HP Integrity Superdome 2 8/16 HP Smart Update Manager 5.0 User Guide - Page 67

Enabling ports in HP Smart Update Manager

Get HP Integrity Superdome 2 8/16 PDF manuals and user guides View all HP Integrity Superdome 2 8/16 manuals
Add to My Manuals
Save this manual to your list of manuals

Page 67 highlights

Enabling ports in HP Smart Update Manager The ports that HP SUM uses cannot be configured. When HP SUM initiates communications to remote targets, it uses several well-known ports, depending on the operating system. For Windows, ports 138 and 445 are used to connect to remote targets (equivalent to remote and file print share functionality). For Linux, port 22 (SSH) is used to start the communications with the remote target. HP SUM uses defined ports to communicate between the remote target and the workstation where HP SUM is executing. When you run HP SUM, the administrator/root privileges are used to dynamically register the port with the default Windows and Linux firewalls for the length of the application execution, then the port is closed and deregistered. All communications are over a SOAP server using SSL with additional functionality to prevent man-in-the-middle, packet spoofing, packet replay, and other attacks. The randomness of the port helps prevent port scanning software from denying service to the application. The SOAP server is deployed on the remote target using the initial ports described above (ports 138, 445, and 22) and then allocates another independent port as documented below for its communications back to the workstation where HP SUM is running. During shutdown of HP SUM, the SOAP server is shutdown and removed from the target server, leaving the log files. To deploy software to remote targets on their secure networks using HP SUM, the following ports are used. Windows Ports Ports 445 and 137/138/139 (Port 137 is used only if you are using NetBIOS naming service.) Ports 60000-60007 Ports 61000-61007 Port 62286 Description These ports are needed to connect to the remote ADMIN$ share on target servers. These are the standard ports Windows servers use to connect to remote file shares. If you can connect remotely to a remote Windows file share on the target server, the proper ports are open. Random ports are used in this range to pass messages back and forth between the local and remote systems using SSL. These ports are used on the system running HP SUM to send data to the target server. Several internal processes within HP SUM automatically use port 60000 when it is available. If there is a port conflict, the manager uses the next available port. There is no guarantee that the upper limit is 60007 as it is dependent on how many target devices are selected for installation. These ports are used from the target server back to the system running HP SUM. The same mechanism is used by the remote access code as the 60000 ports, with the first trial port being 61000. There is no guarantee that the upper limit is 61007 when a conflict occurs. For the case of ipv4-only and one NIC, the lowest available port is used by HP SUM to pass information between processes on the local workstation where HP SUM is executed, and the next available port is used to receive messages from remote servers. This port is the default port for some internal communications. It is the listening on the remote side if there is no conflict. If a conflict occurs, the next available port is used. Troubleshooting 67

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
Troubleshooting 67
Enabling ports in HP Smart Update Manager
The ports that HP SUM uses cannot be configured. When HP SUM initiates communications to remote targets,
it uses several well-known ports, depending on the operating system. For Windows, ports 138 and 445 are
used to connect to remote targets (equivalent to remote and file print share functionality). For Linux, port 22
(SSH) is used to start the communications with the remote target.
HP SUM uses defined ports to communicate between the remote target and the workstation where HP SUM
is executing. When you run HP SUM, the administrator/root privileges are used to dynamically register the
port with the default Windows and Linux firewalls for the length of the application execution, then the port is
closed and deregistered. All communications are over a SOAP server using SSL with additional functionality
to prevent man-in-the-middle, packet spoofing, packet replay, and other attacks. The randomness of the port
helps prevent port scanning software from denying service to the application. The SOAP server is deployed
on the remote target using the initial ports described above (ports 138, 445, and 22) and then allocates
another independent port as documented below for its communications back to the workstation where HP
SUM is running. During shutdown of HP SUM, the SOAP server is shutdown and removed from the target
server, leaving the log files.
To deploy software to remote targets on their secure networks using HP SUM, the following ports are used.
Windows
Ports
Description
Ports 445 and 137/138/139
(Port 137 is used only if you are
using NetBIOS naming service.)
These ports are needed to connect to the remote ADMIN$ share on
target servers. These are the standard ports Windows servers use to
connect to remote file shares. If you can connect remotely to a remote
Windows file share on the target server, the proper ports are open.
Ports 60000-60007
Random ports are used in this range to pass messages back and forth
between the local and remote systems using SSL. These ports are used on
the system running HP SUM to send data to the target server.
Several internal processes within HP SUM automatically use port 60000
when it is available. If there is a port conflict, the manager uses the next
available port. There is no guarantee that the upper limit is 60007 as it
is dependent on how many target devices are selected for installation.
Ports 61000-61007
These ports are used from the target server back to the system running HP
SUM. The same mechanism is used by the remote access code as the
60000 ports, with the first trial port being 61000. There is no guarantee
that the upper limit is 61007 when a conflict occurs. For the case of
ipv4-only and one NIC, the lowest available port is used by HP SUM to
pass information between processes on the local workstation where HP
SUM is executed, and the next available port is used to receive messages
from remote servers.
Port 62286
This port is the default port for some internal communications. It is the
listening on the remote side if there is no conflict. If a conflict occurs, the
next available port is used.