Working with multihop configurations
About this task
If you must use a multihop configuration, ensure that the VOB host (and its pool hosts, if any) never request network services from the view host. This guarantees that no process on the VOB and pool hosts creates an access cycle with the view host. Do not request, either directly or through some other host, HCL VersionVault services or any other network services from the export view host.
One way to
achieve this goal is to prohibit users from running processes, either directly
or indirectly, on the export view host. Such a prohibition excludes
these cases:
- Creation of home directories
- Remote logons from an HCL VersionVault host
- Remote backups of the view server hosts by the VOB server or pool hosts
It also excludes other cases that resulted in a similar pattern of access.