Preparing to accept requests for management connections that support shifting appliance IP addresses using the CLI

Prev Next

Follow these steps to configure the Central Management System appliance to accept client-initiated rendezvous requests for management connections that support appliance IP address changes and automatic reconnections to the Central Management System appliance.

For this feature, you will configure the Central Management System appliance to accept connection requests using one of the following methods:

  • Explicitly accept pending connection requests—The Central Management System appliance is typically configured to explicitly accept connection requests. As a Central Management System appliance administrator, you can view the list of pending rendezvous clients and then explicitly accept all of them at once or accept selected clients one at a time.

    For detailed information about explicitly accepting pending connection requests, see Accepting a management request using the Central Management System Web UI or Accepting a management request using the Central Management System CLI.

  • Automatically accept any client-initiated connection request—If you will be adding multiple new appliances with client-initiated connections, Trellix recommends that you temporarily configure the Central Management System appliance to automatically accept any client-initiated connection request.

Client-initiated connections use CMC rendezvous functionality to set up the client record in the CMC.

The Central Management Console (CMC) provides basic management and control capabilities for the rendezvous server (Central Management System appliance) and its clients (managed appliances).

Note

The rendezvous process requires configuration on both the Central Management System appliance and the requesting appliance. You use the cmc rendezvous server commands on the Central Management System appliance and cmc rendezvous client commands on the managed appliance.

To enable the appliance to accept requests for management connections that support shifting appliance IP addresses:
  1. Log in to the Central Management System appliance CLI.

  2. Go to CLI configuration mode:

    cm-hostname > enable
    cm-hostname # configure terminal
  3. Enable CMC rendezvous functionality with support for management connections with shifting appliance IP addresses:

    cm-hostname (config) # cmc rendezvous server enable
    cm-hostname (config) # cmc rendezvous server allow-shifting-ips

    If you need to stop accepting client-initiated connections that support shifting IP addresses, use the no cmc rendezvous server allow-shifting-ips command.

  4. (Optional) If you will be adding multiple new appliances with client-initiated connections, Trellix recommends that you temporarily configure the Central Management System appliance to automatically accept any client-initiated connection request.

    cm-hostname (config) # cmc rendezvous server auto-accept

    If you need to stop automatically accepting any client-initiated connection request, use the no cmc rendezvous server auto-accept command.

  5. Check the rendezvous configuration and state:

    cm-hostname (config) # show cmc rendezvous
    CMC rendezvous service name: cmc
    
    CMC server:
       Server rendezvous enabled:              yesAuto-accept enabled:noAllow changing IPs from clients:        yes
       Enforce appliance id checks to clients: yes
    
       No clients awaiting approval.
    
       Default authentication configuration for new clients:
       Authentication type: ssh-dsa2
       password username: admin
       password password: ********
       ssh-dsa2 username: admin
       ssh-dsa2 identity: 
       ssh-rsa2 username: admin
       ssh-rsa2 identity: 
  6. Save your changes.

    cm-hostname (config) # write memory