# Setup replication servers with basic security

**URL:** <https://discuss.elastic.co/t/setup-replication-servers-with-basic-security/278541>\
**Category:** Elasticsearch\
**Tags:** elastic-stack-security, ccr-cross-cluster-replication\
**Created:** [July 13, 2021, 1:00pm UTC](https://discuss.elastic.co/t/setup-replication-servers-with-basic-security/278541 "2021-07-13T13:00:22Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![Mamol27](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mamol27/32/82016_2.png) [@Mamol27](https://discuss.elastic.co/u/Mamol27)\
**Post date:** [July 13, 2021, 1:00pm UTC](https://discuss.elastic.co/t/setup-replication-servers-with-basic-security/278541/1 "2021-07-13T13:00:22Z")

</div>

Hello i have two cluster with basic security. And i want to setup bi-directional replication. All nodes 7.13 version. [Bi-directional replication with Elasticsearch cross-cluster replication (CCR) | Elastic Blog](https://www.elastic.co/blog/bi-directional-replication-with-elasticsearch-cross-cluster-replication-ccr)  
1t cluster- 107: master, remote\_cluster\_client; 106 - data, remote\_cluster\_client; 108 - ingest, remote\_cluster\_client; 108 - remote\_cluster\_client  
2d cluster - 111: master, remote\_cluster\_client; 112 - data, remote\_cluster\_client; 113 - ingest, remote\_cluster\_client; 114 - remote\_cluster\_client  
I launch this command on both clusters

```auto
PUT /_cluster/settings 
{ 
  "persistent" : { 
    "cluster" : { 
      "remote" : { 
        "elk2" : { 
          "seeds" : [ 
            "172.29.39.112:9300",
            "172.29.39.113:9300",
            "172.29.39.114:9300"
          ] 
        },
        "elk1" : { 
          "seeds" : [ 
            "172.29.39.106:9300",
            "172.29.39.108:9300",
            "172.29.39.110:9300"
          ] 
        } 
      } 
    } 
  } 
}

```

and now i have next result  
on 1st cluster(elk1):

 ![ksnip_20210713-155201](https://us1.discourse-cdn.com/elastic/original/3X/f/3/f3cc56a2388b3a61e4cc8de0f4433fa2158eb0bb.png)  
on 2d cluster(elk2):  
 ![ksnip_20210713-155203](https://us1.discourse-cdn.com/elastic/original/3X/1/5/150d54d609f1ff94c2bc233d53512ddd3c2fa721.png)  
At the question mark it writes me: "Ensure the seed nodes are configured with the remote cluster's transport port, not the http port"  
I didnt find cluster's transport port here [Transport | Elasticsearch Guide [7.5] | Elastic](https://www.elastic.co/guide/en/elasticsearch/reference/7.5/modules-transport.html)  
What i need to do? Add certificates from one cluster to other, or set passwords? Should I add special transport settings?

---

<div class="post-metadata">

**Author:** ![TimV](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/timv/32/13162_2.png) [@TimV](https://discuss.elastic.co/u/TimV)\
**Post date:** [July 14, 2021, 12:44am UTC](https://discuss.elastic.co/t/setup-replication-servers-with-basic-security/278541/2 "2021-07-14T00:44:12Z")

</div>

This is likely to be a certificates issue.  
Because you have enabled security, you will also have enabled TLS on the transport port (9300).

That means that you need to make sure your TLS configuration shares trust between the two clusters. Typically that is as simple as adding the remote cluster's CA to the each cluster (so elk1 trusts the CA for elk1 and elk2, and vice versa).

---

<div class="post-metadata">

**Author:** ![Mamol27](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mamol27/32/82016_2.png) [@Mamol27](https://discuss.elastic.co/u/Mamol27)\
**Post date:** [July 14, 2021, 7:59am UTC](https://discuss.elastic.co/t/setup-replication-servers-with-basic-security/278541/3 "2021-07-14T07:59:03Z")

</div>

I have certificates on each cluster. If I copy certificates to other cluster, how to point on it.

---

<div class="post-metadata">

**Author:** ![TimV](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/timv/32/13162_2.png) [@TimV](https://discuss.elastic.co/u/TimV)\
**Post date:** [July 14, 2021, 8:16am UTC](https://discuss.elastic.co/t/setup-replication-servers-with-basic-security/278541/4 "2021-07-14T08:16:27Z")

</div>

Sorry, I'm not sure I understand the question.

I think you're asking how to configure your nodes to trust the certificates, but I can't answer that without knowing more about your current configuration.

---

<div class="post-metadata">

**Author:** ![Mamol27](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mamol27/32/82016_2.png) [@Mamol27](https://discuss.elastic.co/u/Mamol27)\
**Post date:** [July 14, 2021, 8:28am UTC](https://discuss.elastic.co/t/setup-replication-servers-with-basic-security/278541/5 "2021-07-14T08:28:09Z")

</div>

I have two clusters with configured basic security on each. And I want to set up bi-directional replication. But clusters doesn't connect to each other. TLS already configured on each cluster.  
So I want to understand how to set up replication between clusters with basic security. How to

> make sure your TLS configuration shares trust between the two clusters.

I need to set up bi-directional replication between elk1 and elk2.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [August 11, 2021, 8:28am UTC](https://discuss.elastic.co/t/setup-replication-servers-with-basic-security/278541/6 "2021-08-11T08:28:48Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.