Deployment Example: Sun Java System Communications Services for Access Anywhere (EdgeMail)

3.1 Building the Management Station

The management station is built from a server, called the puppet server, that is originally connected to your corporate network.

To Build the Management Station

Steps

Obtain a copy of the management station flash archive from your Sun representative. Save it with the following path and filename:
/export/puppet/world/archive/full-flars/standard/genericmodel /sparc-sunos5.9/mgmt.flar

Assign a new IP address in your corporate network for the management station.

Add the management station's MAC address to your local /etc/ethers file.

Run the /export/puppet/bin/preconfig utility and provide the following information when prompted:

Puppet Host Configuration
=========================
Main Menu:

[A]dd a new client
[D]elete clients
[L]ist clients
[M]odify a client
=========================
[Q]uit
Which one [Q]:a

Client name []:mgmt-name-01.domain

Client mac: 0:3:cd:aa:d7:21
Machine Type ("uname -m") []: sun4u

Client processor: sparc

Select a bootable image:

1: sunos_5.10_74L2a_sparc
2: sunos_5.10_b72_sparc
3: sunos_5.10_b73_sparc
4: sunos_5.9_u5cd1combined_sparc
5: sunos_5.9_u7cd1combined_sparc
Enter the number of your selection []:5

Model selection:

    1: none
    2: itserver59 [Meta]
    3: desktop [Children]
    4: sunray [Children]
    5: itsunray [Meta]
    6: itdesktop59-nwk [Meta]
    7: itsunray30 [Meta]
    8: itdesktop59 [Meta]
    9: server [Children]
==================================================
[S]elect, [U]nselect, [L]ist selected, [D]escribe,
[R]eturn, [Q]uit [R]:1

    1: itdesktop59-nwk [Meta]
    2: server [Children]
    3: itdesktop59 [Meta]
 ON 4: none
    5: desktop [Children]
    6: itsunray [Meta]
    7: itserver59 [Meta]
    8: sunray [Children]
    9: itsunray30 [Meta]
==================================================
[S]elect, [U]nselect, [L]ist selected, [D]escribe,
[R]eturn, [Q]uit [R]:Enter

Select a flash image:

1: nfs://server/export/puppet/world/archive/full-flars/standard/genericmodel
/sparc-sunos5.9/mgmt.flar
4: Do not use flash.
Enter the number of your selection []:1

Profile selection:

1: DEFAULT
2: LASTPROFILE
3: all+locales_04GB+_rootdisk
4: all_04GB+_rootdisk
[S]elect, [C]ustom, [V]iew, [Q]uit:  [S]: c

Please select a starting profile:

1: DEFAULT
2: LASTPROFILE
3: all+locales_04GB+_rootdisk
4: all_04GB+_rootdisk
[S]elect, [R]eturn, [V]iew, [Q]uit:  [S]1

Change filesystem layout only to
filesys      rootdisk.s1   8192    swap
filesys      rootdisk.s0   10240    /     logging
filesys      rootdisk.s3   1024   /home    logging
filesys      rootdisk.s4   free   /var    logging
filesys      rootdisk.s5   16384   /opt    logging
filesys      c1t2d0s6   free   /export    logging
filesys      rootdisk.s7   512
filesys      c1t1d0s7   512
filesys      c1t2d0s7   512
filesys      c1t3d0s7   512

Summary for mgmt-sfbay-01:

MAC Address : 0:3:cd:aa:d7:21
Machine Type: sun4u
Boot Image  : sunos_5.9_u7cd1combined_sparc
Flash Image : nfs://server/export/puppet/world/archive/full-flars/standard/
genericmodel/sparc-sunos5.9/mgmt.flar
Platform    : sparc-sunos5.9
Profile       : custom
Model Config: none
Correct ([Y]/N):y

Configuring mgmt-name-01....
Performing add_install_client...
cleaning up preexisting install client "mgmt-name-01"
removing mgmt-name-01 from bootparams
updating /etc/bootparams
Using /export/puppet/world/archive/os_images/sunos_5.9_u7cd1combined_sparc
/Solaris_9/Misc/jumpstart_sample/check

quickcheck: Only the rule for mgmt-name-01 will be verified.
  It is assumed that the rest of the rules in /export/puppet/world/rules
  are correct.

Validating /tmp/checkrules.7470...
Validating profile hostconfig/mgmt-name-01/jumpstartprofile...
/tmp/checkrules.7470.ok file not created
The custom JumpStart configuration is ok.

Puppet Host Configuration
=========================
Main Menu:

[A]dd a new client
[D]elete clients
[L]ist clients
[M]odify a client
=========================
[Q]uit
Which one [Q]:q

Run the following commands:

prtvtoc -h /dev/rdsk/c1t0d0s2 | fmthard -s - /dev/rdsk/c1t1d0s2
prtvtoc -h /dev/rdsk/c1t2d0s2 | fmthard -s - /dev/rdsk/c1t3d0s2

metadb -afc 3 /dev/dsk/c1t0d0s7 /dev/dsk/c1t1d0s7 /dev/dsk/c1t2d0s7 /dev/dsk/c1t3d0s7

metainit -f d100 1 1 c1t0d0s0
metainit -f d101 1 1 c1t0d0s1
metainit -f d103 1 1 c1t0d0s3
metainit -f d104 1 1 c1t0d0s4
metainit -f d105 1 1 c1t0d0s5
metainit -f d106 1 1 c1t2d0s6

metainit -f d0 -m d100
metainit -f d1 -m d101
metainit -f d3 -m d103
metainit -f d4 -m d104
metainit -f d5 -m d105
metainit -f d6 -m d106

metaroot d0

Edit the /etc/vfstab file and make the following modifications:
- Change swap to /dev/md/dsk/d1
- Change /home to /dev/md/dsk/d3 /dev/md/rdsk/d3
- Change /var to /dev/md/dsk/d4 /dev/md/rdsk/d4
- Change /opt to /dev/md/dsk/d5 /dev/md/rdsk/d5
- Change /export to /dev/md/dsk/d6 /dev/md/rdsk/d6

Run the following commands:

metainit -f d200 1 1 c1t1d0s0
metainit -f d201 1 1 c1t1d0s1
metainit -f d203 1 1 c1t1d0s3
metainit -f d204 1 1 c1t1d0s4
metainit -f d205 1 1 c1t1d0s5
metainit -f d206 1 1 c1t3d0s6

Reboot the management station.

Run the following commands:

metattach d0 d200
metattach d1 d201
metattach d3 d203
metattach d4 d204
metattach d5 d205
metattach d6 d206

sys-unconfig

Move the management station to the server network, then connect it to the back-end (BE) and front-end (FE) networks.

Boot the management station and set up the default route and both BE and FE interfaces.

Configure the management station as an NTP server for other Edge hosts that aren't able to refer to NTP servers on the corporate network nor on the Internet. The following is a template for /etc/inet/ntp.conf:

# NTP stratum 4 config
#
# stratum 3 (domainclock) servers nearby
#
server t3-name1.local-domain prefer
server t3-name2.domain2
server t3-name3.domain3
server t3-name4.domain4
#
# stratum 4 (timetone) local peers
#
peer t4-name1.local-domain
peer t4-name2.local-domain
peer t4-name3.local-domain
peer t4-name4.local-domain
#
# Set up for site-wide multicast with one network hop. Increase ttl
# value carefully since you can swamp other sites with multicast traffic.
#
broadcast 224.0.1.1 ttl 1
#
# This line sets up the server so that the server can not be modified
# remotely. In addition remote logging traps are disabled.
#
restrict default nomodify notrap
#
# This re-enables all functions locally so that you can change stuff
# locally on the fly.
#
restrict 127.0.0.1
#
enable monitor
driftfile /var/ntp/ntp.drift
statsdir /var/ntp/ntpstats/
filegen peerstats file peerstats type day enable
filegen loopstats file loopstats type day enable
#
# Clockstats is only needed if a reference clock is attached to the server.
#filegen clockstats file clockstats type day enable.

Once /etc/inet/ntp.conf is modified, restart xntpd with the following commands to enable the new configuration:
# /etc/init.d/xntpd stop; /etc/init.d/xntpd start

Check /var/adm/messages with the following command to see if the process has started without problems:
# grep ntp /var/adm/messages