In a configuration with a firewall, the start and stop remote commands do not work

In a configuration with a firewall between the master domain manager and one or more domain managers, the start and stop commands from the master domain manager to the fault-tolerant agents in the domains do not work. This is often the case when an "rs final" ends and the impacted fault-tolerant agents are not linked.

Cause and solution:

The fault-tolerant agents belonging to these domains do not have the behind firewall attribute set to on in the IBM Workload Scheduler database. When there is a firewall between the master domain manager and other domains, start and stop commands must go through the IBM Workload Scheduler hierarchy. This parameter tells the master domain manager that the stop request must be sent to the domain manager which then sends it to the fault-tolerant agents in its domain.

Use either the Dynamic Workload Console or the composer cpuname command to set to the behind firewall attribute on in the workstation definitions of these fault-tolerant agents.