HP Global Workload Manager 7.0 User Guide

Figure 3 Using gWLM with hosts separated by firewalls
vparA
mgmtA
vparB
mgmtB
vparC
mgmtC
vparD
mgmtD
Management LAN
Firewall
Public
network
Hostname
on public
network
Hostname on
management LAN
CMS
On the public network, the hosts can be accessed through their hostnames: vparA, vparB, vparC,
and vparD. However, they cannot access each other through those names.
Although gWLM might be able to discover the hosts and you can even configure an SRD including
the hosts, when you attempt to deploy the SRD, gWLM will eventually time out and display a blank
screen. No error message is displayed. However, there will be events from each managed node
similar to the following event:
gWLM Agent MySystem.MyDomain.com
Information Unable to manage the following hosts:
Associated Exception Unable to manage the following hosts: MySystem.MyDomain.com: The gWLM agent process on
the host is not running -- start the agent and retry.
If the environment allows, open ports on the firewalls between the CMS and managed nodes as
documented in the HP Matrix Operating Environment Software Version 4.1 Installation and Update
Guide for HP-UX section “Compatibility with HP-UX Bastille and Other Network Firewalls. If
opening firewall ports on the primary LAN is not an option, use a secondary LAN to manage the
hosts.
NOTE: Each gWLM agent must be able to communicate with the CMS and with all the other
agents in the SRD.
A CMS can only manage hosts on the same LAN as the CMS itself. Thus, if you set up a separate
LAN (sometimes referred to as a management LAN or a backup LAN) that includes the CMS and
all the hosts to be managed, you can manage these hosts in a single SRD.
Figure 3 shows a management LAN in which the hosts are known as mgmtA, mgmtB, mgmtC, and
mgmtD. With this management LAN, gWLM can manage the hosts in a single SRD. Complete the
following procedure to set up gWLM to manage such hosts in an SRD:
1. For each host in the management LAN that you want to manage in an SRD:
a. Edit the /etc/opt/gwlm/conf/gwlmagent.properties file to include the following
property:
com.hp.gwlm.security.virtualLocalHostName=hostnameOnLAN
For example, with the host mgmtA, its property would be:
com.hp.gwlm.security.virtualLocalHostName=mgmtA
b. Restart gwlmagent on the host:
# /opt/gwlm/bin/gwlmagent --restart
Using gWLM with hosts on multiple LANs 41