WM4_0ServerAdministrationGuideIssue3

Cambium Wireless Manager Server Administration GuideSystem Release 4.0

Issue 3 August 2012 2012 Cambium Networks. All Rights Reserved.

Accuracy

Whilereasonableeffortshavebeenmadetoassuretheaccuracyofthisdocument,CambiumNetworksassumes noliabilityresultingfromanyinaccuraciesoromissionsinthisdocument,orfromuseoftheinformationobtained herein.Cambiumreservestherighttomakechangestoanyproductsdescribedhereintoimprovereliability, function,ordesign,andreservestherighttorevisethisdocumentandtomakechangesfromtimetotimein contenthereofwithnoobligationtonotifyanypersonofrevisionsorchanges.Cambiumdoesnotassumeany liabilityarisingoutoftheapplicationoruseofanyproduct,software,orcircuitdescribedherein;neitherdoesit conveylicenseunderitspatentrightsortherightsofothers.Itispossiblethatthispublicationmaycontain referencesto,orinformationaboutCambiumproducts(machinesandprograms),programming,orservicesthat arenotannouncedinyourcountry.SuchreferencesorinformationmustnotbeconstruedtomeanthatCambium intendstoannouncesuchCambiumproducts,programming,orservicesinyourcountry.Copyrights

Thisdocument,Cambiumproducts,and3rdPartySoftwareproductsdescribedinthisdocumentmayincludeor describecopyrightedCambiumandother3rdPartysuppliedcomputerprogramsstoredinsemiconductor memoriesorothermedia.LawsintheUnitedStatesandothercountriespreserveforCambium,itslicensors,and other3rdPartysuppliedsoftwarecertainexclusiverightsforcopyrightedmaterial,includingtheexclusiverightto copy,reproduceinanyform,distributeandmakederivativeworksofthecopyrightedmaterial.Accordingly,any copyrightedmaterialofCambium,itslicensors,orthe3rdPartysoftwaresuppliedmaterialcontainedinthe Cambiumproductsdescribedinthisdocumentmaynotbecopied,reproduced,reverseengineered,distributed, mergedormodifiedinanymannerwithouttheexpresswrittenpermissionofCambium.Furthermore,the purchaseofCambiumproductsshallnotbedeemedtogranteitherdirectlyorbyimplication,estoppel,or otherwise,anylicenseunderthecopyrights,patentsorpatentapplicationsofCambiumorother3rdPartysupplied software,exceptforthenormalnonexclusive,royaltyfreelicensetousethatarisesbyoperationoflawinthesale ofaproduct.Restrictions

Softwareanddocumentationarecopyrightedmaterials.Makingunauthorizedcopiesisprohibitedbylaw.Nopart ofthesoftwareordocumentationmaybereproduced,transmitted,transcribed,storedinaretrievalsystem,or translatedintoanylanguageorcomputerlanguage,inanyformorbyanymeans,withoutpriorwrittenpermission ofCambium.License Agreements

ThesoftwaredescribedinthisdocumentisthepropertyofCambiumanditslicensors.Itisfurnishedbyexpress licenseagreementonlyandmaybeusedonlyinaccordancewiththetermsofsuchanagreement.SeeLegal NoticesandLicenseAgreementsonPage137. 2012CambiumNetworks,Inc.AllRightsReserved.

Table of ContentsAccuracy...................................................................................................................................... 2 Copyrights ................................................................................................................................... 2 Restrictions ................................................................................................................................. 2 LicenseAgreements.................................................................................................................... 2

1

About This Administration Guide ....................................................................131.1 1.2 1.3 1.4 1.5 1.6 1.7 1.8 NewinThisIssue........................................................................................................... 14 FeaturesNewinRelease4.0......................................................................................... 14 CorrectionsinThisGuide.............................................................................................. 14 Chapters........................................................................................................................ 15 ReferencestoOtherWMDocuments .......................................................................... 16 LinkstoOtherImportantDocuments........................................................................... 17 FeedbackonThisGuide ................................................................................................ 17 ReferencestoStartingandStoppingtheWMService ................................................. 17

2

Management of the WM Server Device ............................................................192.1 2.2 2.3 2.4 2.5 2.6 LocalSetupforLaunchesofIncludedTools ................................................................. 19 PortManagement......................................................................................................... 20 NetworkInterfaceManagement .................................................................................. 22 IPAddressChangefortheWMServer ......................................................................... 22 UseofanUninterruptiblePowerSupply...................................................................... 23 Placementofpkg3FilesforNetworkElementUpgrades............................................. 23

3

MySQL Database Administration .....................................................................253.1 3.2 3.3 3.4 3.5 3.6 3.73.7.1 3.7.2

ChangingtheDatabaseAuthenticationinWM ............................................................ 25 StartingtheDatabase ................................................................................................... 25 ReinitializingtheDatabase .......................................................................................... 25 RestoringtheWMDefaultDatabaseConfiguration..................................................... 26 BackingUptheEntireDatabase ................................................................................... 26 RestoringtheEntireDatabase...................................................................................... 27 MaintainingtheIntegrityoftheDatabase ................................................................... 27AddressingTableCorruptiononaLinuxPlatform ................................................................ 27 AddressingContinuousGrowthofDataFilesonaWindowsPlatform................................. 28

4

Network Discovery Setup and Debug...............................................................314.1 ReadingDiscoveryDebugMessages ............................................................................ 31

4.2 4.3 4.4

TemporarilyDisablingUpdatestothePhysicalMaptoSpeedUpDiscovery .............. 32 GettingGenericElementsDiscovered .......................................................................... 33 ExpandingorShrinkingAreasforPresumedLogicalRelationships.............................. 34

5 6

Predefined Information Structures for Device Support ........................................37 Fault Management Configuration .....................................................................396.1 6.26.2.1 6.2.2 6.2.3

OpeningTrapPorts ....................................................................................................... 39 EnablingPrintforEventsandAlarms ........................................................................... 39EnablingPrintinWindows .................................................................................................... 40 EnablingPrintinLinux ........................................................................................................... 41 EnhancingthePrintedOutput .............................................................................................. 41

6.3

ConfiguringFaultManagementParameters ................................................................ 41

7

Performance Management Configuration ..........................................................477.1 7.2 7.3 ManagedObjects.......................................................................................................... 47 OperatordefinedReports ............................................................................................ 50 CollectedStatisticsPlotforPollFailure ........................................................................ 51

8

Security Management Configuration.................................................................558.1 8.2 8.3 8.4 8.5 8.6 8.7 8.8 8.9 DefiningandManagingaGrouporaUser ................................................................... 55 DefiningandManagingAuthorizedandCustomViewScopes .................................... 56 AddingandManagingOperations ................................................................................ 56 EnablingtheAuthorizedModeforSecurityOperations .............................................. 56 ConfiguringSecurityManagementParameters ........................................................... 58 ConfiguringPasswordComplexity ................................................................................ 58 EnforcingOneSessionperUser.................................................................................... 59 ManagingExpiryforUserAccountsandPasswords..................................................... 61 RestoringaDeletedsuperuserAccount ....................................................................... 61

9

Offline Physical Map Setup .............................................................................639.1 9.2 9.3 DeployingGeoServer .................................................................................................... 63 CreatingMapLayers ..................................................................................................... 64 PrecachingtheMapImages ........................................................................................ 66

1010.1 10.2

Optimization of WM Server Performance ......................................................67OptimizingMySQLDatabasePerformance .................................................................. 67 LockingandTerminatingIdleClientSessions............................................................... 68

11 12 1313.1 13.2 13.3 13.4 13.5

User Scripts Setup .....................................................................................69 Management of WM Server Logs..................................................................71 WM Software Upgrades and Downgrades......................................................73WMUpgradetoRelease4.0......................................................................................... 73 MigrationofOperatorDataThroughWMUpgradePlusOSUpgrade......................... 84 ServicePackorFeaturePackInstallation ..................................................................... 85 ServicePackorFeaturePackUninstallation................................................................. 89 WMDowngradefromRelease4.0 ............................................................................... 91

1414.1 14.2 14.3 14.4 14.5 14.6

WM Software and Feature Licensing .............................................................95LicenseTypes ................................................................................................................ 95 CalculationoftheNumberofNodestobeLicensed.................................................... 95 NotificationsofLicenseLimits ...................................................................................... 96 WMLicenseReplacement ............................................................................................ 96 RecoveryFromForgottenPasswordfortheLicenseManagerAdministratorTool..... 96 DeploymentofRedundantLicenseManagerServers .................................................. 98PurposeofRedundancy .................................................................................................... 98 ConfigurationofLicenseKeyFilesforRedundancy.......................................................... 98 RedundancyDeploymentProcess .................................................................................... 99 FailureorRebootofaLicenseManagerServer.............................................................. 101 ChangeintheIPAddressofaLicenseManagerServer.................................................. 102 ServerRestartsinLMRedundancy ................................................................................. 102

14.6.1 14.6.2 14.6.3

14.7

WorkaroundforaLicenseServerFailure ................................................................... 101

14.7.1 14.7.2 14.7.3

1515.1 15.2 15.3 15.4 15.5 15.6 15.7

WM Administrator Tool for Server Administration ........................................103UsingtheWMServerPanel ........................................................................................ 103 ConfiguringtheBAMPanel......................................................................................... 105 ConfiguringtheDatabasePanel ................................................................................. 106 UsingtheLicensingPanel ........................................................................................... 107 ConfiguringtheNBIPanel........................................................................................... 110 UsingtheOfflinePhysicalMapPanel ......................................................................... 111 ConfiguringtheEmailConfigurationPanel ................................................................ 113

1616.1 16.2

MIB Browser Usage..................................................................................115InvokingtheMIBBrowser .......................................................................................... 115 ConfiguringtheMIBBrowser ..................................................................................... 116

16.2.1 16.2.2 16.2.3 16.2.4 16.2.5 16.2.6 16.2.7 16.2.8

SettingCommonParameters.......................................................................................... 116 StoringTableEntriesinaSerializedFile ......................................................................... 119 StoringTableEntriesinaDatabase ................................................................................ 119 SettingMIBParameters .................................................................................................. 120 LoadingMIBs................................................................................................................... 120 UnloadingMIBs............................................................................................................... 122 PerformingSNMPOperations ........................................................................................ 123 SettingSNMPTableOptions........................................................................................... 126

16.3 16.4

InterpretingMIBBrowserErrorMessages ................................................................. 129 FAQs ............................................................................................................................ 134

Legal Notices and License Agreements .................................................................137CAMBIUMNETWORKS,LTDENDUSERLICENSEAGREEMENT............................................... 137 CAMBIUMPUBLICLYAVAILABLESOFTWARELEGALNOTICESANDENDUSERLICENSE AGREEMENTSFORPUBLICLYAVAILABLESOFTWARE ............................................................ 142 SoftwareIncludedbyCambium.............................................................................................. 143 PackagesThatUseApacheLicenseVersion2.0 ..................................................................... 147 THIRDPARTYPUBLICLYAVAILABLESOFTWARELEGALNOTICESANDENDUSERLICENSE AGREEMENTSFORPUBLICLYAVAILABLESOFTWARE ............................................................ 151 SoftwareIncludedbyCommercialThirdPartySoftware ....................................................... 152 PackagesThatUseGNULesserGeneralPublicLicenseVersion2.1 ...................................... 158 PackagesThatUseApacheSoftwareLicenseVersion1.1...................................................... 166

Abbreviations ....................................................................................................169 Technical Support..............................................................................................171RunningtheCustomerSupportTool ...................................................................................... 171 OptionsforRunningtheSupportTool.................................................................................... 171 ContactingSupportRepresentatives...................................................................................... 172

List of FiguresFigure1:SecurityAdministrationTreeGroupOperations ...................................................................... 57 Figure2:CommandoptiontouploadanindividuallicensefiletoLicenseManager................................. 81 Figure3:UpdateManagerinterface........................................................................................................... 86 Figure4:ServicepackInstallationWizard .................................................................................................. 87 Figure5:ServicepackReadmewindow ..................................................................................................... 88 Figure6:ServicepackUninstallwindow .................................................................................................... 89 Figure7:ServicepackUninstallationstatuspanel ..................................................................................... 90 Figure8:LicensingConfigurationpanelinLicenseManagerwebserver................................................. 100 Figure9:LicensingStatuspanelinLicenseManagerwebserver............................................................. 101 Figure10:WMServerpanelofWMAdministratorTool.......................................................................... 103 Figure11:BAMpanelofWMAdministratorTool .................................................................................... 105 Figure12:DatabasepanelofWMAdministratorTool ............................................................................. 106 Figure13:LicensingpanelofWMAdministratorTool ............................................................................. 107 Figure14:UploadLicenseFiledialog........................................................................................................ 108 Figure15:LicenseManagerStatusdisplaywindow ................................................................................. 109 Figure16:NBIpanelofWMAdministratorTool,activeSNMPV3settings ............................................. 110 Figure17:NBIpanelofWMAdministratorTool,activeSNMPV1/V2settings ....................................... 111 Figure18:OfflinePhysicalMappanelofWMAdministratorTool ........................................................... 112 Figure19:EmailConfigurationpanelofWMAdministratorTool ............................................................ 114 Figure20:MIBBrowsermainGUI............................................................................................................. 115 Figure21:MibBrowserSettingsdialog ..................................................................................................... 117 Figure22:LoadaMIBFilePanelMIBSettingsTab ................................................................................ 121 Figure23:SNMPTable.............................................................................................................................. 126 Figure24:SNMPTableSettingsPanel ...................................................................................................... 127

List of TablesTable1:Portsthatmustbeopen ............................................................................................................... 20 Table2:Structuredinformationresourcespergeneraldevicetype.......................................................... 37 Table3:FaultManagementconfigurablefields ......................................................................................... 41 Table4:PerformanceManagementconfigurablefields ............................................................................ 47 Table5:RecommendedMySQLparametervalues..................................................................................... 67 Table6:Logfilespresentbydefault ........................................................................................................... 71 Table7:MibBrowserGeneraltabfields ................................................................................................... 117 Table8:SecurityparametersforaccessingSNMPv3agents .................................................................... 118 Table9:MibBrowserErrorMessages ....................................................................................................... 129

List of ProceduresProcedure1:TosetupWindowstoallowallAdministratorstolaunchWMtools ................................... 19 Procedure2:Toconfigureserverclientcommunicationsafterinstallation .............................................. 21 Procedure3:TostarttheMySQLdaemonasaserveronLinux................................................................. 25 Procedure4:ToreinitializetheMySQLdatabase ..................................................................................... 25 Procedure5:TorestoretheinstalledWMdatabaseconfiguration ........................................................... 26 Procedure6:TodetectandrepaircorruptedMyISAMdatabasetables.................................................... 28 Procedure7:Toreclaimharddrivespacefromburgeoningdatabasefiles............................................... 29 Procedure8:Totemporarilydisableupdatestothephysicalmapdisplay................................................ 32 Procedure9:Todisplayandstorefailedstatisticspolls............................................................................. 51 Procedure10:Toenableauthorizationsupport......................................................................................... 56 Procedure11:Toaddpasswordcomplexity............................................................................................... 58 Procedure12:Toprohibitmultiplesimultaneoussessionsbyanyoftheusers ........................................ 59 Procedure13:Torestorethesuperuseraccountandthesecuritytoolcache .......................................... 61 Procedure14:TodeployGeoServer ........................................................................................................... 63 Procedure15:Tocreatealayerfromoneimage ....................................................................................... 64 Procedure16:TocreateadatastoreforGeoServerworkspaceimages ................................................... 64 Procedure17:ToverifythatGeoServerconnectstotheimagedatastore ............................................... 65 Procedure18:Toaddanimagetoanexistinglayer................................................................................... 65 Procedure19:Toprecachealltilesforalllevelsofzoom ......................................................................... 66 Procedure20:TooptimizetheMySQLdatabaseresourcesforWM ......................................................... 67 Procedure21:Toestablishsessionidletimelimits .................................................................................... 68 Procedure22:ToupgradeWMtoRelease4.0........................................................................................... 74 Procedure23:TomigrateoperatordatainupgradeofWMplustheOS .................................................. 84 Procedure24:Toinstallaservicepackorfeaturepack ............................................................................. 86 Procedure25:Touninstallaservicepackorfeaturepack ......................................................................... 89 Procedure26:ToresettheLicenseManagerAdministratorToolpassword ............................................. 97 Procedure27:Todeployredundantlicenseservers .................................................................................. 99 Procedure28:ToconfigureWMforofflinephysicalmapimages ........................................................... 112 Procedure29:ToreconfigureofflinephysicalmapimagesinWM.......................................................... 113 Procedure30:Toconfigureserverandadminemailsettings .................................................................. 114 Procedure31:ToinvoketheMIBBrowser ............................................................................................... 115

WM Release 4.0 Server Administration Guide

Issue 3 August 2012

1 About This Administration Guideimportant ........... The installation tool for the WM server deposits an issue of the Cambium Wireless Manager Release 4.0 Server Administration Guide and the Cambium Wireless Manager Release 4.0 User Guide into the ...server/help directory on the WM server. These documents are placeholders. Immediately after your server installation is completed, visit http://www.cambiumnetworks.com/support/planning/index.php?cat=1&type=0. If a later iteration of either or both of these documents is present there, download it and delete the superseded book. Throughout the life of Release 4.0, this web site will always contain the latest supporting documents. Whenever the issue number available at this site is greater than what you currently have, you need to download the replacement.

AllinformationpertainingtotheWMserverfilesystemispresentedfortheserveradministrator acrossthefollowingdocuments: CambiumWirelessManager4.0QuickStartGuide.Thisguidedocuments thesystemrequirements theprocedureforafreshinstallation clientdevicesetup SNMPbroadcasttoggling startingandstoppingtheWMservice launchingtheclient settingup,monitoring,andtroubleshootinginitialdiscovery licensingWMsoftwareandthephysicalmap startingandstoppingtheWMservice portusage databaseadministration serversideadjustmentsfor discovery faultmanagement performancemanagement securitymanagement theofflinephysicalmap

WirelessManagerRelease4.0ServerAdministrationGuide.Thisguidedocuments

serverlogs licensingandupgradingWMsoftware backingupthesystem usingtheMIBbrowser

13

Issue 3 August 2012


1.1

New in This IssueIssue3introducesthefollowingchangestothisguide: Asectionisaddedtochangecollectedstatisticsgraphingsuchthatfailedpollsto unresponsiveelementsareapparentinthedisplaysofstatistics.SeeCollectedStatisticsPlot forPollFailureonPage51. ConfiguringPasswordComplexityonPage58isaddedtodescribehowaschemetomake passwordsmoresecurebywayofmorecomplexcanbeintroduced. EnforcingOneSessionperUseronPage59isadded,providingtheinstructionsforan operatortoconfigureWMtodenyuserswhoattempttoopenasecondclientsession. ThefollowingsectionsareremovedandreplacedbyChapter10,OptimizationofWMServer PerformanceonPage67: OptimizationofSystemResources,previouslySection12.2 OptimizationofOperatorinstalledDatabase,previouslySection12.3

1.2

Features New in Release 4.0Release4.0introducesthefollowingfeatures: eliminationoftheneedforoperatorstohavetheirownphysicalmaplicenses.Thisis reflectedin LicenseTypesonPage95. NotificationsofLicenseLimitsonPage96 Procedure22:ToupgradeWMtoRelease4.0onPage74

asystemconfiguredviewofeventsthatarerelatedtodiscovery.Aswithitemsthatthe NetworkEventsviewlists,theseDiscoveryEventsviewitemsarestoredinthedatabasefor sevendays,unlessoperatorconfiguredforremovalatashorterorlongerinterval,whichcan beaccomplishedbyeditingthevalueoftheCLEAN_EVENT_INTERVALparameterinthe NmsProcessesBE.conffileintheWMserver.SeeConfiguringFaultManagement ParametersonPage41. synchronizationfunctions(buttons)addedtotheWMServerpaneloftheWMAdministrator Tooltolaunchremovalofallevents,alarms,andtrapsinprocess,whileleavingallelements' statisticsuntouched.SeeUsingtheWMServerPanelonPage103. removaloftheSystemAdministrationwebinterface.ThisaffectsProcedure13:Torestore thesuperuseraccountandthesecuritytoolcacheonPage61,whichisrevisedtousethe SecurityAdministrationtoolintheWMclientapplication. variousotherimprovementsthataredocumentedinthereleasenotesand/ortheuser guide.

ForexistingWMoperators,theupgradepathtoRelease4.0andupgradeprocedureareprovided underWMUpgradetoRelease4.0onPage73.

1.3

Corrections in This GuideStep8ofProcedure7:ToreclaimharddrivespacefromburgeoningdatabasefilesonPage29has beenremoved.ThebackupfilesthatStep8advisedtheoperatortocreateareinfactcreatedby MySQLwhenitrestarts.Usinganyotherbackupsforthesecancauseproblems.

14


Issue 3 August 2012

1.4

ChaptersThisserveradministrationguideisorganizedasfollows: Thischapter describesthescopeofthisguideandprovides referencesandlinkstootherimportant documentsthatsupportWMandnetwork elements. Chapter2,ManagementoftheWMServerDevice liststheportsthatmustbeopeninthefirewall settingsontheserverdeviceanddescribesthe configurationthattheserverrequiresfor executingtools,forusingthepropernetwork interfacecard,andforadaptingtoanewIP address.Italsoemphasizestheimportanceof deployinganuninterruptiblepowersupplyand providesthelocationforplacementofdevice firmwarepackagefiles. Chapter3,MySQLDatabaseAdministration describeshowtoconfigure,start,andinitialize thedatabaseandhowtorestoretheWM configurationandbackupthedatabase. Chapter4,NetworkDiscoverySetupandDebug describeshowtomakeserversideadjustments tothewayWMisconfiguredforDiscoveryand wheretofindDiscoveryrelateddebugmessages.

Chapter5,PredefinedInformationStructuresforDeviceSupport liststhestructuredinformationresourcesfor supportdevicesincludedintheserverfilesystem. Chapter6,FaultManagementConfiguration describesserversideadjustmentstohowWM isconfiguredforFaultManagement. Chapter7,PerformanceManagementConfiguration describesserversideadjustmentstohowWM isconfiguredforPerformanceManagement. Chapter8,SecurityManagementConfiguration describesserversideadjustmentstohowWM isconfiguredforSecurityManagement.This discussionincludeshowgroupsandusers, authorizedandcustomview,andoperationsare configuredforsecurity,howtosetthe authorizationforsecurityadministration, configurecertainsecurityparameters,andset whenaccountsandpasswordsaretoexpire. Chapter9,OfflinePhysicalMapSetup describeshowtoinstallandconfigureGeoServer, createmaplayersfromimages,andprepare layersforefficientpanningandzooming.

15

Issue 3 August 2012 Chapter10,OptimizationofWMServerPerformance


providesspecificMySQLdatabaseconfiguration parametervaluesthatarerecommendedforall operatorsandstronglyrecommendedfor operatorswhomanagelargenetworks,andalso describeshowtolimitidleclienttimeby configuringautomaticlockupsandterminations forsessionsthatareidletoolong.

Chapter11,UserScriptsSetup providestheproperpathandmodeformounting operatordefinedscriptsontheserver. Chapter12,ManagementofWMServerLogs describeshowtomanagelogsthattheserver logs. Chapter13,WMSoftwareUpgradesandDowngrades describeshowtoupgradeWMtoRelease4.0. Chapter14,WMSoftwareandFeatureLicensing describesthelicensingandlicensemanagement schemesthatRelease4.0supports:licensetypes (WMserver,physicalmaps,andnodepacks),how tocalculatetheneededquantitiesofthese,and howtheWMclientcautionstheuserof approachinglicensedeficiencies.Thischapter alsoincludesinformationonhowtoreplacethe serverlicense. Chapter15,WMAdministratorToolforServerAdministration showsdefaultvaluesforfieldsofthetoolpanels anddescribeshowtosetupWMtoconnectto GeoServerandretrievemapimagesfromit. Chapter16,MIBBrowserUsage describeshowtoinvoke,configure,and troubleshoottheembeddedMIBbrowser.

1.5

References to Other WM DocumentsIfyouareaclientadministratororuser,usetheCambiumWirelessManagerRelease4.0UserGuide. ForhighleveldescriptionsofnewfeaturesincludedintheinitialdistributionofRelease4.0,orforall disclosuresaboutfeaturesthatthisdistributionsupports,seetheCambiumWirelessManager Release4.0ReleaseNotes. FordocumentationsupportwithBAMintegration,seethefollowingdocumentation: CambiumWirelessManager4.0QuickStartGuide Procedure22:ToupgradeWMtoRelease4.0onPage74ofthisserveradministrationguide CambiumWirelessManager4.0UserGuide

16


Issue 3 August 2012

1.6

Links to Other Important DocumentsForlinkstoimportantdocumentsaboutsupportednetworkelements,visitthefollowingwebpages: PTPdeviceandPTPLINKPlanneruserguidesandreleasenotesat http://www.cambiumnetworks.com/support/ptp/software/index.php?tag=linkplanner PMPdeviceuserguides,releasenotes,andMIBsat http://www.cambiumnetworks.com/support/pmp/software/index.php awiderangeofPMP320devicedocumentsat http://www.cambiumnetworks.com/support/pmp/software/index.php CMMuserguidesandreleasenotesat http://www.cambiumnetworks.com/support/pmp/software/index.php

Forlinkstoimportantdocumentsaboutmanagementtools,visitthefollowingwebpages: WirelessManagerguides,releasenotes,andservicepacknotesat http://www.cambiumnetworks.com/support/planning/index.php?cat=1&type=0 CambiumNetworkUpdaterTool(CNUT)onlinehelpfileandreleasenotesat http://www.cambiumnetworks.com/support/planning/index.php?cat=3&type=0 Prizmguides,releasenotes,anditsSDKat http://www.cambiumnetworks.com/support/planning/index.php?cat=2&type=0

Forlinkstonetworkelementfeaturesandspecifications,visitthefollowingwebpages. CambiumPTPandCambiumNetworksLINKPlannerat http://cambiumnetworks.com/support/ptp/software/index.php CambiumPMPathttp://cambiumnetworks.com/support/pmp/software/index.php

Fordeclarationsofconformityforindividualnetworkelementsintheirvariousfrequencyband ranges,seehttp://www.cambiumnetworks.com/doc.php.

1.7

Feedback on This GuideWeencouragefeedbackonourdocumentation,including opinionsonthestructureorcontentofthedocuments. anotificationtousaboutadeficiencyinaccuracyorcompleteness. anyothercommentsyouhave.

[email protected].

1.8

References to Starting and Stopping the WM ServiceSomeproceduresinthisguide(suchasbackup,restore,andupgrade)requirestart,stop,orrestartof theservice.Youalsomayalsobeaskedtorestartservicesaspartoftroubleshootingeffortsunder theguidanceoftechnicalsupportstaff.Whenyouneedtorestartservices,usetheWM AdministratorToolwithitsJavainterfaceasdescribedunderUsingtheWMServerPanelon Page103.

17


Issue 3 August 2012

2 Management of the WM Server DeviceThischapterdocumentscertainsetupandconfigurationstepsthatarerequiredforproperoperation ofthegeneralfunctionsoftheWMserver.Chaptersthatfollowaddressrequirementsforspecific featuresofWM.

2.1

Local Setup for Launches of Included ToolsBydefault,Windows2008imposesasecurityschemethatlimitstoolexecutionstothedefault Administratoraccount,theBuilt-in account for administering the computer/domain. Itdoesnotextendthisprivilegetootheraccountsthathavebeenconfiguredinthe BuiltinAdministratorsgroup.Toextendittoallofthem,thefollowingworkaroundsetsupthelocal Windowsdevicetopromptthoseadministrators,uponanattempttolaunchatool,forwhetherto allowJavathewriteaccessrequiredfortheexecution.Thisprocedureisrequiredonce,exceptifthe parametersthatitsetsbecomereconfigured.

Procedure 1: To set up Windows to allow all Administrators to launch WM tools1. 2. 3. 4. 5. 6. 7. 8. LogintotheserverdeviceastheAdministratorwithadministrativeprivileges (theBuilt-in account for administering the computer/domain). NavigatetoC:\Cambium\WM\jre\bin. Rightclickthefilejava.exeandselectProperties. Intheresultingdialog,clicktheCompatibilitytab. Nearthebottomofthisdialog,clicktheChangesettingforallusersbutton. Nearthebottomoftheresultingdialog,checkthecheckboxofthe Runthisprogramasanadministratoroption. ClickOKtoconfirmanddismissthislatterdialog. ClickOKtodismisstheoriginaldialog.

NowwhenanymemberoftheBuiltinAdministratorsgroupintheActiveDirectoryDomainServices areaattemptstolaunchatoolfromtheC:\Cambium\WM\jre\binfolder(eitherdoubleclicksthe toolnameorrightclicksitandselectsOpen),Windowswillpromptthatuserforwhethertoallowthe program(Java)tomakechangestothecomputer.TheusershouldclicktheYesbuttoninresponseto thisprompt. Othersectionsofthisadministrationguideprovidevariousproceduresthatinvokesuchtools.These sectionsincludebutmaynotbelimitedto ReinitializingtheDatabaseonPage25 DefiningandManagingaGrouporaUseronPage55 RestoringaDeletedsuperuserAccountonPage61 ServicePackorFeaturePackInstallationonPage85 InvokingtheMIBBrowseronPage115 RunningtheToolfromtheServeronPage171

19

Issue 3 August 2012


2.2

Port ManagementThefollowinglistshowsalistofthespecificportassignmentsinusebyWirelessManager components.Eachmustbeopeninthefirewall,ifafirewallisimplemented.

Table 1: Ports that must be openServer Port Usage1

25 OutboundconnectiontoSMTPserverforemailconfiguration. 80 OutboundconnectiontoBAMservertolaunchitsinterface. 161 InboundUDPforthenorthboundinterface(NBI). 161 OutboundUDPfordeviceSNMPqueriesandconfigurations. 162 InboundUDPforSNMPtrapsfromdevices. 1234 InboundUDPforAPstorequestauthenticationsfromBAM. 1476 Configurationserver. 1482 Socketserver. 2000 Networkmanagementbackendserver. 2501 ToturntheSMAutoupdatefeatureonoroffinAPs.

WM

3306 QueriestotheMySQLdatabase. 6900 InboundTCPforTFTPconnectionsinthefirmwareupgradeprocess. 8003

OutboundUDPforSNMPresponseoverthenorthboundinterface (NBI). TCPconnectionsbyTomcatandwebserverforaccesstodevice managementwebpages.2

8009

8090 InbounddatafromtheBAMserver. 9090 InboundTCPforthewebserver. 32900

NMSSocketforTCPcommunicationbetweentheWMserverand WMclient.3 NMSFESecondaryforTCPcommunicationbetweentheWMserver andWMclient.4

33100

61001 OutboundUDPfromBAMtoAPs. 27000 WMtorequestlicenses. 5

LicenseManager27443

SecurecommunicationsbetweenWMandthewebserverofLicense Manager.5

20


Issue 3 August 2012 Usage

Server

Port1521

OptionalOracleJavaNamingandDirectoryInterface(JNDI) connectionpoolviaTomcat. CommunicationsbetweenWMandthewebadministrationinterface ofGeoServer.

GeoServer8080

NOTES:1. 2. 3. 4. 5.

Portnumberisreconfigurablein.../server/conf/WibbWMSConfiguration.xml. Portnumberisreconfigurablein.../server/Apache/Tomcat/conf/server.xml. Mustbeconfiguredin.../server/conf/transportProvider.confwithWMserver stoppedafterWMinstallation. Mustbeconfiguredin.../server/conf/serverparameters.confwithWMserver stoppedafterWMinstallation. Portnumberisreconfigurablein.../server/conf/licensing.xml. AsindicatedinNote3andNote4above,theNMSSocketportandNMSFESecondaryportmustbe configuredafterWMhasbeeninstalledandstopped.Todoso,performthefollowingsteps.

Procedure 2: To configure server-client communications after installation1. 2. 3. 4. IftheWMserverisrunning,launchtheWMAdministratortool. StoptheWMserver,asdescribedunderUsingtheWMServerPanelonPage103. Openthefile.../server/conf/transportProvider.confforediting. Findthetag.

5.

Changeitsvaluefrom0tothatofanyavailableTCPport(forexample,32900).

21

Issue 3 August 2012 6. 7. 8. 9. Saveandclosethefile.


Openthefile.../server/conf/serverparameters.confforediting. Scrolltothebottomofthefile. Insertalinethathasthefollowingtext:NMS_FE_SECONDARY_PORT 33100 where3100isanexampleavailableTCPport.

10. Saveandclosethefile. 11. StarttheWMserver,asdescribedunderUsingtheWMServerPanelonPage103.

2.3

Network Interface ManagementThelicensesthatCambiumNetworksprovidesdependontheparticularnetworkinterfacecard(NIC) thatyourLicenseManagerserverisusing.IfyouaddorremoveaNIConyourLMserverdevice,your WMlicensemayceasetobevalid.Ifthisoccurs,contactCambiumNetworkstorequesta replacementlicense. MultipleNICsonyourWMservermaypopulatetheincorrect(otherNIC)IPaddressintotheJava WebStartfile.TofixandpreventthisonaWindowsplatform,performthefollowingsteps: 1. 2. 3. 4. 5. OpentheControlPanel. Intheleftpanel,clickSwitchtoClassicView. Intherightpanel,doubleclickNetworkConnections. FromthemainmenuoftheNetworkConnectionswindow,select AdvancedAdvancedSettings. IntheAdaptersandBindingstaboftheAdvancedSettingswindow,ensurethatthe connectionoftheWMserverNICishigherinthelistthantheotherNIC.

2.4

IP Address Change for the WM ServerOnaLinuxplatform,wheretheWMserverIPaddressdiffersfromthatofitspreviousdeployment, somefurtheractionisrequired: IftheIPaddressisdynamic,thenarebootoftheserverdeviceallowstheservertoupdate itsinformation. IftheIPaddressisstatic,thenthe/etc/hostsfilemustbeupdatedtocontainavalid mappingofitsIPaddresstoitshostname(localhost.localdomainisnotvalid).

22


Issue 3 August 2012

2.5

Use of an Uninterruptible Power SupplyAswithanysoftwarethatkeepsadatabase,aninterruptionofpowertothehostdeviceofthe softwarecanresultincorruptionofthedatabasethatrendersitscontentsirretrievableoruseless, becausethesoftwarecannotclosethedatabaseinpropersequence.Historicaldataaboutdevices thatWMwillcontinuetomanageislost.Tokeepthedatasaferfromcorruption,anoperatorcan deployanyofthefollowing: theWMHighAvailabilityfeaturewithdatabaseredundancy(seeCambiumHighAvailability forWirelessManagerServeronaLinuxPlatformSetupGuide) operatormanageddatabaseredundancyonaWindowsplatform anuninterruptiblepowersupply(UPS)

AUPSdeviceisrecommendedforatleastminimalprotection.

2.6

Placement of pkg3 Files for Network Element UpgradesPlaceandkeepinthe.../server/Tftpdirectoryoftheserverfilesystemall.pkg3filesthatneed tobeavailabletotheclientapplication.Thesewillbeautomaticallyloadedforpossibleselectionfrom PackageManagerbytheauthorizedclientuser.Inthatutility,theclient isnotcapableofbrowsingintheserverfilesystem. maybrowsetheclientdevicefilesystemtofindandloadadditional.pkg3files.Theserver willallowthosefilestobethenuploadedintothe.../server/Tftpdirectorysothatthey arelistedthenexttimethatPackageManagerislaunchedintheclient.

Giventhetworepositoriesforpackagefiles,eachhasthefollowingpotentialadvantage: thefilesinthe.../server/Tftpdirectoryoftheserverarealwaysautomaticallyloaded intoPackageManagerselection,regardlessofanyproblemstheoperatormayexperience withtheAddoperationinthatutility. thefilesselectedintheclientfromanywhereintheclientfilesystemareavailablefor loadingregardlessoftheanynetworkingconstraintsorconditionsthatwouldinhibit downloadsfromtheservertotheclient.

23


Issue 3 August 2012

3 MySQL Database AdministrationThischapterexplainshowtoconfigureWirelessManagertosupporttheMySQLdatabase.

3.1

Changing the Database Authentication in WMIfthedatabaseusernameandpasswordinMySQLareeverchanged(forexample,throughthe commandlineinterfacetoMySQLServer),thenyoumustmakethecorrespondingchange(s)inthe DatabasepaneloftheWMAdministratorTool.SeeConfiguringtheDatabasePanelonPage106. Theseparameterscanbeedited,butultimatelymustmatchtheusernameandpasswordconfigured inthedatabaseitself.EditsintheDatabasepanelandcorrespondingchangesviathecommandline interfacetoMySQLcanalsobeusedtoovercomefromaforgottenpasswordorusernameforthe database.important ........... Do not make any changes by directly editing the file /usr/local/cambium/wm/server/conf/database_params.conf in Linux (or the C:\Cambium\WM\server\conf\database_params.conf in Windows.

WMencryptsthedatabasepasswordthatisconfiguredintheWMAdministratorTool.So,the passwordstringdoesnotappearhumanreadableanywhereintheserverfilesystemortheclient application.

3.2

Starting the DatabaseWirelessManagerstartsandinitializestheMySQLdatabasebeforestartingWirelessManager modules.TheMySQLdaemonisstartedwhenthestartWMSscriptfilelocatedinthe C:\Cambium\WM\server\binfolderinWindowsisinvoked. InLinux,youneedtostarttheMySQLdaemonasaservicebeforestartingtheWirelessManager Server.

Procedure 3: To start the MySQL daemon as a server on Linux1. 2. Loginasasuperuser. Enter$ /etc/rc.d/init.d/mysql start.

3.3

Re-initializing the DatabasePerformthefollowingprocedureifyouhavemodifiedanyofthedefaultsettingsandneedtore initializetheMySQLdatabase.Beawarethatthisprocedureremovesallofdatathatyourdatabaseis currentlystoring.Alldiscoveredelementsandallofthehistoricalinformationthatisassociatedwith themwillbedeleted.

Procedure 4: To re-initialize the MySQL database1. 2. IftheWirelessManagerServerisalreadystarted,doapropershutdownofserver. Donotterminatetheprocessabnormallyorabruptly. IfWirelessManagerisalreadyinstalled,runthereinitialize_databasescriptfile locatedinthe/usr/local/cambium/wm/server/bindirectoryinLinux

25

Issue 3 August 2012

WM Release 4.0 Server Administration Guide (ortheC:\Cambium\WM\server\binfolderinWindows)tocleanupthetablesinthe database. 3. 4. MakesurethattheMySQLprocessisrunning. StarttheWirelessManagerServer.

Nowalloftheelementsmustberediscovered,andallperformancedatachartsandotherhistorical informationwillinitiallynotexist.

3.4

Restoring the WM Default Database ConfigurationPerformthefollowingprocedureonlyintheunlikelyeventthatyouchangedthetablestructureor deliberatelyalteredanyotherSQLsettingsandnowwanttoreverttotheconfigurationthattheWM installationtoolhadinstalled.

Procedure 5: To restore the installed WM database configuration1. 2. IftheWirelessManagerserverisalreadystarted,doapropershutdownofserver. Donotterminatetheprocessabnormallyorabruptly. Copythedatabase_params.confandsnmpDatabaseSchema.conffileslocatedinthe /usr/local/cambium/wm/server/conf/MySQLdirectoryinLinux (ortheC:\Cambium\WM\server\conf\MySQLfolderinWindows)tothe /usr/local/cambium/wm/server/conf/directoryinLinux (ortheC:\Cambium\WM\server\conffolderinWindows). IfusingSNMPv3,adddatabaseconnectioninformationtotheSnmpDefaultProperties.xmlfileinthe/usr/local/cambium/wm/server/conf directoryinLinux(ortheC:\Cambium\WM\server\conffolderinWindows).

3.

4. 5. 6.

Indatabase_params.conffileintheconfdirectory,specifythemachinenamewhere thedatabaseistorun,theusername,andthepasswordforthedatabase. MakesurethattheMySQLprocessisrunning. StarttheWirelessManagerserver.

3.5

Backing Up the Entire DatabaseGoodpracticeistoperiodicallyperformbackupsofyourWMdatabase.Thissectiondescribeshowto createabackupcopyofyourentiredatabase(itsconfigurationanditscontents)andtheentireWM systeminasingleoperation.Nodatabaseonlybackupissupported,andnonewouldalsobackupthe essentialinformationthatisstoredinfilesintheWMserverfilesystem.note ............. Although the backup utility supports running while the WM service is up, it cannot keep stride with changes made via the Web Start client while the script is running. Thus, it is necessary to ensure that no Web Start client session is in progress at any time between when this script is launched and when it is finished. If a client session is running during the execution of the script, then a warning message informs the user of the backup operation and advises that all current requests will be satisfied when the backup is complete.

Theonlysupportedbackupisavailableasaclickoption(SystemBackup)intheWMAdministrator Tool.SeeUsingtheWMServerPanelonPage103.

26


Issue 3 August 2012

3.6

Restoring the Entire DatabaseRestoringtheMySQLdatabaseisaseffectiveasthedatabasesnapshotthatwasbackedup (seeBackingUptheEntireDatabaseabove).Nodatabaseonlybackupissupported,andnonewould alsobackuptheessentialinformationthatisstoredinfilesintheWMserverfilesystem.note ............. To avoid confusion, ensure that no Web Start client session is in progress at any time between when the restore command option is launched and when it is finished.

Theonlysupportedrestoreisavailableasaclickoption(RestoreSystem)intheWMAdministrator Tool.SeeUsingtheWMServerPanelonPage103.Thisoptionrestoresnotonlythedatabase snapshot,butalsotheessentialfilesfromtheWMserverfilesystem.

3.7

Maintaining the Integrity of the DatabaseWMisdesignedtoproperlypopulateandreaditsownupdatesfromtheWMdatabase.Anychange indatabasecontentsthatanoperatordirectlymakesisexpresslynotsupportedandislikelytoresult inafailureofsomeproportioninthesystem. Itisstronglyrecommendedthatyoudeployanuninterruptiblepowersupply(UPS)fortheWMserver device.Eitherapoweroutageorahardrestartofthedevicewhileitisoperatingcanresultin corruptionofthedatabasetablesandmayrequirereinitializingthedatabaseandrediscoveringallof theelementsinyournetwork.AUPScansupplyenoughpowertoallowWMtoproperlyshutdown andavoiddamagetothedatabase. Despitegoodpractices,overtimeWMdatabaseswilllikelyrequirelocalmaintenance.Useoneofthe followingsectionstoavoidorcorrectWMdatabaseproblems: AddressingTableCorruptiononaLinuxPlatformonPage27 AddressingContinuousGrowthofDataFilesonaWindowsPlatformonPage28

3.7.1

Addressing Table Corruption on a Linux PlatformThedefaultdatabaseengineforMySQLonaLinuxplatformisMyISAM.Withthisengine,database tablescanbecomecorrupted,regardlessofgoodoperatorpractices.Unexpectederrorssuchasthe followingmaysignalthatthishasoccurred:Table './WMSDB/WMS_CUSTOMUSERPROPS' is marked as crashed and should be repaired

Periodicallysearchthecontentsofthefile.../server/logs/stderr*.txtforthepresenceof errorslikethis.Whenthesearepresent,useoneormoreofthefollowingprocedurestofindthe corruptedtable(s)andmakeappropriaterepairs: Reviewthedescriptionsofthetoolsandprocedures: http://www.databasejournal.com/features/mysql/article.php/3300511/RepairingDatabase CorruptioninMySQL.htm. Useaprocessofoneormoreofthefourstagesforcheckingalltablesatonceandrepairing corruptedtables:http://dev.mysql.com/doc/refman/5.0/en/myisamrepair.html.

27

Issue 3 August 2012

WM Release 4.0 Server Administration Guidenote ............. The process above requires stopping the MySQL service. The following does not.

UseProcedure6:TodetectandrepaircorruptedMyISAMdatabasetablesonPage28 todetectandrepaircorruptedtableswithouttheneedtostoptheMySQLservice.

Procedure 6: To detect and repair corrupted MyISAM database tables1. 2. 3. SeeReferencestoStartingandStoppingtheWMServiceonPage17. StoptheWMservice. AtyourLinuxshellprompt,enteroneofthefollowingcommands:mysqldump --user=root --password=public --databases wmsdb >wm_databases.sql mysqldump --user=root --password=public --databases wmsdb backedupdb1 [backedupdb2 ...backedupdb3] >wm_databases.sql mysqldump --user=root --password=public all-databases >wm_databases.sql

4. 5.

LogintoMySQL. Reviewhttp://dev.mysql.com/doc/refman/5.0/en/checktable.html.

note ............. In Steps 6, 8, and 9, the commands shown are to be executed on each table separately, not all tables in a single execution. The variable tablename represents the an individual table, such as wms_customuserprops.

6.

Todetecttablecorruptionineachtable,enterthefollowingcommandat themysql>prompt:CHECK TABLE tablename;

7. 8.

Reviewhttp://dev.mysql.com/doc/refman/5.0/en/repairtable.html. Torepairatablethatwasfoundinthestepabovetobecorrupted,enterthefollowing commandatthemysql>prompt:REPAIR TABLE tablename;

9.

Toverifythattherepairedtableisnolongercorrupted,enterthefollowingcommand atthemysql>prompt:CHECK TABLE tablename;

10. Ifanytableremainscorrupted,see http://www.databasejournal.com/features/mysql/article.php/3300511/RepairingDatabase CorruptioninMySQL.htmand http://dev.mysql.com/doc/refman/5.0/en/myisamrepair.html. 11. Whenalltableshavebeencheckedandsuccessfullyrepaired,starttheWMservice. 12. Resumenormaloperations.

3.7.2

Addressing Continuous Growth of Data Files on a Windows PlatformThedefaultdatabaseengineforMySQLonaWindowsplatformisInnoDB.Withthisengine,certain datafilescontinuouslygrowandeventuallyuseasignificantamountofharddrivespace.Nothing, evendeletingdatafromthedatabase,causestheirsizetoshrinkorlevelout.Atleastannually, reclaimthisstoragespacebyperformingProcedure7:Toreclaimharddrivespacefromburgeoning databasefilesonPage29.

28


Issue 3 August 2012

Procedure 7: To reclaim hard drive space from burgeoning database files1. 2. 3. 4. Reviewhttp://dev.mysql.com/doc/refman/5.0/en/innodbdatalogreconfiguration.html. ReviewReferencestoStartingandStoppingtheWMServiceonPage17. StoptheWMservice. AtyourDOScommandutilityprompt,enteroneofthefollowingcommands:mysqldump --user=root --password=public --databases wmsdb >wm_databases.sql mysqldump --user=root --password=public --databases wmsdb backedupdb1 [backedupdb2 ...backedupdb3] >wm_databases.sql mysqldump --user=root --password=public all-databases >wm_databases.sql

5. 6. 7.

StoptheMySQLservice. NavigatetotheMySQLdatafolder. Findallexistingtablespacefiles.

note ............. In the default WM implementation, these files are ib_logfile0, ib_logfile1, and ibdata1.

8. 9.

Deleteallexistingtablespacefilesfromthisfolder,includingtheibdata*andib_log* files. IfyouwanttoretaincopiesofthedatabasefoldersthatcorrespondtotheWMdatabase(s) thatyoubackedupwiththemysqldumpcommandinStep4,copythemtoportablemedia.

10. Deletethosedatabasefoldersfromtheharddrive. 11. StarttheMySQLservice. 12. Enterthefollowingcommandtoimportthedumpfilethatyoucreatedwiththemysqldump commandinStep4:mysql --user=root --password=public < wm_databases.sql

13. IfapplicationsinadditiontoWMareusingtheinstanceofMySQL,usethisprocedureto backup,delete,andrestoretheirschemasaswell. 14. StarttheWMservice.

29


Issue 3 August 2012

4 Network Discovery Setup and DebugAllchangesthataremadeintheDiscoveryConfiguratortooloftheWebStartclientareimmediately reflectedintheWMserverfilesystem.Onsubsequentstartups,theWirelessManagerserverreads thediscoveryconfigurationinformation,evenifthedatabaseisnotreinitialized.

4.1

Reading Discovery Debug MessagesBydefault,detaileddiscoveryrelateddebugmessagesareloggedinthe AggregatedDiscoveryLogN.txtfileunderthe/usr/local/cambium/wm/server/logs directoryinLinux(ortheC:\Cambium\WM\server\logsfolderinWindows).Excerptsfromthislog areasfollows:

[16 Feb 2012 20:58:00:750] ================================================== Begin Basic Discovery Of: 10.60.2.35 ================================================== [16 Feb 2012 20:58:00:750] DISCOVERY(10.60.2.35:258): APDiscoveryFilter attempting discovery of [64 ed 57 20 15 4e] (isDHCP=true) [16 Feb 2012 processing. 20:58:00:765] DISCOVERY using a maximum of 6 threads for Deep Discovery

[16 Feb 2012 20:58:00:906] DISCOVERY(10.60.2.35:258): Device matched all 7 probes for device type PMP.320.AP (PMP.320.AP(e2.1.x)). [16 Feb 2012 [16 Feb 2012 valid MAC. 20:58:00:906] 20:58:02:359] DISCOVERY(10.60.2.35:258): Device has 7 Named Field(s) DISCOVERY(10.60.2.35:258): setNameToMac: MO name is a

[16 Feb 2012 20:58:02:359] DISCOVERY(10.60.2.35:258): validateExistingNode: No nodes exist with IP: [10.60.2.35] having invalid names. [16 Feb 2012 20:58:02:453] 57 20 15 4e to database [16 Feb 2012 [16 Feb 2012 for device 20:58:02:468] 20:58:02:468] DISCOVERY(10.60.2.35:258): Successfully added object 64 ed DISCOVERY using PDU max size 512 during deep discovery DISCOVERY(10.60.2.35:258): Creating Deep Discovery thread

[16 Feb 2012 20:58:02:468] DISCOVERY(10.60.2.35:258): APDiscoveryFilter completed shallow discovery of [64 ed 57 20 15 4e] (isDHCP=true) [16 Feb 2012 20:58:02:468] ================================================== End Basic Discovery Of: 10.60.2.35 ==================================================

AftertheDiscoverymoduleisinitialized,somediscoveryeventmessagesareavailableintheclient amongtheothernetworkeventmessages.TheDiscoveryLogtaboftheDiscoveryConfiguratorinthe clientprovidesthefullsetofdiscoverymessages,asitdisplaysthefullcontentsofthe discoveryLogs.txtserverfile.However,forrunningscriptsormakingselecteddumps,youmay findthataccesstothisserverfileismoreconvenient.

31

Issue 3 August 2012


Inaddition,someotherDiscoveryrelatedmessagesareloggedinthefilestdoutN.txtinthesame directory.Thefollowingareexamplemessagesfromthislog:[24 Aug 2010 03:14:11:103] DISCOVERY(10.100.13.92:213): Unable to write to device while testing Write Community. Device is currently not writeable. Device's Write Community must be set manually. [24 Aug 2010 03:41:42:206] DEEPDISCOVERY(10.100.13.73:264): Device is 99% discovery complete. OIDs timed out: 280 [24 Aug 2010 03:41:43:123] ERRORLOG_POLLMGR(83): Polling Delayed for 5 minutes. Deep Discovery is still running for 4 devices.

4.2

Temporarily Disabling Updates to the Physical Map to Speed Up DiscoveryThephysicalmapmaysometimesnoticeablylagbehindthesecoresystems.Thisbehaviorisdesigned sothatupdatesinthephysicalmapdonotinterferewithWMcoredatagatheringandprocessing.In typicalnetworks,thedelaymaybeimperceptiblebut,especiallywhileWMisinitiallydiscovering thousandsofdevicesinaverylargenetwork,thephysicalmapmaydisplaytheupdatedinformation onlyafterminutesorevenhourshaveelapsed. Temporarilydisablingthecapabilityofthephysicalmaptodisplaychangescanspeedtheinitial devicediscoveryprocessbyafactorof3.Foryouroperations,thismaybemoreadvantageousthan experiencingthedesignedlag.Asserveradministrator,youcandosoasfollows.

Procedure 8: To temporarily disable updates to the physical map display1. 2. 3. 4. StoptheWMserver. SeeReferencestoStartingandStoppingtheWMServiceonPage17. Navigatetothe/usr/local/cambium/wm/server/confdirectoryinLinux(orthe C:\Cambium\WM\server\conffolderinWindows). OpenthefileNmsprocessesBE.confforediting. Findthefollowinglines:

PROCESS com.motorola.wibb.ems.platform.server.starleaf.core.StarleafManager ARGS INCREMENTAL_DEVICE_UPDATE_ON true FULL_DATA_REFRESH_INTERVAL 86400

5. 6. 7. 8. SetthevalueofINCREMENTAL_DEVICE_UPDATE_ONtofalse. Saveandclosethefile. Starttheserver. SeeReferencestoStartingandStoppingtheWMServiceonPage17. Notifytheclientapplicationuserthatthisfeatureisdisabled.

32


Issue 3 August 2012

9.

Afterthediscovery(orotheroperationforwhichyoutemporarilydisabledthefeature)is completed,performthefollowingsteps:

10. StoptheWMserver. 11. ReopentheNmsprocessesBE.conffileforediting. 12. ResetthevalueofINCREMENTAL_DEVICE_UPDATE_ONtotrue. 13. Saveandclosethefile. 14. Starttheserver.

4.3

Getting Generic Elements DiscoveredWMdiscoversasagenericelementanySNMPenablednonCambiumdeviceforwhichnovalid devicedefinitiontemplateexists.ThisisdistinguishedfromaCambiumdevices,forwhichadevice definitiontemplateispartoftheWMsoftwaredistribution,andfromanythirdpartydevicesfor whichtheoperatorhascreatedavaliddevicedefinitiontemplate. However,genericelementdiscoverydependsalsoonthefollowingworkaround.Checktosee whetherWMhasdiscoveredallofthegenericdevicesinthenetwork.ForanythatWMdidnot discover,performthefollowingsteps: 1. 2. 3. 4. SearchtheclientlogfortheIPaddressofthedevice. IfanentryisassociatedwiththatIPaddress,notewhethertheentryindicatesthatWM regardedthedeviceasunmanaged. Iftheentrydoes,openthefile...server\conf\devices\Generic_Element.xml forediting. IntheElement tag,adddisableDHCP="true",asshowninthefollowingeditedexcerpt:- -

5. 6.

Validatethexmlcontent. Writeandclosethefile.

TheresultisthatWMsucceedsindiscoveringallgenericelementsinyournetwork.However,WM willusetheMACaddressastheName(ID)ofanythatsupportandproperlyimplementDHCP.

33

Issue 3 August 2012


4.4

Expanding or Shrinking Areas for Presumed Logical RelationshipsBasedoncomparisonsofcertainsettingsindevicetemplatesontheserverandthegeolocations definedfordevicesinyournetwork,thediscoveryengineinWMpresumeslogicalrelationships amongdevicesanddisplaysthese.Thepresumptionsaremadewheneverboth thegeolocationsliewithintemplatedefinedpositions(tolerances)thatestablishfour cornersofarectangle thedevicesareofdevicetypesthattogetherhaveapresumablehierarchicalrelationship (wouldconstituteanextendedfamily).

Perdevicetype,thetolerancescanbeeitherthedefaultsthatthedevicetemplatehasdefinedor newonesthattheserveradministratorhaseditedintothedevicetemplate.Administratorswhoedit devicetemplatesshouldkeepinmindthattheeditsapplytoalldevicesofthedevicetypeuntil furthereditsaremade. Thetolerancethatyousetisthedistanceinmeterstothenorthwest,northeast,southwest,and southeastfromanelementofthisdevicetype.WMwilllogicallylinktheelementtoanyelement configuredbytheattributetheirDeviceTypeinaKinLocationtag,ifdiscoveryfindsthatitsgeo locationiswithinthetolerance(thevalueoftheattributetolerance_minthetag).Thefollowingare examplesoftagcontentsinthecontextoftheirdevicespecifictemplatenames: - -

- -

34


Issue 3 August 2012

- - - BHS not included because they have different location attributes

- -

35


Issue 3 August 2012

5 Predefined Information Structures for Device SupportTheserverfilesystemincludesstructuredinformationresourcestosupportdevicesasindicatedin Table2.

Table 2: Structured information resources per general device typePredefined Structured Information Resource Devicedefinitiontemplate1 Configurationvalues pushtemplateconf/devices/ Default Templates/Configuration Templates/

Path to Resource ...WM/server/

Configuredvaluesreporttemplate Default Templates/Report Templates/ Systemreport2 NOTES:1. Default Templates/System Reports/

ThesetemplatesconfigurehowWMwillrecognizethedevicetypeduringdiscoveryand howWMshouldrepresentthedevicetypeintheuserinterface.Thetemplatesinthis directoryrefertoandpullinformationfromBasefilesinthetemplatessubdirectory. Unlikethetemplates,thesereportsdonotsupportgenericelements.

2.

37


Issue 3 August 2012

6 Fault Management ConfigurationFaultManagementhandleserrorconditionsthatcauselossoffunctionalityofnetworkresourcesand itprovideseventmanagement,including alertgeneration automatedactions eventcorrelation filteringfortraps,events,andalerts parsingfortrapsandevents

Thesefeaturesenablenetworkoperatorstodetect,isolate,andrepairmalfunctionsinthenetwork andinitscontrolsubsystem.

6.1

Opening Trap PortsAtrapportistheportonwhichtheWirelessManagerServerlistensforSNMPnotifications.Asthe serveradministrator,youcanconfigurethetrapportsinthefile /usr/local/cambium/wm/server/conf/trapport.confinLinux (ortheC:\Cambium\WM\server\conf\trapport.confinWindows).Thefollowingcaveatsapply: ThespecifiedportsarenotassociatedwithaparticularTrapParser,butageneral configuration. Whennoportisspecified,trapswillnotbereceivedatall. Multipleportscanbespecifiedusingacommaseparator,forexample8001,8002. Ensurethatthespecifiedportsarefree. Thedefaulttrapportis162.

6.2

Enabling Print for Events and Alarmsnote ............. See also the section titled "Printing Events" in the Cambium Wireless Manager Release 4.0 User Guide.

Bydefault,theprintoptionforEventsandAlarmsinWirelessManagerisnotconfigured.Toenable printing,configurationmustbedoneinNmsProcessesBE.conffileinthe /usr/local/cambium/wm/server/confdirectoryinLinux (ortheC:\Cambium\WM\server\conffolderinWindows).Thiswillallowthecurrentcolumnsof analertsoreventspaneltobesenttoaprinterthatexistsinthenetworkoftheWMserver(and printingtoafileinthefilesystemof,orgreaternetworkof,theWMserver).Thefollowingisan excerptfromtheNmsProcessesBE.conffile:#java com.adventnet.nms.eventdb.EventMgr [EVENT_DEBUG true/false] [SAVE_DIR save_dir] [PRINT_COMMAND print_command] [CLEAN_EVENT_INTERVAL num_days] [ALERT_DELETE_INTERVAL num_hours] [EVENT_WINDOW_SIZE logsize] [EVENT_OBJECTS_IN_MEMORY num] [MAX_EVENT_PROCESS_QUEUE num] [ALERT_OBJECTS_IN_MEMORY num] [EVENT_JDBC true/false] [ALERT_JDBC true/false] [ALERT_TO_MANAGEDOBJECT_PROPOGATION max/latest/none] [GROUP_ALERTS_MODE none/max/latest][ALERTS_USER_PROPERTY none/latest/append]

39

Issue 3 August 2012


TheprintfileargumentshouldbeconfiguredbasedonthevaluespecifiedforSAVE_DIRparameter. Whenyouexecutetheprintfunctionalityfromtheclient,WMtemporarilystoresalltheEvent/Alarm detailsinafilenamedprintfile.tmpintheSAVE_DIRdirectory.WhenPrintisinvokedthenext time,thedetailsintheprintfile.tmparereplacedbythosecorrespondingtothenextrequest.note ............. The following sections include example values for print_command. All of these values are enclosed in double quotes, which are required for WM to read. When double quotes are not present, the system throws a TimedOutException 60 seconds after the client users launches the Print operation.

6.2.1

Enabling Print in WindowsForaWMserveronWindows,theprintcommandshouldbeconfiguredasfollows:PRINT_COMMAND "lpr -S server -P printername filename"

where serveristhenameofthehostthatprovideslpdservice. printernameisthenameoftheprintqueue,whichismaintainedbytheprintertoputthe

jobintheprintqueueandprocess.filenameisthenameofthetemporaryfilethatWMshouldwriteintotheSAVE_DIR

directory. ExamplesSAVE_DIR state PRINT_COMMAND "lpr -S Duplex1 -P test state\\printfile.tmp"

where Duplex1isthehostnameoftheserver. testisthenameoftheprintqueue. printfile.tmpisthefiletobeprintedinthestatedirectory.

Foraserverthatusesthesharedprinterofanotherdevice,theprintcommandshouldbeconfigured asfollows:SAVE_DIR state PRINT_COMMAND "cmd /c copy state\\printfile.tmp \\\\user1\HPLaserJ"

where printfile.tmpisthefiletobeprintedinthestatedirectory. user1isthedevicetowhichtheprinterisconnected. HPLaserJisthenameoftheshare.

40


Issue 3 August 2012

6.2.2

Enabling Print in LinuxForaWMserveronWindows,theprintcommandshouldbeconfiguredasfollows:PRINT_COMMAND "lpr filename"

wherefilenameisthenameofthetemporaryfilethatWMshouldwriteintotheSAVE_DIRdirectory (forexample,save_dir//printfile.tmp).

6.2.3

Enhancing the Printed OutputYoumaywishtohavethecontentformattedbeforeitissentfortheprintprocess.Todoso,youcan scriptyourownprint.batorprint.shcommand,whichcallsthefmtcommandfirstandthentheprint commandasdocumentedabove.ForthiscaseinLinux,forexample,theprintcommandshouldbe configuredasfollows:PRINT_COMMAND "sh print.sh"

6.3

Configuring Fault Management ParametersTheFaultManagementmodulecanbeadministeredbyconfiguringthefollowingparametersin EventMgrprocessintheNmsProcessesBE.conffileinthe /usr/local/cambium/wm/server/confdirectoryinLinux (ortheC:\Cambium\WM\server\conffolderinWindows).note ............. If you configure any parameter, you must restart the Wireless Manager server to put the new value into effect.

Thefollowingdescriptionsapplytotheconfigurableparameters.

Table 3: Fault Management configurable fieldsArguments Description OptionsEVENT_DEBUG AsofthisRelease,this parameterisnotinuse.

Values Default PRINT_COMMANDis dependentonSAVE_DIR. WhenPrintactionis invokedfromtheclient, thecontentswillbe temporarilysavedinafile printfile.tmpfileunder andthen printed.

Notes

SAVE_DIR

Usedtospecifythe directoryinwhichEvents andAlertsviewedbythe clientaretobesaved, whenthe'Save'optionis invokedfromtheclient.

Avalid& existing directory name,with thepath, relativeto WM_Home

state

41

Issue 3 August 2012


Arguments

Description OptionsThe Operating System specific command thatcould invokeprint actionfrom thesystem.

Values Default Notes

PRINT_COMMAND

Usedtospecifythe commandtobeexecuted, whentheuserinvokesthe Printoptionfromthe EventViewer/AlertViewer ofAppletclient.

PRINT_COMMANDis dependentonSAVE_DIR.

CLEAN_EVENT_INTERVAL

Usedtospecifythe numberofdaysafter whichtheEventshaveto becleanedup.

Anypositive integer value.

*7days

TheEventsolderthanthis numberofdays,willbe removedfromthesystem. Onceineveryhour,a checkforolderEventswill bedone. Whennegativevalueis specifiedforthe parameter,Eventswillnot bedeletedbasedontime interval. Onlythelatestnumberof eventsspecifiedbythis optionwillbemanagedby thesystem.Allother eventswillbeinthe database,butcannotbe viewedormanaged. However,thetotal numberofEventsinthe Clientmayexceedthe EVENT_WINDOW_SIZE, untilyourefreshit manuallyornavigatethe treenodes/pagesand thenrevisittheconcerned panel. Thisisbecause,oncethe totaleventcountreaches EVENT_WINDOW_SIZE, thenforeachandevery newEventadded,anold Eventshouldbefetched fromDBfordeletion, whichwillhaveabearing onPerformance.

EVENT_WINDOW_SIZE

Usedtospecifythe numberofeventsthat needtobeactively managedbythesystem.


10000

42


Issue 3 August 2012 Values Options Default NotesIfthesizeofthequeueis morethanthisnumber, theSysteminputwillbe suspendeduntilthe queuedEventsare processed.TheEvents thatyoutrytoaddatthis pointoftimewillnotbe addedintotheSystem. Youhavetotakecareof addingthoseEvents,after checkingthequeuesize usingthe is_inQ_SizeBeyondLimit() method.IftheEvent queuesizeisexceeded, waitforsometime(say1 sec)beforeretryingtoadd Events. MAX_EVENT_PROCESS_Q UEUEparameteris providedtoavoidsuch problemsandtokeepthe memoryundercontrol. Youcanconfigurethe Eventqueuesize(i.e.,the maximumnumberof Eventsthatcanbequeued whentheyareaddedinto thesystem)usingthis parameter. TheTrapPDUinformation intheEventscanbeused toeffectivelyparseand filterevents.

Arguments

Description

MAX_EVENT_PROCESS_QUEUE

Whentherateofincoming Eventsishighercompared totheprocessingrate,the additionalEventsmay havetobebufferedin memorywhichwillleadto anincreasedusageof memory.Atonepointof time,thereisapossibility ofanOutofMemoryError beingthrown.


*500

TRANSIENT_TRAP_PDU_IN_EVENT

Whethertomaintainthe receivedSNMPTrapPDU referenceintheEventor not. Whethertodropor continueprocessingthe SNMPtrap,ifits correspondingmanaged objectisinunmanaged state.

true/false

*false

DROP_TRAP_WHILE_UNMANAGED

true/false

*false

43

Issue 3 August 2012


Arguments

Description Options

Values Default NotesAuthorizationisthewayin whichanauthenticated userisvalidatedifheis authorized(hasbeen grantedthenecessary permission)whenhetries toperformaspecific operation.

AUTHORIZATION

Whethertoenable/ disableauthorization check,whenausertriesto performafault managementoperation, likepickingupalerts,and soon.

true/false

true

V3_AUTH

Whethertoenable/ disableauthenticationfor SNMPv3traps.

true/false

*false

InformRequestsare unsolicitednotifications sentby anAgenttoManager.

NEED_INFORM_ACK

Whethertoenable/disable WMtosend acknowledgment,forthe Informrequestsfromthe Agents.

true/false

*false

aManagertoManager. Inbothcases,an acknowledgmentwillbe sentbytheManagerafter itreceivesthenotification.

GRACEFUL_SHUT_DOWN

Whenaninterruptis receivedtoshutdownthe Server,wheresome Notificationsarestill pendingtobeparsedand filtered,howtodealwith themwhetherto (gracefully)shutdown aftercompletingthe furtherprocessingofthese Notificationsortostop processingandallowfor abruptshutdown. Batchupdateisusedwhen Eventsaretobeaddedto thedatabaseasabatchso astodecreasethenumber ofqueries,thereby enablinganincreasein performance.

true/false

false

BATCH_UPDATE

truebatch processingof Eventsis enabled falsebatch processingof Eventsis disabled.

*false

44


Issue 3 August 2012 Values Options Default Notes

Arguments

DescriptionValidfrom4.7SP1only Parametertoconfigure thefrequencyof CLEAN_EVENT_INTERVAL check.Bydefault,this checkwillbemadeevery onehour.

CLEANUP_QUERY_INTERVAL

Anyvalue from124

*1hour

Ifinvalidornegativevalue isspecified,WMwilltake thedefault1hour

PERSISTENCE_CLASS

Usedtospecifytheuser classesgeneratedby Generated extendingthe UserClass HbnEventPersistenceclass.

*

NOTE:*indicatesthattheoptionwillnotbepresentinNmsProcessesBE.confbydefault.

45


Issue 3 August 2012

7 Performance Management Configuration7.1 Managed ObjectsThemaininputtotheperformancemoduleistheManagedObjectsthatarecreatedtorepresent networkdevices.TheseManagedObjectsarecreatedbytheWirelessManagerTopologymodule whenthediscoveryprocesstakesplace.ManagedObjectsholddetailsofnetworkelementssuchas: Name,Type,status,etc.DatacollectionisconfiguredfortheseManagedobjectsinthePerformance module. ThestartupoptionsofthePerformanceManagementmodulecanbemodifiedbyeditingthe parametersoftheCollectorprocessintheNmsProcessesBE.conffilelocatedinthe /usr/local/cambium/wm/server/confdirectoryinLinux (ortheC:\Cambium\WM\server\conffolderinWindows).note ............. If you have updated any of the configuration parameters, be sure to restart the Wireless Manager Server.

Thefollowingaretheparametersthatyou,asanadministratorofthefilesystem,canadjustafter deployment.

Table 4: Performance Management configurable fields Parameter DescriptionThisspecifiesthenumberofdaysafterwhichthedatacollected duringpolling(stringdataorstatsdata)havetobecleanedup.The dataolderthanthespecifiednumberofdayswillberemovedfrom thesystem.Thisdeletesthetableafterthespecifieddaysthatare appendedwiththedate.Ifasingletableisusedtostorethedatafor allthedays,thenthatwillnotgetdeleted. Defaultvalue:7 Thisspecifiesthemaximumnumberoftimesthesystemcantryto pingthedevicetoretrieveitsstatus.Thisindicatesthatrequestwill besentforSTATUS_POLL_PING_RETRIES+1times. Defaultvalue:0 Thisspecifiesthemaximumnumberoftimesthesystemcantryto performSNMPpingtothedevicetoretrieveitsstatus.Thisindicates thatrequestwillbesentforSTATUS_POLL_SNMP_RETRIES+1times Defaultvalue:0 Tospecifythetimeinsecondsfortheservertowaitfortherequest fromhost.ThisvalueisconfiguredforICMPPingwhennativepingis disabled Defaultvalue:1(i.e.,willwaitforonesecondifaparticularnodeis notreachable).

CLEAN_DATA_INTERVAL

STATUS_POLL_PING_RETRIES

STATUS_POLL_SNMP_RETRIES

STATUS_POLL_PING_TIMEOUT

47

Issue 3 August 2012


Parameter

DescriptionThisspecifiesthemaximumnumberoftimesthesystemcantryto pingthedevicetoperformdatacollection(Polling).Thisindicates thatrequestwillbesentforDATA_COLLECTION_SNMP_RETRIES+1 times. Defaultvalue:0 PolledDatawiththesameAgent,ProtocolandPeriod(APP)are combinedanddependingonthisparameter,numberofpollstothe agentwillbedone.Forexample,iftheMAX_OIDS_IN_ONE_POLLis 10andthenumberofPolledDatawiththesameAPPis20,thentwo setsofpollswiththefirstsetcontaining10andsecondwith10willbe done,andthevalueswillbestoredinthetableinwhichtheyare intendedtogo. Defaultvalue:15

DATA_COLLECTION_SNMP_RETRIES

MAX_OIDS_IN_ONE_POLL

CUSTOMIZED_DATA_COLLECTOR

Thisspecifiesthefullyqualifiedclassnamewhichhasimplemented theinterfaceCustomDataCollection. Thisisacustomizer(basicallytheGUI)thatistobebroughtupwhile addingormodifyingapollingobject.Thisparameterallowstheuser tohavehis/herownPropertyforthepollingpoliciesinsteadofthe oneprovidedbydefault. Thisparameterisdeprecatedinlaterreleases. Theparameter,whensetas"true"printsoutdebuggingstatements inthelogfilewhichcanbeusedtoanalyzethedatacollection.Itcan

POLLING_POLICY_CUSTOMIZER

DEBUGGING_MODE

beturnedon/offusingthemethodsetDebugMode() inthe PollAPI.Whiledevelopinganapplication,thesedebuggingstatements willbeofgreatusetothedevelopertoknowabouttheproblemthat hasoccurred. Defaultvalue:false Whenthisparameterissetasfalse,theMultiplePolledDatafroma singletablewillbepolledseparately. Defaultvalue:true Thisspecifiestheintervalbetweentwosuccessivequeriestothe database,forstatuspolling. Defaultvalue:1500 Thisspecifiedtheintervalbetweentwosuccessivequeriesfor retrievingpollingunitstobepolled. noteThis parameter has been deprecated in later releases. The interval is now the value of the GlobalPerformancePollingInterval tag in the .../WM/server/conf/ WibbWMSConfiguration.xml file. However, the interval should be set in the Polling Configuration dialog, not in this configuration file on the server. Thisspecifieswhetherauthorizationisrequiredforalltheclient requestsornot. Defaultvalue:false

SEND_MULTIPLE_REQUEST

STATUS_POLL_QUERY_INTERVAL

DATA_COLLECTION_QUERY_INTERVAL

AUTHORIZATION

48


Issue 3 August 2012

Parameter

DescriptionWheneveramanagedobjectispassedthroughPolling.conf,and whenitsatisfiesthematchcriteriaspecifiedinthefirstPollingObject, PolledDatawillbecreatedandwillnotcheckthematchcriteriagiven inotherPollingObjects.Settingthevalueas"true"forthisparameter willmaketheManagedObjecttocheckallthematchcriteriainallthe PollingObjects.Inthiscase,evenifthematchcriteriaofthefirst PollingObjectgetsmatched,theManagedObjectwillbepassedtothe subsequentPollingObjectsalso. Defaultvalue:false Whenthisparameterissetas"true",thePollIDandits correspondingkeywillbestoredinthePollIDToKeyMaptable.This willbeuseful,ifyouwanttoaccessthecollecteddataforthedeleted PolledData. Defaultvalue:false Thisparameterisusedwhenyouwantthecollectedvaluestobe updatedinadatabase,afteraspecifiedtimeinterval.Thisparameter takesitsvalueinseconds.Theinsertsforthecollectedvalueswillbe storedinatemporarymemorytillthistime,andwillgetupdatedasa bulkinthedatabase.

PASS_THRO_ALL_POLLING_OBJECTS

RECOVER_DELETED_PDATAS

BULK_INSERT_INTERVAL

Fore.g.ifBULK_INSERT_INTERVALissetto30,thenforeverythirty secondsthecollecteddatawillbestoredinmemoryasasingleinsert statement.Assoonasthirtysecondsgetelapsed,theinsert statementswillbeexecutedanddatawillbeinsertedintodatabase. Defaultvalue:0 Bydefault,collecteddataisinsertedassoonasitiscollectedandnot accumulatedinmemoryasabulk. Thisparameterisusedwhenyouwantthecollectedvaluestobe updatedinadatabase,afteraspecifiednumberofinsertsgetting accumulatedinthetemporarymemory.Thisparameterwilltakean integervalueandmanyinsertswillbestoredinthememory,beforeit writesintothedatabase.Tousethisparameter,the BULK_INSERT_INTERVALparametershouldalsobeused. noteWhen MAX_ALLOWABLE_INSERT value is reached, the interval set for Bulk insert is not taken into consideration and the insertion takes place immediately. Fore.g.ifBULK_INSERT_INTERVALissetto30secondsand MAX_ALLOWABLE_INSERTissetto10thenifthenumberofinsert statementsinmemorygoesabove10thenthough BULK_INSERT_INTERVALisnotreached,insertstatementswillbe executedanddatawillbetransferredtodatabase. Defaultvalue:0

MAX_ALLOWABLE_INSERT

49

Issue 3 August 2012


Parameter

DescriptionThisparameterisusedtospecifythetimeperiodforwhichtheserver hastowait(afterithasgotstarted)tostartthestatuspollingof managedobjects

STATUS_POLL_DELAY

Thisparametercanbeusedincaseswhereyouhavelargenetworks tobediscoveredduringserverstartupandyoudonotwantthe servertobeloadedwithbothdiscoveryandstatuspolling.By configuringthisparameter,youcanpostponethestatuspollingfor sometime. Defaultvalue:5minutes Duringdatacollectionthereispossibilitythat theagentmightbedown theagentmightbedelayingtheresponse thereispacketlosswhiledataistransferred.

DATA_COLLECTION_SNMP_TIMEOUT

Inallsuchcircumstances,thedelaycausedcanbeindefinite.Hence youcansetaTimeoutwhichwillindicatethatPollEngineshouldwait forthatnumberofseconds.Ifrequesteddataisnotreceivedbefore thattime,anerrormessageisregistered. Defaultvalue:5seconds WhenaPolledDataiscreated,youmaywishtostartdatacollection foritimmediatelyorinduceadelay.Thiscanbespecifiedinthis parameter.Numericvaluesstartingfrom0isallowed.Ifyouspecify zero,datacollectionwillstartimmediately.Notethatthissettingis commonforallPolledDatacreatedinthesystem. Defaultvalue:5minutes Bydefault,statuspollingisperformedforeachoftheMOs,whereby aqueryissenttoeachoftheMOs.ThestatuspollingofMOscanbe processedinbatchesalso.Toenablethis,addanewparameter ENABLE_STATUS_POLL_BATCH(notavailablebydefault)andsetitto true.

DATA_COLLECTION_STARTUP_DELAY

ENABLE_STATUS_POLL_BATCH

7.2

Operator-defined ReportsNetworkoperatorscanaddtheirowncustomdefinedreportsforlaunchingfromtheclient.These canbecraftedbyeither copyingexistingreportsintheSystem Reportsfolderandtheneditingthemtothetype andamountofcustomizationdesired. composingthemwithoutthereuseofanypreexisting(furnished)report.

Thecustomdefinedreportisthenplacedintoeither the...server\Default Templates\System Reportsfolder,foradevicespecific report the...server\PHP Reports\System Reportsfolder,foragenericreport,whichwill bevalidforadeviceofanytype.

50


Issue 3 August 2012

Eachofthesecustomreportsmustthenbeimportedintotheclientapplicationthroughaclient sessionfromtheserverdevice,followingtheuserguideproceduretitled"Toimportsystemreports" andbrowsingtooneorbothofthefolderswhosepathisnotedabove. Anycontextorotherproblemsinanoperatordefinedreportmaypreventthereportfrombeing listedin,andthusavailableforlaunchfrom,theclient.Whenyoumountacustomreport,youmay wanttosendamessagetotheclients(seetheuserguidesectiontitled"BroadcastingaMessage"), advisingusersofthenewreportandremindingthemtoimportitintotheSystemReportspanelof theclientsothattheywillhaveaccesstoit.

7.3

Collected Statistics Plot for Poll FailureBydefault,collectedstatisticsgraphsintheWMclientapplicationomitdatafromfailedpolling attemptsandplottheaverageacrossthemissingpointinthegraph,andWMdoesnotlogeventsfor failedstatisticspolls.Thiscanmakeissuessuchasanelementbeingoutofservicedifficulttodetect inthegraphorstatstableandshowuponlylaterinthelog.Thistreatmentisbecausethevalueof thePollFailedActionEnableflagispresettofalse.TochangethissettingsothatWMwill displayandstore0forthefloatvaluereceivedandNot polledforthestringvaluereceived,and willgenerateandeventthatthrowsthefailedpolltothelog,performthefollowingsteps.

Procedure 9: To display and store failed statistics polls1. 2. 3. 4. 5. Browsetothe/usr/local/cambium/wm/server/confdirectoryinLinux ortheC:\Cambium\WM\server\conffolderinWindows. Inthetexteditorofyourchoice,openthefileWibbWMSConfiguration.xmlfilefor editing. SearchforPollFailedActionEnable. Changeitsvaluefromfalsetotrue. Writeandsavethefile.

51


Issue 3 August 2012

53


Issue 3 August 2012

8 Security Management ConfigurationTheSecurityManagementmoduleofWMmaintainsandconfiguressecurityinformation,including definitionsofusersandgroupsandtheirpermissions.SecurityManagementprovidesthefollowing flexibilityincontrollingaccesstoWMandyournetworks: Bydefiningandmanaginggroupsandusers,youcanauthorizeuserstoperformonlycertain functions,basedonwhethertheyaremembersofagroupforwhichyouhavedefinedthe permissions. Youcanspecifyaccessforonlyacertainuserorgrouptobeabletoseeaparticularview. YoucanlimittheWMexperienceforausertoaspecificdevicetype.

8.1

Defining and Managing a Group or a UserAgroupisasetofpermissionsthataspecificsetofassociateduserscarryastheyusetheWMWeb Startclient.AgroupisdefinedbyauserwhohasadministrativepermissionsintheWebStartclient andaccessestheSecurityAdministrationareaviaitsToolsmenu.Awizardacceptsthegroupname fromtheadministratoranddisplaystheOperationsTreeRoot.Theadministratorconfirmsandatany latertimecanconfigurethegroup,whoisnowlistedintheSecurityTree. IntheSecurityTree,theadministratorcancheckthecheckboxforanyspecificfunctiontoallowand anytodisallow.Foranyfunctionthattheadministratormakesnocheckmarks,theparentfunctional areapermission(allowedordisallowed)isinheritedforallmembersofthegroup. Theprocessofaddingandmanagingauserissimilar,exceptthatWMappliestheresultofthe administratorspecifiedpermissionstoonlytheindividualuser.Toaddauserfromthecommandline interfaceontheWMserver,youcanexecutetheUserConfig.shorUserConfig.batfilelocated in/usr/local/cambium/wm/server/bin/admintoolsdirectoryinLinux(orthe C:\Cambium\WM\server\bin\admintoolsfolderinWindows)fromthecommandlineasfollows:UserConfig.sh/bat Add > WirelessManager UserName Password Group

where:UserNameistheusernameofthenewuser. Passwordisthepasswordtoauthenticatetheuserduringhislogin. Groupisthegrouptowhichtheusershouldbelong.

Example:UserConfig.sh/bat Add > C:\program files\adventnet\webnms guest xyz Admin 1100

whereanewusernamedguestisaddedtoAdmingroupwithapasswordofxyztothedatabase.

55

Issue 3 August 2012


8.2

Defining and Managing Authorized and Custom View ScopesScopesthataWebStartclientadministratordefinesallowordisallowthemembersofanygroup(s) anactivitybasedonthevaluesofspecificproperties.InthecaseofCustomViews,thepermissions areenforcedonwhatsetsofdataandrepresentationsthegroupsanduserswillbeallowedtoseein WM.

8.3

Adding and Managing OperationsYetanotherwaytocordonoffusersfromthefullsetoffunctionsinWMisforaWebStartclient administratortospecify,byoperationinatreeofpossibleoperations,whichgroup(s)andwhich user(s)arepermittedtoperformthem.Althoughmostoftheoperationsintheoperationstreewill alwaysbepresentbydefaultinWM,theadministratorcanaddoperations(foraddedsub applications,forexample)inwhichtograntspecificpermissionlevels.

8.4

Enabling the Authorized Mode for Security OperationsThesecuritymanagementmoduleinWirelessManagerprovidesanauthorizedmodeofperforming securityoperationsforagrouporuser.Thisfeatureisfacilitatedbyconfiguringthestartupoptionsof thesecuritymodule.

Procedure 10: To enable authorization support1. BeforeyoustarttheWirelessManagerserver,openthefileNmsProcessesBE.conf presentinthe/usr/local/cambium/wm/server/confdirectoryinLinux(orthe C:\Cambium\WM\server\conffolderinWindows)forediting. Findthefollowingprocess:com.adventnet.nms.security.authorization.NmsAuthManager

2. 3. 4. 5.

Configuretheargumentauthorization_for_security_administrationtotrue. Bydefault,thisvalueissettofalse. Saveandclosethefile. StarttheWirelessManagerserver.

Aftersettingtheauthorization_for_security_administrationtotrue,theauthorization supportisenabledforallsecurityoperations.Thisactionwillcausealluserstonotbeabletoperform theoperationsandsetpermissions(forwhichtheyarenotauthorizedtodo)intheSecurity AdministrationUI. Example Thisexamplecapturestwodifferentscenarios:authorizedmodeforsecurityoperationsand unauthorizedmodeofsecurityoperations.Thisexamplerevealsthedifferencebetweenan authorizedandanunauthorizedmodeofperformingsecurityoperations.Followthestepsgiven belowtoaccomplishthetask. 1. BeforestartingtheWirelessManagerserver,settheauthorization_for_security_administration argumenttotruein NmsProcessesBE.conffilepresentinthe/usr/local/cambium/wm/server/conf directoryinLinux(ortheC:\Cambium\WM\server\conffolderinWindows).Thisisthe

authorizedmode.

56


Issue 3 August 2012

2. 3. 4. 5. 6. 7. 8. 9.

StarttheWirelessManagerserver. LogintotheclientasanadministratorwiththedefaultuserIDofrootandapasswordofpublic.

Fromthemainmenu,selectToolsSecurityAdministration. RightclickontheGroupsnodeinSecuritytreeandselectAddGroup. CreateanewgroupcalledGroup1. ClickNext. InthePermissionstreehierarchy,enabletheSecurityAdministrationnode. DisableAddGroup,RemoveGroup,andRemoveOperationoperations. Agraphicdepictingthisconfigurationisshownbelow.

Figure 1: Security Administration Tree Group Operations

10. RightclickontheUsersnodeinSecuritytreeandclickAddUser. 11. CreateanewuserGroup1Userwiththepasswordgroup. 12. Inthefinalscreenofthewizard,selectGroup1underAssignGroupsfortheuserfield. 13. ClickFinish. YouhavenowassociatedtheuserGroup1UserwiththegroupGroup1. 14. ClickFinishtoquittheSecurityAdministrationUIandtheWirelessManagerclient. 15. Logintotheclientagain,butthistimewithauserIDofGroup1Userandapasswordof group. 16. SelectToolsSecurityAdministration.TheSecurityAdministrationwindowisdisplayed. 17. SelectFileAddGroup. WirelessManagerdisplaysawarningpopupwiththemessageGroup1User is not authorized to perform the operation.Thisoccursbecausewehavedisabledthis particularuserfromaddinganewgroup. 18. Similarly,tryremovinganexistinggroup.Thesamemessageisdisplayed. 19. Tryremovinganexistingoperation.Thesamemessageisdisplayed.

57

Issue 3 August 2012 20. Closetheclientandshutdowntheserver.

WM4_0ServerAdministrationGuideIssue3

Documents

Transcript of WM4_0ServerAdministrationGuideIssue3