Configuring IRE Network on Air Gap Cluster

Perform the following steps on each node in the Air Gap cluster.

Step 1: Configure Network Interfaces

1. Connect to the node using IPMI console.

2. Launch the HyperScale X network configuration tool:

   ./cvhsx_launch_nwconfig.sh

   3. Add a Data Protection Network.

   While configuring the Data Protection Network, ensure that you use the VLAN dedicated for IRE and select the network interface that is configured for IRE.

   The replication network supports all types of interfaces, including a single network port, bonded interfaces, and VLAN-tagged interfaces.

3. Apply changes and exit.

Step 2: Update Firewall and Services

1. Reconfigure firewall to add the replication interface to the block zone.

2. Stop Commvault services:

   commvault stop

3. Edit HyperScale X network configuration file:

   /etc/CommVaultRegistry/Galaxy/Instance001/MediaAgent/.hyperscalenw.cfg

4. Perform the following changes:

   • Delete the newly added dataProtection network. This is required because the IRE network should not be part of the network configuration seen by Air Gap logic running within the cluster. Air Gap logic shuts down the port of all known networks. Hence, it is important to remove the IRE network from the configuration file so that Airg Gap logic does not interfere with IRE activities (for example, cyber recovery testing).

     Before editing, the network configuration may look similar to the following:

     [network_types]
     bond2 = storagePool
     bond3 = commServeRegistration
     bond4 = dataProtection

     After editing, the network configuration should look like the following (note that dataProtection bond is removed):

     [network_types]
     bond2 = storagePool
     bond3 = commServeRegistration

     Note

     Actual bond or interface name on the node could be different. Make sure you use the correct interface.

5. Restart services using the following commands:

   systemctl restart network
   commvault start