> Documentation > Backup and Restore Agents > Virtualization > Virtual Server Agent > Supported Hypervisors and Common Information for Virtual Server Agent > Deployment

Configuring a Firewall to Install the Virtual Server Agent on a Cloud VM or Instance

To deploy the Virtual Server Agent (VSA) or MediaAgent on a cloud VM or instance when other components (such as the CommServe host) are on premises, configure a Commvault firewall between the on premises components and the cloud VM or instance.

Configuring a Commvault Network Route and Installing the Virtual Server Agent

  1. In the CommCell Console, configure a Windows client for the cloud VM or instance where the VSA will be installed:

    1. Right-click Client Computers and select New Client > File System > Windows.

    2. In the Client Name box, enter a descriptive label for the VSA proxy.

    3. In the Windows box, enter the public IP address for the VSA proxy.

    4. Click Next.

    5. Verify the client information and click Finish.

  2. Configure network route settings on the client for the CommServe host:

    1. Right-click the CommServe node, and then select Properties.

    2. On the Network Route Configuration tab, select Configure Network Route Settings.

    3. On the Incoming Connections subtab, click Add to add the proxy client connection.

    4. From the From list, select the VSA proxy.

    5. From the State list, select BLOCKED.

    6. Click OK.

  3. Configure network route settings on the client for the VSA proxy:

    1. Under Client Computers, right-click the client for the VSA proxy, and then select Properties.

    2. Click Network.

    3. Click the Network Route Configuration tab.

    4. On the Incoming Connections tab, click Add to add the CommServe host connection.

    5. From the From list, select the client for the CommServe host.

    6. From the State list, select RESTRICTED.

    7. Click OK.

    8. To change the default tunnel port, on the Incoming Ports tab, select the Override default tunnel port check box, and enter the port number for incoming tunnel connections.

      The default tunnel port is the Commvault Communications (CVD) service port plus 3 (for example, 8403).

    9. Click OK.

  4. Right-click the CommCell node, and then select All Tasks > Push Network Route Configuration.

  5. Under Client Computers, right-click the client for the CommServe host, and then select All Tasks > Push Network Route Configuration.

  6. Log on to the VSA proxy.

  7. Download the installation media from Cloud Services or Maintenance Advantage.

  8. Run the installation package and select the Virtual Server Agent package.

    If you are using cloud storage, you can also select the MediaAgent package.

  9. In the Firewall Configuration page, select Configure firewall services and CommServe can open connection toward this machine.

  10. In the CommServe Information page, enter the client name for the CommServe host.

    Enter only the client name as defined in the CommCell Console, not the fully qualified domain name for the host.

  11. In the Client Computer Information page, enter the name of the client that you created for the VSA proxy in the Client Host Name box and the public IP address for the VSA proxy in the Host Name box.

  12. In the Firewall Connection Information page, enter the port (for example, 8403) in the Local HTTP/HTTPS tunnel port number box.

  13. Complete the installation process.

For more information about different firewall configurations, see the following topics:

Loading...