为SVM DR集群启用FIPS的最佳实践是什么？
适用场景
- SVMDR
- ONTAP 9
问题解答
Vserver灾难恢复 要求在源站点和目标站点上启用FIPS、才能实现兼容性。
1.在集群上启用FIPS时发出警告、指出：
cluster1::*> security config modify -interface SSL -is-fips-enabled trueWarning: This command will enable FIPS compliance and can potentially causesome non-compliant components to fail. MetroCluster and Vserver DRrequire FIPS to be enabled on both sites in order to be compatible. AnSNMP users or SNMP traphosts that are non-compliant to FIPS will bedeleted automatically. An SNMPv1 user, SNMPv2c user or SNMPv3 user(with none or MD5 as authentication protocol or none or DES asencryption protocol or both) is non-compliant to FIPS. An SNMPv1traphost or SNMPv3 traphost (configured with an SNMPv3 usernon-compliant to FIPS) is non-compliant to FIPS.Do you want to continue? {y|n}:2. 如果您运行的是ONTAP 9.8或更早版本、 则要实施FIPS、需要手动重新启动集群中的每个节点。
3.从ONTAP 9.9.1开始 、无需重新启动节点。
注:
-
在重新启动系统之前、您必须确认所有SnapMirror关系均已静用。
-
当SnapMirror关系处于静音状态时、它会在重新启动和故障转移后保持静音状态。