Install and Configure the NBI Application¶
NBI Script Upload¶
Upload the NBI Install Script (NBI-<name>-<version>.script
) to the media directory of the newly deployed VM.
Checksum Verification¶
To verify SHA256 checksums for the script, run the following command:
system checksum media/NBI-<name>-<version>.script
NBI Package Install¶
Important
Ensure no ISO’s are mounted prior to continuing (run system unmount).
system unmount
app install media/NBI-<name>-<version>.script delete-on-success y --force
NBI Configuration¶
If certificate-based authentication is used against the northbound system:
Ensure the certificate file and key file is copied to the media directory before running the wizard.
Run the following command to configure the NBI using the wizard:
billing-data-extract config --setup
Option |
Description |
Example |
---|---|---|
remote_mongostring |
Comma separated host:port combinations for VOSS Automate DB nodes. |
<UN1 IP>:27020,<UN2 IP>:27020,<UN3 IP>:27020,<UN4 IP>:27020 |
remote_seed |
The VOSS Automate DB password. |
<secret value> |
host |
The IP address of this NBI node. |
<NBI IP> |
notifier_ca |
The path to the CA certificate that is used to sign the NBI system’s authentication certificate. |
media/ca.pem |
notifier_key |
The path to the private key for NBI certificate-based authentication. |
media/key.pem |
notifier_cert |
The path to the certificate for NBI certificate-based authentication. |
media/cert.crt |
notifier_useCerts |
Configuration to determine if certificate-based authentication is required by the northbound system. |
True or False |
notifier_url |
The HTTP API URL exposed by the northbound system for receiving notifications from NBI. |
https://<host>:<port>/<endpoint> |
callback_username |
NBI callback service username used by the northbound system. |
<username> |
callback_password |
NBI callback service password used by the northbound system. |
<secret value> |
secure_callback |
Configuration to enable HTTPS on the callback service endpo |
True if callback must accept requests over HTTPS otherwise False |
http_connection |
IP address of VOSS Automate API, web proxy recommended for redundancy. |
<WP IP> |
http_user |
VOSS Automate username for NBI’s API user. |
<VOSS Automate API username for NBI> |
http_pass |
VOSS Automate password for NBI’s API user. |
<VOSS Automate API password for NBI> |
http_user |
VOSS Automate username for NBI’s API user. |
<VOSS Automate API username for NBI> |
schema |
The 2 or 3 abbreviation allocated to you by VOSS. |
XY or ABC |
Configure Callback Service URL¶
Update the callback server URL as follows:
Set the URL
billing-data-extract config --set callback.url https://<NBI IP>:5009/callback
Important
The callback service URL must either be HTTP or HTTPS depending on the
value set for secure_callback
Restart services to apply the configuration change:
app start --force
Configure NBI SDE (Reconciliation) File Extraction¶
On the NBI server:
Login as root
app install nrs --force
Check if ssh key pair exists
ls /root/.ssh/id_rsa
Generate ssh key pair if it does not exist
ssh-keygen
Copy public key to the VOSS Automate node where SDE runs nightly
scp /root/.ssh/id_rsa.pub platform@<VOSS Automate IP>:~/media/
On the VOSS Automate node where SDE runs nightly:
Login as platform user
Add SFTP-only user
user sftp add nbi_sftp
Set password for SFTP-only user
user sftp password nbi_sftp
Disable password expiry for SFTP-only user
user password expiry nbi_sftp never
Add the key from the media directory
user addkey nbi_sftp ~platform/media/id_rsa.pub
Ensure that SDE has been run for the current day. If not, run it manually
voss export group subscriber
On the NBI server (as root):
Verify that SFTP is using both key- and password-based authentication
sftp -vv nbi_sftp@<VOSS Automate IP>
Create the NBI SDE output directory
mkdir -p /opt/platform/admin/home/media/nbi_extract
Change ownership of the NBI SDE output directory
chown platform /opt/platform/admin/home/media/nbi_extract
Edit the config to set up SFTP access details
crypttools.py edit /opt/platform/apps/billing-data-extract/billing-data-extract.json
Key
Description
Example
sde.v4uc_ip
The IP address of the VOSS Automate node where SDE runs daily.
<UN1 IP>
sde.nbi_sftp_user
SFTP username in VOSS Automate
nbi_sftp
sde.nbi_sftp_password
The SFTP user’s password in VOSS Automate
<secret>
sde.src_location
The path where SDE files are saved in VOSS Automate
media/data_export
Test NBI SDE and verify that output is generated and saved in the correct location
billing-data-extract run_sde