Sending a management request in a NAT deployment using the Malware Analysis CLI

Use the commands in this section to send a management request from an Malware Analysis appliance in a NAT deployment to the Central Management System appliance.

The following topologies are supported:

Central Management System and Malware Analysis appliance behind the same NAT gateway
Malware Analysis appliance behind NAT gateway and Central Management System in external network
Central Management System behind NAT gateway and Malware Analysis appliance in external network
Central Management System and Malware Analysis appliances behind different NAT gateways

Caution

If the Malware Analysis appliance has never sent a management request, ensure the requirements described in Preparing an Malware Analysis appliance to send a management request in a NAT deployment are in place before you attempt to send the request.

Central Management System and Malware Analysis appliance behind the same NAT gateway

To send a management request:

Go to CLI configuration mode:

appl-hostname > enable
appl-hostname # configure terminal

Specify the hostname, or IPv4 or IPv6 address of the Central Management System appliance:
```
appl-hostname (config) # cmc client server address <hostname, IPv4 or IPv6 address>
```
Specify the authentication type and admin credentials the appliance should use to log in to the Central Management System appliance to announce itself.
```
appl-hostname (config) # cmc client server auth authtype <authType>
appl-hostname (config) # cmc client server auth <authType> username <username>
appl-hostname (config) # cmc client server auth <authType> password <password>  | identity <identity>
```
where <authType> can be password, ssh-dsa2, or ssh-rsa2. (See Configuring User Authentication Using the CLI for details.)
Save your changes.
```
appl-hostname (config) # write memory
```

Malware Analysis appliance behind NAT gateway and Central Management System in external network

To send a management request:

Go to CLI configuration mode:

appl-hostname > enable
appl-hostname # configure terminal

Specify the hostname, or IPv4 or IPv6 address of the Central Management System appliance:
```
appl-hostname (config) # cmc client server address <hostname, IPv4 or IPv6 address>
```
Specify the authentication type and admin credentials the appliance should use to log in to the Central Management System appliance to announce itself.
```
appl-hostname (config) # cmc client server auth <authType> 
appl-hostname (config) # cmc client server auth <authType> username <username>
appl-hostname (config) # cmc client server auth <authType> password <password> | identity <identity>
```
where <authType> can be password, ssh-dsa2, or ssh-rsa2. (See Configuring User Authentication Using the CLI for details.)
Prevent the local IP address of the appliance behind the NAT gateway from being part of the request:
```
appl-hostname (config) # no cmc rendezvous client send-client-address
```
Save your changes.
```
appl-hostname (config) # write memory
```

Central Management System behind NAT gateway and Malware Analysis appliance in external network

To send a management request:

Go to CLI configuration mode:

appl-hostname > enable
appl-hostname # configure terminal

Specify the virtual NAT hostname, or IPv4 or IPv6 address and port that are mapped to the Central Management System internal IP address and SSH port:
```
appl-hostname (config) # cmc client server address <hostname, IPv4 or IPv6 address>
```
where <IPv4 or IPv6 address> is the mapped IPv4 or IPv6 address.
(Optional) Specify the virtual NAT port that is mapped to the Central Management System internal SSH port:
```
appl-hostname (config) # cmc client server port <port>
```
The port defaults to 22 if it is not specified.
Specify the authentication type and admin credentials the appliance should use to log in to the Central Management System platform to announce itself.
```
appl-hostname (config) # cmc client server auth <authType> 
appl-hostname (config) # cmc client server auth <authType> username <username>
appl-hostname (config) # cmc client server auth <authType> password <password> | identity <identity> 
```
where <authType> can be password, ssh-dsa2, or ssh-rsa2. (See Configuring User authentication using the CLI for details.)
Save your changes.
```
appl-hostname (config) # write memory
```

Central Management System and Malware Analysis appliances behind different NAT gateways

To send a management request:

Go to CLI configuration mode:

appl-hostname > enable
appl-hostname # configure terminal

Specify the virtual Central Management System NAT hostname, or IPv4 or IPv6 address that is mapped to the Central Management System internal IP address:
```
appl-hostname (config) # cmc client server address <hostname, IPv4 or IPv6 address>
```
where <IPv4 or IPv6 address> is the mapped IPv4 or IPv6 address.
(Optional) Specify the virtual Central Management System NAT port that is mapped to the Central Management System internal SSH port:
```
appl-hostname (config) # cmc client server port <port> 
```
The port defaults to 22 if it is not specified.
Specify the authentication type and admin credentials the appliance should use to log in to the Central Management System platform to announce itself.
```
hostname (config) # cmc client server auth authtype <authType>
hostname (config) # cmc client server auth <authType> username <username>
hostname (config) # cmc client server auth <authType> password <password> |  identity <identity>
```
where <authType> can be password, ssh-dsa2, or ssh-rsa2. (See Configuring User Authentication Using the CLI for details.)
Prevent the local IP address of the appliance behind the NAT gateway from being part of the request:
```
appl-hostname (config) # no cmc rendezvous client send-client-address
```
Send the request again without including the local IP address of the appliance:
```
appl-hostname (config) # cmc rendezvous client force
```
Save your changes.
```
appl-hostname (config) # write memory
```