NetWorker: How to configure a Smart Scale device on an NVE Server or Storage Node

Create a custom outbound firewall to port 2053 of the Smart Scale server on the NetWorker Virtual Edition (NVE) Server and Storage node:

1. Log in to the NVE as admin, then switch to root user:

sudo su -

2. As a root user run, run the following script to modify the entfirewall rules:

/usr/local/avamar/lib/admin/security/ent-edit-firewall-rules.sh

Choose an Action
----------------
1) Add a custom rule
2) Remove a custom rule
3) List Current Custom Rules
4) Exit
5) Save Changes
Enter desired action: 1

4. Select 1Pv4 rule:

Firewall Rule Types
-------------------
1) IPv4 Rule
2) IPv6 Rule
Enter Firewall Rule Type: 1

5. Select 1 OUTPUT rule:

Firewall Chains
---------------
1) OUTPUT
2) INPUT
3) LOGDROP
4) FORWARD
Select Chain: 1

6. Select 1 TCP rule: 

Protocol
--------
1) TCP
2) UDP
3) ICMP
Enter Protocol: 1

7. Leave the source IP field blank and press Enter:

Enter source IP (leave blank for none):

8. Leave the source port field blank and press Enter:

Enter source port (leave blank for none):

9. Leave the Destination IP Address blank and press Enter:

Enter Destination IP Address (leave blank for none):

10.  Enter port 2053 for Destination Port:

Enter Destination Port (Use comma for multiple ports. Leave blank for none): 2053

11. Enter 1 for ACCEPT:

Targets
-------
1) ACCEPT
2) REJECT
3) DROP
4) LOGDROP
Select Target: 1

12.  Enter A to append:

Run Order
---------
I) Insert (Inserts rule before default AV Firewall rules are applied)
A) Append (Standard behavior. Rule is appended, with default AV Firewall rules taking precedent)

Select run order for this rule [A]:A

13. Confirm adding a custom rule:

Add rule |||2053|tcp||ACCEPT|OUTPUT|A to custom rules file? (Y/N): Y

14.  Answer No to adding another rule:

Add another firewall rule? (Y/N): N

15. Answer Yes to return to the main menu:

Return to main menu? (Y/N): Y

16. Save changes, option 5, answer No to return to the main menu:

Choose an Action
----------------
1) Add a custom rule
2) Remove a custom rule
3) List Current Custom Rules
4) Exit
5) Save Changes
Enter desired action: 5

17. Confirm the changes.

Save and execute rules now? (Y/N): Y

Rules have been saved to /usr/local/avamar/lib/admin/security/entfwb_custom_config.txt
[DONE]

18. Restart entfirewall services:

systemctl restart entfirewall

After this point, you can label the Smart Scale device.