V11 SP8
Loading...

Configuring Firewall without Proxy for Laptop Backup

When CommCell components are separated by a firewall, the components must be configured with the connection route to reach each other across the firewall. After the configuration, the components communicate through the firewall for all data management operations such as backup, browse and restore.

You can set up direct connections, where the client connects to the CommServe computer, by using one of the following methods:

  • Preferred Method: Using a predefined firewall topology

    If you want to simplify the amount of firewall configuration steps, you can use the predefined firewall topology for direct connections. This is useful if the connection is client group-to-client group.

  • Alternative Method: Using the traditional firewall configuration

    If the predefined firewall topology does not meet your needs, you can use the traditional configuration to set up direct connections. This method provides the steps to configure the Laptop Client group to open tunnel connections toward the CommServe and MediaAgent computers.

Procedure

Choose the method that meets your requirements.

Expand All

Preferred Method: Using a Predefined Firewall Topology

For instructions, see Setting up a One-Way Firewall (Client to CommServe) Using a Predefined Firewall Topology.

Note: When you create the laptop package, the package must be configured to assign laptop computers to the Infrastructure client group that was defined in the firewall topology.

Alternative Method: Using Traditional Firewall Configurations

  1. Configure firewall settings on the CommServe computer.
    1. From the CommCell Browser, right-click the CommServe node and click Properties.
    2. In the CommCell Properties dialog box, click the Firewall Configuration tab, select the Configure Firewall Settings check box, and click OK.
    3. From the CommCell Browser, right-click the CommServe node and then click All Tasks > Push Firewall Configuration.
    4. Read the warning, click Continue, and then click OK.
  2. Configure firewall settings on the MediaAgent computer.

    Note: Skip this step if your MediaAgent is hosted on the same computer as the CommServe.

    1. From the CommCell Browser, expand Storage Resources > MediaAgents, right-click the MediaAgent and then click Properties.
    2. In the MediaAgent Properties dialog box, click the Firewall Configuration tab, select the Configure Firewall Settings check box, and click OK.
    3. From the CommCell Browser, right-click the MediaAgent and then click All Tasks > Push Firewall Configuration.
    4. Read the warning, click Continue, and then click OK.
  3. Configure firewall settings on the Laptop Client group.
    1. From CommCell Browser, expand Client Computer Groups, right-click the Laptop Clients group and then click Properties.
    2. In the client group properties dialog box, click Network.
    3. On the Firewall Configuration tab of the Network Properties for Client Group dialog box, select the Configure Firewall Settings check box.
    4. On the CommServe Connectivity tab, determine how you want to establish connectivity with the CommServe computer:
      • If the client and CommServe are on different networks, click Always outside of CommServe network.
      • If the client does not always reside on the CommServe network, click May travel outside of CommServe network. This option is recommended for laptop and other mobile devices.

        The Open tunnel directly to CommServe option is automatically selected.

    5. On the MediaAgent Connectivity tab, determine how you want to establish connectivity with the MediaAgent:
      • If the client and MediaAgent are on different networks, select Always outside of MediaAgent network.
      • If the client does not always reside on the MediaAgent network, select May travel outside of MediaAgent network. This option is recommended for laptop and other mobile devices.

        The Open tunnel directly to MediaAgent option is automatically selected.

    6. In the Network Properties for Client Group dialog box, click OK to save the firewall configuration.
    7. Click OK to close the client group properties dialog box.
    8. From the CommCell Browser, right-click the Laptop Clients group and then click All Tasks > Push Firewall Configuration.
    9. Read the warning, click Continue, and then click OK.

    Clients that are registered with the client group will inherit the group's firewall settings.