Network Requirements

In this article, you will find a complete list of network requirements which you might find quite helpful in order to facilitate a trouble-free installation.

OUTBOUND ACCESS TO UNET (UMBRELLA NETWORK)

UNET provides user authentication, the ability to synchronize content from the repository, and collects usage information for billing.

Outbound access to UNET services is an absolute must, as the devices will cease to operate if connectivity isn’t established for more than 48 hours. The installed devices are required to connect via port 80 and 443.

Commands to check outbound access to the UNET server are as follows:

$ telnet 52.72.25.136 80
$ telnet 52.72.25.136 443

Press 'Ctrl + ]' and then type 'quit' to close the telnet terminal.

OUTBOUND ACCESS TO PUBLIC DNS

The installed devices require access to public DNS services. If you have a DNS Server configured already, then configure its services accordingly. Otherwise, you can find the configuration details for your reference below:

You can use the dig command and host command to verify that your configured local or public DNS working:

host : host command is a utility that performs DNS lookups.

$ host <Domain Name> <Public-DNS-Server-IP>
or
$ host <Domain Name> <Local-DNS-Server-IP>

dig : dig is a tool that is used for querying DNS nameservers for information about host addresses, mail exchanges, nameservers, and related information.

$ dig @<Public-DNS-Server-IP> <Domain Name>
or
$ dig @<local-DNS-Server-IP> <Domain Name>

NTP SERVER

If you have an NTP Server configured already on your network, then configure its services accordingly. Otherwise, you can find the configuration details for your reference below:

Check the connectivity to the NTP server from the DNIF server using following command:

$ ntpq -np $IP

AD to DS and CR to DS COMMUNICATION

Allow ports in the range 8350/TCP to 8370/TCP(bidirectional) on the Datastore server to be accessed from other DNIF components (applicable only if there’s a firewall between any DNIF component and Datastore).

To check the communication between AD and DS, use the following command on the Adapter:

$ telnet <DS Server IP> 8350
$ telnet <DS Server IP> 8351
$ telnet <DS Server IP> 8352
$ telnet <DS Server IP> 8355
$ telnet <DS Server IP> 8370

Press Ctrl + ] and then type quit to close the telnet terminal.

To check the communication between CR and DS, use the following command on the Correlator:

$ telnet <DS Server IP> 8340
$ telnet <DS Server IP> 8350
$ telnet <DS Server IP> 8351
$ telnet <DS Server IP> 8355
$ telnet <DS Server IP> 8361
$ telnet <DS Server IP> 8362

Press Ctrl + ] and then type 'quit' to close the telnet terminal.

DATASTORE CLUSTER COMMUNICATION

Allow ports 8240 and 8340 on all Datastore nodes which are configured in the cluster. All cluster nodes should be able to locally communicate with each other and other DNIF components.

Allow ports 514/UDP, 514/TCP, 9234/TCP (HTTP), 9236/TCP (HTTPS), 2325/TCP, 161/UDP on Adapter servers from Syslog sources since Syslog sources will send logs on port 514 of the Adapter server.

DNIF console (from your system’s client browser) accesses data via SSL port 443 of the Datastore server. Hence, your system will have to give access to port 443 on the Datastore server.

SMTP SERVER

You will need a local SMTP server to send out reports, alerts, and updates.
If you’re performing the DNIF Enterprise installation which entails individual component installation, SMTP configuration communication between the components must happen independently.

To check SMTP server connectivity use the following command:

$ telnet <SMTP-Server-IP> <SMTP-Port>

Press Ctrl + ] and then type 'quit' to close the telnet terminal.

DOCKER PREREQUISITES

One needs to make sure that DNIF servers have access to the following mentioned links before diving into the docker installation:

https://www.docker.com/community-edition
*.docker.io
*.docker.com

To check if the above links are accessible from the DNIF server, we can use the following commands:

$ wget https://www.docker.com/community-edition
$ wget https://hub.docker.com/