Installation Guide › Server Installation › High-Availability: Layer 7 Gateway Server › Deploy the Second Gateway

Deploy the Second Gateway

These steps describe how to deploy the second gateway server.

Important! Delete any previous installations or data before deploying the gateway. Residual test installations or MySQL data can cause installation problems.

Follow these steps:

1. Log in to the system as the root user.
2. Perform base system configuration:
   1. Configure the network card for IPv4 with the following values:
      • Machine name
      • IP Address
      • Default gateway
      • DNS nameserver
   2. Disable IPv6:

      NETWORKING_IPV6=no in /etc/sysconfig/network
      

   3. Configure the timezone:

      /etc/sysconfig/clock
      

   4. Install the NTP server, if you have not already done so:

      yum install ntp
      

   5. Enable NTP autostart:

      /sbin/chkconfig ntpd on
      

   6. Start the NTP Service:

      service ntpd start
      

3. Reboot the machine:

   sync;sync;reboot
   

4. Log in to the system as the root user.
5. Download the following files to ~/download:

   From CA Support:

   • add_slave_user.sh
   • create_slave.sh
   • harden.sh
   • my.cnf
   • ssg
   • ssg-7.1.1-3_noDB.noarch.rpm

   From Oracle:

   • jdk-7u21-linux-x64.tar.gz
   • UnlimitedJCEPolicyJDK7.zip

   From MySQL:

   • mysql-connector-java-5.1.20.tar.gz
   • mySQL-client-5.5.30-1.rhel5.x86_64.rpm
   • mySQL-server-5.5.30-1.rhel5.x86_64.rpm
6. Install the MySQL packages with the following commands:

   cd ~/download
   rpm -ivh MySQL-client-5.5.30-1.rhel5.x86_64.rpm
   rpm -ivh MySQL-server-5.5.30-1.rhel5.x86_64.rpm
   cp -p my.cnf /etc
   service mysql start
   

   Note: If the first RPM attempt fails, the base RedHat system may already have another version of MySQL installed. Use rpm -e to remove any conflicts.

7. /usr/bin/mysql_secure_installation and set the following values:
   • Enter current password for root (enter for none): Press <enter> for none
   • Set root password?: Y
   • New password: 7layer
   • Re-enter new password: 7layer
   • Remove anonymous users?: Y
   • Disallow root login remotely?: Y
   • Remove test database and access to it? : Y
   • Reload privilege tables now?:Y
8. Install the JDK under /opt/SecureSpan/JDK with the following commands:

   Note: System scripts reference the JDK files in this location. Install the JDK in this specific subdirectory only.

   cd ~/download
   mkdir tmp
   cd tmp
   tar xvzf ../jdk-7u21-linux-x64.tar.gz
   mkdir /opt/SecureSpan/
   mv jdk1.7.0_21 /opt/SecureSpan/JDK
   unzip ../UnlimitedJCEPolicyJDK7.zip
   cp -p UnlimitedJCEPolicy/*jar /opt/SecureSpan/JDK/jre/lib/security/
   

   Set the following values for the preceding command:

   	cp: overwrite `/opt/SecureSpan/JDK/jre/lib/security/local_policy.jar'?: Y
   

   	cp: overwrite `/opt/SecureSpan/JDK/jre/lib/security/US_export_policy.jar'?: Y
   

9. Install the ssgnodb rpm and the required dependencies with the following commands:

   cd ~/download
   rpm -ivh ssg-7.1.1-3_noDB.noarch.rpm
   mkdir tmp
   cd tmp
   tar xvzf ../mysql-connector-java-5.1.20.tar.gz
   cp -p mysql-connector-java-5.1.20/mysql-connector-java-5.1.20-bin.jar /opt/SecureSpan/Gateway/runtime/lib/mysql-connector-java-5.1.20.jar
   chown layer7:layer7 /opt/SecureSpan/Gateway/runtime/lib/mysql-connector-java-5.1.20.jar
   chmod 444 /opt/SecureSpan/Gateway/runtime/lib/mysql-connector-java-5.1.20.jar
   

10. Add ssg service with the following commands:

    cd ~/download
    chmod +x ssg
    cp -p ssg /etc/init.d/ssg
    /sbin/chkconfig --add ssg