From: ADSM: Dist Stor Manager [mailto:ADSM-L AT VM.MARIST DOT EDU]On Behalf Of
Peter Bjoern
> That was our first preference (seen from a functionality point of view),
> however having those ports open from all the clients to the internal side
> is unacceptable to the network security people since it would involve
> having
> to allow sessions being initiated from clients on the outside to
> the server
> on
> the inside and they will not allow outside initiated connections.
>
> The solution with the external server placed between two firewalls and
> other stuff
> where you only needed to permit traffic from on IP to one IP on specific
> ports
> was the only way to transport data from the outside to the inside that
> could be approved.

If you run your client schedules in prompted mode (rather than the default
polling mode), the server initiates the backup, not the client.

--
Mark Stapleton (stapleton AT berbee DOT com)
Certified TSM consultant
Certified AIX system engineer
MCSE

> >Have you thought about having the clients in
> >question being backed up directly to the internal TSM server? It would
> mean
> >having TCP ports 1500 and 1501 open.