logo       

Re: [TMF4.1.1] lowlevel command to obtain endpoint ip address on NAT ena: msg#00522

sysutils.tivoli.tme10

Subject: Re: [TMF4.1.1] lowlevel command to obtain endpoint ip address on NAT enabled TME





I mis-stated that facts. So let me take a step back.

The gateway always communicates with the endpoint via IP address and this
IP address is stored in the Endpoint Manager (epmgr) database. The use of
names comes into effect where the endpoint uses a name to talk to the
gateway instead of an IP address. So the select_gateway_policy script
passes the name of the gateway instead of the OID back to the endpoint
manager when the script is executed. If the epmgr receives an OID is
converts to an IP address and passes it to the endpoint. If the epmgr
receives a name, it sends the name to the endpoint.

So coming back to the issue at hand.

The endpoint will pass an IP address to the gateway when it sends an upcall
or login. This IP address is the NAT'd address because the IP address would
have changed when it passed through the firewall. Therefore, the gateway
will pass the NAT'd address to the epmgr and it will store this
information.

This IP address can be extracted, but this is not the real IP address of
the endpoint, which I assume you are looking for.

I'm sure about whether the local_ip_interface would make any difference. I
suspect not, because this information is likely to be in the header which
will be affected by the NAT firewall.

I apologize if I confused anyone.


Gary R. Hamilton
Team Leader
Senior Software Engineer
IBM Software Group - Tivoli Software (UK)
Global Response Team - Europe/Middle East/Africa
+44(0)1753-780-988
mobile: +44(0)780-820-3714
e-mail:hamilgar@xxxxxxxxxx
____________________________________________
AskTivoli - http://www-3.ibm.com/software/sysmgmt/products/support/
Web PMR submission - http://www-3.ibm.com/software/support/probsub.html



Jason Shamroski
<jason_shamroski@
gulfsoft.com> To
Sent by: tme10@xxxxxxxxxxxxxxxx
owner-tme10@lists cc
.us.ibm.com
Subject
Re: [tme10] [TMF4.1.1] lowlevel
24/02/2005 20:44 command to obtain endpoint ip
address on NAT enabled TME

Please respond to
tme10







Gary,

If you configure the local_ip_interface during an EP install, would that
information get sent in the initial login packet?

Jason



Gary Hamilton wrote:

>
>
>So you are asking for the real address of the endpoint that is on the
other
>side of a NAT firewall?
>
>This information would not be available to the Endpoint Manager. In a
>configuration like this, you would be using the name of the endpoint to
>communicate with it, and the name is converted by the appropriate naming
>service to an IP address, which will be converted to the real address when
>it passes through the firewall.
>
>An IP address may be stored in the Endpoint Manager database, but this
>address is very likely to be the NAT'd address, not the real one. Is this
>the IP address you are asking for?
>
>
>Gary R. Hamilton
>Team Leader
>Senior Software Engineer
>IBM Software Group - Tivoli Software (UK)
>Global Response Team - Europe/Middle East/Africa
>+44(0)1753-780-988
>mobile: +44(0)780-820-3714
>e-mail:hamilgar@xxxxxxxxxx
>____________________________________________
>AskTivoli - http://www-3.ibm.com/software/sysmgmt/products/support/
>Web PMR submission - http://www-3.ibm.com/software/support/probsub.html
>
>
>

> joel_n_mokoetle@b

> ankone.com

> Sent by: To

> owner-tme10@lists <tme10@xxxxxxxxxxxxxxxx>

> .us.ibm.com cc

>

> Subject

> 24/02/2005 17:10 [tme10] [TMF4.1.1] lowlevel command

> to obtain endpoint ip address on

> NAT enabled TME

> Please respond to

> tme10

>

>

>

>

>
>
>
>
>
>Can someone please tell me the low level (i.e. objcall,idcall,etc.)
command
>to obtain the IP ADDRESS of an endpoint on a Tivoli Management Environment
>that has NAT enabled? I need the IP as registered in on the TMR.
>
>Thanking you in advance,
>Napo
>
>***************************************************************
>JPMorganChase - Systems & Service Management Tools Engineer
>Tel: 614-213-8599
>Pager: 888-636-2381
>"If you look in your dictionary, you'll find that the meaning of the word
>'single' is not single!" UNKNOWN
>*************************************************************
>
>This transmission may contain information that is privileged, confidential
>and/or exempt from disclosure under applicable law. If you are not the
>intended recipient, you are hereby notified that any disclosure, copying,
>distribution, or use of the information contained herein (including any
>reliance thereon) is STRICTLY PROHIBITED. If you received this
transmission
>in error, please immediately contact the sender and destroy the material
in
>its entirety, whether in electronic or hard copy format. Thank you.
>
>
>
>





<Prev in Thread] Current Thread [Next in Thread>
Google Custom Search

News | FAQ | advertise