what connects to what?

Started by possamai, December 08, 2008, 12:56:31 AM

Previous topic - Next topic

possamai

Just wondering, does the agent connect to the server or the other way around?

Why am I asking:
I'm trying to connect an external machine to my server but both are behind a router.
Now will I need to forward an external port to my server(on my side) or will I have to forward an external port to the agent(on the other side)?

And, how safe is it?
it's a little creepy to open up an incoming port just like that....
I'm not to fond of doing that....

Victor Kirhenshtein

Hi!

Server connects to agent, by default using port 4700.

It should be safe - first, agent accepts connection only for explicitly listed IP addresses (usually you will have only one address - of your NetXMS server). In addition, you can configure NetXMS to use encrypted connections between server and agent, and configure shared secret authentication on agent, so it will acccept connections not only from specific addressm but also only if valid shared secret was provided.

Best regards,
Victor

possamai

Why?

I mean, wouln't it be smarter to let the agent connect to the server? Or even both ways..
This would also fix the problem with DHCP I think.

Victor Kirhenshtein

Quote from: possamai on January 12, 2009, 12:31:22 PM
Why?

Design flaw :) I agree that connections from agent to server can be very useful in many situations, especially for hosts with dynamic addresses or behind NAT. It is in my long to-do list, because it requires significant changes on server side, but eventually this feature will be available.


Best regards,
Victor

possamai

Don't be so hard on yourself  :)
I wouldn't call it a design flaw..
It can be very useful to be able to push commands to an agent (server 2 agent communication, like now)
instead of always having to wait for the agent to pick up it's todo list at the server...
2-way communication would be best...

See, you're already half-way!!  ;D  ;)