Using the internet for remote support

The HMC can be enabled to connect directly to the Internet or to connect indirectly, through a proxy server that you provide. The decision to use either a direct or indirect Internet connection for remote support depends on the security and networking requirements of your enterprise.

Hardware Management Console Direct Internet Connection

If your Hardware Management Console can be connected to the Internet, and the external firewall can be set to allow established TCP packets to flow outbound to the IP addresses described in Server address lists and host names, you can use a direct connection between the HMC and the Internet. The use of Source Network Address Translation (SNAT) and masquerading rules to mask the HMC's source IP address are both acceptable.

Hardware Management Console Indirect Connection with Proxy Server

For the Hardware Management Console to communicate successfully, your proxy server must allow connections to the host names and IP addresses that are defined in the section below.

When using an indirect connection, you can choose whether the proxy is to be directed to connect to the support system using an IP address or using a host name. You can control the set of targets for that proxy using either a host name or IP address, depending upon the security policies of your installation. See Server address lists and host names for the list of host names and IP addresses.

If your installation requires host name addressing, your proxy must be configured with a Domain Name Server.