Multinode Configuration Management

The config synchronization feature supports simple configuration management across an enterprise without requiring you to deploy the systems as a cluster. You synchronize a partial configuration from the running configuration on the source system to the running configuration on one or more target systems.

Disable gateway push config while using nSA config sync.

Config Synchronization

To configure config synchronization rule:

  1. Log into the nSA as a Tenant Admin.

  2. From the ICS menu, click Gateways, then click Multinode Configuration and then select Config Synchronization.

  3. In the Config Synchronization page, click Create Config Sync Rule.

    img/config_sync_create.png
  4. Enter Config Sync Rule Name, select a Gateway or Cluster, and enter Description.

  5. Under Target Gateways, select Gateways and Clusters to synchronize.

    It is recommended to not use more than 15 targets per config sync rule.

  6. Under Select Configuration, select a configuration to synchronize to the target Gateways and Clusters.

  7. You can expand all the configurations using Expand All and select all the configurations using Select All. You can expand each group and select the required settings.

    img/depend_conf.png
  8. Look for any dependent configuration and select the required settings. The Review Dependencies button will appear at the bottom of the page.

  9. Select the Mode: Manual or Automatic. Automatic option will sync the targets whenever there is change in source configuration.

  10. Select the Action: Merge or Replace. The Merge option applies only changes in source to the targets, whereas the Replace option replaces the targets configuration with the source configuration.

  11. To review the dependencies, click Review Dependencies.

    - To make any changes, click Skip and select the required dependencies.

    - To proceed with the changes, click Select Dependencies and Proceed.

    img/review_depend.png
  12. Click Create Config Sync Rule.

    The config sync rule gets listed in the Config Synchronization page.

Editing an Existing Config Sync Rule

To edit an existing config sync rule:

  1. In the Config Synchronization page, click on the config sync rule name that you want to edit.
  2. In the Edit Rule page, make the necessary changes. You cannot modify the rule name and source Gateway or Cluster.
  3. Click Update Config Sync Rule.
  4. If Manual Mode is selected, then in the Config Synchronization page, select the check box corresponding to the config sync rule that you modified. Then select Actions > Trigger Config Sync Rule.

    The Preview Config Sync Rule page appears.

    img/preview_config_sync_rule.png
  5. Preview the config sync rule details, and click Trigger Rule.

    Preview before sync works only when one manual config sync rule is triggered.

Removing Config Sync Rule(s)

To delete one or more config sync rule(s):

  1. In the Config Synchronization page, select the check boxes next to the config sync rule names that you want to delete.
  2. Select Actions > Delete.
  3. Click OK to confirm the deletion.

Cloning a Config Sync Rule

Cloning allows the admin to work on a copy of the original config sync rule and create a new rule.

To clone a config sync rule:

  1. In the Config Synchronization page, identify the suitable config sync rule that you want to clone from the list.
  2. Select the check box next to the config sync rule name.
  3. Select Actions > Duplicate Rule.
  4. In the Duplicate Config Sync Rule page displayed, edit the rule name. You cannot modify the source Gateway or Cluster.

    img/preview_config_sync_rule.png
  5. Make required changes to the rule and dependencies. For details, see Config Synchronization.
  6. Click Duplicate Config Sync Rule.

    The new rule gets listed in the Config Synchronization page.

Viewing Config Sync Rule Status

To view the config sync rule status on the target gateways:

  1. Click on the config sync rule name that you want to view the status.
  2. Click the Status tab.

    A list of target gateways, their config sync rule status, start and end time, and brief description is displayed. Start time and end time helps admin to know exactly when the config sync rule was triggered and when the config is imported on the ICS gateway.


  3. Click Reload Pageto view the latest status of all the gateways. The status includes:
    • Not Synced - Initial state
    • Pending - Configuration pushed to ICS gateway
    • Importing - Importing configuration on ICS gateway
    • Failed - Configuration import failed on ICS gateway
    • Successful - Configuration import successful on ICS gateway
    • Timed out - Timed out because the status stuck stuck at Pending / Importing state for more than 2 hours
  4. For the target gateways with status "Pending", Importing" or "Timed out", click Refresh GW Status that fetches the latest status from the gateway. The status and description columns are updated according to the latest status of the gateway.

Config Sync status history shows the history of previous states for each target gateway.

Config Sync Alerts

The following alerts are generated:

  • Config Sync Rule Deleted - This alert is generated when the Config Sync rule is deleted.
  • Config Sync Rule Updated - This alert is generated when the Config Sync rule is updated.
  • Config Sync Target Cluster Deleted - This alert is generated when the Target Cluster, which is in the Config Sync rule, gets deleted.