SureBackup - Internet Proxy

Hi ​@lgh check this

Is the proxy appliance in the same network as the veeam server? Aa new route table on the VBR will be created automatically.

On the other hand, if the appliance has an IP on a different network you have to manually add the new route on the router in production network

Step 5. Set Up Proxy Appliance - User Guide for VMware vSphere

Try traceroute to 10.11.9.239 that does not ping a telnet 10.11.9.239 8080

Hi ​@lgh could you also provide Screenshots of your Settings for your isolated Networks?

I’m normally not working with an Internet Proxy for SureBackups - could be end up with a lot of trouble, maybe if some isolated Workloads send Data to some external Services...

Can your Isolated networks communicate to other isolated networks? Did you checked the “Route network between vNIC”s box?

Hi ​@lgh check this

Is the proxy appliance in the same network as the veeam server? Aa new route table on the VBR will be created automatically.

On the other hand, if the appliance has an IP on a different network you have to manually add the new route on the router in production network

Step 5. Set Up Proxy Appliance - User Guide for VMware vSphere

 

Try traceroute to 10.11.9.239 that does not ping a telnet 10.11.9.239 8080

The backup server is on the same network as that of the appliance proxy (both sit on 10.11.9.x/24) 

However, the VM within the isolated environment sits on another cluster with an IP of 172.20.120.90 hence setting the masquerade address to 172.31.252.90 (this may be wrong as I am an novice here - but trying to learn).

So it got a bit tricky - when it came to the networking stuff. We added a route on the gateway to punt any traffic that goes to 172.31.252.90 (masquerade address) to 172.20.121.90 (IP of VM). I defined this is static mapping so users could RDP onto the isolated VM to perform tests.

Therefore I can RDP to 10.12.9.90 and it takes me to 172.20.120.90 (the isolated VM).

Apologies if I’m not explaining this well but I’ll include some screenshots below.

 

Hi ​@lgh could you also provide Screenshots of your Settings for your isolated Networks?

I’m normally not working with an Internet Proxy for SureBackups - could be end up with a lot of trouble, maybe if some isolated Workloads send Data to some external Services...

 

Can your Isolated networks communicate to other isoltaed networks? Did you checked the “Route network between vNIC”s box?

 

Hi ​@Dynamic , thanks for the reply. 

I only have one entry under Networking settings, see below. 

The isolated network above is the production network from which the VM I’m spooling up sits on. 172.20.120.xx however, the proxy has been spun up on another cluster due to storage constraints - hence the proxy address being a 10.11.9.xx address. 

I may have vastly confused things with my setup but as far as I’m concerned it works (so far). I can RDP onto the static mapping I’ve created but the only thing I can’t do now is access the internet. 

It may be an issue with internal routing possibly, but with it working I now just need to give it internet access. 

Hope this helps. I’ve commented on the previous comment from ​@Link State with some more information (waiting for moderator approval) which may help with my answer too.