Hi,
I'm the one who is doing this,(sorry I didn't se this mail earlier).
What you have to install ís Library Management Gateway software from
Storagetek. That software is in 2 parts, first you install ACS Adapter
Component in the media server that is behind the firewall, then you have to
install Gateway Component on the ACSLS server.
Best is if you can get a copy of Installation/config and admin guide for LMG
the document number is 313481002 from Storagetek.
This software make it possible for remote client's (such as a media server) to
send ACS commands through a firewall, the LMG converts client-generated RPC
requests to HTTP/XML prior to transmission and processes these req. through a
single fixed port behind the firewall.(This text is just a copy from the
manual) The ACSLS server needs to have IPC Surrogate software installed, if you
have ACSLS 6.0.1 IPC is a separate package, in 6.1 it's included. We have been
running this now for 1,5 years and the only problem is that after a reboot the
media server change port, I have not found that problem yet.
/Joe
-----Ursprungligt meddelande-----
Från: Ed.Toner AT eu.nabgroup DOT com [mailto:Ed.Toner AT eu.nabgroup DOT com]
Skickat: den 21 april 2004 12:09
Till: mmlist AT mjmm DOT org; veritas-bu AT mailman.eng.auburn DOT edu
Ämne: Re: [Veritas-bu] ACSLS and firewalls... possible?
Somebody else on this list was definitely doing this but got problems
because every time he rebooted the media server it changed the ports so the
drives showed up as avr.
Have a quick search of the archive for avr and firewall and you may see
more.
Cheers
Ed
"Michael Miller" <mmlist AT mjmm DOT org>@mailman.eng.auburn.edu on 20/04/2004
16:52:46
Sent by: veritas-bu-admin AT mailman.eng.auburn DOT edu
To: veritas-bu AT mailman.eng.auburn DOT edu
cc:
Subject: [Veritas-bu] ACSLS and firewalls... possible?
Hi there,
we currently have a number of media servers talking to an ACSLS server for
a Powderhorn wih shared SAN attached drives. This is all working ok.
We also have a number of media servers behind firewalls backing up
clients. This too works ok using vnetd. So we can backup using media
servers behind firewalls (onto local SDLTs) and clients behind firewalls.
Our growth now means that we wish to backup to the Powderhorn Silo from
media servers behind firewalls. How do you confirgure the firewall
policy to allow a media server to talk to the ACSLS server?
I have done some snooping and found that the media server talks to the
ACSLS on rpc program 300031. Also I have seen mention of program
536871166. What confuses me now is that the ACSLS server appears to talk
to the media server too using RPC. I have seen RPC programs 1073741824
and 1073741825 from the ACSLS server to the media server. This does not
appear to be fixed though...
Please let me know how if this is possible and if so, what ports/protocols
need to be open on the firewall between the media server and the ACSLS
server.
Many thanks!!!
Mike
_______________________________________________
Veritas-bu maillist - Veritas-bu AT mailman.eng.auburn DOT edu
http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu
===============================================================
National Australia Group Europe Limited (Company Number 02108635,
Registered Office 88 Wood Street, London EC2V 7QQ) (NAGE) is a subsidiary
of National Australia Bank Limited (an Australian registered company). The
following UK subsidiaries of NAGE are authorised and regulated by the
Financial Services Authority: Clydesdale Bank PLC, Yorkshire Bank PLC,
Northern Bank Limited, Northern Bank Executor and Trustee Company Limited,
MLC Savings Limited, MLC Trust Management Company Limited, Clydesdale Bank
Insurance Brokers Limited, Yorkshire Bank Financial Services Limited,
Northern Bank Insurance Services Limited, National Australia Bank Limited.
In Ireland National Irish Bank Limited and National Irish Investment Bank
Limited are regulated by the Irish Financial Services Regulatory
Authority.
The views and opinions expressed in this email may not reflect the views
and opinions of any member of the group of which NAGE forms part. The
information contained in this message is confidential and may also be
privileged. It is intended only for the addressee named above. The
unauthorised use, disclosure, copying or alteration of this message is
strictly prohibited. If you are not the addressee (or responsible for
delivery of the message to the addressee), please notify the originator
immediately by return message and destroy the original message. This
message and any attachments have been scanned for viruses prior to leaving
the NAGE network. However, NAGE does not guarantee the security of this
message and will not be responsible for any damages arising as a result of
any virus being passed on or arising from any alteration of this message
by a third party. NAGE may monitor emails sent to and from the NAGE
network.
_______________________________________________
Veritas-bu maillist - Veritas-bu AT mailman.eng.auburn DOT edu
http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu
|
