V11 SP8
Loading...

Setting Up the Commvault Proxy for the Service Provider

In a multi-tenant CommCell environment, tenants must communicate with the service provider through a proxy computer.

You must set up the Commvault proxy and configure incoming and outgoing connections between the proxy and the CommServe computer.

Procedure

  1. Create the placeholder client for the proxy:
    1. From the CommCell Browser, right-click Client Computers, and then click New Client > File System > Windows.

      The New Windows Client dialog box appears.

    2. In the Client Name and Host Name boxes, enter the client name and host name of the proxy computer, and then click Next.

      Write down these values because you will use them when you install the Commvault software on the proxy.

    3. In the Summary page, review the information and then click Finish.
  2. Configure firewall settings on the placeholder client:
    1. From the CommCell Browser, expand Client Computers, right-click the new proxy client, and then click Properties.

      The Client Computer Properties dialog box appears.

    2. Click Network.

      The Network Properties for Client dialog box appears.

    3. On the Firewall Configuration tab, select the Configure Firewall Settings check box, click Advanced.

      When the warning message appears, click OK.

    4. Configure the proxy to allow connections from the CommServe computer:
      1. On the Incoming Connections tab, click Add.

        The Connections dialog box appears.

      2. From the From list, select the CommServe computer.
      3. From the State list, select RESTRICTED.
      4. Click OK.
    5. If the MediaAgent is not installed on the CommServe computer, you must also configure the proxy to allow connections from the MediaAgent:
      1. Click Add.

        The Connections dialog box appears.

      2. From the From list, select the MediaAgent.
      3. From the State list, select RESTRICTED.
      4. Click OK.
    6. On the Incoming Ports tab, in the Listen for tunnel connections on port box, specify the port number that the Commvault proxy will monitor for connection requests from the CommServe computer. Write down the port number because you will use it when you install the Commvault software on the proxy.
    7. On the Options tab, select the This computer is in DMZ and will work as a proxy check box, and then click OK.

      The placeholder client is now configured.

  3. Configure firewall settings on the CommServe computer to specify incoming and outgoing connections for the proxy.
    1. From the CommCell Browser, right-click the CommServe node, and then click Properties.

      The CommCell Properties dialog box appears.

    2. On the Firewall Configuration tab, select the Configure Firewall Settings check box.
    3. On the Incoming Connections tab, click Add to specify connections from the Commvault proxy as BLOCKED.
    4. On the Outgoing Routes tab, click Add.

      The Route settings dialog box appears.

    5. From the Remote Group/Client list, select the Commvault proxy.
    6. In the Route Type area, click Direct. In the Tunnel Connection Protocol area, click Regular.
    7. Click OK.
    8. From the CommCell Browser, right-click the CommServe node, and then click All Tasks > Push Firewall Configuration.

      When the Warning dialog box appears, click Continue.

    9. Click OK to close the firewall push notification.

      You are now ready to install the Commvault software on the proxy.

  4. Install the following Commvault software on the proxy by using any of the methods listed in Installation Methods.
    • File System Agent
    • Web Console
    • CommCell Console

    Important:

    • During the installation, you must specify a local HTTP or HTTPS port number that the CommServe computer can use to open tunnel connections towards the proxy. For firewall instructions during the installation, see Setting Up Direct Connections from the CommServe Computer to the Client.
    • Write down the Tomcat port, because you will use it when you complete the configuration to use the Web Console through the proxy.
    • Write down the IIS port number, because you will use it when you publish the CommCell Console URL.

Result

The Commvault proxy is ready to be used by the service provider.

What to Do Next

Configuring the CommServe Computer to Support Multiple Tenants