======================================================================
  ESMPRO/ServerAgentAGNXvXʕT[rX Ver.4.5
  CXg[VKCh(Linux)           SA45_J-IG-L-023-02-013
----------------------------------------------------------------------
y\tgEFAz  ESMPRO/ServerAgent Ver.4.5 (Linux)
                  GNXvXʕT[rX (Linux)
y o[W z  4.5.20-1 (ȍ~)
y    z  {dC
y  @  z  Express5800V[Y
                  NX7700xV[Y
yΏۃ[U[z  ESMPRO/ServerAgent (Linux) gɂȂ邨ql
y        z  AvP[V

======================================================================

----------------------------------------------------------------------
\tgEFÂgp
----------------------------------------------------------------------
  {dC(ȉuЁvƂ܂B)́A{gpƂƂɂ
  \tgEFAEvO(ȉuvOvƂ܂B)
  {Ŏgp錠ALɊÂqlɋAql
  Lɂӂ̂Ƃ܂Bql҂ʂ𓾂邽
  ́AvȎIAvO̓Agpюgpʂ
  ܂ẮAql̐ӔCƂĂ܂B܂AGNU Lesser
  General Public License(ȉuLGPLvƂ܂B)܂Berkeley 
  Software Distribution License(ȉuBSDvƂ܂B)Kpꂽ\
  [XR[h́ALGPL܂BSD̋Kɏ]܂B

1.
 (1){gṕAql{\tgEFAiA󂯎ɂȂ
    ܂B
 (2)qĺAPȏOɁAЈďʂɂʒm邱ƂɂA
    ɂĂ{gpɂ苖鋖vO̎gpI
    邱Ƃł܂B
 (3)Ђ́Aql{gp̂ꂩ̏ɈᔽꂽƂ́A
    ɂĂvO̎gpI邱Ƃł̂Ƃ܂B
 (4)vO̎gṕA{gp̋KɊÂI܂ŗL
    ɑ܂B
 (5)vO̎gpIꍇɂ́A{gpɊÂql
    ̂̑̌ɏÎƂ܂BqĺAvO
    ̎gp̏I㒼ɁAvOтׂ̂Ă̕A
    ȂтɋvOƂƂɒ񋟂ꂽ}jÅ֘Aj
    ̂Ƃ܂B

2.gp
 (1)qĺAvOql̏Lɂy  @  
    zɂĂ̂݁Agp邱Ƃł܂B
 (2)qĺAOɒ߂ɏ]{ɂĂ̂݁AvO
    gp邱Ƃł܂B

3.vO̕Aςь
 (1)qĺAŎAʑɔړIł̂݋vO1
    邱Ƃł܂BAvOŒ胁ɑgݍ񂾂
    ɂ͂̌ł͂܂B̏ꍇAqĺAvO
    L}̂ŎAʑɔړIł̂ݕۊǂ邱Ƃł܂B
 (2)qĺAvÔׂĂ̕ɁAvOɕt
    Ă钘쌠\т̑̌\t̂Ƃ܂B
 (3)qĺA{gpŖĂꍇAvO̎g
    pAAρAAЎGlbg[Nւ̓]ڂ܂͂̑
    sƂ͂ł܂B
 (4)qĺAȂꍇłĂvOƂƂɒ񋟂ꂽ}
    jÅ֘A𕡐AЎGlbg[N֓]ڂ邱Ƃ
    ł܂B
 (5){gṕAvOɊւ閳̍YqlɈړ]
    ̂ł͂܂B

4.vÖړ]
 (1)qĺAL̑SĂ̏𖞂ꍇɌA{gpɊÂ
    qľn邱Ƃł܂B
  (C)ql{gpAvOтׂ̂Ă̕AȂ
      тɋvOƂƂɒ񋟂ꂽ}jÅ֘An
      AؕێȂƁB
  ()l{gpɓӂĂ邱ƁB
 (2)qĺA{gpŖĂꍇAvO܂
    ͂̎gp̑O҂ɑ΂ĎgpAnAړ]܂͂̑̏
    邱Ƃ͂ł܂B

5.tRpC
  qĺAvOo[XEGWjAAtRpC܂͋t
  AZu邱Ƃ͂ł܂B

6.ۏ؂̊
 (1)Ђ́AvOɊւĂȂۏ؂s܂BvO
    Ɋւ͂ql̐ӔCєpSď
    ̂Ƃ܂B
 (2)ŐKɂ炸AЂvǑ(oO)C
    Ƃ́AЂ́AȂ̍ٗʂɂACvO
    ͏Ĉ߂̃vO(ȉÃvOuCv
    OvƂ܂B)܂́ACɊւ𕾎Ђ߂
    @ɂ񋟂邱Ƃ܂Bqlɒ񋟂ꂽCvO
    ͋vOƂ݂Ȃ܂B

7.ӔC̐
  Ђ́AȂꍇAql̈편vAʂȎ琶Q(
  QɂЂ\A܂͗\ꍇ܂݂܂B)
  O҂炨qlɑ΂ĂȂꂽQɊÂQɂĈ
  ӔC܂B

8.̑
 (1)qĺAȂ@ɂĂvOт̕A
    тɋvOƂƂɒ񋟂ꂽ}jÅ֘A{
    AoĂ͂Ȃ܂B
 (2){gpɂ镴́AnٔꑮIӊǊٔ
    ĉ̂Ƃ܂B

----------------------------------------------------------------------
  W
----------------------------------------------------------------------
  ESMPRO͓{dCЂ̓o^WłB
  Linux́ALinus Torvalds̓{т̑̍ɂ鏤W܂
  o^WłB
  Red HatARed Hat Enterprise Linux́AčRed Hat, Inc.̕č
  ̑̍ɂ鏤W܂͓o^WłB

  ̑ALڂ̉Жяi͊eЂ̏W܂͓o^WłB
  ȂA{ɂ͓o^W⏤W(TM)(R)}[N͋LڂĂ܂B

----------------------------------------------------------------------
I[v\tgEFA
----------------------------------------------------------------------
  {iɂ́Aȉ̃CZXɊÂI[v\[X\tg
  EFA܂܂܂B
    LGPL
      Esmpro-ExpresspbP[WɊ܂܂libesmtp.dll
    NET-SNMP(UCD-SNMP)
      Esmpro-commonpbP[WɊ܂܂ntagent
      Esmpro-commonpbP[WɊ܂܂ntpass.so
      Esmpro-commonpbP[WɊ܂܂libutil.so
    OpenSSL
      Esmpro-ExpresspbP[WɊ܂܂libcrypto.so
    MD5
      Esmpro-ExpresspbP[WɊ܂܂amrpop.dll

  ̃EFuTCgɌJĂuESMPRO/ServerAgent(Linux) p
  ĂI[v\[X\tgEFAvQƂĂB
    http://www.express.nec.co.jp/linux/dload/esmpro/esm/private/license.html

----------------------------------------------------------------------
Tv
----------------------------------------------------------------------
  1 ͂߂
  2 CXg[n߂O
      1)KvȃpbP[W̊mF
      2)snmpd.conf̐ݒ
  3 CXg[܂̓AbvO[h
  4 CXg[I
      1)ANZX̐ݒ
      2)SELinux̐ݒ
      3)WebSAM SigmaSystemCenter̐ݒ
      4)BMC (EXPRESSSCOPE Engine)̐ݒ
      5)}l[Wʕ(SNMP)̐ݒ
      6)GNXvXʕT[rX̐ݒ
  5 ACXg[
  6 ⑫

----------------------------------------------------------------------
1 ͂߂
----------------------------------------------------------------------
  {ł̓T[oǗ\tgEFAESMPRO/ServerAgent Ver.4.5 (Linux)
  CXg[VɂĐĂ܂B

  ESMPRO/ServerManagerAESMPRO/ServerAgent́AT[o[VXë
  ƁAIȃT[o[VXe^pړIƂT[oǗ\tgEFA
  łB
  T[o[\[X̍\Eғ󋵂ǗAT[o[̗̏\ƌ
  o܂BɁAVXeǗ҂֒ʕ񂷂邱ƂɂAT[o[
  ̖̏h~ƌ̏ɑ΂vȑΏ\ɂ܂B

  {i𐳂g߂ɁAgɂȂOɖ{悭ǂ
  B

  {ł̓éAOS̋@\A@ɂď\ɗĂ
  ۂɐĂ܂BOSɊւ鑀As_ɂẮAeOS̃IC
  wvȂǂQƂĂB

----------------------------------------------------------------------
2 CXg[n߂O
----------------------------------------------------------------------
  ESMPRO/ServerAgentAbvO[hꍇ́A{͂̎菇͕svłB
  {͂ݒ肷ɂ́Aroot[U[ŃOCāA{ĂB

  1)KvȃpbP[W̊mF
    ESMPRO/ServerAgentgp邽߂ɕKvȃpbP[W܂B
    LɋLڂĂK{pbP[WꗗQƂACXg[
    ȂpbP[WƂ́ACXg[܂B

    ŏ\ŃCXg[pbP[W͋LڂĂ܂B

    A[LeN`[ʂɃpbP[W݂ꍇ́AESMPRO/ServerAgent
    CXg[ƓA[LeN`[̃pbP[W
    CXg[܂B
    RPMpbP[ẂAȉ̋Kɂ薽Ă܂B
      <pbP[W>-<o[Wԍ>-<[Xԍ>.<A[LeN`[>.rpm

    pbP[Wɂ͈ˑ֌W܂̂ŁA\uGrp1Grp2Grp3v
    ɃCXg[܂B

    Red Hat Enterprise Linux^pĂVXeɁApbP[WKp
    菇ɂāAJĂ܂̂ŁAQƂĂ
    B
    EC^[lbgڑĂŁApbP[Wǉ/Abvf[g
      ꍇ
        [RHEL]Red Hat Enterprise Linux yum ^p̎
        yLinux T[rXZbg_̂qlz
        https://www.support.nec.co.jp/View.aspx?id=3140000177
    EC^[lbgڑĂȂŃpbP[Wǉ/Abvf[g
      ꍇ
        [RHEL]RPM pbP[WKp̎
        yLinux T[rXZbg_̂qlz
        https://www.support.nec.co.jp/View.aspx?id=3140000129

    GNXvXʕT[rX(HTTPS)gpƂ́ÃpbP[W
    CXg[ĂB
          zip                           libcurl

    (*1) ݈ˑ̂߁ACӂ̃fBNg[ɃRs[āARPMpbP[
         Wt@C𓯎Ɏw肵ACXg[ĂB
           # rpm -ivh *.rpm
    (*2) RHEL7.7葊݈ˑ̂߁ACӂ̃fBNg[ɃRs[āA
         RPMpbP[Wt@C𓯎Ɏw肵ACXg[ĂB
           # rpm -ivh *.rpm

    < Red Hat Enterprise Linux 7 >
    
    Grp1  lm_sensors-libs              | perl-parent             (*1)
          net-snmp-libs                | perl-PathTools          (*1)
          OpenIPMI-modalias       (*2) | perl-Pod-Escapes        (*1)
          perl                    (*1) | perl-podlators          (*1)
          perl-Carp               (*1) | perl-Pod-Perldoc        (*1)
          perl-constant           (*1) | perl-Pod-Simple         (*1)
          perl-Encode             (*1) | perl-Pod-Usage          (*1)
          perl-Exporter           (*1) | perl-Scalar-List-Utils  (*1)
          perl-File-Path          (*1) | perl-Socket             (*1)
          perl-File-Temp          (*1) | perl-Storable           (*1)
          perl-Filter             (*1) | perl-Text-ParseWords    (*1)
          perl-Getopt-Long        (*1) | perl-threads            (*1)
          perl-HTTP-Tiny          (*1) | perl-threads-shared     (*1)
          perl-libs               (*1) | perl-Time-HiRes         (*1)
          perl-macros             (*1) | perl-Time-Local         (*1)
    -----------------------------------+------------------------------
    Grp2  libtirpc                     | OpenIPMI-libs           (*2)
          net-snmp-agent-libs          | perl-Data-Dumper
    -----------------------------------+------------------------------
    Grp3  net-snmp                     | OpenIPMI                (*2)
          net-snmp-utils               | rpcbind
          net-tools                    | 
    ==================================================================

    < Red Hat Enterprise Linux 6 / Oracle Linux 6 >
    
    Grp1  libgssglue                   | perl-Module-Pluggable   (*1)
          lm_sensors-libs              | perl-Pod-Escapes        (*1)
          perl                    (*1) | perl-Pod-Simple         (*1)
          perl-libs               (*1) | perl-version            (*1)
    -----------------------------------+------------------------------
    Grp2  libtirpc                     | OpenIPMI-libs
          net-snmp-libs                |
    -----------------------------------+------------------------------
    Grp3  compat-libstdc++-296   (x86) | net-snmp-utils
          compat-libstdc++-33 (x86_64) | OpenIPMI
          dmidecode                (*) | rpcbind
          net-snmp                     | 
    ==================================================================
    (*)compat-libstdc++-296compat-libstdc++-33́AA[LeN`[
       킹āAǂ炩CXg[ĂB
    (*)Oracle Linux 6̍ŏ\ŁAdmidecode̓CXg[܂B

    < SUSE Linux Enterprise Server 15 >
    SLE15 Packages DVD x86_64 GM DVD1ACXg[ĂB
    
    Grp1  libsensors4                  | snmp-mibs
    -----------------------------------+------------------------------
    Grp2  libestr0                     | libslang2
          libfastjson4                 | libsnmp30
    -----------------------------------+------------------------------
    Grp3  libgthread-2_0-0             | perl-SNMP               (*1)
          liblogging0                  | perl-Term-ReadKey
          liblognorm5                  | tcl
          libnewt0_52                  |
    -----------------------------------+------------------------------
    Grp4  aaa_base                     | OpenIPMI
          e2fsprogs                    | rpcbind
          glibc                        | rsyslog                 (*1)
          libstdc++6                   | sed
          net-snmp                (*1) | syslog-service          (*1)
          newt                         | tar
    ==================================================================

    < SUSE Linux Enterprise Server 12 >
    
    Grp1  libsensors4                  | snmp-mibs
    -----------------------------------+------------------------------
    Grp2  libslang2                    | libsnmp30
    -----------------------------------+------------------------------
    Grp3  libgthread-2_0               | perl-Term-ReadKey
          libnewt0_52              (*) | tcl
          perl-SNMP               (*1) | 
    -----------------------------------+------------------------------
    Grp4  aaa_base                     | newt                     (*)
          e2fsprogs                    | OpenIPMI
          glibc                        | rpcbind
          libstdc++                    | sed
          net-snmp                (*1) | tar
    ==================================================================
    (*)̃EFuTCg_E[hāACXg[ĂB
       https://build.opensuse.org/package/show/devel:libraries:c_c++/newt
         [Build Results] -> SLE_12*

    LɋLڂ̂ȂfBXgr[V̕K{pbP[ẂA
    ̃EFuTCgɌJĂ鎑QƂĂB
    yESMPRO/ServerAgentService(Linux), ESMPRO/ServerAgent(Linux)z
    hLg
       https://www.support.nec.co.jp/View.aspx?id=3170102037
       - K{pbP[Wꗗ

  2)snmpd.conf̐ݒ
    ESMPRO/ServerManagerESMPRO/ServerAgentgpāAT[oĎ
    Ƃ́ASNMP𗘗p܂BESMPRO/ServerManager̃[g
    Vbg_EA[J|[OAтl̕ύX@\g
    ꍇ́ASNMPݒt@C(/etc/snmp/snmpd.conf)ύXA
    ESMPRO MIBɑ΂āAR~jeB[̌uread writevɐݒ肵āA
    snmpdċN܂B
    L̋@\gȂꍇ́Aureadv̂܂܂Ŗ肠܂B

    ESMPRO/ServerAgent́ArpmR}hŃCXg[ꂽESMPRO 
    MIBEthernet Like MIBSNMPvɑΉ邽߂Ɏ̏
    snmpd.confɒǉ܂B
      dlmod ntpass /opt/nec/esmpro_sa/lib/ntpass.so
      ntpass .1.3.6.1.4.1.119.2.2.4.4          (ESMPRO MIB)
      ntpass .1.3.6.1.2.1.10.7                 (Ethernet Like MIB)

    ̂߁ASNMPݒt@C(/etc/snmp/snmpd.conf)ύXāA
    ESMPRO MIBɑ΂āAR~jeB[̌uREAD WRITEvɐݒ肵
    B

    ̐ݒ́Al̃R~jeB[(public)ׂ̂ĂMIB(.1)
    ΂āAuread writev^܂B

    (ݒ1)
      ####
      # Third, create a view for us to let the group have rights to:
      #       name           incl/excl     subtree         mask(optional)
      #view    systemview    included   .1.3.6.1.2.1.1
      #view    systemview    included   .1.3.6.1.2.1.25.1.1
      view    all            included      .1              80

      ####
      # Finally, grant the group read-only access to the systemview view.
      #       group       context sec.model sec.level prefix read   write  notif
      #access notConfigGroup ""   any       noauth    exact systemview none none
      access  notConfigGroup ""   any       noauth    exact  all    all    none

    (ݒ2)
      # These really aren't meant for production use.  They include all MIBS
      # and can use considerable resources.  See snmpd.conf(5) for information
      # on setting up groups and limiting MIBS.
      #rocommunity public 127.0.0.1
      rwcommunity public default

    eݒȅڍׂɂ܂ẮAsnmpd.conf̃wvQƂĂ
    Bsnmpd.conf̃wv́AmanR}hsAmF܂B
      # man snmpd.conf

----------------------------------------------------------------------
3 CXg[܂̓AbvO[h
----------------------------------------------------------------------
  ESMPRO/ServerAgentCXg[܂̓AbvO[h菇
  ܂B

   1. root[U[ŃOC܂B

   2. ESMPRO/ServerAgentCXg[XNvgs܂B
      CXg[ς݂ESMPRO/ServerAgentÂo[W̏ꍇ́A
      AbvO[h܂B
        # sh ./esmsainst.sh

      ESMPRO/ServerAgentCXg[XNvgł́AsnmpdrpcbindA
      ipmi̎NLɂ܂B

   3. VXeċN܂B
      ERed Hat Enterprise Linux 7  SUSE Linux Enterprise Server
          # systemctl reboot

      ELȊOOS
          # reboot


----------------------------------------------------------------------
4 CXg[I
----------------------------------------------------------------------
  ESMPRO/ServerAgentAbvO[hꍇ́A{͂̎菇͕svłB
  {͂ݒ肷ɂ́Aroot[U[ŃOCāA{ĂB

  1)ANZX̐ݒ
    ESMPRO/ServerManager(ȍ~AESMPRO/SMƕ\L)ESMPRO/ServerAgent
    (ȍ~AESMPRO/SAƕ\L)CXg[ꂽT[o[ĎƂA
    ȉ̃|[g𗘗pĂ܂B
    g̃T[o[ŃANZX̐ݒƂ́Aւ
    ANZXݒɂĂB

    ܂A\uv̉ӏ́AOSɂgp\ȃ|[g
    ͈͓ŊU܂B̂ߌŒ肷邱Ƃ͂ł܂B|[g
    ͈͈͂ȉ̃t@CQƂĂB
      # cat /proc/sys/net/ipv4/ip_local_port_range

    ESMPRO/SA - ESMPRO/SM 
      @\                     |ESMPRO/SA ||ESMPRO/SM |l
      -------------------------+----------+----+----------+----------
      o^(SNMP)           | 161/udp  |  | 161/udp  | snmp
      T[oĎ(SNMP)         |          |  |          |
      -------------------------+----------+----+----------+----------
      }l[Wʕ(SNMP)     |  |  | 162/udp  | snmp-trap
      -------------------------+----------+----+----------+----------
      }l[Wʕ(TCP/IP)   |  |  | 31134/tcp|
                               |          |  |          |
      -------------------------+----------+----+----------+----------
      }l[WoR           |  |  | 31136/tcp|
      GNXvXʕT[rX |          |  |          |
      -------------------------+----------+----+----------+----------
      HTTPS(}l[WoR)    |  |  | 31138/tcp|
      GNXvXʕT[rX |          |  |          |
      -------------------------+----------+----+----------+----------
      ỏӏ́Ai̖͒ʐMJnA
        i͐܂Ԃ̒ʐM܂B
      SNMPȊOŎgp|[gԍ́Aʕ̐ݒʂݒ肵܂B
      iptables܂firewalldgp|[g̊J͈ȉ̂ƂłB
        gpȂT[rX(iptables܂firewalld)͒~ĂB
        Eiptablesgp|[g̊J͈ȉ̂ƂłB
          Oiptablesiptables-services(RHEL7)̃CXg[KvłB
            # iptables -I INPUT  -p udp --dport 161 -s <ESMPRO/SMIPAhX> -j ACCEPT
            # iptables -I OUTPUT -p udp --dport 161 -j ACCEPT
            # iptables -I OUTPUT -p udp --dport 162 -j ACCEPT
            # iptables -I OUTPUT -p tcp --dport 31134 -j ACCEPT
            # iptables -I OUTPUT -p tcp --dport 31136 -j ACCEPT
            # iptables -I OUTPUT -p tcp --dport 31138 -j ACCEPT
            # service iptables save
        Efirewalldgp|[g̊J͈ȉ̃EFuTCgQƂāA
          gp|[gĂB
            LinuxT[rXZbgFfirewalldit@CAEH[@\j
            {IȎgp@ɂċĂB
              https://www.support.nec.co.jp/View.aspx?id=3150110809
      TCP WrappersgANZXƂ͈ȉ̃EFuTCg
        QƂāAgp|[gĂB
          Linux T[rXZbgF/etc/hosts.denyA/etc/hosts.allow 
          gANZX(TCP wrappers)̕@ĂB
            https://www.support.nec.co.jp/View.aspx?id=3150005102

    ESMPRO/SA - [T[o 
      @\                     |ESMPRO/SA ||Mail      |l
      -------------------------+----------+----+----------+----------
      C^[lbg[oR |  |  | 25/tcp   | smtp
      GNXvXʕT[rX |          |  |          |
                               |          +----+----------+----------
                               |          |  | 110/tcp  | pop3
                               |          |  |          |
      -------------------------+----------+----+----------+----------
      ỏӏ́Ai̖͒ʐMJnA
        i͐܂Ԃ̒ʐM܂B
      gp|[gԍ́Aʕ̐ݒʂݒ肵܂B
      iptables܂firewalldgp|[g̊J͈ȉ̂ƂłB
        gpȂT[rX(iptables܂firewalld)͒~ĂB
        Eiptablesgp|[g̊J͈ȉ̂ƂłB
          Oiptablesiptables-services(RHEL7)̃CXg[KvłB
            # iptables -I OUTPUT -p tcp --dport 25 -j ACCEPT
            # iptables -I OUTPUT -p tcp --dport 110 -j ACCEPT
            # service iptables save
        Efirewalldgp|[g̊J͈ȉ̃EFuTCgQƂāA
          gp|[gĂB
            LinuxT[rXZbgFfirewalldit@CAEH[@\j
            {IȎgp@ɂċĂB
              https://www.support.nec.co.jp/View.aspx?id=3150110809
      TCP WrappersgANZXƂ͈ȉ̃EFuTCg
        QƂāAgp|[gĂB
          Linux T[rXZbgF/etc/hosts.denyA/etc/hosts.allow 
          gANZX(TCP wrappers)̕@ĂB
            https://www.support.nec.co.jp/View.aspx?id=3150005102

    ESMPRO/SA - HTTPST[o 
      @\                     |ESMPRO/SA ||  HTTPS   |l
      -------------------------+----------+----+----------+----------
      HTTPS                    |  |  | 443/tcp  |https
      GNXvXʕT[rX |          |    |          |
      -------------------------+----------+----+----------+----------
      gp|[gԍ́Aʕ̐ݒʂݒ肵܂B
      iptables܂firewalldgp|[g̊J͈ȉ̂ƂłB
        gpȂT[rX(iptables܂firewalld)͒~ĂB
        Eiptablesgp|[g̊J͈ȉ̂ƂłB
          Oiptablesiptables-services(RHEL7)̃CXg[KvłB
            # iptables -I OUTPUT -p tcp --dport 443 -j ACCEPT
            # service iptables save
        Efirewalldgp|[g̊J͈ȉ̃EFuTCgQƂāA
          gp|[gĂB
            LinuxT[rXZbgFfirewalldit@CAEH[@\j
            {IȎgp@ɂċĂB
              https://www.support.nec.co.jp/View.aspx?id=3150110809
      TCP WrappersgANZXƂ͈ȉ̃EFuTCg
        QƂāAgp|[gĂB
          Linux T[rXZbgF/etc/hosts.denyA/etc/hosts.allow 
          gANZX(TCP wrappers)̕@ĂB
            https://www.support.nec.co.jp/View.aspx?id=3150005102

    ESMPRO/ServerAgent̓[JzXgŁAȉ̃|[ggp
    ܂BiptablesTCP WrappersgANZXƂ́A
    ւ̃ANZXݒɂĂB
    ESMPRO/SA - ESMPRO/SA 
      @\                     ||[gԍ
      -------------------------+-------------
      rpcbind                  | 111/tcp
                               | 111/udp
      -------------------------+-------------
      ESMPRO/ServerAgent       | /tcp
      -------------------------+-------------
      rpcbind̃|[gԍ͕ύXł܂B
      iptablesgp|[g̊J͈ȉ̂ƂłB
        gpȂꍇAT[rX(iptables)͒~ĂB
        Oiptablesiptables-services(RHEL7)̃CXg[KvłB
          # iptables -A INPUT -i lo -j ACCEPT
          # service iptables save
      TCP WrappersgANZXƂ͈ȉ̃EFuTCg
        QƂāAgp|[gĂB
          Linux T[rXZbgF/etc/hosts.denyA/etc/hosts.allow 
          gANZX(TCP wrappers)̕@ĂB
            https://www.support.nec.co.jp/View.aspx?id=3150005102

  2)SELinux̐ݒ
    SELinux̐ݒ肪uvȊȌꍇ́AuvɕύXĂB

        [qg]
            SELinux ̐ݒu(Disabled)vȊOɐݒ肳Ăꍇ
            ́ASELinux ̃|V[ݒt@CœK؂ȃZLeB[R
            eLXg̐ݒsȂƁAp\tgEFAŃZL
            eB[ᔽ̌x܂̓G[Aɓ삵Ȃ
            \܂B
            uvȊOgpꍇ́ASELinux ̃ZLeB[R
            eLXgɂď\̏AݒύXĂB

    1. root[U[ŃOC܂B

    2. SELinux̃JgݒmF܂B
       EJgݒ肪uv̏ꍇ́Â悤ɕ\܂B
           # getenforce
           Disabled
       EJgݒ肪uLv̏ꍇ́Â悤ɕ\܂B
           # getenforce
           Enforcing
       EJgݒ肪ux̂݁v̏ꍇ́Â悤ɕ\܂B
           # getenforce
           Permissive
       Jgݒ肪uvȊȌꍇ́Aȉ̎菇ɂA
       uvɕύX܂B

    3. /etc/sysconfig/selinuxGfB^[ŊJAȉ̍sT܂B
         SELINUX=<Jgݒ>

    4. L̍sҏWAt@Cۑ܂B
       Euvɂꍇ́AȉɕύX܂B
         SELINUX=disabled
       EuLvɂꍇ́AȉɕύX܂B
         SELINUX=enforcing
       Euxvɂꍇ́AȉɕύX܂B
         SELINUX=permissive

    5. VXeċN܂B
       ERed Hat Enterprise Linux 7  SUSE Linux Enterprise Server
           # systemctl reboot

       ELȊOOS
           # reboot

  3)WebSAM SigmaSystemCenter̐ݒ
    WebSAM SigmaSystemCenterŖ{@Ǘꍇ́A{菇s
    B
    WebSAM SigmaSystemCenterŖ{@ǗȂꍇ́A{菇͕svłB

     1. root[U[ŃOC܂B

     2. ݒXNvgs܂B
          # sh ./esmsscset.sh

     3. {@u[hT[ȍꍇ́ALEMJ[h̐i}jA
        ([U[YKCh)́u6  OSDiOn Screen Displayj@\
        gvQƂāAu[hݒ肵ĂB

        EN8405-043 (SIGMABLADE-Hv2p)
          https://www.support.nec.co.jp/View.aspx?id=3170101849

        EN8405-019/019A (SIGMABLADE-Mp)
          https://www.support.nec.co.jp/View.aspx?id=3170101848

         [qg]
           EMJ[h̐i}jAɂ́AuESMPRO/ServerAgent
           gpĂꍇ́A{@\gpău[hύX
           ȂłBvƋLڂĂ܂AWebSAM 
           SigmaSystemCenterƘAg邽߂ESMPRO/ServerAgent
           gɂȂƂ́AύXĖ肠܂B

  4)BMC (EXPRESSSCOPE Engine)̐ݒ
    {@(n[hEFA)Ď邽߁AESMPRO/ServerManagerɖ{@
    (ESMPRO/ServerAgent)o^܂͎蓮o^ꍇ́ABMC
    (EXPRESSSCOPE Engine)LɂĂBBMC (EXPRESSSCOPE 
    Engine)LɂȂꍇ́An[hEFAĎł܂B
    ̂߁AESMPRO/ServerManagerŃVXez̉xEdE
    t@̃ZT񂪕\łAn[hEFȀԂωĂ
    ESMPRO/ServerManager֒ʕ񂳂܂B

    ܂Ao^܂͎蓮o^ɂ́AF؃L[KvłB
    OEXPRESSSCOPE GW 3BMC(Ǘ\tgEFAݒ)
    F؃L[ݒ肵ĂB

     1. EXPRESSSCOPE GW 3 NAOC܂B
        o׎()ł́AL̃ftHg̃[U^pX[h
        ͂AOCĂB
          ftHgIPAhX: 192.168.1.1
          ftHg̃[U: Administrator
          ftHg̃pX[h: Administrator

     2. "ݒ"^uɂBMĈ̑IAʂ̉ɂ<ҏW>
        {^܂B

     3. PEFݒƊǗ\tgEFAݒňȉ̐ݒI܂B
          PEFݒ
            Platform Event Filtering : L
          Ǘ\tgEFAݒ
            ESMPRO Ǘ : L
            F؃L[ : Cӂ̒l
            _CNV (LAN) : L

     4. <Kp>{^Aݒۑ܂B

     5. "ݒ"^uɂBMC̒ʕSNMPʕIA<ҏW>{^
        ܂B

     6. ʕŗLI܂B

     7. SNMPʕݒ̍ڂ\܂̂ňȉ̐ݒI܂B
          ʕ : L
          Rs[^ : Cӂ̒l
          R~jeB : Cӂ̒l
          ʕ񉞓mF : L
          1ʕIPAhX : ESMPRO/ServerManagerCXg[
                                ǗPCIPAhX

     8. <Kp>{^Aݒۑ܂B

     9. ESMPRO/ServerManagerNAOC܂B

    10. "root""R|[lg̒ǉ"ɂ"o^"܂"蓮o^"
        ɂāAESMPRO/ServerAgentBMC (EXPRESSSCOPE Engine)o^
        B

        ESMPRO/ServerManagerŕ\鍀ڂɊւ́Aʂ̉E
        ɂwvQƂĂB

    11. ꍇa.蓮o^ꍇb.QƂĂB

     a. B

     a-1. ͈͂ɂBMCIPAhXESMPRO/ServerAgentIPAhX́A
          JnAhXIAhX̊ԂɂȂ悤ݒ肵܂B

        [`FbN]
            EXPRESSSCOPEGWSP3ڃT[o[(2BMCf)BMC
            (EXPRESSSCOPEGW)Ǘo^ꍇ́A}X^BMC
            IPAhXƃX^oCBMCIPAhX̗܂ތ
            ݒ肵ĂB

     a-2. SNMP(ESMPRO/ServerAgent)ɂ錟͗Lɐݒ肵ASNMP
          R~jeB͊ĎΏۃT[o[̃R~jeBɍ킹
          ݒ肵܂BpublićAOS̊lłB

     a-3. BMC (EXPRESSSCOPE Engine)ɂ錟͗Lɐݒ肵ASNMP
          R~jeB͊ĎΏۃT[o[̃R~jeBɍ킹
          ݒ肵܂BF؃L[͂A<ǉ>{^܂B

     a-4. <>{^AESMPRO/ServerAgentBMCo^܂B

     b. 蓮o^B

     b-1. R|[lgĎΏۃT[o[OS IPAhXȂǁA
          Kvȍڂ͂܂B

     b-2. SNMP (ESMPRO/ServerAgent)/WS-ManɂǗ͓o^ɐݒ肵A
          ǗΏۂSNMPI܂BSNMPR~jeB͊ĎΏ
          T[o[̃R~jeBɍ킹Đݒ肵܂BpublićA
          OS̊lłB

     b-3. BMC (EXPRESSSCOPE Engine)/vPro (Common)ɂǗ͓o^
          ݒ肵AǗΏۂBMCI܂B
          F؃L[ɂ́ABMCRtBO[Vœ͂F؃L[
          ݒ肵܂B

     b-4. BMC (EXPRESSSCOPE Engine)/vPro (LAN)ɂIPAhX1
          BMCIPAhXݒ肵܂B

        [`FbN]
            EXPRESSSCOPEGWSP3ڃT[o[(2BMCf)BMC
            (EXPRESSSCOPEGW)Ǘo^ꍇ́AIPAhX1
            }X^BMCIPAhXAIPAhX2ɃX^oCBMC
            IPAhX͂ĂB

     b-5. <ǉ>{^AESMPRO/ServerAgentBMCo^܂B

     b-6. <ڑ`FbN>{^AESMPRO/ServerAgentBMCƂ
          ڑ`FbN܂B

  5)}l[Wʕ(SNMP)̐ݒ
    ESMPRO/ServerAgentESMPRO/ServerManager֒ʕ񂷂邽߂ɂ́A
    VXe̍ċNɁuʕݒ@\vŒʕiݒ肷Kv
    ܂BȉɃ}l[Wʕ(SNMP)̐ݒLڂĂ܂A
    ̒ʕi̐ݒ@́uESMPRO/ServerAgent [U[YKCh 
    (Linux )vQƂĂB

     1. root[U[ŃOC܂B

     2. ESMamsadmi[ĂfBNg[Ɉړ܂B
          # cd /opt/nec/esmpro_sa/bin/

     3. Rg[pl(ESMamsadm)N܂B
          # ./ESMamsadm
        [ʕݒ]ʂ\܂B

     4. [ʕݒ]ʂ[ʕ{ݒ]I܂B
        [ʕ{ݒ]ʂ\܂B

     5. [}l[Wʕ(SNMP)]I܂B
        [SNMP gbvݒ]ʂ\܂B

     6. <ǉ>IāAʕIPAhXǉ܂B

     7. [ok]IāA[SNMP gbvݒ]ʂ܂B

     8. [N[Y]IāA[ʕ{ݒ]ʂ܂B

     9. [N[Y]IāA[ʕݒ]ʂ܂B

  6)GNXvXʕT[rX̐ݒ

    GNXvXʕT[rX𓱓ꍇ́AuGNXvXʕ
    T[rX@ZbgAbvKCh(Linux/VMware)vQƂĂB

    GNXvXʕT[rX̓Ɋւڍׂɂ܂Ă
    uNEC GNXvXʕT[rX p̎vQƂĂB
      http://acc.express.nec.co.jp/notice/man/guide.htm

    ŐṼZbgAbvKCh́ÃEFuTCgɌJĂ܂B
      NEC rWlXPC/PCT[o qlo^
      http://acc.express.nec.co.jp/Main/main.asp
      qlo^KChɂuGNXvXʕT[rXv
        u(Jǃ}jA)vNbN܂B
        uLinuxł͂ցv́uvNbN܂B
          2-1.̎菇2ɂȉNbN܂B
            uGNXvXʕT[rX(Linux) ZbgAbvKChv

----------------------------------------------------------------------
5 ACXg[
----------------------------------------------------------------------
  ESMPRO/ServerAgentACXg[菇܂B

   1. root[U[ŃOC܂B

   2. ESMPRO/ServerAgentACXg[s܂B
        # sh ./esmsauninst.sh

          [`FbN]
              rpmR}hŃACXg[Ɓux: t@C {t
              @C}: 폜Ɏs܂: ̂悤ȃt@CfB
              Ng͂܂ṽbZ[W\܂A
              ESMPRO/ServerAgent̓ACXg[܂B
                # rpm -e Esmpro-type3
                # rpm -e Esmpro-Express
                # rpm -e Esmpro-common

   3. VXeċN܂B
      ERed Hat Enterprise Linux 7  SUSE Linux Enterprise Server
          # systemctl reboot

      ELȊOOS
          # reboot

----------------------------------------------------------------------
6 ⑫
----------------------------------------------------------------------
  ESMPRO/ServerAgentɊւ⑫łB

  ESMPRO/ServerAgent쐳ȂƂÃEFuTCgɌJ
  Ă铱`FbNV[gQƂAݒmFĂB
    yESMPRO/ServerAgentService(Linux), ESMPRO/ServerAgent(Linux)z
    hLg
      https://www.support.nec.co.jp/View.aspx?id=3170102037
      - ESMPRO/ServerAgent (Linux) `FbNV[g

  ESMPRO/ServerAgentɊւĎݒƒʕݒAӎ́ÃEFu
  TCgɌJĂ郆[U[YKChQƂĂB
    yESMPRO/ServerAgentService(Linux), ESMPRO/ServerAgent(Linux)z
    hLg
      https://www.support.nec.co.jp/View.aspx?id=3170102037
      - ESMPRO/ServerAgent Ver.4.5 [U[YKCh (Linux)

----------------------------------------------------------------------
                                        Copyright NEC Corporation 2019
