How to deploy a Data Protector agent in a DMZ from the Cell Manager

Disclaimer: Officially, with version 10.03 this method is not supported

Limitations Remote installation of clients across a firewall is not supported. You need to install clients locally in the DMZ. This setup does not allow the backup of databases or applications using Application Agents on clients in the DMZ.

However, I was able to figure out the prerequisites to make it work.

Here is what you need to do:
  • On the server you want to backup, give the Logon as a service right to the account used for the installation
    If you want to do it the PowerShell way, you can give a try to a module made by Tony and which you can find on the Microsoft Gallery
  • Open following ports on both your computers and on the network firewall
    Source computer Source port Destination computer Destination port Usage
    Cell Manager Dynamic (49152 – 65535) Disk Agent from the computer to backup 5555 Upgrades
    Cell Manager Dynamic (49152 – 65535) Disk Agent from the computer to backup 5556 New installation
    Disk Agent from the computer to backup Dynamic (49152 – 65535) Cell Manager 139 and 445 Access to sources on the installation share
That’s it!
Now you can add your client from the Data Protector Manager console like you do it with your LAN computers.

Note

Ports listed above are used for the installation, but port 5555 and 5556 are also used by the Cell Manager to ask the computer to start the backup. They are also used the other way by the Disk Agent from the computer you want to backup to reestablish a broken communication with the Cell Manager. In Addition, you must also open ports from the computer to backup to the Media Agent which is connected to a storage device.
Source computer Source port Destination computer Destination port Usage
Disk Agent from the computer to backup Dynamic (49152 – 65535) Cell Manager 5555, 5556 Restore broken connections with the Cell Manager
Disk Agent from the computer to backup Dynamic (49152 – 65535) Media Agent from the computer connected to the storage Depending on the values from OB2PORTRANGESPEC and OB2PORTRANGE stored in the C:\ProgramData\OmniBack\omnirc file on your Cell Manager and Media Agent Backup and restore

More about

Prepare for installation (Micro Focus Docs) Firewall support (Micro Focus Docs)
On the left unfold Firewall Support and you will see three subpages.

Leave a Reply

Please log in using one of these methods to post your comment:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google+ photo

You are commenting using your Google+ account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s