Overview
Use these instructions to configure your
(s) with basic network interface information, and to configure SecureLink application to allow Sonus personnel to remotely set up your
platform.
The SecureLink is a third-party remote access management tool used extensively by Sonus Support team to allow dedicated remote connectivity to Sonus equipment while providing customers with the latest in security and audit capabilities. SecureLink creates an outbound connection to Sonus, and only allows inbound traffic from Sonus (for example: only Sonus personnel can use this connection).
Caption |
---|
0 | Figure |
---|
1 | SBC 5400 SecureLink Architecture |
---|
|
![SBC_5400_SecureLink_architecture.png](/plugins/servlet/confluence/placeholder/unknown-attachment?locale=en_GB&version=2)
|
Prerequisites
- The server is racked mounted, cabled and powered up.
Server names are known (i.e. “XYZSBC1a” and “XYZSBC1b” as an HA pair).
BMC, management and DNS IPs are known (use table below).
DNS registration code is known (use table below).
Router is configured and connected to SBC management ports.
Router can send traffic to public Internet.
User obtained from Sonus the unique registration code for each SBC unit.
User provided server name(s), mgmt. IP(s), and NTP IP to Sonus.
Procedure
Perform the following steps to install SecureLink for remote access:
The
servers ships with pre-configured with IP address
169.254.77.1 to facilitate out of the box access to the BMC web interface. You must configure your PC/laptop IP address to be on this network so that it can communicate with the
server.
Connect your PC/Laptop via an Ethernet cable to the Field Service Port (FSP) at the back of the
unit as shown in the image, and power up the (if not already on). Caption |
---|
0 | Figure |
---|
1 | SBC 5400 PC to FSP |
---|
|
![SBC 5400 PC to FSP.png](/plugins/servlet/confluence/placeholder/unknown-attachment?locale=en_GB&version=2)
|
- Verify that both link LEDs at the FSP are lit. If only the left LED is lit, your PC/laptop network adapter link speed may be set to 10 Mbps. Check the PC/laptop Device Manager, and if necessary set your PC/laptop link speed to 100 Mbps/Full Duplex.
- If your PC/laptop uses DHCP and Automatic Private IP Address setting is enabled (default setting), the PC/laptop will be assigned an IP address in the same subnet as the initial BMC IP; therefore proceed to step 5. If your PC/laptop does not use DHCP, proceed to the next step to configure a static IP.
From Control Panel, set your PC/Laptop IP address to 169.254.77.2, subnet mask to 255.255.255.0, and default gateway to 169.254.77.1.
Windows 7 Path: Control Panel > Network and Sharing Center > Local Area Connection > Local Area Connection Properties > Internet Protocol Version 4 (TCP/IPv4) Properties.
Caption |
---|
0 | Figure |
---|
1 | SBC 5400 LAN Properties |
---|
|
![SBC 5400 LAN Properties.png](/plugins/servlet/confluence/placeholder/unknown-attachment?locale=en_GB&version=2)
|
- Type the pre-configured IP address 169.254.77.1 in a web browser (Firefox recommended. If you are using Internet Explorer, you must manually add "https://169.254.77.1" as a trusted site) to connect to the BMC web interface. The BMC GUI Login screen appears.
- Enter Username as “
root
” and Password as “superuse
r”. The SBC BMC main screen is displayed. Click Navigate to Configuration > Network tab. The BMC Network Settings screen is displayed.
Caption |
---|
0 | Figure |
---|
1 | SBC 5400 Network Configuration Screen |
---|
|
![SBC 5400 BMC Network Configuration1.png](/plugins/servlet/confluence/placeholder/unknown-attachment?locale=en_GB&version=2)
|
Enter the BMC IP Address, Prefix and Default Gateway network settings, then click Save to save the configuration.
Caption |
---|
0 | Figure |
---|
1 | SBC 5400 Network Configuration Screen 2 |
---|
|
![SBC 5400 BMC Network Configuration2.png](/plugins/servlet/confluence/placeholder/unknown-attachment?locale=en_GB&version=2)
|
- Disconnect the laptop from FSP, and then connect the FSP Port to the router.
- Connect a PC to the IP network that can access the BMC IP address.
- Continue to Procedure 2 (below) to configure network management interfaces.
Configure primary and secondary management IP interfaces.
Open a browser and enter the new BMC IP address to connect to the BMC web interface. The BMC Login window is displayed.
Caption |
---|
0 | Figure |
1SBC 5400 BMC Login window | Image Removed
|
Log on to the BMC using Username as “root
” and Password as “superuser
”SBC BMC GUI. The SBC BMC main screen is displayed.
Click the Navigate to Configuration > Platform Management Network tab.
Caption |
---|
0 | Figure |
---|
1 | SBC 5400 Platform Management Network Option |
---|
|
![SBC 5400 Platform Management Network Option.png](/plugins/servlet/confluence/placeholder/unknown-attachment?locale=en_GB&version=2)
|
The Platform Management Network Settings screen is displayed.
Caption |
---|
0 | Figure |
---|
1 | SBC 5400 Platform Management Network window |
---|
|
![SBC 5400 BMC PMNS screen.png](/plugins/servlet/confluence/placeholder/unknown-attachment?locale=en_GB&version=2)
|
- Configure the following network settings for all the four Management Interfaces 0, 1, 2 and 3. and then click Save:
- IPv4 Address
- IPv4 Address Prefix
IPv4 Default Gateway
Continue to Procedure 3 to configure SecureLink.
- Check that port 22 is set to allow access to securelink.sonusnet.com.
- From same network as management IPs, open a browser and enter new mgmt. IP.
- Logon Log on to EMA unit “A” using Username as “admin” and Password as “admin”default login credentials. Upon initial login, you are prompted to change password. Change the password.
Navigate to Administration > System Administration and select Secure Link from the navigation panel.
Caption |
---|
0 | Figure |
---|
1 | System Administration > Secure Link |
---|
|
![System Administration - Secure Link.png](/plugins/servlet/confluence/placeholder/unknown-attachment?locale=en_GB&version=2)
|
- From the SecureLink window, enter DNS IP Address associated with your network and the assigned Registration Code (obtained from Sonus).
Click Enable Gatekeeper Access.
Caption |
---|
0 | Figure |
---|
1 | SecureLink - Enabling GateKeeper Access |
---|
|
![Secure Link - Enable Gatekeeper Access.png](/plugins/servlet/confluence/placeholder/unknown-attachment?locale=en_GB&version=2)
|
Wait a minute or two for Gatekeeper access field to change to "enabled" before proceeding.
Caption |
---|
0 | Figure |
---|
1 | SecureLink - GateKeeper Access Enabled |
---|
|
![SecureLink Enabled.png](/plugins/servlet/confluence/placeholder/unknown-attachment?locale=en_GB&version=2)
|
Click Test SecureLink Access to perform Host name look-up and Direct connectivity tests.
Caption |
---|
0 | Figure |
---|
1 | SecureLink - Testing Secure Link |
---|
|
![SecureLink - Testing SecureLink Access.png](/plugins/servlet/confluence/placeholder/unknown-attachment?locale=en_GB&version=2)
|
Observe "Passed
" indication for both tests. Your SBC is now configured for SecureLink remote access!
Caption |
---|
0 | Figure |
---|
1 | SecureLink Lookup Test Passed |
---|
|
![SecureLink Lookup Test Passed.png](/plugins/servlet/confluence/placeholder/unknown-attachment?locale=en_GB&version=2)
|
If you have an HA configuration, return to Procedure 1. Configure BMC For Remote Access and repeat all steps in this procedure for the second
unit. Then continue to the next step. (Be sure to use Unit B’s information from the Prerequisites Table).
Contact your Sonus representative to test remote connectivity to
platform via SecureLink.