Chapter 2: DSM V6100 Hardware Appliance
Configuring a V6100 Appliance
DSM Installation and Configuration Guide
Copyright 2009 - 2020 Thales Group. All rights reserved.
26
REQUIREMENT
VALUE
Email address
Pre-configuration tasks
Specify host name resolution method
You can map a host name to an IP address using a Domain Name Server (DNS). DNS is the preferred method of host
name resolution. Make sure host names are correctly entered while configuring DNS and registering hosts. A valid
host name must:
l
Be an FQDN
l
Match exactly with:
o
Name set in the CLI (system$
set hostname
)
o
Hostname used when running (
system$ security genca)
o
Hostname used when running (
system$ security gencert)
You can also modify the
/etc/hosts
file on the DSM or identify a host using only the IP address.
l
If you use DNS to resolve host names, use the FQDN for the host names.
l
If you do NOT use a DNS server to resolve host names, do the following on all of the DSMs and the protected
hosts:
o
Modify the
host
file on the DSM: To use names like serverx.domain.com, enter the host names and matching
IP addresses in the
/etc/hosts
file on the DSM using the
host
command under the
network
menu. For
example:
0011:network$ host add <
hostname
> 192.168.1.1
SUCCESS: add host
0012:network$ host show
name=localhost1.localdomain1 ip=::1
name=<
hostname
>.<
domain_name
>.com ip=192.168.10.8
name=<
hostname
> ip=192.168.1.1
SUCCESS: show host
You must do one of the following on
each
DSM, since entries in the host file are not replicated across
DSMs.
o
Modify the
host
file on the protected hosts: Enter the DSM host names and matching IP addresses in the
/etc/hosts
file on the protected host.
You must do this on EACH protected host making sure to add an entry
for all DSM nodes (if using HA).
o
Use IP addresses: You may use IP addresses or the FQDN to identify the host simultaneously. In other
words, they don't all have to use an IP address or FQDN.
Improving DNS Performance
In some networks, DNS resolution is slow because it attempts to resolve the name of a host to an IP address over a
large geographic area, or widely distributed network. It is much quicker to find that information in the local system
/etc/hosts file. If DNS is slow, you can improve the performance by changing the order in which the DNS server
obtains name resolution. Switching the order of resolution can improve the response time for network operations.
The DNS server has two options for name resolution order.
l
DNS
: Search the DNS server on the network
