2.2. Manual Configuration

The Manual Configuration section contains information on how to apply different configurations for the different components. These settings are applied on the deployed OVAs.

• 2.2.1. ON Core
  • 2.2.1.1. ON Core basic configuration
    • 2.2.1.1.1. Network configuration
    • 2.2.1.1.2. Change the hostname
    • 2.2.1.1.3. NTP Configuration
    • 2.2.1.1.4. Time zone configuration
    • 2.2.1.1.5. Repository configuration and corporate proxy
    • 2.2.1.1.6. Update to latest version
    • 2.2.1.1.7. Admin Portal Access
    • 2.2.1.1.8. Healthcheck configuration
    • 2.2.1.1.9. Add GPG checks for the repository
    • 2.2.1.1.10. Collectd configuration
  • 2.2.1.2. ON Core cluster
    • 2.2.1.2.1. ON Core as principal primary
    • 2.2.1.2.2. ON Core as worker
      • 2.2.1.2.2.1. MySQL replication
      • 2.2.1.2.2.2. ON Worker Configuration
      • 2.2.1.2.2.3. On all Servers
      • 2.2.1.2.2.4. Verify Worker Status
    • 2.2.1.2.3. ON Core as proxy radius
      • 2.2.1.2.3.1. Definition (What is it?)
      • 2.2.1.2.3.2. Proxy Server Configuration
    • 2.2.1.2.4. ON Core as principal secondary
      • 2.2.1.2.4.1. How it works
      • 2.2.1.2.4.2. Configuration
• 2.2.2. ON Analytics
  • 2.2.2.1. ON Analytics basic configuration
    • 2.2.2.1.1. Network configuration
    • 2.2.2.1.2. Change the hostname
    • 2.2.2.1.3. Iptables configuration
    • 2.2.2.1.4. NTP Configuration
    • 2.2.2.1.5. Repository configuration and corporate proxy
    • 2.2.2.1.6. Update to latest version
    • 2.2.2.1.7. Healthcheck configuration
    • 2.2.2.1.8. Services Configuration
    • 2.2.2.1.9. Unnecessary Services
    • 2.2.2.1.10. Collectd configuration
  • 2.2.2.2. ON Analytics cluster
    • 2.2.2.2.1. Introduction
    • 2.2.2.2.2. Cluster Sizing
    • 2.2.2.2.3. Cluster architecture
      • 2.2.2.2.3.1. One ON Analytics
      • 2.2.2.2.3.2. Two ON Analytics
      • 2.2.2.2.3.3. Three ON Analytics
      • 2.2.2.2.3.4. Four ON Analytics
      • 2.2.2.2.3.5. Five ON Analytics
      • 2.2.2.2.3.6. Six ON Analytics
      • 2.2.2.2.3.7. More than six ON Analytics
    • 2.2.2.2.4. Iptables configuration
    • 2.2.2.2.5. Cluster Configuration
      • 2.2.2.2.5.1. Master
      • 2.2.2.2.5.2. Data
      • 2.2.2.2.5.3. Elasticsearch networking
      • 2.2.2.2.5.4. Import Data to Elasticsearch
    • 2.2.2.2.6. Annex A - Install Cerebro
• 2.2.3. ON Aggregator
  • 2.2.3.1. ON Aggregator basic configuration
    • 2.2.3.1.1. Network configuration
    • 2.2.3.1.2. Change the hostname
    • 2.2.3.1.3. Iptables configuration
    • 2.2.3.1.4. NTP Configuration
    • 2.2.3.1.5. Repository configuration and corporate proxy
    • 2.2.3.1.6. Update to latest version
    • 2.2.3.1.7. Healthcheck configuration
    • 2.2.3.1.8. Services Configuration
    • 2.2.3.1.9. Unnecessary Services
    • 2.2.3.1.10. Collectd configuration
    • 2.2.3.1.11. Send polevals to ON Core proxy
    • 2.2.3.1.12. Logstash variables
      • 2.2.3.1.12.1. DISCOVER_MAC_ADDRESS_IN_ACCESS_VLANS
• 2.2.4. ON Sensor
  • 2.2.4.1. ON Sensor basic configuration
    • 2.2.4.1.1. Network configuration
    • 2.2.4.1.2. Change the hostname
    • 2.2.4.1.3. Iptables configuration
    • 2.2.4.1.4. NTP Configuration
    • 2.2.4.1.5. Repository configuration and corporate proxy
    • 2.2.4.1.6. Update to latest version
    • 2.2.4.1.7. Bro setup (Zeek)
    • 2.2.4.1.8. PF_RING Configuration
    • 2.2.4.1.9. DHCP Configuration Helper Reader
    • 2.2.4.1.10. Healthcheck configuration
    • 2.2.4.1.11. Unnecessary Services
    • 2.2.4.1.12. Collectd configuration
• 2.2.5. External ON Captive
  • 2.2.5.1. ON Captive basic configuration
    • 2.2.5.1.1. API Key for external ON Captive
    • 2.2.5.1.2. Collectd configuration
    • 2.2.5.1.3. Notification Service Configuration
      • 2.2.5.1.3.1. Configuring SMTP Mail Relay
      • 2.2.5.1.3.2. Configuring Envelope Rewriting
      • 2.2.5.1.3.3. Postfix for emailing via Gmail
      • 2.2.5.1.3.4. Postfix for emailing via Office 365
  • 2.2.5.2. ON Captive with multiple Workers
    • 2.2.5.2.1. Captive Instance Configuration
    • 2.2.5.2.2. HAProxy Configuration
    • 2.2.5.2.3. Hosts File Configuration
• 2.2.6. ON VPNGW
  • 2.2.6.1. VPNGW - Default
    • 2.2.6.1.1. Keyboard configuration
    • 2.2.6.1.2. Network configuration
    • 2.2.6.1.3. Repository configuration and corporate proxy
    • 2.2.6.1.4. Update to latest version
    • 2.2.6.1.5. Healthcheck configuration
    • 2.2.6.1.6. Installing the Node on the ON Core
  • 2.2.6.2. VPNGW - NextGen
    • 2.2.6.2.1. Keyboard configuration
    • 2.2.6.2.2. Network configuration
    • 2.2.6.2.3. Repository configuration and corporate proxy
    • 2.2.6.2.4. Update to latest version
    • 2.2.6.2.5. Healthcheck configuration
    • 2.2.6.2.6. Installing the Node on the ON Core
• 2.2.7. ON Agent
  • 2.2.7.1. ON Agent - Default
    • 2.2.7.1.1. Agent - Manual installation
      • 2.2.7.1.1.1. Uninstalling the Agent
    • 2.2.7.1.2. Active Directory GPO remote deployment
      • 2.2.7.1.2.1. Downloading script
      • 2.2.7.1.2.2. Configuring the script
      • 2.2.7.1.2.3. Creating a new GPO
      • 2.2.7.1.2.4. Adding the script to the GPO
  • 2.2.7.2. ON Agent - NextGen
    • 2.2.7.2.1. Agent - Manual installation
      • 2.2.7.2.1.1. Uninstalling the Agent
    • 2.2.7.2.2. Active Directory GPO remote deployment
      • 2.2.7.2.2.1. Downloading script
      • 2.2.7.2.2.2. Configuring the script
      • 2.2.7.2.2.3. Creating a new GPO
      • 2.2.7.2.2.4. Adding the script to the GPO
• 2.2.8. Elevate - OPCC
  • 2.2.8.1. OPCC Component Deployment