NBU7.7两个MASTER SERVER建立TRUSTED MASTER SERVER问题

liunia2000

两台新建立的MASTER SERVER,分别在不同地点（网络路由可通，无NAT），现拟准备建立 AIR（AUTO IMAGE REPLICATE）功能，实现备份数据的容灾备份；
按步骤建立到增加信任主管理服务器时，出现问题，报“remote master server could not establish AT trust from ”；
在这之前报的是两台服务器MASTER SERVER TRUST RELATIONSHIP的问题，我查了是两台服务器时间异步问题，已经处理了。然后就这样了。

后面再次尝试，出现THE REMOTE MASTER SERVER IS NOT REACHABLE(5613)

日志如下:
ErrorHandler--->(getDeviceMonitorInfoList) Status Code: 0 -> .
ICACHE.PBXIOPCredsHandler-> ServiceContext registered.
(ObjSvc)Symantec.NetBackup.SL.DeviceMgmt.DeviceManager.aqueryFacet
    Request ID: 150
    Server: nbu-server-shg
    Time Taken: 0ms
    Successful:
    Reply Status: Successful

ErrorHandler--->(aqueryFacet) Status Code: 0 -> .
vrts.nbu.admin.icache.NBGUIORBConfigurator:NBU-SERVER-SHG:1556:nbsl
[25-01-2019 11:50:13:349] jacorb.orb.giop:INFO: ClientConnectionManager: found C
lientGIOPConnection to NBU-SERVER-SHG:1556:nbsl (3c176ce9)
ICACHE.PBXIOPCredsHandler-> ServiceContext registered.
(ObjSvc)Symantec.NetBackup.SL.DeviceMgmt.DriveQueryFacet.getRBPendingRequests
    Request ID: 152
    Server: nbu-server-shg
    Time Taken: 0ms
    Successful:
    Reply Status: Successful

ErrorHandler--->(getRBPendingRequests) Status Code: 0 -> .
(SR-1)execCommand:
        Protocol Code: 1
        Status: 237
        Time Taken: 348629ms
        Error Msg: Trusted master operation failed
        Server Locale: zh_CN
        TO[0]: "/usr/openv/netbackup/bin/admincmd/nbseccmd" -setuptrustedmaster
-add -masterserver nbu-server-shg -remotemasterserver NBU-SERVER -username root
-e -domainname unixpwd
        FROM[0]: Trusted master operation failed
        FROM[1]: The remote master server is not reachable(5613)
        Aux data: null

请求支持，如何处理这个不同备份域之间MASTER SERVER建立TRUSTED MASTER SERVER的问题，有什么前提需要特别注意的吗？

liunia2000

汇报一下，问题解决了。原来是防火墙必须双向开通，可能通信过程中占用动态端口，日志如下：

ErrorHandler--->(getDeviceMonitorInfoList) Status Code: 0 -> .
ICACHE.PBXIOPCredsHandler-> ServiceContext registered.
(ObjSvc)Symantec.NetBackup.SL.DeviceMgmt.DeviceManager.aqueryFacet
    Request ID: 150
    Server: nbu-server-shg
    Time Taken: 0ms
    Successful:
    Reply Status: Successful

ErrorHandler--->(aqueryFacet) Status Code: 0 -> .
vrts.nbu.admin.icache.NBGUIORBConfigurator:NBU-SERVER-SHG:1556:nbsl
[25-01-2019 11:50:13:349] jacorb.orb.giop:INFO: ClientConnectionManager: found C
lientGIOPConnection to NBU-SERVER-SHG:1556:nbsl (3c176ce9)
ICACHE.PBXIOPCredsHandler-> ServiceContext registered.
(ObjSvc)Symantec.NetBackup.SL.DeviceMgmt.DriveQueryFacet.getRBPendingRequests
    Request ID: 152
    Server: nbu-server-shg
    Time Taken: 0ms
    Successful:
    Reply Status: Successful

ErrorHandler--->(getRBPendingRequests) Status Code: 0 -> .
(SR-1)execCommand:
        Protocol Code: 1
        Status: 237
        Time Taken: 348629ms
        Error Msg: Trusted master operation failed
        Server Locale: zh_CN
        TO[0]: "/usr/openv/netbackup/bin/admincmd/nbseccmd" -setuptrustedmaster
-add -masterserver nbu-server-shg -remotemasterserver NBU-SERVER -username root
-e -domainname unixpwd
        FROM[0]: Trusted master operation failed
        FROM[1]: The remote master server is not reachable(5613)
        Aux data: null

再次尝试，仍然不成功，但提示变化了，怀疑是通信端口是动态端口的，可能与防火墙通信有关。

ErrorHandler--->(getRBPendingRequests) Status Code: 0 -> .
[262144] HostPropertiesDelegate->addRemoveTrustedMasterServer: thread created
"/usr/openv/netbackup/bin/admincmd/nbseccmd" -setuptrustedmaster -add -masterser
ver nbu-server-shg -remotemasterserver NBU-SERVER -username root -e -domainname
unixpwd
(SR-1)execCommand:
        Protocol Code: 1
        Status: 228
        Time Taken: 57876ms
        Error Msg: Trusted master operation failed
        Server Locale: zh_CN
        TO[0]: "/usr/openv/netbackup/bin/admincmd/nbseccmd" -setuptrustedmaster
-add -masterserver nbu-server-shg -remotemasterserver NBU-SERVER -username root
-e -domainname unixpwd
        FROM[0]: Trusted master operation failed
        FROM[1]: Remote master server could not establish AT trust from this mas
ter server(5604)
        Aux data: null

开启经过路由的防火墙后，成功了。原来仅单向防火墙通不行，得双向开通。

[262144] HostPropertiesDelegate->addRemoveTrustedMasterServer: thread finished
[262144] HostPropertiesDelegate->addRemoveTrustedMasterServer: thread created
"/usr/openv/netbackup/bin/admincmd/nbseccmd" -setuptrustedmaster -add -masterser
ver nbu-server-shg -remotemasterserver NBU-SERVER -username root -e -domainname
unixpwd
(SR-1)execCommand:
        Protocol Code: 1
        Status: 0
        Time Taken: 28860ms
        Error Msg:
        Server Locale: zh_CN
        TO[0]: "/usr/openv/netbackup/bin/admincmd/nbseccmd" -setuptrustedmaster
-add -masterserver nbu-server-shg -remotemasterserver NBU-SERVER -username root
-e -domainname unixpwd
        FROM[0]: Trusted master operation successful
        Aux data: null