NDR data nodes and director nodes must follow specific network connection requirements for a multidirector configuration. Follow these guidelines to establish your multidirector setup:
Each data node must use
eth1, with separate and private subnet addresses, to connect and communicate with an NDR director.Note
eth0is configured for management, which allows users to SSH to the device and use a browser with the NDR Web UI.To connect with multiple directors, a single-box cluster must be configured as a multibox cluster.
NDR directors must have a unique, nonoverlapping subnet for their OpenVPN IP range.
Preparing an NDR data node for multi-director configuration
To set up a multidirector configuration, you must first configure the NDR data node as a cluster and set up the eth1 IP address.
If your NDR data nodes already are configured as a multibox cluster, then you can use the instructions in this section and Configuring the single-box cluster as a multibox cluster to verify your network settings, or you can go to Configuring the NDR director node to set up your NDR Directors.
Note
For a single-box NDR cluster serving as a data node, eth1 does not require a physical connection. However, for the multidirector setup to work, it does require an IP address.
Note
In a single-box NDR, eth0 is physically connected to the management network. However, eth1 also must be configured to the private subnet that is not routable on the host network. For example, it may use an IP in the CIDR range 192.168.2.0/24 if that is not routable in the customer environment.
To make the NDR data node compatible with a multi director setup:
Configuring the single-box cluster as a multi-box cluster
Next, set up the single-box cluster as multibox cluster, and then change the publish host and bind host to the new eth1IP address.
Do you want to configure an NDR Cluster (y/n)?
Select an option: E
Select an option: T
Note
After enabling the multibox cluster, yourNDR data node network settings update the Unicast and Bind host IP address with the eth1 IP address.
No port is required.
Enter cluster setup mode:
npadmin@ia141host(config)# cluster setupEnter
yat the prompt:Select option E to edit and review the NDR cluster configuration.
Select option T to enable the multibox cluster configuration.
Record the NDR data node
cluster namein optionR.Type
Qto save changes and exit.
Configuring the NDR director node
Now that your NDR data node is configured as a multibox cluster and ready to connect to the NDR director, you must configure your NDR director. Repeat the steps in this section for your each NDR director in your multidirector setup.
To configure an NDR director for a multi-director setup:
Connecting the NDR director to the NDR cluster
The NDR Director generates a configuration package for the IA data node that allows a connection between to the two appliances. After accepting the data node configuration keys, you can connect the NDR director to the NDR cluster. You must log into the NDR data node and accept the configuration package to continue.
To accept the data node transfer keys and connect to the NDR director and NDR cluster:
Adding a default route for multibox clusters
When you add a multibox NDR cluster to a director, you must also add a default route between each data node of the multibox cluster and the cluster master.
To add a default route for each data node in your multibox clusters: