User's Guide

Chapter 2 Description
Managing Your Remote Library
Scalar i2000 Planning Guide 26
Scenario 2: Internal clients accessing a single library across an
internal firewall
2
Another common customer configuration, is that a customer will want to
allow multiple internal clients to manage a single Scalar i2000. For
instance, as shown in
figure 12 on page 26, network operation/data
center staff providing monitoring services of specific resources.
Administrators are inside the corporate firewall, but security
considerations necessitate an additional firewall between administrators
and the resources they manage.
Figure 12
In the scenario shown in figure 12 customers can utilize port forwarding
functionality to enable specific access to a Scalar i2000. Port forwarding
works by taking all host communications directed to a specific port and
forwarding them to a single IP device. In this case, port forwarding
would be configured so that all communications to the Java RMI server
port (1099) would be directed to the IP address of the Scalar i2000.
The benefit of this solution is that it forces all traffic to a single library and
prevents any other traffic using port 1099 from going to other devices.
This does mean that only a single Scalar i2000 can be accessed. Multiple
Scalar i2000 libraries could not be accessed.