Veritas Access Appliance 8.4 Initial Configuration Guide

Last Published:
Product(s): Appliances (8.4)
Platform: Veritas 3350,Veritas 3340,Veritas 3360
  1. Getting to know the Access Appliance
    1.  
      About the Veritas Access Appliance
    2. About the Access Appliance administration interfaces
      1.  
        Using the Access Appliance shell menu
    3. About licensing the Access Appliance
      1.  
        About subscription licensing
    4.  
      Where to find the documentation
  2. Preparing to configure the appliance
    1.  
      Initial configuration requirements
    2.  
      About obtaining IP addresses for Veritas Access
    3.  
      Network and firewall requirements
    4.  
      About network connections for the appliance
  3. Configuring the appliance for the first time
    1. How to configure the Access Appliance for the first time
      1.  
        Configuring the Access cluster on the appliance
  4. Getting started with the Veritas Access GUI
    1.  
      Accessing the Veritas Access web interface
  5. Network connection management
    1. Configuring network address settings on the appliance nodes
      1.  
        Deleting network settings on appliance nodes
      2.  
        About NIC1 (eth0) port usage on the appliance nodes
      3.  
        About IPv4-IPv6-based network support on the Access Appliance
    2. Configuring VLAN settings on the appliance nodes
      1.  
        Viewing VLAN settings
      2.  
        Deleting a VLAN
    3. About the Veritas Remote Management Console
      1.  
        Configuring the IPMI port on an appliance node
      2.  
        Managing IPMI users on an appliance node
      3.  
        Resetting the IPMI on an appliance node
  6. Resetting the appliance to factory settings
    1.  
      About appliance factory reset
    2.  
      Performing factory reset for cluster nodes
  7. Appliance security
    1.  
      About Access Appliance security
    2. About Access appliance user account privileges
      1. Access appliance admin password specifications
        1.  
          Password encryption and handling on the Access appliance
    3.  
      About forced password changes
    4.  
      Changing the Maintenance user account password
    5. About the Access Appliance intrusion detection system
      1.  
        Reviewing SDCS events on the Access Appliance
      2.  
        Auditing the SDCS logs on an Access Appliance
      3.  
        About SDCS event type codes and severity codes on an Access appliance node
      4.  
        Changing the SDCS log retention settings on an Access Appliance node
    6.  
      About the Access Appliance intrusion prevention system
    7. About Access appliance operating system security
      1.  
        Vulnerability scanning of the Access Appliance
      2.  
        Disabled service accounts on the Access appliance
    8.  
      About data security on the Access appliance
    9.  
      About data integrity on the Access appliance
    10. Recommended IPMI settings on the Access appliance
      1.  
        Replacing the default IPMI SSL certificate on the Access appliance

About network connections for the appliance

The following diagram shows how to connect the Access 3340 Appliance model to the network:

Note:

The management network and the data network can be the same.

The following diagram shows how to connect a two-node Access 3350 and 3360 Appliance models to the network:

Note:

The management network and the data network can be the same.

Public network interface connectivity

During initial configuration, assigning public and virtual IP addresses for the public network interfaces is optional. The public network interfaces for the appliance models are:

Model

Public network interfaces

3340

eth4 and eth5

3350

eth4, eth6, eth5, and eth7

3360

eth4, eth6, eth5, and eth7

If you do not plan to assign any IP addresses to the public network interfaces during the cluster configuration, you are not required to connect the network interfaces to the public data network switch. Previously, irrespective of the number of IP addresses assigned during initial configuration, you were required to connect eth4 and eth5 to a data switch for a 3340 model and connect eth4 and eth6 to a data switch for a 3350 model. Otherwise, the initial configuration precheck failed. The eth5 and eth7 public interfaces of a 3350 model could be left disconnected.

The IP addresses are assigned to the public interfaces of both the nodes using the round-robin algorithm, selecting the first public interface of both the nodes followed by the second public interface of both the nodes. You can configure up to four public IP addresses on a 2-node cluster. You have the option to specify a maximum of 32 IP addresses. However, only the number of IP addresses that you specified are configured and the rest are maintained as free IP addresses in the cluster.

Number of IP addresses

Assigned to network interfaces

Network interfaces connected to data network switch

0

None

Not required

1

First public interface eth4 of first node

eth4 of both nodes

2

First public interface eth4 of the first node and first public interface eth4 of the second node

eth4 of both nodes

3

For 3350 and 3360 models, the first public interface eth4 of both the nodes followed by the second public interface eth6 of the first node

For 3350 and 3360 appliance models, eth4 and eth6 of both the nodes

For a 3340 model, first public interface (eth4) of both nodes followed by the second public interface (eth5) of the first node

For a 3340 model, eth4 and eth5 of both the nodes

4

For 3350 and 3360 models, first public interface eth4 of both the nodes followed by the second public interface eth6 of both the nodes

For 3350 and 3360 models, eth4 and eth6 of both the nodes

For a 3340 model, first public interface eth4 of both the nodes followed by the second public interface eth5 of both the nodes

For the 3340 model, eth4 and eth5 of both the nodes

Network connectivity for bonding

To configure bonding during initial configuration, for a 3340 model, you must connect eth4 and eth5 to the data network switch even if you don't assign any IP address during the initial configuration. To configure bonding during initial configuration for a 3350 or a 3360 model, you must connect eth4 and eth6 to the data network switch even if you don't assign any IP addresses during the initial configuration. You cannot configure bonding for eth5 and eth7 during the initial configuration. Post configuration, if you want to configure bonding for eth5 and eth7 network interfaces, ensure that you connect these interfaces to the data network switch.

Private network connectivity for a single-node 3360 appliance

Before you start the configuration for a single node, use an ethernet cable to connect the private network interface eth2 to eth3.