> Expert > Solutions and Use Cases > Edge Endpoint Solutions > Edge Solutions for Administrators > CommCell Configuration > Firewall Configuration

Configuring a Firewall Using a Proxy for Laptop Backup

Important: Skip this page if you are not using a proxy server, and go to the Set Up Firewall Without Proxy page.

When CommCell components are separated by a firewall, the components must be configured with the connection route to reach each other across that firewall. After the configuration, the components communicate through the firewall for all data management operations such as backup, browse and restore.

You can set up proxy connections by using one of the following methods:

  • Preferred Method: Using a predefined network topology

    If you want to simplify the amount of firewall configuration steps, you can use the predefined network topology for proxy connections. This is useful if the connection is client group-to-client group.

  • Alternative Method: Using the traditional firewall configuration

    If the predefined network topology does not meet your needs, you can use the traditional configuration to set up proxy connections. This method provides the steps to configure the CommServe, MediaAgent, and the Laptop Client group to operate through the Commvault proxy.

Procedure

Choose one of the following methods that meets your requirements:

Preferred Method: Using a Predefined Network Topology

  1. Set up network gateway connections using a predefined network topology.

  2. Set up the Commvault network gateway.

Note

When you create the laptop package, the package must be configured to assign laptop computers to the Servers group that was defined in the network topology.

Alternative Method: Using Traditional Firewall Configurations

  1. Set up the Commvault network gateway.

    Configure the computer that you want to use as the Commvault network gateway. For instructions, see Setting Up the Commvault Network Gateway.

  2. Configure network settings on the CommServe computer as follows:

    1. From the CommCell Browser, right-click the CommServe node and click Properties.

    2. In the CommCell Properties dialog box, click Network, click the Network Route Configuration tab, and then select the Configure Network Route Settings check box.

    3. In the Incoming Connections tab, click Add.

    4. In the Connections dialog box, provide the following information and then click OK.

      • From the From list, select the Commvault network gateway computer.

      • From the State list, select BLOCKED.

    5. In the CommCell Properties dialog box, click OK to save the network route configuration.

    6. From the CommCell Browser, right-click the CommServe node and then click All Tasks > Push Network Configuration.

    7. Read the warning, click Continue, and then click OK.

  3. Configure network settings on the MediaAgent computer as follows:

    Note

    Skip this step if your MediaAgent is hosted on the same computer as the CommServe.

    1. From the CommCell Browser, expand Storage Resources > MediaAgents, right-click the MediaAgent and then click Properties.

    2. In the MediaAgent Properties dialog box, click Network, click the Network Route Configuration tab, and then select the Configure Network Route Settings check box.

    3. In the Incoming Connections tab, click Add.

    4. In the Connections dialog box, provide the following information and then click OK.

      • From the From list, select the Commvault network gateway computer.

      • From the State list, select BLOCKED.

    5. In the MediaAgent Properties dialog box, click OK to save the network route configuration.

    6. From the CommCell Browser, right-click the MediaAgent and then click All Tasks > Push Network Configuration.

    7. Read the warning, click Continue, and then click OK.

  4. Configure network settings on the Laptop Client group as follows:

    1. From CommCell Browser, expand Client Computer Groups, right-click the Laptop Clients group and then click Properties.

    2. In the Client Group Properties dialog box, click Network.

    3. On the Network Route Configuration tab of the Network Properties for Client Group dialog box, select the Configure Network Route Settings check box.

    4. On the CommServe Connectivity tab, determine how you want to establish connectivity with the CommServe computer:

      • If the client and CommServe are on different networks, click Always outside of CommServe network.

      • If the client does not always reside on the CommServe network, click May travel outside of CommServe network. This option is recommended for laptop and other mobile devices.

        Make sure to click Use remote proxy and select the Commvault network gateway computer.

    5. On the MediaAgent Connectivity tab, determine how you want to establish connectivity with the MediaAgent:

      • If the client and MediaAgent are on different networks, select Always outside of MediaAgent network.

      • If the client does not always reside on the MediaAgent network, select May travel outside of MediaAgent network. This option is recommended for laptop and other mobile devices.

        Click Use remote proxy and select the Commvault network gateway computer.

    6. In the Network Properties for Client Group dialog box, click OK to save the network configuration.

    7. Click OK to close the client group properties dialog box.

    8. From the CommCell Browser, right-click the Laptop Clients group and then click All Tasks > Push Network Configuration.

    9. Read the warning, click Continue, and then click OK.

Loading...