Connecting To a CommServe Behind a Firewall During Setup

The Linux ROBO node must be able to connect to a CommServe during the initial setup. If the CommServe and the node are separated by a firewall, additional configuration is required to establish the connection during setup.

Procedure

Create a pseudo client.
1. From the CommCell Browser, right-click Client Computers, and then click New Client.
  
  The Add New Client dialog box appears.
2. Click the Unix button.
  
  The New Client dialog box appears.
3. On the Client Name box, type the name of the Linux ROBO node.
4. On the Host Name box, type the corresponding hostname of the node used for setting up the nodes.
5. Click Next.
  
  The Summary dialog box appears.
6. Review your settings, and then click Finish.
  
  The Commvault software creates a UNIX pseudo-client with the client name that you entered.
Configure a one-way network route between the CommServe and the Linux ROBO client using a predefined network topology.

Use this configuration on environments in which the client initiates connections to the CommServe computer. (For other types of connections, see Direct Connections Using Predefined Network Topologies.
1. Create a client group using the pseudo client created in step 1.
  
  For more information about creating a client group, see Creating a Client Computer Group.
2. From the CommCell Browser, right-click Network Topologies > New Topology.
  
  The Network Topology dialog box is displayed.
3. In the Topology Name box, enter a name for this instance of a one-way direct connection.
4. Optional: In the Description box, enter a description for this topology.
5. In the Client Type list, select Servers.
6. For Topology Type, select One-Way.
7. In the Servers list, select the client group created in step 1.
8. In the DMZ servers list, select My CommServe.
9. Click OK.
10. From the Push Network Configuration dialog box, click OK.
Manually copy the network routes from the CommCell Console and create the FwConfig.txt file on the Client.
1. From the CommCell Browser, expand Client Computers and navigate to the pseudo client.
2. Right-click the pseudo client, and then click Properties.
3. Click the Network button.
  
  The Network Properties for Client: <client_name> dialog box appears.
4. Click the Summary tab.
5. Copy / paste the contents of the Summary tab into a text file named FwConfig.txt.
6. Place the FwConfig.txt file in the software_installation_path\Base folder in the node.
Register and manually start the Commvault Network Daemon service on the client.
1. Navigate to the software_installation_path\Base folder in the node
2. Register the Commvault Network Daemon service (Cvfwd.exe) using the following command:
```
./svc_ctrl -focus Instance001 -create cvfwd /opt/commvault/Base/cvfwd
```
3. Restart the services using the following command:
```
commvault -all restart
```
  Wait until all the services restarted including Cvfwd service.
Verify CommServe connectivity from the Linux ROBO node.
1. Login to a node, and using ping (or any other equivalent network command) to verify that the CommServe server is accessible from the node.
2. Use the cvping command as follows, to make sure that the CommServe server is accessible:
  1. Navigate to the following folder:
```
# /opt/ContentStore/Base
```
  2. Run the following command:
```
# ./cvping CommServe_host_name port_number
```
    For example:
```
# ./cvping myCommServe.company.com 8400
```
3. If necessary, add the CommServe name and IP address to /etc/hosts file to make sure that the CommServe is reachable.
  
  If you are unable to connect to the CommServe server using the cvping command, you must register the node individually with the CommServe server. For more information, see Unable to Connect to CommServe Server Behind a Firewall During Setup.