By default, the installer does not provide any license, user needs to contact AVIZ support Team.
ONESv3.1.1 support SSL certificate integration
User can choose YES if the User wants to integrate their own SSL certificate
ONES Containers not found. Initiating a fresh installation...
Installing prerequisites for ONES application
pip is installed, so skipping it
containerd package is installed, so skipping it
docker packages are installed, so skipping it
docker-compose is installed, so skipping it
ssh package is installed, so skipping it
ONES is getting installed for the first time, Please follow the prompts carefully and select the appropriate options as instructed
....................
Installing ONES application...
Do you want to install domain SSL certificate(if not, self-signed certificate will be used)? [y/n]: y
Enter the path to the private key file: /home/aviz/server.pem
Enter the path to the certificate file: /home/aviz/server.crt.pem
Note* Replace the Private key & certificate path to correct location
Choose No, if the user wants to use a self-signed certificate that is integrated into ONES package
ONES Containers not found. Initiating a fresh installation...
Installing prerequisites for ONES application
pip is installed, so skipping it
containerd package is installed, so skipping it
docker packages are installed, so skipping it
docker-compose is installed, so skipping it
ssh package is installed, so skipping it
ONES is getting installed for the first time, Please follow the prompts carefully and select the appropriate options as instructed
....................
Installing ONES application...
Do you want to install domain SSL certificate(if not, self-signed certificate will be used)? [y/n]: n
Using self signed certificates...
Enable or disable the ONE DL feature
User can choose YES if the User wants to enable ONES DataLake feature.
Do you want to enable ONE-DL feature? [y/n]: y
Since ONE-DL configuration has been chosen, please provide the information below...
Enter EC2 ONE-DL Backend Public DNS Endpoint: <Path>
User can choose No if need not to enable ONES DataLake feature
Do you want to enable ONE-DL feature? [y/n]: n
The installation allows a user to enable DB backup
Users can choose the local or remote location to backup the database
By default, the application creates a database backup every 86400 seconds(1 day), but the user can modify it as per the requirement
Local and Remote Backup
By-default application creates 1 backup for local and for remote,
It has a range of 1 to 3 and once it will add one more it will remove the first copy of the database,
User can modify the number of backup files at the time of installation
By-default ONES create ./backup directory to maintain local database
Local backup:
Do you want to enable DB backup feature? [y/n]: y
Where do you want to store the backups? [local/remote]: local
Enter the backup directory: ./backups
Enter the number of backups (between 1 and 3) to retain (Older backups will be deleted): 3
Enter the backup interval in seconds (3600 seconds or higher): 3600
Remote backup:
Do you want to enable DB backup feature? [y/n]: y
Where do you want to store the backups? [local/remote]: remote #remote keyword trigger remote database on server
Please make sure the remote server is reachable via SSH
Enter the remote machine IP: 10.0.0.1
Enter the remote machine username: admin
Enter the remote machine password:
Enter the backup directory: ~/backups #Enter the remote server directory in which user wants to take backup. Ensure this backup directory has full permission
Backup is being done in 10.0.0.1 at ~/backups
Enter the number of backups (between 1 and 100) to retain (Older backups will be deleted): 5 #Enter the number of backup user wants to create
Enter the backup interval in seconds (3600 seconds or higher): 86400 #Enter the value in seconds to take a backup
ONESv3.1.1 support certificate-based authentication between ONES App and devices for GNMI and Auto-discovery
For agent auto-discovery agent will act as a client and the collector as a server.
For normal gnmi communication, the agent will act as a server and the collector as a client. Need certificates based on this.
No:
Do you want to enable certificate based authentication between ONES controller and devices? [y/n]: n
Yes:
Do you want to enable certificate based authentication between ONES controller and devices? [y/n]: y
Enter the path to the ca-cert.pem file: ca-cert.pem
Enter the path to the server-cert.pem file: server-cert.pem
Enter the path to the server-key.pem file: server-key.pem
Enter the path to the client-cert.pem file: client-cert.pem
Enter the path to the client-key.pem file: client-key.pem
Proceeding with certificates for Agent Auto Registration
Enter the path to the ca-cert-reg.pem file: ca-cert-reg.pem
Enter the path to the server-cert.pem file: server-cert.pem
Enter the path to the server-key.pem file: server-key.pem
Enter the path to the client-cert.pem file: client-cert.pem
Enter the path to the client-key.pem file: client-key.pem
The user needs to provide the certificate path and replace the key name with the path of the certificate to be used here
ONES Application support IP-based Access & FQDN Access
Enter the ONES App URL: https:// #Replace the input with IP or FQDN
IP based
Enter the ONES App URL for Rule-Engine Alert [https://<host-ip or domain>]: https://192.168.1.1
FQDN based
Enter the ONES App URL for Rule-Engine Alert [https://<host-ip or domain>]: https://ones.aviznetworks.com
ONESv3.1.1 support password-based(MD5) authentication between ONES App and devices for GNMI and Auto-discovery
User can choose yes if need password based authentication
Do you want to enable agent authentication ? [y/n]: y
Enter the ones-agent username: admin
Enter the ones-agent password: YourPaSsWoRd
User can choose no if there no requirement of authentication
Do you want to enable agent authentication ? [y/n]: n
Password Guidline:
Atleast 8 character
Atleast one Uppercase
Atleast one Smaller case ,
Atleast one numeric
Atleast one Special character
allowed special characters are @#$^*
Users cannot simultaneously select both certificate-based authentication and password-based authentication between the agent and the ONES application. They must choose one authentication method at a time for securing communication between the agent and the ONES app if required.
ONESv3.1.1 support AI Assistance Feature:
User can choose yes if need to enable
Do you want to enable AI Assistant feature? [y/n]: y
User can choose no if user do not want to add this feature
Do you want to enable AI Assistant feature? [y/n]: n
Installation begins
ONES Containers not found. Initiating a fresh installation...
Installing prerequisites for ONES application
pip is installed, so skipping it
containerd package is installed, so skipping it
docker packages are installed, so skipping it
docker-compose is installed, so skipping it
ssh package is installed, so skipping it
ONES is getting installed for the first time, Please follow the prompts carefully and select the appropriate options as instructed
....................
Installing ONES application...
Do you want to install domain SSL certificate(if not, self-signed certificate will be used)? [y/n]: n
Using self signed certificates...
Do you want to enable ONE-DL feature? [y/n]: n
Do you want to enable DB backup feature? [y/n]: n
Do you want to enable certificate based authentication between ONES controller and devices? [y/n]: n
Enter the ONES App URL for Rule-Engine Alert [https://<host-ip or domain>]: https://demo.aviznetworks.com
Do you want to enable agent authentication ? [y/n]: n
Do you want to enable AI Assistant feature? [y/n]: n
AI Assistant feature not enabled. Setting to false.
Setting up the environment and loading essential dockers...
Loading images:
- avizdock/ones-collector:v3.1.1... Done
- avizdock/timescaledb:pg16... Done
- avizdock/ones-ui:v3.1.1... Done
- avizdock/pty-server:v3.1.1... Done
- avizdock/ones-gateway:v3.1.1... Done
- avizdock/ones-fm:v3.1.1... Done
- avizdock/postgres:14... Done
- avizdock/docker:v3.1.1... Done
- avizdock/ones-db-backup:v3.1.1... Done
- avizdock/zookeeper:v3.1.1... Done
- avizdock/kafka:v3.1.1... Done
- avizdock/schemaregistry:v3.1.1... Done
- avizdock/kafka-connect:v3.1.1... Done
- avizdock/ksqldb-server:v3.1.1... Done
- avizdock/ones-stream-processor:v3.1.1... Done
- avizdock/apiserver:v3.1.1... Done
- avizdock/ones-rule-service:v3.1.1... Done
- avizdock/ai-assistant:v3.1.0_beta... Done
Creating volumes:
- ones-collector-db-data... Created.
- ones-ui-data... Created.
- ones-fm-db-data... Created.
- ones-fm-data... Created.
- ones-rule-db-data... Created.
- ones-configdiff-data... Created.
....
- Total images loaded: 18
- Total failed loads: 0
- Volumes created: 6
- ones-network... Created.
Cleaning up containers...
Cleaning containers: [100%] [#############################.]
All containers cleaned up successfully.
Bringing up ONES app containers
Bringing up ONES-collector-db container in no recreate mode and ONES-fm-db
Container ones-collector-db Creating
Container ones-collector-db Created
Container ones-collector-db Starting
Container ones-collector-db Started
Container ones-fm-db Creating
Container ones-rule-service-db Creating
Container ones-rule-service-db Created
Container ones-fm-db Created
Container ones-rule-service-db Starting
Container ones-fm-db Starting
Container ones-rule-service-db Started
Container ones-fm-db Started
Container zookeeper Creating
Container zookeeper Created
Container zookeeper Starting
Container zookeeper Started
NAME COMMAND SERVICE STATUS PORTS
ones-collector-db "/docker-entrypoint.…" collector-db running 8008/tcp, 0.0.0.0:5432->5432/tcp, :::5432->5432/tcp, 8081/tcp
ones-fm-db "docker-entrypoint.s…" fm-db running 0.0.0.0:2345->5432/tcp, :::2345->5432/tcp
ones-rule-service-db "docker-entrypoint.s…" rule-service-db running 0.0.0.0:2456->5432/tcp, :::2456->5432/tcp
zookeeper "/etc/confluent/dock…" zookeeper running 2888/tcp, 0.0.0.0:2181->2181/tcp, :::2181->2181/tcp, 3888/tcp
please wait for collector-db, rule-service-db and fm-db to initialize
........................................................................................................................Container zookeeper Running
Container broker Creating
Container broker Created
Container broker Starting
Container broker Started
ones-collector-db
................................................................................................................................................................................................................................................Container zookeeper Running
Container broker Running
Container ksqldb-server Creating
Container schema-registry Creating
Container schema-registry Created
Container kafka-connect Creating
Container ksqldb-server Created
Container kafka-connect Created
Container ksqldb-server Starting
Container schema-registry Starting
Container schema-registry Started
Container kafka-connect Starting
Container ksqldb-server Started
Container kafka-connect Started
............................................................
Container ones-gateway Creating
Container zookeeper Running
Container broker Running
Container ones-gateway Created
Container ones-collector Creating
Container ones-collector Created
Container ones-gateway Starting
Container ones-gateway Started
Container ones-collector Starting
Container ones-collector Started
........................................................................................................................Container ones-pty-server Creating
Container ones-ui Creating
Container api-server Creating
Container ones-rule-service Creating
Container docker Creating
Container ones-rule-service-db Running
Container ones-gateway Running
Container ones-fm-db Running
Container ones-collector-db Running
Container ones-fm Creating
Container zookeeper Running
Container broker Running
Container ones-collector Running
Container ksqldb-server Running
Container stream-processor Creating
Container schema-registry Running
Container kafka-connect Running
Container stream-processor Created
Container api-server Created
Container ones-rule-service Created
Container ones-ui Created
Container docker Created
Container ones-pty-server Created
Container ones-fm Created
Container ones-ui Starting
Container api-server Starting
Container ones-rule-service Starting
Container ones-pty-server Starting
Container docker Starting
Container ones-fm Starting
Container stream-processor Starting
Container api-server Started
Container ones-rule-service Started
Container docker Started
Container ones-pty-server Started
Container ones-fm Started
Container stream-processor Started
Container ones-ui Started
NAME COMMAND SERVICE STATUS PORTS
api-server "java -jar /app/apis…" api-server running 0.0.0.0:8080->8080/tcp, :::8080->8080/tcp
broker "/etc/confluent/dock…" broker running 0.0.0.0:9092->9092/tcp, :::9092->9092/tcp, 0.0.0.0:9101->9101/tcp, :::9101->9101/tcp, 0.0.0.0:29092->29092/tcp, :::29092->29092/tcp
docker "python3 app.py" docker running
kafka-connect "/etc/confluent/dock…" kafka-connect running (healthy) 0.0.0.0:8083->8083/tcp, :::8083->8083/tcp, 9092/tcp
ksqldb-server "/etc/confluent/dock…" ksqldb-server running 0.0.0.0:8088->8088/tcp, :::8088->8088/tcp
ones-collector "java -jar -XX:MaxGC…" collector running 8093/tcp, 0.0.0.0:50053->50053/tcp, :::50053->50053/tcp
ones-collector-db "/docker-entrypoint.…" collector-db running 8008/tcp, 0.0.0.0:5432->5432/tcp, :::5432->5432/tcp, 8081/tcp
ones-fm "/bin/sh -c '{ gunic…" fm running 0.0.0.0:8787->8080/tcp, :::8787->8080/tcp
ones-fm-db "docker-entrypoint.s…" fm-db running 0.0.0.0:2345->5432/tcp, :::2345->5432/tcp
ones-gateway "./gnmi-gateway -Tar…" gateway running 0.0.0.0:9339->9339/tcp, :::9339->9339/tcp
ones-pty-server "docker-entrypoint.s…" pty-server running 0.0.0.0:8885->8885/tcp, :::8885->8885/tcp
ones-rule-service "java -jar /app/rule…" rule-service running 8080/tcp
ones-rule-service-db "docker-entrypoint.s…" rule-service-db running 0.0.0.0:2456->5432/tcp, :::2456->5432/tcp
ones-ui "docker-entrypoint.s…" ui running 0.0.0.0:443->443/tcp, :::443->443/tcp, 3002/tcp
schema-registry "/etc/confluent/dock…" schema-registry running 0.0.0.0:8081->8081/tcp, :::8081->8081/tcp
stream-processor "java -jar /app/stre…" stream-processor running 8080/tcp
zookeeper "/etc/confluent/dock…" zookeeper running 2888/tcp, 0.0.0.0:2181->2181/tcp, :::2181->2181/tcp, 3888/tcp
Completing ONES Installation...
............................................................
ONES application installed successfully!
....................
Access the ONES application at https://demo.aviznetworks.com
Log file created at: /home/aviz/ONES-3.1.1/installation.logs
Access ONES Application Web GUI from a supported browser using https://<host-ip/FQDN>
Activation:
For a Trail license, the user needs to reach out to AVIZ Support
For Activation, the user can choose Activate License if the user has an activation key of any subscription
Users can activate the ONES Application first time just after installation(first-time ONES application shows the page to activate the license
After evaluating ONES application, the user will have the option to activate the license anytime from the License Page
1. Activate License
2. Activate Key
Use Default credentials as below;
Username: superadmin
Password : Admin@123
Update/Change your password on the first login
Password should contain:-
Minimum Password Length - 8 characters
Maximum Password Length - 24 characters
Character Support - Alpha Numeric
Special Characters - (# @ $ ! & % only)
Character Rule - At least one Upper Case and one special character
Login To ONES
After Resetting the password use new credentials to login
You will see the default Monitor Page with a Topology view
1. Upgrade License
After Trail use, if the user wishes to upgrade new Subscription-based license, so user can navigate to the below page.
Account >> License >> Upgrade License
Click Upgrade License & Enter the subscription-based key
If Switches Deployment is large so user needs to enable the large config inside Database Config File
Copy the postgresql.config file outside to do changes
edit the file and uncomment few lines to activate Large config and save the changes
vi dbconfig.conf
Uncomment the below lines in the above file is the change
#------------------------------------------------------------------------------
# LARGE CONFIGURATION - START
#------------------------------------------------------------------------------
timescaledb.max_background_workers = 16 # Increased for more concurrent background processes
# MEMORY SETTINGS (LARGE)
shared_buffers = 8GB # Adjust based on your available system memory
work_mem = 16MB # Set based on your workload; adjust as needed
maintenance_work_mem = 1GB # Important for bulk operations and autovacuum
effective_cache_size = 16GB # Estimate the cache available for PostgreSQL (usually 50-75% of system memory)
# WAL SETTINGS (LARGE)
wal_level = logical # Recommended for logical replication and high-volume streaming
max_wal_size = 8GB # Increase to accommodate more WAL data during peak operations
checkpoint_timeout = 15min # Spread checkpoint operations for better performance
checkpoint_completion_target = 0.9 # Further spreads the checkpoint process
wal_compression = on # Reduces WAL size, useful in high-traffic scenarios
# CONNECTION AND PROCESS SETTINGS (LARGE)
max_worker_processes = 16 # Increased to allow more background workers
max_parallel_workers = 16 # More parallel workers for better throughput
max_parallel_workers_per_gather = 4 # Adjust based on the complexity of your queries
# AUTOVACUUM SETTINGS (LARGE)
autovacuum_max_workers = 10 # Handle larger tables or high data churn more effectively
autovacuum_naptime = 10s # Increase the frequency of autovacuuming
autovacuum_vacuum_cost_limit = 5000 # Handle vacuum operations more aggressively
autovacuum_vacuum_scale_factor = 0.01 # Trigger autovacuum sooner on large tables
# PERFORMANCE SETTINGS (LARGE)
effective_io_concurrency = 500 # For SSDs, this can be set high to optimize I/O
synchronous_commit = off # Improves throughput at the cost of potential data loss in a crash
random_page_cost = 1.1 # Optimized for SSDs
seq_page_cost = 1.0 # Optimized for SSDs
jit = on # Enable JIT compilation for performance boosts in complex queries
#------------------------------------------------------------------------------
# LARGE CONFIGURATION - END
#------------------------------------------------------------------------------
