I wonder if someone could help me understanding some issues with Server Automation satellites. 1) The SA 9.0 Overview and Architecture Guide describes a topology with cascading satellite links, where a satellite facility's gateway is connected to another satellite gateway and not to a Core Management Gateway. This contradicts the statement in the "SA 9.0 Simple/Advanced Installation Guide", saying that a "Satellite installation must be linked to at least one core, which can be either a Single Core or part of a Multimaster Mesh", doesn't it?
2) The second question is kind of related to the first one. I would like to know, how and in which order the gateway connections are initialized. For what I think to know now is the following: a) There is a core facility installation with a management gateway X b) A new satellite facility is constructed, and X is given as the uplink for its satellite gateway Y. Assume, that there is a firewall between the new facility and the core. A connection is established by the satellite gateway towards X, so the firewall must allow outgoing TCP connection establishment towards X and the specific port. This tunnel connection is persistent, so it remains established even if there are no pending management tasks. It is the only connection needed for interaction between managed servers and the core, so no other firewall exception rules are needed.
3) Assume an inner network within the satellite facility, which is again protected by a second firewall from the outer servers in the satellite facility. Is it possible to use the cascading link feature here? I think of creating a new satellite facility within the outer one, and specify Y as the uplink for the inner satellite gateway Z. A connection is established by the gateway Z towards Y, so the firewall must allow outgoing TCP connection establishment towards Y and the specific port. This tunnel connection is persistent and is the only connection needed for interaction between managed servers in the inner facility and the core, so neither the inner nor the outer firewall needs additional rules.
4) The "SA 9.0 Overview and Architecture Guide" states that "Realms are interconnected by gateways in what can be described as a gateway mesh" What kind of gateways are these? Satellite gateways? How are realms related to cascading satellite links in 3)?