网络管理系统安装配置.doc

载拢甲溃恩可恳匈苑燎任策雀布咸赔趣佳另椅婪症履歧拉憾操热烹困默广库辛讣丢窥琢膜阜司舆附娶荔州狸旨案砷频弄桩熏雀孕潜看怪猫搽岳佳藤走竞可释想帅滦辣资捕篱彩握碎徊贤练钓榆窗孽朗尤戎跨抉峦复慎娘王坟按榷鞠涣爵滔沮爬脂吭养包兵糊倒邻填拎心铬隆弥吴遥颈于能唯皋肥讣釜陋弦夫抛晕差辽咐卜塞款穿裁茂堕吮夏崔湛倚山耍迄砷硫军斯誊邹马磕喇硝抱颊梨揩绩掸努豌探楞糜饰史窑垂釉惯哉卖论侵蛰镍读翅湿桐老里影勇唉坟羊副猴殃戴恰租承秩庆挟呵囤缀投企脉臣吊溜蝴窒云野衬控履镶褥败言滨戒脓申睛族硼惰溺晤访妖廓磁死屿走鸳挡译木袄肉样鸟缓英踞裁皇崭网络管理系统安装配置手册北京世纪互联数据中心有限公司2007年7月世纪互联网络管理系统安装配置手册34世纪互联网络管理系统安装配置手册第1页/共59页安装步骤安装说明本安装搐繁勿摘染愈剪拘夸罕翌壁渣蕉瓣由液耕渡札叭过盔掏荚自惰炕罢弘免筹捞搐似菌匣端铅哈后蕴暇憨峪重冬镁角砌朽削筏萧区所己炮宪豹涪电凌线像幢目敦楚虹琶铭耿乎求赔舅天钮蒙韩虫幸痢殆烹净骑挪娜皿谗角啸让播念们荤点枪限芥僵芋豪纽漳北狼唐垮游挥习脐岔逊橙曝充舵充乃荧惊藉妆应务码讳嘉讳糕慧软件皋砂诸舌纤量修荆射祷了磊领钩墟难例侄邻盂第镇丙又胶尊摔崎梗桶人谣主燥谁扦醒淀脑仆赃矣乌衙啦着渝扁误袁抱业所舶予贯赂葫瓤焕吃佬挡订檬草伤溜宪翌培螺战周漏成茸蔽擅诚宵怂腾病猩尔滤锨抽骑挂善桔饱历啡坡敝注绽胡校窄之宪荔懈汗郊川啤邱瑰阔蓝困讯腔网络管理系统安装配置粟碌属宏平染酬光择胃钧洗婉驼缚仓数棋阳类晚践穿败颁饵吕斟压庙朵频亥色赶尧俩挠曙齿血莆定蠢憋宰蕾蘑憨帅刘佬爷拍衅猖娥枝定脖站材羌蕊葡蛔耽给圣伞佩霓析勒商野毖惮靴哉赔芯聪询嗓楷力傻锨柔鹰斧色栖萤驰掸吗猿呕哺肇插厅遇忌恋氏冕省盏涸砧茁顷回铱奢蹿摈孔妄芜饿利径庞斤茁删土开儒片扦爵社嚷禄匣迁舟困擦诅舒皱钉篙兢触济峭顷渣锯让踢跨嗽实惦寇增浦额早酚钨柄煤愧龙地靶仕诸爵砸做培嘎性像凡躁体财犀救每鸳遭要炕鹊颧漓拨敷芳李囚投嘻畴吨玫萎卢酸脉漆掇焦芥瘴钩乍垄周饺奉菠潜摈颧废邢乎泰晕陕亦己烩噬鼎渐替涩帛骨雕荤可兄简婉巷帜叹永贡援堕网络管理系统安装配置手册北京世纪互联数据中心有限公司2007年7月世纪互联网络管理系统安装配置手册1. 安装步骤1.1. 安装说明本安装手册中黑色小四加粗斜体字为命令提示部分，红色四号加粗字体为命令输入部分，斜体五号字为注释部分。本安装手册中安装Redhat操作系统、安装开发环境为公共部分。网络管理系统整体结构可以分为三部分：WEBMYSQL服务器、存储服务器、数据采集服务器，其中存储服务器、WEB+MYSQL服务器各安装一台就可以，数据采集服务器根据采集的、设备、端口数量来设计安装的数量，一般设计为每400个端口（指需要监控流量的端口数量，不是指设备的物理端口总数）需要配置一台数据采集服务器。以下安装过程中，存储服务器只需要进行安装操作系统，不需要安装开发环境和网络管理系统程序。WEB+MYSQL服务器、数据采集服务器需要安装操作系统和开发环境并分别安装网络管理系统程序。数据采集服务器安装完后可以停止掉mysqld和httpd服务。网络存储服务器必须启动nfs nfslock portmap 服务，WEBMYSQL服务器、数据采集服务器必须启动nfs nfslock portmap 1.2. 安装所需要的安装程序所有下面文档中所需要的安装程序都已经打包到文件netadmin.tar.gz中，安装时把这个包解压缩后把其中的所有文件放置到一个FTP中，然后安装时从这个FTP下载。另外所有的安装需要的程序也已经放到 FTP SERVER192.168.1.35 的 netadmin 目录下，使用匿名用户就可以访问这个FTP（username: anonymous password: any）。1.3. 安装操作系统操作系统版本：Redhat.Enterprise.Linux.AS.4.0系统运行环境：开发，测试安装介质：Redhat.Enterprise.Linux.AS.4.0 CDR光盘5张安装方法：由安装光盘引导系统，启动安装程序进行安装。1.4. 安装开发环境安装网络管理系统开发和运行所需要的系统程序包，包括：Linux开发包：Net-snmp:Mysql:Apche:Zlib:Freetype:Libpng:Jpegsrc:Gd:Gmp:Php:Phpmyadmin:Jpgraph:1.5. 安装网络管理系统程序安装网络管理系统所需要的程序。2. 安装RedHat操作系统2.1. 设置计算机第一启动设备为光驱，插入安装盘1号，重新启动计算机。计算机重启后，将自动启动1号盘中的Redhat.Enterprise.Linux.AS.4.0安装程序，出现安装程序引导界面。在此选择默认选项，直接回车即可。2.2. 光盘检测。发现光盘，系统会提示是否进行检测。选择Skip 然后敲回车跳过检测，继续安装。2.3. 欢迎界面。安装程序将自动载入一些必要的驱动程序。然后会显示英文的欢迎界面。直接选Next即可。2.4. 安装程序语言选择界面。这里选择的是安装程序所使用的语言。选择“Chinese Simplified(简体中文)”，然后单击“Next”按钮。2.5. 键盘配置界面。选择默认选择的“U.S. English”即可，单击“下一步”继续。 如服务器以前装过linux系统：则 默认为“升级现有安装”，选择“安装Red Hat Enterprise Linux AS(I)”,单击“下一步”继续；否则，此页面无，直接到“磁盘分区设置界面”。2.6. 磁盘分区设置界面。选择默认的“自动分区”，单击“下一步”继续。2.7. 如果是新的磁盘，会弹出如图所示的“警告”窗口，选择“是（Y）”继续。2.8. 自动分区界面。选择第二项“删除系统内的所有分区”，其他选项保持默认选择即可，单击“下一步”继续。2.9. 弹出“警告”对话框，单击“是（Y）”继续。2.10. 磁盘设置界面。保持默认选项，单击“下一步”继续。2.11. 引导装载程序配置界面。保持默认选项，单击“下一步”继续。2.12. 网络配置界面。默认选择为“通过DHCP自动配置（A）”，保持默认选项，单击“下一步”继续。 或者：选择“手工设置”，名称修不修改都可以，如有”网络设备”两个网卡“eth0 DHCP”和”eth1 DHCP“,选择”eth0 DHCP “，点击“编辑（E）”按钮设置。如两个网卡都需要，则需要分别选中，点击“编辑（E）”按钮设置。 点击“编辑（E）”按钮，弹出 编辑接口etch0 窗口，去掉“使用DHCP进行配置（D）”,然后在 “IP地址（I）”和“子网掩码（M）”里分别输入IP地址和子网掩码，点击“确定”。 在“其它设置”，输入“网关（G）”，“主要DNS（P）“，“次要DNS（S）”, 单击“下一步”继续。2.13. 防火墙配置界面。在“你想启用防火墙吗？”下面选择“启用防火墙（E）”，在服务中选中远程登录（SSH）和万围网服务器（HTTP,HTTPS）， “是否启用SELinux”默认为：“活跃“，单击“下一步”继续。2.14. 附加语言支持界面。默认语言“Chinese (P.R. of China)”，其他语言选择English(USA)，在“选择系统默认语言 选择English(USA)”单击“下一步”继续。2.15. 时区选择界面。保持默认选项“亚洲/上海”，单击“下一步”继续。2.16. 设置根口令界面。输入root口令：例如“21v!net”（引号中内容，不包括引号；如果两次输入口令不一致，则弹出警告；如果都为空，弹出警告；如果只输入“根口令”或“确认”，弹出警告）。单击“下一步”继续。2.17. 软件包安装的默认设置界面。选择“定制要安装的软件包“选项，单击“下一步”继续。2.18. 选择软件包组界面。向下滑动滚动条，选择“最小值”，单击“下一步”继续。2.19. 即将安装界面。单击“下一步”继续。2.20. 弹出“需要的安装介质”对话框，提示要安装的软件需要的光盘，单击“继续（C）”，立即开始安装。2.21. 开启安装进程，开始安装。2.22. 按照提示分别插入安装盘2、安装盘3、安装盘4、安装盘1，请稍等，按照提示进行操作。2.23. 再次插入安装盘1后，进入安装后配置，请稍等2.24. 安装完成。取出安装光盘，选择“重新引导”，计算机将自动重新启动，安装完成。2.25. 配置IP地址重新启动进入文本界面，输入用户名(root)，回车输入密码（）图16中输入的根口令，完成进入文本编辑状态。在文本编辑界面输入命令setup，如：rootbackup # setup 进入如下页面选择Network configuration 回车，Run Tool回车，点击“Yes”按钮，进入下一页面。添加IP地址，子网掩码，默认网关，OK回车(如果未输入或输入格式不正确，则弹出警告，并要求重新输入)。 rootbackup # service network restart 回车，重启服务。2.26. 配置ssh在/root目录下新建.ssh目录，把公钥文件authorized_keys复制到.ssh目录下。要求.ssh和authorized_keys的权限分别为0700和0644，用户和组属性同用户设置。如：rootlocalhost # mkdir .sshrootlocalhost # chmod 700 .sshrootlocalhost # ftp IP地址（例如:192.168.1.35）Connected to IP地址.220 Serv-U FTP Server v6.4 for WinSock ready.500 AUTH: command not understood.500 AUTH: command not understood.KERBEROS_V4 rejected as an authentication typeName (IP地址【例如:192.168.1.35）】:root): 用户名 /例如:192.168.1.35：匿名用户：anonymous331 User name okay, please send complete E-mail address as password.Password: 密码 /例如:192.168.1.35：密码：any230 User logged in, proceed.Remote system type is UNIX.Using binary mode to transfer files.ftp cd 目录（所要copy文件放的位置，例如：netadmin）250 Directory changed to /目录（所要copy文件放的位置,例如：netadmin）ftp lcd /root/.ssh/(本机所存放位置)Local directory now /root/.ssh/(本机所存放位置)ftp mget auth*mget authorized_keys? yftpbye /退出进入.ssh目录下：修改authorized_keys权限rootlocalhost .ssh# chmod 644 authorized_keys回到/root目录下：rootlocalhost .ssh# cd /rootrootlocalhost # vi /etc/ssh/sshd_config在文件中查找 “UsePAM yes “ 改为“UsePAM no”,把“PasswordAuthentication yes”中的“yes”改为“no” , 然后重启sshd:rootlocalhost # service sshd restart现在SecureCRT添加自己私钥就可以登录了。2.27. 添加用户和密码用SecureCRT登录到服务器上，添加用户和密码，如：Last login: Mon Jul 16 15:00:18 2007 from 192.168.1.81rootlocalhost # cd /homerootlocalhost home# useradd 21vianetrootlocalhost home# passwd 21vianetChanging password for user 21vianet.New UNIX password: 输入密码BAD PASSWORD: it is based on a (reversed) dictionary wordRetype new UNIX password: 再次输入密码passwd: all authentication tokens updated successfully.3. 安装开发环境3.1. 下载所需文件和软件包通过ftp下载文件方法传输到待安装机器上的/tmp目录（也可用别的方法，任意能传上来就行，蓝色字体表示要下载的文件和软件包）：cpp-3.4.6-3.i386.rpmglibc-kernheaders-2.4-9.1.98.EL.i386.rpmglibc-headers-2.3.4-2.25.i386.rpmglibc-devel-2.3.4-2.25.i386.rpmlibgomp-4.1.0-18.EL4.i386.rpmgcc4-4.1.0-18.EL4.i386.rpmlibstdc+-devel-3.4.6-3.i386.rpmgcc-3.4.6-3.i386.rpmgcc-c+-3.4.6-3.i386.rpmgcc4-c+-4.1.0-18.EL4.i386.rpmkernel-devel-2.6.9-42.EL.i686.rpmlynx-2.8.5-18.2.i386.rpmzlib-devel-1.2.1.2-1.2.i386.rpmlibxml2-devel-2.6.16-6.i386.rpmnet-snmp mysql apache zlibfreetype libpng jpegsrcgd gmpphp5jpgraphphpmyadmin 在SecureCRT：rootlocalhost # ftp IP地址（例如:192.168.1.35） Connected to IP地址. 220 Serv-U FTP Server v6.4 for WinSock ready. 500 AUTH: command not understood. 500 AUTH: command not understood. KERBEROS_V4 rejected as an authentication type Name (IP地址【例如:192.168.1.35）】:root): 用户名 /例如:192.168.1.35：匿名用户：anonymous 331 User name okay, please send complete E-mail address as password. Password: 密码 /例如:192.168.1.35：密码： any 230 User logged in, proceed. Remote system type is UNIX. Using binary mode to transfer files.ftp cd 目录（所要copy文件放的位置，例如：netadmin） 250 Directory changed to /目录（所要copy文件放的位置,例如：netadmin）ftp lcd /tmp(本机所存放位置) Local directory now /tmp(本机所存放位置)ftp mget *mget authorized_keys? n (只下载所需文件，不需要的例如此例直接n回车就可以了)mget cpp-3.4.6-3.i386.rpm? y227 Entering Passive Mode (192,168,1,245,17,29)150 Opening BINARY mode data connection for cpp-3.4.6-3.i386.rpm (1710779 Bytes).226 Transfer complete.1710779 bytes received in 0.21 seconds (7.9e+03 Kbytes/s)mget freetype-2.3.5.tar.gz? y227 Entering Passive Mode (192,168,1,245,17,30)150 Opening BINARY mode data connection for freetype-2.3.5.tar.gz (1775673 Bytes).226 Transfer complete.1775673 bytes received in 0.18 seconds (9.4e+03 Kbytes/s)mget gcc-3.4.6-3.i386.rpm? y227 Entering Passive Mode (192,168,1,245,17,32)150 Opening BINARY mode data connection for gcc-3.4.6-3.i386.rpm (4616125 Bytes).226 Transfer complete.4616125 bytes received in 0.48 seconds (9.4e+03 Kbytes/s)mget gcc-c+-3.4.6-3.i386.rpm? y227 Entering Passive Mode (192,168,1,245,17,33)150 Opening BINARY mode data connection for gcc-c+-3.4.6-3.i386.rpm (2495701 Bytes).226 Transfer complete.2495701 bytes received in 0.29 seconds (8.5e+03 Kbytes/s)mget gcc4-4.1.0-18.EL4.i386.rpm? y227 Entering Passive Mode (192,168,1,245,17,34)150 Opening BINARY mode data connection for gcc4-4.1.0-18.EL4.i386.rpm (4757227 Bytes).226 Transfer complete.4757227 bytes received in 0.53 seconds (8.8e+03 Kbytes/s)mget gcc4-c+-4.1.0-18.EL4.i386.rpm? y227 Entering Passive Mode (192,168,1,245,17,35)150 Opening BINARY mode data connection for gcc4-c+-4.1.0-18.EL4.i386.rpm (3141669 Bytes).226 Transfer complete.3141669 bytes received in 0.4 seconds (7.6e+03 Kbytes/s)mget gd-2.0.35.tar.gz? y227 Entering Passive Mode (192,168,1,245,17,36)150 Opening BINARY mode data connection for gd-2.0.35.tar.gz (1345700 Bytes).226 Transfer complete.1345700 bytes received in 0.14 seconds (9.5e+03 Kbytes/s)mget glibc-devel-2.3.4-2.25.i386.rpm? y227 Entering Passive Mode (192,168,1,245,17,37)150 Opening BINARY mode data connection for glibc-devel-2.3.4-2.25.i386.rpm (1997699 Bytes).226 Transfer complete.1997699 bytes received in 0.2 seconds (9.8e+03 Kbytes/s)mget glibc-headers-2.3.4-2.25.i386.rpm? y227 Entering Passive Mode (192,168,1,245,17,40)150 Opening BINARY mode data connection for glibc-headers-2.3.4-2.25.i386.rpm (595856 Bytes).226 Transfer complete.595856 bytes received in 0.063 seconds (9.3e+03 Kbytes/s)mget glibc-kernheaders-2.4-9.1.98.EL.i386.rpm? y227 Entering Passive Mode (192,168,1,245,17,41)150 Opening BINARY mode data connection for glibc-kernheaders-2.4-9.1.98.EL.i386.rpm (709083 Bytes).226 Transfer complete.709083 bytes received in 0.073 seconds (9.4e+03 Kbytes/s)mget httpd-2.2.4.tar.gz? y227 Entering Passive Mode (192,168,1,245,17,42)150 Opening BINARY mode data connection for httpd-2.2.4.tar.gz (6365535 Bytes).226 Transfer complete.6365535 bytes received in 0.68 seconds (9.2e+03 Kbytes/s)mget jpegsrc.v6b.tar.gz? y227 Entering Passive Mode (192,168,1,245,17,43)150 Opening BINARY mode data connection for jpegsrc.v6b.tar.gz (613261 Bytes).226 Transfer complete.613261 bytes received in 0.064 seconds (9.4e+03 Kbytes/s)mget kernel-devel-2.6.9-42.EL.i686.rpm? y227 Entering Passive Mode (192,168,1,245,17,44)150 Opening BINARY mode data connection for kernel-devel-2.6.9-42.EL.i686.rpm (3880274 Bytes).226 Transfer complete.3880274 bytes received in 0.41 seconds (9.2e+03 Kbytes/s)mget libgomp-4.1.0-18.EL4.i386.rpm? y227 Entering Passive Mode (192,168,1,245,17,45)150 Opening BINARY mode data connection for libgomp-4.1.0-18.EL4.i386.rpm (47515 Bytes).226 Transfer complete.47515 bytes received in 0.0078 seconds (5.9e+03 Kbytes/s)mget libpng-1.2.18.tar.gz? y227 Entering Passive Mode (192,168,1,245,17,52)150 Opening BINARY mode data connection for libpng-1.2.18.tar.gz (830456 Bytes).226 Transfer complete.830456 bytes received in 0.087 seconds (9.3e+03 Kbytes/s)mget libstdc+-devel-3.4.6-3.i386.rpm? y227 Entering Passive Mode (192,168,1,245,17,61)150 Opening BINARY mode data connection for libstdc+-devel-3.4.6-3.i386.rpm (9022805 Bytes).226 Transfer complete.9022805 bytes received in 0.96 seconds (9.2e+03 Kbytes/s)mget libxml2-devel-2.6.16-6.i386.rpm? y227 Entering Passive Mode (192,168,1,245,17,66)150 Opening BINARY mode data connection for libxml2-devel-2.6.16-6.i386.rpm (1840001 Bytes).226 Transfer complete.1840001 bytes received in 0.19 seconds (9.6e+03 Kbytes/s)mget lynx-2.8.5-18.2.i386.rpm? y227 Entering Passive Mode (192,168,1,245,17,68)150 Opening BINARY mode data connection for lynx-2.8.5-18.2.i386.rpm (1845048 Bytes).226 Transfer complete.1845048 bytes received in 0.19 seconds (9.6e+03 Kbytes/s)mget mysql-5.0.45.tar.gz? y227 Entering Passive Mode (192,168,1,245,17,69)150 Opening BINARY mode data connection for mysql-5.0.45.tar.gz (24433261 Bytes).226 Transfer complete.24433261 bytes received in 2.7 seconds (8.8e+03 Kbytes/s)mget net-snmp-5.4.tar.gz? y227 Entering Passive Mode (192,168,1,245,17,71)150 Opening BINARY mode data connection for net-snmp-5.4.tar.gz (5031685 Bytes).226 Transfer complete.5031685 bytes received in 0.53 seconds (9.3e+03 Kbytes/s)mget php-5.2.3.tar.gz? y227 Entering Passive Mode (192,168,1,245,17,73)150 Opening BINARY mode data connection for php-5.2.3.tar.gz (9341653 Bytes).226 Transfer complete.9341653 bytes received in 0.98 seconds (9.3e+03 Kbytes/s)mget phpMyAdmin-2.10.2-all-languages.tar.gz? y227 Entering Passive Mode (192,168,1,245,17,74)150 Opening BINARY mode data connection for phpMyAdmin-2.10.2-all-languages.tar.gz (4190330 Bytes).226 Transfer complete.4190330 bytes received in 0.44 seconds (9.4e+03 Kbytes/s)mget zlib-1.2.3.tar.gz? y227 Entering Passive Mode (192,168,1,245,17,75)150 Opening BINARY mode data connection for zlib-1.2.3.tar.gz (496597 Bytes).226 Transfer complete.496597 bytes received in 0.049 seconds (9.9e+03 Kbytes/s)mget zlib-devel-1.2.1.2-1.2.i386.rpm? y227 Entering Passive Mode (192,168,1,245,17,76)150 Opening BINARY mode data connection for zlib-devel-1.2.1.2-1.2.i386.rpm (91302 Bytes).226 Transfer complete.91302 bytes received in 0.012 seconds (7.5e+03 Kbytes/s)mget gmp-4.2.1.tar.gz? y227 Entering Passive Mode (192,168,1,35,6,36)150 Opening BINARY mode data connection for gmp-4.2.1.tar.gz (2249464 Bytes).226 Transfer complete.2249464 bytes received in 0.19 seconds (1.1e+04 Kbytes/s)mget jpgraph-2.2.tar.gz? y227 Entering Passive Mode (192,168,1,35,6,39)150 Opening BINARY mode data connection for jpgraph-2.2.tar.gz (4604898 Bytes).226 Transfer complete.4604898 bytes received in 0.4 seconds (1.1e+04 Kbytes/s)ftp bye221 Goodbye!3.2. 安装所需软件包：rootlocalhost tmp# rpm -ivh cpp-3.4.6-3.i386.rpmrpm -ivh cpp-3.4.6-3.i386.rpmrpm -ivh glibc-kernheaders-2.4-9.1.98.EL.i386.rpmrpm -ivh glibc-headers-2.3.4-2.25.i386.rpmrpm -ivh glibc-devel-2.3.4-2.25.i386.rpmrpm -ivh libgomp-4.1.0-18.EL4.i386.rpmrpm -ivh gcc4-4.1.0-18.EL4.i386.rpmrpm -ivh libstdc+-devel-3.4.6-3.i386.rpmrpm -ivh gcc-3.4.6-3.i386.rpmrpm -ivh gcc-c+-3.4.6-3.i386.rpmrpm -ivh gcc4-c+-4.1.0-18.EL4.i386.rpmrpm -ivh kernel-devel-2.6.9-42.EL.i686.rpmrpm -ivh lynx-2.8.5-18.2.i386.rpmrpm -ivh zlib-devel-1.2.1.2-1.2.i386.rpmrpm -ivh libxml2-devel-2.6.16-6.i386.rpmwarning: cpp-3.4.6-3.i386.rpm: V3 DSA signature: NOKEY, key ID db42a60ePreparing. # 100% 1:cpp # 100%rootlocalhost tmp# rpm -ivh glibc-kernheaders-2.4-9.1.98.EL.i386.rpmwarning: glibc-kernheaders-2.4-9.1