Nortel NN42030-300 - Manuals

9 . How to get help This chapter explains how to get help for Nortel products and services. Finding the latest updates on the Nortel Web site The content of this documentation is current at the time the productis released. To check for updates to the latest documentation forthe Nortel Mobile Communi...

10 How to get help Getting help from a specialist by using an Express Routing Code To access some Nortel Technical Solutions Centers, you can use anExpress Routing Code (ERC) to quickly route your call to a specialist inyour Nortel product or service. To locate the ERC for your product orservice, go...

11 . Introduction This chapter contains the following topics: • “Subject” (page 11) • “Conventions” (page 11) • “Related information” (page 12) Subject This document describes the Nortel Mobile Communication Gateway3100 (MCG 3100) server installation, which is part of the Nortel MobileCommunication ...

12 Introduction Table 1Text conventions (cont’d.) Convention Description Italic text Indicates document titles, for example:See the Mobile Communication Client3100 for Windows Mobile User Guide(NN42030-100). CLI command text Indicates CLI command prompts,input, and output, for example: REQ NEW <z...

Related information 13 NTPs The following NTPs are referenced in this document: • Linux Platform Base and Applications Installation and Commissioning(NN43001-315) • Nortel Mobile Communication 3100 Series — Planning andEngineering (NN42030-200) • Nortel Mobile Communication Gateway 3100 — Administra...

15 . Fundamentals This chapter contains the following topics: • “Overview” (page 15) • “MCG 3100 server components” (page 15) • “Installation options” (page 17) • “Overview of the MC 3100 installation” (page 17) Overview This section describes the Nortel Mobile Communication Gateway 3100(MCG 3100) s...

16 Fundamentals ATTENTION You must install the MCG 3100 software on a dedicated server that runs noother applications. Hardware components The MCG 3100 server runs only on the following supported commercialoff-the-shelf (COTS) hardware: • HP DL320G4 (NTDU97AAE5) • IBM x306m (NTDU99AAE5) Table 2 "...

Overview of the MC 3100 installation 17 Installation options Two installation options exist: • MCG 3100 Server is installed on one server—all software componentsare installed on one supported COTS server. This is the nonredundantconfiguration. • MCG 3100 Server is installed on two servers—all softwa...

19 . Preinstallation This chapter contains the following topics: • “Overview” (page 19) • “Linux base installation” (page 19) • “Enterprise network verification” (page 20) Overview Before you install the Mobile Communication Gateway 3100 (MCG 3100)server software, you must perform some preinstallati...

20 Preinstallation ATTENTION Carefully observe the labels for the network interfaces of the specificplatforms. — HP COTS platform: The network interfaces can be labelled (0,1) or (1, 2).The lower number is eth0 and the higher number is eth1. — IBM 306M platform: The network interfaces are labelled b...

Enterprise network verification 21 To verify communication with the LDAP server, use the ping command.After the installation and commissioning is complete, you can verifythat LDAP is working by performing a Corporate Directory (Corp Dir)search from a client. You should ensure that the DNS and LDAP s...

23 . Installation This chapter contains the following topics: • “Overview” (page 23) • “Nonredundant and redundant server implementations” (page 23) • “Software installation” (page 24) Overview After you complete the preinstallation tasks, you install the Nortel MobileCommunication Gateway 3100 (MCG...

24 Installation Rules for redundant server implementations In a redundant server configuration, mobile clients access the activeserver, and not the inactive backup server. The two servers switch rolesfreely, and the following rules determine the status—either ACTIVE orINACTIVE: • If you do not enter...

Software installation 25 3 Locate the MCG 3100 software on the CD and enter thefollowing command: appinstall The installation script prompts you for the root password. 4 Enter the root password. The following prompt appears: Do you want to check the media [Y][N]? 5 To verify the media, enter Y (Yes)...

26 Installation ...RPM installation complete. Please follow post installation instructions. The term postinstallation instructions refers to the postinstallationconfiguration procedures. For more information, see “Postinstallation” (page 27) . 10 Remove the CD. 11 Proceed to postinstallation configu...

27 . Postinstallation This chapter contains the following topics: • “Overview ” (page 27) • “MCG 3100 Web Console logon” (page 27) • “MCG 3100 parameter configuration” (page 28) • “License file” (page 31) • “Manage TLS certificates” (page 33) After the MCG 3100 installation completes, the client sof...

28 Postinstallation Step Action 1 In a Web browser address bar, enter one of the followingaddresses: http://<hostname>:8282/adminserver OR https://<hostname>:8553/adminserver/ where <hostname> is the domain name of the server. 2 At the Web Console log on screen, enter the following...

MCG 3100 parameter configuration 29 Step Action 1 Log on to the MCG 3100 Web Console using the Administratorusername and password, as described in Procedure 2 “Logging on to the MCG 3100 Web Console” (page 27) . 2 Click Gateway. 3 Click Configuration for the Gateway you want to modify. 4 Click Unloc...

License file 31 Table 4MCG 3100 configuration parameter fields (cont’d.) Field Description Dial In Service DN This is the number in the request URI for service DN calls proxiedby the CS 1000 SPS to the MCG 3100. The service DN allowsMCG 3100 users to place calls directly from their wireless devicest...

32 Postinstallation 9 For a redundant server implementation, repeat Step 2 to Step 8 on the redundant server. --End-- Licence file troubleshooting Before you contact Nortel to report a licensing issue, perform the followingtroubleshooting measures: • Check the time, date, and time zone of the server...

Manage TLS certificates 33 Table 5Common server license status errors (cont’d.) ServerLicense Status Issue description Resolution ERROR 103: Client’ssystem clock issuspect and/or theclient configurationhas been tamperedwith. This error indicates that the systemclock was changed after a previousactiv...

Manage TLS certificates 35 A keystore is a file that can contain trusted certificates and combinationsof private keys with their corresponding certificates. The information withinthe keystore is organized by alias, for example: • tomcat (required): stores the public/private key pair and the SignedTL...

36 Postinstallation ATTENTION For the mobile clients that use TLS security, you must enterthe same FQDN in the device System Settings. For informationabout the configuration of the System Settings on the device,see Nortel Mobile Communication Client 3100 for BlackberryUser Guide (NN42030-101) , Nort...

Manage TLS certificates 37 firsthand The CSR text appears as in the following example: Sample CSR text -----BEGIN NEW CERTIFICATE REQUEST-----MIIBJTCB0AIBADBtMQswCQYDVQQGEwJVUzEQMA4G A1UEChs4lBMHQ XJpem9uYTENA1UEBxMETWVzYTEf MB0GA1UEChMWTWVs3XbnzYSBDb 21tdW5pdHkgQ2 9sbGVnZTEA1UEAxMTd3d3Lm1jLm1hcmljb...

38 Postinstallation OR Upload the CSR.txt file. 4 Request a signed TLS certificate. The CA generates a signed TLS certificate and sends it to thecertificate administrator’s e-mail address. 5 Save the signed TLS certificate to a location that is accessiblefrom the MCG 3100 Server. You require the sig...

Manage TLS certificates 39 4 Save both formats of the certificate to a directory location that isaccessible from the MCG 3100 Server. --End-- Root and signed certificate installation The keystore must contain the following certificates: • the CA root or intermediate certificate (or both as required ...

40 Postinstallation ATTENTION Nortel strongly recommends that you back up the keystore directoryto protect the files against overwriting, deletion, or corruption. 6 Restart the server: /sbin/service mobilitygw restart 7 When prompted, enter the root password. --End-- Importing a preinstalled CA root...

Manage TLS certificates 41 /usr/java/jdk1.5.0_03/bin/keytool -storepasswd-new <new_password> -storepass <od_password>-keystore /opt/SQMobilityGW where <old_password> is the existing keystore password.<new_password> is your chosen password. 4 Change the working directory: cd /...

42 Postinstallation ATTENTION If a user attempts to log on and the root certificate is not installed, a promptappears asking for permission to allow access to the MCG 3100 Server. Ifpermission is granted and the connection fails or times out, the user must installthe root certificate on the mobile c...

Manage TLS certificates 43 4 On the device, locate the certificate using File Explorer and clickon it. 5 At the continuation prompt , click Accept. The certificate installs on the device. --End-- Nortel Mobile Communication 3100 Series Portfolio Nortel Mobile Communication Gateway 3100 Installation ...

45 . System software maintenance This chapter contains the following topics: • “System software upgrades” (page 45) • “System software uninstallation” (page 49) • “Admin shell access” (page 50) • “Shell commands” (page 50) System software upgrades After you complete the initial Mobile Communication ...

System software upgrades 47 The document contains information about SUs for CS 1000. 4 Download the appropriate patches to a location that you canconnect to from the MCG 3100. 5 Log on to the MCG 3100 as nortel. For more information, see “Admin shell access” (page 50) . 6 Transfer the SU you downloa...

48 System software maintenance mobilitybase-2.1-75.src.rpmSize : 72043134 License: Commercial Signature : (none)Summary : Mobility Gateway Base distribution packageDescription :facility for the configuration of the platform forthe mobility gw The server completes the installation. 13 Enter sudo /opt...

System software uninstallation 49 The server responds with information about the SU status. Forexample, In system patches:1Patch handle 0*Filename /var/opt/nortel/patch/mobilitybase-2.1.75.el4Patch release version: 5.00.38 Reference number: ISS1:1OF1 Patch is in-serviceIn-service date: 14/02/08 15:1...

50 System software maintenance Procedure 15Uninstalling the MCG 3100 system software WARNING This procedure removes the MCG 3100 software from theserver. Use Procedure 14 “Removing an SU” (page 48) to remove patches. Step Action 1 Log on to the server as nortel. 2 From any directory, enter the unins...

Shell commands 51 • Procedure 19 “Checking the Gateway Server processes” (page 52) • Procedure 20 “Checking the Administration Server processes” (page53) • Procedure 21 “Backing up the databases” (page 54) • Procedure 22 “Restoring the databases” (page 54) Procedure 16Starting, stopping, and restart...

54 System software maintenance CAUTION Service Interruption The database backup and restore procedures take the serverout of service for two or more minutes. Nortel recommends thatyou perform these procedures during periods of low server use. The database stores configuration data and licensed user ...

57 . Appendix APort numbers and protocols Table 6 "Port usage" (page 57) lists the port usage details for the MCG 3100. Table 6Port usage Port Protocol Function Application Configurable Portmappedthroughfirewall 21 TCP FTP Base Linux No No 22 TCP SSH Base Linux No No 53 UDP Domain NameServer...

59 . Appendix BSelf-signed certificate generation As an alternative to using a Certificate Authority, you can generate anduse self-signed certificates. ATTENTION Self-signed certificates do not provide the same level of security as CA-signedcertificates. Use self-signed certificates for test or demo...

60 Appendix B Self-signed certificate generation 90 days. Nortel recommends using a value of 3650. ATTENTION Use the host name (including domain name) of the server as thecommon name (cn). 6 Generate the client certificate: /usr/java/jdk1.5.0_03/bin/keytool -export-alias Tomcat -file publickey.der-s...

61 . Index A Administration Server restarting 51 starting 51 stopping 51 B backup, database 54 C CA intermediate certificate obtaining 38 CA root certificate distribution 41 installation 39 obtaining 38 Certificate Authority, (CA) 33 Certificate Signing Request, (CSR) 34 generating 35 D database bac...