Problem:
I am having difficulty connecting to the NC State Remedy system. I
believe the problem may be related to the fact that my computer is
behind a firewall.
Solution:
Recent changes to the network configuration of the NC State Remedy
implementation have presented some problems for Remedy users whose
clients are behind a firewall. If you are accessing the Remedy server
from behind a firewall, you may need to make changes to your Remedy
client configuration, and to the firewall configuration. These changes
are outlined below.
First, some background:
The NC State Remedy server is configured to utilize a facility called
"port mapper", which allows for a dialog between the Remedy server
and the Remedy client during which they negociate a TCP port over
which to carry out the subsequent session. This dialog starts out
over TCP port 111, and may continue over an arbitrary TCP port that
the client and server agree on. When a firewall is in place, this
dialog will not complete correctly, and the client will not be able
to connect to the server.
However, the NC State Remedy system is also configured to listen for
client requests on a specific TCP port, bypassing the port negotiation
dialog. This may still present connectivity problems in a firewall
environment, but they are more well defined, and easier to resolve.
Firewall Configuration:
To allow the Remedy client and server to communicate through a
firewall, the firewall administrator must allow traffic over the
following TCP prts:
33000 - Remedy client traffic
Remedy Client Configuration:
As mentioned above, unless otherwise configured, the Remedy client
will attempt to utilize portmapper to determine which TCP port to use
to communicate with the Remedy server. This behavior can be avoided by
instruction the Remedy client (and the Notifier client) to communicate
on a specific TCP port. The steps for configuring the Remedy clients
are as follows:
Windows client:
1. Use the login dialog box (choose Tools --> Login... if already
logged in).
2. Click the Options button.
3. Enter "remedy.ncsu.edu" as the Preference Server.
4. Fill in the TCPPort for this server. In our case this
number is 33000.
5. Leave the Authentication and RPC# fields blank.
6. Press OK
The client is now configured to connect to the server without using
portmapper.
|