How to config server in DMZ

[michael_437]

Here is what I did:

The SNMP Security hosts and Trap destinations of my DMZ server were populated with SIM's IP address and localhost 127.0.0.1. Then I went to VCA Options to setup VCRM, I populated the SIM's IP address and clicked Save button, I get a warning "The new config was stored.. but there was an error retrieving data from VCRM using the saved setting". I click Home, only DMZ server's old installed version show up, and no Latest Version column.

What steps do I miss? Thanks for your help.

[Gene Nordahl]

I'm guessing they are if you are monitoring these servers, but you might want to confirm the 2301 and 2381 ports are open in your firewall between you SIM server and your DMZ servers.

[michael_437]

Yes I have port 2301 and port 2381 open, and I can login VCA using https://servername:2301 or 2381/. The only problem I have is when I click VCA, the VCRM column is missing, just like you never config VCRM.

[Ed Cox]

Michael,
This may be a stupid question, but...
Have you populated the Version Control Repository...or just installed the VCR application? And if you have copied in the PSPs and\or Firmware, did you go to the VCR page of your SIM server and point the service to the directory path into which you copied your PSPs and\or Firmware?
Ed

[michael_437]

Thank you all for the reply. I might not state clear the problem. Let me try it again:

When you login https://servername:2381/vcagent
You should see a column "Installed Version". Click Change Agent setting to setup VCRM and Reference Support Pack. After finish, you click Refresh the inventory Data. You should see "Installed Version" column, "Support Pack Version" and "Latest Version" columns.

The problem with my DMZ servers are - they have only "Installed Version" column. But the non-DMZ servers have all three columns.

I think something block DMZ server to see "Support Pack Version" and "Latest Version" columns; and I don't know what port to open for that block.

[Ed Cox]

The VCA cannot get VCRM info and update it's local columns if the VCR is not populated or setup to look at a directory that contains the PSPs or Firmware. So if you have already looked specifically at the Version Control Repository Service through port :2381 on the server that is running the VCR service (HP SIM in this case?) then I'm not sure what the problem is. However the port that it gets the information through is port 2381.
I have seen this error many times in the past and 9 times out of 10 the problem is at the server running the VCR service. Your situation may be one of those 1 out of 10 times when it's something else altogether.
Ed