Chapter 4: Installing and Configuring a DSM
Configuring a Virtual Appliance
DSM Installation and Configuration Guide
Copyright 2009 - 2020 Thales Group. All rights reserved.
74
l
"Access the Command Line Interface (CLI)" below
Specify host name resolution method
You can map a host name to an IP address using a Domain Name Server (DNS). DNS is the preferred method of host
name resolution.
You can also modify the
hosts
file on the DSM or identify a host using only the IP address.
l
If you use DNS to resolve host names, use the FQDN for the host names.
l
If you do NOT use a DNS server to resolve host names, do the following on all of the DSMs and all of the
protected hosts:
o
Modify the
host
file on the DSM: To use names like serverx.domain.com, enter the host names and matching
IP addresses in the
/etc/host
s file using the
host
command under the
network
menu. For example:
0011:network$ host add <
hostname
> 192.168.1.1
SUCCESS: add host
0012:network$ host show
name=localhost1.localdomain1 ip=::1
name=<hostname>.<domainname>.com ip=192.168.10.8
name=<hostname> ip=192.168.1.1
SUCCESS: show host
You must do one of the following on
each
DSM, since entries in the host file are not replicated across
DSMs.
o
Modify the host file on the protected hosts:
Enter the DSM host names and matching IP addresses in the
/etc/host
s file on the protected host. You
must do this on EACH protected host making sure to add an entry for all DSM nodes (if using HA).
o
Use IP addresses:
You may use IP addresses or the FQDN to identify the host simultaneously. In other words, they don't all
have to use an IP address or FQDN.
Configure Ports
If a DSM must communicate with a device behind a firewall, you must open various ports in the firewall as shown in
the following figures.
l
To see the ports to configure, see
"Ports to Configure" on page 171
Access the Command Line Interface (CLI)
The CLI commands are used to configure the DSM. The commands are grouped into the following categories or
submenus
. Entering ? on the CLI command line lists those categories:
$ ?
network
Networking configuration
system
System configuration
hsm
HSM configuration
maintenance System maintenance utilities
ha
HA configuration
ipmi
IPMI configuration
user
User configuration
exit
Exit
To enter a submenu, enter a name or just the first few letters of the name. To display the commands for that submenu,
enter a ?. For example, the submenu
maintenance
is used to provide maintenance utilities:
