To create a Master Grid, you first create a Multi-Grid Master and then add members. Although the Multi-Grid Master can be a single appliance (a "single Multi-Grid Master"), a more resilient design is to use an HA pair (an "HA Multi-Grid Master") to provide hardware redundancy. (For information about Infoblox HA pairs, refer to the NIOS Administrator Guide. You can create a Master Grid in either IPv4 or dual mode (IPv4 and IPv6). An IPv4 Master Grid uses IPv4 as the Grid communication protocol and a dual mode Master Grid uses IPv4 or IPv6 as the communication protocol.

Note that the appliances in the Master Grid must have the Multi-Grid Management license installed and cannot have any other licenses installed, such as IF-MAP or DNS/DHCP. vNIOS appliances must have vNIOS and Multi-Grid Management license installed.

Master Grid Setup Wizard

The Master Grid Setup Wizard simplifies configuring a Master Grid. You can use it to configure an HA or single Multi-Grid Master and to join appliances to the Master Grid. The Master Grid Setup Wizard appears when you first log in to the appliance. After that, you can access it at anytime by expanding the Toolbar and clicking Master Grid Properties -> Setup Wizard.

Creating an HA Multi-Grid Master

You can create an HA Multi-Grid Master in either IPv4 or dual mode. An IPv4 HA Master uses IPv4 as the communication protocol between the two nodes and for Grid communication. But in a dual mode HA pair, you can select either IPv4 or IPv6 as the communication protocol between the two nodes and for Grid communication. The following procedure explains how to put two NIOS appliances on the network and use the Master Grid Setup Wizard to configure them as Nodes 1 and 2 to form an HA Multi-Grid Master.

Configuring the Connecting Switch

To ensure that VRRP (Virtual Router Redundancy Protocol) works properly, configure the following settings at the port level for all the connecting switch ports (HA, LAN1, and LAN2):

• Spanning Tree Protocol: Disable. For vendor specific information, search for "HA" in the Infoblox Knowledge Base system at https://support.infoblox.com.
• Trunking: Disable
• EtherChannel: Disable
• IGMP Snooping: Disable
• Port Channeling: Disable
• Speed and Duplex settings: Match these settings on both the Infoblox appliance and switch
• Disable other dynamic and proprietary protocols that might interrupt the forwarding of packets

Putting Both Appliances on the Network

1. Connect the power cable from each NIOS appliance to a power source and turn on the power. If possible, connect the appliances to separate power circuits. If one power circuit fails, the other might still be operative.

2. Connect Ethernet cables from the LAN1 port and the HA port on each appliance to a switch on the network.

   Note

   The Ethernet ports on the Infoblox--1050-A, -1550-A, -1552-A, 1852-A, -2000-A, and -4010 appliances are autosensing, so you can use either a straight-through or cross-over Ethernet cable for these connections.

3. Use the LCD on one appliance or make a console connection to it, and configure the network settings of its LAN1 port so that it is on the local subnet and you can reach it on the network. LCD supports only IPv4 addressing and not IPv6 addressing. You can configure IPv6 address for the appliance through CLI or GUI.

   Note

   For details about using the LCD and console, refer to the installation guide that shipped with your product.

4. Similarly, configure the LAN1 port on the other appliance so that it is in the same subnet as the first appliance.
5. Connect your management system to the network so that it can reach the IP addresses of the LAN1 ports.

HA Master – Node 1

1. On your management system, open a browser window, and connect to https://ip_addr, where ip_addr is the address of the LAN1 port on Node 1.
2. Log in using the default user name and password admin and infoblox. For detailed information about logging in to the GUI, see /wiki/spaces/mgmadminguide/pages/911179908
3. Review the End-User License Agreement and click I Accept. The Master Grid Setup wizard appears.
4. On the first screen, select Configure a Master Grid and select one of the Master Grid Communication Mode.
   • sub Grid Initiated: Select this to initiate the joining process from sub Grid to Multi-Grid Master. 
   • MGM Initiated: Select this to initiate the joining process from the Multi-Grid Master to sub Grid, and then click Next. For information on Master Grid communication mode, see /wiki/spaces/mgmadminguide/pages/911183060. 
5. On the next screen, specify the Master Grid properties and click Next:
   • Master Grid Name: Enter a text string that the two appliances use to authenticate each other when establishing a VPN tunnel between them. The default Master Grid name is Infoblox.
   • Shared Secret: Enter a text string that both appliances use as a shared secret to authenticate each other when establishing a VPN tunnel between them. The default shared secret is test.
   • Confirm Shared Secret: Enter the shared secret again.
   • Show Password: Select this to display the password. Clear the checkbox to conceal the password.
   • Hostname: Enter a valid domain name for the appliance.
   • Type of Network Connectivity: Select the type of network connectivity from the drop-down list:
     • IPv4 and IPv6: Select this to configure a dual mode HA Multi-Grid Master.
     • IPv4: Select this to configure an IPv4 HA Multi-Grid Master.
   • Is the super Grid Master an HA pair?: Select Yes.
     • Send HA and Grid Communication over: This field is displayed only when you are configuring a dual mode HA pair. Select either IPv4 or IPv6 as the communication protocol for VRRP advertisements.
6. On the next screen, specify the network properties and click Next:
   • Virtual Router ID: Enter the VRID (virtual router ID). This must be a unique VRID number—from 1 to 255—for this subnet.
   • Ports and Addresses: This table lists the network interfaces based on the type of network connectivity of the HA Multi-Grid Master. For IPv4 HA Multi-Grid Master, specify the network information for VIP (IPv4), Node1 HA (IPv4), Node2 HA (IPv4), Node1 LAN1 (IPv4), and Node2 LAN1 (IPv4) interfaces.
     
     For a dual mode HA Multi-Grid Master, if you select IPv4 as the protocol for HA communications, specify the network information for the following interfaces: VIP (IPv4), Node1 HA (IPv4), Node1 LAN1 (IPv4), Node2 HA (IPv4), Node2 LAN1 (IPv4), VIP (IPv6), Node1 LAN1 (IPv6), and Node2 LAN1 (IPv6) interfaces.
     
     For a dual mode HA Multi-Grid Master, if you select IPv6 as the protocol for HA communications, specify the network information for the following interfaces: VIP (IPv4), Node1 LAN1 (IPv4), Node2 LAN1 (IPv4), VIP (IPv6), Node1 LAN1 (IPv6), and Node2 LAN1 (IPv6) interfaces.
     
     Enter correct information for the following by clicking the field:
     • Interface: Displays the name of the interface. You cannot modify this.
     • Address: Type the IPv4 or IPv6 address depending on the type of interface.
     • Subnet Mask (IPv4) or Prefix Length (IPv6): Specify an appropriate subnet mask for IPv4 address or prefix length for IPv6 address. The prefix length ranges from 2 to 127.

     • Gateway: Type the IPv4 or IPv6 address of the default gateway depending on the type of interface. For IPv6 interface, you can also type Automatic to enable the appliance to acquire the IPv6 address of the default gateway and the link MTU from router advertisements.
       

       Note

       You can now define a link-local address as the default IPv6 gateway and isolate the LAN segment so the local router can provide global addressing and access to the network and Internet. This is supported for both LAN1 and LAN2 interfaces as well as LAN1 and LAN2 in the failover mode.

     • VLAN Tag: For a VLAN, enter the VLAN tag or ID. You can enter a number from 1 to 4094. Ensure that you configure the corresponding switch accordingly.
     • Port Settings: From the drop-down list, choose the connection speed that you want the port to use. You can also choose the duplex setting. Choose Full for concurrent bidirectional data transmission or Half for data transmission in one direction at a time. Select Automatic to instruct the NIOS appliance to negotiate the optimum port connection type (full or half duplex) and speed with the connecting switch automatically. This is the default setting. You cannot configure port settings for vNIOS appliances.
7. Optionally, enter a new password and click Next. The password must be a single string (no spaces) that is at least four characters long.
8. Select the time zone of the Master Grid and indicate whether the Master Grid synchronizes its time with an NTP (Network Time Protocol) server.
   • If you choose to enable NTP, click the Add icon when the NTP Server table appears and enter the IP address of an NTP server. Entries may be an IPv4 or IPv6 address. You can enter IP addresses for multiple NTP servers.
   • If you choose to disable NTP, set the date and time for the appliance.
   • Click Next.

9. The last screen displays the settings you specified in the previous panels of the wizard. Verify that the information is correct and click Finish. The application restarts after you click Finish.
   

   Note

   The Master Grid Setup wizard provides options such as not changing the default password and manually entering the time and date. However, changing the password and using an NTP server improve security and accuracy (respectively), and so these choices are presented here.

   Record and retain this information in a safe place. If you forget the shared secret, you need to contact Infoblox Technical Support for help. When you add an appliance to the Grid, you must configure it with the same Grid name, shared secret, and VPN port number that you configure on the Multi-Grid Master.

10. Close the management window.
    The configuration for Node 1 is complete.

HA Master – Node 2

1. On your management system, open a new browser window, and connect to https://ip_addr, where ip_addr is the address of the LAN1 port on Node 2.
2. Log in using the default user name and password admin and infoblox.
3. Review the End-User License Agreement and click I Accept.
   The Master Grid Setup wizard appears.
4. On the first screen, select Join Existing Master Grid and click Next.
5. On the next screen, specify the Master Grid properties and click Next
   • Master Grid Name: Enter a text string that the two appliances use to authenticate each other when establishing a VPN tunnel between them. This must match the Master Grid name you entered for node 1.
   • Multi-Grid Master's IP Address: Enter the same VIP you entered for node 1.
   • Shared Secret: Enter a text string that both appliances use as a shared secret to authenticate each other when establishing a VPN tunnel between them. This must match your entry in node 1.
6. On the next screen verify the IP address settings of the member and click Next
7. The last screen displays the settings you specified in the previous panels of the wizard. Verify that the information is correct and click Finish.
   The setup of the HA Multi-Grid Master is complete. From now on, when you make an HTTPS connection to the HA pair, use the VIP address.

From the management system, you can manage the active node of the HA master by making an HTTPS connection to the VIP interface and using the Multi-Grid Manager, and by making an SSHv2 connection to the LAN port (and MGMT port, if enabled) and using the CLI. If you enable the MGMT port on an HA pair, you can make an HTTPS connection through the MGMT port on the active node, and you can make an SSHv2 connection through the LAN or MGMT port on the active and passive nodes.

The communication protocol for all the services in a dual mode (IPv4 and IPv6) HA Master Grid is the same protocol as the one used for VRRP advertisements. For example, if you select IPv4 in the Send HA and Grid Communication over field in step 2 of the Grid Setup wizard, then IPv4 is set as the communication protocol for all the services.

However, you can override the communication protocol for all the services in a dual mode HA Master Grid. For information, see /wiki/spaces/mgmadminguide/pages/911181900.

Creating a Single Multi-Grid Master

Although using an HA master is ideal because of the hardware redundancy it provides, you can also use a single appliance as the Multi-Grid Master. You can create a single Grid Master in either IPv4 or dual mode (IPv4 and IPv6). Infoblox recommends frequent backups if the Multi-Grid Master is a single appliance, and there is no master candidate. For information about which vNIOS appliance supports configuration as a single Multi-Grid Master, refer to the NIOS Administrator Guide.

Setting up an appliance as a single Multi-Grid Master is very easy. You can use the Master Grid Setup Wizard to create a single Multi-Grid Master. In addition to providing a simple method accompanied by helpful information, the setup wizard allows you to change the admin password and configure time settings for the appliance.

Using the Setup Wizard

To create a single Multi-Grid Master using the Master Grid Setup wizard, complete the following:

1. Connect the power cable from the NIOS appliance to a power source and turn on the power.

2. Connect an Ethernet cable from the LAN 1 port on the appliance to a switch on the network.
   

   Note

   The Ethernet ports on the Infoblox-1050-A, -1550-A, -1552-A, -1852-A, -2000-A, and -4010 appliances are autosensing, so you can use either a straight-through or cross-over Ethernet cable for this connection.

3. If you have not changed the default IP address (192.168.1.2/24) of the LAN1 port through the LCD or CLI—and the subnet to which you connect the appliance does not happen to be 192.168.1.0/24—put your management system in the 192.168.1.0/24 subnet and connect an Ethernet cable between your management system and the NIOS appliance.
4. Open a web browser and make an HTTPS connection to the IP address of the LAN1 port. To reach the default IP address, enter: https://192.168.1.2.
   A certificate warning appears during the login process. This is normal because the preloaded certificate is self-signed (and, therefore, is not in the trusted certificate stores in your browser) and has the hostname www.infoblox.com, which does not match the destination IP address you entered in step 3. To stop the warning message from occurring each time you log in to the GUI, you can generate a new self-signed certificate or import a third-party certificate with a common name that matches the FQDN (fully qualified domain name) of the appliance. For information about certificates, see /wiki/spaces/mgmadminguide/pages/911180066
5. Log in using the default user name admin and password infoblox.
6. Review the End-User License Agreement and click I Accept. The Master Grid Setup wizard appears.
7. On the first screen, select Configure a Master Grid and select one of the Master Grid Communication Mode.
   • sub Grid Initiated: Select this to initiate the joining process from sub Grid to Multi-Grid Master. 
   • MGM Initiated: Select this to initiate the joining process from the Multi-Grid Master to sub Grid, and then click Next. For information on Master Grid communication mode, see /wiki/spaces/mgmadminguide/pages/911183060.
8. On the next screen, specify the Master Grid properties and click Next:
   • Master Grid Name: Enter a text string that the Multi-Grid Master and appliances joining the Master Grid use to authenticate each other when establishing a VPN tunnel between them. The default Master Grid name is Infoblox.
   • Shared Secret: Enter a text string that the Multi-Grid Master and appliances joining the Master Grid use as a shared secret to authenticate each other when establishing a VPN tunnel between them. The default shared secret is test.
   • Confirm Shared Secret: Enter the shared secret again.
   • Hostname: Enter a valid domain name for the appliance.
   • Type of Network Connectivity: Select the type of network connectivity from the drop-down list:
     • IPv4 and IPv6: Select this to configure a dual mode HA Multi-Grid Master.
     • IPv4: Select this to configure an IPv4 HA Multi-Grid Master.
   • Is the Super Grid Master an HA pair?: Select No.
9. On the next screen, configure the network settings and click Next:
   • Ports and Addresses: This table lists the network interfaces based on the type of network connectivity of the Master Grid. For IPv4 Master Grid, specify the network information for LAN1 (IPv4) port and for a dual mode Master Grid, specify the network information for both LAN1 (IPv4) and LAN1 (IPv6).
     • Interface: Displays the name of the interface. You cannot modify this.
     • Address: Type the IPv4 or IPv6 address depending on the type of interface. An IPv6 address is a 128-bit number in colon hexadecimal notation. It consists of eight 16-bit groups of hexadecimal digits separated by colons (example: 2001:db8:0000:0123:4567:89ab:0000:cdef or 2001:db8::123:4567:89ab:0:cdef).
     • Subnet Mask (IPv4) or Prefix Length (IPv6): Specify an appropriate subnet mask for IPv4 address or prefix length for IPv6 address. The prefix length ranges from 2 to 127.

     • Gateway: Type the IPv4 or IPv6 address of the default gateway depending on the type of interface. For IPv6 interface, you can also type Automatic to enable the appliance to acquire the IPv6 address of the default gateway and the link MTU from router advertisements.
       

       Note

       You can now define a link-local address as the default IPv6 gateway and isolate the LAN segment so the local router can provide global addressing and access to the network and Internet. This is supported for both LAN1 and LAN2 interfaces as well as LAN1 and LAN2 in the failover mode.

     • VLAN Tag: For a VLAN, enter the VLAN tag or ID. You can enter a number from 1 to 4094. Ensure that you configure the corresponding switch accordingly.
     • Port Settings: From the drop-down list, choose the connection speed that you want the port to use. You can also choose the duplex setting. Choose Full for concurrent bidirectional data transmission or Half for data transmission in one direction at a time. Select Automatic to instruct the NIOS appliance to negotiate the optimum port connection type (full or half duplex) and speed with the connecting switch automatically. This is the default setting. You cannot configure port settings for vNIOS appliances. It displays all settings supported by the hardware type. For information, see /wiki/spaces/mgmadminguide/pages/911183794 /wiki/spaces/mgmadminguide/pages/911183794.
10. Optionally, enter a new password and click Next. The password must be a single hexadecimal string (no spaces) that is at least four characters long.
11. Select the time zone of the Multi-Grid Master and indicate whether the Multi-Grid Master synchronizes its time with an NTP (Network Time Protocol) server, and then click Next.
    • If you choose to enable NTP, click the Add icon and enter the IP address of an NTP server. You can enter IP addresses for multiple NTP servers.
    • If you choose to disable NTP, set the date and time for the appliance.

12. The last screen displays the settings you specified in the previous panels of the wizard. Verify that the information is correct and click Finish. The application restarts after you click Finish.

    Note

    The Master Grid Setup wizard provides options such as not changing the default password and manually entering the time and date. However, changing the password and using an NTP server improve security and accuracy (respectively), and so these choices are presented here.
    
    Record and retain this information in a safe place. If you forget the shared secret, you need to contact Infoblox Technical Support for help. When you add an appliance to the Grid, you must configure it with the same Grid name, shared secret, and VPN port number that you configure on the Multi-Grid Master.

    The last screen of the setup wizard states that the changed settings require the appliance to restart. When you click Finish, the appliance restarts.

The setup of the single Multi-Grid Master is complete. From now on, when you make an HTTPS connection to the appliance, use its new IP address.

In a dual mode Master Grid, the communication protocol for all the services is set to IPv4, by default. You can change the default communication protocol for the services. For information, see /wiki/spaces/mgmadminguide/pages/911181900 /wiki/spaces/mgmadminguide/pages/911181900.