ACTE Technical Training

NetPolicy Provisioner (NPP)

11/2/16

Agenda

Overview
Installation
Configuration on NetXplorer Server
NPP user interface

NetPolicy Provisioner (NPP)

Cache,
FTP,
eMail
Customer A site
Web
Farm
CCM
Billing

NetEnforcer or
Service Gateway
Switch

Router
Internet

Customer B site
NX
Server
Provisioning
& Monitoring

ISP Admin

NPP
Server

Service Provider

Architecture

NetXplorer GUI Client

RMI/IIOP

HTTPS

RMI/IIOP

NetXplorer Server
(JBOSS)

NetEnforcer 1

NPP Web Clients

NetEnforcer 2

NetXplorer and NPP server

can be on same or
separate servers

NPP App Server

(JBOSS Unix or Windows)

NetEnforcer N

ISP Administrator vs ISP Customers

ISP Admin

Customer A site

Modify Virtual Channels

View Graphs

NX GUI vs NPP Web Interface

ISP Administrator uses

NetXplorer GUI to:
Enable NPP
Define NPP accounts
Define Policy and
Catalog entries
Customize NPP UI

ISP Customer uses

NPP Web Interface to:
Run Monitoring graphs
Modify Virtual
Channels
Define Hosts

All limited to assigned

Pipes

Agenda

Overview
Installation
Configuration on NetXplorer Server
NPP user interface

Installation Options
NPP installed by default as
part of NX Installation

Windows

Can be installed on another

server for performance or
security reasons

Linux
rpm -ivh NetPolicy-Provisioner-8.1.0-5.i386.rpm
Preparing...
########################################### [100%]
1:NetPolicy-Provisioner
########################################### [100%]
Installation finished.
Please set NetXplorer IP Address by running
/opt/allot/npp/bin/set_npp_nx_ip.sh.
Then, please reboot your device.

To Enter NX IP Address:
/opt/allot/npp/bin/set_npp_nx_ip.sh

Server Installation Prerequisites

Hardware Requirements
Minimum Specifications

Intel Pentium 4 2.8 GHz and up

Intel Chipset based (925 or 955)
2 GB RAM DDR Dual channel
1 x 80 GB HDD, 8 MB Cache (SATA interface recommended)

Recommended Specifications

DUAL Xeon 2.8 GHz and up

4 GB RAM DDR Dual channel
Raid (RAID 0) controller with min 128 Mb RAM and write back cache battery
5x36 GB HDD SCSI U320 15k RPM or larger (capacity depends on overall
storage needs)

Windows Server Installation: Prerequisites

Software Requirements
Windows:
Minimum: Windows XP Professional Service Pack 2 (US English)
Recommended: Windows 2003 Service Pack 1 (US English)

Java SDK 1.6

No other database applications installed
Disable:
Real-Time Virus Protection programs or automatic
Defragmentation/Backup

No application listening to port 80

Windows Pre-Installation Checklist

Verify:
Minimum of 20GB is available on the disk
At least 4GB of available Virtual Memory
Java SDK 1.6 is installed, including runtime environment

Windows Installation (1)

Windows Installation (2)

Windows Installation (3)

Linux Server Installation: Prerequisites

Software Requirements
Red Hat Enterprise Linux Server 5 32 or 64 bit
Disable:
Any Real-Time Virus Protection programs or automatic
Defragmentation/Backup software

No other database applications installed

No application listening to port 80
FQDN of the server should be defined
To check run hostname -f

Linux Server Installation: Prerequisites

Software Requirements: NTP
NTP service installed and configured to start on reboot
chkconfig --levels 35 ntpd on

NetXplorer Server

NetEnforcer 1

NetEnforcer 2

NPP App Server

NetEnforcer N

NTP Server

Linux Installation Instructions (1)

1.
2.
3.

Confirm pre-installation requirements

Run the rpm ivh NetPolicy-Provisioner-x.x.-x.i386.rpm Package
If JDK is not detected during installation, you will be prompted to install
it by running:
rpm -ivh jdk-6u2-linux-i586.rpm (version numbers may differ)

rpm
rpm -ivh
-ivh NetPolicy-Provisioner-8.1.0-7.i386.rpm
NetPolicy-Provisioner-8.1.0-7.i386.rpm
Preparing...
Preparing...
###########################################
########################################### [100%]
[100%]
1:NetPolicy-Provisioner
1:NetPolicy-Provisioner
###########################################
########################################### [100%]
[100%]
Installation
Installation finished.
finished.
Please
Please set
set NetXplorer
NetXplorer IP
IP Address
Address by
by running
running /opt/allot/npp/bin/set_npp_nx_ip.sh.
/opt/allot/npp/bin/set_npp_nx_ip.sh.
Then,
Then, please
please reboot
reboot your
your device.
device. /opt/allot/npp/bin/set_npp_nx_ip.sh.
/opt/allot/npp/bin/set_npp_nx_ip.sh.

4.

Inform the NPP server of the NX IP Address by running:

/opt/allot/npp/bin/set_npp_nx_ip.sh

Linux Installation Instructions (2)

5.

Manually edit the /etc/host folder as follows:

127.0.0.1localhost.localdomainlocalhost
<serverIP><serverdomain><servername>

6.

Reboot the machine

7.

Check that NTP and NetXplorer services are running

Agenda

Overview
Installation
Configuration on NetXplorer Server
Enabling NPP
Policy Definition
Configuring Accounts
Customizing NPP UI
NPP user interface

Enabling NPP

Keys available for 10, 20,

50, 100 or 200 accounts

Agenda

Overview
Installation
Configuration on NetXplorer Server
Enabling NPP
Policy Definition
Configuring Accounts
Customizing NPP UI
NPP user interface

Define Catalogs (Mandatory)

Catalogs
Service

Time

QoS

Hosts

Who defines catalogs?

Host Catalogs:
NX administrator /
NPP User

Pre-Defined by NX
Administrator

Defined by
NPP User

All other Catalogs:

NX administrator only

Define Pipes (Mandatory)

Customer A site

Customer B site

Each Pipe can be assigned to only ONE account (customer)

Customers cannot edit Pipes

Define Virtual Channels (Optional)

Dont set internal hosts

Cannot exceed the VC limit per account
Account users with write
permissions CAN:
Modify Virtual Channels

Account users with write

permissions CANNOT:
Modify virtual channel templates
See or modify external hosts

Agenda

Overview
Installation
Configuration on NetXplorer Server
Enabling NPP
Policy definition
Configuring Accounts
Customizing NPP UI
NPP user interface

Account Admin User View Example

Multiple users
Multiple Pipes

Account Editing - General

Account Editing - Assigning Pipe Example

Account Editing Adding Users

Password should be 6-20 characters,

and include at least one digit

Account Editing Environment

Note: if using VC template

# VC created by template <= maximum

Agenda

Overview
Installation
Configuration on NetXplorer Server
Enabling NPP
Policy definition
Configuring Accounts
Customizing NPP UI
NPP user interface

Customizing NPP UI
File path under:
C:\Allot\netxplorer\jboss-4.0.5\server\allot

If customizing NPP UI, all 3

headers must be changed

Agenda

Overview
Installation
Configuration on NetXplorer Server
NPP user interface
Creating VCs
Defining hosts
Graphs

Accessing the User Interface

https://<NetXplorer IP>/npp
(if installed on same server)

NPP Home Page

Agenda

Overview
Installation
Configuration on NetXplorer Server
NPP user interface
Creating VCs
Defining hosts
Graphs

Creating Virtual Channels

Creating Virtual Channels (2)

Agenda

Overview
Installation
Configuration on NetXplorer Server
NPP user interface
Creating VCs
Defining hosts
Graphs

Adding Hosts

NPP GUI

NetXplorer GUI

Agenda

Overview
Installation
Configuration on NetXplorer Server
NPP user interface
Creating VCs
Defining hosts
Graphs

Pipe Graphs
1

Requires external
host collection to be
enabled on NE/SG

Select Type

Select Time

Requires reporter to
be enabled on NE/SG

Virtual Channels Graphs

1

Select Type

Select Time

Graphs Display

Can select a different graph for this VC

Review Question
Which of the following tasks can be performed by a NPP
User with Read/Write Privileges?

A) Define Maximum QoS Catalog

B) Create a New Pipe

C) Run Monitoring graph on users pipe

D) Add New VC on users pipe

Review Question
Which of the following tasks can be performed by a NPP
User with Read-Only Privileges?

A) Define Maximum QoS Catalog

B) Create a New Pipe

C) Run Monitoring graph on users pipe

D) Add New VC on users pipe