VOSS-4-UC verification¶
Important
One or more verification steps require root access to VOSS-4-UC. These steps must be carried out by VOSS Support.
If working with a cluster
Verify Primary and Secondary Nodes
database config
Verify cluster connectivity
cluster status
Verify network connectivity, disk status and NTP
cluster check
As root user verify port 27020 is open to NBI on TCP/27020 on all Unified Nodes by reading the current firewall rules
/opt/platform/apps/cluster/cluster.py run application "config.py get /apps/mongodb/firewall/mongodb/all"
If not, as root user open TCP/27020 on all Unified Nodes to NBI by creating the firewall rule replacing <NBI IP> with the IP address of the NBI instance
/opt/platform/apps/cluster/cluster.py run application "config.py put /apps/mongodb/firewall/mongodb/all all:tcp.27020.0#<NBI IP>"
To check access to the database, use netcat to test the connection to the VOSS database from the NBI machine, replacing <VOSS IP> with the IP address of the VOSS instance:
diag test_connection <VOSS IP> 27020
A system message confirms whether the connection is successful.
You can then recheck the firewall rules again on the VOSS instance:
config.py get /apps/mongodb/firewall/mongodb/all all:tcp.27020.0#all
Copy the DB Password (root)
/usr/bin/rest --get --path=/apps/voss-deviceapi/config/seed --value
If the server is a single node:
Check all services are up:
app status
Copy the DB Password (root)
/usr/bin/rest --get --path=/apps/voss-deviceapi/config/seed --value
As root user verify port 27020 is open to NBI on TCP/27020 by reading the current firewall rules
config.py get /apps/mongodb/firewall/mongodb/all all:tcp.27020.0#all
If not, as root user open TCP/27020 to NBI by creating the firewall rule replacing <NBI IP> with the IP address of the NBI instance
config.py put /apps/mongodb/firewall/mongodb/all all:tcp.27020.0#<NBI IP>"
To check access to the database use netcat to test the connection to the VOSS database from the NBI machine, replacing <VOSS IP> with the IP address of the VOSS instance:
diag test_connection <VOSS IP> 27020
A system message confirms whether the connection is successful.
You can then recheck the firewall rules again:
config.py get /apps/mongodb/firewall/mongodb/all all:tcp.27020.0#all
Ensure the database model files (schemas) for a new install only are added via he GUI - these are the files in the Download section above and are added under the Administration - Import section.
Add an NBI user to the VOSS-4-UC GUI:
Note: NBI uses this user for internal communication with VOSS-4-UC.
- Create an administrator account on VOSS-4-UC, with a credential policy and password that doesn’t expire.
- Log in as a utility admin and add an NBI user with the following minimum permissions:
- relation/HcsHierarchyNodeREL
- read
- relation/Subscriber
- read
- tool/Macro
- execute (with read access on subscribers)
- relation/HcsHierarchyNodeREL
For VOSS-4-UC Provider administrators wishing to log in to the NBI GUI, the following permissions are required in the access profile:
- data/Reports
- read
- tool/DataExtract
- nbi_subscriber