Configuring network connections

NDR data nodes and director nodes must follow specific network connection requirements for a multidirector configuration. Follow these guidelines to establish your multidirector setup:

Each data node must use eth1, with separate and private subnet addresses, to connect and communicate with an NDR director.
Note
eth0is configured for management, which allows users to SSH to the device and use a browser with the NDR Web UI.
To connect with multiple directors, a single-box cluster must be configured as a multibox cluster.

NDR directors must have a unique, nonoverlapping subnet for their OpenVPN IP range.

Preparing an NDR data node for multi-director configuration

To set up a multidirector configuration, you must first configure the NDR data node as a cluster and set up the eth1 IP address.

If your NDR data nodes already are configured as a multibox cluster, then you can use the instructions in this section and Configuring the single-box cluster as a multibox cluster to verify your network settings, or you can go to Configuring the NDR director node to set up your NDR Directors.

Note
For a single-box NDR cluster serving as a data node, eth1 does not require a physical connection. However, for the multidirector setup to work, it does require an IP address.

Note
In a single-box NDR, eth0 is physically connected to the management network. However, eth1 also must be configured to the private subnet that is not routable on the host network. For example, it may use an IP in the CIDR range 192.168.2.0/24 if that is not routable in the customer environment.

To make the NDR data node compatible with a multi director setup:

Log in to the NDR as npadmin using the NDR IP address or FQDN. For example:
$ ssh npadmin@10.1.0.1
or
$ ssh npadmin@exampleFQDN
Enter privileged mode:
npadmin@ia> enable
Enter the npadmin password. The password can be 5 to 24 characters long.
[sudo] password for npadmin: <password>
Enter configuration mode:
npadmin@ia# configure system
Enter networknode:
npadmin@ia# datanode
Select option 9, and then enter a private eth1 IP address and subnet. For example, IP address 192.168.1.1 and subnet 255.255.255.0. Record the eth1 address and subnet for later use.
Click Enter at the Routeable IPv6 Address prompt and the Prefix Length prompt.
Enter Q to save changes and exit. You will be able to verify, correct, and confirm your network settings.

Configuring the single-box cluster as a multi-box cluster

Next, set up the single-box cluster as multibox cluster, and then change the publish host and bind host to the new eth1IP address.

To configure a multi-box cluster configuration and modify the public host and bind host:

Do you want to configure an NDR Cluster (y/n)?

Select an option: E

Select an option: T

Note
After enabling the multibox cluster, yourNDR data node network settings update the Unicast and Bind host IP address with the eth1 IP address.
No port is required.

Enter cluster setup mode:
npadmin@ia141host(config)# cluster setup
Enter y at the prompt:
Select option E to edit and review the NDR cluster configuration.
Select option T to enable the multibox cluster configuration.
Record the NDR data node cluster name in option R.
Type Q to save changes and exit.

Configuring the NDR director node

Now that your NDR data node is configured as a multibox cluster and ready to connect to the NDR director, you must configure your NDR director. Repeat the steps in this section for your each NDR director in your multidirector setup.

To configure an NDR director for a multi-director setup:

Log in to the NDR as npadmin using the NDR IP address or FQDN. For example:
$ ssh npadmin@10.1.0.1
or
$ ssh npadmin@exampleFQDN
Enter privileged mode:
npadmin@ia> enable
Enter the npadmin password. The password can be 5 to 24 characters long.
[sudo] password for npadmin: <password>
Enter configuration mode:
npadmin@ia# configure system
Enter director mode:
npadmin@ia# director
Select option S to configure the OpenVPN subnet and enter 10.8.1.0/24 for the first director. You can use 10.8.2.0/24 for the second NDR director.
Select P to configure the OpenVPN protocol, and then select one of the following:
Note
Changing the OpenVPN protocol disconnects the existing data nodes.
- u4: UDPv4
- t4: TCPv4
- u6: UDPv6
- t6: TCPv6
Select option A, and then complete each setting below to add the data node to a multibox cluster with the cluster name and eth0 IP address.
You will see the following:
- Enter the cluster name of the NDR data node:
- Enter the master eth0 IP address:
- Is the cluster you are adding a multi-box cluster (y/n):y
- Enter the ES Cluster Network Subnet in CIDR notation: 192.168.1.1/24
- Enter the elasticsearch cluster bind_host (eth1 IP address of the cluster master): 192.168.1.1

Connecting the NDR director to the NDR cluster

The NDR Director generates a configuration package for the IA data node that allows a connection between to the two appliances. After accepting the data node configuration keys, you can connect the NDR director to the NDR cluster. You must log into the NDR data node and accept the configuration package to continue.

To accept the data node transfer keys and connect to the NDR director and NDR cluster:

Log in to the NDR as npadmin using the NDR IP address or FQDN. For example:
$ ssh npadmin@10.1.0.1
or
$ ssh npadmin@exampleFQDN
Enter privileged mode:
npadmin@ia> enable
Enter the npadmin password. The password can be 5 to 24 characters long.
[sudo] password for npadmin: <password>
Enter configuration mode:
npadmin@ia# configure system
Enter datanode mode:
npadmin@ia# datanode
Select option A to enter the NDR Director eth0 management IP address.
Select Q to save and quit.

Adding a default route for multibox clusters

When you add a multibox NDR cluster to a director, you must also add a default route between each data node of the multibox cluster and the cluster master.

To add a default route for each data node in your multibox clusters:

Log in to the NDR as npadmin using the NDR IP address or FQDN. For example:
$ ssh npadmin@10.1.0.1
or
$ ssh npadmin@exampleFQDN
Enter privileged mode:
npadmin@ia> enable
Enter the npadmin password. The password can be 5 to 24 characters long.
[sudo] password for npadmin: <password>
Enter configuration mode:
npadmin@ia# configure system
Enter datanode mode:
npadmin@ia# datanode
Select option A to add your data node to the director.
A: Add this NDR as a Cluster host to a Director
#: Remove this NDR from a Director
Q: Quit
Select an option: A
Enter the OpenVPN IP of the director.
Adding this host as a cluster master to the director.
Enter the IP of the director you are trying to connect to:
Enter the eth1 IP address of the master node of your multibox cluster. This is the eth1 IP address of the cluster master node.
Note
- This step requires the configuration package generated by the NDR director for your NDR data node. You must first configure the connection between your NDR director and NDR cluster.
- If no configuration package for your IA data node exists, then this error message appears in the CLI:
  Required pay load from the Director not present
  Press any key to continue
Select Q to save and quit.