertiary image source
Configures Operational Synchronization parameters between
redundant SF/CPM cards
Configure persistence requirements

Always be sure to save the BOF!

Copyright 2010 Alcatel-Lucent. All rights reserved. XXXXX

File System CLI Context

Copyright 2010 Alcatel-Lucent. All rights reserved. XXXXX

Automatic Firmware Upgrades

Copyright 2010 Alcatel-Lucent. All rights reserved. XXXXX

Module 2
Command Line Interface

Copyright 2010 Alcatel-Lucent. All rights reserved. XXXXX

CLI Command Prompt

Copyright 2010 Alcatel-Lucent. All rights reserved. XXXXX

Command Completion

Copyright 2010 Alcatel-Lucent. All rights reserved. XXXXX

Sample Navigation Commands

Copyright 2010 Alcatel-Lucent. All rights reserved. XXXXX

Info command

Copyright 2010 Alcatel-Lucent. All rights reserved. XXXXX

Global Commands

Copyright 2010 Alcatel-Lucent. All rights reserved. XXXXX

CLI Environment Commands

Copyright 2010 Alcatel-Lucent. All rights reserved. XXXXX

Finding Help

Copyright 2010 Alcatel-Lucent. All rights reserved. XXXXX

Scheduling Commands

Copyright 2010 Alcatel-Lucent. All rights reserved. XXXXX

Module 3
Hardware Configuration

Copyright 2010 Alcatel-Lucent. All rights reserved. XXXXX

Physical Access

Copyright 2010 Alcatel-Lucent. All rights reserved. XXXXX

Configuring the Basics

Copyright 2010 Alcatel-Lucent. All rights reserved. XXXXX

Configuring the CPM Ethernet Port Address

Copyright 2010 Alcatel-Lucent. All rights reserved. XXXXX

Provisioning Cards & MDAs

Copyright 2010 Alcatel-Lucent. All rights reserved. XXXXX

Provisioning Cards & MDAs

Copyright 2010 Alcatel-Lucent. All rights reserved. XXXXX

Provisioning Cards & MDAs in 5620 SAM

To do
provisioning of
an IOM you
have to go to
the
Equipment
view

Then you
select the
appropiate
Card slot and
select
Configure
Card

We can see that the card slot 2 is Empty (not provisioned)


Copyright 2010 Alcatel-Lucent. All rights reserved. XXXXX

Provisioning Cards & MDAs in 5620 SAM (ctd)


The Card Slot form opens, there you can then select the card properties

Copyright 2010 Alcatel-Lucent. All rights reserved. XXXXX

Provisioning Cards & MDAs in 5620 SAM (ctd)


In the Assigned Card Type you can select the type of IOM you have installed

Copyright 2010 Alcatel-Lucent. All rights reserved. XXXXX

Provisioning Cards & MDAs in 5620 SAM (ctd)

We can see the Provsioned Carf Type for card slot 2


Copyright 2010 Alcatel-Lucent. All rights reserved. XXXXX

Provisioning Cards & MDAs in 5620 SAM (ctd)


Provisioning MDAs

We can see that both daughter cards are Empty


Copyright 2010 Alcatel-Lucent. All rights reserved. XXXXX

Provisioning Cards & MDAs in 5620 SAM (ctd)

Copyright 2010 Alcatel-Lucent. All rights reserved. XXXXX

Provisioning Cards & MDAs in 5620 SAM (ctd)

Copyright 2010 Alcatel-Lucent. All rights reserved. XXXXX

Provisioning Cards & MDAs in 5620 SAM (ctd)

Copyright 2010 Alcatel-Lucent. All rights reserved. XXXXX

Provisioning Cards & MDAs in 5620 SAM (ctd)

We see the type of MDA provisioned for the Card 2 Daughter card 1
Copyright 2010 Alcatel-Lucent. All rights reserved. XXXXX

Module 4
Security Configuration

Copyright 2010 Alcatel-Lucent. All rights reserved. XXXXX

Security Command Structure

Copyright 2010 Alcatel-Lucent. All rights reserved. XXXXX

Security Access Applications

Copyright 2010 Alcatel-Lucent. All rights reserved. XXXXX

Security Configuration with 5620 SAM User profiles

Copyright 2010 Alcatel-Lucent. All rights reserved. XXXXX

Security Configuration with 5620 SAM User profiles (ctd)

Copyright 2010 Alcatel-Lucent. All rights reserved. XXXXX

Security Configuration with 5620 SAM User profiles (ctd)

We can see the new user profile created

Copyright 2010 Alcatel-Lucent. All rights reserved. XXXXX

Security Configuration with 5620 SAM User profiles (ctd)

Copyright 2010 Alcatel-Lucent. All rights reserved. XXXXX

Security Configuration with 5620 SAM User profiles (ctd)


4

Copyright 2010 Alcatel-Lucent. All rights reserved. XXXXX

Security Configuration with 5620 SAM User profiles (ctd)

Copyright 2010 Alcatel-Lucent. All rights reserved. XXXXX

Security Configuration with 5620 SAM User profiles (ctd)

Copyright 2010 Alcatel-Lucent. All rights reserved. XXXXX

Security Configuration with 5620 SAM User profiles (ctd)

8
Finally we must distribute the user profile to the
nodes selected

profile "Permito_solo_show"
default-action deny-all
entry 1
match "show"
action permit
exit
exit

Copyright 2010 Alcatel-Lucent. All rights reserved. XXXXX

Security Configuration with 5620 SAM - User accounts

Copyright 2010 Alcatel-Lucent. All rights reserved. XXXXX

Security Configuration with 5620 SAM (ctd)

Copyright 2010 Alcatel-Lucent. All rights reserved. XXXXX

Security Configuration with 5620 SAM (ctd)

Copyright 2010 Alcatel-Lucent. All rights reserved. XXXXX

Security Configuration with 5620 SAM (ctd)


5

Copyright 2010 Alcatel-Lucent. All rights reserved. XXXXX

Security Configuration with 5620 SAM (ctd)

A:7750# admin
MINOR: CLI Command not allowed for this user.
A:7750#

Finally we have to distribute the user to the selected


nodes

A:7750# configure
MINOR: CLI Command not allowed for this user.
A:7750#
A:7750# show

Copyright 2010 Alcatel-Lucent. All rights reserved. XXXXX

Access Request Flow

Copyright 2010 Alcatel-Lucent. All rights reserved. XXXXX

Security Authorization

Copyright 2010 Alcatel-Lucent. All rights reserved. XXXXX

Management Access Filters

Copyright 2010 Alcatel-Lucent. All rights reserved. XXXXX

SNMP Structure

MIB

Manager
(NMS)

Managed
Objects

Agent

Managed Device
Copyright 2010 Alcatel-Lucent. All rights reserved. XXXXX

SNMP Security Features

Copyright 2010 Alcatel-Lucent. All rights reserved. XXXXX

Configuring trap Receivers

Copyright 2010 Alcatel-Lucent. All rights reserved. XXXXX

Event Logging

Copyright 2010 Alcatel-Lucent. All rights reserved. XXXXX

Event Sources

Copyright 2010 Alcatel-Lucent. All rights reserved. XXXXX

Event Control

Copyright 2010 Alcatel-Lucent. All rights reserved. XXXXX

Log Manager

Copyright 2010 Alcatel-Lucent. All rights reserved. XXXXX

Event Filter Policies

Copyright 2010 Alcatel-Lucent. All rights reserved. XXXXX

Log Destinations

Copyright 2010 Alcatel-Lucent. All rights reserved. XXXXX

Router configuration in order to be discovered by 5620 SAM


To manage any SR/ESS family of routers/switches,
the following general configuration needs to be performed from C
1- Configure a system address:
configure router interface system address <ipv4address>/32
2- Increase SNMP packet size:
configure system snmp packet-size 9216
3- Turn on snmp:
configure system snmp no shutdown

Copyright 2010 Alcatel-Lucent. All rights reserved. XXXXX

Router configuration in order to be discovered by 5620 SAM


4- Enable telnet (optional), ftp and configure ftp user (optional if ftp is to be the file
transfer mechanism for backups/restores/software upgrades):
configure system security telnet-server
configure system security ftp-server
configure system security user admin access ftp
5- Turn bof persistence on:
bof persist on
bof save
admin save
6- Configure snmp community and access:
configure system security snmp community "private" rwa version both
7- Reboot the router:
admin reboot now

Copyright 2010 Alcatel-Lucent. All rights reserved. XXXXX

Module 5
Discovery Manager & NE Backup

Copyright 2010 Alcatel-Lucent. All rights reserved. XXXXX

NE Discovery
Mediation Security Policy

Copyright 2010 Alcatel-Lucent. All rights reserved. XXXXX

NE Discovery (ctd)

Copyright 2010 Alcatel-Lucent. All rights reserved. XXXXX

NE Discovery (ctd)
We have to complete the following fields:
>Displayed Name
>CLI: user name and
Password
>FTP: user name and
Password

Copyright 2010 Alcatel-Lucent. All rights reserved. XXXXX

NE Discovery (ctd)

admin
admin

Copyright 2010 Alcatel-Lucent. All rights reserved. XXXXX

NE Discovery (ctd)

Copyright 2010 Alcatel-Lucent. All rights reserved. XXXXX

NE Discovery (ctd)

We can see the


Discovery Rule
properties

Copyright 2010 Alcatel-Lucent. All rights reserved. XXXXX

NE Discovery (ctd)

Copyright 2010 Alcatel-Lucent. All rights reserved. XXXXX

NE Discovery (ctd)

Here we have
to add the IP
Address of the
NEs to be
discovered

Copyright 2010 Alcatel-Lucent. All rights reserved. XXXXX

NE Discovery (ctd)
We have to choose the Mediation Security Policy:

Copyright 2010 Alcatel-Lucent. All rights reserved. XXXXX

NE Discovery (ctd)
We can see the Mediation Security Policy properties

Copyright 2010 Alcatel-Lucent. All rights reserved. XXXXX

NE Discovery (ctd)

Here we can see the new


discovered NEs

Copyright 2010 Alcatel-Lucent. All rights reserved. XXXXX

NE Discovery (ctd)
We have the new NE managed

Copyright 2010 Alcatel-Lucent. All rights reserved. XXXXX

NE Backup
To enable the storing of NE backups on a file system perform one of the
following.
a If the 5620 SAM server is installed on Solaris, log in to the 5620 SAM server
station as the samadmin user.
b If the 5620 SAM server is installed on Windows, log in to the 5620 SAM server
station as a user with local administrator privileges.

Navigate to the 5620 SAM server configuration directory or folder, typically


/opt/5620sam/server/nms/config on a Solaris station or
C:\5620sam\server\nms\config on a Windows station.

Copyright 2010 Alcatel-Lucent. All rights reserved. XXXXX

NE Backup (ctd)
Create a backup copy of the nms-server.xml file.
To enable file-system storage for backups add the following section:
<srBackup
srBackupDirectory = "path" />
where path is an absolute or relative file path

<srBackup
srBackupDirectory="/opt/5620sam/server/sr-backup"
srBackupSyncEnabled="true"
srBackupSyncInterval="30" />

Copyright 2010 Alcatel-Lucent. All rights reserved. XXXXX

NE Backup (ctd)
1- Create Backup/Restore Policy
2- Assign the Policy to the NE

Copyright 2010 Alcatel-Lucent. All rights reserved. XXXXX

NE Backup (ctd)
There are 3 Policies already configured, we are going to configure the Policy
number 4

Copyright 2010 Alcatel-Lucent. All rights reserved. XXXXX

NE Backup (ctd)

Copyright 2010 Alcatel-Lucent. All rights reserved. XXXXX

NE Backup (ctd)
Now we can see the Policy number four

Copyright 2010 Alcatel-Lucent. All rights reserved. XXXXX

NE Backup (ctd)
Next step is to asociate the NE to the new Policy

Copyright 2010 Alcatel-Lucent. All rights reserved. XXXXX

NE Backup (ctd)

We choose the
7705

Copyright 2010 Alcatel-Lucent. All rights reserved. XXXXX

NE Backup (ctd)

Copyright 2010 Alcatel-Lucent. All rights reserved. XXXXX

NE Backup (ctd)
Here we can see the new NE Policy asociation

Copyright 2010 Alcatel-Lucent. All rights reserved. XXXXX

Module 6: Labs
Basic setup and Configuration

Copyright 2010 Alcatel-Lucent. All rights reserved. XXXXX

www.alcatel-lucent.com
www.alcatel-lucent.com

Copyright 2010 Alcatel-Lucent. All rights reserved. XXXXX