Differences
This shows you the differences between two versions of the page.
| Both sides previous revisionPrevious revisionNext revision | Previous revision | ||
| en:veos:installation [2023/09/06 13:57] – elena.krasnobryzh | en:veos:installation [2025/01/14 07:33] (current) – [Pre-configuring VEOS] elena.krasnobryzh | ||
|---|---|---|---|
| Line 2: | Line 2: | ||
| {{indexmenu_n> | {{indexmenu_n> | ||
| - | <note tip>Due to the fact that Red Hat discontinued support for CentOS 8 at the end of 2021, VAS Experts offers a strategy for the continued use of Red Hat as Control Plane.\\ | + | <note tip>Before rack-mounting |
| - | **The transition to the new OS edition is planned in the form of an in-house upgrade (without reinstallation), | + | |
| - | <note important> | + | |
| + | | ||
| + | | ||
| - | * __[[en: | + | :!: If any discrepancies are found at this stage, contact [[en: |
| - | * __[[en: | + | |
| - | * __[[en: | + | |
| - | + | ||
| - | If any discrepancies are found at this stage, contact [[en: | + | |
| ===== ISO Links ===== | ===== ISO Links ===== | ||
| - | | + | |
| [[en: | [[en: | ||
| + | <note important> | ||
| + | When partitioning a disk for SSG software: | ||
| + | * ~ 20 GB for root partition | ||
| + | * Allocate the remaining space for the ''/ | ||
| + | * The Stingray SG does not use a SWAP partition, but it is needed for system tasks and requires a 4 GB allocation. | ||
| + | **Disable Hyper-threading in BIOS for SSG software!** | ||
| + | </ | ||
| ===== Preparation of the installation USB memory stick ===== | ===== Preparation of the installation USB memory stick ===== | ||
| - | The currently | + | The most popular |
| - | <note warning> | + | <note warning> |
| - | To create a Linux/Unix installation USB disk, run the dd command: | + | |
| - | > dd if=VEOS-8.6-x86_64-minimal.iso of=/dev/sdz | + | |
| - | <note important> | + | ==== Writing a USB disk on Linux ==== |
| - | You can download DD for Windows [[http://www.chrysocome.net/dd|here]]. | + | To create a USB installation disk on Linux/Unix, run the dd command: |
| + | > dd if=VEOS-8.7-x86_64-Minimal.iso of=/dev/sdz bs=1M | ||
| - | If using dd for Windows, run dd --list and look carefully at the list of NT Block Device Objects and use the one that looks like \\? | + | :!: When writing, you must specify |
| + | ==== Writing a USB Disk to Windows ==== | ||
| + | |||
| + | === Rufus === | ||
| + | To burn an ISO to a USB drive on Windows, you can use the [[https:// | ||
| + | * Rufus main screen | ||
| + | {{: | ||
| + | * recording mode selection dialog box | ||
| + | {{: | ||
| + | |||
| + | === Diskdupe (dd) for Windows === | ||
| + | The command parameters are similar to those on Linux. The DD distribution for Windows can be downloaded [[http:// | ||
| + | |||
| + | When using dd for Windows, first run dd --list and, after carefully reviewing the NT block device list, select a device similar to {\? | ||
| ===== Preparation of the installation disk ===== | ===== Preparation of the installation disk ===== | ||
| Line 36: | Line 52: | ||
| ==== Recording a disk image in the MS Windows operating system ==== | ==== Recording a disk image in the MS Windows operating system ==== | ||
| - | An ISO disk image file is a special format file prepared to burn on a disk. To burn an ISO image in the MS Windows use special programs: [[http:// | + | An ISO disk image file is a special format file prepared to burn on a disk. To burn an ISO image in the MS Windows use special programs: [[http:// |
| === Recording a disk image with Small CD-Writer === | === Recording a disk image with Small CD-Writer === | ||
| Line 80: | Line 96: | ||
| - finishing installation and rebooting. | - finishing installation and rebooting. | ||
| - | < | ||
| - | * When partitioning a disk for SSG software: < | ||
| - | the rest of the space can be allocated for the /var directory | ||
| - | The Stingray SG partition does not use swap, but it may be required for system tasks, so 4GB can be allocated </ | ||
| - | * Disable Hyper-threading in BIOS for SSG software! | ||
| - | </ | ||
| - | ====== Pre-configuring VEOS ====== | ||
| - | If you received a preinstalled system from us, please immediately refer to the [[en: | + | ===== Pre-configuring VEOS ===== |
| + | |||
| + | If you received a preinstalled system from us, please immediately refer to the [[en: | ||
| Otherwise, you need to install the VEOS operating system on your server yourself and give us remote SSH access and root rights to perform the installation and initial configuration of the platform. After the work is completed, the remote access can be closed. | Otherwise, you need to install the VEOS operating system on your server yourself and give us remote SSH access and root rights to perform the installation and initial configuration of the platform. After the work is completed, the remote access can be closed. | ||
| - | |||
| - | ===== 2.1 Preparing the server and installing VEOS ===== | ||
| - Create a **vasexpertsmnt** user: < | - Create a **vasexpertsmnt** user: < | ||
| Line 98: | Line 107: | ||
| - Save the password for **vasexpertsmnt**. | - Save the password for **vasexpertsmnt**. | ||
| - Set permission for users of the wheel group to use all commands on behalf of all users, for this you need to add to /// | - Set permission for users of the wheel group to use all commands on behalf of all users, for this you need to add to /// | ||
| - | - To provide remote access via SSH and set restrictions on valid IP addresses from the list: < | + | - To provide remote access via SSH and set restrictions on valid IP addresses from the list: < |
| + | <code> | ||
| < | < | ||
| - | iptables -A INPUT -m conntrack --ctstate RELATED, ESTABLISHED -j ACCEPT | + | iptables -A INPUT -m conntrack --ctstate RELATED, |
| - | iptables -A INPUT -p tcp -s 45.151.108.0/ | + | iptables -A INPUT -p tcp -s 45.151.108.0/ |
| - | iptables -A INPUT -p tcp -s 94.140.198.64/ | + | iptables -A INPUT -p tcp -s 94.140.198.64/ |
| - | iptables -A INPUT -p tcp -s 78.140.234.98 | + | iptables -A INPUT -p tcp -s 193.218.143.187 -m tcp --dport 22 -j ACCEPT |
| - | iptables -A INPUT -p tcp -s 193.218.143.187 | + | iptables -A INPUT -p tcp -s 93.100.73.160 -m tcp --dport 22 -j ACCEPT |
| - | iptables -A INPUT -p tcp -s 93.100.47.212 | + | iptables -A INPUT -p tcp -s 78.140.234.98 -m tcp --dport 22 -j ACCEPT |
| - | iptables -A INPUT -p tcp -s 93.100.73.160 -m tcp --dport 22 -j ACCEPT | + | iptables -A INPUT -p tcp -s 93.159.236.11 -m tcp --dport 22 -j ACCEPT |
| - | iptables -A INPUT -p tcp -s 77.247.170.134 -m tcp --dport 22 -j ACCEPT | + | iptables -A INPUT -p tcp -s 46.243.181.35 -m tcp --dport 22 -j ACCEPT |
| - | iptables -A INPUT -p tcp -s 91.197.172.2 -m tcp --dport 22 -j ACCEPT | + | iptables -A INPUT -p tcp -s 46.243.181.242 -m tcp --dport 22 -j ACCEPT |
| - | iptables -A INPUT -p tcp -s 46.243.181.242 -m tcp --dport 22 -j ACCEPT | + | iptables -A INPUT -p tcp --dport 22 -j DROP |
| - | iptables -A INPUT -p tcp -s 93.159.236.11 -m tcp --dport 22 -j ACCEPT | + | service iptables save |
| - | iptables -A INPUT -p tcp --dport 22 -j DROP | + | |
| - | service iptables save | + | |
| </ | </ | ||
| If you are using firewalld: | If you are using firewalld: | ||
| < | < | ||
| - | firewall-cmd --permanent --zone = public --add-rich-rule = 'rule family = " | + | firewall-cmd --permanent --zone=public --add-rich-rule=' |
| - | firewall-cmd --permanent --zone = public --add-rich-rule = 'rule family = " | + | firewall-cmd --permanent --zone=public --add-rich-rule=' |
| - | firewall-cmd --permanent --zone = public --add-rich-rule = 'rule family = " | + | firewall-cmd --permanent --zone=public --add-rich-rule=' |
| - | firewall-cmd --permanent --zone = public --add-rich-rule = 'rule family = " | + | firewall-cmd --permanent --zone=public --add-rich-rule=' |
| - | firewall-cmd --permanent --zone = public --add-rich-rule = 'rule family = " | + | firewall-cmd --permanent --zone=public --add-rich-rule=' |
| - | firewall-cmd --permanent --zone = public --add-rich-rule = 'rule family = " | + | firewall-cmd --permanent --zone=public --add-rich-rule=' |
| - | firewall-cmd --permanent --zone = public --add-rich-rule = 'rule family = " | + | firewall-cmd --permanent --zone=public --add-rich-rule=' |
| - | firewall-cmd --permanent --zone = public --add-rich-rule = 'rule family = " | + | firewall-cmd --permanent --zone=public --add-rich-rule=' |
| - | firewall-cmd --permanent --zone = public --add-rich-rule = 'rule family = " | + | firewall-cmd --zone=public --remove-service=ssh --permanent |
| - | firewall-cmd | + | firewall-cmd --reload |
| - | firewall-cmd --reload | + | |
| - | firewall-cmd --zone = public --remove-service = ssh --permanent | + | |
| </ | </ | ||
| **!Save your settings as the server will be rebooted during installation!** \\ | **!Save your settings as the server will be rebooted during installation!** \\ | ||
| \\ | \\ | ||
| - | After making sure that remote access via SSH is provided, send to [[en: | + | After making sure that remote access via SSH is provided, send to [[en: |
| < | < | ||
| - | Installation of the Stingray software is carried out by engineers or by yourself according to the instruction: | + | Installation of the Stingray software is carried out by engineers or by yourself according to the instruction: |
| </ | </ | ||
| <note warning> | <note warning> | ||
| - | Do not update the operating system kernel until the system is activated [[en: | + | Do not update the operating system kernel until the system is activated [[en: |
| - | this may cause the network card driver to fail (([[en: | + | this may cause the network card driver to fail (([[en: |
| </ | </ | ||