Novell BorderManager Companion CD Readme

November 07, 2003
1.0 Introduction
2.0 Documentation
3.0 Components
3.1 Novell eDirectory 8.7.1
3.2 NICI 2.6 (NetWare 5.1, NetWare 6)
3.3 netnlm32.nlm
3.4 TCP/IP (Only for VPN)
3.4.1 Installing TCPIP from CD:
3.4.2 Installing TCPIP from Web:
3.5 ICE Patch
3.6 JVM 1.4.1
3.7 Installing iManager 2.0.1 snap-ins
3.7.1 NetWare 5.1 SP6
3.7.2 NetWare 6 SP3
3.7.3 NetWare 6.5 with iManager 2.0
3.8 NIS
3.9 PKTSCAN
3.10 Call Connection Manager (callmgr.nlm)
3.11 Novell Nsure Audit
4.0 Legal Notices

1.0 Introduction

This document provides the list of components that ship along with Novell® BorderManager® 3.8 as part of a Companion CD. For some of the components, the install steps are also included.


2.0 Documentation

The relevant documentation for each of the components in the Companion CD is available at www.novell.com/documentation.


3.0 Components

This CD provides the following components: Novell eDirectory 8.7.1, NICI 2.6, netnlm32.nlm, TCP/IP, the ICE patch, iManager 2.0.1 snap-ins, JVM 1.4.1, PKTSCAN, and callmgr.nlm.


3.1 Novell eDirectory 8.7.1

Novell eDirectory 8.7.1TM is available as an executable file. Unzip the zip file, run the .exe and run NWCONFIG to upgrade a NetWare server to Novell eDirectory 8.7.1.

Novell eDirectory 8.7.1 is available in the folder \EDIR\eDir8.7.1 at the root of the CD.


3.2 NICI 2.6 (NetWare 5.1, NetWare 6)

Novell International Cryptography Infrastructure 2.6 is on the CD at nici\nwserver.

To install NICI 2.6:

  1. Create a local copy of NICI 2.6 on the server on which you are installing Novell BorderManager 3.8 (Unzip the nici_u0.exe on that server).

  2. Go to NWCONFIG > Product Options, and select Install A Product Not Listed, then enter the path where you have copied NICI 2.6.0.

  3. Restart the server after installation.


3.3 netnlm32.nlm

The minimum required version of netnlm32.nlm is 5.5.8 (dated June 4, 2003). This version is required to start NMASTM 2.2. If this version is not used, the server could abend while starting NMAS 2.2. If the minimum required version of this NLMTM is not present on your server, copy the netnlm32.nlm file from the NETNLM32 directory on the Companion CD to the sys:\system directory of your server.

The latest version of the NLM can be downloaded from support.novell.com. Download and extract nwlib5.exe on the server. The DSAPI directory will be available in the extracted files. Copy netnlm32.nlm from the DSAPI directory to the sys:\system directory.


3.4 TCP/IP (Only for VPN)

TCP/IP is available on the Companion CD and can be installed by running a perl script (tinstall.pl) on the server.


3.4.1 Installing TCPIP from CD:

  1. Insert and mount the Companion CD.

  2. At the server console enter

    perl NBM38CCD:\TCPIP\tinstall.pl [-f]

    Provide the -f option if you have null encryption versions of these nlms on the server.

  3. Re-start Server


3.4.2 Installing TCPIP from Web:

  1. Unzip Novell BorderManager 3.8 Companion CD on a drive that is accessible from your server.

  2. On the server console enter

    perl <Companion CD Path>\TCPIP\tinstall.pl [-f] [-p path]

    Provide the -f option if you have null encryption versions of these nlms on the server.

    Provide the -p option to give the name of the folder where the Companion CD is unzipped.

  3. Re-start Server


3.5 ICE Patch

The Novell Import Convert Export (ICE) utility for Novell eDirectory 8.6.2 is also included on the Companion CD. If you are using eDirectory 8.6.2 and extending the VPN schema using SSL, copy the files in the ICE patch folder to sys:system from the Companion CD.


3.6 JVM 1.4.1

Java Virtual Machine 1.4.1 for NetWare is required if you are installing iManager 2.0.1 on NetWare 6 SP3 machine. Copy JVM 1.4.1 form the Companion CD and run it in any directory on the desktop. Install iManager 2.0.1 after installing JVM 1.4.1.


3.7 Installing iManager 2.0.1 snap-ins

iManager is a Windows*-based configuration utility that helps you configure Virtual Private Networks and Filters on Novell BorderManager 3.8 machines. Do the following if Novell BorderManager 3.8 is running on any of these platforms:


3.7.1 NetWare 5.1 SP6

To configure Novell BorderManager 3.8 VPN and Filter services on NetWare 5.1 SP6:

  1. Install iManager 2.0.1 on a Windows 2000 or XP machine. To do so, run iManagerInstall.exe, located in IMANAGER20\installs\win on the Companion CD.

  2. Configure iManager 2.0.1 by following the on-screen instructions in the iManager install.

  3. Run the NBM_IM2_Snapin_Install.exe located in CL_INST\SNAPINS in the main product CD to install iManager snap-ins for Novell BorderManager 3.8.

  4. Launch iManager. To do so, specify the IP address of the Windows machine (https://<ip address>/nps/iManager.html). Authenticate and select VPN or Filtering from the left panel.


3.7.2 NetWare 6 SP3

To configure Novell BorderManager 3.8 VPN and Filter services on NetWare 6 with SP3 machine, do either of the following:

  1. Install iManager 2.0.1 on a Windows 2000 or XP machine as mentioned in 3.7.1 NetWare 5.1 SP6 , and run the NBM_IM2_Snapin_Install.exe.

Or

  1. Install eDirectory 8.7.1 and JVM 1.4.1 if you do not have them installed already. eDirectory 8.7.1 and JVM 1.4.1 are available in the Companion CD.

  2. Install iManager 2.0.1 on this machine. iManager 2.0.1 for NetWare 6 is available in the Companion CD under IMANAGER20\installs\NW6 folder.

  3. Install the Novell BorderManager 3.8 snap-ins manually. See 3.7.3 NetWare 6.5 with iManager 2.0 for details.


3.7.3 NetWare 6.5 with iManager 2.0

NetWare 6.5 comes with iManager 2.0 by default. To work with Novell BorderManager 3.8 either select the snap-ins during Novell BorderManager 3.8 installation, or install them later manually, or use a iManager 2.0.1 on a Windows machine.

To manually install the snap-ins:

  1. Launch iManager 2.0 on the browser. To do so, specify the IP address of the Windows machine (https://<ip address>/nps/iManager.html).

  2. Click the Configure tab on the top of the iManager interface and select iManager Configuration > Modules on the left panel.

  3. Click Install and select the VPN snap-in NPM file. The VPN snap-in is available in the VPN directory at the root of the main product CD. The name of the snap-in is vpn.npm.

    NOTE:  To install Firewall snap-ins follow the steps 1-3, but select bm.npm from the directory Border at the root of the main product CD.

  4. Re-start Tomcat on the NetWare 6.5 server.


3.8 NIS

NetWare 5.1 SP6 users might get a fatal error during the installation saying sp.db not found. This can happen because all the required install files were not properly extracted to the system, or because NIS files were not properly upgraded to Consolidated Support Pack 9 or above. In such a situation, replace the ni\lib directory of the server by the NIS\lib directory provided in the Companion CD and re-install. Remember to back up the existing ni\lib directory before replacing it. You might also need to restart the server.


3.9 PKTSCAN

The Packet Scan utility enables system administrators to capture sniffer-compatible protocol traces. It can be useful in troubleshooting network problems. Packet Scan is provided as a convenience, and is not supported by Novell Technical Services. See TID 10084291 for further information and examples.

  1. Create the following directory structure: sys:rdb\outbox

  2. Copy pktscan.nlm to your sys:system directory

  3. At the server console, type pktscan

  4. Press F2 to start the trace

  5. Duplicate the process you want to capture

  6. Press F2 to stop the trace

  7. Press F4 to save the trace. Give the captured file a name and press the Enter key

  8. Press Esc to exit.

Pktscan options include changing/editing capture profiles, capturing on multiple interfaces and saving the capture.


3.10 Call Connection Manager (callmgr.nlm)

This nlm can be used to find the status of IP/IPX WAN calls between VPN servers. To use this nlm, copy it to the sys:\system directory and load callmgr.nlm from the system console. Use the screen that pops-up to check the details of existing WAN calls.


3.11 Novell Nsure Audit

Novell Nsure Audit Evaluation Pack 1.0 is available at http://download.novell.com.

Select Novell Nsure Audit from Choose a Product, and select NetWare as the Platform. Download the pack and install it on your system.

This pack is not avialable on the Companion CD.


4.0 Legal Notices

Novell, Inc. makes no representations or warranties with respect to the contents or use of this documentation, and specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose. Further, Novell, Inc. reserves the right to revise this publication and to make changes to its content, at any time, without obligation to notify any person or entity of such revisions or changes.

Further, Novell, Inc. makes no representations or warranties with respect to any software, and specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose. Further, Novell, Inc. reserves the right to make changes to any and all parts of Novell software, at any time, without any obligation to notify any person or entity of such changes.

You may not export or re-export this product in violation of any applicable laws or regulations including, without limitation, U.S. export regulations or the laws of the country in which you reside.

Copyright © 1997-1999, 2001, 2002-2003 Novell, Inc. All rights reserved. No part of this publication may be reproduced, photocopied, stored on a retrieval system, or transmitted without the express written consent of the publisher.


BorderManager, NetWare, Novell are registered trademarks of Novell, Inc. in the United States and other countries.

eDirectory, NLM and NMAS are trademarks of Novell, Inc.

All third-party products are the property of their respective owners.