V11 SP8
Loading...

Configuring the Client for Proxy Connections

You must configure the client or client group to establish connections with the CommServe computer and MediaAgent through the Commvault proxy. This configuration is necessary to enable backup and restore operations on the clients.

During the firewall configuration, you will perform the following configurations:

  • Set incoming connections from the proxy as Blocked.

  • Set an outgoing route from the client to the CommServe computer or MediaAgent.
    • Remote Group/Client: the CommServe computer or MediaAgent
    • Route type: Via Proxy
  • Set an outgoing route from the client to the Commvault proxy.
    • Remote Group/Client: Commvault proxy
    • Route type: Direct

Before You Begin

  • You must have created and configured the Commvault proxy. For instructions, see Setting Up the Commvault Proxy.
  • The Commvault software must be installed on the client.

Procedure

  1. From the CommCell Browser, right-click the client or client group, and then click Properties > Network.
  2. On the Firewall Configuration tab, select Configure Firewall Settings, then the Advanced option. Click OK to acknowledge the warning and continue.
  3. On the Incoming Connections tab, click Add, and in the Connections dialog box, provide the following details:
    1. From the From list, select the Commvault proxy.
    2. From the State list, select BLOCKED because there are no incoming connections from the proxy to the client.
    3. Click OK.
  4. On the Outgoing Routes tab, then click Add to create a route for the outgoing connection from the client to the Commvault proxy.
    1. Select the Commvault proxy from the Remote Group/Client list. For Route Type, select Direct, and for Tunnel Connection Protocol, select Authenticated. (The Authenticated option requires credentials to establish the connection, but does not encrypt the data during transfer.)
    2. If a port-forwarding gateway separates the client from the proxy, select Route Type of Via Gateway. Note that you will have to configure the Gateway Settings section after the next step.
    3. Select Force all data (along with control) traffic into the tunnel to force the data traffic into the tunnel.
    4. Click OK.
  5. Click Add to create a route for the outgoing connection from the client to the CommServe host, through the Commvault proxy.
    1. From the Remote Group/Client list, select the CommServe name, and then for Route Type select Via Proxy.
    2. From the Remote Proxy list, select the Commvault proxy and click OK.
  6. Click Add to create a route for the outgoing connection from the client to the MediaAgent, through the Commvault proxy.
    1. From the Remote Group/Client list, select the name of the MediaAgent, and then for Route Type, select Via Proxy.
    2. From the Remote Proxy list, select the Commvault proxy and click OK.
  7. Click OK again to close the Route Settings dialog box.
  8. Confirm that the Outgoing Routes tab shows three routes, for:
    • The client to the proxy
    • The client to the MediaAgent host
    • The client to the CommServe host

    Note: If you used a port-forwarding gateway, the Route settings column indicates Via Gateway.

  9. From the CommCell Browser, right-click the client or client group and click All Tasks > Push Firewall Configuration.
  10. Read the warning, then click Continue to acknowledge it and proceed.
  11. Click OK to close the firewall push notification.
  12. In the CommCell Console, right-click the client computer name, then click All Tasks > Check Readiness. Confirm the results shown in the Client Connectivity dialog box.

    If the client computer does not pass the readiness check, verify your settings against the above recommendations and revise them as required. If you have verified the settings, and the client is still not ready, check items on the Troubleshooting page related to connectivity.

What to Do Next

Configuring the CommServe Computer for Proxy Connections