IBM Tivoli Monitoring > Version 6.3 Fix Pack 2 > Installation Guides > Installation Guide > Firewalls > Implementation with partition files

IBM Tivoli Monitoring, Version 6.3 Fix Pack 2

Create the partition file manually

If your site is using address translation, you must create a partition file. The partition file is a text file containing the name of a partition and its constituent interface address.

You must create or modify this file before implementing firewall support with monitoring servers and agents, the portal server and the hub monitoring server, clients and the portal server, and monitoring agents and Warehouse Proxy Agents.

When Tivoli Management Services components need to communicate across a firewall that performs NAT, those components must be able to retrieve an IP address of the other component that is valid on its side of the firewall. To support this capability, the location broker namespace is logically divided into partitions with unique partition IDs. Partition IDs are specified using the KDC_PARTITION environment variable. The partition file is the means to insert appropriate IP addresses into the location broker namespaces.

When an IBM Tivoli Monitoring component performs a location broker lookup operation, the partition ID of its partition is automatically supplied. The location broker returns only addresses that have been defined for that partition namespace and no other. In effect, the IBM Tivoli Monitoring component sees only addresses that are valid for its partition.

A partition file is a standard text file defined to the system using the KDC_PARTITIONFILE environment variable. Within this file, each line describes a partition name with its constituent IP addresses using space delimited tokens. The format is as follows:

The first token on each line is used as a case-insensitive partition ID. The partition ID can be any alphanumeric string with a maximum length of 32 characters. Subsequent tokens specified are treated as interface addresses in standard NCS format (address-family:address). For communication across firewalls, use only IP.PIPE for address-family.

The expected default location of the file is /install_dir/tables/tems_name.


Parent topic:

Implementation with partition files

+

Search Tips   |   Advanced Search