Configuring the RHA NAT Utility for Various Network Setups › Example 3: Appliance and CS are Behind a Closed Firewall

Example 3: Appliance and CS are Behind a Closed Firewall

In this example, the master cannot access the replica. The Control Service and replica are behind a firewall without any port forwarding. The following description explains the network setup.

• Masters are in a private LAN network (LAN 1) that is behind a firewall (Firewall 1) with the port forwarding enabled.
• Hosts in LAN 1 can access the public WAN through Firewall1. The following port forwarding is configured for Firewall 1.
  • Port 25000 is forwarded to Master 1.
  • Port 25001 is forwarded to Master 2.
• The Control Service and replica are in a private LAN network (LAN 2) that is behind a firewall (Firewall2) without any port forwarding.
• Both these private LAN networks are connected through a public WAN.

The following diagram illustrated the network setup.

In this setup, the Control Service and the appliance can access the master but the master cannot access the appliance. For a forward scenario, the master cannot copy data to the replica.

To create a scenario for this kind of setup, configure the RHA NAT utility on the appliance.

The following tasks describe how to configure the NAT utility on the appliance while creating a scenario and performing BMR.

• Create a Full System HA Scenario
• Perform BMR from a Rewind Point
• Perform BMR using Reverse Replication