> Expert > Solutions and Use Cases > Edge Endpoint Solutions > Edge Solutions for Administrators > CommCell Configuration > Firewall Configuration

Configuring a Firewall Without Using a Proxy for Laptop Backup

When CommCell components are separated by a firewall, the components must be configured with the connection route to reach each other across the firewall. After the configuration, the components communicate through the firewall for all data management operations such as backup, browse and restore.

You can set up direct connections, where the client connects to the CommServe computer, by using one of the following methods:

  • Preferred Method: Using a predefined network topology

    If you want to simplify the amount of firewall configuration steps, you can use the predefined network topology for direct connections. This is useful if the connection is client group-to-client group.

  • Alternative Method: Using the traditional firewall configuration

    If the predefined network topology does not meet your needs, you can use the traditional configuration to set up direct connections. This method provides the steps to configure the Laptop Client group to open tunnel connections toward the CommServe and MediaAgent computers.

Procedure

Choose one of the following methods that meets your requirements:

Preferred Method: Using a Predefined Network Topology

For instructions, see Setting up a One-Way Direct Connection (Client to CommServe) Using a Predefined Network Topology.

Note

When you create the laptop package, the package must be configured to assign laptop computers to the Infrastructure client group that was defined in the network topology.

Alternative Method: Using Traditional Firewall Configurations

  1. Configure network settings on the CommServe computer as follows:

    1. From the CommCell Browser, right-click the CommServe node and click Properties.

    2. In the CommCell Properties dialog box, click Network, click the Network Route Configuration tab, select the Configure Network Route Settings check box, and then click OK.

    3. From the CommCell Browser, right-click the CommServe node and then click All Tasks > Push Network Configuration.

    4. Read the warning, click Continue, and then click OK.

  2. Configure network settings on the MediaAgent computer as follows:

    Note

    Skip this step if your MediaAgent is hosted on the same computer as the CommServe.

    1. From the CommCell Browser, expand Storage Resources > MediaAgents, right-click the MediaAgent and then click Properties.

    2. In the MediaAgent Properties dialog box, click Network, click the Network Route Configuration tab, select the Configure Network Route Settings check box, and then click OK.

    3. From the CommCell Browser, right-click the MediaAgent and then click All Tasks > Push Network Configuration.

    4. Read the warning, click Continue, and then click OK.

  3. Configure network settings on the Laptop Client group as follows:

    1. From CommCell Browser, expand Client Computer Groups, right-click the Laptop Clients group, and then click Properties.

    2. In the client group properties dialog box, click Network.

    3. On the Network Route Configuration tab of the Network Properties for Client Group dialog box, select the Configure Network Route Settings check box.

    4. On the CommServe Connectivity tab, determine how you want to establish connectivity with the CommServe computer:

      • If the client and CommServe are on different networks, click Always outside of CommServe network.

      • If the client does not always reside on the CommServe network, click May travel outside of CommServe network. This option is recommended for laptop and other mobile devices.

        The Open tunnel directly to CommServe option is automatically selected.

    5. On the MediaAgent Connectivity tab, determine how you want to establish connectivity with the MediaAgent:

      • If the client and MediaAgent are on different networks, select Always outside of MediaAgent network.

      • If the client does not always reside on the MediaAgent network, select May travel outside of MediaAgent network. This option is recommended for laptop and other mobile devices.

        The Open tunnel directly to MediaAgent option is automatically selected.

    6. In the Network Properties for Client Group dialog box, click OK to save the network configuration.

    7. Click OK to close the client group properties dialog box.

    8. From the CommCell Browser, right-click the Laptop Clients group and then click All Tasks > Push Network Configuration.

    9. Read the warning, click Continue, and then click OK.

    Clients that are registered with the client group will inherit the group's network settings.

Loading...