Symantec Security 5600 Series, Security 5400 Series,Clientless VPN 4400 Series, Administration Manual

Page: 190 / 861

190 Defining your security environment
Understanding proxies
Before configuring this software, you need to prepare the security gateway to allow Oracle Net9
Connection Manager Proxy to handle the communication.
This process includes the following tasks:
■
Opening the Oracle Net9 Connection Manager proxy port
■
Configuring the remote Oracle SQL *Plus client
Opening the Oracle Net9 Connection Manager proxy port
Use this procedure to set up your security gateway to allow Oracle Net9 Connection Manager to handle
Oracle/SQL type connectivity.
Prerequisites
None.
Open the Oracle Net9 Connection Manager proxy port
Setup involves four steps:
■
Setting up your security gateway for Oracle Net9 Connection Manager
■
Configuring Oracle Net9 Connection Manager Proxy to listen on the appropriate interface
■
Configuring the security gateway to allow communication to Oracle Net9 Connection Manager
Proxy on port 1630
To set up your security gateway for Oracle Net9 Connection Manager
1 On the security gateway, create a file named / usr/raptor/bin/startcmgw.sh, and add the following
syntax:
[startcmgw.sh]
#!/bin/sh
cd /usr/raptor/oracle_netprxy/bin
ORACLE_HOME=/usr/raptor/oracle_netprxy
LD_LIBRARY_PATH=$ORACLE_HOME/lib:$LD_LIBRARY_PATH
PATH=$ORACLE_HOME/bin:$PATH
export ORACLE_HOME LD_LIBRARY_PATH PATH
./cmgw&
2 Save the file and then change permissions to 750.
3 Open the /etc/rc4.d/S15raptor file and modify it by inserting the line “/usr/raptor/bin/
startcmgw.sh &”
after the line “/usr/raptor/bin/startgw &” and before the double semicolons, as
follows.
/usr/raptor/bin/startgw &
/usr/raptor/bin/startcmgw.sh &
;;
4 Save the file.
5 Restart the security gateway.
6
Verify that the cmgw process is running by using the ps -ef command.
To configure the Oracle Connection Manager proxy to listen on the appropriate interface
1 On the security gateway, open the file /usr/raptor/oracle_netprxy/network/admin/cman.ora and
modify the host IP address to reflect the IP address where the Oracle Net9
Connection Manager
Proxy listens.
# File cman.ora
# cman's listening addresses
#
cman =(ADDRESS_LIST=(ADDRESS=(PROTOCOL=tcp)(HOST=firewall_interface_IP)(PORT=1630)
(QUEUESIZE=32)))