This article explains how to create a SRN (SafeHaven Replication Node) in Azure DR Datacenter.
- User must have an Azure account and permissions to deploy a server in the DR subnet.
- Internet access on DR-SRN in Azure once it is deployed.
- It is assumed here that the user has an Azure account, a VNet created which has accessibility to CenturyLink Cloud Production Datacenter and a Resource Group that will contain all the resources related to SafeHaven.
- Typically CMS and DR-SRN reside in the same subnet so we will simply re-use the Network Security Group we created in the previous step Create CMS in Azure
- It is assumed the user has a storage account created.
Create an Azure instance
- Go to the Azure portal https://portal.azure.com
- Go to Virtual Machines service on the Favorites list or search for the service at top of the page next to the arrow glass.
- Click on the plus sign Add.
- On the Basics tab provide the following information:
- Select a Subscription and a Resource Group.
- Enter a Name for the Virtual Machine.
- Select the Region for the SRN. This location must match the region of the VNet where the Instance will reside on.
- Leave the Availability options on the default value.
- Select Ubuntu Server 16.04 LTS on the Image field.
- For Size click on the Change size link. Search for F4 and then select the F4 Standard type instance. 4 vCPUs, 8 GB of RAM and 16 data disks. Click on the Select button.
- Click on Password for Authentication type and provide both a Username and Password for it. The username cannot be root, the password for root is generated automatically by Azure.
- Leave the INBOUND PORT RULES section unchanged.
- Click on the Next: Disk > button.
- On the Disks tab provide the following information:
- Select Standard HDD for OS disk type.
- Leave the rest of the options unchanged and click on the Next: Networking > button.
- On the Networking tab provide the following information:
- Click on Virtual Network under Network and select the VNet. Azure will filter out automatically the virtual networks that do not match the location selected previously for the Virtual Machine on step 4.
- Select a Subnet
- Leave Public IP value as default, Azure will create a new IP address. The SRN requires access to the Internet therefore a public IP address is needed.
- Select Basic for Network Security Group, by default Azure will create one that has all traffic open to Instances deployed on the same VNet and any Point to Point VPNs on it. Use the automatically created Network security group.
- For Public inbound ports leave the default None option selected.
- Click on the Next: Management > button.
- On the Management tab provide the following information:
- Select a Diagnostics storage account. By default Azure enables the Boot diagnostics on the Virtual Machine.
- Leave all the other values to default and click on the Next: Guest config button.
- Click on the Next: Tags > button and then Next: Review + create >.
- Finally review the settings selected and click on Create.
- Once the Virtual Machine is created go to Virtual Machines service and find the Instance, select it and then click on Networking, write down either the Public IP or Private IP information depending if you will be accessing the server through the Internet or via VPN from CenturyLink.
- SSH to the DR-SRN Instance using the credentials created in step 5.
Once logged in elevate to root access and modify the password
sudo -s passwd root
Enable SSH root login by editing
/etc/ssh/sshd_configwith this line
and if the key based authentication was used to created the user instead of password in the Azure portal, we need to also change
Restart the SSH service
systemctl restart sshd
If ssh as root gets a message like
Please login as the user "seki" rather than the user "root"., please run
rm /root/.ssh/authorized_keysand try again.
Confirm "ssh as root works using password" works