IronPort - advanced configuration guide

Cluster Organization
8-2
Cisco IronPort AsyncOS 7.6 for Email Advanced Configuration Guide
Chapter 8 Centralized Management
A cluster must consist entirely of machines in the same series (X-Series and C-Series are
compatible).
For example, Cisco IronPort X1000, C60, C600, C30, C300, and C10 appliances can be in the same
cluster; however, C60 and A60 appliances cannot be in the same cluster. If you attempt to add an
incompatible appliance to an existing cluster, an error message explaining why that appliance cannot
be added to the cluster will be displayed.
A cluster must consist entirely of machines running the same version of AsyncOS.
See Upgrading Machines in a Cluster, page 8-13 for how to upgrade members of a cluster.
Machines can either join the cluster via SSH (typically on port 22) or via the Cluster Communication
Service (CCS).
See Cluster Communication, page 8-19.
Once machines have joined the cluster, they can communicate via SSH or via Cluster
Communication Service. The port used in configurable. SSH is typically enabled on port 22, and by
default CCS is on port 2222, but you can configure either of these services on a different port.
In addition to the normal firewall ports that must be opened for the appliance, clustered machines
communicating via CCS must be able to connect with each other via the CCS port. See Cluster
Communication, page 8-19.
You must use the Command Line Interface (CLI) command clusterconfig to create, join, or
configure clusters of machines.
Once you have created a cluster, you can manage non-cluster configuration settings from either the
GUI or the CLI.
See Creating and Joining a Cluster, page 8-4 and Administering a Cluster from the GUI, page 8-16.
Within a cluster, configuration information is divided into 3 groupings or levels. The top level describes
cluster settings; the middle level describes group settings; and the lowest level describes
machine-specific settings.
OL-25137-01