Tuesday, March 8, 2011

Install Net-SNMP

INSTALL

TABLE OF CONTENTS
=================

  Table Of Contents
  Quick Instructions
* Net-SNMP Specific Information
  Long (but you should read these) Instructions
  Installing the Perl/SNMP Module
* Compilers and Options
  Compiling For Multiple Architectures
  Installation Names
  Optional Features
  Sharing Defaults
  Operation Controls

  * = required reading

QUICK INSTRUCTIONS
==================

  1) Run ./configure
     (type "./configure --help" for a quick usage summary.)
     (--prefix=PATH will change the default /usr/local installation path.)
     (see "Compilers and Options" on changing the compiler to use)

  2) Optionally edit include/net-snmp/net-snmp-config.h
     (due to prompting done by the configure script, this is very rarely
      necessary.)

  3) make

  4) Run the next command as root:
  5) make install

  6) configure the agent
     (either using 'snmpconf' or by crafting an snmpd.conf file manually.
      The file 'EXAMPLE.conf' may be a suitable starting point)

Note: By default, everything will be installed in /usr/local.
      (see below for more instructions)

Net-SNMP Specific Information
=============================

As of UCD-SNMP V3.3.1 the configuration files are now looked for in
$(prefix)/share/snmp, where ($prefix) is defined as the value passed
to the --prefix argument of the configure script, or /usr/local if
undefined.  In version 3.0.3 till 3.3, the files were kept in
$(prefix)/lib/snmp

Optional features to pass to configure for Net-SNMP can be obtained by
running configure --help.

LONG (but you should read these) INSTRUCTIONS
=============================================

   The `configure' shell script attempts to guess correct values for
various system-dependent variables used during compilation.  It uses
those values to create a `Makefile' in each directory of the package.
It may also create one or more `.h' files containing system-dependent
definitions.  Finally, it creates a shell script `config.status' that
you can run in the future to recreate the current configuration, a file
`config.cache' that saves the results of its tests to speed up
reconfiguring, a file `config.log' containing compiler output
(useful mainly for debugging `configure') and a file `configure-summary'
containing the summary displayed at the end of the `configure' run.

   The file `include/net-snmp/net-snmp-config.h' is also generated
at this time.  It contains IMPORTANT information such as the location
of log and configuration files.  In some special cases you may need to
modify this file but it is prefererable to work out a way of getting
`configure' to set things up for your particular environment.

As the `configure' invocation often gets lengthy and difficult to
type or if you have several different ways you want to configure a
system, you may want to create a shell script containing your invocation.

   If you need to do unusual things to compile the package, please try
to figure out how `configure' could check whether to do them, and mail
diffs or instructions to the address given in the `README' so they can
be considered for the next release.  If at some point `config.cache'
contains results you don't want to keep, you may remove or edit it.

   The file `configure.in' is used to create `configure' by a program
called `autoconf'.  You only need `configure.in' if you want to change
it or regenerate `configure' using a newer version of `autoconf'.

The simplest way to compile this package is:

  1. `cd' to the directory containing the package's source code and type
     `./configure' to configure the package for your system.  If you're
     using `csh' on an old version of System V, you might need to type
     `sh ./configure' instead to prevent `csh' from trying to execute
     `configure' itself.

     Running `configure' takes awhile.  While running, it prints some
     messages telling which features it is checking for.  When it
     completes it prints a short message (also available in configure-summary)
     indicating what functionality will be available when compiled.

  2. If necessary, edit include/net-snmp/net-snmp-config.h (see above).  

  3. Type `make' to compile the package.

  4. Type `make test' which runs a variety of tests to see what functionality
     has been incorporated and if it works.

  5. Type `make install' to install the programs and any data files and
     documentation.

  6. You can remove the program binaries and object files from the
     source code directory by typing `make clean'.  To also remove the
     files that `configure' created (so you can compile the package for
     a different kind of computer), type `make distclean'.

  7. You can remove the application by typing `make uninstall'.

There may be additional installation issues discussed in the 
README's for various platforms such as README.solaris.


Installing the Perl/SNMP Module
===============================

   The Perl/SNMP Module is now bundled with the net-snmp package
(which includes other Net-SNMP specific modules as well), all of which
are located in the net-snmp/perl directory. The Perl package provides
a high level abstract interface to the functionality found in the
Net-SNMP libraries and demon applications.

   It is recommended you install the perl modules as you build the
   Net-SNMP package.  The configure script can be run as follows to
   automatically find perl and use it to install the perl modules:

      ./configure --with-perl-modules

   If you wish to use the embedded perl support available in the
   Net-SNMP agent (and starting in Net-SNMP 5.2, the trap receiver),
   then use the following option instead:

      ./configure --enable-embedded-perl --enable-shared

   Starting with Net-SNMP 5.4, configure enables embedded Perl and the 
   Perl modules by default when possible unless explicitly disabled.

   If you wish to build the perl modules by hand, *install Net-SNMP
   first* and then change directories to the perl subdirectory and:

   Run:
            cd perl
            perl Makefile.PL
            make
            make test
            make install (as root)




RPMForge Repo Add CentOS 5.5

The default RPMforge repository does not replace any CentOS base packages. In the past it used to, but those packages are now in a separate repository (rpmforge-extras) which is disabled by default.
You can find a complete listing of the RPMforge package packages at http://packages.sw.be/
Download the rpmforge-release package. Choose one of the two links below, selecting to match your host's architecture. If you are unsure of which one to use you can check your architecture with the command uname -i
The preferred rpmforge-release package to retrieve and to install in order to enable that repository is one of the two listed above.
Install DAG's GPG key

      rpm --import http://apt.sw.be/RPM-GPG-KEY.dag.txt


Verify the package you have downloaded

      rpm -K rpmforge-release-0.5.2-2.el5.rf.*.rpm


<!> Security warning: The rpmforge-release package imports GPG keys into your RPM database. As long as you have verified the md5sum of the key injection package, and trust Dag, et al., then it should be as safe as your trust of them extends.
Install the package

     rpm -i rpmforge-release-0.5.2-2.el5.rf.*.rpm


This will add a yum repository config file and import the appropriate GPG keys.
Then try to install something like this

      yum install htop

Monday, March 7, 2011

Adding Servers to an Alteon 2424 with SSL Offloading

Filters for Redirection.

/c/slb/filt 69
        ena
        action redir
        ipver v4
        sip any
        smask 0.0.0.0
        dip xxx.xxx.xxx.xxx
        dmask 255.255.255.255
        proto tcp
        dport https
        group 5
        rport 0
        vlan any
/c/slb/filt 20/adv/redir
        fwlb ena


BackUp Servers


/c/slb/real xx
        ena
        ipver v4
        rip xxx.xxx.xxx.xxx
        name "ServBackup"


Creating VIP's


/c/slb/real 73
        ena
        ipver v4
        rip xxx.xxx.xxx.xxx
        retry 3


/c/slb/real 72
        ena
        ipver v4
        rip xxx.xxx.xxx.xxx
        retry 3


/c/slb/group 72
        ipver v4
        metric roundrobin
        health http
        content "/"
backup r69
        add 73
add 72
      
/c/slb/virt 72
        ena
        ipver v4
        vip xxx.xxx.xxx.xxx
/c/slb/virt 72/service https
        group 72
        dbind ena
/c/slb/virt 72/service http
        group 72
        dbind ena




Log into the SSL Offloading Processor



/cfg/ssl/server 31/.
        vips xxx.xxx.xxx.xxx
        standalone off
        port "443 (https)"
        rip 0.0.0.0
        rport "80 (http)"
        type http
        proxy on
        loopback on
        ena enabled
/cfg/ssl/server 31/trace/.
/cfg/ssl/server 31/ssl/.
        cert 1
        cachesize 4000
        cachettl 5m
      
        protocol ssl3
        verify none
        verifylog none
        ciphers RSA:!LOW:!EXPORT:!NULL:!SSLv2@STRENGTH
        ena enabled
/cfg/ssl/server 31/tcp/.
        cwrite 15m
        ckeep 15m
        swrite 15m
        sconnect 30s
        csendbuf auto
        crecbuf auto
        ssendbuf auto
        srecbuf 6000
/cfg/ssl/server 31/http/.
        redirect on
        downstatus unavailable
        securecookie off
        certcard off
        cookieonce off
        sslheader on
        sslxheader off
        sslsidheader off
        addxfor off
        addvia on
        addxisd off
        addfront on
        addbeassl off
        addbeacli off
        addclicert off
        addnostore off
        compress off
        cmsie on
        rhost off
        maxrcount 40
        maxline 8192
        urlobscure off
        sessioninfoheader off
/cfg/ssl/server 31/http/dynheader/.
/cfg/ssl/server 31/http/rewrite/.
        rewrite off
        ciphers HIGH:MEDIUM
        response iSD
        URI "/cgi-bin/weakcipher"
/cfg/ssl/server 31/http/auth/.
        mode basic
        realm
        proxy off
        ena disabled
/cfg/ssl/server 31/dns/.
/cfg/ssl/server 31/adv/.
/cfg/ssl/server 31/adv/pool/.
        timeout 15s
        ena disabled
/cfg/ssl/server 31/adv/traflog/.
        sysloghost 0.0.0.0
        udpport 514
        priority info
        facility local4
        ena disabled
/cfg/ssl/server 31/adv/loadbalancing/.
        type all
        persistence none
        metric hash
        health auto
        interval 10s
        ena disabled
/cfg/ssl/server 31/adv/loadbalancing/script/.
/cfg/ssl/server 31/adv/loadbalancing/remotessl/.
        protocol ssl3
        ciphers ALL
/cfg/ssl/server 31/adv/loadbalancing/remotessl/verify/.
        verify none
/cfg/ssl/server 31/adv/sslconnect/.
        protocol ssl3
        ciphers EXP-RC4-MD5:ALL!DH
        ena disabled
/cfg/ssl/server 31/adv/sslconnect/verify/.
        verify none

Sunday, March 6, 2011

Yum Install Perl Modules

An example of Perl Module Date::Format
yum provides "perl(Date::Format)"   returned:

perl-TimeDate.noarch : A Perl module for time and date manipulation

Then 'yum list perl-TimeDate.noarch'  returned:

Available Packages
perl-TimeDate.noarch                     1:1.16-5.el5           base
yum install perl-TimeDate.noarch 
Another example 
yum provides "perl(Config::IniFiles)" 

 returned:

perl-Config-IniFiles-2.39-1.2.el5.rf.noarch : Module for reading .ini-style configuration files
Repo        : rpmforge
Matched from:
Other       : perl(Config::IniFiles)



perl-Config-IniFiles-2.47-1.el5.rf.noarch : Module for reading .ini-style configuration files
Repo        : rpmforge
Matched from:
Other       : perl(Config::IniFiles)



perl-Config-IniFiles-2.47-2.el5.rf.noarch : Module for reading .ini-style configuration files
Repo        : rpmforge
Matched from:
Other       : perl(Config::IniFiles)



perl-Config-IniFiles-2.52-1.el5.rf.noarch : Module for reading .ini-style configuration files
Repo        : rpmforge
Matched from:
Other       : perl(Config::IniFiles)



perl-Config-IniFiles-2.56-1.el5.rf.noarch : Module for reading .ini-style configuration files
Repo        : rpmforge
Matched from:
Other       : perl(Config::IniFiles)



perl-Config-IniFiles-2.56-1.el5.rf.noarch : Module for reading .ini-style configuration files
Repo        : installed
Matched from:
Other       : Provides-match: perl(Config::IniFiles)



Yum install perl-Config-IniFiles-2.56-1.el5.rf.noarc
As easy as that!