SeaNet Operations: Application Notes: What to Do to Make a SCN a NIC

What to Do to Make a SCN a NIC

1. Follow instructions to create as SCN with latest distribution

2. Set SCN_NETWORK_CTR in SCN configuration file to 1

3. Create SCN_INSTALLATIONS directory and copy archives over

4. Configure router as follows:

Assign 172.16.1.2 as IP address on eth0/0 on router
tftp router configuration from 172.16.1.1
change ISDN switch type and SPIDs appropiately on cisco router
"config logging facility local1" (use local1 if available in NIC/etc/syslog.conf)
add username and password to router config for each "-rou" serviced
add ip route to router config for each network serviced onboard the ship (172.16.x.x plus shipboard address
copy the config back so that we have a record
setup ntp time servers to servers closer to your location
config ntp peer <ipaddress>
config ntp peer <ipaddress>

5. connect analog modem to /dev/ttyS0

6. Add mgetty entry to /etc/inittab for /dev/ttyS0

7. Configure /etc/gated.conf so that `it has the correct ip addresses and make sure that gated is run at boot time (chkconfig --level 345 gated on).

7.5. Configure /etc/syslog.conf to push local1 syslog messages to /var/log/cisco.log

8. Confirm that rc.local runs interactively (there was a problem with a syntax error in older versions of rc.local installed as part of SCN

9. Make sure that forwarding is turned on in /etc/sysconfig/network

10. Update /etc/httpd/access.conf so that people who need to monitor this NIC can get to it

11. For each SCN to be supported by this NIC, do the following:

Add ipfwadm command to /etc/init.d/rc.d/rc.local for any add'l shipboard network addresses
Add OutBox to /home/seadata/SCN_queues
add IP address of NIC to /etc/hosts.allow on any system with regular or special datapipes as sources or destinations
add entry to .ssh/authorized-keys for machines associated with 'post' commands for various ships

12. setup tcpdump to run at boot time (perhaps out of rc.local) so to log all packets to and from ship (and to rotate those logs)

13. Setup syslog logging on SCN

if runnning new version of syslogd modify/etc/rc.d/init.d/syslogd to use "-r" so it logs from network (**Perhaps we want to do this on all SCN's? ***)

14. Setup ntp daemon on SCN

modify /etc/ntpd.conf so that local servers are used instead of those at a previous location.

15. name server setup on NIC

use linux conf to setup a caching only nameserver running on the NIC that can be queried by shipboard SCNs.

16. change default gateway to localnet

17. install and configure amanda for backups

Outstanding problems/issues/todos: