NetWorker：如何在 NVE 服务器或存储节点上配置 Smart Scale 设备

在 NetWorker Virtual Edition （NVE） 服务器和存储节点上创建到 Smart Scale 服务器端口 2053 的自定义出站防火墙：

1.以管理员身份登录 NVE，然后切换到 root 用户：

sudo su -

2.以根用户身份运行，运行以下脚本以修改 entfirewall 规则：

/usr/local/avamar/lib/admin/security/ent-edit-firewall-rules.sh

Choose an Action
----------------
1) Add a custom rule
2) Remove a custom rule
3) List Current Custom Rules
4) Exit
5) Save Changes
Enter desired action: 1

4.选择 1Pv4 规则：

Firewall Rule Types
-------------------
1) IPv4 Rule
2) IPv6 Rule
Enter Firewall Rule Type: 1

5.选择 1 个输出规则：

Firewall Chains
---------------
1) OUTPUT
2) INPUT
3) LOGDROP
4) FORWARD
Select Chain: 1

6.选择 1 个 TCP 规则： 

Protocol
--------
1) TCP
2) UDP
3) ICMP
Enter Protocol: 1

7.将源 IP 字段留空，然后按 Enter 键：

Enter source IP (leave blank for none):

8.将源端口字段留空，然后按 Enter 键：

Enter source port (leave blank for none):

9.将Destination IP Address留空，然后按Enter键：

Enter Destination IP Address (leave blank for none):

10.  输入目标端口 2053：

Enter Destination Port (Use comma for multiple ports. Leave blank for none): 2053

11.输入 1 for ACCEPT：

Targets
-------
1) ACCEPT
2) REJECT
3) DROP
4) LOGDROP
Select Target: 1

12.  输入 A 以附加：

Run Order
---------
I) Insert (Inserts rule before default AV Firewall rules are applied)
A) Append (Standard behavior. Rule is appended, with default AV Firewall rules taking precedent)

Select run order for this rule [A]:A

13.确认添加自定义规则：

Add rule |||2053|tcp||ACCEPT|OUTPUT|A to custom rules file? (Y/N): Y

14.  对添加另一规则的回答“否”：

Add another firewall rule? (Y/N): N

15.回答“是”以返回主菜单：

Return to main menu? (Y/N): Y

16.保存更改，选项 5，回答“否”以返回主菜单：

Choose an Action
----------------
1) Add a custom rule
2) Remove a custom rule
3) List Current Custom Rules
4) Exit
5) Save Changes
Enter desired action: 5

17.确认更改。

Save and execute rules now? (Y/N): Y

Rules have been saved to /usr/local/avamar/lib/admin/security/entfwb_custom_config.txt
[DONE]

18.重新启动 entfirewall 服务：

systemctl restart entfirewall

在此之后，您可以标记 Smart Scale 设备。