Adding endpoints behind a firewall/NAT in TMS

[Scott Hallen]

We are trying to add external EX90 endpoints to our TMS (v.14.3.1). The TMS is not reachable on the public internet but our VCSe is. Can anyone walk me through the steps to configure this? I was following the instructions on p. 72 of the TMS Admin Guide and I am not quite sure if I have this right. Also, is there any way to add units that are already off our network and in people's homes? 

Do we have to have a separate Device Provisioning Option Key for the VCSe?           

[Wayne DeNardi]

I believe the first sentence in that screen grab you added says that TMS needs to be reachable from the public internet on the DNS entry you provide.  Without that, none of the external endpoints would be able to talk to TMS.

Wayne
--
Please remember to rate responses and to mark your question as answered if appropriate.

[Patrick Sparkman · Accepted solution]

Are you trying to add it to TMS directly, or are you trying to provision it to TMS Provisioning Extension via the VCS?

If directly to TMS, than your TMS will need to be publicly accessible.  Note the TMS admin guide pages you mentioned in your first post.

If to TMSPE via the VCS, than the EX90 will get it's configuration from the VCS Expressway on the public network via the VCS Control traversal zone within your internal network.  Take a look at the TMSPE deployment guide for more information on how to do this.