Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Navigation  Back up to About Overview 
  
[+] Expand All
[-] Collapse All

Release 8.4.0 Standalone Server Installation Checklist

This section includes an installation checklist for a standalone Steel-Belted Radius Carrier (not using Session State Register). Use the checklist to record the steps for a new installation. It includes all possible options, including integrating configuration files from a previous SBR release. If your installation does not use all the available options, you can skip those steps.

This set of procedures installs a new, unconfigured Steel-Belted Radius Carrier Release 8.4.0 build on a Solaris platform. It includes all possible options that can be included in the Steel-Belted Radius Carrier installation.

Before You Begin

Before you begin to install the Steel-Belted Radius Carrier software, perform these preliminary tasks or verify that they have been accomplished:

  1. Review the Steel-Belted Radius Carrier Release Notes for up-to-date information that became available after the Steel-Belted Radius Carrier guides were published.

    Download the most recent Release Notes file from:
    http://www.juniper.net/techpubs/software/aaa_802/sbr.html

    If the information in the Release Notes differs from the information in any Steel-Belted Radius Carrier guide, follow the Release Notes.

  2. Ensure that the server chassis is physically secure.

    To review recommendations on the server’s characteristics, see Selecting an Appropriate Server.

Migration

  1. If you are migrating from an earlier SBR server release, put a copy of that installation on the system that you want to host Release 8.4.0.

    The recommended method is:

    1. As root on the old server, shut down the SBR daemon.
      Execute: /radiusdir /sbrd stop.
    2. Create a gzip archive of the radiusdir directory, preserving the file structure.

      Change directories to /opt/JNPRsbr/ and execute (for example):
      tar cfE - radius |gzip > 6_radius.tgz

    3. As root on the Release 8.4.0 host, create a working directory for the archive:

      Execute:
      mkdir -p /opt/JNPRsbr/PreviousRelease_backup

      and:

      cd /opt/JNPRsbr/PreviousRelease_backup

    4. Use FTP binary mode to copy the archive file to the Release 8.4.0 host.
    5. Gunzip the archive in the working directory. This does not create a working installation, but serves as a source of files that can be reused by the Release 8.4.0 server.

      Execute (using the example file name):
      gunzip 6_radius.tgz |tar xf -

    6. Check the file permissions on the unzipped archive to ensure that the files are writable.

    See Creating a Copy of Existing SBR Server Release Files for Migration for more information.

  2. Confirm that the server chassis provides at least the minimum hardware and software requirements.

    See Meeting System Requirements.

  3. Verify root access.
  4. Verify that the server meets basic network requirements:

CCM

  1. Verify the server role in the centralized configuration management (CCM) environment. The installation script can configure a Steel-Belted Radius Carrier server as:
    • An autonomous server.
    • The primary server supplying a group of replication servers.
    • A replication server.
      In an environment that uses replication servers, the primary server must be configured first to provide a base for replication.

LDAP

  1. (Optional) If the server will interact with a Lightweight Directory Access Protocol (LDAP) directory service agent, verify or record the path to the LDAP library files. (The default path is /usr/lib.)
  2. (Optional) If the Steel-Belted Radius Carrier server will authenticate through an external database, you need to:

ORACLE

  1. If the external database is Oracle, the Steel-Belted Radius Carrier server must be configured as a client of the Oracle server.

    As you set up the client, collect this information, or if the client is already installed, record this information to use while installing SBR software:

    • Record the path to the local Oracle Home directory (for example: /opt/10g/app/oracle/product/10.2.0.3).
    • Record the path to the local Oracle shared library (for example: /opt/10g/app/oracle/product/10.2.0.3/lib32)
    • Record the path to the local TNS_ADMIN (for example: /opt/10g/app/oracle/product/10.2.0.3/network/admin)

SIM / WiMAX / SIGTRAN

  1. (Required only for these modules) Install and configure Signalware 9 with Service Pack 6V software, following the product documentation and the guidelines in SIGTRAN Support for Steel-Belted Radius Carrier. This step is mandatory for the SIM authentication module and any other SIGTRAN applications. This step is only required for the optional WiMAX mobility module if it uses the EAP-AKA authentication protocol, which requires the optional SIM authentication module.

Installing SBR Software

If you have completed all items on the “Before You Begin” list, you are ready to install the SBR software. These are the key steps:

  1. Unpack the Steel-Belted Radius Carrier Software.

    See Unpacking the Steel-Belted Radius Carrier Software.

    If you are not familiar with UNIX package management commands, you can review a list of Package Management Commands.

  2. Check for running SNMP processes on the server and shut down any that are active.
  3. Run the Steel-Belted Radius Carrier configure script. As the script runs, enter the information you recorded on the previous pages.

    See Setting Up a Starter Kit’s First SBR/Management Node.

Basic Configuration

After the Steel-Belted Radius Carrier software is on the Solaris server, ensure that the base software runs properly and then perform basic configuration steps:

  1. Start the Steel-Belted Radius Carrier daemon.
    • For standalone systems that are not in a Session State Register cluster:

      The basic commands to start and stop the daemon from the command line are as follows:

      • Start the RADIUS Server:
        / radiusdir /sbrd start
        or restart: / radiusdir /sbrd restart
      • Stop the RADIUS Server:
        /radiusdir /sbrd stop
      • Display RADIUS Status Information:
        /radiusdir /sbrd status

      For more information, see Starting and Stopping a Standalone Steel-Belted Radius Carrier Server.

    • For systems that are part of a Session State Register cluster, starting SBR nodes is part of starting and stopping the entire cluster.
  2. Launch the Web GUI.

    Use an HTML browser to address the Steel-Belted Radius Carrier server HTML server. Download the Administrator client application and log in as root. Also confirm that the links to the documentation work.

    Verify that you can download and run the application both from the local host and from a workstation on the network.

Migrating from a Previous Release

  1. Configure the environment.

    If you installed a copy of a previous SBR server installation on the new server as mentioned in Migration , the configuration files from that release are used in this startup. Be aware that to use some new features delivered in Release 8.4.0 you must edit these configuration files to include new settings. See Migrating from Previous SBR Releases.

    For a new installation, configuring the environment includes basic low-level configuration tasks such as:

    • Configuring communications between any additional devices and the Steel-Belted Radius Carrier server.
    • Adding additional users to the server.

    See Configuring the Server.

  2. Configure SNMP. If you elected not to configure the Steel-Belted Radius Carrier SNMP agent during software installation, but have changed your mind and other agents also run on the server (such as the Solaris operating system agent), you must adjust the ports the agents use so multiple agents do not contend for the same resource.

    See Configuring SNMP.

Modified: 2017-10-26