psefmoreit
ADSM.ORG Member
Is there any way to configure the web client (dsmagent) so that it will only respond to a specific list of ip addresses. We would like to do this within the TSM scope (not using firewall, ip tables, etc..)
-
-
Community Tip: Forum Rules (PLEASE CLICK HERE TO READ BEFORE POSTING)
Click the link above to access ADSM.ORG Acceptable Use Policy and forum rules which should be observed when using this website. Violators may be banned from this website. This notice will disappear after you have made at least 3 posts.
Can You Restrict IP addresses for Web Client
- Thread starter psefmoreit
- Start date
Stephan
ADSM.ORG Senior Member
- Joined
- Jun 7, 2004
- Messages
- 649
- Reaction score
- 2
- Points
- 0
- Location
- Great White North
- Website
- www.twosix.ca
I've seen the webports option that allows you to specify a port to listen on if that can be of any help to you...
- The webports option has been added to enable the use of the Web client
outside a firewall by specifying the TCP/IP port number used by the TSM
Client Acceptor daemon and the TSM Remote Web client agent service for
communications with the Web GUI. To enable the Backup-Archive client,
Command Line Admin client, and the Scheduler (running in polling mode)
to run outside a firewall, the port specified by the server option
tcpport (default 1500) must be opened in the firewall.
- The webports option has been added to enable the use of the Web client
outside a firewall by specifying the TCP/IP port number used by the TSM
Client Acceptor daemon and the TSM Remote Web client agent service for
communications with the Web GUI. To enable the Backup-Archive client,
Command Line Admin client, and the Scheduler (running in polling mode)
to run outside a firewall, the port specified by the server option
tcpport (default 1500) must be opened in the firewall.
moon-buddy
ADSM.ORG Moderator
There is currently no option (within dsm.opt or dsm.sys) to restrict the Web GUI to a range of IP addresses unless through routers or firewall rules.
A work around is to have a private IP address "backup line" so only backup/restore request can be made. Having said this, any operator access must be made within this private "backup line". Therefore, no public IP access is possible.
A work around is to have a private IP address "backup line" so only backup/restore request can be made. Having said this, any operator access must be made within this private "backup line". Therefore, no public IP access is possible.
