It seems like your browser didn't download the required fonts. Please revise your security settings and try again.
Barracuda CloudGen Firewall

This Firmware Version Is End-Of-Support

Documentation for this product is no longer updated. Please see End-of-Support for CloudGen Firewall Firmware for further information on our EoS policy.

How to Set Control Centers into a Parent-to-Child Relation

  • Last updated on

Synchronizing a parent CC with one or more child CCs requires you to exchange the public keys from child and parent, and to copy the node information from the node property window on the child CC to the parent CC. In the following example, all required child CCs are first configured on the parent. Then, the node information is copied from a child to the parent.

In case there are multiple administrators responsible for managing parent and child CC independently, and to avoid any unexpected damage to their CC configuration, it is recommended that these administrators elaborate a common plan for synchronizing prior to setting up synchronizing configurations between their respective Control Centers.

Before You Begin

All Control Centers must be running firmware 7.2.2 or higher.

Configure Identity Information between the Child CCs and the Parent CC

Perform the following steps for all child CCs that you want to import on your parent CC.

Step 1. Get the Private Key Information from the Child CC
  1. Log into your Control Center that will serve as a child CC.
  2. Go to CONFIGURATION > Configuration Tree > Multi Range > Global Settings > CC Identity.
  3. In the left menu, click Trust Chain.
  4. In the Trust Chain Configuration section, click Ex/Import for CC Private Key.
  5. From the list, click Export Public to Clipboard:
    export_cc_public_key_on_slave_cc.png
Step 2. Configure the Identity of the Child CC on the Parent CC
  1. Log into your Control Center that will serve as your parent CC.
  2. Go to CONFIGURATION > Configuration Tree > CC Parameters.
  3. In the left menu, click Switch to Advanced view.
  4. In the left menu, click Split Control Center.
  5. Configure the CC to work as a parent:
    1. Note Type – Select Parent.
    2. Child Control Centers – Click + to configure a new child CC with its synchronization nodes.
    3. The Child Control Centers window displays.
    4. Enter a name for the Control Center.
    5. Click OK.
    6. Enter the IP address for Child Control Center IP.
    7. Click Ex/Import for Child Public Key.
    8. From the list, select Import from Clipboard:
      import_public_key_on_master_02.png
    9. Click OK.
    10. Click Send Changes.
    11. Click Activate.
Step 3. Get the Private Key Information from the Parent CC
  1. Go to CONFIGURATION > Configuration Tree > Multi Range > Global Settings > CC Identity.
  2. In the left menu, click Trust Chain.
  3. In the Trust Chain Configuration section, click Ex/Import for CC Private Key.
  4. From the list, click Export Public to Clipboard:
    export_cc_public_key_on_slave_cc.png
Step 4. Configure the Identity of the Parent CC on the Child CC
  1. Log back into your Control Center that will serve as your child CC.
  2. Go to CONFIGURATION > Configuration Tree > CC Parameters.
  3. For Node Type, select Child.
  4. In the left menu, click Switch to Advanced view.
  5. In the left menu, click Split Control Center.
  6. For Parent CC Public Key, click Ex/Import.
  7. Click Import from Clipboard:
    import_public_key_on_slave_01.png
  8. For Parent Control Center IP, enter the box level IP address of the parent Control Center.
    split_CC_enter_box_level_IP_address_for_parent_CC.png
  9. Click Send Changes.
  10. Click Activate.

Configure the Synchronization Nodes

The following example assumes that a user wants to synchronize the Administrative Roles node.

Repeat the following steps for all paths of each child CC that you want to synchronize with the parent CC.

Step 1. Get the Node Information from the Child CC
  1. Log into your child CC.
  2. Go to CONFIGURATION > Configuration Tree > Multi Range > Global Settings.
  3. Right-click Administrative Roles in the Control Center configuration tree.
  4. From the list, select the Properties node.
  5. The Node Properties window opens.
  6. Locate the line that holds Configuration Node Path.
  7. Using your cursor, highlight the string in the Configuration Node Path field:
    copy_node_from_porperties.png
  8. Right-click the marked string.
  9. A small menu displays.
  10. From the list, select Copy:
    copy_node_info.png
Step 2. Configure the Node Information of the Child CC on the Parent CC
  1. Log into your Control Center that will serve as your parent CC.
  2. Go to CONFIGURATION > Configuration Tree > CC Parameters.
  3. In the left menu, click Switch to Advanced view.
  4. In the left menu, click Split Control Center.
  5. From the list of Child Control Centers, double-click the child CC you want to configure the synchronization node for.
  6. For Synced Configuration Nodes, click + to add a new configuration node.
  7. The Synced Configuration Nodes window displays.
  8. Right-click into the edit field for Source Node Path.
  9. From the list, select Paste.
  10. In the edit field for Source Node Path, delete everything beginning with the last '/' to the end of the string, for example, '/roles'. The edit-field now displays the string '0settings'.
  11. Right-click into the edit field for Source Node Name.
  12. From the list, select Paste.
  13. From the string in the edit field—for example, 0setting/rolesdelete everything from the beginning up to the last '/', for example, 0settings/. The edit-field now displays the string 'roles':
    slave_sync_node_added.png
  14. Click OK.
  15. Click Send Changes.
  16. Click Activate.

Your parent CC is now configured to synchronize the node 'Administrator Roles' with the child CC of your choice. If you make any changes on the parent CC to one of the configured synchronization paths, this path is automatically pushed to the CC if it is reachable and if the sync node is not locked on the child CC.

Status Map on Parent CC and Child CC

On a parent CC, you can see in the status map information about configured child CCs. The column Child CC lists all child CCs synced from the parent CC. In the horizontal line, the status map displays the name of the child Control Center:

status_map_master_CC.png

Because a child CC is only passively listening on sync commands sent by its parent CC, no information is available in the status map:

status_map_slave_CC.png