Configuring the CommServe Computer for Client Connections Through the Port-Forwarding Gateway
After the clients are configured to connect to the CommServe computer during the installation, you must configure the CommServe computer to recognize the client connections through the port-forwarding gateway. This configuration is necessary to enable backup and restore operations on the clients.
During the firewall configuration, you will set incoming connections from the client as Restricted.
Before You Begin
- You must have set up the CommServe computer to listen for connections from the gateway. For instructions, see Setting Up Connections from the Port-Forwarding Gateway to the CommServe Computer.
- The Commvault software must be installed on the clients.
- Any additional destination port that you plan to specify for the clients must also be defined in the incoming port list of the CommServe computer.
- From the CommCell Browser, right-click the CommServe computer, then click Properties.
- On the Firewall Configuration tab, click the Incoming Connections tab, and then click Add.
- In From, select the client you just installed outside the gateway.
- In State, select RESTRICTED, since the connection is restricted to coming through a gateway (see Configuring Third-Party Connections), and then click OK.
- If you want to enable encryption and authentication for tunnel connections, click the Options tab and select the Force SSL authentication in incoming tunnel connections check box.
The CommServe, MediaAgent, and client communications will occur in accordance with the HTTPS standard.
- Click OK.
- From the CommCell Browser, right-click the CommServe computer and click All Tasks > Push Firewall Configuration.
- Read the warning, then click Continue to acknowledge it and continue.
- Read the confirmation and click OK.
- Verify that your firewall configuration pushed successfully by checking the Event Viewer window.