Computer Associates BABNWUP900NE6 Administration Guide - Page 260

Considerations, Exchange and the BrightStor ARCserve Backup Agent for Microsoft SQL

Page 260 highlights

Configuring Your Firewall to Optimize Communication Considerations When modifying the PortsConfig.cfg file, consider the following scenarios: ■ If you want to change the Network Attached Storage (NAS) port on the BrightStor ARCserve Backup server, after installing the BrightStor ARCserve Backup NDMP NAS Option, you must change the port assignment on the NAS filer as well. ■ The reconnection logic is implemented to avoid an existing network problem. This can occur when you perform client agent backups over the network. During the backup, the connection can be lost and the backup fails. If this occurs, you can specify the reconnection key and a port range which will be used during the backup. Use the reconnection key on the BrightStor ARCserve Backup server side. ■ If you are using Computer Associates eTrustTM Firewall software, you should perform the following steps: - From the command prompt, access the following: Files\CA\eTrust\Firewall\Engine - Enter the following command: fwadmin -msrpc_chk_states_off ■ For remote computer management, BrightStor ARCserve Backup RPC services listen using "ncacn_ip_tcp" and "ncacn_np" protocols. For remote management of a computer and browsing the database agents, total block is required. You should block communication on the "ncacn_ip_tcp" ports (6502,6503,6504) but also on the system ports 137-139,445, which are used by the Windows operating system in the event "ncacn_np" protocol is used. Note: If eTrust Firewall blocks RPC communication, BrightStor ARCserve Backup can respond slowly or stop responding completely. ■ To change the port for the Universal Agent, you must change the communication port for all agents and options that use this service installed on the same machine (for example, the BrightStor ARCserve Backup Client Agent, the BrightStor ARCserve Backup Agent for Microsoft Exchange Premium Add-on, and the BrightStor ARCserve Backup NDMP NAS Option). If you add a machine with a Windows NT, Windows 2000, Windows XP, or Windows 2003 operating system, browsing functionality is performed through the Universal Agent. ■ Changing the ports for the BrightStor ARCserve Backup Agent for Microsoft Exchange and the BrightStor ARCserve Backup Agent for Microsoft SQL Server is for TCP backups for these agents. The RPC server provides browsing capabilities for all BrightStor ARCserve Backup for Windows database agents. ■ If you are upgrading from an older version of BrightStor ARCserve Backup and your current installation uses a configuration file labeled CAPortConfig.cfg for BrightStor ARCserve Backup Client Agents configurations, the installation process migrates CAPortConfig.cfg settings to the PortsConfig.cfg file. 9-36 Administrator Guide

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194
  • 195
  • 196
  • 197
  • 198
  • 199
  • 200
  • 201
  • 202
  • 203
  • 204
  • 205
  • 206
  • 207
  • 208
  • 209
  • 210
  • 211
  • 212
  • 213
  • 214
  • 215
  • 216
  • 217
  • 218
  • 219
  • 220
  • 221
  • 222
  • 223
  • 224
  • 225
  • 226
  • 227
  • 228
  • 229
  • 230
  • 231
  • 232
  • 233
  • 234
  • 235
  • 236
  • 237
  • 238
  • 239
  • 240
  • 241
  • 242
  • 243
  • 244
  • 245
  • 246
  • 247
  • 248
  • 249
  • 250
  • 251
  • 252
  • 253
  • 254
  • 255
  • 256
  • 257
  • 258
  • 259
  • 260
  • 261
  • 262
  • 263
  • 264
  • 265
  • 266
  • 267
  • 268
  • 269
  • 270
  • 271
  • 272
  • 273
  • 274
  • 275
  • 276
  • 277
  • 278
  • 279
  • 280
  • 281
  • 282
  • 283
  • 284
  • 285
  • 286
  • 287
  • 288
  • 289
  • 290
  • 291
  • 292
  • 293
  • 294
  • 295
  • 296
  • 297
  • 298
  • 299
  • 300
  • 301
  • 302
  • 303
  • 304
  • 305
  • 306
  • 307
  • 308
  • 309
  • 310
  • 311
  • 312
  • 313
  • 314
  • 315
  • 316
  • 317
  • 318
  • 319
  • 320
  • 321
  • 322
  • 323
  • 324
  • 325
  • 326
  • 327
  • 328
  • 329
  • 330
  • 331
  • 332
  • 333
  • 334
  • 335
  • 336
  • 337
  • 338
  • 339
  • 340
  • 341
  • 342
  • 343
  • 344
  • 345
  • 346
  • 347
  • 348
  • 349
  • 350
  • 351
  • 352
  • 353
  • 354
  • 355
  • 356
  • 357
  • 358
  • 359
  • 360
  • 361
  • 362
  • 363
  • 364
  • 365
  • 366
  • 367
  • 368
  • 369
  • 370
  • 371
  • 372
  • 373
  • 374
  • 375
  • 376
  • 377
  • 378
  • 379
  • 380
  • 381
  • 382

Configuring Your Firewall to Optimize Communication
9–36
Administrator Guide
Considerations
When modifying the PortsConfig.cfg file, consider the following scenarios:
If you want to change the Network Attached Storage (NAS) port on the
BrightStor ARCserve Backup server, after installing the BrightStor ARCserve
Backup NDMP NAS Option, you must change the port assignment on the
NAS filer as well.
The reconnection logic is implemented to avoid an existing network problem.
This can occur when you perform client agent backups over the network.
During the backup, the connection can be lost and the backup fails. If this
occurs, you can specify the reconnection key and a port range which will be
used during the backup. Use the reconnection key on the BrightStor ARCserve
Backup server side.
If you are using Computer Associates eTrust
TM
Firewall software, you should
perform the following steps:
From the command prompt, access the following:
Files\CA\eTrust\Firewall\Engine
Enter the following command:
fwadmin -msrpc_chk_states_off
For remote computer management, BrightStor ARCserve Backup RPC
services listen using “ncacn_ip_tcp” and “ncacn_np” protocols. For remote
management of a computer and browsing the database agents, total block is
required. You should block communication on the “ncacn_ip_tcp” ports
(6502,6503,6504) but also on the system ports 137-139,445, which are used by
the Windows operating system in the event “ncacn_np” protocol is used.
Note:
If eTrust Firewall blocks RPC communication, BrightStor ARCserve
Backup can respond slowly or stop responding completely.
To change the port for the Universal Agent, you must change the
communication port for all agents and options that use this service installed on
the same machine (for example, the BrightStor ARCserve Backup Client
Agent, the BrightStor ARCserve Backup Agent for Microsoft Exchange
Premium Add-on, and the BrightStor ARCserve Backup NDMP NAS Option).
If you add a machine with a Windows NT, Windows 2000, Windows XP, or
Windows 2003 operating system, browsing functionality is performed
through the Universal Agent.
Changing the ports for the BrightStor ARCserve Backup Agent for Microsoft
Exchange and the BrightStor ARCserve Backup Agent for Microsoft SQL
Server is for TCP backups for these agents. The RPC server provides browsing
capabilities for all BrightStor ARCserve Backup for Windows database agents.
If you are upgrading from an older version of BrightStor ARCserve Backup
and your current installation uses a configuration file labeled
CAPortConfig.cfg for BrightStor ARCserve Backup Client Agents
configurations, the installation process migrates CAPortConfig.cfg settings to
the PortsConfig.cfg file.