Juniper NETWORK AND SECURITY MANAGER 2010.4 - REV1, Руководство по установке

Страница: 137 / 244

Enter the full path to rsync [/usr/bin/rsync]>
The HA server(s) requires that you have previously installed the ssh program.
Enter the full path for the ssh command [/usr/bin/ssh]>
Note: A trust relationship between the primary and the
secondary server, via ssh-keygen, is a requirement for the
remote replication to work properly.
Please reset the trust relationship with 'nsm' user.
Here are sample commands:
cd /home/nsm
su nsm
ssh-keygen -t rsa
chmod 0700 .ssh
-- then copy .ssh/id_rsa.pub to the peer machines' .ssh/authorized_keys
########## BACKUP SETUP DETAILS ##########
Will this machine require local database backups? (y/n) [y]>
Enter hour of day to start the database backup (00 = midnight, 02 = 2am, 14 = 2pm
...)[02]>
Will daily backups need to be sent to a remote machine? (y/n) [n]>
Enter number of database backups to keep [7]>
Enter the rsync backup timeout [3600]>
########## POST-INSTALLATION OPTIONS ##########
Start High Availability daemon processes when finished? (y/n) []> n
########## CONFIRMATION ##########
About to proceed with the following actions:
- Install GUI Server
- Install High Availability Server
- Store base directory for management servers as /usr/netscreen
- This machine will have base license with maximum 25 devices
- This machine participates in an HA cluster
- This server is the primary: Yes
- Store GUI Server data in /var/netscreen/GuiSvr
- Store GUI Server database log in /var/netscreen/GuiSvr/xdb/log
- Use IP address 10.150.41.9 for management
- Use port 8443 for NBI Service
- Set password for 'super' user
- CFM user: cfmuser
- CFM Password set for 'cfmuser'
- IP address for the primary HA Server: 10.150.41.9
- IP address for the secondary HA Server: 10.150.41.10
- Set shared password for heartbeat
- Number of Heartbeat links: 1
- IP address for this machine's primary heartbeat link: 10.150.42.9
- IP address for the peer's primary heartbeat link: 10.150.42.10
- IP address for remote HA replications: 10.150.41.10
- Port for HA heartbeat communication: 7802
- Seconds between heartbeat messages: 15
- Missing heartbeat messages: 4
- Outside pingable IP address: 10.150.47.254
115 Copyright © 2010, Juniper Networks, Inc.
Chapter 5: Installing NSM with High Availability