Creating a Replication Target (BUI)

A replication target establishes a secure communication connection between source and target appliances.

Before You Begin

See Checking Source and Target Compatibility to ensure your replication target is compatible with the source.

If you need to ensure that the replication traffic goes over a particular network interface, set up a static route for the target that specifies that interface as shown in Setting Up Network Interfaces and Static Routing (BUI).

Source appliance: From the Configuration menu, select Services, then Remote Replication.
Next to Targets, click the add icon .

The Add Replication Target dialog box is displayed.
Enter information about the replication target.
- Name - The name of the target to display in the BUI and CLI of the source appliance.
- Hostname - The fully qualified domain name, or IPv4 or IPv6 address of the target appliance. The recommended value to use is the target's fully qualified domain name. See the description for Host Match.
- Username - The name of the user on the target appliance who is authorized to set up replication relations (Appliance/peerSetup authorization). It is not recommended to use the "root" user account.
- Choose one of the following authentication options and complete the field:
  
  Password - The password for the user specified in the Username field.
  
  Token - The REST authorization token for the user specified in the Username field. For information about REST tokens, see Preference Properties.
- Host Match - When this option is enabled, the system verifies that the hostname that you specified in the Hostname field in this dialog box matches a host specified in the certificate. If you specify an IP address or an unqualified domain name for the Hostname, and the certificate only has fully qualified domain names, the Host Match fails and the target is not created.
  
  If the target is using an ASN-based certificate, specify the target's fully qualified domain name for the value of the Hostname property.
  
  If you disable the Host Match option, hostname validation is not performed.
  
  For stronger security, set the value of Hostname to the target's fully qualified domain name, and make sure the Host Match option is enabled.
Click Add.

The certificate trust check is performed to verify whether the certificate is trusted.

If the certificate is not trusted by the source, the certificate is presented for you to review, and you are prompted to accept or reject the certificate as described in Testing the Connection (BUI). If you accept the certificate, the certificate is added to the trust list of the source, and the target is created. If you reject the certificate, the certificate is not added to the trust list of the source, and the target is not created.

If the certificate is already trusted, the target is created, and you are not prompted to accept the certificate.