Configuring the Client for Two-Way Direct Connection

You must configure the client to initiate connections with the CommServe computer and MediaAgent. This configuration is necessary to enable backup and restore operations on the clients.

During the network configuration, set incoming connections from the CommServe and MediaAgent computers to Restricted.

Before You Begin

Configure the CommServe computer and MediaAgents to receive communications from the client.

Procedure

1. From the CommCell Browser, expand Client Computers, right-click the client, and then click Properties.

   The Client Computer Properties dialog box appears.

2. Click Network.

   The Network Properties for Client dialog box appears.

3. On the Network Route Configuration tab, select the Configure Network Route Settings check box.

4. Click Advanced, read the warning, and then click OK.

5. On the Incoming Connections tab, click Add.

   The Connections to dialog box appears.

6. Add an entry for the CommServe computer and the MediaAgent as follows:

   1. In the From list, select the name of the CommServe computer.

   2. In the State list, select RESTRICTED because the client can connect to the CommServe.

   3. Click OK.

   4. Click Add.

   5. In the From list, select the name of the MediaAgent.

   6. In the State list, select RESTRICTED because the client can connect to the MediaAgent.

   7. Click OK.

   For information about the RESTRICTED setting, see Restricting or Blocking Connections.

7. To change the default tunnel port that allows connections from the CommServe and the MediaAgent, on the Incoming Ports tab, select the Override default tunnel port check box, and then enter the port number for incoming tunnel connections.

   The default tunnel port is the Commvault Communications (CVD) service port plus 3 (for example, 8403).

8. Optional: Set additional incoming ports as follows:

   1. In the From box, enter a starting number in a port range.

   2. In the To box, enter an ending number in a port range.

   3. Click Add.

   For more information about additional ports, see Opening Additional Ports.

9. Set the outgoing route from the client to the CommServe computer as follows:

   1. Click the Outgoing Routes tab.

   2. Select the CommServe/ MediaAgent name from the Remote Group/Client list.

   3. For Tunnel Connection Protocol, select Encrypted to enable authentication and encryption for tunnel connections.

   4. The Force all data (along with control) traffic into the tunnel option is not required, as this route is not toward the MediaAgent.

   5. The Number of Tunnels Per Route defaults to 1. If desired, you can increase the number. Click here for more information.

   6. Click OK repeatedly until all dialog boxes are closed.

10. Verify that your network configuration was pushed successfully by checking the Event Viewer window.

    Note

    Outgoing routes are automatically created for direct connections. However, you can set up outgoing routes to enable HTTPS encryption for data traffic or to encrypt data connections by forcing connections into the tunnel. To set up outgoing routes from any host, see Configuring Outgoing Tunnel Connections.