Connecting To a CommServe Behind a Firewall During Setup

Hyperscale nodes must be able to connect to a CommServe during the initial setup. If the CommServe and the HyperScale nodes are separated by a firewall, additional configuration is required to establish the connection during setup.

Step 1: Create a pseudo client.

From the CommCell Browser, right-click Client Computers, and then click New Client.

The Add New Client dialog box appears.
Click the Unix button.

The New Client dialog box appears.
On the Client Name box, type the name of the HyperScale node used for setting up the nodes.
On the Host Name box, type the corresponding hostname of the HyperScale node used for setting up the nodes.
Click Next.

The Summary dialog box appears.
Review your settings, and then click Finish.

The Commvault software creates a UNIX pseudo-client with the client name that you entered.

Step 2: Configure a one-way network route between the CommServe and the HyperScale client using a predefined network topology.

Use this configuration on environments in which the client initiates connections to the CommServe computer.

Create a client group using the pseudo client created in step 1.
From the CommCell Browser, right-click Network Topologies > New Topology.

The Network Topology dialog box is displayed.
In the Topology Name box, enter a name for this instance of a one-way direct connection.
Optional: In the Description box, enter a description for this topology.
In the Client Type list, select Servers.
For Topology Type, select One-Way.
In the Server list, select the client group created in step 1.
In the DMZ Client Group list, select My CommServer computer.
Click OK.
From the Push Network Configuration dialog box, click OK.

Step 3: Manually copy the network routes from the CommCell Console and create the FwConfig.txt file on the HyperScale Client.

From the CommCell Browser, expand Client Computers and navigate to the pseudo client.
Right-click the pseudo client, and then click Properties.
Click the Network button.

The Network Properties for Client: <client_name> dialog box appears.
Click the Summary tab.
Copy / paste the contents of the Summary tab into a text file named FwConfig.txt.
Place the FwConfig.txt file in the software_installation_path\Base folder in the HyperScale node used for setting up the nodes.

Step 4: Register and manually start the Commvault Network Daemon service on the HyperScale Client.

Navigate to the software_installation_path\Base folder in the HyperScale node used for setting up the nodes.
Register the Commvault Network Daemon service (Cvfwd.exe) using the following command:
```
./svc_ctrl -focus Instance001 -create cvfwd /opt/commvault/Base/cvfwd
```
Restart the services using the following command:
```
commvault -all restart
```
Wait until all the services restarted including Cvfwd service.

Step 5: Verify CommServe connectivity from the HyperScale node.

Login to a node, and using ping (or any other equivalent network command) to verify that the CommServe server is accessible from the HyperScale node.
Use the cvping command as follows, to make sure that the CommServe server is accessible:
1. Navigate to the following folder:
```
# /opt/ContentStore/Base
```
2. Run the following command:
```
# ./cvping CommServe_host_name port_number
```
  For example:
```
# ./cvping myCommServe.company.com 8400
```
If necessary, add the CommServe name and IP address to /etc/hosts file to make sure that the CommServe is reachable.

If you are unable to connect to the CommServe server using the cvping command, you must register the HyperScale nodes individually with the CommServe server. For more information, see Unable to Connect to CommServe Server Behind a Firewall During Setup.