Configure Replication Network on Air Gap Cluster

Perform the following steps on each node in the Air Gap cluster.

Step 1: Configure Network Interfaces

1. Connect to the node using IPMI console.

2. Launch the HyperScale X network configuration tool:

   ./cvhsx_launch_nwconfig.sh
   

   3. Add a Data Protection Network.

   While configuring the Data Protection Network, ensure that you use the VLAN dedicated for IRE and select the network interface that is configured for IRE.

   The replication network supports all types of interfaces, including a single network port, bonded interfaces, and VLAN-tagged interfaces.

3. Apply changes and exit.

Step 2: Update Firewall and Services

1. Reconfigure firewall to add the replication interface to the block zone.

2. Stop Commvault services:

   commvault stop
   

3. Edit HyperScale X network configuration file:

   /etc/CommVaultRegistry/Galaxy/Instance001/MediaAgent/.hyperscalenw.cfg
   

4. Perform the following changes:

   • Delete commServeRegistration and rename dataProtection to commServeRegistration.

     For example:

     Before:

     [network_types]
     bond1 = commServeRegistration
     bond2 = storagePool
     bond3 = dataProtection
     

     After:

     [network_types]
     bond2 = storagePool
     bond3 = commServeRegistration
     

     Note

     Actual bond or interface name on the node may be different. Make sure you use the correct interface.

   • Delete the newly added dataProtection network (this is required because the IRE network should not be part of network config seen by Airgap logic running within the cluster. Airgap logic shuts down the port of all known network. Therefore, it is important to remove the IRE network from the configuration file so that Airgap logic does not interfere with IRE activities (for example, cyber recovery testing).

     The network configuration before edit may look something like this:

     [network_types]
     bond2 = storagePool
     bond3 = commServeRegistration
     bond4 = dataProtection
     

     The network configuration after edit should look like this (note that dataProtection bond is removed)

     [network_types]
     bond2 = storagePool
     bond3 = commServeRegistration
     

     Note

     Actual bond or interface name on the node may be different. Make sure you use the correct interface.

5. Restart services using the following commands:

   systemctl restart network
   commvault start