create route

Description

Designates the route to use for a connection from the current Replication Server to a remote Replication Server.

Syntax

create route to dest_replication_server {
 set next site [to] thru_replication_server |
 [set username [to] user]
 [set password [to] passwd]
 [set route_param to 'value' [set route_param to 'value']... ]
 [set security_param to 'value' [set security_param to 'value']... ]}

Parameters

dest_replication_server

The destination Replication Server.

thru_replication_server

The intermediate Replication Server through which to pass messages for the destination Replication Server. Specify this when creating an indirect route.

user

The Replication Server login name to use to log in to the destination Replication Server. This is the login name used by the RSI user thread. If no user name is entered, Replication Server uses the principal user name entered with the -S flag when Replication Server was started.

passwd

The password to use with the login name. If no password is entered, Replication uses a null value.

route_param

a parameter that affects routes. See Table 3-16 for a list of parameters and values.

value

a character string containing a value for a parameter.

security_param

Specifies the name of a security parameter. Refer to Table 3-27 for a list and description of security parameters that can be set with create route.

Table 3-27: Parameters affecting network-based security

security_param

value

msg_confidentiality

Indicates whether Replication Server sends and receives encrypted data. If set to “required,” outgoing data is encrypted. If set to “not required,” Replication Server accepts incoming data that is encrypted or not encrypted.

Default: not_required

msg_integrity

Indicates whether data is checked for tampering.

Default: not_required

msg_origin_check

Indicates whether the source of data should be verified.

Default: not_required

msg_replay_detection

Indicates whether data should be checked to make sure it has not been read or intercepted.

Default: not_required

msg_sequence_check

Indicates whether data should be checked for interception.

Default: not_required

mutual_auth

Requires remote server to provide proof of identify before a connection is established.

Default: not_required

security_mechanism

The name of the third-party security mechanism enabled for the pathway.

Default: first mechanism listed in the SECURITY section of libtcl.cfg

unified_login

Indicates how Replication Server seeks to log in to remote data servers and accepts incoming logins. The values are:

  • required – always seeks to log in to remote server with a credential.

  • not_required – always seeks to log in to remote server with a password.

Default: not_required

use_security_services

Tells Replication Server whether to use security services. If use_security_services is “off,” no security features take effect.

NoteThis parameter can only be set by configure replication server.

Examples

Example 1

Entered at the TOKYO_RS Replication Server, this command creates a direct route from TOKYO_RS to the SYDNEY_RS Replication Server. TOKYO_RS can log in to SYDNEY_RS over this route, using the login name “sydney_rsi” with the password “sydney_rsi_ps:”

create route to SYDNEY_RS
 set username sydney_rsi
 set password sydney_rsi_ps

Example 2

Entered at TOKYO_RS, this command creates an indirect route from TOKYO_RS to SYDNEY_RS, through the intermediate Replication Server, MANILA_RS. Direct routes must already exist from TOKYO_RS to MANILA_RS and from MANILA_RS to SYDNEY_RS:

create route to SYDNEY_RS
 set next site MANILA_RS

Example 3

This command creates a direct route similar to that in the first example. However, if network-based security is enabled, TOKYO_RS must log in to SYDNEY_RS with a credential:

create route to SYDNEY_RS
 set unified_login 'required'

Usage


Direct routes


Indirect routes


Routes and RSSD tables


Network-based security parameters

Permissions

create route requires “sa” permission.

See also

alter connection, alter route, configure replication server, create connection, drop connection, drop route