SR2 Remote Site Configuration

Contents

SR2 Remote Site Configuration – Configuring your Firewalls

Caution:

Any work on your firewall should be carried out by your IT Service Provider/Network Administrator.
The following information is provided for reference only.

Figure 135
Typical EMS SR2 Remote Site Scenario

1.Main Site Firewall Settings

i.Check that the local firewall on the EMS Server allows the SR2 outbound TCP Port (Default: 10992).

ii.Add a new rule to the Main Site firewall that allows the SR2 outbound TCP Port (Default: 10992).

2.Remote Site Firewall Settings

•Add a new rule to the Remote Site firewall to allow SR2 inbound TCP Port WAN traffic (Default: 10992) to pass through to the SR2 on the LAN.

➢In the following example (See Figure 136 below) a Service has been created (SR2 - 10992) before adding the rule. Also, in the WAN destination IP Address section the WAN IP address could be selected (199.215.117.34).

➢In the second example (See Figure 137 below below) the WAN Users’ address has been selected to restrict access.

Adding a LAN WAN Inbound Service - WAN Destination IP Address Unspecified

Figure 136
Adding a LAN WAN Inbound Service -
WAN Destination IP Address Unspecified

Adding a LAN WAN Inbound Service - Example Interface Entries
Service	SR2-10992 ➢The service needs to be created and associated with TCP Port 10992
Action	Allow always
Select Schedule	N/A
Send to LAN Server	Single Address
Start	The internal IP address of the SR2. 192.168.107.10 is just an example.
End	Not Used
Translate to Port Number	N/A
WAN Destination IP Address	Select the WAN IP address that you have chosen to use for the SR2. In the example, WAN1 is selected but it could be an IP address. ➢This will have been provided by your ISP (Internet Server Provider). This could be a single address or a range. In this example 199.215.117.34 is used.
Start	Not Used
End	Not Used
LAN Users	N/A
Start	Not Used
End	Not Used
WAN Users	Any, single address or address range.
Start	Depending on the selection above enter the EMS Master site IP Address or Range of addresses.
End	Not Used
Qos Profile	N/A
Log	N/A
Bandwidth Profile	N/A

Adding a LAN WAN Inbound Service - WAN Destination IP Address Specified

Figure 137
Adding a LAN WAN Inbound Service -
WAN Destination IP Address Specified

3.Configuring EMS to use the SR2

•To add the SR2 to an EMS installation, refer to the Hanwell EMS Remote Management Tool Manual – Document Number: IM6000.