Release 7.2 Stand-Alone Server Installation Checklist
This section includes an installation checklist for a stand-alone Steel-Belted Radius Carrier (not using Session State Register). Use the checklist to record the steps for a new installation. It includes all possible options, including integrating configuration files from a previous SBR release. If your installation does not use all the available options, you can skip those steps.
This set of procedures installs a new, unconfigured Steel-Belted Radius Carrier Release 7.2 build on a Solaris 10 platform. It includes all possible options that can be included in the Steel-Belted Radius Carrier installation.
Before You Begin
Before you begin to install the Steel-Belted Radius Carrier software, perform these preliminary tasks or verify that they have been accomplished:
o
- Review the Steel-Belted Radius Carrier Release Notes for up-to-date information that became available after the Steel-Belted Radius Carrier guides were published.
Download the most recent Release Notes file from:
http://www.juniper.net/techpubs/software/aaa_802/sbr.htmlIf the information in the Release Notes differs from the information in any Steel-Belted Radius Carrier guide, follow the Release Notes.
o
To review recommendations on the server's characteristics, see Selecting an Appropriate Server.
o Migration
- If you are migrating from an earlier SBR server release, put a copy of that installation on the system that you want to host Release 7.2.
- As root on the old server, shut down the SBR daemon.
Execute: /radiusdir/sbrd stop.- Create a gzip archive of the
radiusdirdirectory, preserving the file structure.Change directories to
/opt/JNPRsbr/and execute (for example):tar cfE - radius |gzip > 6_radius.tgzExecute:
mkdir -p /opt/JNPRsbr/PreviousRelease_backup
cd /opt/JNPRsbr/PreviousRelease_backup
- Use FTP binary mode to copy the archive file to the Release 7.2 host.
- Gunzip the archive in the working directory. This does not create a working installation, but serves as a source of files that can be reused by the Release 7.2 server.
Execute (using the example file name):
gunzip -dc 6_radius.tgz |tar xf -See Creating a Copy of Existing SBR Server Release Files for Migration for more information.
o
See Meeting System Requirements.
o
o
o CCM
- Verify the server role in the centralized configuration management (CCM) environment. The installation script can configure a Steel-Belted Radius Carrier server as:
- An autonomous server.
- The primary server supplying a group of replication servers.
- A replication server.
In an environment that uses replication servers, the primary server must be configured first to provide a base for replication.o LDAP
- (Optional) If the server will interact with a Lightweight Directory Access Protocol (LDAP) directory service agent, verify or record the path to the LDAP library files. (The default path is /usr/lib.)
o
- (Optional) If the Steel-Belted Radius Carrier server will authenticate through an external database, you need to:
See Setting Up External Database Connectivity (Optional).
ORACLE
- If the external database is Oracle, the Steel-Belted Radius Carrier server must be configured as a client of the Oracle server.
As you set up the client, collect this information, or if the client is already installed, record this information to use while installing SBR software:
- Record the path to the local Oracle Home directory (for example:
/opt/10g/app/oracle/product/10.2.0.3).- Record the path to the local Oracle shared library (for example:
/opt/10g/app/oracle/product/10.2.0.3/lib32)- Record the path to the local TNS_ADMIN (for example:
/opt/10g/app/oracle/product/10.2.0.3/network/admin)o SS7
The Ulticom SS7 PH0301 or XH0303 communication boards are supported. See Supporting SMS, SIM, or SS7 with Ulticom Signalware.
o SIM /SMS/ WiMAX / SS7
- (Required only for these modules) Install and configure Signalware 9 with Service Pack 5T software, following the product documentation and the guidelines in Signalware 9 Support for Steel-Belted Radius Carrier. This step is mandatory for the SIM and SMS authentication modules and any other SS7 applications. This step is only required for the optional WiMAX mobility module if it uses the EAP-AKA authentication protocol, which requires the optional SIM authentication module.
o RSA
- (Optional) If the Steel-Belted Radius Carrier server will interact with an RSA authorization server, the Steel-Belted Radius Carrier server must be set up as an RSA client. Follow the RSA product documentation for the procedure.
The Steel-Belted Radius Carrier server must receive a copy of several files from the RSA server. See Setting Up RSA Authorization Client (Optional) for Steel-Belted Radius Carrier requirements and the list of required files.
o
- Verify that Steel-Belted Radius Carrier license keys have been assigned by logging in to your Juniper Networks support account.
Installing SBR Software
If you have completed all items on the "Before You Begin" list, you are ready to install the SBR software. These are the key steps:
o
See Unpacking the Steel-Belted Radius Carrier Software.
If you are not familiar with UNIX package management commands, you can review a list of Package Management Commands.
o
o
- Run the Steel-Belted Radius Carrier
configurescript. As the script runs, enter the information you recorded on the previous pages.See Running the Steel-Belted Radius Carrier Configure Script.
Basic Configuration
After the Steel-Belted Radius Carrier software is on the Solaris server, ensure that the base software runs properly and then perform basic configuration steps:
o
The basic commands to start and stop the daemon from the command line are as follows:
- Start the RADIUS Server:
/radiusdir/sbrd startor restart:/radiusdir/sbrd restart- Stop the RADIUS Server:
/radiusdir/sbrd stop- Display RADIUS Status Information:
/radiusdir/sbrd statusFor more information, see Starting and Stopping the Steel-Belted Radius Carrier Server.
- For systems that are part of a Session State Register cluster, starting SBR nodes is part of starting and stopping the entire cluster.
o
Use an HTML browser to address the Steel-Belted Radius Carrier server HTML server. Download the Administrator client application and log in as root. Also confirm that the links to the documentation work.
Verify that you can download and run the application both from the local host and from a workstation on the network.
o
Migrating from a Previous Release
If you installed a copy of a previous SBR server installation on the new server in Step 3, If you are migrating from an earlier SBR server release, put a copy of that installation on the system that you want to host Release 7.2., the configuration files from that release are used in this startup. Be aware that to use some new features delivered in Release 7.2 you must edit these configuration files to include new settings. See Migrating from Previous SBR Releases.
For a new installation, configuring the environment includes basic low-level configuration tasks such as:
- Configuring communications between any additional devices and the Steel-Belted Radius Carrier server.
- Adding additional users to the server.
o
- Configure SNMP. If you elected not to configure the Steel-Belted Radius Carrier SNMP agent during software installation, but have changed your mind and other agents also run on the server (such as the Solaris operating system agent), you must adjust the ports the agents use so multiple agents do not contend for the same resource.
See Configuring SNMP.