简介
本文描述，当思科电子邮件安全工具(ESA)体验“如何计时了”错误，当尝试创建或参加集群，如果DNS命名指针(PTR)记录不是可用的，和到应急方案问题。
本文档中的信息基于以下软件和硬件版本：
背景信息
当使用团星通信安全性(CSS)时或安全壳SSH参加集群用IP地址， PTR记录要求，否则ESA将提示“被计时的”错误，并且集群加入将发生故障。
当DNS记录更改可能不可能或允许为了适当地创建PTR记录时，有时期。
以下情况可能应用：
- 设备的IP地址使用内部IP地址
- 没有两个设备的PTR记录
- 根DNS或本地DNS不能解析两本地主机主机名
- 不可能编辑或修改根DNS或本地DNS
- 端口22 (SSH)和端口2222 (CSS)在两边打开
- 获得“计时了”在两边的错误
- 不能配置在根DNS的NXDOMAIN那些IP地址的
配置
有使用本地ESA的应急方案，当DNS来源。 从设备CLI，请添加本地DNS解决方法。例如，如果有设备esa1.example.com (192.168.10.1)和(192.168.10.2) PTR记录不可以是解决的esa2.example.com执行以下：
esa1.example.com> dnsconfig
Choose the operation you want to perform:
- NEW - Add a new server.
- EDIT - Edit a server
- DELETE - Remove a server
- SETUP - Configure general settings.
[]> new
Currently using the local DNS cache servers:
1. Priority: 0 192.168.1.53
Do you want to add a new local DNS cache server or an alternate domain server?
1. Add a new local DNS cache server.
2. Add a new alternate domain server.
[]> 2
Please enter the domain this server is authoritative for. (Ex: "com").
[]> 2.10.168.192.in-addr.arpa [enter the in-addr-arpa which serves as PTR, in this example for esa2]
Please enter the fully qualified hostname of the DNS server for the domain
"1.10.10.10.in-addr.arpa".
(Ex: "dns.example.168.192.in-addr.arpa").
[]> esa1.example.com [enter the hostname of the ESA you are configuring this on]
Please enter the IP address of machinea.example.com.
[]> 192.168.10.1 [enter the IP of the ESA you are configuring this on]
esa2.example.com> dnsconfig
Choose the operation you want to perform:
- NEW - Add a new server.
- EDIT - Edit a server
- DELETE - Remove a server
- SETUP - Configure general settings.
[]> new
Currently using the local DNS cache servers:
1. Priority: 0 192.168.1.53
Do you want to add a new local DNS cache server or an alternate domain server?
1. Add a new local DNS cache server.
2. Add a new alternate domain server.
[]> 2
Please enter the domain this server is authoritative for. (Ex: "com").
[]> 1.10.168.192.in-addr.arpa [enter the in-addr-arpa which serves as PTR, in this example esa1]
Please enter the fully qualified hostname of the DNS server for the domain
"1.10.10.10.in-addr.arpa".
(Ex: "dns.example.168.192.in-addr.arpa").
[]> esa2.example.com [enter the hostname of the ESA you are configuring this on]
Please enter the IP address of machinea.example.com.
[]> 192.168.10.2 [enter the IP of the ESA you are configuring this on]
点击<enter>，直到您达到主要提示并且运行进行保存和激活配置更改。
Note:在上述示例中，为请输入的以上域输入此服务器是授权为逆向DNS查找或IP地址192.168.10.1和192.168.10.2的域。 确定IP地址在esa1.example.com和esa2.example.com配置和可及的。
反馈