Lotus ® Foundations Start Administration Guide Note Before using this information and the product it supports, read the information in “Notices” on page 157. This edition applies to version 1.1, release 1 of IBM Lotus Foundations (product number 5724-V16) and to all subsequent releases and modifications until otherwise indicated in new editions. © Copyright International Business Machines Corporation 2009. US Government Users Restricted Rights – Use, duplication or disclosure restricted by GSA ADP Schedule Contract with IBM Corp. Contents Lotus Foundations Start Administration NT domain services ...........41 Guide ................1 Configuring Lotus Foundations Domain Settings 41 Introduction ..............1 What is a domain controller? .......42 First-time Lotus Foundations setup on a Lotus Configuring the domain controller......42 Foundations Appliance ...........1 What is a Windows NT domain member? . 43 Connecting to the Internet - Ethernet ports 1 and 2 1 Configuring the domain member ......43 Connecting an external dial-up modem ....2 Connecting the active directory member ....43 First-time Lotus Foundations setup on third-party Verifying server connectivity .......44 hardware ...............3 Monitoring machine accounts .......44 Connecting to WebConfig ..........3 Importing domain users and groups .....45 What is WebConfig? ...........3 File mounting/drive mapping .......46 Secure WebConfig ...........4 Joining Windows systems to a domain ....46 Configuring TCP/IP ...........4 Logon scripts .............48 Creating an administrator account ......6 Automated drive mapping ........48 Software activation keys .........8 Workstation administrative rights ......48 System status screen ...........9 Lotus Foundations scalable services ......48 Notices box .............13 Lotus Foundations scalable services terminology 49 System status details ..........13 Features of Lotus Foundations scalable services 49 Installing the Lotus Foundations Start add-on . 14 Lotus Foundations scalable services regions . 51 Lotus Foundations Start introduction .....14 Setting up a scalable services region .....53 Lotus Foundations Start installation .....15 Lotus Foundations scalable services frequently Execution control list (ECL) alerts ......15 asked questions ............59 Configuring Lotus Foundations........16 Print service ..............59 Proceeding with configuration .......16 Lotus Foundation print services ......59 Configuring General Network Settings ....16 Configuring local print services.......60 Configuring advanced DHCP settings ....18 Configuring your workstation .......60 Configuring advanced network settings ....19 Other network printing .........60 Network devices ...........19 Performing printing queue tasks ......61 Network routes ............20 Email services .............61 Network configuration scenarios ......21 Configuring email services ........61 Configuring your internet connection.....23 Features handled by IBM Lotus Domino....62 User licenses ..............25 Email DNS configuration .........68 User licensing requirements ........25 Email client configuration ........69 License information...........25 Using Lotus Domino email clients ......71 DoubleVision ..............26 Installing the Lotus Domino Access for Microsoft What is DoubleVision? .........26 Outlook (DAMO) add-on .........71 What DoubleVision offers ........26 Web services ..............73 Modem connections ..........27 Web server .............73 How internet failover and DoubleVision work. 27 Master Web server ...........73 User & Team management .........29 Virtual Web servers...........76 Service integration ...........29 Hosting multiple Web sites ........78 User accounts ............30 Secure Web services ..........79 Modifying user email settings .......33 SSL certificate ............79 Team accounts ............33 Web caching .............80 Password policy ............35 Web filtering ..............80 File services ..............36 Web and content filtering.........80 File sharing services ..........36 Enabling the Web filter .........80 Configuring file services .........37 Providing full internet access .......80 Active server connections.........38 Port exemptions ............81 Access control lists ...........38 Adding permitted Websites ........81 Setting permissions in Windows ......39 Adding denied Websites .........81 Disk quotas ..............40 Accepting access requests.........81 Setting default disk quota values ......40 Denying access requests .........82 Setting individual user disk quotas .....40 List management ...........82 Quota limit .............41 Email reporting ............83 FTP services ..............83 © Copyright IBM Corp. 2009 iii FTP Server .............83 Recovering from disk failure .......113 Anonymous FTP Server .........83 Hard disk failure ...........113 Enabling the FTP server .........83 Installing a new hard drive ........114 Enabling FTP access for a specific team or user 84 Backup & Restore ............114 User vs. Team FTP access.........84 Intelligent disk backup (idb) .......114 Software update .............85 Configuring idb ...........115 Upgrading Lotus Foundations .......85 idb backup .............119 Switching languages ..........86 idb restoration ............121 Virtual private networks ..........86 Lotus Domino restoration procedures ....124 Private networks ...........86 idb hot swap ............126 Virtual private networks .........87 MySQL server .............127 VPN network topologies .........88 What is the MySQL Server? .......127 How TunnelVision works.........89 Setting up Windows for MySQL Access . 127 Creating a VPN (server-to-server) ......90 What is a dynamic Web site? .......128 Configuring a TunnelVision master server . 91 Hardware components reporting .......128 Configuring a TunnelVision client ......92 Log messages .............129 TunnelVision status...........92 Accessing log messages .........129 The idle time-out ...........93 Customizing message display .......129 IPsec ................93 Firewall log .............129 Known configurations ..........93 Network file system ...........130 Adding an IPsec route..........93 What is NFS? ............130 Adding an anonymous incoming connection rsync ................131 IPsec route .............94 What is rsync? ............131 Editing an IPsec route ..........94 Enabling rsync ............131 Setting up third-party IPsec clients .....95 rsync from a Telnet session ........132 Remote access services ..........95 Lotus Foundations Run feature .......132 What is RAS?.............95 Installing the Lotus Foundations Run 1.1 add-on 133 PPTP - client-to-server VPN service .....96 Using the VMware server ........135 Dial-in service ............98 Editing Lotus Foundation Run add-on settings 136 Terminating a connection from WebConfig . 99 Backing up and restoring the virtual machine 138 Firewall services .............99 Troubleshooting ...........138 Traffic denied inbound .........99 Lotus Symphony ............139 Traffic permitted inbound ........99 How does Symphony compare to other similar Traffic permitted outbound ........99 offerings?..............139 Firewall log .............101 Installing Lotus Symphony add-on to the server 139 Domain Name Service ..........101 Installing Lotus Symphony to client What is DNS? ............101 workstations.............140 DNS Services ............101 Switching between languages .......141 Configuring Public DNS.........102 Spam scanner .............142 How the DNS system works .......102 Installing the Lotus Foundations anti-spam Dynamic DNS ............103 network filtering feature.........142 Manually creating DNS entries ......103 Activating your spam scanner .......143 Workstation viewer ...........104 Configuring users’ spam filters ......143 What is the workstation viewer? ......104 Virus scanner .............144 Accessing the workstation viewer .....104 Activating your file virus scanner license . 144 Virtual network computing (VNC) .....105 Activating your mail virus scanner license. 145 Configuring VNC ...........105 Lotus Foundations Start performance optimization 147 Fast/Port Forward ...........106 Minimum hardware requirements .....147 What is Fast/Port Forward? .......106 Quick reference and hardware sizing guide . 147 Introduction to TCP/IP .........106 Email protocol choices affecting server Proxy servers ............107 performance.............148 Configuring Fast/Port Forward ......107 Other services running on the Foundations Forwarding scenarios..........109 Server ...............148 Multiple static IP addresses........109 Backup scheduling ..........149 Common port numbers .........110 Future capacity planning ........149 Troubleshooting Fast/Port Forward .....110 Glossary ...............150 Disk management ............110 Disk configuration (idb and RAID) .....110 Notices ..............157 Reconfiguring your disks ........111 Trademarks ..............158 Disk status messages ..........112 iv Lotus Foundations 1.1: Administration Guide Lotus Foundations Start Administration Guide Introduction Welcome to the Lotus® Foundations Start Administration Guide. This document is intended for administrators and provides the instructions required to install a completely functional Lotus Foundations Start server. In addition, a description of core Lotus Foundations features are included to provide you with an understanding of the Lotus Foundations Start server overall. First-time Lotus Foundations setup on a Lotus Foundations Appliance See the Lotus Foundations Start Getting