Instructins fr Cnfiguring a SAFARI Mntage Managed Hme Access Expansin Server ~ Please read these instructins in their entirety befre yu begin. ~ These instructins explain hw t add a SAFARI Mntage Managed Hme Access (MHA) Expansin Server t yur WAN Manager envirnment. An MHA server is a special purpse WAN Expansin Server that prvides users with hme access t packaged and, if applicable, district-created SAFARI Mntage Creatin Statin cntent. Befre Yu Begin: These instructins are fr SAFARI Mntage versin 3.2.8 r greater. Nte: Screens and menu links may vary slightly between sftware versins. Review the SAFARI Mntage System Requirements, which include imprtant infrmatin that will ensure that yur envirnment meets all requirements. It is imprtant that yu review the Release Ntes, which are available nline; as they may include Knwn Issues yu shuld understand befre running the upgrade. The MHA server is a special purpse WAN Expansin Server, and it may be helpful t review the WAN Expansin tpic in the nline help, available by navigating t Help > WAN Manager Guide > WAN Expansin. Yu may chse t physically install the MHA Expansin Server in advance. Please d nt pwer n r cnfigure until directed t d s in the instructins belw. T supprt hme access, SAFARI Mntage Creatin Statin vide cntent must be encded as H.264 and hinted fr streaming. Please see SAFARI Mntage Creatin Statin Encding Guidelines fr Managed Hme Access, available nline at http://www.safarimntage.cm/supprt. Include time t backup yur system in yur upgrade planning. N ne shuld use the SAFARI Mntage system during the installatin prcess, s please perfrm the installatin ff-hurs. Review any questins with Technical Supprt in advance. Please nte that SAFARI Mntage Technical Supprt is available Mnday Friday frm 8 a.m. t 6 p.m. Eastern Time, and may be cntacted by telephne at 800-782-7230 r nline via http://www.safarimntage.cm/supprt. Instructins: 1. Verify the versin f SAFARI Mntage that yu are running by navigating t Admin > Settings > System n the WAN Cntrller. 2. Backup yur SAFARI Mntage system via the Administratin Tls: a. Navigate t Admin > Data Recvery > Backup. b. Perfrm a full backup by setting the backup ptin Data Only t N. 3. Prepare yur netwrk. As MHA prvides access frm hme, it requires that yu prepare yur internal netwrk. T prvide public Internet access t the MHA Expansin Server, please cnfirm the fllwing befre prceeding: Refer t the attached netwrk diagrams that prvide sample site cnfiguratins as an verview. Cnfirm that yu have the public and private IP addresses and hstnames fr yur new MHA server and existing WAN Cntrller. Cnfirm that yu have created DNS recrds with the external (public) and internal (private) hstnames and IP addresses fr yur new MHA server: The external (public) hstname f the MHA server must be the same as the internal (private) hstname f the WAN Cntrller in rder fr permanent links t functin crrectly frm internal and hme clients. Refer t the netwrk diagram f the example site cnfiguratin fr a depictin f this. Page 1
Cnfirm that yur firewall(s) is prperly cnfigured t: Translate the public <-> private IP addresses fr yur MHA server. Allw netwrk traffic fr the fllwing prts: WAN Cntrller MHA Server External Client MHA Server Type Prt Prtcl Type Prt Prtcl FTP 21 TCP HTTP 80 TCP SSH 22 TCP HTTPS 443 TCP SMTP 25 TCP RTSP 554 TCP DNS 53 TCP/UDP HTTP 80 TCP HTTPS 443 TCP NTP 123 UDP SMB 135 TCP SMB 137 UDP SMB 138 UDP SMB 139 TCP SNMP 161 UDP LDAP 389 TCP LDAPS 636 TCP SMB 445 TCP RSync 873 TCP 4. Integrate the new MHA Expansin Server int the existing SAFARI Mntage WAN Manager envirnment. The MHA Expansin server is a special purpse WAN Expansin Server, and it must first be integrated int yur WAN Manager envirnment: Verify r Activate the Required Sftware Licenses n the WAN Cntrller Server a. Lg in directly t the WAN Cntrller server as an administratr by using a web brwser. b. Verify that the necessary add-n mdules and cntent licenses are active. i. Click n the Admin tab n the Dashbard. ii. Click n Add-On Mdules (Add-Ons in earlier versins) frm the left-hand navigatin menu. Add-On Mdules is lcated under Settings. Instructins fr Activating and Cnfiguring a SAFARI Mntage Managed Hme Access Expansin Server Page 2
iii. Lcate the fllwing frm the Mdules list. If activated, a green check will appear in the Active clumn. If nt activated, click the Activatin link and fllw the n-screen instructins. SAFARI Mntage WAN Manager SAFARI Mntage Expansin Cntrller SAFARI Mntage Managed Hme Access Nte: Internet access is required fr activatin. Install the MHA Expansin Server and Activate the Sftware License a. If yu have nt already dne s, physically install the MHA Expansin server accrding t the setup guide included with the server. b. Assign an IP address and hstname accrding t the setup guide included with the server. c. Lg in directly t the MHA Expansin Server as an administratr by using a web brwser. d. Verify that the WAN Expansin Server Mdule license is active. i. Click n the Admin tab n the Dashbard. ii. iii. Click n Add-On Mdules (Add-Ons in earlier versins) frm the left-hand navigatin menu. Add-On Mdules is lcated under Settings. Lcate SAFARI Mntage Expansin Server frm the Mdules list. If activated, a green check will appear in the Active clumn. If nt activated, click the Activatin link and the fllw n-screen instructins. Nte: Internet access is required fr activatin. Page 3
Synchrnize the MHA Expansin Server With the WAN Cntrller Server a. Frm the MHA Expansin Server i. Lgin directly int the MHA Expansin Server as an administratr by using a web brwser. ii. Click n the Admin tab n the Dashbard. iii. Click n Expansin Server frm the left-hand navigatin menu. iv. Click n Server Settings frm the left-hand navigatin sub menu. v. Enter the Expansin Cntrller (IP r Cmputer Name) under Expansin Server Settings. vi. Check the Allw Direct Lgin checkbx under Expansin Server Settings. vii. viii. ix. Click n the Update buttn. Allw the MHA Expansin server t synchrnize with the WAN Cntrller server befre cntinuing. This prcess synchrnizes cnfiguratin and, if applicable, SAFARI Mntage Creatin Statin cntent. Typical time fr server synchrnizatin is 2 t 6 hurs. It is recmmended that synchrnizatin be allwed t run vernight. Yu may mnitr the synchrnizatin prcess by viewing the fllwing screen. Instructins fr Activating and Cnfiguring a SAFARI Mntage Managed Hme Access Expansin Server Page 4
Upn cmpletin, the user will be returned t Expansin Server Settings, and Database synchrnized will display the percentage synchrnized with a link t view the status. x. Once the MHA Expansin server is fully synchrnized, prceed t the next step. Activate Cntent Licenses n the WAN Cntrller and Synchrnize Them With the MHA Expansin Server a. Frm the WAN Cntrller Server i. Lg in directly t the WAN Cntrller server as an administratr by using a web brwser. ii. iii. iv. Click n the Admin tab n the Dashbard. Click n Activate Cntent & Mdules (Activate All Cntents & Add-Ons in earlier versins) frm the left-hand navigatin menu. Activate Cntent & Mdules is lcated under Settings, alng with the n-screen instructins fr activatin. Allw the WAN Cntrller server t synchrnize with the MHA Expansin Server befre cntinuing. Synchrnizatin can be mnitred by viewing the fllwing screen under Expansin Servers. v. Once the WAN Cntrller Server is fully synchrnized, prceed t the next step. 5. Cnfigure the MHA Expansin Server fr Hme Access. The MHA Expansin server can nw be cnfigured fr Hme Access: a. Lg in directly t the MHA Expansin Server as an administratr by using a web brwser. b. Click n the Admin tab n the Dashbard. c. Click n Managed Hme Access frm the left-hand navigatin menu. d. Click n Streamer Settings frm the left-hand navigatin sub menu. Page 5
e. Check the This Server Streams checkbx under Settings. f. Click n the Update buttn. g. Click n Exclude Subnets frm the left-hand navigatin sub menu. Exclude Internal Subnets IP address ranges included in the setting will be treated as Direct Play cnnectins (i.e., internal cnnectins), and SAFARI Mntage will behave as if being used in a lcal envirnment. IP addresses r ranges nt included here will be treated as Managed Hme Access cnnectins and will receive lwer bit rate cntent intended fr hme access. h. Assign additinal netwrks t the server by entering an IP address and its crrespnding Netmask, then clicking n the Add buttn. Cnfiguratin f the MHA Expansin Server and WAN Cntrller Servers are cmplete. Test the cnfiguratin frm an external client fr verificatin. Instructins fr Activating and Cnfiguring a SAFARI Mntage Managed Hme Access Expansin Server Page 6
Optinal Settings: Refer t the image belw as reference fr these settings. These settings can be fund by clicking n Admin > Managed Hme Access > Streamer Settings. Ntes: Maximum Allwed Settings Restricted Settings Maximum Users The number f users that can access the server at the same time. Maximum Bandwidth The amunt f bandwidth t be used while streaming. Nte: T view SAFARI Mntage pre-packaged cntent, Maximum Bandwidth shuld be set t 0 kbps (unlimited) r 384 kbps r higher. Restricted Users The number f users that can access the server at the same time during the Restricted Bandwidth Hurs. Restricted Bandwidth The amunt f bandwidth t be used while streaming during the Restricted Bandwidth Hurs. Restricted Bandwidth Hurs Used t set days and times fr restricted bandwidth. Restricted Users and Bandwidth settings becme active during the scheduled times. The Managed Hme Access Expansin Server must have access t the Internet. It is recmmended that the server be put int a DMZ with the apprpriate prts pen. Fr a list f the specific prts t pen, see the attached netwrk drawing labeled Sample Setup Using a DMZ. Fr MHA servers nt within a DMZ, see attached netwrk drawing labeled Sample Setup Withut a DMZ. Page 7
Trubleshting: Mst issues are reslved by verifying that the prper netwrk and firewall cnfiguratin exists. Verify that the DNS hstnames are prperly registered and reslved t the crrect IP addresses. Frm an external client, the fully qualified hstname (e.g., mntage.schl.edu) shuld reslve t the external (public) IP address f the MHA Expansin Server. Frm an internal client, the fully qualified hstname (e.g., mntage.schl.edu) shuld reslve t the internal (private) IP address f the WAN Cntrller. Verify that the Netwrk Address Translatin (NAT) is prperly cnfigured and the public IP address f the MHA server crrectly redirects t the private IP address f the MHA server. Verify that the required firewall prts are pen. Supprt: Netwrk traffic can typically be viewed frm yur firewall and/r ruter cnsle r mnitring applicatins. It may als be helpful fr external and internal clients t use a prt scanner such as WSPingPr t verify that the required prts are pen. Scan each required prt and adjust firewall cnfiguratin as required t allw access n the required prts. Fr assistance with SAFARI Mntage r SAFARI Mntage Managed Hme Access, please cntact SAFARI Mntage Technical Supprt by calling (800) 782-7230 r by visiting http://www.safarimntage.cm/supprt. Instructins fr Activating and Cnfiguring a SAFARI Mntage Managed Hme Access Expansin Server Cpyright 2010 Library Vide Cmpany C5619 06/10 Page 8
Sample Setup Using a DMZ Fr permanent links t wrk, the fr the WAN server needs t be internally mapped n the Internet side t MHA Streamer. WAN Manager Expansin Cntrller Managed Hme Access DMZ mntage.schl.edu 10.10.0.1 Open Prts TCP 21 (FTP) TCP 22 (SSH) TCP 25 (SMTP) TCP/UDP 53 (DNS) TCP 80 (HTTP) mntage-exp3.schl.edu mntage.schl.edu 172.16.0.1 69.67.80.112 UDP 123 (NTP) Expansin Server Open Prts TCP 135 (SMB) UDP 137 (SMB) TCP 80 (HTTP) UDP 138 (SMB) TCP 443 (HTTPS) mntage-exp1.schl.edu TCP 139 (SMB) TCP 554 (RTSP) 10.10.0.2 UDP 161 (SNMP) TCP 389 (LDAP) Expansin Server TCP 443 (HTTPS) TCP 445 (SMB) TCP 636 (LDAPS) mntage-exp2.schl.edu 10.10.0.3 Yu MUST use hst names () n all servers and the frced IP address checkbx in the settings page MUST be unchecked. TCP 873 (RSync) SAFARI Mntage Managed Hme Access Streamer
Sample Setup Withut a DMZ WAN Manager Expansin Cntrller Managed Hme Access mntage.schl.edu Open Prts 10.10.0.1 TCP 80 (HTTP) TCP 443 (HTTPS) TCP 554 (RTSP) Fr permanent links t wrk, the fr the WAN server needs t be internally mapped n the Internet side t MHA Streamer. Expansin Server mntage.schl.edu 69.67.80.112 mntage-exp1.schl.edu 10.10.0.2 Expansin Server Internet traffic needs t be mapped t the internal server. mntage-exp2.schl.edu 10.10.0.3 SAFARI Mntage Managed Hme Access Streamer mntage-exp3.schl.edu 10.10.0.4 Yu MUST use hst names () n all servers, and the frced IP address checkbx in the settings page MUST be unchecked.