Beruflich Dokumente
Kultur Dokumente
Alcatel-Lucent
8950 Authentication, Authorization, and Accounting (AAA) | Release 8.2
QuickStart guide
365-360-007
Issue 3 | April 2014
Legal notice
Legal notice
Alcatel, Lucent, Alcatel-Lucent and the Alcatel-Lucent logo are trademarks of Alcatel-Lucent. All other trademarks are the property of their respective
owners.
The information presented is subject to change without notice. Alcatel-Lucent assumes no responsibility for inaccuracies contained herein.
Copyright © 2014 Alcatel-Lucent. All rights reserved.
Contents
....................................................................................................................................................................................................................................
8950 AAA iii
365-360-007 Release 8.2
Issue 3 April 2014
Contents
....................................................................................................................................................................................................................................
Check patch levels of operating systems .......................................................................................................................... 2-4
2-4
Connect local SMT or MT to remote AAA server using RMI over SSH or NAT .......................................... 3-31
3-31
....................................................................................................................................................................................................................................
iv 8950 AAA
365-360-007 Release 8.2
Issue 3 April 2014
Contents
....................................................................................................................................................................................................................................
Hardware needs ......................................................................................................................................................................... 5-1
5-1
Index
....................................................................................................................................................................................................................................
8950 AAA v
365-360-007 Release 8.2
Issue 3 April 2014
Contents
....................................................................................................................................................................................................................................
....................................................................................................................................................................................................................................
vi 8950 AAA
365-360-007 Release 8.2
Issue 3 April 2014
List of tables
....................................................................................................................................................................................................................................
8950 AAA vii
365-360-007 Release 8.2
Issue 3 April 2014
List of tables
....................................................................................................................................................................................................................................
....................................................................................................................................................................................................................................
viii 8950 AAA
365-360-007 Release 8.2
Issue 3 April 2014
List of figures
....................................................................................................................................................................................................................................
8950 AAA ix
365-360-007 Release 8.2
Issue 3 April 2014
List of figures
....................................................................................................................................................................................................................................
....................................................................................................................................................................................................................................
x 8950 AAA
365-360-007 Release 8.2
Issue 3 April 2014
About this document
About this document
Purpose
This guide helps you understand the system and platform requirements for the installation
of 8950 AAA, know how to install it, and estimate the hardware needs.
Intended audience
This document is intended for users working in the following domains:
• Installation
• Operation
• Engineering
• Validation
This guide is also useful to any other user who wants to know more about 8950 AAA
installation and configuration procedures.
Supported systems
This publication applies to the 8950 AAA System Release 8.1, 8.1.x, and 8.2.
...................................................................................................................................................................................................................................
8950 AAA xi
365-360-007 Release 8.2
Issue 3 April 2014
About this document
....................................................................................................................................................................................................................................
Table 1 Document usage (continued)
Conventions used
The terms AAA and 8950 AAA describe the Alcatel-Lucent 8950 AAA server.
The terms USS and USSv1 describe the Universal State Server version 1.
The term USSv2 describes the Universal State Server version 2.
This guide uses the following typographical conventions as shown in the table.
Appearance Description
Emphasis Text that is emphasized
Document titles Titles of books or other documents
File or directory names Names of files or directories
graphical user interface text or key Text displayed in a graphical user interface or in a
name hardware label
Keyboard keys Name of a key on the keyboard
System input Text that the user types as input to a system
System output Text that a system displays or prints
variable Value or command-line parameter that the user
provides
[] Text or a value that is optional
{value1 | value2} A choice of values or variables from which one value
{variable1 | variable2} or variable is used
....................................................................................................................................................................................................................................
xii 8950 AAA
365-360-007 Release 8.2
Issue 3 April 2014
About this document
....................................................................................................................................................................................................................................
Related information
The following documents are referenced in this document and include additional
information relevant to this document.
• Alcatel-Lucent 8950 AAA Quick Start Guide; this guide provides information as to
how to install the 8950 AAA, where to obtain licenses, and about system
requirements.
• Alcatel-Lucent 8950 AAA System Administration Guide, 365-360-009; this guide
provides a general information and features of the 8950 AAA, how to configure the
8950 AAA, and how to perform monitoring and administrative tasks.
• Alcatel-Lucent User Provisioning System User Guide; this guide provides information
on the User Provisioning System (UPS) included in the 8950 AAA that allows you to
manage (create/search/modify/delete) users in a predefined DB schema.
All 8950 AAA documents are available at Alcatel-Lucent OnLine Customer Support Site
(http://support.alcatel-lucent.com/). Download the zipped files from the Downloads and
Registration section.
Document support
To order Alcatel-Lucent documents, contact your local sales representative or use Online
Customer Support (OLCS) (http://support.alcatel-lucent.com).
Technical support
For technical support, contact your local Alcatel-Lucent customer support team. See the
Alcatel-Lucent Support web site (http://www.alcatel-lucent.com/support/) for contact
information.
For Alcatel-Lucent remote technical support and warranty claims, send an e-mail to
(mailto:support@alcatel-lucent.com).
How to comment
To comment on this document, go to the Online Comment Form (http://infodoc.alcatel-
lucent.com/comments/) or e-mail your comments to the Comments Hotline
(comments@alcatel-lucent.com).
....................................................................................................................................................................................................................................
8950 AAA xiii
365-360-007 Release 8.2
Issue 3 April 2014
About this document
....................................................................................................................................................................................................................................
....................................................................................................................................................................................................................................
xiv 8950 AAA
365-360-007 Release 8.2
Issue 3 April 2014
1 1 latform and system
P
requirements
Overview
Purpose
This chapter provides a brief overview of the 8950 AAA server and lists the main product
features. The chapter also provides information about the platforms supported by the
8950 AAA and the hardware and memory requirements to install and run the 8950 AAA.
Contents
...................................................................................................................................................................................................................................
8950 AAA 1-1
365-360-007 Release 8.2
Issue 3 April 2014
Platform and system requirements 8950 AAA overview
....................................................................................................................................................................................................................................
The main product features of the 8950 AAA server are as follows:
• Supports the following standard authentication protocols:
– Radius
– Diameter
– TACACS+
• Supports the 802.1x authentication using the following EAP protocols:
– EAP-TLS
– EAP-TTLS
– EAP-PEAP
– EAP-MD5
– EAP-GTC
– EAP-SIM
– EAP-AKA
– EAP-FAST
• Implements XML-based dictionary, which is a superset of RFC standard and Vendor
Specific Attributes (VSA).
This design provides the 8950 AAA, the ability to adapt to various vendors in any
network.
• Offers a built-in programming language for writing custom 8950 AAA policy
applications. The PolicyFlow ™ language allows configuration of the 8950 AAA
according to any complex policy rules of a network. The proprietary PolicyFlow
architecture built on Java ™ programming language is flexible and extensible.
• Provides a Command Line Interface (CLI) in addition to the SMT.
The CLI allows you to access and operate the 8950 AAA in any network environment.
It supports Telnet and SSH-based CLI through the admin console. An administrator
can use this CLI for executing commands for administrative purposes.
• Provides PolicyAssistant, a graphical wizard to define policies for network policy
rules.
If the application requires complex policies, use PolicyFlows instead of the
PolicyAssistant.
• Supports a flexible logging mechanism that can be configured according to the
requirements.
• Supports the Server Management Tool (SMT) that provides a graphical remote
configuration and management interface to all features of the 8950 AAA.
• Interfaces with the following back-end systems:
– SQL database (JDBC complaint)
– LDAP server
....................................................................................................................................................................................................................................
1-2 8950 AAA
365-360-007 Release 8.2
Issue 3 April 2014
Platform and system requirements 8950 AAA overview
....................................................................................................................................................................................................................................
– HLR over MAP interface
– HSS over Diameter
– Online Charging System (OCS) over Diameter
– Microsoft Active Directory
– RSA Token server
– DHCP server
– Motive Device Management System
– SNMP Manager
• The 8950 AAA can be configured to send e-mail as notification.
Platform support
Hardware and platform support
The 8950 AAA is supported on the following platforms and hardware:
• Solaris: Solaris 10
• Linux: Red Hat 5.x and 6.x
• Windows: Server 2003, XP with SP2 and above, Server 2008, Vista, and Windows7
• Oracle: Oracle T1000/T2000 and X86 hardware. Install the hardware with Solaris 10
OS version and Oracle JRE1.7
• Ulticom D7G product: HP x86 machines with Red Hat Linux 6.3 or above
Note: For more information on the latest versions of the operating systems and
hardware supported by the 8950 AAA, refer ReleaseNotes.html included in your
software package. When installed, you can find the release notes in the
<AAA_Install>\doc folder.
....................................................................................................................................................................................................................................
8950 AAA 1-3
365-360-007 Release 8.2
Issue 3 April 2014
Platform and system requirements Java environment
....................................................................................................................................................................................................................................
Java environment
Using Java
Before you install the 8950 AAA, check that you have the appropriate version of Java,
that is, the Java 2 Standard Edition (J2SE) for the 8950 AAA and install Java on your
system.
The 8950 AAA requires Java 2 Standard Edition (J2SE) version 7.0 (also known as
version 1.7.0) or later to run on all platforms. Both J2SE JDK and JRE are supported.
However, JDK is recommended as it provides additional tools for supporting Java
applications.
From 8950 AAA 8.2.0 onwards it is mandatory to install JDK version 1.7.0_10 or above.
Contact the operating system vendor or (http://www.java.sun.com) for information on
Java support for your computer. It is important that the operating system and Java
environment are kept at current patch levels.
....................................................................................................................................................................................................................................
1-4 8950 AAA
365-360-007 Release 8.2
Issue 3 April 2014
Platform and system requirements Server memory
....................................................................................................................................................................................................................................
Server memory
Memory allocation
By default, memory allocated for 8950 AAA process is 1 GB for a 32 bit JVM.
Memory use is affected by the following factors:
• Server configuration.
• User file size (when used).
• Total number of active subscribers (during peak hour).
• Whether the Universal State Server (USS) or the Server Management Tool (SMT)
runs on the same platform as that of the 8950 AAA server.
Note: For the memory configuration, contact 8950 AAA product support team to get a
confirmation on the following:
• Use of JVM 32 bit or 64 bit.
• Memory allocated for each type of JVM.
Server storage
Storage requirements
The server must have at least 150 MB of free disk space for installation.
Note: The storage requirement of 150 MB is for installation. For daily operations,
allow storage space for accounting data and log files. The actual amount of disk space
needed for logs and accounting records depends on many factors such as logging
level, accounting detail, and the length of time for which the data is retained.
Additional storage is also required for USS/USSv2 persistence files, IPAMv2, and
Statistics Collector, if configured.
....................................................................................................................................................................................................................................
8950 AAA 1-5
365-360-007 Release 8.2
Issue 3 April 2014
Platform and system requirements Hardware requirements
....................................................................................................................................................................................................................................
Hardware requirements
For more details on estimating system hardware requirements, see Chapter 5, “Determine
hardware needs”.
....................................................................................................................................................................................................................................
1-6 8950 AAA
365-360-007 Release 8.2
Issue 3 April 2014
2 2repare system for
P
installation
Overview
Purpose
This chapter describes the several system and server requirements that must be met to
ensure a complete installation.
Contents
...................................................................................................................................................................................................................................
8950 AAA 2-1
365-360-007 Release 8.2
Issue 3 April 2014
Prepare system for installation Download latest 8950 AAA version
....................................................................................................................................................................................................................................
2 From the drop-down list box in the Technical Content For section, select 8950 AAA
(Authentication, Authorization, and Accounting).
...................................................................................................................................................................................................
3 Follow the instructions and download the zipped folder for the latest version of 8950
AAA software. The zipped folder contains the installation files of both Windows and
UNIX operating systems.
Note: If required, download the zipped folder of documents from the same location.
....................................................................................................................................................................................................................................
2-2 8950 AAA
365-360-007 Release 8.2
Issue 3 April 2014
Prepare system for installation Download latest 8950 AAA version
....................................................................................................................................................................................................................................
...................................................................................................................................................................................................
....................................................................................................................................................................................................................................
8950 AAA 2-3
365-360-007 Release 8.2
Issue 3 April 2014
Prepare system for installation Check patch levels of operating systems
....................................................................................................................................................................................................................................
....................................................................................................................................................................................................................................
2-4 8950 AAA
365-360-007 Release 8.2
Issue 3 April 2014
3 Install and learn 8950 AAA
3
Overview
Purpose
This section provides the steps required to install the 8950 AAA server on a
UNIX/LINUX or Windows platform. It addresses the requirements and procedures
necessary for new installations only. When upgrading the 8950 AAA server, ensure not to
overwrite existing configuration files.
Contents
...................................................................................................................................................................................................................................
8950 AAA 3-1
365-360-007 Release 8.2
Issue 3 April 2014
Install and learn 8950 AAA Install 8950 AAA server on UNIX/LINUX
....................................................................................................................................................................................................................................
Procedure
...................................................................................................................................................................................................
1 Open the terminal window and extract the aaa-8.x.x.zip to a temporary directory.
...................................................................................................................................................................................................
5 Press Enter key to accept the default directory or enter the desired location.
....................................................................................................................................................................................................................................
3-2 8950 AAA
365-360-007 Release 8.2
Issue 3 April 2014
Install and learn 8950 AAA Install 8950 AAA server on UNIX/LINUX
....................................................................................................................................................................................................................................
Result: The following prompt appears if the directory does not exist:
The directory does not exist. Do you want to create it? [Y /
N (Default)]
...................................................................................................................................................................................................
7 To install the 8950 AAA server, type 1 and press the Enter key.
Result: The following prompt appears if the license file is not in the installation
directory:
Enter path that contains the license file:
...................................................................................................................................................................................................
8 Enter the path to reflect the location of your license file. Press Enter key.
Result: The following prompt appears:
Enter the administrator's user credentials for the Servers:
Administrator User [admin]:
...................................................................................................................................................................................................
....................................................................................................................................................................................................................................
8950 AAA 3-3
365-360-007 Release 8.2
Issue 3 April 2014
Install and learn 8950 AAA Install 8950 AAA server on UNIX/LINUX
....................................................................................................................................................................................................................................
...................................................................................................................................................................................................
11 Press Enter key to accept the default company name, or change the name if required.
Enter the other details as follows:
Enter the Website:
Enter the City:
Enter the State:
Enter the Country:
Result: The following prompt appears:
Enter the Root Password (required):
...................................................................................................................................................................................................
12 Enter the password for root certificate and press Enter key.
Note: 8950 AAA allows secure communication from the remote client-SMTs to the
8950 AAA servers, when connecting to the built-in web service, and for
communication between Diameter peers. The 8950 AAA can act as a CA (Certificate
Authority) to issue server or client certificates. Root password entered here is the
password for the Root-CA Certificate. Server password entered in the next step is the
password for the Server certificate for 8950 AAA server process.
Result: The following prompt appears:
Enter the Server Password (required):
...................................................................................................................................................................................................
13 Enter the password for server certificate and press the Enter key.
Result: The following prompt appears:
Enter the Root Certificate File Name [root.pem]:
...................................................................................................................................................................................................
14 Enter the file name of the root certificate and press the Enter key.
....................................................................................................................................................................................................................................
3-4 8950 AAA
365-360-007 Release 8.2
Issue 3 April 2014
Install and learn 8950 AAA Install 8950 AAA server on UNIX/LINUX
....................................................................................................................................................................................................................................
Result: The following prompt appears:
Enter the Trusted Certificate File Name [trusted.pem]:
...................................................................................................................................................................................................
15 Enter the file name of the trusted certificate and press the Enter key.
Result: The following prompt appears:
Enter the Server Certificate File Name [server.pem]:
...................................................................................................................................................................................................
16 Enter the file name of the server certificate and press the Enter key.
Result: You are prompted to change or accept the default company name, website,
city, state, and country.
Change the default names, if required or press the Enter key to accept the default
names.
...................................................................................................................................................................................................
....................................................................................................................................................................................................................................
8950 AAA 3-5
365-360-007 Release 8.2
Issue 3 April 2014
Install and learn 8950 AAA Install 8950 AAA server on UNIX/LINUX
....................................................................................................................................................................................................................................
Installs a predefined PolicyFlow configuration. Select a set
from the list to install it.
Build Your Own
Installs an empty PolicyFlow. Use this option if you want to
configure your own PolicyFlow.
Install: PolicyAssistant [P], Wimax [W], Femto [F], LTE eHRPD
[L], Sample from List [S], or Build Your Own [B]:
...................................................................................................................................................................................................
18 Enter the appropriate letter to install the required Policy Set. Press Enter key to complete
the installation process.
Result: When the installation is complete, the following output is displayed and you
are ready to configure the servers:
Setting up for reading entries..
Installing files to /opt/AAA..
Updating Server Properties..
Updating Security Properties..
Updating SMT Properties..
Creating Certificates..
Setting Up Database..
Updating Server Properties..
Copying License File..
Installation Completed Successfully.
E...................................................................................................................................................................................................
N D O F S T E P S
Note: For prompt less installation use the command line options. To know about the
command line options, use the following command:
./setup.sh -usage
....................................................................................................................................................................................................................................
Result: The 8950 AAA Setup program is displayed.
3. Click Next twice.
Result: The Software License Agreement window appears.
4. Continue the installation from Step 3 in the procedure “Install 8950 AAA server on
Windows” (p. 3-8).
....................................................................................................................................................................................................................................
8950 AAA 3-7
365-360-007 Release 8.2
Issue 3 April 2014
Install and learn 8950 AAA Install 8950 AAA server on Windows
....................................................................................................................................................................................................................................
Procedure
...................................................................................................................................................................................................
2 Navigate to the location of the unzipped 8950 AAA files and double-click setup.exe. The
8950 AAA Setup program is displayed. Click Next twice.
Result: The Software License Agreement window appears.
...................................................................................................................................................................................................
3 If you agree to the licensing terms, select Accept License Agreement Terms and click
Next.
....................................................................................................................................................................................................................................
3-8 8950 AAA
365-360-007 Release 8.2
Issue 3 April 2014
Install and learn 8950 AAA Install 8950 AAA server on Windows
....................................................................................................................................................................................................................................
Result: The Choose Installation Location window is displayed.
...................................................................................................................................................................................................
If... Then...
You want to use the default Click Next.
installation location
You want to use any existing Click Browse and select the desired location.
folder Click Next.
You want to create a new Enter the full path and the name of the folder.
folder Click Next.
Note: You are prompted to allow the folder to be created.
Click Yes.
....................................................................................................................................................................................................................................
8950 AAA 3-9
365-360-007 Release 8.2
Issue 3 April 2014
Install and learn 8950 AAA Install 8950 AAA server on Windows
....................................................................................................................................................................................................................................
Result: The Choose Installation Type window is displayed.
...................................................................................................................................................................................................
...................................................................................................................................................................................................
6 Follow the instructions listed on the dialog to specify the location of the license file and
click Next.
....................................................................................................................................................................................................................................
3-10 8950 AAA
365-360-007 Release 8.2
Issue 3 April 2014
Install and learn 8950 AAA Install 8950 AAA server on Windows
....................................................................................................................................................................................................................................
Result: The 8950 AAA Administrator Configuration window is displayed.
...................................................................................................................................................................................................
7 Enter the administrator information (username and password) and click Next.
Result: The 8950 AAA Policy Set Installation window is displayed.
...................................................................................................................................................................................................
8 Follow the instructions on the dialog to select the desired Configuration Set.
....................................................................................................................................................................................................................................
8950 AAA 3-11
365-360-007 Release 8.2
Issue 3 April 2014
Install and learn 8950 AAA Install 8950 AAA server on Windows
....................................................................................................................................................................................................................................
Note: If you select the Install WiMAX Configuration set, WiMAX Configuration
window appears. Follow the instructions on the dialog and select the required
WiMAX set.
Click Next.
Result: The Certificate Configuration window is displayed.
...................................................................................................................................................................................................
9 Enter the Root Password and the Server Password (this allows secure connection from
SMT to the Servers). The default file names and location information are displayed. Edit
the information if required.
Result: The 8950 AAA is installed on the selected location.
On completion, the Installation Complete dialog box is displayed.
...................................................................................................................................................................................................
10 Click Finish to close the installation program, or click Run Server Management Tool to
start the SMT to configure and manage your servers.
Note: You can also view the Release Notes from the Setup Complete dialog box.
E...................................................................................................................................................................................................
N D O F S T E P S
....................................................................................................................................................................................................................................
3-12 8950 AAA
365-360-007 Release 8.2
Issue 3 April 2014
Install and learn 8950 AAA Install the server management tool
....................................................................................................................................................................................................................................
....................................................................................................................................................................................................................................
8950 AAA 3-13
365-360-007 Release 8.2
Issue 3 April 2014
Install and learn 8950 AAA Start SMT GUI application
....................................................................................................................................................................................................................................
Related information
The 8950 AAA Server Management Tool (SMT) is an application that is used to
configure and manage 8950 AAA servers. SMT is a graphical user interface that
interfaces with the 8950 AAA server and can be used to manage all aspects of server
operation. The SMT is a standalone application that is started and run independently of
the 8950 AAA server.
You can also install the 8950 AAA on a UNIX server and the SMT GUI on your PC.
Before you connect to the 8950 AAA server from remote SMT GUI, ensure to start the
configuration server on the UNIX server. For information on how to start the
configuration server, see “Start 8950 AAA configuration server” (p. 3-16).
Steps
...................................................................................................................................................................................................
1 On Windows platform
Choose one of the following methods to start the SMT:
• Navigate to the <AAA_Install>/bin folder. Double-click aaa-smt.exe to launch the
SMT.
• Click Start button to display the Start menu. Select Programs. Navigate to the folder
on which the 8950 AAA is installed. Click Server Management Tool.
On UNIX or Linux platform:
Navigate to the <AAA_Install>/bin folder and run the following command in the bin
directory:
./aaa-smt
....................................................................................................................................................................................................................................
3-14 8950 AAA
365-360-007 Release 8.2
Issue 3 April 2014
Install and learn 8950 AAA Start SMT GUI application
....................................................................................................................................................................................................................................
Result: The Server Management Tool Login screen appears.
The administrators or users generally connect to UNIX/Linux machines using
X-Client software on the local PC.
While using this software, when the SMT is started on a remote UNIX/Linux
machines, by default the GUI may not be displayed. In such scenarios by performing
the following procedure the GUI is displayed on the UNIX/Linux machines and is
visible on local PC running X-client software.
Procedure to start SMT on UNIX/Linux:
1. Start an X-client on your PC.
2. Find and enter the IP address of your PC.
3. Enter the following command on the UNIX prompt: export DISPLAY=
xxx.xxx.xxx.xxx:0.0, where xxx.xxx.xxx.xxx is the IP address of your PC.
4. At the UNIX/Linux prompt, run the aaa-smt command.
...................................................................................................................................................................................................
2 In the Server Management Tool Login screen, enter the user name and password.
...................................................................................................................................................................................................
4 Click Connect.
Result: The 8950 AAA Server Management Tool launches.
E...................................................................................................................................................................................................
N D O F S T E P S
....................................................................................................................................................................................................................................
8950 AAA 3-15
365-360-007 Release 8.2
Issue 3 April 2014
Install and learn 8950 AAA Start 8950 AAA configuration server
....................................................................................................................................................................................................................................
Related information
The configuration server runs on the 8950 AAA server machine. Configuration server is
used by the remote SMT GUI to configure or monitor the 8950 AAA server from a
remote machine.
Steps
...................................................................................................................................................................................................
1 Perform one of the following tasks where the 8950 AAA server is installed to start the
configuration server:
• From the SMT application - in the SMT navigation pane, click the Configuration
Server tool icon, .
Select Start Server in the drop-down list.
Result: The configuration server starts and the status changes to green in SMT.
• From the command-line window - navigate to the <Installed Directory>/bin folder.
Enter the command ./aaa start config
Result: The configuration server starts. The output is displayed as follows:
8950 AAA Configuration Server starting...
8950 AAA Configuration Server initialized.
• As a Windows service - navigate to Start Menu -> Control Panel -> Administrative
Tools -> Services.
Select 8950 AAA Configuration Service from the list of applications.
In the left-hand panel, click Start the service, or right-click and select Start.
Result: The server starts as a Windows service. The status changes to Started.
E...................................................................................................................................................................................................
N D O F S T E P S
....................................................................................................................................................................................................................................
3-16 8950 AAA
365-360-007 Release 8.2
Issue 3 April 2014
Install and learn 8950 AAA Start 8950 AAA configuration server
....................................................................................................................................................................................................................................
Configuration server status
You can check the status of the configuration server in one of the following ways:
• From the SMT
Check for the status of the configuration server icon in the tool bar:
– Green - the configuration server is active.
– Red - the configuration server is inactive.
• From the CLI
Execute this command from <install>/bin folder:
./aaa list config
The output is as follows if the configuration server is running:
101 Server active
8950 AAA Configuration Server responding
The output is as follows if the configuration server is not running:
8950 AAA Configuration Server not responding
• From Windows service (For Windows OS)
If the 8950 AAA configuration server is active, then the status of the 8950 AAA
Configuration Service displays as Started. If the 8950 AAA configuration server is
not running, status is not displayed.
....................................................................................................................................................................................................................................
8950 AAA 3-17
365-360-007 Release 8.2
Issue 3 April 2014
Install and learn 8950 AAA Start 8950 AAA policy server
....................................................................................................................................................................................................................................
Related information
The 8950 AAA policy server handles the authentication, authorization, and accounting
requests. The policy server process runs on the 8950 AAA server. It is a multi-threaded
system designed to handle multiple tasks concurrently.
Steps
...................................................................................................................................................................................................
1 Perform one of the following tasks where the 8950 AAA server is installed to start the
policy server:
• From the SMT application - in the SMT tool bar, click the Policy Server tool icon
.
Select Start Server in the drop-down list.
Result: The policy server starts and the status changes to green in SMT.
• From the command-line window - navigate to the <Installed Directory>/bin folder.
Enter the command ./aaa start policy
Result: The policy server starts. The output is displayed as follows:
8950 AAA Policy Server starting...
8950 AAA Policy Server initialized.
• As a Windows service - navigate to Start Menu -> Control Panel -> Administrative
Tools -> Services.
Select 8950 AAA Policy Service from the list of applications.
In the left-hand panel, click Start the service, or right-click and select Start.
Result: The server starts as a Windows service. The status changes to Started.
E...................................................................................................................................................................................................
N D O F S T E P S
....................................................................................................................................................................................................................................
3-18 8950 AAA
365-360-007 Release 8.2
Issue 3 April 2014
Install and learn 8950 AAA Start 8950 AAA policy server
....................................................................................................................................................................................................................................
Policy server status
You can check the status of the policy server in one of the following ways:
• From the SMT
Check for the status of the policy server icon in the tool bar:
– Green - the policy server is active.
– Red - the policy server is inactive.
• From the CLI
Execute this command from <install>/bin folder:
./aaa list policy
The output is as follows if the policy server is running:
101 Server active
8950 AAA Policy Server responding
The output is as follows if the policy server is not running:
8950 AAA Policy Server not responding
• From Windows service (For Windows OS)
If the 8950 AAA policy server is active, then the status of the 8950 AAA Policy
Service displays as Started. If the 8950 AAA policy server is not running, status is not
displayed.
....................................................................................................................................................................................................................................
8950 AAA 3-19
365-360-007 Release 8.2
Issue 3 April 2014
Install and learn 8950 AAA Automatically start the 8950 AAA servers
....................................................................................................................................................................................................................................
Related information
None
Steps
Perform this on the Windows platform:
...................................................................................................................................................................................................
1 Click Start Menu -> Control Panel -> Administrative Tools -> Services.
Result: The Services window opens.
...................................................................................................................................................................................................
2 Select 8950 AAA Policy Service or 8950 AAA Configuration Service from the list of
applications.
...................................................................................................................................................................................................
3 To automatically start the servers when the 8950 AAA is started, from the drop-down list
in the Startup type field, select Automatic and click OK.
E...................................................................................................................................................................................................
N D O F S T E P S
Steps
Perform the following configuration on the 8950 AAA server installed on a Solaris
machine:
...................................................................................................................................................................................................
....................................................................................................................................................................................................................................
3-20 8950 AAA
365-360-007 Release 8.2
Issue 3 April 2014
Install and learn 8950 AAA Automatically start the 8950 AAA servers
....................................................................................................................................................................................................................................
Note: Based on the flavour of the UNIX , the script may change. Refer your UNIX
documentation for the same.
#!/sbin/sh
#
AAA_HOME=/opt/AAA
[ ! -f $AAA_HOME/bin/aaa ] && exit
# Start/stop processes required for 8950 AAA
case "$1" in
'start')
$AAA_HOME/bin/aaa start
;;
'stop')
$AAA_HOME/bin/aaa stop
;;
'restart')
$AAA_HOME/bin/aaa restart
;;
*)
echo "Usage: $0 { start | stop | restart }"
exit 1
;;
esac
Note:
1. Change the line AAA_HOME=/opt/AAA with the correct path where you have
installed the 8950 AAA.
2. If the AAA processes are not owned by the root, but by another OS user, then
change the lines that begin after start, restart, or stop the processes to:
su - aaa -c "$AAA_HOME/bin/aaa xxx"
...................................................................................................................................................................................................
2 Create some symbolic links, so that this file is executed when starting up or shutting
down Solaris:
# chmod a+x /etc/init.d/aaa
....................................................................................................................................................................................................................................
8950 AAA 3-21
365-360-007 Release 8.2
Issue 3 April 2014
Install and learn 8950 AAA Automatically start the 8950 AAA servers
....................................................................................................................................................................................................................................
# ln -s /etc/init.d/aaa /etc/rc3.d/S99aaa
# ln -s /etc/init.d/aaa /etc/rc0.d/K01aaa
# ln -s /etc/init.d/aaa /etc/rc1.d/K01aaa
# ln -s /etc/init.d/aaa /etc/rcS.d/K01aaa
...................................................................................................................................................................................................
3 To ensure that this script and the links works, you can optionally execute the following
commands:
# /etc/rc3.d/S99aaa start
# /etc/rc0.d/K01aaa stop
Note: You can even reboot the whole system.
E...................................................................................................................................................................................................
N D O F S T E P S
....................................................................................................................................................................................................................................
3-22 8950 AAA
365-360-007 Release 8.2
Issue 3 April 2014
Install and learn 8950 AAA Install configuration sets after installing 8950 AAA
....................................................................................................................................................................................................................................
Related information
A configuration is a collection of policy and data files, which the 8950 AAA server uses
to determine the following:
• User authentication
• Authorized access and configuration
• Accounting data processing
A configuration set includes all the files necessary to support a particular AAA
configuration.
1 To start the 8950 AAA SMT, perform one of the following tasks:
• On the Windows platform:
From the Windows desktop, double-click the Server Management Tool icon or click
the Start button to display the Start Menu. Select Programs and scroll down to 8950
AAA 8.x.x. Click Server Management Tool.
• On a CLI:
Change to the <AAA_Install>/bin folder in the 8950 AAA install directory.
Enter aaa-smt at the command prompt and press Enter.
• On the UNIX/Linux platform:
Run the following command in the <AAA_Install>/bin directory:
./aaa-smt
....................................................................................................................................................................................................................................
8950 AAA 3-23
365-360-007 Release 8.2
Issue 3 April 2014
Install and learn 8950 AAA Install configuration sets after installing 8950 AAA
....................................................................................................................................................................................................................................
...................................................................................................................................................................................................
2 From the SMT, select Server Configuration tab. In the left navigation pane, select Policy
Server > Policies > PolicyFlow Editor.
Note: If the PolicyAssistant configuration set is selected during installation, click
PolicyAssistant on the navigation pane and click Install New PolicyFlow….
...................................................................................................................................................................................................
....................................................................................................................................................................................................................................
3-24 8950 AAA
365-360-007 Release 8.2
Issue 3 April 2014
Install and learn 8950 AAA Install configuration sets after installing 8950 AAA
....................................................................................................................................................................................................................................
...................................................................................................................................................................................................
...................................................................................................................................................................................................
1 Review the readme.txt files in run/samples/ directory to determine the policy set that best
matches your business needs.
....................................................................................................................................................................................................................................
8950 AAA 3-25
365-360-007 Release 8.2
Issue 3 April 2014
Install and learn 8950 AAA Install configuration sets after installing 8950 AAA
....................................................................................................................................................................................................................................
...................................................................................................................................................................................................
2 Copy all the files from the correct folder under the <AAA_Install>/run/samples/ directory
to the <AAA_Install>/run folder.
Note: Do not perform this step if this is an upgrade and you are unsure of what
configuration files are stored in the <AAA_Install>/run folder.
...................................................................................................................................................................................................
....................................................................................................................................................................................................................................
3-26 8950 AAA
365-360-007 Release 8.2
Issue 3 April 2014
Install and learn 8950 AAA Stop 8950 AAA configuration server
....................................................................................................................................................................................................................................
Related information
None
Steps
...................................................................................................................................................................................................
1 Perform one of the following tasks where the 8950 AAA server is installed to stop the
configuration server:
• From the SMT application - in the SMT navigation pane, click the Configuration
Server tool icon, .
Select Shutdown Server in the drop-down list.
Result: The configuration server stops and the status changes to red in SMT.
• From the command-line window - navigate to the <Installed Directory>/bin folder.
Enter the command ./aaa stop config
Result: The configuration server stops. The output is displayed as follows:
101 Shutdown initiated....
8950 AAA Configuration Server shut down.
• As a Windows service - navigate to Start Menu -> Control Panel -> Administrative
Tools -> Services.
Select 8950 AAA Configuration Service from the list of applications.
In the left-hand panel, click Stop the service, or right-click and select Stop.
Result: The configuration server stops and no status is displayed in the window.
....................................................................................................................................................................................................................................
8950 AAA 3-27
365-360-007 Release 8.2
Issue 3 April 2014
Install and learn 8950 AAA Stop 8950 AAA configuration server
....................................................................................................................................................................................................................................
Note: To restart the configuration server, perform any of the tasks as follows:
• From the SMT application, select Restart Server from the drop-down list to
restart the configuration server.
• From the command-line window, execute the command
./aaa restart config
The status of the configuration server changes to green after it restarts.
E...................................................................................................................................................................................................
N D O F S T E P S
....................................................................................................................................................................................................................................
3-28 8950 AAA
365-360-007 Release 8.2
Issue 3 April 2014
Install and learn 8950 AAA Stop 8950 AAA policy server
....................................................................................................................................................................................................................................
Related information
None
Steps
...................................................................................................................................................................................................
1 Perform one of the following tasks where the 8950 AAA server is installed to stop the
policy server:
• From the SMT application - in the SMT tool bar, click the Policy Server tool icon,
.
Select Shutdown Server in the drop-down list.
Result: The policy server stops and the status changes to red in SMT.
• From the command-line window - navigate to the <Installed Directory>/bin folder.
Enter the command ./aaa stop policy
Result: The policy server stops. The output is displayed as follows:
101 Shutdown initiated....
8950 AAA Policy Server shut down.
• As a Windows service - navigate to Start Menu -> Control Panel -> Administrative
Tools -> Services.
Select 8950 AAA Policy Service from the list of applications.
In the left-hand panel, click Stop the service, or right-click and select Stop.
Result: The policy server stops and no status is displayed in the window.
Note: To restart the policy server, perform any of the tasks as follows:
• From the SMT application, select Restart Server from the drop-down list to
restart the policy server.
• From the command-line window, execute the command
./aaa restart policy
....................................................................................................................................................................................................................................
8950 AAA 3-29
365-360-007 Release 8.2
Issue 3 April 2014
Install and learn 8950 AAA Stop 8950 AAA policy server
....................................................................................................................................................................................................................................
The status of the policy server changes to green after it restarts.
E...................................................................................................................................................................................................
N D O F S T E P S
....................................................................................................................................................................................................................................
3-30 8950 AAA
365-360-007 Release 8.2
Issue 3 April 2014
Install and learn 8950 AAA Connect local SMT or MT to remote AAA server using RMI
over SSH or NAT
....................................................................................................................................................................................................................................
Related information
The following ports are used to connect SMT or MT using RMI over SSH or NAT:
• Configuration Server Registry Port: 9097
• Configuration Server Secure Registry Port: 9098
• Policy Server Registry Port: 9099
• Policy Server Secure Registry Port: 9100
Steps
The following steps only serve as an example to establish the connection:
...................................................................................................................................................................................................
1 Log in to the local 8950 AAA server as root. In the command prompt, enter the following:
# ssh -L <local free port>:<destination>:<port> <osuser>@<remotehost>
Example: [root@grape run]# ssh -L 9093:135.254.229.54:9098 aaa@135.254.229.51
Where grape is the local 8950 AAA machine, aaa is the user to log into the OS on the
remote server at 135.254.229.51 hosting the 8950 AAA server.
...................................................................................................................................................................................................
2 Log in to the SMT on local host with the port forwarded to remote host as shown in the
Figure 3-2, “Login screen” (p. 3-32).
....................................................................................................................................................................................................................................
8950 AAA 3-31
365-360-007 Release 8.2
Issue 3 April 2014
Install and learn 8950 AAA Connect local SMT or MT to remote AAA server using RMI
over SSH or NAT
....................................................................................................................................................................................................................................
....................................................................................................................................................................................................................................
3-32 8950 AAA
365-360-007 Release 8.2
Issue 3 April 2014
Install and learn 8950 AAA Connect local SMT or MT to remote AAA server using RMI
over SSH or NAT
....................................................................................................................................................................................................................................
....................................................................................................................................................................................................................................
8950 AAA 3-33
365-360-007 Release 8.2
Issue 3 April 2014
Install and learn 8950 AAA Connect local SMT or MT to remote AAA server using RMI
over SSH or NAT
....................................................................................................................................................................................................................................
Result: The SMT GUI is displayed on the remote server.
E...................................................................................................................................................................................................
N D O F S T E P S
Steps
1. From the SMT icon bar, click to disconnect the SMT from the AAA server.
2. Click to close the SMT application.
....................................................................................................................................................................................................................................
3-34 8950 AAA
365-360-007 Release 8.2
Issue 3 April 2014
Install and learn 8950 AAA Support for VMware
....................................................................................................................................................................................................................................
....................................................................................................................................................................................................................................
8950 AAA 3-35
365-360-007 Release 8.2
Issue 3 April 2014
Install and learn 8950 AAA Learn 8950 AAA
....................................................................................................................................................................................................................................
....................................................................................................................................................................................................................................
3-36 8950 AAA
365-360-007 Release 8.2
Issue 3 April 2014
Install and learn 8950 AAA Technical support
....................................................................................................................................................................................................................................
Technical support
Remote technical support and pre-sales support
• For Alcatel-Lucent remote technical support and warranty claims, send an e-mail to
(mailto:support@alcatel-lucent.com).
• To find hotline contact information for your country, refer the website
(http://www.alcatel-lucent.com/wps/portal/support).
• For pre-sales and sales information, contact your local Alcatel-Lucent sales
representative.
....................................................................................................................................................................................................................................
8950 AAA 3-37
365-360-007 Release 8.2
Issue 3 April 2014
Install and learn 8950 AAA Technical support
....................................................................................................................................................................................................................................
....................................................................................................................................................................................................................................
3-38 8950 AAA
365-360-007 Release 8.2
Issue 3 April 2014
4 Remove 8950 AAA
4
Overview
Purpose
This chapter provides procedures to remove the 8950 AAA from your UNIX or Microsoft
Windows systems.
The uninstall process does not remove the 8950 AAA configuration files from the
<AAA_Install>/run directory or any files you put in the 8950 AAA directories. To
uninstall the 8950 AAA completely, remove the installation directory after completing the
uninstall procedures.
Contents
...................................................................................................................................................................................................................................
8950 AAA 4-1
365-360-007 Release 8.2
Issue 3 April 2014
Remove 8950 AAA Uninstall from UNIX platform
....................................................................................................................................................................................................................................
Procedure
...................................................................................................................................................................................................
1 Using the command prompt, navigate to the temporary directory that contains the
aaa-8.x.x.zip file.
Note: If you have deleted the unzipped version, unzip again before you proceed with
the next step.
...................................................................................................................................................................................................
3 Type Y to confirm the uninstallation and press Enter key. The following output is
displayed:
Enter the directory for AAA: [/opt/AAA]:
...................................................................................................................................................................................................
4 Press Enter key to accept the default or change the location to the 8950 AAA installed
directory. Press Enter key. The Setup program removes the 8950 AAA from your system
and the following output is displayed:
Removing from: /opt/AAA
Setting up for reading entries
Removing installation files...DONE
Uninstall of 8950AAA complete.
....................................................................................................................................................................................................................................
4-2 8950 AAA
365-360-007 Release 8.2
Issue 3 April 2014
Remove 8950 AAA Uninstall from UNIX platform
....................................................................................................................................................................................................................................
Result: The 8950 AAA is removed from the system.
E...................................................................................................................................................................................................
N D O F S T E P S
....................................................................................................................................................................................................................................
8950 AAA 4-3
365-360-007 Release 8.2
Issue 3 April 2014
Remove 8950 AAA Uninstall from Windows platforms
....................................................................................................................................................................................................................................
1 Click Start > Settings > Control Panel > Add or Remove Programs.
...................................................................................................................................................................................................
1 Using the command prompt navigate to the temporary directory that contains the
extracted aaa-8.x.x.zip file.
Ensure that the setup.exefile is present in this directory
Note: If you have deleted the unzipped version, unzip again to proceed with the next
step.
...................................................................................................................................................................................................
3 In the Choose 8950 AAA Location window, enter or browse to the installed directory, and
click Next.
Result: The 8950 AAA is removed from the system.
E...................................................................................................................................................................................................
N D O F S T E P S
....................................................................................................................................................................................................................................
4-4 8950 AAA
365-360-007 Release 8.2
Issue 3 April 2014
Remove 8950 AAA Uninstall from Windows platforms
....................................................................................................................................................................................................................................
....................................................................................................................................................................................................................................
8950 AAA 4-5
365-360-007 Release 8.2
Issue 3 April 2014
Remove 8950 AAA Uninstall from Windows platforms
....................................................................................................................................................................................................................................
....................................................................................................................................................................................................................................
4-6 8950 AAA
365-360-007 Release 8.2
Issue 3 April 2014
5 5 etermine hardware
D
needs
Overview
Purpose
This chapter deals with the major issues involved in planning an 8950 AAA server
implementation
Contents
Hardware needs
Analyzing requirements
This section covers the basic sizing calculations, two sample scenarios, implementation
considerations and additional recommendations to help you estimate your system needs.
The performance of the 8950 AAA software depends on a variety of factors. Consult your
Alcatel-Lucent sales representative to determine the hardware necessary to run the 8950
AAA server in your production environment.
Consider the following factors that determines the hardware requirement:
• Complexity of your PolicyFlow (configuration).
• Peak usage and average session times that you can expect.
• Storage of subscriber information, such as SQL Database (Oracle or Sybase) or an
LDAP directory (Sun One Directory).
...................................................................................................................................................................................................................................
8950 AAA 5-1
365-360-007 Release 8.2
Issue 3 April 2014
Determine hardware needs Hardware needs
....................................................................................................................................................................................................................................
• Hardware currently in use, such as Oracle servers or Intel Based server (number of
CPUs, Memory).
• Volume of subscribers or ports that the system handles.
• Type of connection services that are available, such as dial-in, DSL, VPN, 802.11
Wireless LAN (802.1x), or 3G-1X Data.
• Operating system that the customer prefers, such as Oracle Solaris, Windows/Intel,
and Linux.
• Layout of the physical network, such as the location of Radius clients.
....................................................................................................................................................................................................................................
5-2 8950 AAA
365-360-007 Release 8.2
Issue 3 April 2014
Determine hardware needs Basic AAA load calculations
....................................................................................................................................................................................................................................
The number or percentage of ports not used is subtracted from the total ports on the
network during the Peak Hour (MSS = total number of ports – percentage of ports not
used ). For example, in a network with 100,000 ports and an expected Peak Hour vacancy
factor of 5 percent, the estimated MSS total at Peak would be 100,000 - 5,000 = 95,000
(or 95 percent of 100,000).
In many cases, it is sufficient to use the maximum number of sessions as the MSS.
Port Use Factor
The number of times a port is used during the Peak Hour. For example, in a network
where an average Peak Hour user session lasts 30 min, each port could be used twice
during the hour
Port Use Factor = {60/average call length in minutes}. . If the total number of ports in use
is 60 and the average call length in minutes is 30, the Port Use Factor is 2 (60/30 = 2). For
an average session length of 20 min, the Port Use factor is 3 (60/20 = 3).
Peak Hour User Sessions
The number of user sessions in the peak hour.
Peak Hour User Sessions = Port User Factor x MSS
For example, 100,000 ports at 5 percent vacancy factor at Peak Hour calculate to an
estimated MSS of 95,000. Thus, Peak Sessions = 95,000 * 2 = 190,000 . If the Port Use
Factor is 3, then, Peak Hour sessions = 95,000 * 3 = 285,000
AAA Load
The number of peak hour sessions per second. It is expressed as AAA/s.
AAA Load = (Peak Hour Sessions/3600) AAA/s
Note: The formula for calculating the Peak Hour AAA/s load is (AAA per second
total ports in use * 60); average call length in seconds is 3,600 s.
Peak Hour AAA/sec Load = Peak Hour User Sessions average call length in seconds .
Using the data from the first example, substitute 190,000 for Peak User Sessions and
1,800 s for the average 30 min call length (Peak Hour AAA per sec Load =
190000/3600 = 52.7 AAA/s). The second example of 20 min per session (285,000 / 1,
2000) results in 285000/3600 = 79.1 AAA/s. In these calculations, we can round off
these AAA figures to 55 and 80 respectively.
....................................................................................................................................................................................................................................
8950 AAA 5-3
365-360-007 Release 8.2
Issue 3 April 2014
Determine hardware needs Server sizing
....................................................................................................................................................................................................................................
Server sizing
Maximum AAA capacity
To estimate server requirements, it is necessary to know your server's maximum
AAAs/sec capacity.
This number depends on the following factors:
• System speed - Number of processors and processor speed
• Hardware shared with other applications, for example, the Server Management Tool
• Number of methods in the PolicyFlow
• Interaction with the Universal State Server
• Whether the server accesses a database or directory
• How the server handles accounting records, such as writing to disk or entering into a
database
Estimating server size requires learning how the access servers select and balance the
load between AAA servers. Some access servers can switch between a maximum of three
AAA servers while others can only switch between two.
For this example, assuming the following factors:
• A peak hour load of 25 AAA/sec
• Access servers that can switch between two RADIUS servers
• Two 8950 AAA servers that can handle 30 AAA/sec each
• The two AAA servers use the IP Addresses 10.0.1.11 and 10.0.1.12
Configure the access servers such that the first choice server, RADIUS #1, is equally
divided between the access servers
Half of the access servers list the RADIUS servers in the following order:
RADIUS #1 = 10.0.1.11
RADIUS #2 = 10.0.1.12
The next half reverses the preference and lists the RADIUS servers in the following
order:
RADIUS #1 = 10.0.1.12
RADIUS #2 = 10.0.1.11
With this configuration, you can expect the Peak Load 25AAA/sec total load to be
equally divided between the two RADIUS servers - each server processes 12.5 AAA/sec
in the Peak Busy Hour.
....................................................................................................................................................................................................................................
5-4 8950 AAA
365-360-007 Release 8.2
Issue 3 April 2014
Determine hardware needs Server sizing
....................................................................................................................................................................................................................................
If one of the two RADIUS servers becomes unavailable (for example, the network
experiences an outage or power failure) the entire load of 25 AAA/sec falls on the
remaining RADIUS server which is safely under its maximum rating of 30 AAA/sec.
As this example demonstrates, in cases where access servers can select between two
RADIUS servers, it is important to distribute the load so that in normal operation no
RADIUS server handles more than 50% of its rated capacity. This ensures a reserve
capacity in the event of server failure.
....................................................................................................................................................................................................................................
8950 AAA 5-5
365-360-007 Release 8.2
Issue 3 April 2014
Determine hardware needs Scaling your network
....................................................................................................................................................................................................................................
As in the previous example with two 8950 AAA servers, the normal load is evenly
distributed across the three 8950 AAA servers. With a Peak Hour AAAs/sec rate of 36,
each of the 8950 AAA servers can handle 12 AAA/sec during the peak hour.
If one of the 8950 AAA servers fails or otherwise becomes unavailable, the load is evenly
distributed across the other two servers. This leaves each with an 18 AAA/sec load, which
is safely within its load capacity.
This example shows that when the access server can list three AAA servers, each server
can handle up to two- thirds of its maximum (30 AAA/sec in this example) capacity.
However, a more conservative load factor of 50% should be used and an allowance must
be made for simultaneous failure of two systems in situations where:
• maximum reliability must be ensured
• unreliable network links exist
• Power supply problem exist
• computing hardware or similar problems are encountered
Load distribution
Load distribution
In cases where the total Peak Hour AAA load exceeds the rated capacity of a RADIUS
server, develop a means to ensure that the load is evenly distributed.
For example, in the case of the three 8950 AAA servers and the three access servers that
can only list two 8950 AAA servers, a scheme using three 8950 AAA servers similar to
the following could be used. One bank of the access servers would list the 8950 AAA
servers in this order:
The first group lists the RADIUS servers in this order:
RADIUS #1 = 10.0.1.11
RADIUS #2 = 10.0.1.12
The next group lists the RADIUS servers in this order:
RADIUS #1 = 10.0.1.12
RADIUS #2 = 10.0.1.13
The last group lists the RADIUS servers in this order:
RADIUS #1 = 10.0.1.13
RADIUS #2 = 10.0.1.11
....................................................................................................................................................................................................................................
5-6 8950 AAA
365-360-007 Release 8.2
Issue 3 April 2014
Determine hardware needs Load distribution
....................................................................................................................................................................................................................................
The access servers are configured so that first and second 8950 AAA server choices are
equally divided between the three server banks.
....................................................................................................................................................................................................................................
8950 AAA 5-7
365-360-007 Release 8.2
Issue 3 April 2014
Determine hardware needs Load distribution
....................................................................................................................................................................................................................................
....................................................................................................................................................................................................................................
5-8 8950 AAA
365-360-007 Release 8.2
Issue 3 April 2014
Index
C Connect SMT or MT using RMI Ports, 3-31 uninstall from Windows, 4-4
over SSH or NAT, 3-31
connect SMT or MT using upgrade of 8950 AAA, 2-4
............................................................. RMI over SSH or NAT, 3-31
use ZIP/TAR utility, 2-3
D download 8950 AAA latest product overview, 1-1
.............................................................
version, 2-2 .............................................................
V valid license, 2-3
.............................................................
R RIM, 3-31
VMware support, 3-35
H hardware needs, 5-1 .............................................................
.............................................................
hardware requirements, 1-6
S scaling network, 5-5
X X-server, 3-14
.............................................................
server memory, 1-5
I install configuration sets, 3-23 server sizing, 5-4
install on windows, 3-8 server storage, 1-5
installing on unix/linux, 3-2 start configuration server, 3-16
installing server management tool, start policy server, 3-18
3-13
start SMT
.............................................................
on UNIX, 3-14
J java environments, 1-4
on Windows, 3-14
.............................................................
remotely, 3-14
L latest java version, 1-4 stop configuration server, 3-27
learning 8950 AAA, 3-36 stop policy server, 3-29
load calculations, 5-2 stop SMT, 3-34
load distribution, 5-6 .............................................................
.............................................................
T technical support, 3-37
P patch levels of operating system, third-party software, 3-13
2-4
.............................................................
platform support, 1-3
U uninstall from unix, 4-2
....................................................................................................................................................................................................................................
8950 AAA IN-1
365-360-007 Release 8.2
Issue 3 April 2014
Index
....................................................................................................................................................................................................................................
....................................................................................................................................................................................................................................
IN-2 8950 AAA
365-360-007 Release 8.2
Issue 3 April 2014