Installing Software Version Policy Server

You can install Genian NAC, which can operate on Ubuntu-based (20.04 LTS) operating systems among Linux distributions.


Hardware Preparation

You can install the Policy Server on a physical system or a virtual system.

System Allocated Resources (Minimum Requirements)
Minimum Hardware Requirements
  • CPU : 2 cores or more
  • Memory : 8192MB or more
  • Disk : 500GB or more recommended
Virtual Machine
You can install the Policy Server on a virtual system. Genian NAC supports various hypervisors such as VMWare, VirtualBox, and XenServer.

Prerequisites

1. Prepare ISO File

2. If installing on H/W, please create a bootable USB.


1. Installing Ubuntu Server

You can proceed with Ubuntu server installation using the ISO file provided for Genian Appliance, H/W equipment, and virtual machines.

Step 1: Boot the Device

  • Installing on Genian Appliance
    • Genian Appliance comes with Ubuntu Server and NAC S/W pre-installed by default.
    • Please proceed to 2. Configure Genian NAC Policy Server to configure the NAC Policy Server.
  • Installing on H/W or Virtual Machine
    • Upload the downloaded ISO file to the virtual machine.

Step 2: Initial Ubuntu Installation

  1. Select Ubuntu installation language: English.

  2. Select Install Ubuntu Server.

  3. Select keyboard layout: English (US).

  4. Configure the network.

    • Select the interface, choose Edit IPv4, and select Manual in the displayed window.
    • Subnet: Enter in the format 1.1.1.0/24.
    • Address: Enter in the format 1.1.1.1.
    • Gateway: Enter in the format 1.1.1.254.
    • Name server: Enter in the format 1.1.1.2.
  5. Leave the proxy server address blank and proceed.

  6. Set the mirror server for package downloads to default.

  7. Skip the installer update check by selecting Continue without updating from the installer.

  8. Use default disk partitioning or configure if necessary, then proceed.

    • If it's a second installation, a warning about data deletion will be displayed. Ignore it.
  9. Set up user information.

    • Your name: User name
    • Your server's name: Server hostname
    • Pick a username: Account name to use for login
    • Choose a password: Enter password
    • Confirm your password: Confirm password
  10. On the SSH setup screen, select Install OpenSSH server and proceed.

  11. Skip Featured Server Snaps. (Installation will now proceed.)

  12. If the Cancel update and reboot button is displayed, click it and remove the connected CD-ROM or USB. (May take about 20 minutes if it takes long.)

  13. When the login screen appears, log in.

  14. Enter the command below to install GRUB and NAC. (Automatically reboots after successful execution.)

    $sudo su
    [sudo] password for user:
    root@hostname:/home/user# /etc/init.d/nac.en
    // Automatic reboot after GRUB installation //
    
  15. Connect to SSH.

    • The SSH port number is 3910. If connection to port 3910 fails, the command above has not been executed successfully.
  16. Execute the NAC manual installation script by performing the command below.

    $ wget https://download.genians.com/HW/GENI_UBUNTU_STANDALONE/manual_install/manual_install.tar.gz
    $ tar -xvf manual-install.tar.gz
    $ cd manual-install/
    $ sudo ./manual-install.sh CT64 [Device Name or UNKNOWN-CT64]
    
  17. After step 16 is completed and the device reboots, the installation will be complete as shown in the screen below.

    ../_images/ubuntu-initiasetup.png

2. Configuring Genian NAC Policy Server

Instructions are based on the single configuration setup method.

Step 1: Ubuntu and Gnlogin Access

After installation is complete, Ubuntu and Gnlogin access are required for initial device configuration.

genians login:
Password :
user@genians:# sudo su
# Acquire root privileges.
root@genians:# gnlogin
# Enter Genian Shell

Note

You must acquire root privileges to apply interface settings correctly.

Step 2: Interface Configuration

Configure the device's basic interface.

  1. Enter global configuration mode using the enable command.
  2. Enter configuration mode using the configure terminal command.
  3. Set the interface's IP and subnet mask.
  4. Set the interface's default gateway.
  5. Set the device's default gateway.
  6. Set the device's DNS server.
  7. Set the device's NTP server.
genian> enable
Password : (Contact technical support for enable password)
genian# configure terminal
genian(config)# interface [Interface Name] address [IP] [Subnetmask]
genian(config)# interface [Interface Name] gateway [IP]
genian(config)# ip default-gateway [IP]
genian(config)# ip name-server [IP]
genian(config)#ntp server [IP]
// If interface settings were done during Ubuntu installation, some IP-related settings are already entered.

Step 3: Database Server Configuration

Proceed with Database server configuration.

  1. Set the DB account.
  2. Start the DB server.
  3. Set the DB server access account password.
  4. Set DB access permissions.
genian(config)# data-server username [DB Account]
Genian(config)# data-server enable
Genian(config)# data-server password [DB Password]

Step 4: Log Server Configuration

Start the Log server.

genian(config)# log-server version 6
genian(config)# log-server enable
genian(config)# log-server publish-port [Interface Name]

Step 5: WebUI, SoapServer Configuration

  1. Start the WebUI.
  2. Start the Soap server.
genian(config)# interface [Interface Name] management-server enable
genian(config)# interface [Interface Name] node-server enable

Step 6: Create Administrator Account

Create an administrator account for Genian NAC WebUI. This can only be set up once.

  1. Create a WebUI account.
genian(config)# superadmin [Administrator Account] [Administrator Password] [Administrator Email]

Note

The administrator account PASSWORD must be at least 9 characters long, including alphabets, numbers, and special characters.

Step 7: WebUI Access

Once all the above steps are completed, please log in to Genian NAC WebUI to confirm that the installation was successful.

Note

For WebUI related information, please refer to Administrator Console.