Backup Central

Has anyone on the list ever tried backup via NAT with TSM?
If so, could you give dsm.opt for client node behind the NAT. Client node
win2003 R2 SP2 with Storage agent. Ver. 5.5.
Thx in advance.

..............................................................
ó Õ×ÁÖÅÎÉÅÍ, óÉÔÎÉËÏ× ðÁ×ÅÌ
äÉÒÅËÃÉÑ ÓÏÐÒÏ×ÏÖÄÅÎÉÑ ÓÅÒ×ÅÒÎÙÈ ÓÉÓÔÅÍ
ïáï "õòáìóéâ", õÆÁ
(347) 251-96-62, (010) 4385

NAT implies firewall. Our firewall gives the nodes access to the TSM server, but not the reverse. All actions must be initiated from the node. If this sounds familiar then all we did was change the node from prompted to polling and specified the server address instead of the server name.

Andy Huebner
-----Original Message-----
From: ADSM: Dist Stor Manager [mailto:ADSM-L < at > VM.MARIST.EDU] On Behalf Of Pavel Sitnikov
Sent: Monday, August 18, 2008 1:41 AM
To: ADSM-L < at > VM.MARIST.EDU
Subject: [ADSM-L] backup via NAT with TSM

Has anyone on the list ever tried backup via NAT with TSM?
If so, could you give dsm.opt for client node behind the NAT. Client node
win2003 R2 SP2 with Storage agent. Ver. 5.5.
Thx in advance.

..............................................................
ó Õ×ÁÖÅÎÉÅÍ, óÉÔÎÉËÏ× ðÁ×ÅÌ
äÉÒÅËÃÉÑ ÓÏÐÒÏ×ÏÖÄÅÎÉÑ ÓÅÒ×ÅÒÎÙÈ ÓÉÓÔÅÍ
ïáï "õòáìóéâ", õÆÁ
(347) 251-96-62, (010) 4385


This e-mail (including any attachments) is confidential and may be legally privileged. If you are not an intended recipient or an authorized representative of an intended recipient, you are prohibited from using, copying or distributing the information in this e-mail or its attachments. If you have received this e-mail in error, please notify the sender immediately by return e-mail and delete all copies of this message and any attachments.
Thank you.

Yes, I have done this. It's fairly straight forward. You have to make sure the firewall guys allow the TSM server to go to the address assigned to the client node on its side of the NAT via port 1502 and other admin type ports, and the client has to be able to reach the TSM server via the ip address assigned to TSM on its side of the NAT (port 1500, etc.) The DSM.opt files don't have anything special in them other than the IP address for server is the NAT'ed IP address and not the real one. It's been a long time, so I can't speak with certainty about which other ports need to be opened each way. Your Firewall/NAT admin(s) should be able to tell you which ports they see communications attempted.

See Ya'
Howard

-----Original Message-----
From: ADSM: Dist Stor Manager [mailto:ADSM-L < at > VM.MARIST.EDU] On Behalf
Of Pavel Sitnikov
Sent: Monday, August 18, 2008 1:41 AM
To: ADSM-L < at > VM.MARIST.EDU
Subject: [ADSM-L] backup via NAT with TSM

Has anyone on the list ever tried backup via NAT with TSM?
If so, could you give dsm.opt for client node behind the NAT. Client
node
win2003 R2 SP2 with Storage agent. Ver. 5.5.
Thx in advance.

..............................................................
ó Õ×ÁÖÅÎÉÅÍ, óÉÔÎÉËÏ× ðÁ×ÅÌ
äÉÒÅËÃÉÑ ÓÏÐÒÏ×ÏÖÄÅÎÉÑ ÓÅÒ×ÅÒÎÙÈ ÓÉÓÔÅÍ
ïáï "õòáìóéâ", õÆÁ
(347) 251-96-62, (010) 4385

Problem is that in PROMPTED mode every time dsmcad is run it opens
some random high port, and you can never know what it is.
# netstat -tlpn | grep dsmc
tcp 0 0 0.0.0.0:32769 0.0.0.0:*
LISTEN 4024/dsmcad
tcp 0 0 0.0.0.0:1581 0.0.0.0:*
LISTEN 4024/dsmcad
# pkill dsmcad
# dsmcad
# netstat -tlpn | grep dsmc
tcp 0 0 0.0.0.0:37376 0.0.0.0:*
LISTEN 14716/dsmcad
tcp 0 0 0.0.0.0:1581 0.0.0.0:*
LISTEN 14716/dsmcad

that means that firewall admin needs to open up a whole range of high
TCP ports between particular client and the server which is not very
good security wise and plain ugly.
If client sits behind NAT, using POLLING mode is the only way to go IMHO.

2008/8/18 Howard Coles <Howard.Coles < at > ardenthealth.com>:
Your Firewall/NAT admin(s) should be able to tell you which ports
they see communications attempted.


--
Warm regards,
Michael Green

IMHO,

It's just simply tell the Security guy on your company to redirect
request from TSM Server to your TSM Client which behind the firewall.
And if you backup through network, it means that you wouldn't need
Storage Agent for TSM.

Best Regards,

Martin Panggabean
TSM Implementor
< at > niagaprima.com


Quoting Pavel Sitnikov <SitnikovPG < at > URALSIBBANK.RU>:

Has anyone on the list ever tried backup via NAT with TSM?
If so, could you give dsm.opt for client node behind the NAT. Client node
win2003 R2 SP2 with Storage agent. Ver. 5.5.
Thx in advance.

..............................................................
С уважением, Ситников Павел
Дирекци� �опровождени� �ерверных �и�тем
О�О "УР�ЛСИБ", Уфа
(347) 251-96-62, (010) 4385

On Aug 18, 2008, at 8:41 , Pavel Sitnikov wrote:

Has anyone on the list ever tried backup via NAT with TSM?
If so, could you give dsm.opt for client node behind the NAT. Client
node
win2003 R2 SP2 with Storage agent. Ver. 5.5.

schedmode polling is your friend, as others have pointed out. With
that setting, everything is easy


Thx in advance.

..............................................................
С уважением, Ситников Павел
Дирекци� �опровождени� �ерверных
�и�тем
О�О "УР�ЛСИБ", Уфа
(347) 251-96-62, (010) 4385

--
Met vriendelijke groeten,

Remco Post
remco < at > pipsworld.nl