Configuring client/server communications through a firewall

Edit online

If a client must communicate with a server through a firewall, you must enable client/server communications through the firewall.

Before you begin

If you used the Add Client wizard to register a client, find the option values in the client options file that you obtained during that process. You can use the values to specify ports.

About this task

Attention: Do not configure a firewall in a way that might cause termination of sessions that are in use by a server or storage agent. Termination of a valid session can cause unpredictable results. Processes and sessions might appear to stop due to input/output errors. To help exclude sessions from timeout restrictions, configure known ports for IBM Storage Protect components. Ensure that the KEEPALIVE server option remains set to the default value of YES. In this way, you can help to ensure that client/server communication is uninterrupted. For instructions about setting the KEEPALIVE server option, see KEEPALIVE.

Procedure

Open the following ports to allow access through the firewall:

TCP/IP port for the backup-archive client, command-line administrative client, and the client scheduler: Specify the port by using the tcpport option in the client options file. The tcpport option in the client options file must match the TCPPORT option in the server options file. The default value is 1500. If you decide to use a value other than the default, specify a number in the range 1024 - 32767.

HTTP port to enable communication between the web client and remote workstations: Specify the port for the remote workstation by setting the httpport option in the client options file of the remote workstation. The default value is 1581.

TCP/IP ports for the remote workstation: The default value of 0 (zero) causes two free port numbers to be randomly assigned to the remote workstation. If you do not want the port numbers to be randomly assigned, specify values by setting the webports option in the client options file of the remote workstation.

TCP/IP port for administrative sessions: Specify the port on which the server waits for requests for administrative client sessions. The value of the client tcpadminport option must match the value of the TCPADMINPORT server option. In this way, you can secure administrative sessions within a private network.