Veritas™ Resiliency Platform 2.2 Solutions for Applications
- Overview of Resiliency Platform
- Managing applications using Resiliency Platform
- Managing InfoScale applications using Resiliency Platform
- Managing resiliency groups
- About resiliency groups
- Preparing for disaster recovery configuration
- About replication technologies used in disaster recovery of applications
- Configuring DNS server settings for a data center
- Configuring resiliency groups for remote recovery
- Rehearsing DR operations to ensure DR readiness
- Performing disaster recovery operations
- Monitoring and reporting assets status
- Monitoring risks
- Managing activities and resiliency plans
- Managing activities
- Managing resiliency plans
- Creating a new resiliency plan template
- Managing evacuation plans
- Appendix A. Troubleshooting
Configuring DNS server settings for a data center
Using the Resiliency Platform console, you can configure the DNS settings for the data center. You can add DNS servers for the data center or remove the settings for servers that were previously added.
Windows DNS: command to generate the keytab file and the privileges required:
Command to generate keytab file:
ktpass.exe -princ <Principal Name> -mapuser <User Account> -pass <Password> -crypto <Encryption Type> -ptype <Principal Type> -out <Name for Keytab File>
Ensure that you have the required privileges in Windows DNS to update Forward and Reverse Lookup zones. Refer to the Microsoft documentation for more details.
Linux Bind: command to generate private key file and the privileges required:
Command to generate key and private file:
dnssec-keygen -a <Algorithm> -b <Keysize> -n HOST <Name Type>
Ensure that you have the required privileges in Bind to update Forward and Reverse Lookup zones. Refer to Linux documentation for more details.
See Sample command for Windows keytab file.
To configure DNS server settings for a data center
- Prerequisites
Ensure that ports listed for DNS server are open for communication. For a list of ports to be opened on DNS server, see:
You must have the following information:
The IP address of the DNS server
The name of the domain, and associated credentials.
Linux Bind: For TSIG authentication, you need the TSIG key and TSIG private files.
Windows DNS: For GSSAPI authentication, you need the user name and keytab file.
A test host name and IP address for performing a test operation. The test operation validates the specified DNS configuration.
- Navigate
Settings (menu bar) > Infrastructure > Details View
Expand the data center > Access Profile
Click the Windows DNS or Bind tab.
DNS servers already added for the data center are listed in the table. You can remove or add a new DNS server.
- To add a new DNS server for the data center click + Add New DNS.
- Specify the IP address for the DNS server and select the purpose, either Rehearsal or Production.
- Add one or more domains for the DNS server:
Fill in the domain name and the authentication type. For TSIG, browse to the key and private files. For GSSAPI, enter the user name and browse to the keytab file.
Enter a test host name and IP address and select Test. If the test is successful, that is the DNS configuration is validated, the Add button is enabled.
Select Add.
- If you are done adding domains, select Next.
- To remove a DNS server, right-click the required DNS server in the table and select Remove.