The administrator must ensure network connectivity between nodes with new and old addresses.
Scenario for modifying the network settings of a subset of cluster nodes involves the following steps:
You must carry out this step if the Control node is in the subset of nodes for which you want to change addresses. Temporarily assign the Control node role to a node for which you are not planning to change the address.
If you are using a load balancer, in balancer settings, turn off the load for nodes whose addresses you are planning to change. If you are not using a load balancer, in the web interface of Kaspersky Secure Mail Gateway, disable the reception of messages for the selected nodes.
After turning off the load, wait until messages from all queues are completely sent on the selected nodes.
Change the addresses of selected Secondary nodes, one by one. To do so, on each node:
You can modify the network settings of the operating system, IP addresses of network adapters, the default gateway address, DNS server addresses.
This step lets you make sure that the new network settings are in fact applied.
This is necessary for correct functioning of Kerberos authentication with the Single Sign-On technology and for interaction with other mail systems.
This step is necessary if the IP address or port of the node was modified.
Nodes that had their address changed must be removed from the cluster; these nodes must then be added to the cluster with the new addresses.
This step is necessary is the Control node role was temporarily assigned to a different node.
You can view the statuses of cluster nodes in the web interface of the Control node.
Enable mail traffic processing on cluster nodes with new addresses, one after another. Make sure that traffic is being processed without errors.