No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

eSight V300R009C00 Local HA System Software Installation Guide (SUSE Linux + MySQL + OMMHA) 10

Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
(Optional) Configuring Multi-subnet Management

(Optional) Configuring Multi-subnet Management

By default, eSight can manage devices in one subnet and allows users to access eSight or the maintenance tool from the clients in one subnet. To manage devices in multiple subnets or access eSight from management clients in multiple subnets, enable multi-subnet management.

Prerequisites

If IP phones are used onsite, ensure that all IP phones are deployed in the same network segment. Otherwise, certain functions of IP phones will be abnormal.

Context

  • After multi-subnet management is enabled, eSight device management protocols, entrance to the eSight client, and entrance to the maintenance tool are exposed to all subnets, resulting in security risks.

    Once being enabled, this function cannot be disabled. Therefore, before enabling this function, assess network security risks and ensure that network security reaches the required level.

  • The multi-subnet management function conflicts with the southbound and northbound service isolation function. Therefore, only one function can be enabled. If the southbound and northbound service isolation function is enabled, the multi-subnet management function cannot be enabled.
  • The eSight Application Manager, and AR audio management function do not support multi-subnet management. If you need to use the management capability of these components, do not configure multi-subnet management.

Procedure

  1. Log in to the standby eSight server as the ossuser user.
  2. Run the following command to stop the eSight system.

    > cd /opt/ommha/ha/bin

    > ./stop.sh

  3. Use VNC to remotely log in to the active eSight server as the ossuser user.
  4. Run the following command to stop the eSight system.

    > cd /opt/ommha/ha/bin

    > ./stop.sh

  5. Run the following command to start the multi-subnet management tool as the ossuser user.

    > cd /opt/eSight/mttools/tools

    > ./multi-subnetwork.sh

  6. Select the required function and click Modify.

    • eSight login via multiple subnets: enables access to eSight from management clients in multiple subnets.
    • Manage all subnet devices: enables eSight to manage devices in all subnets.
    • Multi-Subnet Access Maintenance Tool: enables access to the maintenance tool client from management clients in multiple subnets.

  7. Optional: Run the following command as the root user if you want to manage IAD devices.

    floatip=`ifconfig eth0:1 |grep 'inet addr' |awk '{print $2}' |awk -F ":" '{print $2}'` 
    localip=`ifconfig eth0 |grep 'inet addr' |awk '{print $2}' |awk -F ":" '{print $2}'`
    iptables -t nat -A PREROUTING -d ${floatip} -p udp -m udp --dport 10162 -j DNAT --to-destination ${localip}:10162
    iptables -t nat -A POSTROUTING -s ${localip} -p udp -m udp --sport 10162 -j SNAT --to-source ${floatip}:10162
    echo "iptables -t nat -A PREROUTING -d ${floatip} -p udp -m udp --dport 10162 -j DNAT --to-destination ${localip}:10162" >> /etc/init.d/boot.local
    echo "iptables -t nat -A POSTROUTING -s ${localip} -p udp -m udp --sport 10162 -j SNAT --to-source ${floatip}:10162" >> /etc/init.d/boot.local

  8. Run the following command to start the eSight system.

    > cd /opt/ommha/ha/bin

    > ./start.sh

  9. Log in to the standby eSight server as the ossuser user.
  10. Run the following command to start the eSight system.

    > cd /opt/ommha/ha/bin

    > ./start.sh

Download
Updated: 2019-09-02

Document ID: EDOC1100011856

Views: 92529

Downloads: 53

Average rating:
This Document Applies to these Products
Related Version
Related Documents
Share
Previous Next