To Add Encryption To A Subnet - HPE StoreOnce 6500 User Manual

3. In the Subnet section, click Edit.
4. In the Number of Nodes box, select the required number and click OK.
5. The StoreOnce System automatically updates all subnets to have the required number of nodes and
IP addresses. Check the individual Node tabs for each subnet to make sure the IP address details are
correct. Edit, as appropriate, and save the changes.
6. Save and validate the changes. Validation will fail if sufficient IP addresses have not been configured
for each Subnet.

To add encryption to a subnet

Point to Point Data in flight encryption links using IPSec may be configured on a per subnet basis. This
can be used to secure the link between backup clients and also between StoreOnce appliances for
replication or StoreOnce Catalyst copy traffic. This feature requires a Security Pack license. See also
Encryption guidelines on page 214.
It is not possible to configure encryption links while creating the subnet.
IMPORTANT: Data in Flight Encryption is not supported for IPv6 subnets. In the StoreOnce
Management Console, you will not see the Encryption Links section if an IPv6 subnet is selected. In
the StoreOnce CLI, a configuration command will fail if you attempt to configure Data in Flight
Encryption on an IPv6 subnet.
Data in Flight Encryption is intended to be used to secure network links between data centers for
StoreOnce VTL or NAS Replication, or for Low Bandwidth Catalyst Copy operations. Using Data In
Flight Encryption for direct backup operations to the StoreOnce appliance over a local network is
not supported due to the performance impact of the encryption.
Procedure
1. Select the subnet for which encryption links are required.
NOTE: If multiple subnets are selected (using the selection checkboxes) you will not be able to
configure encryption links.
2. The Encryption Link section of the Network page shows any previously existing Encryption Links for
that subnet or the text "No Encryption Links" if there are none present.
NOTE: The Encryption Link section on the Network page is not displayed when Port Sets are being
used for Management or when the subnet is configured for IPv6.
The Encryption Link section of the Network page is not displayed for a subnet that is configured for
DHCP or IPv6.
3. Click Add to display the New Encryption Link Configuration dialog for the subnet. Enter the
following information:
a. Remote IP address:
This is the IP address of the remote device, which may be a client if configuring encryption between
a client and the StoreOnce appliance, or another StoreOnce appliance when configuring encryption
between devices used for replication and StoreOnce Catalyst copy.
b. Passphrase:
To add encryption to a subnet 213