# PMM on server with Failover IP

**URL:** <https://forums.percona.com/t/pmm-on-server-with-failover-ip/5339>\
**Category:** PMM 1.x\
**Created:** [January 12, 2017, 4:20am UTC](https://forums.percona.com/t/pmm-on-server-with-failover-ip/5339 "2017-01-12T04:20:55Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![shoman](https://avatars.discourse-cdn.com/v4/letter/s/13edae/32.png) [@shoman](https://forums.percona.com/u/shoman)\
**Post date:** [January 12, 2017, 4:20am UTC](https://forums.percona.com/t/pmm-on-server-with-failover-ip/5339/1 "2017-01-12T04:20:55Z")

</div>

Situation:

PMM Server is running in a docker container on a server with a failover IP.

If I’m using the original ip of the server instead the failover ip all is working fine.

If I’m adding the the server with failover ip on a pmm client, i get tls handshake errors from the real ip of the server and not from the failover ip.

It’s strange.

- Connection: Client → Server is OK

but

- Connection: Client ← Server is not possible.

Forcing the failover ip with SNAT doesn’t change the situation.

Any idea?

---

<div class="post-metadata">

**Author:** ![Mykola](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/mykola/32/30_2.png) [@Mykola](https://forums.percona.com/u/Mykola)\
**Post date:** [January 12, 2017, 4:47am UTC](https://forums.percona.com/t/pmm-on-server-with-failover-ip/5339/2 "2017-01-12T04:47:21Z")

</div>

Hi shoman,

As I understand you have two networks, one public (failover) and private (real).

I have two theories:  
[LIST]  
[_]firewall issues (public IP has more strict rules)  
[_]routing issues (connect to the server is going via one network and answers are going via another network)  
[/LIST]  
Firewall: It is needed to allow traffic:  
[LIST]  
[_]from PMM client any port to PMM server 80 and 443 ports  
[_]from PMM server any port to PMM client port 42000 for linux:metrics  
[_]from PMM server any port to PMM client port 42002 for mysql:metrics  
[_]from PMM server any port to PMM client port 42003 for mongodb:metrics  
[\*]from PMM server any port to PMM client port 42004 for proxysql:metrics  
[/LIST] Routing: How to add PMM client over public network

```auto
pmm-admin config \
--server ELASTIC-IP-OF-SERVER \
--bind-address INTERNAL-IP-OF-CLIENT \
--client-address PUBLIC-IP-OF-CLIENT

```