Juniper NETWORK AND SECURITY MANAGER 2010.4 - REV1, Руководство по установке

Страница: 126 / 244

NOTE: Heartbeat link(s) are needed between the primary and secondary machines.
The IP addresses entered here must be correct and match on both ends of
the link for automatic failover to function correctly.
Enter the IP address for this machine's primary heartbeat link [10.150.41.10]>
10.150.42.10
Enter the IP address for the peer's primary heartbeat link [10.150.41.9]>
10.150.42.9
Enter the IP address that will be used for remote HA replications [10.150.41.9]>
Enter the port used for heartbeat communication [7802]>
Minimum HA failover time is 60 seconds.
The heartbeat message interval times the number of missing heartbeats
must equal at least this value.
Using the defaults is recommended.
Enter a time interval (seconds) between heartbeat messages [15]>
Enter number of missing heartbeat messages before automatic switchover occurs
[4]>
An IP address outside the HA cluster is needed to monitor this server's network
connection.
Enter an IP address outside of the cluster []> 10.150.47.254
Enter the rsync replication timeout [3600]>
Enter HA directory [/var/netscreen/dbbackup]>
The HA server(s) requires that you have previously installed the rsync program.
Enter the full path to rsync [/usr/bin/rsync]>
The HA server(s) requires that you have previously installed the ssh program.
Enter the full path for the ssh command [/usr/bin/ssh]>
Note: A trust relationship between the primary and the
secondary server, via ssh-keygen, is a requirement for the
remote replication to work properly.
Please reset the trust relationship with 'nsm' user.
Here are sample commands:
cd /home/nsm
su nsm
ssh-keygen -t rsa
chmod 0700 .ssh
-- then copy .ssh/id_rsa.pub to the peer machines' .ssh/authorized_keys
########## BACKUP SETUP DETAILS ##########
Will this machine require local database backups? (y/n) [y]>
Enter hour of day to start the database backup (00 = midnight, 02 = 2am, 14 = 2pm
...)[02]>
Will daily backups need to be sent to a remote machine? (y/n) [n]>
Copyright © 2010, Juniper Networks, Inc. 104
Network and Security Manager Installation Guide