topic Re: Version Control Agent in DMZ in Server Management - Systems Insight Manager

Version Control Agent in DMZ

Keith W — Thu, 07 Sep 2006 05:14:05 GMT

I have the VC Repository running on my LAN with no problems.

I have just decided to roll the VC agent to the servers in my DMZ also.

I have opened ports 2381 and 161 outbound from the SIM to the Server in the DMZ but with no success.

It keeps saying it can't find the repository.

Any idea?

Are there other ports I need to open and in what direction?

Re: Version Control Agent in DMZ

sandeep_raman — Thu, 07 Sep 2006 05:46:01 GMT

Hello Keith,

ftp://ftp.compaq.com/pub/products/servers/management/hpsim/ManagingHPServers-withHPSIM.pdf
Pg 8

Configuration Management and Version Control.
Perhaps port 80

SRH

Re: Version Control Agent in DMZ

Keith W — Thu, 07 Sep 2006 05:46:50 GMT

Thanks

I've already seen that document, but am none th ewiser!

I have tried 80 also, and nothing.

Re: Version Control Agent in DMZ

sandeep_raman — Thu, 07 Sep 2006 08:46:30 GMT

Check if all these ports are allowed and does it make a difference?

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=PSD_CN0811W
(Ports to be Opened to the Firewall)

SRH

Re: Version Control Agent in DMZ

Rich Purvis — Thu, 07 Sep 2006 10:44:14 GMT

VC does not use port 80. You need port 2301 and 2381. HPSIM does it's System Management Homepage web app discovery on 2301. It does this in order to be backwards compatible with older versions of web applications that predate the use of 2381. Anyway - it will not discover any application that uses SMH, including Version Control unless it can talk on this port. Good luck,

-Rich

Re: Version Control Agent in DMZ

Rich Purvis — Thu, 07 Sep 2006 10:57:12 GMT

Hmmm - did you say only "outbound" from the HPSIM server to the DMZ. Version Control is not technically designed to "push" software out to servers. In reality, the VC Agents are designed to take "orders" from HPSIM and "pull" the software from the repository. If the VC Agents running on the servers in the DMZ cannot initiate a connection back through the firewall to the VCRM on port 2381, then it probably will not work.

-Rich

Re: Version Control Agent in DMZ

JamesR_1 — Tue, 19 Dec 2006 17:11:29 GMT

Rich, VCA to VCR doesn't use 80, but status of VCA and tasks come from DMZ to CMS, yes?

Yeah, check the doc. 2381 will need to be opened from DMZ to LAN.