Enabling Firewall on Linux ROBO

Firewall can be enabled and the required ports automatically opened on the Linux ROBO node.

Firewall configuration divides the network into zones. A zone is a group of interfaces and services that share common rules to establish a secure boundary within the network and implement access control between the nodes. When you enable firewall, the CS registration and data protection interfaces are added to the default 'blocked' zone and the storage pool interface is added to a private 'cv_storage_ zone' in the firewall configuration.

Note

Firewall is automatically enabled on new installations of the Linux ROBO node.

Procedure

Set the MediaAgents associated with the Linux ROBO node on Maintenance mode.

For more information, see Setting the MediaAgent on Maintenance Mode.
Log on to the Linux ROBO node.

Navigate the following folder:

# cd /opt/commvault/MediaAgent/task_manager

Run the following script:
```
# ./cvmanager.py -t Configure_Firewall
```
This will enable the necessary ports needed for the node, depending on your environment.
Verify that the firewall is enabled using the following command:
```
# firewall-cmd --state
```
This should display the state as running.
Verify that the MediaAgent services are running using the following command:
```
# commvault list
```
For more information on managing the MediaAgent services, see Commands to Control Services on UNIX Clients.
Check readiness of the MediaAgents in the HyperScale nodes to make sure that it is ready.

For more information, see Checking Readiness.
Turn off the maintenance mode on MediaAgents associated with the cluster.

For more information, see Setting the MediaAgent on Maintenance Mode.