Ip Address Change Of A Node Within An Encryption Group - Brocade Communications Systems 1606 Administrator's Manual

Fabric os encryption administrator's guide v6.4.0 (53-1001864-01, june 2010)
Hide thumbs Also See for 1606:
Table of Contents

Advertisement

NOTE
The IP address of the cluster link should be configured before enabling the encryption engine for
encryption. If the IP address is configured after the encryption engine is enabled for encryption, or
if the IP address of the cluster link ports is modified after encryption engine is enabled for
encryption, the encryption switch needs to be rebooted, and the encryption blade needs to be
powered off and powered on (slotpoweroff/slotpoweron) for the IP address configuration to take
effect. Failure to do so will result in Re-Key operation not starting in the encryption group or high
availability (HA) cluster.

IP Address change of a node within an encryption group

Modifying the IP Address of a node that is part of an encryption group is disruptive in terms of
cluster operation. The change causes the encryption group to split and if the node was part of an
HA cluster, failover/failback capability is lost. Note that the ipaddrset command issues no warning
or prevents you from changing a node IP address that is part of a configured encryption group or
HA cluster. Follow the steps below to recover from the situation. Note that this recovery does not
affect existing host encryption I/O.
Fabric OS Encryption Administrator's Guide
53-1001864-01
If the node is the group leader, perform the following steps:
1. Log into the group leader as Admin or SecurityAdmin.
2. Eject all the member nodes from the encryption group.
3. Change the group leader node IP address.
4. Delete the encryption group and then recreate the encryption group and reregister the
member nodes with the group leader using the cryptocfg - -add -membernode <wwn>
command.
NOTE
A reboot is not needed beginning with version 6.4.0.
If the node is a member node, perform the following steps:
1. Log into the Group Leader as Admin or SecurityAdmin.
2. Eject and then de-register the node from the encryption group.
3. Change the IP address of the member node and then register the node member node with
the group leader.
NOTE
A reboot is not needed beginning with version 6.4.0.
Configuring cluster links
3
99

Advertisement

Table of Contents
loading

Table of Contents