Installation guide

Prerequisites and Deployment Overview
Acano solution: Single combined Acano server Deployment Guide R1.6 76-1054-01-H
Page 8
2 Prerequisites and Deployment Overview
2.1 Prerequisites
The list of items you need prior to installing and configuring the Acano solution in a typical
customer environment is given below; some of these items can be configured beforehand:
2.1.1 DNS configuration
The Acano solution needs a number of DNS SRV and A records. See this Appendix for a full list
but specific records are also mentioned elsewhere.
2.1.2 Security certificates
You will need to generate and install X.509 certificates and keys for Acano services which use
TLS: Call Bridge, Web Admin Interface (the Call Bridge’s interface), Web Bridge and the XMPP
server.
The new Certificates Guidelines for single combined deployments contains both background
information on certificates and instructions, including how to generate self-signed certificates
using the Acano solution’s MMP commands. These certificates are useful for testing your
configuration in the lab. However, in a production environment we strongly recommend using
certificates signed by a Certificate Authority (CA).
Instructions that were previously in this guide concerning certificates have been removed and
replaced by a single step referencing the new guide.
Note: If you self-sign a certificate, you may see a warning message when you use it that the
service is untrusted. To avoid these messages re-issue the certificate and have it signed by a
trusted CA: this can be an internal CA unless you want public access to this component.
2.1.3 Firewall configuration
See the appendix on Ports required for a summary of the firewall changes you may need to
make, and the section on Firewall rules
2.1.4 Remote Syslog server
Configure the Acano solution to use a remote Syslog server to store the log files because they
contain more detailed logging than is available on an Acano server’s own internal log page.
(These details are valuable when troubleshooting).
Note: The Syslog server uses TCP not UDP.
Follow the instructions below to define a Syslog server.
1. SSH into the MMP and log in.
2. Enter the following command, syslog server add <server address> [port]
Examples: