F5 520, Руководство пользователя

Страница: 36 / 61

Chapter 2
2 - 6
To synchronize the 520/540 configuration from the
command line
Before you configure the security world on the redundant system,
synchronize the 520/540 configuration. To synchronize the 520/540
configuration from the command line, type the following command on the
primary unit:
b config sync all
To configure the security world on the redundant system
After you synchronize the 520/540 configuration, you need to initialize the
HSM and configure the security world on the second unit in the redundant
system. You will need a ballpoint pen, or other fine-tipped implement to
press the reset button.
Before you start, you need the required number of administrator smart cards
from the administrator cardset you created when initializing the security
world on the primary unit.
1. At the back of the second unit in the redundant system, locate the
switch labelled M-O-I (Figure 2.1). Then using a paper clip or your
fingernail, move the switch to the I position.
2. With the end of the ballpoint pen, gently push the reset button
(Figure 2.2). If you have done this correctly, the LED blinks quickly
for a moment, and then blinks slowly again.
3. Place your administrator smart card into the card reader attached to
the FIPS 140 security module in the redundant unit. Figure 2.4
shows the proper orientation.
4. At the console of the second unit in the redundant system, run the
sw-rest command from /config/bigconfig (See Figure 2.5 for an
example session).
5. Return to the back of the controller. Move the M-O-I switch to O
(Figure 2.1) and, with the ballpoint pen, press the reset button in the
hole above the switch (Figure 2.2).
After you bring the second controller into the security world, you can
configure the SSL Accelerator. For more information, see Additional
configuration options, on page 2-14.