NetXplorer

Centralized NetEnforcer Management Software

Installation Guide
P/N D357101 R2

Important Notice

Important Notice
Allot Communications Ltd. ("Allot") is not a party to the purchase agreement under which NetEnforcer was purchased, and will not be liable for any damages of any kind whatsoever caused to the end users using this manual, regardless of the form of action, whether in contract, tort (including negligence), strict liability or otherwise. SPECIFICATIONS AND INFORMATION CONTAINED IN THIS MANUAL ARE FURNISHED FOR INFORMATIONAL USE ONLY, AND ARE SUBJECT TO CHANGE AT ANY TIME WITHOUT NOTICE, AND SHOULD NOT BE CONSTRUED AS A COMMITMENT BY ALLOT OR ANY OF ITS SUBSIDIARIES. ALLOT ASSUMES NO RESPONSIBILITY OR LIABILITY FOR ANY ERRORS OR INACCURACIES THAT MAY APPEAR IN THIS MANUAL, INCLUDING THE PRODUCTS AND SOFTWARE DESCRIBED IN IT. Please read the End User License Agreement and Warranty Certificate provided with this product before using the product. Please note that using the products indicates that you accept the terms of the End User License Agreement and Warranty Certificate. WITHOUT DEROGATING IN ANY WAY FROM THE AFORESAID, ALLOT WILL NOT BE LIABLE FOR ANY SPECIAL, EXEMPLARY, INDIRECT, INCIDENTAL OR CONSEQUENTIAL DAMAGES OF ANY KIND, REGARDLESS OF THE FORM OF ACTION WHETHER IN CONTRACT, TORT (INCLUDING NEGLIGENCE), STRICT LIABILITY OR OTHERWISE, INCLUDING, BUT NOT LIMITED TO, LOSS OF REVENUE OR ANTICIPATED PROFITS, OR LOST BUSINESS, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

Copyright
Copyright 1997-2007 Allot Communications. All rights reserved. No part of this document may be reproduced, photocopied, stored on a retrieval system, transmitted, or translated into any other language without a written permission and specific authorization from Allot Communications Ltd.

Trademarks
Products and corporate names appearing in this manual may or may not be registered trademarks or copyrights of their respective companies, and are used only for identification or explanation and to the owners' benefit, without intent to infringe. NetEnforcer and the Allot Communications logo are registered trademarks of Allot Communications Ltd.

ii

NetXplorer Installation Guide

Table of Contents
Important Notice ........................................................................................................................... ii Table of Contents ....................................................................................................................... 1-1

CHAPTER 1: INTRODUCTION ................................................................................. 1-1 What is NetXplorer? .................................................................................................................. 1-2 Installation Prerequisites ........................................................................................................... 1-3 Server Hardware Requirements ................................................................................................ 1-3 Software Requirements............................................................................................................. 1-4 Firewall Settings ....................................................................................................................... 1-4 CHAPTER 2: INSTALLING NETXPLORER ........................................................... 2-1
Pre-Installation Checklist .......................................................................................................... 2-2 Installing Java 1.5 SDK ............................................................................................................. 2-3 Installing NetXplorer ................................................................................................................. 2-5 Upgrading NetXplorer ............................................................................................................. 2-12 WebStart and the NetXplorer User Interface ....................................................................... 2-14 User Interface Hardware Requirements.................................................................................. 2-14 Installing Java 1.5 JRE ........................................................................................................... 2-14 Initializing WebStart............................................................................................................... 2-16 Enabling NetXplorer Server ................................................................................................... 2-18

CHAPTER 3: BASIC CONFIGURATION ................................................................. 3-1 Viewing the Network.................................................................................................................. 3-2 Adding a NetEnforcer ................................................................................................................ 3-3 Global Server Settings ............................................................................................................... 3-5 CHAPTER 4: NETXPLORER ONE ........................................................................... 4-1
NetXplorer One on the NetEnforcer ........................................................................................ 4-2 NetXplorer One on the Client PC ............................................................................................. 4-3

Chapter 1: Introduction

1-2

NetXplorer Installation Guide

Chapter 1: Introduction
This chapter introduces NetXplorer and explains how it delivers Network Business Intelligence. This chapter includes the following sections: What is NetXplorer?, page 1-2, introduces NetXplorer, and provides a brief overview of its functionality and describing typical environments for its use. Installation Prerequisites, page 1-3, describes the hardware and software requirements for installing NetXplorer.

Chapter 1: Introduction

What is NetXplorer?
NetXplorer is a highly scalable centralized management platform providing a single access point for Allot NetEnforcer deployments of any size, delivering unsurpassed network visibility. Managers can monitor, provision and consolidate information simultaneously across multiple NetEnforcers. NetXplorer used in tandem with the NetEnforcer products, provides in-depth visibility, analysis and network insight as well as the ability to take action to create direct linkages between strategic goals and the priorities of the network and IT infrastructure. It enables Network Business Intelligence (NBI) which empowers organizations with the understanding and knowledge they need to analyze and modify the way services and applications are flowing through the network in order to succeed in todays network-based economy. NetXplorer provides essential NBI functions, including monitoring, reporting, alerting and policy management, which are used to manage the network and modify activity, limiting the impact of low-priority network activities and maximizing the performance of high-priority applications. For service providers, NetXplorer delivers the tools to configure and provision subscriber and service package plans, provide an understanding of network link and subscriber usage and control diverse services and service packages more easily. For enterprises, NetXplorer provides visibility into the network, letting managers control diverse applications effectively for optimal performance. The streamlined management architecture significantly lowers total cost of ownership, with lower operating costs and flexible licensing options for largescale NetEnforcer deployments.

1-2

NetXplorer Installation Guide

Important Notice

Installation Prerequisites
This section describes the minimum hardware and software requirements for installing NetXplorer.

Server Hardware Requirements

Minimum Specifications Intel Pentium 4 2.8 GHz and up Intel Chipset based (925 or 955) 2 GB RAM DDR Dual channel 1 x 80 GB HDD, 8 MB Cache (SATA interface recommended) Windows XP Professional Service Pack 2 (US English) Recommended Specifications DUAL Xeon 2.8 GHz and up 4 GB RAM DDR Dual channel Raid (RAID 0) controller with minimum 128 Mb RAM and write back
cache battery

5x36 GB HDD SCSI U320 15k RPM or larger (capacity depends on overall storage needs) Windows 2003 Service Pack 1 (US English)

NetXplorer Installation Guide

1-3

Chapter 1: Introduction

Software Requirements

NetXplorer Server should be installed on a machine running Windows 2003 Server or Windows XP Professional (US English). NetXplorer Client software should be installed on a machine running Windows XP Professional and Microsoft Internet Explorer. Any Real-Time Virus Protection programs or automatic Defragmentation/Backup software must be disabled on the NetXplorer server or the Allot folder needs to be excluded from protection/defragmentation. Java SDK 1.5 should be installed on the Server machine. For details on how to install the Java SDK see Installing Java 1.5 SDK on page 2-3. No other database applications (for example, SQL database) should be installed on the NetXplorer server machine.

Firewall Settings
In some networks, workstations running the NetXplorer GUI or NetEnforcer can be separated from the NetXplorer server by a firewall for security reasons. In order to allow the client to communicate with the NetXplorer server the following ports should be opened in the Firewall:

TCP/80 TCP/1098 TCP/1099 TCP/4444

HTTP The RMI service bind address JNP server bind address RMI Object ports

To enable the communication between the NetXplorer and the NetEnforcers the following ports in the Firewall should be opened:

TCP/80 UDP/161

HTTP SNMP

1-4

NetXplorer Installation Guide

Important Notice

UDP/162 UDP/123 TCP/123

SNMP Trap NTP NTP

NetXplorer Installation Guide

1-5

Chapter 2: Installing NetXplorer

This chapter explains how to install the Java SDK and NetXplorer. This chapter includes the following sections: Pre-Installation Checklist, page 2-2, outlines the basic steps to be taken before attempting to install NetXplorer. Installing Java SDK, page 2-3, describes how to install Java SDK. Installing NetXplorer, page 2-5, describes how to install the NetXplorer software. Upgrading NetXplorer, page 2-12, describes how to upgrade existing NetXplorer software. WebStart and the NetXplorer User Interface, page 2-14, describes how to install and use WebStart for accessing the NetXplorer User Interface. Enabling NetXplorer Server, page 2-18, describes how to enable NetXplorer Server functionally to manage and monitor several NetEnforcers.

Chapter 2: Installing NetXplorer

Pre-Installation Checklist
Before you begin the installation process, it is important that you perform the following steps.
1. Verify that a minimum of 20 GB is available on the disk. 2. Verify that there is at least 4 GB of available Virtual Memory. NOTE: Set the Virtual Memory on your computer by selecting Start/Settings/Control Panel/System. Open the Advanced tab and click the Performance Settings button. Open the Advanced tab and click the Change button under Virtual memory to select a new value.

3. Verify that the Java SDK 1.5 is installed, including runtime

environment. If it is not installed, install it now, as described in Installing Java 1.5 SDK , page 2-3.

2-2

NetXplorer Installation Guide

Important Notice

Installing Java 1.5 SDK

The Java 1.5 SDK, including the run time environment, must be installed before you can install NetXplorer. To install the Java SDK:
1. Browse to <target folder> and run the jdk-1_5_0_10-windows-i586-

p.exe file on the installation CD. The Security Warning is displayed.

2. Click Run. The License Agreement is displayed. 3. Read the license agreement and select I accept the term to indicate

your agreement, and then click Next. The Custom Setup dialog is displayed.
4. Click Next to accept the default installation location,

OR Click Change to browse and select an alternate installation location, and then click Next.
NOTE The necessary program features are selected by default. You do not need to change these default settings.

NetXplorer Installation Guide

2-3

Chapter 2: Installing NetXplorer

The Browser Registration dialog is displayed.

5. Verify that Microsoft Internet Explorer is selected and click Install.

The Installing Java SDK dialog is displayed. The progress bar indicates the status of the installation process.
6. When the installation process is done, the Complete window is

displayed.
7. Click Finish.

2-4

NetXplorer Installation Guide

Important Notice

Installing NetXplorer
After you have performed the pre-installation checks and have verified that the Java SDK is installed, you are ready to install NetXplorer. To install NetXplorer:
1. Browse to <location> and run the setup.exe file on the installation

CD or from a net-mounted disk.

NOTE Do not attempt to run the setup file from a net long address, such as \\file_server\.

2. The following dialog is displayed.

Figure 2-1: Security Warning

NetXplorer Installation Guide

2-5

Chapter 2: Installing NetXplorer

3. Click Run. The following window is displayed.

Figure 2-2: NetXplorer InstallShield Wizard Welcome Window

4. Click Next to continue. The NetXplorer License Agreement is

displayed.

Figure 2-3: NetXplorer License Agreement

5. Read the license agreement and select I accept the term to indicate

your agreement, and then click Next. The Choose Setup Type dialog is displayed.

2-6

NetXplorer Installation Guide

Important Notice

Figure 2-4: Choose Setup Type

6. To install all program components in a single location, select Typical

and click Next. Then skip ahead to step 8. OR To install each component in a different location, select Custom and click Next.
NOTE Allot strongly recommends using the Custom installation option.

7. If you selected Custom in step 6, the following dialogs are displayed.

Figure 2-5: Choose Destination Location - Custom

NetXplorer Installation Guide

2-7

Chapter 2: Installing NetXplorer

Accept the default destination locations or browse and select an alternate location for one or more of the components, and then click Next. The Choose NTP configuration option dialog is displayed (Figure 2-6).
NOTE It is recommended that the system files and the different monitoring files be installed on different physical drives in order to improve overall performance.

Figure 2-6: Choose NTP configuration option - Custom Select either the Use local clock or the Use External NTP server radio button. If you select an external NTP server, enter the servers IP address in the field provided. Click Next. The Ready to Install the Program dialog is displayed (Figure 2-8).
NOTE Allot strongly recommends using an external NTP server.

2-8

NetXplorer Installation Guide

Important Notice

8. If you selected Typical in step 6, the following dialog is displayed.

Figure 2-7: Choose Destination Location - Typical Accept the default destination location or browse and select an alternate location, and then click Next. The Ready to Install the Program dialog is displayed (Figure 2-8).

Figure 2-8: Ready to Install the Program

NetXplorer Installation Guide

2-9

Chapter 2: Installing NetXplorer

9. Click Install to begin the installation. The Setup Status dialog is

displayed.

Figure 2-9: Setup Status After a few moments the following popup is displayed.

Figure 2-10: Setup Initializing The installation process continues.

NOTE The installation may take up to 30 minutes to complete.

2-10

NetXplorer Installation Guide

Important Notice

When the installation is complete the following dialog is displayed.

Figure 2-11: NetXplorer InstallShield Wizard Complete

10. Select Yes, I want to restart my computer now and click Finish. The

installation process is complete.

NetXplorer Installation Guide

2-11

Chapter 2: Installing NetXplorer

Upgrading NetXplorer
Existing installations of NetXplorer can be upgraded from the installation CD without requiring the existing version to be uninstalled. To upgrade NetXplorer:
1. Browse to <location> and run the setup.exe file on the installation

CD or from a net-mounted disk.

NOTE: Do not attempt to run the setup file from a net long address, such as \\file_server\.

2. The following dialog is displayed.

Figure 2-12: Security Warning

2-12

NetXplorer Installation Guide

Important Notice

3. Click Run. The following window is displayed.

Figure 2-13: NetXplorer InstallShield Wizard Welcome Window Click Next to continue.
4. A message appears indicating that the NetXplorer Server will shut

down for the upgrade. Click Yes to initiate the upgrade.

Figure 2-14: NetXplorer Upgrade Message

5. When the upgrade is complete, a message appears indicating success or

failure.

NetXplorer Installation Guide

2-13

Chapter 2: Installing NetXplorer

WebStart and the NetXplorer User Interface

NetXplorer works with a technology known as WebStart from Sun Microsystems. WebStart enables you to run the NetXplorer User Interface software by simply double-clicking an icon on your computers desktop. This mode of operation is more convenient than having to access the NetXplorer User Interface through an Internet browser.

User Interface Hardware Requirements

It is recommended that the NetXplorer User Interface be installed on a machine with the following minimum specifications:

Pentium 4 512MB RAM Windows XP/Microsoft Internet Explorer

Installing Java 1.5 JRE

The Java 1.5 JRE must be installed on your computer as a prerequisite to working with the NetXplorer User Interface.
NOTE Java 1.5 JRE is required for running the NetXplorer client itself.

2-14

NetXplorer Installation Guide

Important Notice

To install Java 1.5 JRE:

1. Open your Internet browser, and access http://<<NetXplorer Server

IP Address>>. The NetXplorer launch screen will appear.

Figure 2-15: NetXplorer Java Installation Screen.

2. Click the Install Java JRE First link if you do not have JRE 1.5 installed on your

client machine.
3. Click on the appropriate link and follow the on-screen instructions to install the Java

1.5 JRE on your computer.

NetXplorer Installation Guide

2-15

Chapter 2: Installing NetXplorer

Initializing WebStart
1. With the Java 1.5 JRE installed, you can click on the Launch

NetXplorer link from the NetXplorer launching screen. The Java Web Start window is displayed.

Figure 2-16: NetEnforcer Java Web Start Window When the loading process is complete, the Security Warning is displayed, prompting your to confirm that you want to allow NetXplorer User Interface software access to your computer.

Figure 2-17: Security Warning

2-16

NetXplorer Installation Guide

Important Notice

2. Click Start to continue. The NetXplorer Create Shortcuts window is displayed.

Figure 2-18: NetXplorer Desktop Integration

3. Select Yes to place a shortcut icon on your desktop and in your systems Start menu. 4. To access the NetXplorer, double-click the shortcut icon on your desktop. The

NetXplorer Log On window is displayed.

Figure 2-19: NetXplorer Log On Window

5. In the User Name field, enter admin and in the Password field, enter allot. This is

the default user name and password. They may be different if they were already changed by the NetXplorer administrator.
6. Click Log On. The NetXplorer GUI is displayed. NOTE It may take a few moments to display the NetXplorer GUI.

NetXplorer Installation Guide

2-17

Chapter 2: Installing NetXplorer

Enabling NetXplorer Server

In order to manage more then one NetEnforcer using NetXplorer, NetXplorer Server must be enabled by entering the appropriate key. For more information concerning the NetXplorer Server contact Allot Customer Support at support@allot.com. To enable NetXplorer Server: 1. Select Tools > NetXplorer Application Server Registration from the NetXplorer Menu bar. The NetXplorer Application Server Registration dialog box appears.

Figure 2-20: NetXplorer Application Server Registration Dialog 2. Enter the Server Registration Key and Serial Number provided by Allot to enable the NetXplorer Server functionality. 3. An Expiration Date will be generated automatically after clicking Save. 4. Click Save to enter the key and close the dialog box.

2-18

NetXplorer Installation Guide

Chapter 3: Basic Configuration

This chapter introduces how to begin using NetXplorer to manage your NetEnforcer units. This chapter includes the following sections: Viewing the Network, page 3-2, describes how to use NetXplorer to access your network. Adding a NetEnforcer, page 3-3, introduces the process for adding NetEnforcer units to the NetXplorer. Global Server Settings, page 3-5, introduces the process for configuring your NetEnforcer units via the NetXplorer GUI.

Chapter 3: Basic Configuration

Viewing the Network

NetXplorer enables the central configuration and management of multiple NetEnforcers in your network. It enables easy access to devices via the network Navigation tree, including all available configuration parameters. To view network components: Click Network in the lower portion of the Navigation pane to display the network structure in the Navigation tree.

Figure 3-1: Navigation Pane Network

3-2

NetXplorer Installation Guide

Important Notice

Adding a NetEnforcer
In order for NetXplorer to manage a NetEnforcer, it must be added to the NetXplorer's network configuration. The IP address of the NetEnforcer is required for this procedure.
NOTE Initial NetEnforcer configuration should be performed before the unit is added to the NetXplorer configuration. Refer to the Hardware Manual for the specific NetEnforcer model for details.

To add a NetEnforcer:
1. In the Navigation pane, right-click the Network in the Navigation tree

and select Add Device from the popup menu. OR Select the Network in the Navigation tree and then select Add Device from the View menu. The Add Device Properties dialog is displayed.

Figure 3-2: Add Device Properties Dialog

2. Enter the User Name and Password of the NetXplorer administrator along with the

IP address of the NetEnforcer in the designated field. If you wish to assign the NetEnforcer to a Monitoring Collector at this time, select a Collector from the drop down menu.

NetXplorer Installation Guide

3-3

Chapter 3: Basic Configuration

3. Click OK. The NetEnforcer is added to the Navigation tree.

For more information about configuring NetXplorer, see the NetXplorer Operation Guide.

3-4

NetXplorer Installation Guide

Important Notice

Global Server Settings

You can configure the parameters of the SMTP server used to send reports and handle alarm actions. In addition, secure communications can be configured to include authentication and/or encryption.
NOTE Following NetXplorer installation, Allot strongly recommends that in addition to the built in NTP Server, a second external NTP server also be defined. For further information, see the NX software Release Notes and the NetXplorer Operation Guide.

To configure these settings:

1. In the Navigation pane, right-click the Network in the Navigation tree

and select Configuration from the popup menu. OR Select the Network in the Navigation tree and then select Configuration from the View menu. OR Select the Network in the Navigation tree and then click the Configuration icon on the toolbar.

The Server tab of the Network Configuration window is displayed.

2. Configure the Network parameters in the Network Configuration window, as

required.
3. Click

or select Save from the File menu to save the changes to the NetEnforcer configuration.

NetXplorer Installation Guide

3-5

Chapter 4: NetXplorer One

A single NetEnforcer on a network can be managed in a standalone mode. In this mode the NetXplorer One management application runs on the NetEnforcer device itself (rather than on a separate server) and the user is able to connect to the management application from a remote client PC. It is recommended that each client PC only run one installation of NetXplorer One.
NOTE Each installation of NetXplorer One can only manage a single NetEnforcer. To manage multiple NetEnforcers with a single application, the full version of NetXplorer must be purchased and installed. Allot recommends configuring the client PC and the NetEnforcer to synchronize their internal clock with an external NTP server. If there is no way to connect to an NTP server, it is recommended to set the PC clock to the time on the NetEnforcer. If the time difference between NetXplorer One and the NetEnforcer is less than 1 hour and 30 minutes, NetXplorer One will still be able present the monitoring data based on the time as shown on the client PC. If the time difference exceeds 90 minutes, the user must set the PC clock to the time on the NetEnforcer. Do not close the DOS window that opens automatically in the minimized mode on the toolbar when NetXplorer One is invoked. Doing so will close the program.

NOTE

NOTE

Chapter 4: NetXplorer One

NetXplorer One on the NetEnforcer

NetXplorer One will be activated automatically when a NetEnforcer software version including NetXplorer One software is installed on an existing unit being upgraded. New units are shipped from Allot with NetXplorer One mode disabled. In these cases, NetXplorer One must be activated manually by running the following command: acmode +one To confirm that the device is in NetXplorer One Mode log onto the NetEnforcer via Telnet and run the following CLI command: acmode show

4-2

NetXplorer Installation Guide

Important Notice

NetXplorer One on the Client PC

The NetXplorer One User Interface should be installed on a PC utilizing a Pentium 4 processor and 1G RAM. Microsoft Windows XP and Microsoft Internet Explorer must be installed.
NOTE NetXplorer One requires the use of port 50100. Please close any application on the client PC that is using this port. To enable communication between NetXplorer One and the NetEnforcer the following ports in the Firewall should be opened: TCP/50100, UDP/161, UDP/162, UDP/123 TCP/123, TCP1098, TCP/1099, TCP/4444.

NOTE

To activate NetXplorer One management on the NetEnforcer, perform the following steps: Confirm that Java JRE is installed on the NetXplorer client machine. To install the JRE: 1. Open Microsoft Internet Explorer 2. In the Address field type http://NetEnforcer_IP (NetEnforcer_IP is the IP address of the NetEnforcer device)

NetXplorer Installation Guide

4-3

Chapter 4: NetXplorer One

Figure 4-1: NetXplorer One Portal

3. Click Install Java JRE First 4. Click the second link on the next page. You will be redirected to Suns download page. Choose Java Runtime Environment from the list. To activate NetXplorer One: 1. Open Microsoft Internet Explorer 2. In the Address field type http://NetEnforcer_IP (NetEnforcer_IP is the IP address of the NetEnforcer device)

4-4

NetXplorer Installation Guide

Important Notice

Figure 4-2: NetXplorer One Portal

3. Click Launch NetXplorer One 4. The NetXplorer One loading process takes about 3-5 minutes to start. A progress bar is displayed while the application loads.

Figure 4-3: NetXplorer One Launcher 5. Enter the username and password for accessing the application (default username = admin default password = allot)

NetXplorer Installation Guide

4-5

Chapter 4: NetXplorer One

6. To access NetXplorer One from another PC, access http://<NetXplorer_One_IP> using Remote Desktop Connection (NetXplorer_One_IP is the IP of the client PC on which NetXplorer One is running).
NOTE Do not close the DOS window that opens automatically in the minimized mode on the toolbar when NetXplorer One is invoked. Doing so will close the program.

4-6

NetXplorer Installation Guide