To configure the Veritas Access cluster on the appliance:

1. Log in to the Access Appliance shell menu of one of the appliance nodes using the default credentials:

   User: admin

   Password: P@ssw0rd

2. Enter the configure cluster command to start the cluster configuration wizard.
3. Type yes to continue.
4. Enter a name for the cluster.

   Cluster names should be DNS-compatible. DNS-compliant cluster names should conform to the following naming conventions:

   • Must be at least three and no more than 55 characters long.

   • Allowed characters in a cluster name are lowercase letters, numbers, and hyphens 'a-z, 0-9, -'. Any other character is invalid.

   • Must start with a lowercase letter and must not start with a hyphen ('-') or number.

   • Must end with a lowercase letter or a number.

   • Should not be an IP address.

   Note:

   If you plan to use Active Directory authentication, Windows Active Directory restricts a NetBIOS name or a computer object name to a maximum of 15 characters. Access Appliance uses the first 15 characters of the cluster name to create a NetBIOS name to comply with the Windows AD restriction. Ensure that the chosen cluster name is unique in the first 15 characters so the objects created in the domain are distinct with unique names.

5. For a two-node configuration, if VLAN is configured for the appliance management network, specify the VLAN ID for both the nodes.

   For a single-node configuration, if VLAN is configured for the appliance management network, specify the VLAN ID for the node.

6. Enter the eth1 IP addresses for each node, separated by a space for a two-node configuration. For a single-node configuration, specify a single eth1 IP address.
7. Enter the maintenance user password for appliance nodes.

   After specifying the password, the storage on each of the nodes is scanned. The data, fencing, and configuration volumes are created when you scan the storage. The configuration cannot proceed if the storage scan operation fails.

8. If the appliance nodes are configured on a VLAN, enter the management network VLAN ID (1 - 4094). Leave this field empty to skip VLAN configuration.

   Enter the IP addresses of the appliance nodes for clustering 
   (separated by a space): 
   Enter the maintenance user password of the appliance nodes

9. (Only for 3360 Appliance) Set the BIOS password.

   Do you want to set BIOS password for the cluster? [yes,no] (yes)
   
    - BIOS password must be at least 8 and at max 16 characters long.
    - BIOS password must contain at least 1 uppercase letter.
    - BIOS password must contain at least 1 lowercase letter.
    - BIOS password must contain at least 1 digit.
    - BIOS password must contain at least 1 special character.
   
   Enter the BIOS password:
   Confirm the BIOS password:

10. Specify whether you want to configure network bonding for the public network interfaces. For the Access 3340 Appliance model, you can configure network bonding for eth4 and eth5. For the Access 3350 Appliance model and the Access 3360 Appliance model, you can configure network bonding for eth4 and eth6. To configure network bonding, type yes and continue to step 11; else type no and go to step 12.

    Note:

    For Access 3350 and 3360 Appliance models, you can only group eth4 and eth6 to create bond0 during the initial configuration even if all the four public interfaces, including the optional interfaces eth5 and eth7 are plugged in during the initial configuration. You can create bond1 for eth5 and eth7 interfaces from the Access command-line interface after completing the initial configuration.

11. If you typed yes in step 10, complete the following steps and go to step 15.

    • Specify the mode for the network bonding.

    • If you select mode 3 (balance-xor) or 5 (802.3ad), specify the transmit hash policy to use.

    • For a two-node configuration, enter the starting IP address from the range of public IP addresses that you have reserved. At a minimum, you need to reserve two continuous public IP addresses.

      For a single-node configuration, specify a single public IP address to assign to the bonded interface. If you specify more than one IP address, the configuration fails.

    • Enter the starting virtual IP address from the range of virtual IP addresses that you have reserved. At a minimum, you need to reserve two continuous virtual IP addresses.

    See About obtaining IP addresses for Veritas Access.

12. Enter the number of public IP addresses that you want to configure for the public data network. You can specify any value from 0 to 4 considering each node of a 2-node Access cluster has two public network interfaces. For a single-node configuration, you can specify any value from 0 to 2.

    If you choose to configure one or more IP addresses, you are prompted to enter the specified number of IP addresses. You have the option to enter a maximum of 32 IP addresses. However, only the number of IP addresses that you specified are configured and the rest are maintained as free IP addresses in the cluster.

    You can enter individual public IP addresses for the data network or an IP address range. You can specify IPv4 or IPv6 addresses. The addresses need not be contiguous. An IPv4 range is supported.

    For example, to specify an IP range, type 10.182.12.89-92.

    The IP addresses are assigned to the public interfaces of both the nodes using the round-robin algorithm, selecting the first public interface of both the nodes followed by the second public interface of both the nodes. For example if you specify 3, the first public interface of both the nodes is assigned an IP address followed by the second public interface of the first node. If you specify 3 and choose to enter 4 IP addresses, the 3 IP addresses are assigned using the round-robin algorithm and 1 IP address is maintained as a free IP address in the cluster. If you enter 0, no public IP address is configured and you are not prompted to specify the IP addresses.

    See About obtaining IP addresses for Veritas Access.

13. Enter the total number of virtual IP addresses to assign for the data network.

    Note:

    Starting with version 8.0, you can assign a virtual IP address to a public data network interface that does not have a physical IP address assigned to it. Earlier, a physical IP address was required to be assigned to a public data network interface if you wanted to assign a virtual IP address to it.

14. Enter the starting virtual IP address or individual virtual IP addresses separated by a space or a comma. You can specify IPv4 or IPv6 addresses. The addresses need not be contiguous. An IPv4 range is supported.
15. Enter the netmask for the data network IP addresses.
16. Enter the gateway IP address of the data network.
17. Enter the console virtual IP address.
18. Enter the host name for the nodes. For a single-node configuration, specify a single host name.

    The host name must be at least 3 and no more than 63 characters long.

19. Enter the IP address or the FQDN of the NTP server.

    If you specify the FQDN of the NTP server, you must configure the DNS server. Enter the DNS server IP address and go to step 21. If you specify the IP address of the NTP server continue to step 20.

20. Specify whether you want to configure a DNS server.

    If you opted to configure a DNS server, enter the DNS server IP address.

    Note:

    This is an optional step, and only required if the DNS server was not configured earlier, or you had configured the appliance node host name, or you want to change the previous DNS configuration. Ensure that the configured DNS server can resolve the eth1 IP address to a valid node host name as this is required for AutoSupport CallHome to work correctly.

21. Enter the DNS server domain name.
22. Enter the time zone. The default value is Pacific.
23. Enter the IP address for the private network.

    The private network can be any IPv4 address that does not conflict with the provided management or data network ranges.

    Note:

    The base network IP address is calculated by using the netmask that is specified for the private network, and the IP addresses are assigned starting from this base IP address. The first IP address is reserved for the NLM (Network Lock Manager) service and successive IP addresses are assigned to the network interfaces.

24. Enter the netmask for the private IP address.

    The netmask is used to customize the private IP range. The netmask must be 255.255.224.0 or greater.

25. Enter the starting IPv6 address for the private network.
26. Enter the prefix for the private IPv6 address.
27. To configure the cluster in lockdown mode, enter yes.

    If you opted to configure the cluster in lockdown mode, specify the following options:

    • Lockdown mode: The lockdown mode creates Write Once Read Many (WORM) storage that prevents your data from being encrypted, modified, or deleted. You can specify enterprise or compliance mode, with compliance mode providing the highest level of data security.

    • Minimum retention period: The minimum duration in seconds, hours, days, weeks, months, years, for which to retain the data. The minimum retention period is 1 hour.

    • Maximum retention period: The maximum duration in seconds, hours, days, weeks, months, years, for which to retain the data. The maximum retention period is 60 years.

    You can also change the lockdown mode after the cluster is configured. For details, see the Veritas Access Appliance Administrator's Guide.

28. Create at least one new administrator user account, which you can use to log in the cluster after it is configured. You can create a maximum of 10 administrator user accounts. The default administrator account (admin) is used only during the cluster configuration and is disabled after the cluster is configured successfully.

    Ensure that the following username requirements are met:

    • The username must contain a minimum of four and a maximum of 31 characters.

    • The username cannot begin with a numeric character and can include only underscore (_) and dash (-) as special characters.

    • The username cannot be root, admin, primary, maintenance, sysadmin, or any other username that already exists on the system.

    Ensure that the following password requirements are met:

    • The password cannot reverse the entire user name.

    • The password must contain at least eight characters.

    • The password must contain at least one numeric character (0-9), at least one lowercase character (a-z), and at least one uppercase character (A-Z).

    • The password must contain at least one special character. Permitted special characters are !#$%&+,-.<=>@[]^_{|}~

    • The password cannot include spaces and cannot be a dictionary word.

29. Review the configuration summary and type yes to continue and begin the configuration.

    If you have configured network bonding, bond0 is created for the public network and the message Public network connection provided by bond0 with subordinate network interfaces is displayed.

    The configuration process can take around 40 minutes to complete. During the configuration, disk-based fencing is configured. You cannot change the fencing configuration.

    The URL to access the Access web interface is displayed during the configuration.

    The appliance is restarted to bring up the Access services as part of the configuration process. After the configuration is complete, a summary of the cluster configuration is displayed.

30. Change the known default password of the maintenance and IPMI (if the sysadmin account uses the default password) user accounts.

    Note:

    The sysadmin password must be different from the last two passwords.

    Veritas enforces changing the known default passwords during the initial configuration to ensure that the default passwords do not remain active on the node.

    Ensure that the following password requirements are met:

    • The password cannot reverse the entire user name.

    • The password must contain at least eight characters.

    • The password must contain at least one numeric character (0-9).

    • The password must contain at least one lowercase character (a-z).

    • The password must contain at least one uppercase character (A-Z).

    • The password must contain at least one special character (~!@#$%^&+,-<=>[]_{}|).

    Note:

    The maintenance user password must be the same on each node. If the password expires, log in to the Access web interface with the maintenance account to change the password.