Dell 6.2 Server User Manual


 
92 |ControlPlaneSecurity DellPowerConnectW-SeriesArubaOS6.2 | User Guide
The <ip-address>parameter in this command is the IP address of a member controller in the cluster, and the
<key> parameter in each command is the IPsec key for communication between the specified member controller
and the cluster root. Use the IP address 0.0.0.0in this command to set a single IPsec key for all member Dell
controllers, or repeat this command as desired to define a different IPsec key for each cluster member.
Creating a Cluster Member
Once you have identified the cluster root, you must then identify the member Dell controllers in the cluster.
Use the WebUI to identify a controller as a cluster member and use an IPsec key to secure communication between
the cluster member and the cluster root. Use the command-line interface to create a cluster member and secure
communications between that member and the cluster root using an IPsec key, factory-installed certificate or
custom certificate.
To create a cluster member using the WebUI:
1. Access the WebUI of the cluster member controller, and navigate to Configuration>Controller.
2. Click the Cluster Setting tab.
3. For the cluster role, select Member.
4. In the Controller IP Address field, enter the IP address of the root controller in the cluster.
5. In the IPsec Key and Retype IPsec Key fields, enter the IPsec key for communication between the specified
member controller and the cluster root. This parameter must be have the same value as the key defined for the
cluster member in "Creating a Cluster Root" on page 91.
6. Click Add.
7. Click Apply to save your settings.
To create a cluster root via the CLI, access each of the member master Dell controllers and define the IPsec key or
certificate for communication between that controller and the cluster root.
cluster-root-ip <ip-address>
ipsec <key>
factory-cert master-mac <mac>
ipsec-custom-cert master-mac1 <mac1> [master-mac2 <mac2>] ca-cert <ca> server-cert <cert>
[suite-b <gcm-128 | gcm-256>]
In this command the <ip-address>parameter is the IP address of the root master controller in the cluster. If you
are using an IPsec key, the <key> parameter in this command must be have the same value as the key defined for
the cluster member via the cluster-member-ip command.
Viewing Controller Cluster Settings
To view your current cluster configuration via the WebUI:
1. Navigate to Configuration>Controller.
2. Click the Cluster Setting tab.
l If you are viewing the WebUI of a cluster root, the output of this command displays the IP address of the
VLAN on the cluster member used to connect to the cluster root.
l If you are viewing the WebUI of a cluster member, the output of this command displays the IP address of the
VLAN on the cluster root used to connect to the cluster member.
To view your current cluster configuration via the command-line interface, issue the CLI commands described in
Table 22.