[Veritas-bu] firewall between master and media servers

Bob,
We have considered many alternatives. We discounted this idea because of the
costs.


------------------
Marvin Blackburn
Systems Administrator
Glen Raven
336-586-1200
"He's no failure.  He's not dead yet" --William Lloyd George

> -----Original Message-----
> From: veritas-bu-admin AT Eng.Auburn DOT EDU
> [mailto:veritas-bu-admin AT Eng.Auburn DOT EDU]On Behalf Of Bob Bakh
> Sent: Thursday, February 15, 2001 1:33 AM
> To: Ian M Terry; veritas-bu AT mailman.eng.auburn DOT edu
> Subject: RE: [Veritas-bu] firewall between master and media servers
>
>
> I'm going to get back on my Firewall soap box.
>
> I don't think running NetBackup across a firewall is an
> inefficient and
> insecure way of backing up.  What seems to work better, and
> the customers
> I've set this up with seem to agree, is having a master on
> both sides of the
> firewall sharing the same robot.
>
> Since you can run Media Manager independent of NetBackup, I
> say set up two
> Media Manger servers, one as the robot control host and
> volume Database
> host, and the other as a slave owing a driver in the robot
> controlled by
> server A.
>
> Now have NetBackup set up as a master on both nodes, now you
> have a master
> on both sides of your firewall, and still one storage of
> tapes.  Now all you
> need are two ports to communicate through the firewall.  One
> for VMD to
> manage tape assignments, and one for tldd, or tl8d or
> whatever to control
> the robot, there may be one more but I'm not positive right now.
>
> This reduces security holes, and makes backups and restores easier.
>
> Just my opinion, but I've been known to have my head up my A** =)
>
> Bob
>
> -----Original Message-----
> From: Ian M Terry [mailto:ITerry AT cyberdialogue DOT com]
> Sent: Wednesday, February 14, 2001 1:26 PM
> To: veritas-bu AT mailman.eng.auburn DOT edu
> Subject: RE: [Veritas-bu] firewall between master and media servers
>
>
>
> thanks to all - NAT was the evil villain.  all is rockin now!
>  just had to
> adjust a few firewall rules and disable NATing here and there.
>
> -ian
>
> ---++---++---++-
> Ian Terry x7024
> Systems Administrator
> Cyber Dialogue
> ---++---++---++-
>
> _______________________________________________
> Veritas-bu maillist  -  Veritas-bu AT mailman.eng.auburn DOT edu
> http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu
> _______________________________________________
> Veritas-bu maillist  -  Veritas-bu AT mailman.eng.auburn DOT edu
> http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu