PowerProtect Data Manager: Agent Registration Failure Due to NAT

Summary: Agent registration fails because the PowerProtect Data Manager (PPDM) server sees an address mismatch due to network address translation (NAT) between server and client, causing request rejection. ...

This article applies to This article does not apply to This article is not tied to any specific product. Not all product versions are identified in this article.
Check out other resources

Symptoms

Observed Symptoms

The agent registration process fails and does not complete.

Error Indicators

  • Log entries showing mismatched PPDM address configuration.
  • Network capture (tcpdump) showing source IP as firewall/router instead of the client host.

Relevant log excerpt:

PowerProtect Data Manager address - x.x.x.x- is not matching with the ppdm_address in the config.yml file, hence rejecting the request for the client- x.x.x.x for URL: /greetings

Example network capture command output:

tcpdump port 7000

Cause

PPDM agents cannot operate when a Network Address Translation (NAT) device is positioned between the PPDM server and the agent.

Underlying Factors

  • The PPDM server expects direct IP communication with the agent.
  • NAT modifies source IP addresses, causing the server to see the firewall/router IP instead of the agent.
  • Agent registration logic does not include NAT traversal mechanisms.
Ensure that any network topology changes preserve a direct, NAT‑free path for PPDM communication.

Resolution

Eliminate the NAT between the PPDM server and the agent or configure a separate network path without NAT.

Recommended Actions

  1. Remove or reconfigure the NAT device so that the PPDM server can communicate directly with the agent.
  2. If NAT cannot be removed, create a backup network segment that provides a direct, NAT‑free path for PPDM communication.

Methods to check if there is NAT between the PPDM server and the agent.

  1. How to check NAT from the PPDM side
    1. On the client, run the command 
      tcpdump port 7000
       
    2. From the PPDM server, run 
      curl -kv https://assetname:7000/greetings
      Change the asset name to the client name.
    3. Check on tcpdump logs the source name if it is equal to PPDM Host. If it has a NAT, the firewall/router IP/hostname are seen.
  2. How to check NAT from the client side 
    1. On the PPDM server, run the command 
      tcpdump port 443
       
    2. From the PPDM server, run 
      curl -kv https://PPDM-SERVER_IP:443/greetings
      Change the PPDM server IP.
    3. Check on tcpdump logs the source name if it is equal to the client host. If it has NAT, the firewall/router IP/hostname is seen.

Affected Products

PowerProtect Data Manager
Article Properties
Article Number: 000218279
Article Type: Solution
Last Modified: 30 تموز 2026
Version:  4
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.