Exercise 1.11: Validate Environment Configuration

Overview

After you run the Domain Configuration tool, check that your on-premises servers can communicate with the IBM SmartCloud™ Notes® (SmartCloud Notes) servers by using the trace command. This will verify the changes the tool made within your on-premises environment were correct.

To determine the name of your SmartCloud Notes servers, use the format basename1/ou/o using the base name you provided when you completed the account settings. Look in the LLNServers group in your Domino® Directory for SmartCloud Notes server names with which to test.

Example:


Remember that if you used Mail (the default) as the base name, then your mail servers are named Mail1, Mail 2, and so on. When you run this trace command to the SmartCloud Notes servers, you will get an authentication error. This is an expected error. The lines following the error will determine if the connection was successful.

Objectives

In this exercise, you will:

• Initiate® a trace command from the Domino on-premises Passthru server to the Domino on-premises Mail server.
• Initiate a trace command from the Domino on-premises Passthru server to the Domino on-premises Directory server.
• Initiate a trace command from the Domino on-premises Mail server to a SmartCloud Notes server listed in the LLNServers group.
• Use the Configuration Test tool in the SmartCloud Notes web admin UI to test the connections from SmartCloud Notes to on-premises.
  
  

Glossary

Term	Definition
Trace	To test a connection to a server which provides detailed information about each step in a server connection. Using the results of a trace command, you can troubleshoot network connection problems.

Parent topic: Configuring IBM SmartCloud Notes Hybrid Environment
Previous topic: Exercise 1.10: Prepare for Account Activation- Domino Configuration Tool
Next topic: Exercise 1.12: Verifying Ownership of your Domain

Procedure

1. In this step, we will test connectivity from the Passthru server to the on-premises Mail server.
   
From an on-premises Domino Passthru server, type the following command into the Domino server console, based on the mail server name, your organizational unit and organization name:

trace servername/ou/o

For example: LLNTrain-Mail2/LLNTrain2

2. As the Passthru server attempts to connect to Mail server, you will see the results of the trace on the Domino console. Review the results of the trace command to make sure they include the confirmation Connected to -server you outlined above-. (example server LLNTrain-Mail2/LLNTrain2)
   
Example:


>trace LLNTRAIN-Mail2/LLNTrain2 
Determining path to server LLNTRAIN-Mail2/LLNTrain2
Available Ports: TCPIP
Checking normal priority connection documents only...
Local network connection document found for LLNTRAIN-MAIL2/LLNTRAIN2
   Verifying address LLNTrain-Mail2.LLNTrain2.com for LLNTRAIN-MAIL2/LLNTRAIN2 on TCPIP
      Requesting IP Address for LLNTRAIN-Mail2.LLNTrain2.com from DNS
      DNS returned address x.x.123.456 for LLNTRAIN-Mail2.LLNTrain2.com
  Connected to server  LLNTRAIN-MAIL2/LLNTRAIN2
Attempting Authenticated Connection
Compression is Disabled
Encryption is Enabled


3. In this step, we will test connectivity from the Passthru server to the on-premises Directory server.
   
From an on-premises Domino Passthru server, type the following command into the Domino server console, based on the directory server name, your organizational unit and organization name:

trace servername/ou/o

For example: trace LLNTRAIN-HUB-2/LLNTrain2

4. As the Passthru server attempts to connect to directory server, you will see the results of the trace on the Domino console. Review the results of the trace command to make sure they include the confirmation Connected to -server you outlined above-. (example LLNTrain-HUB-2/LLNTrain2)
   
Example:


>trace LLNTRAIN-HUB-2/LLNTRAIN2
Determining path to server LLNTRAIN-HUB-2/LLNTRAIN2
Available Ports: TCPIP
Checking normal priority connection documents only...
Local network connection document found for LLNTRAIN-HUB-2/LLNTRAIN2
   Verifying address LLNTRAIN-HUB-2.LLNTrain2.com for LLNTRAIN-HUB-2/LLNTRAIN2
      Requesting IP Address for LLNTRAIN-HUB-2.LLNTrain2.com from DNS
      DNS returned address x.x.123.789 for LLNTrain-Hub-2.LLNTrain2.com
  Connected to server LLNTRAIN-HUB-2/LLNTRAIN2
Attempting Authenticated Connection
Compression is Disabled
Encryption is Enabled


5. In this step, we will test connectivity from the directory server to a SmartCloud Notes server.
   
From an on-premises Domino server, such as your directory synchronization server, type the following command into the Domino server console, based on the mail base name, your organizational unit and organization name:

trace basename1/ou/o

For example: trace LLNTMail2/Hybrid/LLNTRAIN2

6. As the directory server attempts to connect to the SmartCloud Notes server, you will see the results of the trace on the Domino console. Review the results of the trace command to make sure they include the confirmation Connected to server basename1/ou/o that you outlined above (example LLNTMail2/Hybrid/LLNTRAIN2)
   
Example:


> trace LLNTMail2/Hybrid/LLNTRAIN2
Determining path to server LLNTMail2/Hybrid/LLNTRAIN2
Available Ports: TCPIP
Checking normal priority connection documents only...
Allowing wild card connection documents...
Local network connection document found for */Hybrid/LLNTRAIN2
  Verifying address 'x.x.123.654' for LLNTMail2/Hybrid/LLNTRAIN2 on TCPIP
Connected to server LLNTMail2/Hybrid/LLNTRAIN2
Connecting to LLNTMail2/Hybrid/LLNTRAIN2
Using address 'x.x.123.654' for LLNTMail2/Hybrid/LLNTRAIN2 on TCPIP
Error connecting to server LLNTMail2/Hybrid/LLNTRAIN2: Server error: You are not authorized to use the server
Connected to server LLNTMail2/Hybrid/LLNTRAIN2
Attempting Authenticated Connection
Compression is Disabled
Encryption is Enabled


When doing a network trace to a SmartCloud Notes mail server from your on-premises domain, you will receive an error when attempting to connect to server basename1/ou/o. such as LLNTMail2/Hybrid/LLNTRAIN2 in our example. This is the expected response because SmartCloud Notes servers do not allow unauthenticated connections. The returned lines after the error show that the subsequent authenticated connection was successful and indicates that the on-premises servers are successfully communicating with SmartCloud Notes.

Example:


Connected to server LLNTMail2/Hybrid/LLNTRAIN2
Attempting Authenticated Connection
Compression is Disabled
Encryption is Enabled


7. Use the Configuration Test tool in the SmartCloud Notes web admin UI to test the connections from SmartCloud Notes to the on-premises environment.
   
See the section Configuration Test in the exercise Hybrid Account Activation to complete this procedure. The connection status will show green checkmarks to indicate connection is established successfully and, if not will indicate failure with a possible reason.

Troubleshooting

Problem	Resolution
Your network trace connections are not working properly.	Make sure the information you provided in the Account Settings is correct, and that there are no typographical errors. Make sure the configuration tool completed successfully. Verify the information that the configuration tool added to your Domino on-premises server documents. Make sure that all of your servers are running.