Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

#SubjectActionChecked

Prepare Admin access

Installation must be done using root user.

you can NOT run it with sudo.
you can run it after running the command: su -
  •   

Prepare your installation file and env.

Make sure your /tmp directory has at least 1GB of free space

you can install from other directory than /tmp but:

    • it should have at least 1GB of free space
    • it can NOT be one of this folders:
      • /app
      • /logs
      • /data
      • /shared
      • /installs
  •   


Download the CEF file and transfer it to the /tmp directory in the Pre-installed OS server.

  •   


Run command from the Pre-installed OS server terminal : chmod 755 ./<File Name>
  •   

Setup your network (consult your network admin)

Setup your DNS - use your network admin to assist you with this action.

  •   


Setup your NTP - make sure it is the same used for your IBM DataPower Gateways. You should consider run command : yum install ntp.

  • Consult your Linux and Network admin on how to configure this service.
  • make sure the ntp rpm is installed : yum install ntp
  •   


Verify that your /etc/hosts file includes an entry with your server name mapped to your external or  internal (127.0.0.1)  server IP
  • you can discover your server name by running cmd: hostname
  •   

Verify all required RPMs installed

Verify the existence or Install the following RPMs from the official RedHat/CentOS yum repositories:
  • httpd (and following dependencies mailcap, apr,httpd_tools)
  • mod_ssl
  • cURL
  • wget

The installation is usually done with command: yum install httpd.

If the package is not included in the repository make sure that the following repository is enabled using the following command:

subscription-manager repos --enable=rhel-7-server-rh-common-rpms
  •   


Make sure the httpd service is enabled - use command: systemctl enable httpd.service

  •   


Make sure the httpd service is started - use command: systemctl start httpd.service 

  •   


Install mod_proxy_html
  • by default this rpm is not always accessible from existing repositories. Try first to install it - run command : yum install mod_proxy_html
    • if you get the error "No package mod_proxy_html available. Error: Nothing to do" than you should download it by yourself.
  • you have 2 options:
  • Option 1 - download the rpm
    • you will need to know your httpd version before downloading by run the command: rpm -qa | grep httpd
    • you should see result like httpd-2.4.6-40.el7_2.4.x86_64 . This is your version to download
    • Download the version from here - https://access.redhat.com/downloads/content/mod_proxy_html/2.4.6-45.el7/x86_64/f21541eb/package
    • make sure you have download the same version as the httpd.
    • you can download with wget or any other mechanism as long as at the end the rpm reach the /tmp directory of the Pre-installed OS server.
    • Install RPM with command :  rpm -Uvh mod_proxy_html-2.4.6-40.el7_2.4.x86_64.rpm
  • Option 2- add repository and install it from the repository using the commands:
    • subscription-manager repos --enable=rhel-7-server-optional-rpms
    • yum install mod_proxy_html


  •   

Prepare disk, mount points / file systems

and logical volume

For Production and Non Production installation the AIO Standard Edition requires 3 disks (LUNs / physical / virtual) to support throughput.

You need to allocate the following mount points / file systems on the different disks as described in table 1

It is strongly recommended to use logical volume manager (LVM) especially for data disk

The minimum file system sizes for the different installation types are described in table 2

  •   

Open your firewall to access to DPOD server

Open your firewall to access to DPOD server for port 443. use the following commands:

Note

This command might not be applicable if your system has no builtin firewall.

firewall-cmd --zone=public --add-port=443/tcp --permanent  
firewall-cmd --reload
iptables-save | grep 443


To close the port back

firewall-cmd --zone=public --remove-port=443/tcp --permanent
firewall-cmd --reload
iptables-save | grep 443


Note

You should open ports for DNS Server, your DataPower devices, your SMTP server and others as described in the following firewall rules.

Please assist your network admin and Linux admin to enable access on these ports.



...