戻る
-
タイトル
When using PSM Is it possible to connect to the DPAs using a NAT'd IP address? -
説明
When using PSM Is it possible to connect to DPAs over the internet using a NATed (Network Address Translation) address? -
原因
When clients use PSM, they would by default connect to the DPA using the "Network Address" and "Port" listed in /tpam | Management | DPAs | Select the DPA | Click the Details tab. To override, this behavior, a IP address/DNS name can be set in the "DNS Name" field.
NOTE: This is only possible with DPAs, for the TPAM appliance (LocalServer) the connection from the Java Applet is made to the same address that was used in the browser by the client. -
対策
Yes, this is possible using a Split-horizon DNS setup.In/admin | System Status | Cluster Management ensure the DPAs have a IP "Network Address" not a FQDN or hostname. This IP address will be used by the TPAM console to communicate with the DPA.In
/tpam | Management | DPAs | Select the DPA | Click the Details tab | Enter a "DNS Name". This is the DNS network address that PSM clients will use to connect to the DPA - if filled in. Ensure this address is resolvable internally and externally via your DNS zone files.