3.3 ARE THERE FIREWALLS WITHIN THE MANAGEMENT DOMAIN?
NNM, OVO, and the associated web server can be specifically configured to work through firewalls. Gather the firewall configuration requirements for all the products. Test procedures need to be created in order to ensure proper operation of each component that must traverse any firewall. A good test is to startup a secure shell daemon (or any daemon that logs connectivity to a log file) on the "other side" of the firewall on the specific port to be tested (sshd p <#>). Telnet across the firewall from the management server to the node using telnet <host> <port #>. If a connection to the daemon is successful, then the connection will be logged in to the logfile (syslog). Whether or not full duplex connectivity was established, the important test is the directional connectivity and the establishment of the one-way connection. The same can be done in reverse (client to management server) using the appropriate port number with the daemon on the management server and telneting from the client.As part of the configuration, those who managed the firewall will need to be contacted and given explicit instructions on how to configure the firewall for correct operation of the products. Be prepared to test and argue with them that the firewall is not configured correctly. |
لطفا منتظر باشید ...
