Multi-Domain Server General

What can I do here?

Use this window to configure the general properties for a Multi-Domain Server or Multi-Domain Log Servers.

Getting Here - SmartConsole for Multi-Domain Server > Multi Domain > New > Multi-Domain Server > General page Or: SmartConsole for Multi-Domain Server > Multi Domain > New > Multi-Domain Log Servers > Multi-Domain page

Multi-Domain Server General

Basic Details:

• Type Object Name - Enter a unique name for this Multi-Domain Server or Multi-Domain Log Servers.
• Type Object Comment - Optional: Enter a textual description or comment for this Multi-Domain Server or Multi-Domain Log Servers.
• IP Address - Enter the Multi-Domain Server or Multi-Domain Log Servers IP address

  Important - You must always assign an IPv4 address to a Multi-Domain Server or Multi-Domain Log Servers.

• Connect - Click to establish SIC trust
• Revoke - Click to revoke a certificate
• View - Click to see SIC details

Platform

• OS - Select an operating system
• Version - Select a release version
• Hardware - Select the appliance model or computer type

Note - Platform details are not automatically entered when the Primary MDS is created. You can select the correct details but the fields have no functionality.

Creating a Secondary Multi-Domain Server

This section shows you how to create a new secondary Multi-Domain Server.

Important: Before you start this procedure, make sure to define the physical server as the correct server type (Secondary Multi-Domain Server or Multi-Domain Log Server) during installation. An incorrect definition can cause deployment failure.

To create a new, secondary Multi-Domain Server:

1. If you did not do so, install a new R80 secondary Multi-Domain Server.

   Follow the procedures in the R80 Installation and Upgrade Guide. Make sure to define this server as a secondary Multi-Domain Server in the First Time Wizard. Connect to the Primary Multi-Domain Server with SmartConsole and go the Domains view.

2. In the Multi-Domain navigation toolbar, click New > Multi-Domain Server.
3. Enter a unique name for this Multi-Domain Server.

   To get the IP address automatically, the name must be in the DNS.

4. Enter the IPv4 address or click Resolve IP to get the IP address from the DNS.
5. Select the platform operating system, software version, and hardware type.
6. Click Connect to establish SIC trust.

The new Multi-Domain Server automatically synchronizes with all existing Multi-Domain Servers and Multi-Domain Log Servers. The synchronization operation can take some time to complete, during which a notification indicator shows in the task information area.

Changing an Existing Multi-Domain Server

You can change the settings for an existing Multi-Domain Server or Multi-Domain Log Server.

To change the settings for an existing Multi-Domain Server:

1. Double-click the Multi-Domain Server or Multi-Domain Log Server in the top row of the Domains grid.
2. In the Multi-Domain Server window, change the parameters in the General, Multi-Domain and Log Settings views.

Note - You cannot change the Multi-Domain Server name.

Re-Establishing SIC Trust for a Secondary Multi-Domain Server

Important - You can only re-establish SIC trust on a Secondary Multi-Domain Server or Multi-Domain Log Servers. There is no option to establish SIC trust on the Primary Multi-Domain Server.

It is occasionally necessary to re-establish trust between a Primary and secondary Multi-Domain Server or Multi-Domain Log Server. This can occur for many reasons, including:

• Changes to the IP address of the Primary Multi-Domain Server, Secondary Multi-Domain Server or Multi-Domain Log Server
• Failure and recovery of the Primary Multi-Domain Server
• Promotion of a Secondary Multi-Domain Server to Primary Multi-Domain Server
• Internal Certificate Authority (ICA) failure on the Primary Multi-Domain Server

To re-establish SIC trust:

1. Open a command line interface to the Secondary Multi-Domain Server or Multi-Domain Log Server.
2. Log in and run: mdsconfig
3. Enter the number for Secure Internal Communication, and then press Enter.
4. Enter y to confirm.
5. Enter and confirm the activation key.
6. Enter the number for Exit.
7. Wait for Check Point processes to stop and automatically restart.
8. In the SmartConsole Multi-Domain view, double-click a Secondary Multi-Domain Server or Multi-Domain Log Server object.
9. In the Multi-Domain Server window, click Connect.
10. In the Initialize SIC window, enter activation key that you entered in step 5 above.

    If successful, the Certificate State field shows Trust established.

Deleting a Secondary Multi-Domain Server or Multi-Domain Log Server

To delete a secondary Multi-Domain Server:

1. Move each Active Domain Management Server on the secondary Multi-Domain Server to another Domain Management Server.
2. Connect to the command line on the Multi-Domain Server to be deleted and run: mdsstop
3. In SmartConsole, right-click the secondary Multi-Domain Server, and then select Delete Multi-Domain Server.
4. Confirm the action and click OK.
5. Publish the change.

Note - This procedure deletes all standby and non-primary Domain Management Servers on the Secondary Multi-Domain Server. You cannot delete the Primary or Active Domain Management Server.