Administrator Guide

iSCSI NAT Port Forwarding Requirements for Virtual Port Mode
The following requirements must be met to congure NAT port forwarding for an iSCSI fault domain in virtual port mode.
• For each Storage Center iSCSI control port and virtual port, a unique public IP address and TCP port pair must be reserved on
the router that performs NAT.
• The router that performs NAT between the Storage Center and the public network must be congured to forward connections
destined for each public IP address and port pair to the appropriate Storage Center private target iSCSI IP address and private
port (by default, TCP port 3260).
iSCSI NAT Port Forwarding Example Conguration
In this example, a router separates the Storage Center on a private network (192.168.1.0/24) from a server (iSCSI initiator) on the
public network (1.1.1.60). To communicate with Storage Center iSCSI target ports on the private network, the server connects to a
public IP address owned by the router (1.1.1.1) on ports 9000 and 9001. The router forwards these connections to the appropriate
private IP addresses (192.168.1.50 and 192.168.1.51) on TCP port 3260.
Figure 26. iSCSI NAT Port Forwarding Diagram
1 iSCSI initiator (server or remote Storage Center)
2 Router performing NAT/port forwarding
3 Storage Center
Congure NAT Port Forwarding for an iSCSI Fault Domain
Congure NAT port forwarding for a fault domain to make sure that control port redirection works correctly.
Prerequisites
When the router that performs NAT and port forwarding receives inbound iSCSI connections destined for the specied public IP and
public port, it forwards the connections to the private
Storage Center iSCSI IP address and private port (by default, TCP port 3260).
• The Storage Center iSCSI ports must be congured for virtual port mode.
• For each Storage Center iSCSI control port and virtual port, a unique public IP address and TCP port pair must be reserved on
the router that performs NAT.
• The router that performs NAT between the Storage Center and the public network must be congured to forward connections
destined for each public IP address and port pair to the appropriate Storage Center private iSCSI IP address and appropriate port
(by default, TCP 3260).
Steps
1. Select a Storage Center from the Storage view. (Data Collector connected Storage Manager Client only)
2. Click the Storage tab.
3. In the Storage tab navigation pane, expand Fault Domains → iSCSI, then select the fault domain.
4. In the right pane, click Congure NAT Port Forwarding. The Congure NAT Port Forwarding dialog box opens.
5. In the Port Forwarding Conguration area, congure port forwarding information for a Storage Center iSCSI port.
a. Click Add. The Create iSCSI NAT Port Forward dialog box opens.
b. From the Port Name drop-down menu, select the iSCSI control port or a physical port.
• Control ports are labeled with the name of the fault domain.
• Physical ports are labeled with a WWN.
c. In the Public IPv4 Address eld, type the IPv4 address that iSCSI initiators (servers and remote Storage Centers)
communicate with on the public network to reach the Storage Center iSCSI port.
d. In the Public Port eld, type the TCP port that iSCSI initiators communicate with on the public network to reach the
Storage Center iSCSI port.
278
Storage Center Maintenance