Single-Node System (SUSE Linux+GaussDB+VM)
This section describes how to plan installation information, such as the IP address, host name, and password, to help correctly install eSight.
Host Name Planning
Item |
Example |
Description |
---|---|---|
eSight server host name |
eSightServer |
To ensure that eSight can run properly, host name planning must comply with the following rules and restrictions:
|
IP Address Planning
In the new installation scenario, the IP address type can be IPv4 or IPv6. The IPv4 address is used as an example.
Item |
Example |
Description |
|
---|---|---|---|
System IP address |
NIC 1 (eth0) |
|
|
NIC 2 and extended NIC |
Use the standby NIC (NIC 2) to isolate the southbound and northbound services:
|
Installation Path Planning
Item |
Example |
Description |
---|---|---|
eSight |
/opt/eSight |
|
User Name and Password Planning
Item |
Default Password |
Description |
---|---|---|
SUSE operating system administrator user root |
The password is configured during SUSE Linux installation. |
The root user is the default Linux operating system user. It has the highest operation rights of the Linux operating system. This user can control all operating system resources, create other users, assign rights to the users, and use all the functions provided by the operating system. The installation and uninstallation of the eSight server application software must be performed by the root user. |
eSight user ossuser on the SUSE operating system |
Changeme_123 |
The ossuser account, automatically created by eSight, performs routine operation and maintenance (O&M) for the eSight server. This user can remotely log in to the server through SSH and upload or download files through SFTP. |
GaussDB database administrator user sys |
Changeme123 |
The sys user is a default user provided by the database. It is the system administrator of the database and has the highest rights of the database. |
eSight database user commonuser of the GaussDB |
Changeme_123 |
The commonuser user is a database user of the NMS. |
eSight administrator user admin NOTE:
The user login address is https://IP address:31943. |
Changeme123 NOTE:
You need to change the password at your first login. |
The admin user is the default administrator provided by eSight. This user has the management rights of all devices and operation rights of all eSight clients. |
Maintenance tool user sys NOTE:
The login address of the management plane is https://IP address:31945. |
Changeme123 NOTE:
You need to change the password at your first login. |
The sys user is the unique user of the maintenance tool. This user can manage the eSight server and perform all operations on the maintenance tool. |
Each user must have a unique password.
The password setting must comply with the following rules:
- The password cannot contain the user name in normal or reverse order.
- The password ranges from 8 to 32 characters.
- The same character can be used at most three times.
- The password must contain at least one uppercase letter (A to Z), one lowercase letter (a to z), and one digit (0 to 9).
Time Zone and Time Planning
Item |
Example |
Description |
---|---|---|
Time zone |
UTC+08:00 |
- |
Time |
14:00 |
- |
Port Planning
Refer to the eSight Communication Matrix to know the port numbers used by eSight.
- If unrelated software is installed on the eSight server, port conflicts may occur and eSight may be unavailable.
- Strictly follow instructions in eSight Communication Matrix to ensure that the operating system is secure and stable and eSight can be used properly.
- After eSight is upgraded or a patch is installed, perform operations on ports by referring to eSight Communication Matrix.
In the EulerOS, eSight automatically creates the mapping for ports described in Table 8-54 during installation, which improves system compatibility. Before eSight installation, ensure that these ports are not mapped.
Source Port |
Mapped Port |
Port Function |
---|---|---|
21 |
31921 |
FTP port |
69 |
32182 |
TFTP port |
162 |
10162 |
Alarm port |
514 |
32185 |
Syslog port |
You can run the following command to check the port mappings:
# iptables -t nat -L
If ports 31921, 32182, 10162, and 32185 are contained in the following information, they are mapped. Otherwise, the ports are not mapped.
Chain PREROUTING (policy ACCEPT) target prot opt source destination REDIRECT tcp -- anywhere anywhere tcp dpt:ftp redir ports 31921 REDIRECT udp -- anywhere anywhere udp dpt:tftp redir ports 32182 REDIRECT udp -- anywhere anywhere udp dpt:snmptrap redir ports 10162 REDIRECT udp -- anywhere anywhere udp dpt:shell redir ports 32185 DNAT udp -- anywhere anywhere udp dpt:bootps ADDRTYPE match dst-type BROADCAST to:255.255.255.255:44367
Server Disk Planning
Partition Type |
Partition Name |
File System |
Size (GB) |
Description |
---|---|---|---|---|
Primary partition |
/ |
Ext4 |
50 |
Root directory for installing the operating system. |
Primary partition |
swap |
Swap |
32 |
Swap directory. |
Primary partition |
/boot/efi |
FAT |
1 |
Boot directory. |
Logical partition |
/tmp |
Ext4 |
10 |
Directory for storing temporary files. |
Logical partition |
/var/tmp |
Ext4 |
5 |
Directory for storing temporary files. |
Logical partition |
/home |
Ext4 |
1 |
Directory for storing local user data. |
Logical partition |
/var |
Ext4 |
20 |
Directory for storing dynamic data about the daemon process and other system service processes. |
Logical partition |
/var/log |
Ext4 |
10 |
Directory for storing system log data. |
Logical partition |
/var/log/audit |
Ext4 |
10 |
Directory for storing audit log data. |
Logical partition |
/opt |
Ext4 |
Remaining disk space The disk capacity depends on the management scale. For details, see "Configuration" in the eSight Product Description. |
Directory for installing eSight. |