cmc rendezvous client

To enable an appliance to send a request to the Central Management System appliance for management, use the cmc rendezvous client commands in configuration mode.

The Central Management Console (CMC) is the Central Management System appliance component that provides basic management and control capabilities for the rendezvous server (Central Management System appliance) and its clients (managed appliances).

Note

The rendezvous process requires configuration on both the Central Management System appliance and the requesting appliance. You use the cmc rendezvous server commands on the Central Management System appliance and cmc rendezvous client commands on the managed appliance.

Syntax

cmc rendezvous client server-addr {hostname | ipAddress}

[no] cmc rendezvous client auto

cmc rendezvous client auto {initial-delay seconds | interval-short seconds | interval-long seconds}

cmc rendezvous client force

cmc rendezvous client auth authtype {password | ssh-dsa2 | ssh-rsa2}

cmc rendezvous client auth password password [password]

[no] cmc rendezvous client enable-client-init

[no] cmc rendezvous client send-client-address

no cmc rendezvous client server-addr

no cmc rendezvous client auth authtype

no cmc rendezvous client auth password password

User role

Operator or admin

Description

These commands are run on the appliance requesting management.

Parameters

server-addr {hostname | ipAddress}

Specifies the hostname or IPv4 or IPv6 address of the Central Management System appliance with which the appliance will attempt rendezvous.

auto

Enables automatic rendezvous attempts from the appliance requesting management. Use the no parameter to disable automatic rendezvous attempts, which is the default setting.

auto initial-delayseconds

Configures the number of seconds the appliance will wait before the initial rendezvous attempt after it is rebooted or disconnected. The default is 30 seconds.

auto interval-shortseconds

Configures the number of seconds the appliance will wait to reattempt rendezvous after an automatic rendezvous attempt fails for a transitory reason, with the expectation that the next attempt will succeed. The default is 300 seconds (five minutes).

auto interval-longseconds

Configures the number of seconds the appliance will wait to reattempt rendezvous after an event such as the Central Management System appliance losing the appliance information. The default is 86400 seconds (one day).

force

Forces the appliance to attempt discovery and rendezvous with the Central Management System appliance now, regardless of whether automatic rendezvous attempts are enabled or how much time has elapsed since the last attempt. If the attempt fails, the appliance will not automatically reattempt rendezvous. This command has no effect if the appliance is not enabled for management.

auth authtype {password | ssh-dsa2 | ssh-rsa2}

Specifies whether a password or an ssh-dsa2 or ssh-rsa2 identity should be used for the appliance to log into the Central Management System appliance to announce itself and attempt rendezvous.

Note

The "cmcrendv" system user is the username for all authentication types. The ssh-dsa2 and ssh-rsa2 identities must be configured on that user account. If rendezvous attempts fail because your system has an expired host key for the Central Management System appliance, use the ssh client user cmcrendv known-host {hostname | ipAddress} command to remove it.

auth password passwordpassword

Specifies the password used to attempt rendezvous using password authentication. If no password is specified, the user will be prompted to enter the password and then enter it again to confirm it. The entries will be displayed as asterisks (*).

enable-client-init

Uses the configuration set by the cmc client server commands, which includes the Central Management System appliance IP address, management port, and authentication information. Use the no parameter to use the configuration set with the cmc rendezvous client server-addr command.

Note

This setting is enabled by default. Trellix recommends that you not change it for appliance-initiated requests for management.

send-client-address

Uses the local IP address of the appliance requesting management to perform rendezvous. This setting is enabled by default.

Use the no parameter to prevent the local address from being part of the rendezvous request; the IP address will instead be decoded on the Central Management System appliance using SSH parameters. This is needed when the appliance is behind a NAT gateway, where a virtual NAT gateway IP address will become the appliance's IP address.

no cmc rendezvous client server-addr

Resets the Central Management System appliance address to the default ("cmc").

no cmc rendezvous client auth authtype

Resets the authentication type to the default ("password").

no cmc rendezvous client auth password password

Clears the configured password for password authentication.

Example

In this example, automatic rendezvous attempts are enabled, and the local appliance IP address will be excluded from the rendezvous request because the appliance is behind a NAT gateway.

hostname (config) # cmc rendezvous client auto
hostname (config) # no cmc rendezvous client send-client-address

Supported appliances

This command is supported on the following appliances running the specified releases or later: