Step 1
| Using a Secure
Shell (SSH) client, log into one of the hosts in your cluster.
When prompted,
enter your Linux username ('grapevine') and password for SSH access.
|
Step 2
| Enter the grape config display command to view and confirm your current GRE tunneling configuration.
$ grape config display
The
enable_secure_tunnel value will be set to
false for a GRE configuration.
|
Step 3
| Enter the
following command to access the configuration wizard.
$ config_wizard
|
Step 4
| Review the
Welcome
to the APIC-EM Configuration Wizard! screen and choose the option
to remove the host from the cluster:
|
Step 5
| A message
appears with an option to
[proceed] and remove this host from the cluster.
Choose
proceed>> to begin. After choosing
proceed>>, the configuration wizard begins to
remove this host from the cluster.
At the end of
this process, this host is removed from the cluster.
|
Step 6
| Repeat the above
steps (steps 1-4) on the second host in your cluster. This will break up your
multi-host cluster.
Important:
Make a note of
the final host in the cluster that you have just broken up or disassembled. You
must perform the next steps (enabling IPSec tunneling) on that final host. For
example, with 3 hosts in a cluster (A, B, and C) and you first remove host A,
then remove host B, then you must enable IPSec on host C.
|
Step 7
| Using a Secure
Shell (SSH) client, log into the last host in your cluster and run the
config_wizard command.
$ config_wizard
|
Step 8
| Review the
current configuration values in the configuration wizard and click
next>>, until you access the
INTER-HOST COMMUNICATION screen.
|
Step 9
| Configure IPSec
tunneling for communications between the hosts in a multi-host cluster by
selecting
yes.
By entering
'yes', you are configuring IPSec tunneling with this step.
|
Step 10
| Click
next>> until the last step of the
configuration wizard process is reached.
|
Step 11
| Click
proceed>> to have the configuration wizard
save and apply your configuration changes to your
Cisco APIC-EM
deployment.
At the end of
the configuration process, a
CONFIGURATION SUCCEEDED! message appears.
Next, proceed to
log into the other hosts previously in your multi-host cluster and use the
configuration wizard to reassemble the cluster (with IPSec tunneling configured
between the hosts).
|
Step 12
| Using a Secure
Shell (SSH) client, log into one of the other hosts in your cluster.
When prompted,
enter your Linux username ('grapevine') and password for SSH access.
|
Step 13
| Enter the
following command to access the configuration wizard.
$ config_wizard
|
Step 14
| Review the
Welcome
to the APIC-EM Configuration Wizard! screen and choose the
Create a
new APIC-EM cluster option.
Note
|
Joining this
other (second) host to the host with the enabled IPSec tunneling, automatically
configures IPSec tunneling on this other (second) host.
|
|
Step 15
| Proceed to
recreate the cluster using the configuration wizard.
For additional information about this step and process, see .
|
Step 16
| At the end of
the configuration process, click
proceed>> to have the configuration wizard
save and apply your configuration changes.
A
CONFIGURATION SUCCEEDED! message appears.
|
Step 17
| Using a Secure
Shell (SSH) client, log into the third host and use the configuration wizard to
join the new multi-host cluster.
When prompted,
enter your Linux username ('grapevine') and password for SSH access.
|
Step 18
| Enter the
following command to access the configuration wizard.
$ config_wizard
|
Step 19
| Review the
Welcome to the APIC-EM Configuration Wizard! screen
and choose the
Add
this host to an existing APIC-EM cluster option.
Note
|
Adding this
host to the new multi-host cluster with the enabled IPSec tunneling,
automatically configures IPSec tunneling on this host.
|
|
Step 20
| Proceed to add
this host to the cluster using the configuration wizard.
For additional information about this step and process, see the Cisco Application Policy Infrastructure Controller Enterprise
Module Installation Guide.
|
Step 21
| At the end of
the configuration process, click
proceed>> to have the configuration wizard
save and apply your configuration changes.
A
CONFIGURATION SUCCEEDED! message appears.
At the end of
this step, you have updated your cluster and configured IPSec tunneling.
|