Veritas™ Resiliency Platform 2.2 Solutions for VMware
- Section I. Overview of Resiliency Platform
- Overview of Resiliency Platform
- Overview of Resiliency Platform Data Mover
- Overview of recovery to on-premises data center
- Managing assets protected by NetBackup
- Overview of Amazon Web Services
- Overview of vCloud
- Section II. Preparing your environment
- Using array-based replication
- Using Veritas Resiliency Platform Data Mover
- Managing disaster recovery network mapping
- Managing Replication Gateway pairs
- Using array-based replication
- Section III. Working with resiliency groups
- Managing resiliency groups
- Configuring resiliency groups for remote recovery
- Managing virtual machines for remote recovery (DR) using 3rd party replication technology
- Managing virtual machines for remote recovery (DR) using Resiliency Platform Data Mover
- Managing virtual machines for remote recovery (DR) in Amazon Web Services
- Managing resiliency groups
- Section IV. Managing disaster recovery
- Rehearsing DR operations to ensure DR readiness
- Performing disaster recovery operations
- Rehearsing DR operations to ensure DR readiness
- Managing resiliency plans
- Creating a new resiliency plan template
- Monitoring risks, reports, and activities
- Managing evacuation plans
- Appendix A. General troubleshooting
- Resolving the Admin Wait state
- Appendix B. Sample policy and trust relationships for AWS
Configuring DNS server settings for a data center
Using the Resiliency Platform console, you can configure the DNS settings for the data center. You can add DNS servers for the data center or remove the settings for servers that were previously added.
Windows DNS: command to generate the keytab file and the privileges required:
Command to generate keytab file:
ktpass.exe -princ <Principal Name> -mapuser <User Account> -pass <Password> -crypto <Encryption Type> -ptype <Principal Type> -out <Name for Keytab File>
Ensure that you have the required privileges in Windows DNS to update Forward and Reverse Lookup zones. Refer to the Microsoft documentation for more details.
Linux Bind: command to generate private key file and the privileges required:
Command to generate key and private file:
dnssec-keygen -a <Algorithm> -b <Keysize> -n HOST <Name Type>
Ensure that you have the required privileges in Bind to update Forward and Reverse Lookup zones. Refer to Linux documentation for more details.
See Sample command for Windows keytab file.
To configure DNS server settings for a data center
- Prerequisites
Ensure that ports listed for DNS server are open for communication. For a list of ports to be opened on DNS server, see:
You must have the following information:
The IP address of the DNS server
The name of the domain, and associated credentials.
Linux Bind: For TSIG authentication, you need the TSIG key and TSIG private files.
Windows DNS: For GSSAPI authentication, you need the user name and keytab file.
A test host name and IP address for performing a test operation. The test operation validates the specified DNS configuration.
- Navigate
Settings (menu bar) > Infrastructure > Details View
Expand the data center > Access Profile
Click the Windows DNS or Bind tab.
DNS servers already added for the data center are listed in the table. You can remove or add a new DNS server.
- To add a new DNS server for the data center click + Add New DNS.
- Specify the IP address for the DNS server and select the purpose, either Rehearsal or Production.
- Add one or more domains for the DNS server:
Fill in the domain name and the authentication type. For TSIG, browse to the key and private files. For GSSAPI, enter the user name and browse to the keytab file.
Enter a test host name and IP address and select Test. If the test is successful, that is the DNS configuration is validated, the Add button is enabled.
Select Add.
- If you are done adding domains, select Next.
- To remove a DNS server, right-click the required DNS server in the table and select Remove.