# EAM through Gateway Network Proxy

**URL:** <https://forum.inductiveautomation.com/t/eam-through-gateway-network-proxy/95654>\
**Category:** Ignition\
**Created:** [September 6, 2024, 8:01pm UTC](https://forum.inductiveautomation.com/t/eam-through-gateway-network-proxy/95654 "2024-09-06T20:01:12Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![tim.schultz](https://avatars.discourse-cdn.com/v4/letter/t/71e660/32.png) [@tim.schultz](https://forum.inductiveautomation.com/u/tim.schultz)\
**Post date:** [September 6, 2024, 8:01pm UTC](https://forum.inductiveautomation.com/t/eam-through-gateway-network-proxy/95654/1 "2024-09-06T20:01:12Z")

</div>

We have a variety of Ignition servers running in a hub and spoke model, with a centralized server serving as the proxy from all of the edge servers to an additional gateway that serves as the EAM controller:

Plant \<------\>  
Plant \<------\> Central ---- EAM  
Plant \<------\>

There is a firewall that prevents the Plant servers from directly accessing the EAM gateway, though we can see it via the Central Ignition proxy. Is there a setting that would force the plant-to-EAM connection to run through the Central gateway network configuration?

---

<div class="post-metadata">

**Author:** ![kcollins](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kcollins/32/19646_2.png) [@kcollins](https://forum.inductiveautomation.com/u/kcollins)\
**Post date:** [September 6, 2024, 11:14pm UTC](https://forum.inductiveautomation.com/t/eam-through-gateway-network-proxy/95654/2 "2024-09-06T23:14:26Z")

</div>

It sounds like you've already got this setup as you're describing. You might be able to verify it by looking at [Gateway Network Live Diagram](https://docs.inductiveautomation.com/docs/8.1/platform/gateway/status/connections/connections-gateway-network/gateway-network-diagram#gateway-network-diagram-overview) on one of the _Plant_ gateways.

You can set the number of proxy hops on the _Central_ gateway to `1`, though like I said, it already sounds like you've done that. Additionally, I'd recommend configuring [Proxy Rules](https://docs.inductiveautomation.com/docs/8.1/platform/gateway-network#gateway-network-proxy-rules) on that Central gateway such that each plant gateway _only_ sees _Central_ and _EAM_ gateways. This can help prevent extra service discovery and other chatter.

Once proxying is configured on _Central_, you should be able to configure the _Plant_ gateways as EAM Agents.

---

<div class="post-metadata">

**Author:** ![tim.schultz](https://avatars.discourse-cdn.com/v4/letter/t/71e660/32.png) [@tim.schultz](https://forum.inductiveautomation.com/u/tim.schultz)\
**Post date:** [September 6, 2024, 11:43pm UTC](https://forum.inductiveautomation.com/t/eam-through-gateway-network-proxy/95654/3 "2024-09-06T23:43:05Z")

</div>

Yes, I have proxy hops as 1, and tried 2 as well. When I try to configure the Plant server as an EAM agent, I can see my EAM controller as an option. But when I try to finish that setup, the connection times out. It’s like it is trying to direct connect without going through the proxy.