Configuring ipsec on the media server, Encryption with replication – HP StoreOnce Backup User Manual

Page 214

Advertising
background image

# net add encryption config_with_ipsec subnet_2 ipaddr 172.18.198.101 passphrase katedave

Command Successful

NOTE:

You still need to validate and activate the configuration to make encryption active on the

subnet.

The subnet configuration now shows the client IP address in the Encryption Links field.

----------------------
Network: subnet2
----------------------
IP Addresses: 172.168.6.11,172.168.6.12,172.168.6.13,172.168.6.14
Net Mask: 255.255.255.0
Domain Name: nearline.local
Gateway: 172.168.6.1
Default Network: yes
Net Usage: mgmt
VLAN tag:
Port Set: portSet2 with these interfaces: eth0 eth2
Encryption Links: 172.18.198.101
Bonding Mode: 1 (Active Passive Bonding)

Configuring IPsec on the media server

Refer to the HP StoreOnce Backup Linux and UNIX Configuration guide. Instructions for configuring
IPsec on Windows media servers will be provided in the next version of this guide.

Encryption with replication

StoreOnce Backup systems are treated exactly like clients by IPsec. To set up an encrypted link
between two StoreOnce Backup systems, use the StoreOnce CLI command, net add encryption,
on each StoreOnce Backup system, providing the other system‘s IP address but using the same
passphrase.

214

Upgrading to StoreOnce software, version 3.11.x

Advertising