Dell PowerStore 1200T EMC PowerStore Planning Guide - Page 20

Support Connectivity using the Secure Connect Gateway option When you select the Connect via Secure Connect Gateway option, your appliance is added to other appliances in a secure connect gateway cluster. The cluster resides behind a single common (centralized) secure connection between your service provider's servers and an off-array gateway server. The gateway server is the single point of entry and exit for all IP-based support activities for the appliances associated with the gateway. The gateway server is a remote support solution application that is installed on one or more customer-supplied dedicated servers. The Connect via Secure Connect Gateway option supports up to two gateway servers, one as primary and one as a backup. The gateway server functions as a communication broker between the associated appliances and your service provider. To configure your appliance to use the Connect via Secure Connect Gateway option for Support Connectivity, you need to provide the IP address and port number (9443 is the default) for each gateway server. Also, ensure that the port is open between the gateway server and the appliance. NOTE: The gateway server must be up and running before you configure your appliance to use it. Appliances can only be added to the gateway from the PowerStore Manager. If the appliance is added from the gateway server, it will appear to be connected, but will not successfully send system information. Support Connectivity using the Connect Directly option For the Connect Directly option, secure connect gateway software runs directly on the primary node of each appliance. In a cluster, each appliance establishes its own connection to your service provider. Traffic is not routed through the primary appliance in a cluster. However, Support Connectivity can only be managed at the cluster level, that is, all changes are applied to every appliance in the cluster. Enable and configure the Connect Directly option from the Support Connectivity page, which can be accessed through Settings and is listed under Support in the PowerStore Manager. These actions set up the appliance to use a secure connection between itself and your service provider. When you select the Connect Directly option and accept the End User License Agreement (EULA), the appliance sets up a secure connection between itself and your service provider. This option enables remote access service connectivity capability with the appliance to and from your service provider along with two-way file transfer. If applicable, you can configure the connection from the appliance to an associated proxy server (optional). When a new appliance is added to an existing cluster, the new appliance will detect the cluster Support Connectivity settings and automatically configure the new appliance to match. If the Connect Directly option is currently enabled, it will be automatically enabled on the new appliance. Additional actions are not necessary. If Connect Directly option cannot be enabled, it will not prevent the add-appliance process from completing. Requirements for Support Connectivity using the Secure Connect Gateway The following requirements are applicable to the Connect via Secure Connect Gateway Support Connectivity implementation: ● Network traffic (HTTPS) must be permitted on port 9443 (or customer specified port, if different) between the appliance and the secure connect gateway server. Also, allow access to ports 22, 443, and 8443 between PowerStore and the secure connect gateway server for PowerStore Manager and SSH accessing. ● The secure connect gateway server must be version 5.00.06.xy or later. ● Ensure that the PowerStore cluster is running PowerStore OS version 3.0 or later. NOTE: Never manually add or remove an appliance from the gateway server. Only add or remove an appliance from the PowerStore Manager. 20 Support Connectivity