Juniper NETWORK AND SECURITY MANAGER 2010.4 - REV1, Руководство по установке

Страница: 49 / 244

kernel.shmmax= 402653184
After updating the shared memory requirements on your Linux or Solaris system, you
must reboot the server for your new settings to take effect.
Establishing a Trust Relationship
If you want to send copies of your file backups to a remote machine, then you must
establish a trust relationship between the management system server and the remote
machine.
To establish a trust relationship between two machines:
1.
Run the following commands on the management system server:
cd /home/nsm
su nsm
ssh-keygen -t rsa
chmod 0700 .ssh
If prompted to enter a password, leave the value blank.
2.
Run the following commands on the remote machine:
cd /home/nsm
su nsm
ssh-keygen -t rsa
chmod 0700 .ssh
If prompted to enter a password, leave the value blank.
3.
From the remote machine, copy
.ssh/id_rsa.pub
to the management system server’s
.ssh/authorized_keys
directory. For example:
scp .ssh/id_rsa.pub root@<IP addr management system>:/root.ssh/authorized_keys
4.
From the server running the management system, copy .ssh/id_rsa.pub to the remote
machine’s .ssh/authorized_keys . For example:
scp .ssh/id_rsa.pub root@<IP addr remote machine>:/root.ssh/authorized_keys
NOTE: If the remote machine already has established trust relationships
with other computers, overwriting the
authorized_keys
file will break those
trust relationships. Instead, copy the contents of the
id_rsa.pub
file onto
a new line at the end of the
authorized_keys
file on the remote machine.
5.
Test connectivity via SSH from the primary server to the remote machine and vice
versa. For example, to test SSH connectivity from NSM Server1 to remote machine,
enter the following command:
ssh root@<IP ADDRESS of remote machine>
6.
Change the permissions of the
.ssh
directory on each machine to owner-only, using
the following command:
27 Copyright © 2010, Juniper Networks, Inc.
Chapter 3: Installing NSM in a Standalone Configuration