Networker and NAT

Question

Hi!

I have to make a backup in the firewalled (NAT) environment.

server name: legato
internal ip: 172.16.0.38
ip behind the firewall: (NAT) 173.1.19.153
client name: otmdatabase

The ping is working and telnet to 7937 port is working on both direction.

Unfortunately the legato server is behind the firewall and the firewall is setting up to
use NAT so the Networker server address is NAT-ed after we left the internal zone.
Client see only the NAT address of the server address ...

Questions:
1. How can i backup the client?
2. Is there any workaround in this situation?
aliases, host entries ... etc

Thanks in advance ...

Regards:
Paul

paulo3 · Answer

We opened a port range from: 7937-7966ip resolution is for server and on clisnet side ...

DavidHampson · Answer

You need a minimum of 4 ports open on the firewall including ports 7937 and 7938 and ensure your name resolution works okay in both directions. You will need to open more ports up if your storage node traffic is also going through the firewall... Networker's authentication mechanism will look at the IP of the client and do a reverse lookup to ensure the IP matches the server name, if this is successful then it should allow the backup to go ahead. I don't think NAT operates in a way to obfuscate the IP address of the client reply so I think it should work but since I've never seen it used in such an environment its hard to say...

NetWorker

Networker and NAT

Was this post helpful?