Installation and User's Guide

Configuring Tivoli Storage Manager client/server communicationacross a firewallIn most cases, the Tivoli Storage Manager server and clients can work across afirewall.Every firewall is different, so the firewall administrator might need to consult theinstructions for the firewall software or hardware in use.There are two methods for enabling client and server operations through a firewall:Method 1:To allow clients to communicate with a server across a firewall, thefollowing ports must be opened in the firewall by the firewalladministrator:TCP/IP portTo enable the backup-archive client, command-line admin client,and the scheduler to run outside a firewall, the port specified bythe server option tcpport (default 1500) must be opened by thefirewall administrator. This port is set on the client and the serverusing the tcpport option. The setting must be the same on theclient and server. This allows Tivoli Storage Manager schedulercommunications in both polling and prompted mode, CAD-managedschedulers, and regular backup-archive client operations.Note: The client cannot use the port specified by the tcpadminportoption (on the server) for a client session. That port can be used foradministrative sessions only.HTTP portTo allow the Web client to communicate with remote workstationsacross a firewall, the HTTP port for the remote workstation mustbe opened. Use the httpport option in the remote workstationclient options file to specify this port. The default HTTP port is1581.TCP/IP ports for the remote workstationThe two TCP/IP ports for the remote workstation client must beopened. Use the webports option in the remote workstation clientoptions file to specify these ports. If you do not specify the valuesfor the webports option, the default zero (0) causes TCP/IP torandomly assign two free port numbers.TCP/IP port for administrative sessionsSpecifies a separate TCP/IP port number on which the server iswaiting for requests for administrative client sessions, allowingsecure administrative sessions within a private network.Method 2:For the client scheduler in prompted mode, it is unnecessary to open anyports on the firewall. If you set the sessioninitiation option to serveronly,the client will not attempt to contact the server. All sessions are initiated byserver prompted scheduling on the port defined on the client with thetcpclientport option. The sessioninitiation option only affects the behaviorof the client scheduler running in the prompted mode.The Tivoli Storage Manager server must set the SESSIONINITiationparameter on the register node and update node commands for eachChapter 2. Configure the Tivoli Storage Manager client 25