Navigation:

Remote Connection >> SR2 Slave Site Configuration

SR2 Slave Site Configuration

SR2 Slave Site Configuration – Configuring your Firewalls

Caution:Any work on your firewall should be carried out by your IT Service Provider/Network Administrator.
The following information is provided for reference only.
Typical EMS SR2 Slave Site Scenario

Figure 136
Typical EMS SR2 Slave Site Scenario

1.Master Site Firewall Settings

i.Check that the local firewall on the EMS Server allows the SR2 outbound TCP Port (Default: 10992).

ii.Add a new rule to the Master Site firewall that allows the SR2 outbound TCP Port (Default: 10992).

2.Slave Site Firewall Settings

Add a new rule to the Slave Site firewall to allow SR2 inbound TCP Port WAN traffic (Default: 10992) to pass through to the SR2 on the LAN.

In the following example (See Figure 137 below) a Service has been created (SR2 - 10992) before adding the rule. Also, in the WAN destination IP Address section the WAN IP address could be selected (199.215.117.34).

In the second example (See Figure 138 below below) the WAN Users’ address has been selected to restrict access.

Adding a LAN WAN Inbound Service - WAN Destination IP Address Unspecified

Figure 137
Adding a LAN WAN Inbound Service -
WAN Destination IP Address Unspecified

Adding a LAN WAN Inbound Service - Example Interface Entries

Service

SR2-10992

The service needs to be created and associated with TCP Port 10992

Action

Allow always

Select Schedule

N/A

Send to LAN Server

Single Address

Start

The internal IP address of the SR2. 192.168.107.10 is just an example.

End

Not Used

Translate to Port Number

N/A

WAN Destination IP Address

Select the WAN IP address that you have chosen to use for the SR2. In the example, WAN1 is selected but it could be an IP address.

This will have been provided by your ISP (Internet Server Provider). This could be a single address or a range. In this example 199.215.117.34 is used.

Start

Not Used

End

Not Used

LAN Users

N/A

Start

Not Used

End

Not Used

WAN Users

Any, single address or address range.

Start

Depending on the selection above enter the EMS Master site IP Address or Range of addresses.

End

Not Used

Qos Profile

N/A

Log

N/A

Bandwidth Profile

N/A

 

Adding a LAN WAN Inbound Service - WAN Destination IP Address Specified

Figure 138
Adding a LAN WAN Inbound Service -
WAN Destination IP Address Specified

3.Configuring EMS to use the SR2

To add the SR2 to an EMS installation, refer to the Hanwell EMS Remote Management Tool Manual – Document Number: IM6000.