No relevant resource is found in the selected language.
MENU
Support Documentation
eSight V300R010C00SPC600 Planning Guide 13
Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Single-Node System (EulerOS+GaussDB+Physical Machine)

Single-Node System (EulerOS+GaussDB+Physical Machine)

This section describes how to plan installation information, such as the IP address, host name, and password, to help correctly install eSight.

Host Name Planning

Table 8-19 Host name plan

Item

Example

Description

eSight server host name

eSightServer

To ensure that eSight can run properly, host name planning must comply with the following rules and restrictions:

  • The host name must be unique on the network.
  • The host name must consist of letters (A to Z or a to z), digits (0 to 9), and hyphens (-), and start with a letter.
  • The host name is case sensitive.
  • The host name must contain at least two characters.
  • The host name must contain no more than 24 characters.

Network Port Planning

Table 8-20 Network port plan

Item

Example

NIC

Description

TaiShan 200 (Model 2280) server

Network port 1: eth0

Network port 2: eth1

Network port 3: eth2

Network port 4: eth3
  • Network port 1: service network port of the eSight server, which is used to connect managed devices and the web client
  • Network ports 2 to 4 and extended network port: standby service network ports, which are used to, for example, isolate the southbound and northbound services
  • Mgmt: iMana/iBMC maintenance network port of Huawei servers
NOTE:
  • The network port numbers shown in this figure may be different from those displayed on the operating system. After the server is powered on, you are advised to disconnect and connect network cables to check the mapping between physical network ports on the server and network ports displayed in the operating system.

2288H V5 server

Network port 1: eth0

Network port 2: eth1

Network port 3: eth2

Network port 4: eth3

2288X V5 server

Network port 1: eth7

Network port 2: eth6

Network port 3: eth5

Network port 4: eth4

NOTE:

The 2288X V5 server has two onboard network ports and two unavailable network ports. Therefore, the NIC names start from eth4.

IP Address Planning

In the new installation scenario, the IP address type can be IPv4 or IPv6. The IPv4 address is used as an example.

Table 8-21 IP address plan

Item

Example

Description

System IP address

Network port 1
  • IP address: 192.168.1.100
  • Subnet mask: 255.255.255.0
  • Default gateway: 192.168.1.1
  • The static IP address must be used.
  • The IP address must be unique on the live network.
  • Only one IP address can be planned for a network port. You can plan and configure only one IP address for one network port.
  • The eSight server can communicate with managed devices.
  • The eSight server can communicate with web clients.
  • The IP address of the management port and system IP address can be located either in the same network segment or in different network segments.
  • If standby network ports are used to isolate the southbound and northbound services, the IP address for isolating the southbound and northbound services must be in a network segment different from that of the IP address planned for network port 1.

Network ports 2, 3, and 4 and extended network port

Use the standby port (network port 2) to isolate the southbound and northbound services:

  • IP address: 192.168.2.100
  • Subnet mask: 255.255.255.0
  • Default gateway: 192.168.2.1

IP address of the management port
  • IP address: 10.137.62.20
  • Subnet mask: 255.255.255.0
  • Default gateway: 10.137.62.1

Installation Path Planning

Table 8-22 Installation path plan

Item

Example

Description

eSight

/opt/eSight
  • The eSight software cannot be installed in the root directory.
  • To ensure successful eSight installation, ensure that the eSight installation path is empty before the installation.
  • The eSight installation directory and its absolute path must contain only letters, digits, hyphens (-), and underscores (_) and must begin with a letter or underscore (_). The absolute path contains a maximum of 50 characters.

User Name and Password Planning

Table 8-23 User and password plan

Item

Default Password

Description

EulerOS administrator user root

Changeme_123

The root user is the default Linux operating system user. It has the highest operation rights of the Linux operating system. This user can control all operating system resources, create other users, assign rights to the users, and use all the functions provided by the operating system. The installation and uninstallation of the eSight server application software must be performed by the root user.

eSight user ossuser on the EulerOS

Changeme_123

The ossuser account, automatically created by eSight, performs routine operation and maintenance (O&M) for the eSight server. This user can remotely log in to the server through SSH and upload or download files through SFTP.

GaussDB database administrator user sys

Changeme123

The sys user is a default user provided by the database. It is the system administrator of the database and has the highest rights of the database.

eSight database user commonuser of the GaussDB

Changeme_123

The commonuser user is a database user of the NMS.

eSight administrator user admin

NOTE:

The user login address is https://IP address:31943.

Changeme123

NOTE:

You need to change the password upon first login.

The admin user is the default administrator provided by eSight. This user has the management rights of all devices and operation rights of all eSight clients.

Maintenance tool user sys

NOTE:

The login address of the management plane is https://IP address:31945.

Changeme123

NOTE:

You need to change the password upon first login.

The sys user is the unique user of the maintenance tool. This user can manage the eSight server and perform all operations on the maintenance tool.

Each user must have a unique password.

The password setting must comply with the following rules:

  • The password cannot contain the user name in normal or reverse order.
  • The password ranges from 8 to 32 characters.
  • The same character can be used at most three times.
  • The password must contain at least one uppercase letter (A to Z), one lowercase letter (a to z), and one digit (0 to 9).

Time Zone and Time Planning

Table 8-24 Time zone and time plan

Item

Example

Description

Time zone

UTC+08:00

-

Time

14:00

-

Port Planning

Refer to the eSight Communication Matrix to know the port numbers used by eSight.

  • If unrelated software is installed on the eSight server, port conflicts may occur and eSight may be unavailable.
  • Strictly follow instructions in eSight Communication Matrix to ensure that the operating system is secure and stable and eSight can be used properly.
  • After eSight is upgraded or a patch is installed, perform operations on ports by referring to eSight Communication Matrix.

In the EulerOS, eSight automatically creates the mapping for ports described in Table 8-25 during installation, which improves system compatibility. Before eSight installation, ensure that these ports are not mapped.

Table 8-25 Port mappings

Source Port

Mapped Port

Port Function

21

31921

FTP port

69

32182

TFTP port

162

10162

Alarm port

514

32185

Syslog port

You can run the following command to check the port mappings:

# iptables -t nat -L

If ports 31921, 32182, 10162, and 32185 are contained in the following information, they are mapped. Otherwise, the ports are not mapped.

Chain PREROUTING (policy ACCEPT)
target     prot opt source               destination
REDIRECT   tcp  --  anywhere             anywhere            tcp dpt:ftp redir ports 31921
REDIRECT   udp  --  anywhere             anywhere            udp dpt:tftp redir ports 32182
REDIRECT   udp  --  anywhere             anywhere            udp dpt:snmptrap redir ports 10162
REDIRECT   udp  --  anywhere             anywhere            udp dpt:shell redir ports 32185
DNAT       udp  --  anywhere             anywhere            udp dpt:bootps ADDRTYPE match dst-type BROADCAST to:255.255.255.255:44367

Server RAID Planning

  • If the server is not the default one delivered for eSight, select a proper RAID type based on the number of hard disks configured on the server and Table 8-26. For details about how to plan and configure the RAID, see the server guide.
    Table 8-26 RAID information

    Number of Disks

    Solution

    2

    RAID 1

    3 to 8

    RAID 5 + HotSpare
  • TaiShan 200 (Model 2280) servers delivered for eSight
    Table 8-27 RAID planning for TaiShan 200 (Model 2280) servers

    Server Type

    Number of Disks

    Disk

    RAID

    TaiShan 200 (Model 2280)

    2

    First and second disks

    RAID 1
  • The 2288H V5 servers delivered for eSight have two types: standard-configuration servers and high-configuration servers.
    Table 8-28 RAID planning for 2288H V5 servers

    Server Type

    Number of Disks

    Disk

    RAID

    One-node system 2288H V5 server with standard configurations

    4

    First to third disks

    RAID 5

    Fourth disk

    HotSpare

    One-node system 2288H V5 server with high configurations

    6

    First to fifth disks

    RAID 5

    Sixth disk

    HotSpare
  • The 2288X V5 servers delivered for eSight have two types: standard-configuration servers and high-configuration servers.
    Table 8-29 RAID planning for 2288X V5 servers

    Server Type

    Number of Disks

    Disk

    RAID

    One-node system 2288X V5 server with standard configurations

    2

    First and second disks

    RAID 1

    One-node system 2288X V5 server with high configurations

    6

    First to fifth disks

    RAID 5

    Sixth disk

    HotSpare

Server Disk Planning

Table 8-30 Disk partitions

Partition Type

Partition Name

File System

Size (GB)

Description

Primary partition

/

Ext4

50

Root directory for installing the operating system.

Primary partition

swap

Swap

32

Swap directory.

Primary partition

/boot/efi

FAT

1

Boot directory.

Logical partition

/tmp

Ext4

10

Directory for storing temporary files.

Logical partition

/var/tmp

Ext4

5

Directory for storing temporary files.

Logical partition

/home

Ext4

1

Directory for storing local user data.

Logical partition

/var

Ext4

20

Directory for storing dynamic data about the daemon process and other system service processes.

Logical partition

/var/log

Ext4

10

Directory for storing system log data.

Logical partition

/var/log/audit

Ext4

10

Directory for storing audit log data.

Logical partition

/opt

Ext4

Remaining disk space The disk capacity depends on the management scale. For details, see "Configuration" in the eSight Product Description.

Directory for installing eSight.
Translation
简体中文
Download
Updated: 2021-01-18

Document ID: EDOC1100107088

Views: 5610

Downloads: 201

Average rating:
This Document Applies to these Products

Related Version

Related Documents

Digital Signature File

Digital Signature Authentication Mode
Share
Previous Next
Enterprise APP

Copyright © 2021 Huawei Technologies Co., Ltd. All rights reserved.

You are going to visit :