Versions Compared

Old Version 1

changes.mady.by.user Carl Brault

Saved on

compared with

New Version Current

changes.mady.by.user tdopko@commvault.com

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Quick Links to Topics:

Table of Contents
maxLevel3


Network topologies provide a simplified template to deploy network route configurations to CommCell® components. There are three network topology groups to configure: One-Way, Two-Way, or Via ProxyNetwork Gateway. Once the simplified topology is configured, advanced network route settings remain available at the client group and client levels to further configure settings if desired.

To use network typologies, client computers groups must be created first.

Network topologies for client computer groups:


For One-Way Network Topology

  • Infrastructure Client GroupServers
  • DMZ Client GroupServers

For Two-Way Network Topology

  • Client Group 1
  • Client Group 2Servers
  • Infrastructure Machines

For Proxy Network Topology

  • Trusted Client Group 1
  • Trusted Client Group 2
  • Proxy/DMZ GroupServers
  • Infrastructure Machines
  • DMZ Gateways



One-Way Network Topology Groups

  • Infrastructure Client Group Servers – The clients in the client groups Servers group can be the CommServe server, MediaAgents, or client components. By default, there is a system created computer group called Infrastructure that can be leveraged for network topologies. When creating a network topology, the Infrastructure Client Group Servers group has restricted communication on a specific port with the DMZ Client GroupServers group.
  • DMZ Client GroupServers – These are the systems located in the untrusted networks, such as the DMZ. When implementing the network topology, the DMZ Client Group Servers group has blocked communication with the Infrastructure Client GroupServers group.


One-Way Network topology client computer groups



Two-Way Firewall Topology Groups

  • Client Group 1 Servers – These are the systems on the first side of the firewall. When implementing the network topology, Client Group 1 the Servers group has restricted communication on a specific port with Client Group 2the Infrastructure Machines group.
  • Client Group 2 – These are the systems on the other side of the firewallInfrastructure Machines – The clients in the Servers group can be the CommServe server, MediaAgents, or client components. When implementing the network topology, Client Group 2 the Infrastructure Machines group has restricted communication on a specific port with Client Group 1the Servers group.


Two-Way Network topology client computer groups

Image Modified



Proxy

Network Gateway Topology Groups

  • Trusted Client Group 1 Servers – These are the clients that are using the proxy to reach the Trusted Client Group 2 Infrastructure Machines group on the internal network. It has restricted communication on a specific port with the Proxy/ DMZ Gateway Group but has blocked communication with the Trusted Client Group 2 Infrastructure Machines group.
  • Trusted Client Group 2 Infrastructure Machines – These are your CommCell® components such as the CommServe® server and the MediaAgents. By default, there is a system created computer group called Infrastructure that can be leveraged for network topologies. When creating a network topology, the Trusted Client Group 2 the Infrastructure Machines group has restricted communication on a specific port with the Proxy/ DMZ Group Gateways group but has blocked communication with the the Trusted Client 1Servers group.
  • Proxy/DMZ GroupGateways – These are the systems that acts as proxies gateways in the DMZ to relay any communication between Trusted Client Group 1 and Trusted Client Group 2the Servers group and the Infrastructure Machines group. When creating a network topology, the Proxy/ DMZ Group Gateways group has blocked communication with both the Trusted Client Group 1 and Trusted Client Group 2Servers and Infrastructure Machines groups. By default, there is a system created Proxy Clients group. Any system that are defined to act as proxies network gateways are automatically associated with this group.


Proxy Network topology client computer groups

Image Modified




Configure a Network Topology

Before configuring a topology, create the required server groups if needed. You can then launch the network topology configuration wizard.




To configure a Network Topology

1 - Expand Manage | Network.

2 - Click Network Topologies.



3 - This window displays configured network topologies if any.

4 - Click to add a new topology.



5 - Provide a name for the topology.

6 - Select to configure a Servers or a Laptops topology from the list.

7 - Choose the topology type based on your network configuration.

8 - Select the required computer groups for which the topology will be applied.



Automatic Tunneling

Since service pack 15, the network configuration is easier than ever. The Commvault® components communicate using the traditional communication port and dynamic ports. If the system notices that the dynamic ports are blocked and therefore unavailable, it automatically encapsulates data transfers through a tunnel port. There is no need to configure any network topologies in Commvault® software.

The only requirement is that the communication port (8400) and tunnel port (8403) are opened and accessible between the components.

Automatic tunneling requirements