Enterprise Extender Best Practices › Enterprise Extender Management › EE and Firewalls

EE and Firewalls

The firewalls must allow both inbound and outbound UDP traffic on all five EE ports. If this condition is not satisfied, the EE connection is established but sessions cannot be established.

Use CA NetMaster NM for TCP/IP to test a firewall for an existing connection

1. From the command prompt, enter the following panel shortcut:

   /EEXCA
   

   The EE XCA Major Node Summary is displayed.

2. Enter CT against the required connection.

   The connectivity test is invoked. If the destination:

   • Cannot be reached, the following causes are possible:
     • The IP connectivity is lost within the network.
     • The firewall does not allow UDP traffic for EE ports 12000 through 12004
   • Can be reached but is not responding, check that EE is enabled on the remote end point.

Use CA NetMaster NM for TCP/IP to test a new host

1. From the command prompt, enter the following panel shortcut:

   /EE
   

   The Enterprise Extender Management menu is displayed.

2. Enter CT and a value for the Remote Host Name/Addr.

   (You may be prompted for a local VIPA.)

   The connectivity test is invoked. If the destination:

   • Cannot be reached, the following causes are possible:
     • The IP connectivity is lost within the network.
     • The firewall does not allow UDP traffic for EE ports 12000 through 12004
   • Can be reached but is not responding, check that EE is enabled on the remote end point.