cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
jazli_abdulah
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 1 of 17

How to setup DNS to swing Pri and Sec ePO?

Jump to solution

I've setup the test environment below:

 

DC

Hostname: AD

IP: 192.168.x.x

 

Pri ePO

Hostname: ePOA

IP: 192.168.x.x

Pri DB

Hostname: DBA

IP: 192.168.x.x

 

Sec ePO

Hostname: ePOB

IP: 1192.168.x.x

Sec DB

Hostname: DBB

IP: 192.168.x.x

 

AH1

Hostname: AHA

IP: 192.168.x.x

AH2

Hostname: AHB

IP: 192.168.x.x

 

Test Result:

 

Before swing

nslookup ePOA

192.168.x.x

nslookup DBA

192.168.x.x

 

After swing

nslookup ePOA

192.168.x.x

nslookup DBB

192.168.x.x

 

And ePO works!

 

Any help will be greatly appreciated.

Thanks!

2 Solutions

Accepted Solutions
cdinet
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 11 of 17

Re: How to setup DNS to swing Pri and Sec ePO?

Jump to solution

When epo is clustered, you have to use the virtual cluster name and IP for clients to connect to, not any individual primary or secondary node names/ip's.  That way if the cluster fails over to one of the other nodes, the connection is not lost, as the connection is made to the cluster itself that controls which node is active and receiving the traffic.

Was my reply helpful?
If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?

View solution in original post

jazli_abdulah
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 16 of 17

Re: How to setup DNS to swing Pri and Sec ePO?

Jump to solution

I've set up the sql cluster the same way as I did for ePO and use the virtual sql ip/hostname of the sql cluster for ePO to connect to instead of any individual node.

SQL Cluster Validation:

  1. Shutdown Pri DB (DBA). Sec DB (DBB) taking over
  2. Launch ePO console from Pri ePO (ePOA).
  3. Failed to launch ePO console

I try to figure out the issue and found a solution by modifying Pri DB (DBA) IP to Virtual SQL IP.

  1. Open Internet Explorer.
  2. Open the Configure Database Settings page. Go to https://<servername>:8443/core/config
  3. Under Configure Database Settings
  4. Modify the Host name or IP address to Virtual SQL IP
  5. Click Test Connection. Verifies that the connection to the database is successful with the new settings
  6. Click Apply
  7. Restart the ePolicy Orchestrator Application Server service:
    1. Press Windows+R, type services.msc, and click OK.
    2. Right-click the following services and select Restart:
       
      McAfee ePolicy Orchestrator x.x.x Application Server
      McAfee ePolicy Orchestrator x.x.x Server
      McAfee ePolicy Orchestrator x.x.x Event Parser
  8. Verify the ePO console loads

Did the SQL Cluster Validation steps again. It works like a charm! Thank you! 😄

View solution in original post

16 Replies
aguevara
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 2 of 17

Re: How to setup DNS to swing Pri and Sec ePO?

Jump to solution

Probably is best to ask that vendor swing Pri and see how redirect the traffic unless someone else have better knowledge than me with that vendor

Was my reply helpful?
If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?

 

cdinet
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 3 of 17

Re: How to setup DNS to swing Pri and Sec ePO?

Jump to solution

Additionally, please do not post sensitive info on a public forum such as IP's and host names.

Was my reply helpful?
If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?

jazli_abdulah
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 4 of 17

Re: How to setup DNS to swing Pri and Sec ePO?

Jump to solution
Especially on DNS related questions, do I need to asked Microsoft? Not sure whether I might need to tweak the settings inside DNS Manager
aguevara
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 5 of 17

Re: How to setup DNS to swing Pri and Sec ePO?

Jump to solution

Probably yes or the vendor itself

 

cdinet
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 6 of 17

Re: How to setup DNS to swing Pri and Sec ePO?

Jump to solution

Are you talking about epo and db clustering?  What exactly do you mean by "swing"?

Was my reply helpful?
If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?

jazli_abdulah
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 7 of 17

Re: How to setup DNS to swing Pri and Sec ePO?

Jump to solution

No. What I really mean was ePO and DNS clustering. The term "swing" is pointing.Test Scenario.jpg

Customer want it this way. One main reason was; If customer updated the DNS associate domain names with other forms of information to (Pri ePO), the domain DNS will be served and share records by the other server (Sec ePO) in the cluster. Instead of using Pri ePO. Use Sec ePO.

 

I need the setup and configuration of the cluster services and application to work.

aguevara
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 8 of 17

Re: How to setup DNS to swing Pri and Sec ePO?

Jump to solution

i think something happen to the message i sent yesterday, maybe i didn't hit "POST" but if you are a Mcafee Professional services then lets take this internally 

jazli_abdulah
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 9 of 17

Re: How to setup DNS to swing Pri and Sec ePO?

Jump to solution
Gosh! I need the solution for this
jazli_abdulah
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 10 of 17

Re: How to setup DNS to swing Pri and Sec ePO?

Jump to solution
I guess I should speak to Microsoft Technical Support on DNS cluster queries
You Deserve an Award
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community