IP Addresses for SWA Toolset

[Kevin Thomson]

Hello !

I'm implementing the SWA tools for a bunch of Itanium servers sitting behind an Iron Curtain of firewalls.

I need to advise my firewall colleagues of specific addresses (not DNS names) for services at ftp.irtc.hp.com.

I've had assistance on this via an HP software call, but as yet I don't have a specific IP address, or address range.

Today ftp.itrc.hp.com resolves to 15.217.32.52, but there must be other addresses for resilience, and what if DNS were to change ?

One of my challenges is the admin delays and costs of applying firewall changes - I want to be able to embed rules with destination addresses which will not change, or at least will seldom change.

In principle this can be solved by addressing a fixed proxy server through the firewall, but due to ownership issues my customer will be reluctant to place trust in a proxy beyond his firewall and would prefer traffic to route direct to HP.

Perhaps not deeply interesting, but I'd welcome advice if anyone knows about those address resolutions, many thanks,

Kevin Thomson
=============

[Bob E Campbell]

Sorry, I did not see this posting before. I was just doing a blanket SWA search and found it.

The servers are load-balanced, and the IP addresses are likely to change (Today I am getting 15.216.76.112). The last time I checked, every IP address beginning with 15 or 16 was HP. Not sure how trusting your firewall folks are...

What I might suggest is that you use the "-x download_cmd=" option to avoid the issue. If you have access to a trusted system outside of your firewall you can use ssh and curl/wget/GET to do the work for you. Check that this is not a violation of your own policies, but it was built for this type of problem.