Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Navigation
Guide That Contains This Content
[+] Expand All
[-] Collapse All

    Configuring IF-MAP Server Replicas (NSM Procedure)

    You can configure an IF-MAP server to replicate all of its IF-MAP data to other IF-MAP servers. For example, if you have a network in Boston and a network in London, you can run IF-MAP servers in both places and configure the IF-MAP servers in both locations to replicate data to one another. These connected IF-MAP servers are known as replicas.

    To configure IF-MAP server replicas to communicate with each other:

    1. In the NSM navigation tree, select Device Manager > Devices. Click the Device Tree tab, and then double-click the Secure Access device for which you want to configure IF-MAP server replicas.
    2. Click the Configuration tab. In the configuration tree, select System > IF–MAP Federation > This Server.
    3. Add or modify settings as specified in Table 1.
    4. Click one:
      • OK—Saves the changes.
      • Cancel—Cancels the modifications.

    Table 1: Replica IF–MAP Server Configuration Details

    OptionFunctionYour Action

    Name

    Specifies a unique name for the replica IF-MAP server.

    Enter a name for the replica IF-MAP server.

    Description

    Describes the replica or replica network.

    Enter a brief description for the replica or replica network.

    Type

    Specifies whether the configuration is for an IF-MAP client or for a replica IF-MAP server.

    From the Type list, select Replica.

    Hostname

    Specifies the hostname that exactly matches the replica’s device certificate.

    Enter the hostname of the replica’s device certificate. The hostname is used when this IF-MAP server initiates a connection to the replica. The fully qualified domain name (FQDN) of the replica's internal or external interface should be used; for a cluster, the FQDN of the internal or external VIP should be used.

    IP Address(es)

    Specifies the IP addresses from which the replica may initiate connections to this server.

    Enter one or more IP addresses from which the replica may initiate connections to this server. If the replica is standalone, for survivability list both the internal and external network interfaces. If the replica is a cluster, for survivability list the internal and external network interfaces of both cluster nodes.

    Authentication Type

    Specifies the authentication type.

    Select the authentication method:

    • Basic—If you select Basic, enter a username and password.
    • Certificate—If you select Certificate, select the certificate authority that issued the IF-MAP replica’s certificate. Enter any restrictions, one per line. If any restrictions match, for example CN=ic.example.com, the certificate is accepted.

    Published: 2013-01-03