Forum Discussion

andrew_mcc1's avatar
andrew_mcc1
Level 6
6 years ago

How to access AWS Master Server Admin Console?

Does anyone have a reliable method of accessing AWS Master Server Admin Console from outside AWS? I have had it working via a Windows "bastion host" running the Java Console as AWS supports RDP but I now have a customer who has deployed a Linux bastion. Any thoughts? Thanks, Andrew

8.1.2
Linux
  • RiaanBadenhorst's avatar
    RiaanBadenhorst
    5 years ago

    Hi Andew,

    If your client's only way to get into the VPC is a bastion, then that bastion, or another one, would need to be setup to run the JAVA console. 

    Alternatively, you have the following options;

    1. Your customer makes holes in the firewall for JAVA to connect (this is not really best practice and will surely be shot down)
    2. Your customer sets up a VPN to get into the VPC.

    Like I said before, don't get off track because it's AWS (or AZURE, or whatever cloud provider), treat it as a data center you need access and your customer needs to provide it. 

8 Replies

Sort By
  • RiaanBadenhorst's avatar
    RiaanBadenhorst
    Level 6
    6 years ago

    I'm guessing your NBU Master is on Windows right? You can try install the netbackup linux server binaries. Don't configure it. You can then try launch jnbSA and point it at the other master.

    • andrew_mcc1's avatar
      andrew_mcc1
      Level 6
      6 years ago

      Sorry the Master is (or will be) Linux. My concern is there doesn't seem to be a reliable way to access a Linux based GUI from outside AWS, at least in my experience. Also I don't believe we will be allowed to install NBU on the bastion for security reasons.

      Thanks, Andrew

      • RiaanBadenhorst's avatar
        RiaanBadenhorst
        Level 6
        6 years ago

        Hi Andrew,

        AWS, or the VPC in AWS is really just a data center. Yes, it is virtual and you can't go in the building but the same rules apply really as if it was hosted in some DC on prem. Your customer should really have a direct connect or VPN connection from their offices to the VPC. If there only way of getting into their VPC is via the bastion, then they make sure that bastion can facilitate the connection to where you need to go. 

        I'm going assume their bastion is shell only so you can't run any GUIs?

        So, this is really not a question about the console, but a question about what type of connections they're allowing in through the bastion, or the secuirty groups/NACL in general.