Manage CPE configuration files

Manage CPE configuration files
		GO

Purpose

This topic describes how to manage CPE configuration files.

Important! The CPE configuration files themselves are not created, defined, and managed from the Lucent CM system. They are created and defined externally and transferred to the Lucent CM system using secure FTP.

The information in this topic provides general information. Details depend on the external system that is used to manage the CPE configuration files and can differ.

Managing CPE configuration files

CPE configuration files in the /var/cpeconfig/bootfiles directory are managed by a CPE configuration files administrator. The CPE configuration files administrator can be a different administrator from the Lucent CM system administrator.

When the service is on two Lucent CM nodes, the CPE configuration files administrator must ensure that the files are the same on both nodes.

The administrator establishes a secure FTP connection to the Lucent CM file server and can add or remove CPE configuration files.

Authorization

To allow secure FTP clients to update the CPE configuration files on the Lucent CM server, the users must be authorized. Authorization is performed using SSH RSA.

A public and a private RSA key must be created on the external system to authorize clients to access the Lucent CM system. The public RSA key must be transferred and imported into the Lucent CM system.

Create SSH keys

To authorize the user with the Lucent CM system, SSH keys are used. Keys are generated using the ssh_keygen tool.

The scripts required for the CPE configuration service:

Script directory	Script name
/opt/lps/current/bin/	ssh_keygen

Create SSH keys

Important! The tasks shown are examples and can differ depending on the system.

Perform the following tasks:

1	Log in to the system as the user that must be authorized to manage the CPE configuration files on the Lucent CM system.
2	Run the ssh-keygen tool.
3	Follow the instructions of the script. Typically the following information must be provided: Output directory for the keys SSH passphrase Result: The script creates the output directory and files with the public and private key: <user-ID>_rsa This key is the private RSA key. <user-ID>_rsa.pub This key is the public RSA key.
4	Transfer the public key Lucent CM administrator. The Lucent CM administrator must import the public key into the Lucent CM server that acts as file server for the CPE configuration files.

		GO
© Lucent Technologies