• Please help support our sponsors by considering their products and services.
    Our sponsors enable us to serve you with this high-speed Internet connection and fast webservers you are currently using at ADSM.ORG.
    They support this free flow of information and knowledge exchange service at no cost to you.

    Please welcome our latest sponsor Tectrade . We can show our appreciation by learning more about Tectrade Solutions
  • Community Tip: Please Give Thanks to Those Sharing Their Knowledge.

    If you receive helpful answer on this forum, please show thanks to the poster by clicking "LIKE" link for the answer that you found helpful.

  • Community Tip: Forum Rules (PLEASE CLICK HERE TO READ BEFORE POSTING)

    Click the link above to access ADSM.ORG Acceptable Use Policy and forum rules which should be observed when using this website. Violators may be banned from this website. This notice will disappear after you have made at least 3 posts.

TDP for sql DMZ issue

#1
Hello guys,

i've an issue about a tdp sql installed on nodes behind a dmz, the problem is that i cannot open sockets toward tsm server from the dmz to the inside area where i have my tsm server. So i can only contact the ba client through the 1501 port that i can use fot fs backups. Now my question is:

how can i use the ba client scheduler in order to backup sql data using only the session opened by tsm server?

if it'snt possible, is there another way to solve this issue?

Regards.

clexelc
 

moon-buddy

ADSM.ORG Moderator
#2
You can use the same TCP Port for backing up SQL data but it is not advisable.

What you can do is open another port, say 1502 for the TDP layer and specify this on the dsm.opt file for the SQL environment.

If Security objects, the argument is data protection and ask them to open the port for ONLY the IP address of the TSM Client. This can all be dome through ACL rules at the firewall part.
 
#3
Thank you for your reply,

ok i could ask to do this at the firewall guy, if not possible, could i use the same session of the back-archive client through api (or something like?)

Regards.
 

moon-buddy

ADSM.ORG Moderator
#4
Thank you for your reply,

ok i could ask to do this at the firewall guy, if not possible, could i use the same session of the back-archive client through api (or something like?)

Regards.
As I said, you can but not advisable.

If want to use the same TCP Port, specify this in the dsm.opt file for the TDP for SQL.
 
#5
Yes, sorry for repeating, the point is that theese hosts have public ip addresses, so i could receive a denial from the security, so for this reason i should be able to backup using onle the session opened by tsm server. Is possible to do this with tdp sql?
 

moon-buddy

ADSM.ORG Moderator
#6
Yes, sorry for repeating, the point is that theese hosts have public ip addresses, so i could receive a denial from the security, so for this reason i should be able to backup using onle the session opened by tsm server. Is possible to do this with tdp sql?
Just as I said, yes. Just put the TCP Port the BA Client is using on the dsm.opt file for TDP for SQL; just don't run the BA when TDP for SQL is running.

On another note, why don't you setup a private IP for firewall access and backup using a another NIC? This is a recommended Network procedure for any DMZ servers.
 

Advertise at ADSM.ORG

If you are reading this, so are your potential customer. Advertise at ADSM.ORG right now.

UpCloud high performance VPS at $5/month

Get started with $25 in credits on Cloud Servers. You must use link below to receive the credit. Use the promo to get upto 5 month of FREE Linux VPS.

The Spectrum Protect TLA (Three-Letter Acronym): ISP or something else?

  • Every product needs a TLA, Let's call it ISP (IBM Spectrum Protect).

    Votes: 12 15.8%
  • Keep using TSM for Spectrum Protect.

    Votes: 48 63.2%
  • Let's be formal and just say Spectrum Protect

    Votes: 9 11.8%
  • Other (please comement)

    Votes: 7 9.2%

Forum statistics

Threads
31,350
Messages
133,531
Members
21,475
Latest member
sag
Top