2. Deployment and Basic Configuration

This section explains the deployment of the various components and their basic configurations. Depending on the network, advanced configurations may also be available.

For this version, the required repositories are the following:

repo-opennac.opencloudfactory.com
mirrors.rockylinux.org
mirror.netcologne.de
mirrors.ptisp.pt
mirrors.20i.com
ftp.csuc.cat
mirrors.up.pt
dl.rockylinux.org
mirrors.fedoraproject.org
dl.fedoraproject.org
standards-oui.ieee.org
download.docker.com
ocf-mon-01.opencloudfactory.com

• 2.1. Virtualization platforms
  • 2.1.1. Proxmox OVA Deployment
  • 2.1.2. VMWare OVA Deployment
• 2.2. Automated deployments
  • 2.2.1. From empty Rocky Linux
  • 2.2.2. From OpenNAC OVA
  • 2.2.3. Deployment validation
• 2.3. OVA Manual Configuration
  • 2.3.1. ON Core
  • 2.3.2. ON Analytics
  • 2.3.3. ON Aggregator
  • 2.3.4. ON Sensor
  • 2.3.5. ON VPNGW
  • 2.3.6. ON Agent
  • 2.3.7. ON Captive
  • 2.3.8. Elevate - OPCC
• 2.4. Update
  • 2.4.1. ON Core Update
  • 2.4.2. ON Analytics Update
  • 2.4.3. ON Aggregator Update
  • 2.4.4. ON Sensor Update
  • 2.4.5. ON Captive Update
  • 2.4.6. ON VPNGW Update
  • 2.4.7. ON Agent
• 2.5. Architecture Scalability
  • 2.5.1. Standard scaling
  • 2.5.2. Visibility scaling
  • 2.5.3. UNAC scaling
  • 2.5.4. 2SRA scaling
  • 2.5.5. ON Analytics scaling
  • 2.5.6. Captive Portal
  • 2.5.7. Principal and worker
• 2.6. HA in ELK Cluster
  • 2.6.1. Introduction
  • 2.6.2. Components /etc/hosts
  • 2.6.3. Beats HA
  • 2.6.4. Logstash HA
  • 2.6.5. Elasticsearch HA
  • 2.6.6. Introduction
  • 2.6.7. Cluster Sizing
  • 2.6.8. Cluster architecture
  • 2.6.9. Iptables configuration
  • 2.6.10. Cluster Configuration
  • 2.6.11. Kibana HA
  • 2.6.12. OpenNAC ELK
  • 2.6.13. Annex A - Install Cerebro
• 2.7. Connections Security
  • 2.7.1. Communications between ON Core, ON Sensor and ON Analytics
• 2.8. OpenNAC Securization
  • 2.8.1. Hardening