Revision as of 13:58, 10 April 2018

The Valt command line menu is an easy to use interface for configuring and managing many of the system level components of your Valt appliance or Valt virtual appliance.

The terminal window will automatically boot up to the command line menu. If you access the terminal and are presented with a shell prompt, type exit and press enter. You should be returned to the command line menu.

If accessing the appliance via SSH, you can start the command line menu by executing the following command:

sudo /usr/local/valt/bin/Menu

Note: The Valt command line menu is designed for use in configuration of the Valt appliance. If you perform any configuration outside the menu (such as setting an ip address), the menu may cease to function properly.

The menu map below details all of the options in the command line menu. Click on a section of the menu for more detailed information regarding that option.

Main Menu

The main menu displays the current IP configuration and serves as a central navigation point for the command line menu.

Network Configuration

The network menu contains all options related to network configuration. From this menu you can display the current network configuration, set IP addresses, as well as configure VLANs and NIC teaming.

Display Network Boot Settings

This menu option will display the current boot configuration. This configuration may or may not be currently active. This configuration will become active the next time the Valt appliance is rebooted. Additionally, this options displays the current client access IP address. Each Valt implementation can only have a single client access IP address. This is the ip address that you will navigate to in a web browser to access the Valt application.

Set IPs

This menu option will allow you to configure a static IP address or configure an interface for DHCP.

Select your interface from the options listed.
Note: If you want to configure a teamed interface or a vlan, you must first configure vlans or teaming, then these interfaces will be displayed as options to set an IP address on.
Select Static or DHCP.

Static

Enter an IP address for the interface in the format ###.###.###.###
Enter a subnet mask for the interface in the format ###.###.###.###
]
You will be asked if you want to enter a gateway, enter y or n.
Note: You should only enter a gateway for one interface. Defining more than one gateway may cause communications problems. Additionally, you do not need to define a gateway if the appliance does not need to communicate with devices (clients, cameras, internet access, etc) on another subnet.
If you answered yes, enter the gateway address for the interface in the format ###.###.###.###
You will be asked if you want to enter dns servers, enter y or n.
Note: You only need to enter DNS servers on one interface. Entering DNS servers on multiple interfaces will not cause any problems, but it also will not provide any benefit. Additionally you do not need to provide DNS servers on any interface if the appliance will not have any internet access.
If you answered yes, enter two dns servers.
If additional DNS servers are required, please contact Valt technical support
Review the information you entered carefully. If everything is correct, enter y to continue. Otherwise enter n and you will be prompted to enter the configuration again.
You will be asked if this interface will be utilized for client access, enter either Y or N.
Each Valt appliance must have one and only one interface designated for clients to access the appliance. The IP address of this interface is the address you will type into your web browser to access the Valt application. By designating an interface for client access, the menu will automatically configure the Valt software to listen on the IP address assigned to that interface. The changes will not take effect until the Valt appliance has been rebooted.

DHCP

If you want to utilize DHCP to configure the IP address of the Valt appliance, you must set a DHCP reservation for the server.

After selecting DHCP, you will be asked if this interface will be utilized for client access, enter either Y or N.
Each Valt appliance must have one and only one interface designated for clients to access the appliance. The IP address of this interface is the address you will type into your web browser to access the Valt application. By designating an interface for client access, the menu will automatically configure the Valt software to listen on the IP address assigned to that interface. The changes will not take effect until the Valt appliance has been rebooted.
Enter the IP Address of the interface when prompted.
If you have opted to configure the Valt appliance via DHCP, you will need to provide the IP address that has been reserved for the appliance. That IP address is utilized by the Valt software to listen for client access.

IP Address changes will not take effect until the server has been rebooted.

Configure Teaming

The teaming menu is used to team or bond together multiple network interfaces. In order to create a team, you must have at least two network interfaces. Additionally these interfaces must not have any vlans active. If you want to utilize vlans on a teamed interface, first create the team and then add a vlan to the teamed interface.

Display Current Teaming Status

This menu option will display current teaming status. If there is currently a team created, the members will be listed.

Create a new Team

Select this menu option to create a new team. Valt currently only supports one team. This is typically sufficient as Valt physical appliances ship with two network interfaces. If you require more than one team, please contact Valt technical support for assistance.

Select the first interface to include in the team from the menu. This will be the primary interface in an active-standby configuration.
Select the second interface to include in the team from the menu. This will be the secondary interface in an active-standby configuration. Notice the first interface no longer appears as an option.
Select a teaming mode from the available options.
- balance-rr
  This mode utilizes both NIC simultaneously for additional throughput. The NICs must be connected to the same switch and it must be configured for teaming.
- active-backup
  This mode utilizes only one NIC at a time. The other NIC only becomes active if the primary NIC fails. This does not require any switch configuration and the NICs can each be connected to separate switches for redundancy.

The team will now be created as interface bond0. This interface will be set to DHCP by default and will become active on the next reboot. Make sure to configure the IP address on bond0 prior to rebooting.

Delete Existing Team

Select this menu option to disable teaming. If you have teaming active, this must be done before you can add a vlan or assign an IP address to one of the teamed NICs.

Configure VLANs

The VLAN menu is used to create VLANs on an interface. VLANs can only be added to unteamed interfaces. You can add a vlan to a team, but not to the individual interfaces included in the team. If you need to add a VLAN to a teamed interface, you must first break the team.

Display Current VLANS

This menu option will display all VLANs currently configured.

Create new VLAN

This menu option will allow you to create additional VLANs.

Select an interface from the list provided.
Enter a VLAN ID
The vlan will now be created on that interface and will now be available to assign an IP address.

Delete Existing VLAN

This menu option will allow you to delete existing VLANs. Before an interface can be assigned to a team, you must first delete all VLANs associated with it.

SSL

The SSL menu is used for generating Certificate Signing Requests or installing certificates.

Generate CSR

This menu option will allow you to generate a CSR to be signed by an internal or external Certificate Authority.

Enter a name for the private key file.
Enter a name for the CSR.
Enter your two letter country code.
Enter your state or province name.
Enter your locality name.
Enter your organization name.
Enter your organizational unit name.
Enter the fully qualified domain name of your Valt appliance.
Note: This MUST match the dns entry for your Valt appliance or when clients connect they will receive a certificate warning.
Enter your email address.
When prompted to enter a challenge password, just hit enter.
When prompted to enter an optional company name, just hit enter.
The location of your private key, public key, and CSR will be displayed. Make a note of these locations.
Retrieve the public key and CSR from the Valt appliance by connecting to it via sftp. Provide the CSR to your cerfiticate authority, they may also request the public key. Once they have processed the request, your CA should provide you with a certificate.

Enable SSL

This menu option will enable SSL. You can choose to install either a self signed certificate or install a certificate signed by a CA.

Installing a self signed certificate is no less secure than using a CA, however a self signed certificate will cause a warning message in most browsers, whereas a certificate signed by a trusted CA will not.

Install Self Signed Cert

Enter your two letter country code.
Enter your state or province name.
Enter your locality name.
Enter your organization name.
Enter your organizational unit name.
Enter the fully qualified domain name of your Valt appliance.
Note: This MUST match the dns entry for your Valt appliance or when clients connect they will receive a certificate warning.
Enter your email address.
The system will now generate an install a self signed certificate.

Install SSL Cert signed by a CA

Upload the new certificate file to the Valt appliance prior to selecting this menu option.
Enter the path to the private key file.
You should have noted this path when you generated the CSR
Enter the path to the SSL Certificate.
This should be the location and file name where you uploaded the certificate to the Valt appliance.
Enter the path to the intermediate certificate.
This should have been provided by your CA. If they did not provide it, just enter the path to the SSL certificate again. If they did not provide a intermediate certificate, you may receive a warning when accessing the Valt application from some browsers.
The certificate will now be installed.

Install Cert from Let's Encrypt with http (Public Facing Servers Only)

In order to use this feature your Valt server must be accessible from the internet. If the server is not accessible from the internet, please select another method for obtaining a certificate.

WARNING: Allowing your Valt server to be accessed from the internet has security implications that should be considered prior to exposing the server to the internet. Please contact IVS support prior to exposing your Valt server to the internet. Do not expose your Valt server to the internet purely for the purpose of obtaining an SSL certificate from Let's Encrypt. As an alternative you can obtain a certificate from another Certificate Authority or use the DNS method to validate the request for Let's Encrypt.

Install Cert from Let's Encrypt with DNS (Internal Valt Servers)

In order to use this feature you will need to be able to add a txt record to the public dns server for your domain. This server is most likely maintained by your ISP or the web hosting provider. If you cannot add this record, please select another method for obtaining a certificate.

Renew Let's Encrypt Certs

Disable SSL

This menu option will disable SSL. This must be done prior to installing a new certificate.

Valt Configuration

The Valt configuration menu is used to configure the Valt appliance, by changing it's mode or adding a camera license.

Install License

Camera licenses are provided by IVS. You should have received a license along with your order. If you did not, please contact IVS Support.

When prompted, enter the license. It is strongly recommended that you copy and paste the license to avoid any typos.

Configure as Media Server

This option will configure the Valt appliance as a media server. Media servers are used either for additional storage or to provide local storage and streaming at a remote facility. Media servers must work in conjunction with a Valt application server.

WARNING: If your application server utilizes SSL, you MUST install the same certificate and key on the media server prior to enabling it as a media server.

You will be prompted to enter the IP address for the web server. This should be the IP address of the primary Valt application server, NOT the Valt media server you are currently configuring.
You will be prompted to confirm that the information you provided is correct. If it is, enter y to continue.
The Valt appliance will now reconfigure as a media server.

You must now add this appliance as a media server through the web interface on the application server.

Configure as Application Server

This option will cause the Valt appliance to reconfigure itself as an application/web server.

Service Configuration

The services menu allows you to restart various services associated with the Valt application.

Restart Wowza Streaming Engine

The Wowza Streaming Engine acts as an interface for both the cameras and the clients. It receives video streams from the cameras and generates video streams for the clients. If one of your cameras is not connecting, or you are experiencing other video issues, restarting the Wowza Streaming Engine will typically resolve those issues.

Restart Valt Controls

The Valt Controls service handles this embedded flash controls in the Valt application.

Restart Web Server

The web server handles to presentation of the html pages for the Valt application to the client.

System

Restart Valt Server

Reboot the Valt Appliance.

Shutdown Valt Server

Shutdown the Valt Appliance.

Shell

This option will allow you to exit to the shell.

@@ Line 160: / Line 160: @@
 This menu option will enable SSL. You can choose to install either a self signed certificate or install a certificate signed by a CA.
-Installing a self signed certificate is no less secure than using a CA, however a self signed certificate will cause a warning message in most browsers, whereas a certificate signed by a trust CA will not.
+Installing a self signed certificate is no less secure than using a CA, however a self signed certificate will cause a warning message in most browsers, whereas a certificate signed by a trusted CA will not.
-==== Install Self Signed Certificate ====
+==== Install Self Signed Cert ====
 #: [[File:Menu34.png]]
 # Enter your two letter country code.
@@ Line 180: / Line 180: @@
 # The system will now generate an install a self signed certificate.
-==== Install SSL Certificate signed by a CA ====
+==== Install SSL Cert signed by a CA ====
 # Upload the new certificate file to the Valt appliance prior to selecting this menu option.
 #: [[File:Menu41.png]]
@@ Line 192: / Line 192: @@
 #: ''This should have been provided by your CA. If they did not provide it, just enter the path to the SSL certificate again. If they did not provide a intermediate certificate, you may receive a warning when accessing the Valt application from some browsers.''
 # The certificate will now be installed.
+=== Install Cert from Let's Encrypt with http (Public Facing Servers Only) ===
+In order to use this feature your Valt server must be accessible from the internet. If the server is not accessible from the internet, please select another method for obtaining a certificate.
+:'''WARNING: Allowing your Valt server to be accessed from the internet has security implications that should be considered prior to exposing the server to the internet. Please contact IVS support prior to exposing your Valt server to the internet. Do not expose your Valt server to the internet purely for the purpose of obtaining an SSL certificate from Let's Encrypt. As an alternative you can obtain a certificate from another Certificate Authority or use the DNS method to validate the request for Let's Encrypt.'''
+=== Install Cert from Let's Encrypt with DNS (Internal Valt Servers) ===
+In order to use this feature you will need to be able to add a txt record to the public dns server for your domain. This server is most likely maintained by your ISP or the web hosting provider. If you cannot add this record, please select another method for obtaining a certificate.
+=== Renew Let's Encrypt Certs ===
 === Disable SSL ===

Difference between revisions of "Template:Deprecated Page - Command Line Menu"