Lab 1

: In this lab we are going to deploy a headend architecture which will include
- Versa Director
- Versa Analytics
- Versa Controller
- DC Switch

Connect vDirector, vController and vAnalytics together through a Switch (DC SW) and
a management PC to all of these devices.

Step 1: Do the initial configurations on vDirector

versa-director login: Administrator

Password: versa123
==========================================================================
------------------------------------ VERSA
DIRECTOR SETUP
------------------------------------ Do
you want to enter setup? (y/n)? y [sudo]

Telegram Channel for Jobs - https://t.me/nwopenings

Telegram Group for Discussions - https://t.me/pynetlabs
LinkedIn for Latest Updates - https://www.linkedin.com/company/pynetlabs
password for Administrator: -------------
-----------------------
Running /opt/versa/vnms/scripts/vnms-startup.sh ...
------------------------------------
Do you want to setup hostname for system? (y/n)? y
Enter hostname: Director-1
Saved 1 file(s)
Added new hostname entry to /etc/hosts Added
new hostname entry to /etc/hostname Restarting
hostname service ...
Restarting network service ...
Do you want to setup network interface configuration? (y/n)? y
------------------------------------ Setup
Network Interfaces
------------------------------------
Enter interface name [eg. eth0]: eth0

Enter IP Address: 10.255.1.111

Enter Netmask Address: 255.255.255.0
Configure Gateway Address? (y/n)? 10.255.1.51
Answer not understood
Configure Gateway Address? (y/n)? y
Enter Gateway Address: 10.255.1.51
------------------------------------
Adding default route - route add default gw 10.255.1.51
Added interface eth0
Configure another interface? (y/n)? y
Enter interface name [eg. eth0]: eth1
Enter IP Address: 10.10.10.111
Enter Netmask Address: 255.255.255.0
------------------------------------
Added interface eth1
Configure another interface? (y/n)? n
Configure North-Bound interface (If not configured, default 0.0.0.0 will be
accepted) (y/n)? y
------------------------------------
Select North-Bound Interface
------------------------------------
Enter interface name [eg. eth0]: eth0
------------------------------------
Select South-Bound Interface(s)
------------------------------------
Enter interface name [eg. eth0]: eth1
Configure another South-Bound interface? (y/n)? n
Saved 1 file(s)
Enable secure mode for Director HA ports? (y/n)? n
=> Clearing VNMSHA iptables rules =>
Telegram Channel for Jobs - https://t.me/nwopenings
Telegram Group for Discussions - https://t.me/pynetlabs
LinkedIn for Latest Updates - https://www.linkedin.com/company/pynetlabs
Persist iptable rules and reload..
=> Done.
Secure Director HA communication? (y/n)? m Answer
not understood
Secure Director HA communication? (y/n)? n
=> Clearing strongSwan ipsec configuration..
=> Restarting ipsec service..
=> Done.
Prompt to set new password at first time UI login? (y/n)? n
Restarting versa director services, please standby ...
------------------------------------ Stopping
VNMS service
------------------------------------

After this the director will be reloaded and we should be able to find the changes we made
in the initial setup.

Step 2: Configuring vAnalytics:

versa-analytics login: versa

Password: versa123

To configure the IP address on interfaces till the time device is up and running use the
commands below. (A restart will remove the configurations)

[versa@versa-analytics: ~] $ sudo ifconfig eth0 10.255.1.112/24 up

[versa@versa-analytics: ~] $ sudo ifconfig eht1 10.10.10.112/24 up
To Configure the password permanently on the interfaces we will have to make the change in the
interface configuration file. Use the commands given below:

[versa@versa-analytics: ~] $ sudo nano /etc/network/interfaces

[sudo] password for versa: versa123

Inside the file make changes like shown below:

# The primary network interface

auto eth0 iface eth0 inet static
address 10.255.1.112 netmask
255.255.255.0 gateway
10.255.1.51 auto
eth1 iface eth1 inet
static address
10.10.10.112 netmask
255.255.255.0

Telegram Channel for Jobs - https://t.me/nwopenings

Telegram Group for Discussions - https://t.me/pynetlabs
LinkedIn for Latest Updates - https://www.linkedin.com/company/pynetlabs
Use Ctrl + x, press y and then enter to save the file with changes.

Step3: Configuring vController

versa-flexvnf login:
versa
Password: versa123

To configure the IP address on interfaces till the time device is up and running use the
commands below. (A restart will remove the configurations)

versa@versa-flexvnf:~$ sudo ifconfig eth0 10.255.1.113/24 up

[sudo] password for versa:
versa@versa-flexvnf:~$ sudo ifconfig eth1 10.10.10.113/24 up

To Configure the password permanently on the interfaces we will have to make the change
in the interface configuration file. Use the commands given below:

Use the credentials to login into the device.

versa-flexvnf login: versa

Password: versa123

To configure IP address on eth0 and eth1 use the commands given below to open the
interface file.

versa@versa-flexvnf:~$ sudo nano /etc/network/interfaces

[sudo] password for versa: versa123

Inside the file make changes like shown below:

# This file describes the network interfaces available on your system #

and how to activate them. For more information, see interfaces(5).
# The loopback network interface auto lo
iface lo inet loopback
auto eth0 iface eth0 inet
static address
10.255.1.113 netmask
255.255.255.0 gateway
10.255.1.51 auto
eth 1 iface eth1 inet
static address
10.10.10.113 netmask
255.255.255.0

Telegram Channel for Jobs - https://t.me/nwopenings

Telegram Group for Discussions - https://t.me/pynetlabs
LinkedIn for Latest Updates - https://www.linkedin.com/company/pynetlabs
Use Ctrl + x, press y and then enter to save the file with changes.

Try to ping all devices from your vDirector and ping vDirector from your local PC to
confirm the connectivity.

Step 4: Open https://10.255.1.111 on browser to get the GUI of vDirector. Login inside the
GUI using the credentials mentioned below:

Username: Administrator
Password: versa123

After taking the GUI access, we will make the Analytics as part of the Director.
This can be done under the Administration settings, under Connectors. Inside the
Connectors menu select Analytics Cluster to add the Analytics Cluster.

Click on the + button next to the search bar and add your cluster using the details given below
and press OK.

Telegram Channel for Jobs - https://t.me/nwopenings

Telegram Group for Discussions - https://t.me/pynetlabs
LinkedIn for Latest Updates - https://www.linkedin.com/company/pynetlabs
After this a cluster will be added and now the next task is going to be setting up this
cluster.

Go to the CLI of the vDirector and and open the clustersetup.conf file. Use the commands
given below

[Administrator@Director-1: ~] $ cd /opt/versa/vnms/scripts/
[Administrator@Director-1: scripts] $ cd van-cluster-config/
/opt/versa/vnms/scripts/van-cluster-config
[Administrator@Director-1: van-cluster-config] $ cd van_cluster_install/
/opt/versa/vnms/scripts/van-cluster-config/van_cluster_install
[Administrator@Director-1: van_cluster_install] $ sudo nano clustersetup.conf
[sudo] password for Administrator:

In this file we need to make some modifications. Check the highlighted text to look for the
changes you need to make.

[VAN_CLUSTER_SETUP_CONF]
# cluster_size:Total Number of nodes in the van-cluster cluster_size:1
# cluster_name:Name of the cluster cluster_name:VAN-Cluster
# forwarder_count: Total number of Log forwarding nodes
# (0 if none are present) forwarder_count:
0

Telegram Channel for Jobs - https://t.me/nwopenings

Telegram Group for Discussions - https://t.me/pynetlabs
LinkedIn for Latest Updates - https://www.linkedin.com/company/pynetlabs
[VERSA_DIRECTOR]
# director_count:Total number of Versa-Director(s)
# 1 for standalone, 2 for HA director_count:1
[VERSA-DIR-1]
# username: In this block, Versa-Director User Credentials
# * Enter password in Password prompt during installation username:
Administrator

# Enter password for above user; if password is not entered it is prompted

#password:

# rpc_address: Management Address of the Director

# * RPC address or the listen_address must be reachable from all the
# nodes in VAN-cluster
# * This address must be reachable from the machine you are executing
# the van-cluster-install script rpc_address:
10.255.1.111

# listen_address: Internal interface address for connecting to analytics

nodes.
# Can be southbound interface as well listen_address:
10.10.10.111

#[VERSA-DIR-2]
#username: Administrator
#password:
#rpc_address: 10.10.10.100
#listen_address: 192.169.1.2

# Node Configurations
# Each VAN-NODE-X has the properties of the corresponding VAN node
# First node in the cluster
[VAN-NODE-1]
# username: In this block, Versa Analytics Node User Credentials
# Enter password in Password prompt during installation
# Enter password for above user; if password is not entered it is prompted
#password:

# mode: indicates whether node is part of cluster or standalone deployment

# Valid values: standalone/cluster mode:standalone
# hostname: Hostname of this node.
# Used to change the hostname of the node

Telegram Channel for Jobs - https://t.me/nwopenings

Telegram Group for Discussions - https://t.me/pynetlabs
LinkedIn for Latest Updates - https://www.linkedin.com/company/pynetlabs
# If not poplulated then it defaults to $CLUSTER_NAME-$PERSONALITY
hostname:Analytics-1

# personality: Personality of the Analytics Node

# Valid Values: analytics or search or standalone personality:standalone
# rpc_address: Management Address of this node
# * RPC address or the listen_address must be reachable from all the #
nodes of VAN-cluster
# * This address must be reachable from the machine you are executing
# the van-cluster-install script rpc_address:10.255.1.112
# listen_address: Internal interface address for communicating with other
analy$
listen_address:10.10.10.112
# collector_address: Log collector exporter interface IP address
collector_address:10.10.10.112
# collector_port: Log collector exporter port collector_port:1234

We don’t have any Second node cluster therefore, we can ignore the left part of the file.
Save the file using Ctrl + x and press Y to confirm changes and then press Enter.

Now, we need to run the script to execute the configuration. Use the command below to
execute in vDirector.

Administrator@Director-1: van_cluster_install] $ sudo

./van_cluster_installer.py
[sudo] password for Administrator: versa123

After executing the file use the details as mentioned below in the screenshot and allow it
some time to complete the process.

The completion of installer will be shown as

Telegram Channel for Jobs - https://t.me/nwopenings

Telegram Group for Discussions - https://t.me/pynetlabs
LinkedIn for Latest Updates - https://www.linkedin.com/company/pynetlabs
VAN CLUSTER INSTALL COMPLETED
[Administrator@Director-1: van_cluster_install] $

Next step would be installing the Certificates. Go to the vDirector and use command below
to install and generate the certificate.

sudo ./van_cluster_installer.py --post-setup --gen-vd-cert

2022-07-06 09:55:53,399 - ClusterInstaller - INFO - --post-setup
2022-07-06 09:55:53,403 - ClusterInstaller - INFO - --gen-vd-cert
Enter password for Versa-Director [email protected]: versa123 Enter
password for 'Analytics-1' [email protected]: versa123
/root/.ssh/known_hosts updated.

Allow it some time to install the certificates and it should show you an output like shown
below.

Now reload the GUI of Director and follow the steps given below.

Go to Administration, under the System settings, click on Static Route to add a route so
that the Director can communicate with the overlay network.

Now we will add the organization and appliances. Go to the Workflows, click on
Controllers and add a Controller with the following settings:

Telegram Channel for Jobs - https://t.me/nwopenings

Telegram Group for Discussions - https://t.me/pynetlabs
LinkedIn for Latest Updates - https://www.linkedin.com/company/pynetlabs
Click on Create Organization to create the organization for your
controllers.

We also need to add the Supported User Roles.

Telegram Channel for Jobs - https://t.me/nwopenings

Telegram Group for Discussions - https://t.me/pynetlabs
LinkedIn for Latest Updates - https://www.linkedin.com/company/pynetlabs
Check the staging controller box and add the North-Bound IP and Analytics Cluster then
click on continue.

Telegram Channel for Jobs - https://t.me/nwopenings

Telegram Group for Discussions - https://t.me/pynetlabs
LinkedIn for Latest Updates - https://www.linkedin.com/company/pynetlabs
Add the details like shown below and click on Get Coordinates and click
Continue.

Add the Control Network details and click

Continue.

Add the WAN interfaces.

Telegram Channel for Jobs - https://t.me/nwopenings

Telegram Group for Discussions - https://t.me/pynetlabs
LinkedIn for Latest Updates - https://www.linkedin.com/company/pynetlabs
Click on WAN Network to create the subnets for the interfaces

Create another WAN Network for MPLS

Add in the details and click on Deploy.

Telegram Channel for Jobs - https://t.me/nwopenings

Telegram Group for Discussions - https://t.me/pynetlabs
LinkedIn for Latest Updates - https://www.linkedin.com/company/pynetlabs
 Telegram Channel for Jobs - https://t.me/nwopenings
Telegram Group for Discussions - https://t.me/pynetlabs
LinkedIn for Latest Updates - https://www.linkedin.com/company/pynetlabs