|
I have this in my 'bag of tricks' under the heading of DMZ client setup:
* Add client to a policy and install the client binaries on the client.
* In the administration GUI expand NetBackup Management, expand Host Properties, and click on Master Servers. In the RHS pane, right click on the master server and select Properties. A new window will open.
* In the LHS tree of this new window, select Firewall. In the RHS pane add the name of the client and its attributes:
Use connect-back: not checked
Ports: bullet on Use reserved ports (this setting may not matter)
Daemon connection port: bullet on VNETD only.
* In the LHS tree select Client Attributes. In the RHS pane select or add the client. General tab attributes:
No connect-back: checked.
*The network firewall has to allow connections on ports 13724 and 13782 originating from the media server to the client in the DMZ.
Now that I read it, and some of the replies so far, I wonder if both ports are actually needed from trusted (media server) to untrusted (client), but at least this process restricts the connections to being in the
desired direction, rather than untrusted to trusted.
From: veritas-bu-bounces AT mailman.eng.auburn DOT edu [veritas-bu-bounces AT mailman.eng.auburn DOT edu] On Behalf Of Rusty.Major AT sungard DOT com [Rusty.Major AT sungard DOT com]
Sent: Friday, May 28, 2010 14:07
To: BeDour, Wayne
Cc: veritas-bu AT mailman.eng.auburn DOT edu; veritas-bu-bounces AT mailman.eng.auburn DOT edu
Subject: Re: [Veritas-bu] Need to backup a server in the extranet.
In 6.x, all you should need is 13724 (vnetd), but have a look at the "Port Usage Guide for Windows and UNIX Platform
": http://seer.entsupport.symantec.com/docs/281623.htm.
Rusty Major, MCSE, BCFP, VCS ▪ Sr. Storage Engineer ▪ SunGard Availability Services ▪ 757 N. Eldridge Suite 200, Houston TX 77079 ▪ 281-584-4693
Keeping People and Information Connected® ▪ http://availability.sungard.com/
P
Think before you print
CONFIDENTIALITY: This e-mail (including any attachments) may contain confidential, proprietary and privileged information, and unauthorized disclosure or use is prohibited. If you received this e-mail in error, please notify the
sender and delete this e-mail from your system.
"BeDour, Wayne" <WBedour AT lear DOT com>
Sent by: <veritas-bu-bounces AT mailman.eng.auburn DOT edu>
05/28/2010 11:15 AM
|
|
To
|
<veritas-bu AT mailman.eng.auburn DOT edu> |
|
cc
|
|
|
Subject
|
[Veritas-bu] Need to backup a server in the extranet. |
|
Our environment, NBU 6.5.4
Master and separate media server
running on HP-UX 11-31. I need to backup a windows server that is
in the extranet. Anyone know what ports need to be opened by the firewall guys?
Thanks in advance…
Wayne BeDour
Unix System Administrator
PH: 248-447-1739
Internet: wbedour AT lear DOT com
**********************
** LEGAL DISCLAIMER **
**********************
This E-mail message and any attachments may contain
legally privileged, confidential or proprietary
information. If you are not the intended recipient(s),
or the employee or agent responsible for delivery of
this message to the intended recipient(s), you are
hereby notified that any dissemination, distribution
or copying of this E-mail message is strictly
prohibited. If you have received this message in
error, please immediately notify the sender and
delete this E-mail message from your computer. |
_______________________________________________
Veritas-bu maillist - Veritas-bu AT mailman.eng.auburn DOT edu
http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu
____________________________________________________________
This message and any attachments are confidential, may contain privileged
information, and are intended solely for the recipient named above.
If you are not the intended recipient, or a person responsible for
delivery to the named recipient, you are notified that any review,
distribution, dissemination or copying is prohibited. If you have
received this message in error, you should notify the sender by return
email and delete the message from your computer system.
|
