05-02-2012 10:59 AM
Hello all,
I have installed NBU 7.1 WIN client in windows web servers in DMZ. They are connected to the master/media server in trust zone through NAT.
However, try to connect them failed in Netbackup Management Console.
Error(46): server not allowed access.
I have added NAT addresses in the local host as below.
Web Server
CSBAU003 y.y.y.y # NAT address map to the IP address of Master/Media Server in trust zone
Master/Media Server
CSWES002 x.x.x.x # NAT address map to the IP address of web server in DMZ
And now NAT firewall is open through all ports during pre-production.
Have you any idea?
Thanks,
Mike
Solved! Go to Solution.
05-03-2012 03:47 AM
"Error(46): server not allowed access." Create bpcd log folder on client. Try to connect again. Check bpcd log on client. Look for 'connection from 'IP-address'. Add this IP address to client's hosts file for master server name.
05-02-2012 12:48 PM
NAT is not supported by NetBackup:
Quote from http://www.symantec.com/docs/TECH15006: Some NetBackup operations may appear to function correctly when using NAT or PAT. But functionality is limited, the authenticity of a remote host and therefore data security is not guaranteed, and attempts to work-around NAT may expose critical host information. Therefore, support is not extended to these environments.
Anyway, I once made backups and restores from a web server in a DMZ with NAT. Say, the Master Server was called "nb-master" and had the IP 1.2.3.4. If you made a connection from the Master Server to the web server, the web server would believe your IP was 1.2.3.5, which was actually the IP of the router (or default gateway). SO, what we did was putting the following data in the hosts table in the web server:
1.2.3.4 nb-master
1.2.3.5 nb-master
05-03-2012 03:47 AM
"Error(46): server not allowed access." Create bpcd log folder on client. Try to connect again. Check bpcd log on client. Look for 'connection from 'IP-address'. Add this IP address to client's hosts file for master server name.
05-03-2012 05:12 AM
The following is the output of bptestbpcd from master server (CSBAU003) to client (CSWES002).
05-03-2012 05:35 AM
Marianne,
I have added the NAT Proxy IP for master server in client local host file. Master server can connect to this NAT client.
I learn one more thing!
Thanks for your hints!
Mike