Follow these steps to configure the Central Management System appliance to accept client-initiated rendezvous requests for management connections that support appliance IP address changes and automatic reconnections to the Central Management System appliance.
For this feature, you will configure the Central Management System appliance to accept connection requests using one of the following methods:
Explicitly accept pending connection requests—The Central Management System appliance is typically configured to explicitly accept connection requests. As a Central Management System appliance administrator, you can view the list of pending rendezvous clients and then explicitly accept all of them at once or accept selected clients one at a time.
For detailed information about explicitly accepting pending connection requests, see Accepting a management request using the Central Management System Web UI or Accepting a management request using the Central Management System CLI.
Automatically accept any client-initiated connection request—If you will be adding multiple new appliances with client-initiated connections, Trellix recommends that you temporarily configure the Central Management System appliance to automatically accept any client-initiated connection request.
Client-initiated connections use CMC rendezvous functionality to set up the client record in the CMC.
The Central Management Console (CMC) provides basic management and control capabilities for the rendezvous server (Central Management System appliance) and its clients (managed appliances).
Note
The rendezvous process requires configuration on both the Central Management System appliance and the requesting appliance. You use the cmc rendezvous server commands on the Central Management System appliance and cmc rendezvous client commands on the managed appliance.
Log in to the Central Management System appliance CLI.
Go to CLI configuration mode:
cm-hostname > enable cm-hostname # configure terminal
Enable CMC rendezvous functionality with support for management connections with shifting appliance IP addresses:
cm-hostname (config) # cmc rendezvous server enable cm-hostname (config) # cmc rendezvous server allow-shifting-ips
If you need to stop accepting client-initiated connections that support shifting IP addresses, use the
no cmc rendezvous server allow-shifting-ipscommand.(Optional) If you will be adding multiple new appliances with client-initiated connections, Trellix recommends that you temporarily configure the Central Management System appliance to automatically accept any client-initiated connection request.
cm-hostname (config) # cmc rendezvous server auto-acceptIf you need to stop automatically accepting any client-initiated connection request, use the
no cmc rendezvous server auto-acceptcommand.Check the rendezvous configuration and state:
cm-hostname (config) # show cmc rendezvous CMC rendezvous service name: cmc CMC server: Server rendezvous enabled: yesAuto-accept enabled:noAllow changing IPs from clients: yes Enforce appliance id checks to clients: yes No clients awaiting approval. Default authentication configuration for new clients: Authentication type: ssh-dsa2 password username: admin password password: ******** ssh-dsa2 username: admin ssh-dsa2 identity: ssh-rsa2 username: admin ssh-rsa2 identity:
Save your changes.
cm-hostname (config) # write memory