HP Brocade 8/12c Fabric OS Encryption Administrator's Guide - Page 44
Network connections, Configuring blade processor links
View all HP Brocade 8/12c manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 44 highlights
2 Network connections Network connections Before you use the encryption setup wizard for the first time, you must have the following required network connections: • The management ports on all devices that will perform encryption (Brocade Encryption Switches, or DCX and DCX-4S chassis with encryption blades installed) must have a LAN connection to the SAN management program, and must be available for discovery. • A supported key management appliance must be connected on the same LAN as the management port of each device that will perform encryption, and the SAN Management program. • In some cases, you may want to have an external host available on the LAN to facilitate certificate exchange between encryption nodes and the key management appliance. You may use the SAN management program host computer rather than an external host. • All switches in the planned encryption group must be interconnected on a private LAN. This LAN is used to exchange security parameters and certificates, and to synchronize encryption engine operations. Refer to "Configuring blade processor links" on page 24 for details. Configuring blade processor links Each encryption switch or blade has two GbE ports labeled Ge0 and Ge1. The Ge0 and Ge1 ports are Ethernet ports that connect encryption switches and blades to other encryption switches and blades. Both ports of each encryption switch or blade must be connected to the same IP network and the same subnet. Static IP addresses should be assigned. Neither VLANs nor DHCP should be used. These two ports are bonded together as a single virtual network interface to provide link layer redundancy. All encryption switches and blades in an encryption group must be interconnected by these links through a dedicated LAN before their encryption engines are enabled. Security parameters and certificates cannot be exchanged if these links are not configured and active. To configure blade processor links, complete the following steps: 1. Select Configure > Encryption from the menu task bar. The Encryption Center dialog box displays. 2. Select the encryption engine from the Encryption Center Devices table, then select Engine > Blade Processor Link from the menu task bar, or right-click the encryption engine and select Blade Processor Link. The Blade Processor Link dialog box displays. FIGURE 13 Blade Processor Link dialog box 24 Fabric OS Encryption Administrator's Guide 53-1002159-03