Monitoring with a CA Standard Monitor › NAT Firewall Communication

NAT Firewall Communication

To enable the CA Standard Monitor to communicate with a management console that is behind a NAT firewall, use the LockConsoleAddress utility to update the monitor configuration with the NAT address of its assigned Console.

This procedure is required, for example, when the management console is on a private network that is behind a NAT firewall. In this environment, it is possible for a CA Standard Monitor on the other side of the firewall to ping the management console on its NAT address, but the management console does not receive any reporting data from the monitor.

Before you run this utility, make sure you know the IPv4 NAT address of the management console to which you want to assign the monitor.

Follow these steps:

1. On the CA Standard Monitor, open a Command Prompt.
2. At the Command Prompt, change directories to the <ADA_HOME>\bin directory, for example D:\NetQoS\bin.
3. Type the following command and press Enter:

   LockConsoleAddress <NAT_IP>
   

   Where NAT_IP is the IPv4 NAT address of the management console. The utility updates the following registry key with the IPv4 NAT address you specify:

   HKEY_LOCAL_MACHINE\SOFTWARE\NetQos\SACollector\Parameters\NAT_MasterDB
   

4. (Optional) To verify the IPv4 NAT address that the monitor uses to communicate with the management console, type the following command and press Enter:

   LockConsoleAddress
   

   The results indicate the current IP address of the Console behind the NAT firewall.

5. (Optional) To delete the NAT address for the management console from the monitor, type the following command and press Enter:

   LockConsoleAddress -d
   

   The utility updates the following registry key to remove the IPv4 NAT address:

   HKEY_LOCAL_MACHINE\SOFTWARE\NetQos\SACollector\Parameters\NAT_MasterDB