--K1Fq.433VempDm.14ksYH.E74KuMF
MIME-Version: 1.0
Content-Type: text/plain;
        charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
content-class: urn:content-classes:message


Having a hard time following what you've got there.

so....

Here's what I have:

Ensure your firewall has the following ports open:
13782 Master server to Client
13724 Client to Master Server.

Ensure client can resolve name of master server via whatever name
service it is using, and ensure the master server can resolve the name
of the client.

In Netbackup GUI, go to:
Host Properties -> Master Servers -> click on *your master*, then  Right
click -> properties.

Go to "Client Attributes"
Add the name of the firewalled client, select it, then check "no connect
back" and apply the change.

no need to bounce daemons

add the client to a policy and back it up.

FWIW, in Host Properties of the master server, under the "firewall"
tab....nothing is selected, checked, entered, or otherwise
identified...completely blank...default.
Under Port ranges, everything is also default. check marks in "Use
random port assignment" and "use OS selected non-reserved ports"

Paul
-----Original Message-----
From: Jeff Lightner [mailto:jlightner AT water DOT com]=20
Sent: February 7, 2006 12:14 PM
To: Paul Keating; veritas-bu AT mailman.eng.auburn DOT edu
Subject: RE: [Veritas-bu] Error 58 got me stumped


Hmmm - Prior to having my security admin open all ports between them I
had changed host properties on the master to use vnetd only in firewall
for a specific client name.   This changed the error but the bpcd log
was showing many ports other than vnetd being attempted and they were
random.  =20
=20
Based on what you said also in host properties I've now told the client
to use vnetd only in firewall for the master.   Doing a run of the
backup after that I still see it opening all sorts of ports in the bpcd
log and have verified it is in fact opening such ports by running lsof
against bpcd and bpkar on the client.   (Note:  I also verified these
ports are being opened between client and master not just internal to
the client.)
=20
Do I need to restrict port range to just 13724 in host properties to
force it to use vnetd despite having selected vnetd in the firewall
setting already?
=20
=20
 =20
--K1Fq.433VempDm.14ksYH.E74KuMF
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline

=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D

La version fran=C3=A7aise suit le texte anglais.

---------------------------------------------------------------------------=
---------

This email message from the Bank of Canada is given in good faith, and shal=
l not be
binding or construed as constituting any obligation on the part of the Bank.

This email may contain privileged and/or confidential information, and the =
Bank of
Canada does not waive any related rights. Any distribution, use, or copying=
 of this
email or the information it contains by other than the intended recipient is
unauthorized. If you received this email in error please delete it immediat=
ely from
your system and notify the sender promptly by email that you have done so.=20

Recipients are advised to apply their own virus checks to this message upon=
 receipt.

---------------------------------------------------------------------------=
---------

L'information communiqu=C3=A9e dans les courriels en provenance de la Banqu=
e du Canada
est soumise de bonne foi, mais elle ne saurait lier la Banque et ne doit au=
cunement
=C3=AAtre interpr=C3=A9t=C3=A9e comme constituant une obligation de sa part.

Le pr=C3=A9sent courriel peut contenir de l'information privil=C3=A9gi=C3=
=A9e ou confidentielle.
La Banque du Canada ne renonce pas aux droits qui s'y rapportent. Toute dif=
fusion,
utilisation ou copie de ce courriel ou des renseignements qu'il contient pa=
r une
personne autre que le ou les destinataires d=C3=A9sign=C3=A9s est interdite=
 Si vous recevez
ce courriel par erreur, veuillez le supprimer imm=C3=A9diatement et envoyer=
 sans d=C3=A9lai =C3=A0
l'exp=C3=A9diteur un message =C3=A9lectronique pour l'aviser que vous avez =
=C3=A9limin=C3=A9 de votre
ordinateur toute copie du courriel re=C3=A7u.

D=C3=A8s la r=C3=A9ception du pr=C3=A9sent message, le ou les destinataires=
 doivent activer leur
programme de d=C3=A9tection de virus pour =C3=A9viter toute contamination p=
ossible.

--K1Fq.433VempDm.14ksYH.E74KuMF--