5. Validate the configuration:
# net validate config ACMECorpNetwork1
Command Successful
6. Activate the configuration:
# net activate config ACMECorpNetwork1
To add Data in Flight Encryption
IP packets have no in-built security measures, which means that access to the network enables
packet content to be viewed and, because there is no verification, there is no indication whether
a packet has been viewed or the content modified. IPsec is an OSI layer 3 protocol that provides
encryption and mutual verification at the IP address level. The IPsec protocol is supported for data
subnet encryption on all StoreOnce models running StoreOnce software version 3.11.0 or later.
Data in Flight Encryption uses the IPsec protocol to support data encryption at subnet level. It
requires the user to pair the IP addresses of the backup media server to the subnet that has been
configured on the StoreOnce Backup system and to create a rule that ensures the pair communicate
uniquely with each other based on a password configured within the rule. Configuration on the
StoreOnce Backup system is via a single StoreOnce CLI command, net add encryption. It
cannot be configured as part of the wizard. But this is only one half of the configuration. The user
must also configure IPsec on the media server that forms the other half of the pair.
Modifying the current network configuration 59
To Next Page
Loading...
Need help?
General