3. Deployment and Basic Configuration

This section explains the deployment of the different components and their basic configuration. Depending on the network, it is also possible to find advanced configurations.

For this version, the needed repositories are the following:

repo-opennac.opencloudfactory.com
mirrors.rockylinux.org
mirrors.20i.com
download.docker.com
repo-viapps.opencloudfactory (only for CMI)

• 3.1. Automated deployments
  • 3.1.1. Ansible deployment from empty Rocky Linux
  • 3.1.2. Ansible configuration from OpenNAC OVA
• 3.2. Manual Configuration
  • 3.2.1. ON Core
  • 3.2.2. ON Analytics
  • 3.2.3. ON Aggregator
  • 3.2.4. ON Sensor
  • 3.2.5. ON Captive
  • 3.2.6. CMI
  • 3.2.7. VPN Gateway
  • 3.2.8. ON Agent
• 3.3. Update
  • 3.3.1. ON Core update
  • 3.3.2. ON Analytics update
  • 3.3.3. ON Aggregator update
  • 3.3.4. ON Sensor update
  • 3.3.5. ON Captive update
  • 3.3.6. CMI update
  • 3.3.7. VPN Gateway update
  • 3.3.8. ON Agent
• 3.4. Allin1
  • 3.4.1. Allin1 - Hardware & Architecture
  • 3.4.2. Allin1 - Deployment base OS
  • 3.4.3. Allin1 OpenNAC Deployment
  • 3.4.4. Allin1 - Update Components
• 3.5. Architecture Scalability
  • 3.5.1. Standard scaling
  • 3.5.2. Visibility scaling
  • 3.5.3. UNAC scaling
  • 3.5.4. 2SRA scaling
  • 3.5.5. ON Analytics scaling
  • 3.5.6. Captive Portal
  • 3.5.7. Principal and worker
• 3.6. HA in ELK Cluster
  • 3.6.1. Introduction
  • 3.6.2. Components /etc/hosts
  • 3.6.3. Beats HA
  • 3.6.4. Logstash HA
  • 3.6.5. Elasticsearch HA
  • 3.6.6. Kibana HA
  • 3.6.7. OpenNAC ELK
  • 3.6.8. Annex A - Install Cerebro
  • 3.6.9. Annex B - Development Kibana
• 3.7. Connections Security
  • 3.7.1. Communications between ON Core, ON Sensor and ON Analytics
  • 3.7.2. Communications between CMI and VPN Gateway
  • 3.7.3. Authenticate SSL connections between CMI and VPN Gateway nodes
  • 3.7.4. Verify secure communication between nodes