1 Introduction to the Axxess Server

Transcription

1 1 Introduction to the Axxess Server The Axxess Server is built on a highly reliable, very efficient, fast performing, multi-tasking, multi-user, multi-threading Linux operating system. The Axxess Server provides the functionality of a Windows NT Primary Domain Controller (PDC). Client Windows computers connected to the Axxess server may have their own hard drives, but they also have access to home directories, shared file folders, and shared printers on the server. The Axxess Server PDC provides an unlimited users license to a Windows NT fileserver equivalent at no extra cost. Each user can use any client Windows computer on the LAN to access his/her private and public folders on the server (H: private folder, I: public folder, J: backup of private folder, K: share1, L: share1 backup, etc). The Axxess Server files are available not only to clients on the local area network (LAN), but the home directories are available from the Internet via any browser interface as well. The Axxess Printer Server enables sharing of the printer directly connected to the server and networks printers via the server. Client computers can spool their print jobs via the server to shared printers. Since the print jobs are spooled via the server they complete quickly and users do not have to wait for the physical print jobs to complete before going on to doing other tasks, thereby saving time for users. The Axxess Disk-quota system allows disk-quotas to be setup by user and group. Two types of quota limits are available soft-quota and hard-quota. Once the soft-quota limit has been exceeded the system will provide a warning message to the user when saving a file. Exceeding hard-quota limit disables the saving of new files on the server. The Axxess Disk-quota system ensures that no single user/group can fill up the disk drives and cause problems for all users on the system. The Axxess Backup system backs up all user and system files to a second drive on the server nightly. The backup is read-only, and is available for users on the local network at all times. If a file is deleted it can be restored from the backup done the previous night. Since it is read-only, it cannot be changed or damaged by the user. The Axxess Proxy/Caching Server dynamically (demand-based) caches web pages/files when any user first accesses them via the caching server. When the same web pages/files are requested by others users it provides the cached copy of the web pages/files from the local cache rather than accessing the web pages/files from the Internet. This process increased access speed for all cached web pages/files and at the same time reduces the use of the external Internet connection. This again increases access speeds for new websites from the Internet since the external Internet connection is not being used to access previously visited websites. Another feature of the Axxess Proxy/Caching server is to be able to cache ordered websites or better known as Policy-based (scheduled) caching where complete websites are transferred to the server via the Internet at off peak-hours or via cable TV, or via terrestrial TV, or via satellite multicast. The files received via this mode are pushed on to the cache for immediate retrieval by other users and also indexed for searching via the Axxess Librarian search engine. The Axxess Librarian allows users to use full Boolean searching of the policy based cached websites for high-speed retrieval from the cache by client computers located on the LAN. Axxess servers that don t have a regular Internet connection but are receiving websites via the terrestrial TV, cable TV, or satellite multicast, can have offline caching mode enabled allowing users to retrieve cached sites at LAN speeds without external connection and latency delays. Mbps). The Axxess server connects to LAN at the highest speed supported by the LAN (1000/100/10 The Axxess DHCP (Dynamic Host Configuration Protocol) Server provides automatic configuration of local network TCP/IP characteristics for all local client computers that are enabled to obtain their local network setting from the DHCP server. When client computers are turned on or connected to the network they obtain their network setting from the Axxess DHCP server. The Domain

2 Name Server for client computers is automatically set to the Axxess DNS server by the Axxess DHCP server. Other setting such as WINS Server etc are also setup automatically on the client computers. The Axxess DNS (Domain Name System) server provides translation of domain names to IP and also caches domain names to IP translations. The Axxess DNS server translates the domain name to IP translation for local computers. This reduces repeated access to the Internet access and also increases access speeds for domain names that are already in the Axxess DNS server s database. The Axxess DNS server can also host local and Internet domain names. This feature allows local clients computers to obtain local IP addresses for local domain names and Internet computers to obtain Internet IP addresses for the same domain names. The Axxess Server connects to the Internet via the Axxess Firewall and it is also the gateway for all internal client computers to connect to the Internet. The Axxess Firewall prevents external devices on the Internet to connected to the internal network and at the same time allows known computers located at fixed IP addresses access to the internal network. The Axxess Server and all the local computers are seen from the Internet as only having one real IP address. All internal client computers connect to the Internet via the Axxess Firewall. The Axxess Firewall also provides other capabilities such as NATing to provide the translation of real IP addresses on the Internet to internal IP addresses. The Axxess Firewall routes all internal http and ftp packets via the Axxess Proxy/Cache server thereby providing a transparent Proxy/Cache service on the LAN even to client computers that do not have their proxy setting setup on their web browsers. The Axxess LDAP (Lightweight Directory Access Protocol) Server manages user access to the services such as the Axxess server, Axxess File Server etc. The Axxess LDAP server provides strong authentication, privacy, and authorized database access services. The Axxess server provides each user with a unique address and access to his/her mailbox on the Axxess Server via POP3, and IMAP protocols, or via an Open WebMail browser interface, which allows a user to access his/her mail from the internal network or from the Internet. When a user wants to access his/her from the Internet he/she has to first open up a hole in the Axxess Firewall with a simple authentication mechanism to get access to their mail box and home folders on the Axxess Server. Optionally multiple domain names for receiving can be set-up on the Axxess Server. The Axxess server can be set-up to provideoptional anti-virus and anti-spamming filtering. The Axxess Web Server (http) provides an internal and an external website site on the Axxess Server. Furthermore, each user is provided with a personal web page on the internal website. Optional multiple virtual websites can be set-up on the Axxess Web server. An Axxess Secure Web (https) Server signed by Advanced Interactive is provided as part of the Axxess Server. The Axxess Secure Web server certificate can be signed optionally by a recognized signing authority (i.e. Verisign etc). Axxess WebMail allows users to access their folders and files from a simple browser interface. It also provides a range of features to help users migrate smoothly from Microsoft Outlook to WebMail. It also provides users with a personal calendar with reminder/notification support, mail filter, address book, out-of-office notification, and access to their home folders via a web browser interface. Open WebMail can also be configured to use a Global Address Book and a Global Calendar. The Axxess WebMin is a web-based interface for administering the Axxess Server. Using any browser that supports tables and forms (and Java for the File Manager module), you can setup user accounts, Apache, DNS, file sharing and so on. Virtual local subnets (VLANs) can be set-up if required. A single Internet address allows 5 physical, many virtual subnets and 250 local PC s in one subnet to connect to the Internet. Supported are both wired and wireless solutions. Separate DHCP and DNS servers are provided per subnet along with

3 Transparent Proxy/Caching Server. These features ensure that all client machines can get their network settings from the server and almost nothing has to be set-up on the client machines to connect to the Axxess Server or Internet. Axxess Radius Server authorizes access for PC clients in VLANs. Application software can be installed to run from the Axxess Application Server. Additional services Axxess SQL Server, Axxess FTP Server, Axxess VoIP Server and Axxess Librarian - can be enabled. We can also provide a software package that would freeze the setting on the client machines located in the public Internet access area. This would ensure that users and viruses would not be able to cause any damage to the operating system and software loaded on the client machines. There is also an Uninterrupted Power Supply (UPS) connected to the server for maintaining operation in case of power failure. UPS provides continuous power for the server to shut down properly on power failure. When power is restored, the server automatically reboots to resume normal operations. Remote monitoring allows administrative access to the server for monitoring network access, processes, and disks. Since most of the major functions/services are hosted on the Axxess Server that is managed remotely, the system is easy to control and manage. The Axxess PC Client Administration/Operator s Guide documents: procedures needed to connect a PC machine to the domain operated by Axxess Server procedures needed to create user accounts utilization of the Axxess services The HTML version of the documentation can be browsed on the Axxess Web Server or its updated version at The Axxess Server as every system on the Internet must have a unique IP address or be placed behind a NAT firewall if it is not directly on the Internet. Advanced Interactive can assist you while choosing your Internet Service Provider or designing your network structure. DNS acts as a directory service for all Internet systems, allowing you to specify each one by its hostname. A telephone book allows you to look up an individual person by name and get their telephone number, their unique identifier on the telephone system's network. DNS allows you to look up individual server by name and get its IP address, its unique identifier on the Internet. Your Axxess Server will need its unique host and domain name if you plan to use the Axxess Web Server and Axxess Mail Server services. Advanced Interactive can assist you with registering a new domain name and/or host the local and external DNS directory for your domain name. Although Advanced Interactive provides dynamic DNS hosting for changing external IP addresses as an optional feature, it is preferred to have a static external IP address for the Axxess Server. PBX Server is programmed with 25 local extensions. Each extension is configured on both soft and hard IP phones. Both phones ring simultaneously when the extension is dialed. Third ring phone number can be added by a user. Each extension contains a voic . Additional PBX features are day and night autoattendants, dial by name and verbal directories, receptionist phone, MeetMe conference, public announcement, music on hold, and more. Communication solutions Voic to and FAX to e- mail improve confidentiality and convenience while saving hundreds of dollars. Web meeting - Remote access to a PC monitor in a conference room is set. Users connect to the PC monitor through a browser, so they can see remotely a presentation happening in the conference room. In addition, the remote conferees can listen to the presentation using the MeetMe feature of the PBX server. Wireless subnets For small communities and offices we design and install 2.4 and/or 5.8 GHz line of site wireless subnets. Near line of site 700 MHz licensed and 900 MHz unlicensed wireless solution are designated for large communities. All users receive the same high data rate regardless of distance. The 700 MHz wireless transmitters have a long reach and overcome all vegetation obstacles.

4 Axxess server is a solution of Advanced Interactive Canada Inc. ( Questions and comments, as well as suggestions concerning additions or corrections to this manual, should be sent to support@advancedinteractive.com. 1.1 Axxess server features The following Axxess Server features ensure that the system runs with maximum effciency. See Appendix C with the list of the features that were initially installed on your Axxess Server. Feature Default Optional Linux Operating System Debian Linux Additional Linux virtual servers installed on the same hardware Internet Connection TCP/IP setup as DHCP client static IP, dial-up connection Local Area Network One physical subnet / Quality of Service Load balancing Additional physical or/and virtual subnets Wireless network Base stations and clients in 2.4 GHz, 5.8 GHz, 700 MHz, or 900 MHz subnets. Firewall Virtual Private Network DNS server DHCP server Mail, HTTP, HTTPs and DNS traffic enabled. Transparent proxy. Local hostnames propagation in local subnet, other requests forwarded to external DNS servers. IP, gateway, DNS, WINS and proxy setup. Custom configuration. Forwarding from and to local network. Secure Internet communication. Hostnames propagation in each local physical and virtual subnet. DNS hosting. Dynamic DNS. Domain name registration, hosting and setup. Custom configuration or disabled. LDAP server Users and groups management. Additional features. Radius server Webmin Primary Domain Controller File server Printer Server Server management. Create users, groups, monitor processes, manage services from a browser interface. PDC enabled. Domain name: axxess Disk space of 70 Gbytes. Backup. Mapping of home and shared directories in local network. Web access to home directories. User quota. A printer connected to the Axxess Server parallel port and a printer connected to the Axxess Server local subnet through TCP/IP are pre-configured. Clients authorization. Manage additional services from browser interface. PDC disabled. Additional disk space. Virus Scan of home and shared directories. Web access to shared directories. Additional printers.

5 Roaming server WebMail HTTP and SSL (Web) servers Learning Management System Application server. PBX server VoIP server Proxy/cache server for Internet access addresses and folders for each user. IMAP (with SSL authentication) and POP3 protocols. Antivirus and antispam controls. Relaying from local network only. Browser interface for Mail and File Servers. Access from local network and Internet. Personal and Global Address Book, Filter, Calendar, Folders. Out-of-office notification. Mail forwarding. External, internal, and personal web sites. PHP and Perl for dynamic web sites. Web Content Management Sytem Joomla. Core engine for delivering on-line courses. 25 local extensions, soft and hard phones ring simultaneously, call forward, voic , day and night auto-attendants, dial by name and verbal directories, music on hold, public announcement, MeetMe conference room Calls to Advanced Interactive support line ( ) enabled. Access to Internet from whole LAN. Dynamic caching. Custom Mail server configuration. Additional antivirus or/and antispam engines. Virtual mail domains. Authentication with relaying from Internet. Hub and Spoke Management of E- Mail. Migration of existing mail folders. Remote UUCP mail server for Internet connections without static IP address. Custom configuration. Additional Virtual Web Servers. cgi directory for a personal web site. MySQL database interface. Existing web site migration to Axxess Web Server Secure Web Server (https) signed by a recognized signing authority. Storing Windows, web-based and other applications. Integration with Learning Management System. Additional extensions. Additional virtual PBX servers. Customized dial plan. Voic to . Fax to . Web meeting Internet telephone calls. Communication with other Axxess VoIP Servers. Connection to local PSTN and/or PBX. Billing Server. URL Filtering. DNS filtering. Policy-based caching. Offline mode. Axxess Librarian Search engine on pre-cached sites. Search engine for Policy-based cached sites. Automatic on-line backup Incremental backup daily at 2:00 am. Full backup weekly. Backup to an external device.

6 Redundant on-line system UPS FTP server AppleTalk equivalent server NFS server SQL server Streaming server Clock synchronization Integrity management Remote monitoring Installation, set-up, training and optimization am. Full backup weekly. Two high-speed hard drives are provided. If the primary disk is lost, operations can immediately resume on the back-up system without loss of time and work. Automatic power-down and powerup on power failure Serving up video and audio streams (for SchoolAxxess only) World time synchronization on the Axxess Server with NTP servers on Internet and PC clients time synchronization with the Axxess Server. Checking for the system being hacked each night. The complete system is monitored once every 15 minutes from Advanced Interactive Inc. offices. Network, processes, disks and CPU are monitored. Included. File Transfer Protocol for downloading and/or uploading of files from/to the server. Netatalk server can be enabled to connect MAC machines. Network file server can be enabled to permit file sharing between UNIX or LINUX clients in LAN and Axxess Server in LAN. Secure and reliable database hosting. Comprehensive network-fault diagnosis. Monitoring of other devices in LAN. Bandwidth monitoring. 1.2 Axxess Server in LAN structure The Axxess Server can manage the whole local network, but also cooperate with other servers in LAN. The Axxess Server connects several real or virtual private networks. The connection is wired or wireless. See your LAN structure diagram in the Appendix A of this documentation. The Axxess Server services are provided to the users internally and users can also access their personal data externally. The services with vulnerable security are hidden behind the firewall. The firewall protects LAN from Internet attacks and secures individual local subnets from each other. To access the Axxess Servers from the browser interface, open or

7 The picture as on the right site of this paragraph appears. Click the service icon. The users can access services available externally from