Configuring eService

Procedure

1. Log in to DeviceManager.
2. Choose Settings > eService Settings.

   If it is the first time to enter the eService Settings page, the Sign Authorization Letter dialog box is displayed. Read the authorization letter carefully, select I have a clear understanding of the data collection scope and data processing method of Huawei eService system, and agree to connect to Huawei eService system, and click OK. If you click Close or , the eService parameter settings cannot be modified or saved. In addition, the Sign Authorization Letter dialog box will be displayed again when you enter the eService Settings page the next time.

3. Select the I agree to upload information to eService check box.
4. Select the eService site where storage device data is sent back. Table 5-8 describes the site types.
   Table 5-8 eService sites

   Site Name	Application Scenario
   Carrier in Chinese mainland	Carriers in the Chinese mainland. NOTE: If you select this site, the device information collected by eService will be sent to the cloud in China.
   Carrier outside Chinese mainland	Carriers outside the Chinese mainland. NOTE: If you select this site, the device information collected by eService will be sent to the cloud in Germany. For carriers in Hong Kong, Macao, and Taiwan regions, select this site.
   Enterprise in Chinese mainland	Enterprises in the Chinese mainland. NOTE: If you select this site, the device information collected by eService will be sent to the cloud in China.
   Enterprise outside Chinese mainland	Enterprises outside the Chinese mainland. NOTE: If you select this site, the device information collected by eService will be sent to the cloud in Germany. For enterprises in Hong Kong, Macao, and Taiwan regions, select this site.

5. Configure the connectivity between the storage system and external networks.
   1. Click Network Configurations.

      The Network Configurations dialog box is displayed.

   2. (Optional) Configure a proxy server.
      If storage systems access Internet through internal HTTP proxy, a proxy server must be configured. Table 5-9 describes the proxy server parameters.

      Table 5-9 Proxy server parameters

      Parameter	Description	Value
      Enable	Specifies whether to enable or disable the proxy server.	[Value range] Select or deselect the Enable check box. [Example] Select Enable.
      HTTP Proxy Server Address	Specifies the HTTP proxy server address.	[Value range] Only IPv4 addresses and domain names are supported. An IPv4 address has the following requirements: The 32-bit address is evenly divided into four fields. Each 8-bit field is expressed in dotted-decimal notation. Each field of the IP address cannot be blank and must be an integer. The value of the first field ranges from 1 to 223. The values of other fields range from 0 to 255. The IP address cannot be a special address such as the broadcast address. The domain name has the following requirements: A domain name is not case-sensitive and must be an English domain name. An English domain name contains 1 to 255 characters. An English domain name can only contain letters (a to z, A to Z), digits (0 to 9), dots (.), and hyphens (-). It cannot start or end with a hyphen (-). [Example] 192.168.0.1 test.com
      Port	Specifies the HTTP proxy server port.	[Value range] 1 to 65535 [Example] 80
      Username	Specifies the username.	[Value range] The username must contain 1 to 63 characters. The username cannot contain single quotation marks ('). [Example] files
      Password	Specifies the user password.	[Value range] The password must contain 1 to 63 characters. [Example] 123456

   3. (Optional) Configure the DNS server.

      After the DNS service is configured, the storage system can resolve and access external domain names.

      • If a direct-connection network is used (namely an internal HTTP proxy server is not used), configure the DNS service and use the IP address 8.8.8.8 or 114.114.114.114 of the external DNS server.
      • If an internal HTTP proxy server is deployed and the proxy server address is a domain name, configure the DNS service.
      • If an internal HTTP proxy server is deployed and the proxy server address is an IP address, you do not need to configure the DNS service.
      • Ensure that the configured DNS server can resolve the extranet domain name.
      1. Set Active DNS IP Address.
      2. (Optional) Set Standby DNS IP Address 1.
      3. (Optional) Set Standby DNS IP Address 2.

         Configure the standby DNS IP address 1 first and then the standby DNS IP address 2.

      4. (Optional) Test the connection between the DNS server and storage system.

         You can click Test of each DNS IP address to test its availability.

   4. Click OK.

      The network configuration is complete.

6. Enter a site name.
   • The site name contains 1 to 127 characters.
   • The site name contains only letters, digits, underscores (_), hyphens (-), periods (.), or spaces.

7. (Optional) Obtain, import, and activate the authorization letter.
   • The authorization letter will be uploaded to eService for centralized archiving.
   • If the scanned copy of the authorization letter cannot be uploaded through DeviceManager, send the authorization letter to the eService mailbox (eservice@huawei.com) for archiving after the authorization letter is signed.
   1. Click Obtain Template.

      The Authorization Letter for Deploying eService and Processing [Customer]'s Data page is displayed.

   2. Download the authorization letter, fill in it, and then save it in the *.jpg format by photographing or scanning.
   3. Click Select, select the authorization letter in the *.jpg format, and click Open.
   4. Click Import.

      The Success dialog box is displayed.

   5. Click OK.

8. Set a contact person.

   The contact person is the administrator of the storage device in the eService system. After being added successfully, the administrator receives messages from eService.

   1. Click Add.

      The Add Contact dialog box is displayed.

   2. Set the contact person information. Table 5-10 describes the related parameters.
      Table 5-10 Contact person parameters

      Parameter	Description
      Last Name	The name length contains 1 to 63 characters. The name contains only letters, digits, underscores (_), hyphens (-), and periods (.).
      First Name	The name length contains 1 to 63 characters. The name contains only letters, digits, underscores (_), hyphens (-), and periods (.).
      Email	Indicates the email address for receiving messages from eService.
      Country Code	Indicates the international area code of the country where the phone number that receives messages from eService is located. The value contains only digits, asterisk (*), pound sign (#), plus sign (+), left parenthesis ((), right parenthesis ()), or hyphens (-).
      Telephone	Indicates the phone number used to receive messages from eService. The value contains only digits, asterisk (*), pound sign (#), plus sign (+), left parenthesis ((), right parenthesis ()), or hyphens (-).

9. (Optional) Enable the audit log function for eService.
   1. Select Enable.
   2. Set the parameters of audit logs.

      Click . The Audit Log dialog box is displayed. Table 5-11 describes related parameters.

      If the Syslog notification function has been enabled and configured for the storage system, parameters related to audit logs have been set.

      Table 5-11 Audit log parameters

      Parameter	Description	Value
      Port	Indicates the port number of the Syslog notification. The default value is 514. NOTE: The port number configured on the storage system must be the same as that configured on the Syslog server.	[Description] The value of the port number ranges from 1 to 65535. [Example] 3
      Protocol	Indicates the protocol over which the Syslog notification is sent. Possible values include UDP, TCP, and TCP+SSL/TLS. The default value is TCP+SSL/TLS. NOTE: Ensure that the UDP, TCP, and TCP+SSL/TLS protocols have been configured on the Syslog server. Security risks arise if the protocol is UDP or TCP. Therefore, you are advised to select TCP+SSL/TLS. The protocol configured on the storage system must be the same as that configured on the Syslog server. If you select UDP, ensure that the syslog server can respond to ping packets normally. Otherwise, Syslog notifications of the storage system cannot be sent to the receiving server.	[Example] TCP+SSL/TLS
      Receiver Server Address	Indicates the server IP address or domain name address.	[Value range] An IPv4 address has the following requirements: The 32-bit address is evenly divided into four fields. Each 8-bit field is expressed in dotted-decimal notation. Each field of the IP address cannot be blank and must be an integer. The value of the first field ranges from 1 to 223 (excluding 127). The values of other fields range from 0 to 255. The IP address cannot be a special address such as the broadcast address. An IPv6 address has the following requirements: The 128-bit address is evenly divided into eight fields. Each 16-bit field is expressed in four hexadecimal numbers and separated with colons. In each 16-bit field, zeros before integers can be removed. However, at least one digit must be reserved in each field. If the IP address contains a long string of zeros, you can represent the neighboring zeros with double colons (::) in the colon-separated hexadecimal field. Each IP address contains only one double-colon (::). The double-colon (::) can also be used to represent neighboring zeros of the IP address. The IP address cannot be a special address such as a network address, loop address, or multicast address. The domain name has the following requirements: A domain name is not case-sensitive and must be an English domain name. An English domain name contains 1 to 255 characters. An English domain name can only contain letters (a to z, A to Z), digits (0 to 9), dots (.), and hyphens (-). It cannot start or end with a hyphen (-). [Example] 192.168.1.100 fc00::1234 www.test.com

   3. Click Test to test the connectivity between the storage system and server that receives audit logs.

10. Save and authenticate eService.
    1. Click Save and Authenticate.

       The Execution Result dialog box is displayed.

    2. Click Close.

       The Authenticate Device dialog box is displayed.

    3. Enter the device authentication account and password.

       The device authentication account refers to the Huawei Support account. Apply for an account at the Support website if you do not have one.

    4. Click OK.

       The Success dialog box is displayed.

    5. Click OK.

       After the device authentication is complete, the Access Authentication status changes to Authenticated.

       After eService is enabled, if Access Authentication is Unauthenticated, this function will continuously collect logs and alarms, which consumes system resources. In this case, disable eService or perform device authentication.

    6. (Optional) Click Network Test to check whether eService can be used properly.

       Device authentication is required only when eService is enabled. The eService availability test can be performed only after the device authentication is complete.

11. Contact Huawei technical support center for site authentication.
    1. The installation engineer calls Huawei technical support center for site authentication.
    2. Maintenance personnel of Huawei technical support center authenticate eService on the eService cloud system.
    3. Upon successful authentication, maintenance personnel of Huawei technical support center notify the installation engineer of the result.

12. After the configuration is successful, log in to the eService cloud management device. For details, see the eService Intelligent Cloud Management System User Guide.