Contents


Installation and Upgrade Guide

Legal notice

Contents

About this document

Part I. Getting started

1. Before you begin

NSP deployment overview

What’s new?

Where do I start?

Finding your way in this guide

NSP deployment terms and concepts

Deployment scenarios

NSP HA and DR support

Pathway to deploy model-driven management

Pathway to deploy model-driven and classic management

Pathway to deploy resource control

Pathway to deploy the Simulation tool

2. NSP disk setup and partitioning

NSP disk deployment

Introduction

To deploy an NSP RHEL qcow2 disk image

To configure disk partitions using device UUIDs

To apply the VMware cloud-init workaround

To configure and mount an NSP disk partition

Disk partitioning for trial deployments

Trial partitioning requirements, NSP deployer host and cluster VMs

Trial partitioning requirements, additional NSP components

Trial partitioning requirements, NFM-P components

Disk partitioning for live deployments

Live partitioning requirements, NSP deployer host and cluster VMs

Live partitioning requirements, additional NSP components

Live partitioning requirements, NFM-P components

3. RHEL OS deployment for the NSP

NSP RHEL OS deployment

Introduction

To apply a RHEL update to an NSP image-based OS

Manual NSP RHEL OS installation

Manually installing the RHEL OS for the NSP

Pathway for manual NSP RHEL OS installation

Required RHEL OS packages for NSP container elements

Required RHEL OS packages for ancillary NSP components

RHEL OS packages to remove from NSP container elements

RHEL OS packages to remove from ancillary components

Special OS requirements

Required additional OS packages, NFM-P single-user client or client delegate server

Optional RHEL OS packages

To lock the RHEL OS version

To apply a RHEL update to a manually deployed OS

To apply the RHEL 8 swappiness workaround

To verify the rngd service startup

To enable the NSP crypto-policy function on a manually installed RHEL OS

To set the default Python version

To create the nsp user on a manually installed NSP cluster RHEL OS

To disable the RHEL firewalld service

To set the default umask to 0027

To disable RHEL user namespaces

4. Configuring NSP security

NSP system security

NSP platform user accounts

Restricting root-user system access

HTTPS Strict-Transport Security (HSTS)

NSP user authentication

Overview

NSP user activity logging

NSP Transport Layer Security (TLS)

NSP TLS overview

NSP TLS configuration requirements

NSP TLS configuration procedures

To generate custom NSP TLS certificates

To extract the NFM-P TLS certificate for use in an NSP deployment

To suppress security warnings in NSP browser sessions

Part II. NSP system deployment

5. NSP deployment basics

NSP system elements

Introduction

Containerized NSP cluster

NSP deployment infrastructure

Kubernetes deployment environment

To upgrade the NSP Kubernetes environment

Providing your own storage solution

Introduction

IP version support

Introduction

Addressing requirements

Using multiple NSP interfaces

Multi-interface configuration

Centralized logging

Introduction

NSP application log forwarding to OpenSearch

NSP application log forwarding to Elasticsearch

NSP application log forwarding to Splunk

NSP application log forwarding to syslog servers

NFM-P server log forwarding to syslog servers

NFM-P server log forwarding to OpenSearch

User activity log forwarding to syslog servers

6. NSP software configuration

NSP configuration file

Configuring database backups

Configuring developer mode

Configuring single sign-on

Configuring LLDP link discovery

Configuring SROS

Configuring inventory synchronization and selectiveSync for path control

7. NSP system installation

Supported installation scenarios

Pathway for new NSP system deployment

To provision the network bridge for NSP VMs

To install an NSP cluster

Pathway for independent NFM-P migration to a new NSP deployment

To migrate from an independent NFM-P system to an NSP cluster deployment

8. NSP system upgrade

Upgrading NSP

Pathway for standalone NSP system upgrade

Pathway for DR NSP system upgrade

To prepare for an NSP system upgrade

To upgrade an NSP cluster

9. NSP system conversion

Supported NSP system conversions

To convert a standalone NSP system to DR

To enlarge an NSP deployment

To convert an IPv4 NSP system to an IPv6-enabled NSP system

Pathway for NSP system conversion to multi-interface

To migrate to your own storage in a standalone NSP deployment

To migrate to your own storage in a DR NSP deployment

10. NSP system integration

Integrating other systems and the NSP

System integration support

NFM-P and NSP integration

To add an independent NFM-P to an existing NSP deployment

To enable NSP compatibility with an earlier NFM-P system

WS-NOC and NSP integration

Integrating WaveSuite components

To enable NSP and WS-NOC Release 24.6 or later compatibility

To integrate a Release 24.6 or later WS-NOC and the NSP

To map external user groups to predefined WaveSuite roles

To add WS-SE or WS-HA to an integrated WS-NOC and NSP deployment

To roll back WS-NOC and NSP integration

11. NSP system uninstallation

Introduction

Pathway to uninstall an NSP cluster

To uninstall the NSP software from an NSP cluster

To uninstall the NSP Kubernetes software

To uninstall the NSP Kubernetes registry

Part III. NSP component deployment

12. NSP component configuration

Configuring NSP component deployments

Common configuration elements

NSP RPM-based configuration file

NFM-P deployment configuration

NFM-P deployment requirements

NFM-P deployment restrictions

Configuring an NFM-P system deployment

To obtain the UUID of a station

Using hostnames in the management network

Deployment in a VM

Enabling FIPS security for NFM-P network management

Pathway for FIPS-enabled NFM-P discovery of a new device

Pathway for NE conversion to FIPS mode

GPG-signed RPM files

To verify the GPG keys

To verify Nokia RPM-file GPG signatures

GUI client deployment

To configure a GUI client login form to list multiple NFM-P systems

IGP topology data source configuration

Configuring the IGP topology data source

To change the IGP topology data source

13. NSP component installation

Installing NSP components

NSP component installation overview

NSP auxiliary database installation

Installing an NSP auxiliary database

NSP auxiliary database installation pathway

To prepare a station for NSP auxiliary database installation

To install the NSP auxiliary database software

To add an NSP auxiliary database to the NSP

To convert a standalone auxiliary database to geo-redundancy

WS-RC installation

To install the WS-RC

VSR-NRC installation

VSR-NRC installation overview

To commission the VSR-NRC for NSP management

NFM-P installation

Installing the NFM-P

NFM-P samconfig utility

Standalone NFM-P system installation

Standalone system installation pathway

To install a standalone NFM-P system

Redundant NFM-P system installation

Redundant system installation pathway

To install a redundant NFM-P system

Auxiliary server installation

Auxiliary server installation pathway

To install an NFM-P auxiliary server

To add auxiliary servers to an NFM-P system

NFM-P single-user GUI client installation

Installing an NFM-P single-user GUI client

To install an NFM-P single-user GUI client

NFM-P client delegate server installation

Installing an NFM-P client delegate server

To add a client delegate server to an NFM-P system

To install an NFM-P client delegate server

14. NSP component upgrade

Upgrading NSP components

Introduction

NSP analytics server migration

To migrate analytics servers to an NSP cluster

NSP Flow Collector and Flow Collector Controller migration

Migrating flow-data collection to an NSP cluster

Migrating multiple NSP Flow Collectors

To migrate NSP Flow Collectors and Flow Collector Controllers to an NSP cluster

NSP auxiliary database upgrade

To upgrade a standalone auxiliary database

To upgrade a geo-redundant auxiliary database

NFM-P system upgrade

NFM-P upgrade considerations

NFM-P system upgrade restrictions

General NFM-P upgrade pathway

NFM-P pre-upgrade procedures

To prepare for an NFM-P system upgrade

To prepare an SELinux-enabled NFM-P system for an upgrade

Standalone NFM-P system upgrade

Pathway to upgrade a standalone NFM-P system

To upgrade a standalone NFM-P system

Redundant NFM-P system upgrade

Component references

Pathway to upgrade a redundant NFM-P system

To upgrade a redundant NFM-P system

Auxiliary server upgrade

To upgrade an NFM-P auxiliary server

NFM-P single-user GUI client upgrade

Upgrading a single-user GUI client

To upgrade an NFM-P single-user GUI client

NFM-P client delegate server upgrade

Upgrading a client delegate server

To upgrade an NFM-P client delegate server

15. NSP component conversion

Converting NSP components

Introduction

NFM-P system conversion to IPv6

Converting an NFM-P system to IPv6

NFM-P conversion to IPv6 pathway

To perform the pre-conversion tasks

To convert a standalone NFM-P system to IPv6

To convert a redundant NFM-P system to IPv6

NFM-P system conversion to redundancy

Converting an NFM-P system to redundancy

System conversion to redundancy pathway

To convert a standalone NFM-P system to a redundant system

16. NSP component integration

Integrating NSP components

To integrate IP-optical coordination and path simulation

To add a WS-RC controller to IP-optical Coordination

To install the NSP templates for NSP service management on the NFM-P

17. NSP component uninstallation

Uninstalling ancillary system components

To uninstall an NSP auxiliary database

Uninstalling the NFM-P

NFM-P system uninstallation pathway

To uninstall a single-user GUI client

To uninstall a client delegate server

To uninstall an auxiliary server

To uninstall a collocated main server and database

To uninstall a distributed main server or main database

Appendix A. Removing world permissions from compiler executables

Resetting GCC-compiler file permissions

To remove world permissions from compiler executables

To restore compiler world permissions

Appendix B. NFS storage configuration

NFS Storage Configuration

To host NFS and NFS subdir external provisioner

RWX storage class example

Appendix C. Ceph storage configuration

Ceph storage configuration

Connect external storage cluster to NSP

Appendix D. Supported network topologies and ingress options

Supported options on an NSP cluster

Supported topologies