Home
Configuring
Use this information to configure your network, users, servers (including Web servers), directory services, security, messaging, widgets and live text, and server clusters.
Configuring a network
This section presents the planning concepts and setup procedures necessary for a successful HCL Domino® deployment over a network. It provides information on network protocols from a Domino perspective but does not attempt to provide general network information.
Setting up Domino® servers on the network
Before and after installing a Domino® server, perform required tasks.
Fine-tuning network port setup on a server
After you install and set up a Domino® server, review the list of network ports that were enabled by the Server Setup program. Unless you customize network settings during setup, Domino enables ports based on the current operating system configuration. To conserve system resources, disable the ports for protocols that you do not need.
Encrypting NRPC communication on a server port
You can encrypt network data on a server's Notes® network ports to prevent the network eavesdropping that's possible with a network protocol analyzer. Network encryption occurs at the application layer of a given protocol and is independent of other forms of encryption. Network data is encrypted only while it is in transit. After the data is received and stored, network encryption is no longer in effect.

Configuring
Use this information to configure your network, users, servers (including Web servers), directory services, security, messaging, widgets and live text, and server clusters.
- Configuring a network
  This section presents the planning concepts and setup procedures necessary for a successful HCL Domino® deployment over a network. It provides information on network protocols from a Domino perspective but does not attempt to provide general network information.
  - Domino® and networks
    A variety of client systems can use wireless or wired technology to communicate with Domino® servers over local area networks (LANs), wide area networks (WANs), and metropolitan area networks (MANs). For example, Notes® workstations and Domino servers use the Notes remote procedure call (NRPC) protocol running over the LAN's network protocol to communicate with other Domino servers. Other client systems, such as Web browsers, Internet mail clients, wireless application protocol (WAP) devices, and personal information management (PIM) devices, can also communicate with Domino servers.
  - Network security
    Physical network security is beyond the scope of this documentation, but you must set it up before you set up connection security. Physical network security prevents unauthorized users from breaking through the network and using one of the operating system's native services -- for example, file sharing -- to access the server. Physical network security also comes into play when any data is exposed, as the potential exists for malicious or unauthorized users to eavesdrop both on the network where the Domino® system resides and on the system you are using to set up the server.
  - Setting up Domino® servers on the network
    Before and after installing a Domino® server, perform required tasks.
    - Setting up Notes® named networks
      The Domino® Server Setup program automatically places all servers that are in a Domino domain and that run the same network protocol in the same Notes® named network (NNN). In the Server document, the setup program assigns each NNN a default name in the format portname network.
    - Fine-tuning network port setup on a server
      After you install and set up a Domino® server, review the list of network ports that were enabled by the Server Setup program. Unless you customize network settings during setup, Domino enables ports based on the current operating system configuration. To conserve system resources, disable the ports for protocols that you do not need.
      - Disabling a network port on a server
        Even after you disable a port, it still appears in the list of available ports so that you can later enable it.
      - Enabling a network port on a server
        If the server port you want to enable will be the Notes® workstation's only means of connecting with the server, do not use this procedure. Instead, use the Ports setting in the server's NOTES.INI file.
      - Adding a network port on a server
        Create a Connection document in Notes® if the HCL Notes workstation already has a port in common with the server and you still cannot connect to it. If the server port you want to add will be the Notes workstation's only means of connecting with the server, do not use this procedure. Instead, use the Ports setting in the server's NOTES.INI file.
      - Deleting a network port on a server
        When you delete a port, it no longer appears in the list of available ports in the Setup Ports dialog box.
      - Renaming a network port on a server
        You might want to rename a port to reflect its function. For example, suppose you add a second TCP/IP port named SRV-TCP so that clustered servers can communicate over a private network. Then you might want to might want to rename the original TCP/IP port through which users will communicate with the server USR-TCP.
      - Reordering a network port on a server
        Changing the order in which ports are listed in the Setup Ports dialog box also changes the Ports setting in the NOTES.INI file. List the ports in the order in which you want them to be used -- for example, list nearest or fastest connections first. Then when a server uses a Notes® named network or a Connection document to locate another server, the port with a close or fast connection will be used as the preferred path.
      - Encrypting NRPC communication on a server port
        You can encrypt network data on a server's Notes® network ports to prevent the network eavesdropping that's possible with a network protocol analyzer. Network encryption occurs at the application layer of a given protocol and is independent of other forms of encryption. Network data is encrypted only while it is in transit. After the data is received and stored, network encryption is no longer in effect.
      - Compressing network data on a server port
        To reduce the amount of data transmitted between an HCL Notes® workstation and HCL Domino® server or between two Domino servers, enable network compression for each enabled network port. Whether you should enable compression on a network port depends on the type of network connection and the type of data being transmitted.
    - Server setup tasks specific to TCP/IP
      After you run the Domino® Server Setup program, complete these procedures:
- Configuring users and servers
  Topics in this section describe how to set up users and servers.

Encrypting NRPC communication on a server port

You can encrypt network data on a server's Notes® network ports to prevent the network eavesdropping that's possible with a network protocol analyzer. Network encryption occurs at the application layer of a given protocol and is independent of other forms of encryption. Network data is encrypted only while it is in transit. After the data is received and stored, network encryption is no longer in effect.

About this task

Network data encryption occurs if you enable network data encryption on either side of a network connection. For example, if you enable encryption on a server's Notes® network port for TCP/IP, you don't need to enable encryption on the TCP/IP ports of workstations or servers that connect to the server.

If you want the server to have one TCP/IP port for Notes® traffic over the Internet and another TCP/IP port for internal traffic over NRPC, you can encrypt the port for Internet traffic and leave the port for internal traffic unencrypted.

Be aware that multiple high-speed encrypted connections to a server can affect server performance adversely. Encrypting network data has little effect on client performance. For protocols other than NRPC, you use SSL for encryption.

Procedure

From the Domino® Administrator, choose the server for which you want to encrypt network data.
Click the Configuration tab.
From the Domino® Administrator's Tools pane, choose Server > Setup Ports.
Select the port you want to encrypt.
Select Encrypt network data.
Click OK.
Click the Server > Status tab.
Do one of these so that the change takes effect, from the Domino® Administrator's Tools pane, choose Restart Port. (If you can not see the Tools pane, make sure you are in the Server Tasks view.)