Getting Started
| |
Getting Started |
|
chkconfig iptables on
service iptables start
# Clear IPTABLES
################
iptables -F
iptables -Z
iptables -X
# Local Loopback
################
iptables -A INPUT -i lo -j ACCEPT
iptables -A OUTPUT -o lo -j ACCEPT
# Accept All Related Connections
################################
iptables -A INPUT -i eth0 -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A INPUT -i eth1 -m state --state ESTABLISHED,RELATED -j ACCEPT
# Allow all OUT going connection
################################
iptables -A OUTPUT -o eth0 -j ACCEPT
iptables -A OUTPUT -o eth1 -j ACCEPT
# Accept All HTTP and HTTPS Connections
# Accept SSH connections on "internal" interface
################################################
iptables -A INPUT -i eth0 -p tcp -m state --state NEW -m multiport --dports http,https -j ACCEPT
iptables -A INPUT -i eth1 -p tcp -m state --state NEW -m multiport --dports http,https,ssh -j ACCEPT
# Set Default Policies
######################
iptables -P INPUT DROP
iptables -P OUTPUT DROP
iptables -P FORWARD DROP
# DROP everything else
######################
iptables -A INPUT -j DROP
iptables -A OUTPUT -j DROP
Your device should now accept http and https connections and reject all other connections.
[root@asm ~]# mkdir /opt/abn/asm/certificates
[root@asm ~]# cd /opt/abn/asm/certificates
[root@asm certificates]# keytool -genkey -alias [your_fqdn_here] -keyalg RSA -keysize 2048 -keystore [your_fqdn_here].jks
[root@asm certificates]# keytool -certreq -alias [your_fqdn_here] -file csr.txt -keystore [your_fqdn_here].jks
[root@asm certificates]# keytool -import -alias [your_fqdn_here] -trustcacertificates -file [your_pkcs_file_here] -keystore [your_fqdn_here].jks
[root@asm certificates]# cd /opt/abn/asm/conf
[root@asm conf]# nano server.xml
<Connector executor="tomcatThreadPool"
port="443"
protocol="org.apache.coyote.http11.Http11NioProtocol"
SSLEnabled="true"
scheme="https"
secure="true"
clientAuth="false"
sslProtocol="SSLv3"
ciphers="SSL_RSA_WITH_RC4_128_MD5,SSL_RSA_WITH_RC4_128_SHA,SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA"
keystoreFile="${catalina.base}/conf/.keystore"
keystorePass="ipdradm"/>
<Connector executor="tomcatThreadPool"
protocol="org.apache.coyote.http11.Http11NioProtocol"
keystoreType="JKS"
keystoreFile="${catalina.base}/newCerts/test/abbKeyStore"
keystorePass="[your_keystore_password_here]"
keyAlias="[your_fqdn_here]"
ciphers="SSL_RSA_WITH_RC4_128_MD5,SSL_RSA_WITH_RC4_128_SHA,SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA"
port="443"
SSLEnabled="true"
scheme="https"
secure="true"
clientAuth="false"/>
[root@asm conf]# service abn-asm restart
Events
As items of interest occur on the ASM, it will post events. These events may be viewed in the "Event Viewer",
and may be configured to send an SNMP trap or an SMTP Email as well. The SNMP and SMTP configuration is modified
by using the "Event Notification Configuration" portlet available in the Active Broadband Networks section of the
page building toolbox.
Coupons
You may want to allow some of your customers to purchase access via coupons as well as credit cards. The PPSS
allows the system administrator to add coupons one at a time from the ASM User Interface or in bulk via a web service.
Each coupon has a time span and a coupon code. Drag the ABN PPSS Coupon Manager portlet to an ASM page from
the component toolbox. This display shows all of the coupons in the system as well as allowing you to add single
coupons.
To add multiple coupons, create an XML file with the coupons you would like to add and perform an HTTP PUT
of that file content to the web service URL.
Sample XML File: (coupons.xml)
Sample http put:
curl -X PUT --header "Content-Type: application/xml" -d @coupons.xml http://SERVER/abn-portlet-ppss/rest/ppss/coupon
Merchant Account Configuration
In order to collect credit card payment, you must attach the ABN PPSS system to your Authorize.net account.
The Authorize.Net account should be configured to use the "Advanced Integration Method (AIM)" supported by
Authorize.Net. Enter your Authorize.net API Login ID, and your current API Transaction key into the provided
fields in the Merchant Account Configuration. Do not forget to update these fields should you change your
transaction key in your Authorize.Net account.
Soap Server Settings
The ABN PPSS system activates and de-activates cable modems by executing a series of SOAP calls to a SOAP server.
The ABN PPSS system needs to know the location of the SOAP server and the parameters to pass to the web service calls.
Enter the appropriate information into the provided fields of the SOAP Server Setttings Screen.
Temporary Service Activation
The "Temporary Service Activation" portlet has 2 views - an administrative view and an end user view.
The Administrative view allows the system administrator to set and change the price of service charged to the
end user for both week and month durations. The Administrative view also allows the system administrator to
set the up and down stream service class names used by the PCMM to activate the cable modem.
The Temporary Service Activation User View is the only screen that the end user is likely to see. This form
allows the end user to activate their modem. Fields require name, address, phone, email as well as payment information.