Network Management

last person joined: yesterday 

Keep an informative eye on your network with HPE Aruba Networking network management solutions
Back to discussions
Expand all | Collapse all

Airwave on RHEL?

This thread has been viewed 1 times

  • 1.  Airwave on RHEL?

    Posted Feb 21, 2014 03:53 PM

    Hi,

     

    Can anyone tell me if there are plans to run Airwave on RHEL? This way perhaps Aruba could provide a repository for regular Airwave updates and individuals can manage the underlying OS.

     

    Thanks,

    Mike



  • 2.  RE: Airwave on RHEL?

    EMPLOYEE
    Posted Feb 21, 2014 04:55 PM

    Today - Airwave is only available as an ISO and OVF image which includes CentOS.  



  • 3.  RE: Airwave on RHEL?

    Posted Feb 22, 2014 08:50 AM
    @SethFiermonti wrote:

    Today - Airwave is only available as an ISO and OVF image which includes CentOS.  

    Thanks Seth,

     

    We're currently Airwave 7.6.4. Do you know if the latest version of Airwave includes an updated version of ntpd that includesa fix for the latest NTP  amplification attacks? We plugged the vulnerability by adding 'disable monitor' to ntp.conf in CentOS but I understand a newer version of ntpd would also resolve the issue.

     

    Can you tell me what version of ntpd is included in the latest CentOS distribution?

     

    https://isc.sans.org/forums/diary/NTP+reflection+attack/17300

     

    Thanks,

    Mike



  • 4.  RE: Airwave on RHEL?

    EMPLOYEE
    Posted Feb 22, 2014 08:53 AM
    Mike you can run "yum update ntp" to update NTP.


  • 5.  RE: Airwave on RHEL?

    Posted Feb 22, 2014 09:02 AM

    Thanks Tim. Just updated via yum update. NTP version is now "4.2.2p1-17.el5.centos"

     

    Mike



  • 6.  RE: Airwave on RHEL?

    Posted Feb 22, 2014 09:06 AM

    For those who are interested here is my config in ntp.conf. Everything except the server commandwas added by me per suggestion from Symantec on dealing with the vulnerability.

     

    --------------------------------------------------------------
    [root@airwave3 ~]# more /etc/ntp.conf
    server <your ntp server IP>

    #disable monitoring
    disable monitor

    # by default act only as a basic NTP client
    restrict -4 default nomodify nopeer noquery notrap
    restrict -6 default nomodify nopeer noquery notrap
    --------------------------------------------------------------