HP Brocade 8/12c Fabric OS Encryption Administrator's Guide v6.4.0 (53-1001864 - Page 117
IP Address change of a node within an encryption group
View all HP Brocade 8/12c manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 117 highlights
Configuring cluster links 3 NOTE The IP address of the cluster link should be configured before enabling the encryption engine for encryption. If the IP address is configured after the encryption engine is enabled for encryption, or if the IP address of the cluster link ports is modified after encryption engine is enabled for encryption, the encryption switch needs to be rebooted, and the encryption blade needs to be powered off and powered on (slotpoweroff/slotpoweron) for the IP address configuration to take effect. Failure to do so will result in Re-Key operation not starting in the encryption group or high availability (HA) cluster. IP Address change of a node within an encryption group Modifying the IP Address of a node that is part of an encryption group is disruptive in terms of cluster operation. The change causes the encryption group to split and if the node was part of an HA cluster, failover/failback capability is lost. Note that the ipaddrset command issues no warning or prevents you from changing a node IP address that is part of a configured encryption group or HA cluster. Follow the steps below to recover from the situation. Note that this recovery does not affect existing host encryption I/O. • If the node is the group leader, perform the following steps: 1. Log into the group leader as Admin or SecurityAdmin. 2. Eject all the member nodes from the encryption group. 3. Change the group leader node IP address. 4. Delete the encryption group and then recreate the encryption group and reregister the member nodes with the group leader using the cryptocfg - -add -membernode command. NOTE A reboot is not needed beginning with version 6.4.0. • If the node is a member node, perform the following steps: 1. Log into the Group Leader as Admin or SecurityAdmin. 2. Eject and then de-register the node from the encryption group. 3. Change the IP address of the member node and then register the node member node with the group leader. NOTE A reboot is not needed beginning with version 6.4.0. Fabric OS Encryption Administrator's Guide 99 53-1001864-01