Skip to main content
Solved

Creating pseudo-client for RHEV (http vs https)


Kamil W
Commvault Certified Expert
Forum|alt.badge.img+11
  • Commvault Certified Expert
  • 83 replies

Hi Guys,

 

I am creating the RHEV pseudo-client with the Customer.

We have noticed that during creating RHEV pseudo-client, Commvault uses port 80 (http) to comunicate with RHEV Manager.

 

Port 80 (http) is blocked by the firewall. They use only https (port 443) in the environment due to some safety restrictions.

 

Is any way to force Commvault (VSA) to use port 443 during creating RHEV pseudo-client?

 

Rgds,

Kamil

Best answer by Aplynx

Kamil,

 

With 24.7 installed, that would include hotfix 3030 (part of 24.2). If this is also installed on the proxy\access nodes for RHEV, when the initial denial happens on port 80 (http) a certificate should be generated either way and retried on port 443 (https). If 24.7 is on the proxies and we’re not seeing this behavior, please open a support incident for review.

View original
Did this answer your question?

18 replies

MichaelCapon
Vaulter
Forum|alt.badge.img+14

Hello @Kamil W ,

 

What version of Commvault FR and MR are you using here please? 

The reason for asking is that some recent MR’s include a patch to resolve the configuration issue when Port 80 is blocked:
Maintenance Release 11.24.2
Maintenance Release 11.23.17
Maintenance Release 11.22.32 

 

Best Regards,

Michael


Kamil W
Commvault Certified Expert
Forum|alt.badge.img+11
  • Author
  • Commvault Certified Expert
  • 83 replies
  • October 5, 2021

Hi @MichaelCapon ,

It’s definitely FR20. I’ll ask the Customer about version of Maintenance Release.

I’ll let you know ASAP.

Rgds,

Kamil


Kamil W
Commvault Certified Expert
Forum|alt.badge.img+11
  • Author
  • Commvault Certified Expert
  • 83 replies
  • October 6, 2021

Hi again,

 

CS is running 11.20.67

I cannot see any mention about the issue for FR20.

https://documentation.commvault.com/11.22/assets/service_pack/updates/11_20_67.htm

Any ideas?

 

Rgds,

Kamil

 


MichaelCapon
Vaulter
Forum|alt.badge.img+14

Hi @Kamil W ,

 

I am checking this and will get back to you.

 

Best Regards,

Michael


Kamil W
Commvault Certified Expert
Forum|alt.badge.img+11
  • Author
  • Commvault Certified Expert
  • 83 replies
  • October 7, 2021

@MichaelCapon  Sure, I am looking forward to any news from you.

 

Rgds,

Kamil


MichaelCapon
Vaulter
Forum|alt.badge.img+14

Hi @Kamil W,

 

If your customer does not have any plans to move to the above stated versions, can you raise a case with Support? - We may be able to request this for back port to FR20. 

 

Thanks & Kind Regards,

Michael

 


Kamil W
Commvault Certified Expert
Forum|alt.badge.img+11
  • Author
  • Commvault Certified Expert
  • 83 replies
  • October 7, 2021

@MichaelCapon  Many thanks!

 

The Customer decided to upgrade CS to 11.22.45

I’ll let you know, how it goes ASAP.

 

Rgds,

Kamil


Mike Struening
Vaulter
Forum|alt.badge.img+23

Hey @Kamil W , gentle follow up on this one.  any word from your customer?

Thanks!


Kamil W
Commvault Certified Expert
Forum|alt.badge.img+11
  • Author
  • Commvault Certified Expert
  • 83 replies
  • October 15, 2021

Hi @Mike Struening !

 

Yes, I had a remote session with the Customer yesterday.

They upgraded CS to 11.24.7. However, once port 80 is blocked, backup of RHEV is not working.

It seems like port 80 is needed to initiate the connection, then Commvault is already using port 443 to backup the data. That’s what they see in the Firewall GUI.

Any ideas how to resolve this issue? They need to use port 443 (https) due to some safety policys.

 

Rgds,

Kamil

 


Aplynx
Vaulter
Forum|alt.badge.img+13
  • Vaulter
  • 291 replies
  • Answer
  • October 15, 2021

Kamil,

 

With 24.7 installed, that would include hotfix 3030 (part of 24.2). If this is also installed on the proxy\access nodes for RHEV, when the initial denial happens on port 80 (http) a certificate should be generated either way and retried on port 443 (https). If 24.7 is on the proxies and we’re not seeing this behavior, please open a support incident for review.


Kamil W
Commvault Certified Expert
Forum|alt.badge.img+11
  • Author
  • Commvault Certified Expert
  • 83 replies
  • October 18, 2021

Hi @Aplynx ,

 

Many thanks for your reply.

As I remember VSA is running 11.20.x.

Once the Customer updates VSA Proxy, I’ll let you know how it goes.

 

Rgds,

Kamil


Mike Struening
Vaulter
Forum|alt.badge.img+23

Hi @Kamil W , following up to see if the customer has updated the proxy yet.

Thanks!


Kamil W
Commvault Certified Expert
Forum|alt.badge.img+11
  • Author
  • Commvault Certified Expert
  • 83 replies
  • November 8, 2021

Hi guys!

The customer has finally upgrated the proxy. Everything’s working as expected now.

Thank you for your help!

Rgds,

Kamil


Mike Struening
Vaulter
Forum|alt.badge.img+23

Sweet, thanks for the update!!


  • 143 replies
  • October 24, 2022

Good Morning Commvault Community,

 

The client encountered a similar problem but for the SP20 version. Do you have information, is there any fix for this version or do we need to contact CV support to write a new fix for SP20?

 

Thanks&Regards,
Kamil


Mike Struening
Vaulter
Forum|alt.badge.img+23

Confirming @Kamil created another thread for this.


  • 143 replies
  • November 15, 2022

Hello,

 

A fix has been released, has been tested and works as described. OLVM communicated with commvault on port 443 after deploying this fix.

 

I don't know if I can share it and I don't know if it will be available in the official MR version, but if anyone needs it, they know where to find me ;)

 

Thanks for help @Mike Struening
Kind Regards,
Kamil


Mike Struening
Vaulter
Forum|alt.badge.img+23

@Kamil give me the patch name or form ID and I’ll find out.

Thanks, man!


Reply


Cookie policy

We use cookies to enhance and personalize your experience. If you accept you agree to our full cookie policy. Learn more about our cookies.

 
Cookie settings