Re: [Networker] Networker Firewall Setings
2010-01-25 12:28:27
I have several clients behind local firewalls. Assuming you are using
NetWorker 7.4 or higher, you should set the ports on the clients as follows:
nsrports -S 7939-7940
Leave the connection ports alone.
Set up the firewall to allow related traffic in. When you start
nsrexecd it will use ports 7937-7940, so make sure your server can get
in through those ports to initiate the traffic with the client. The
server will send hostname and port information to the client and the
client (via save commands) will initiate the connection back to the
server (or storage node) -- from some connection port.
If you are talking about a firewall that is NOT physically on the client
(ie a firewall system between the client and the server), then you will
have to set up the connection ports and the server ports as well on both
the server and the client.
This is all documented in the admin guide.
Frank
On 1/25/10 11:51 AM, psoni wrote:
We have only one client behind a firewall.
Networker server, storage nodes and all other cleitns are on the other side.
currently nsrports on every host is set to 7937 -9936 / 0-0.
I am trying to set 7937-7944 (bothways) only for a particular client and not
changing the nsrports default values on the networker server.
+----------------------------------------------------------------------
|This was sent by soni.parth AT gmail DOT com via Backup Central.
|Forward SPAM to abuse AT backupcentral DOT com.
+----------------------------------------------------------------------
To sign off this list, send email to listserv AT listserv.temple DOT edu and type
"signoff networker" in the body of the email. Please write to networker-request
AT listserv.temple DOT edu if you have any problems with this list. You can access the
archives at http://listserv.temple.edu/archives/networker.html or
via RSS at http://listserv.temple.edu/cgi-bin/wa?RSS&L=NETWORKER
--
Frank Swasey | http://www.uvm.edu/~fcs
Sr Systems Administrator | Always remember: You are UNIQUE,
University of Vermont | just like everyone else.
"I am not young enough to know everything." - Oscar Wilde (1854-1900)
To sign off this list, send email to listserv AT listserv.temple DOT edu and type
"signoff networker" in the body of the email. Please write to networker-request
AT listserv.temple DOT edu if you have any problems with this list. You can access the
archives at http://listserv.temple.edu/archives/networker.html or
via RSS at http://listserv.temple.edu/cgi-bin/wa?RSS&L=NETWORKER
|
|
|