HP Integrity Superdome 2 8/16 HP Smart Update Manager 5.3 User Guide - Page 59

Network ports used by HP SUM, hpsum.ini, Port=443, AlternatePort=63006, AlternatePort

Page 59 highlights

The only current limitation of HP SUM in a Linux IPv6 environment is that all remote target Linux-based servers must have the iptables-ipv6 RPM file installed. You can find the file on the distribution media for both Red Hat Enterprise Linux and Novell SUSE Linux Enterprise Server operating systems. HP SUM uses this file to open a port in the IPv6 firewall to communicate with the Linux system that runs HP SUM. Failure to install iptables-ipv6 results in HP SUM reporting a discovery failure unless you disable the firewall. Network ports used by HP SUM HP SUM requires that certain network ports are available for proper operation. If you lock down network ports, remember to ensure that the ports listed in the network port tables are open so that HP SUM works correctly when connecting to remote target servers and hosts. If you are unable to unlock these network ports, the only option is to run HP SUM locally and update network-based hosts, such as the OA, iLO, and VC, through their web interfaces. The SOAP server that HP SUM launches uses ports 443 or 63006. You can define your own ports by modifying the hpsum.ini file. 1. Open hpsum.ini in a text editor. You can find the file in the same folder as the HP SUM application. 2. Look for the following lines: Port=443 AlternatePort=63006 3. Change the AlternatePort to a port free of another web service. NOTE: For security reasons, HP does not recommend changing the main port from port 443. Table 2 HP SUM Windows network ports Ports Port 443 Ports 445 and 137/138/139 (Port 137 is used only if you are using NetBIOS naming service.) Port 62286 Ports 80 or 63000-63005 Description A secure data port used to transfer information. Connects to the remote ADMIN$ share on target servers. These are the standard ports Windows servers use to connect to the remote file shares. If you can connect remotely to a remote Windows file share on the target server, then you have the right ports open. Default for some internal communications. This port listens on the remote side if there is no conflict. If a conflict occurs, the next available port is used. Logs are passed to the target and retrieved through an internal secure web server that uses port 80 if it is available. If it is not available, the Web server uses first available port in the range of 60000-63005. This support allows updates of the iLO and VC firmware without the need to access the host server. It also allows the servers to run VMware or other virtualization platforms to update the iLO firmware without requiring a server reboot or a migration of the virtual machines to other servers. NOTE: HP SUM attempts to determine if a server running HP SUM also hosts a web server. In some cases, HP SUM cannot detect an existing web server and attempts to use port 80. If this occurs, installations that are using HP SUM will fail. If failure occurs, you can move HP SUM to another server or workstation that is not already running a web server. You can also disable the web server until HP SUM installations are complete. Network ports used by HP SUM 59

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79

The only current limitation of HP SUM in a Linux IPv6 environment is that all remote target Linux-based
servers must have the iptables-ipv6 RPM file installed. You can find the file on the distribution media
for both Red Hat Enterprise Linux and Novell SUSE Linux Enterprise Server operating systems. HP
SUM uses this file to open a port in the IPv6 firewall to communicate with the Linux system that
runs HP SUM. Failure to install iptables-ipv6 results in HP SUM reporting a discovery failure unless
you disable the firewall.
Network ports used by HP SUM
HP SUM requires that certain network ports are available for proper operation. If you lock down
network ports, remember to ensure that the ports listed in the network port tables are open so that
HP SUM works correctly when connecting to remote target servers and hosts. If you are unable to
unlock these network ports, the only option is to run HP SUM locally and update network-based
hosts, such as the OA, iLO, and VC, through their web interfaces.
The SOAP server that HP SUM launches uses ports 443 or 63006. You can define your own ports
by modifying the
hpsum.ini
file.
1.
Open
hpsum.ini
in a text editor. You can find the file in the same folder as the HP SUM
application.
2.
Look for the following lines:
Port=443
AlternatePort=63006
3.
Change the
AlternatePort
to a port free of another web service.
NOTE:
For security reasons, HP does not recommend changing the main port from port 443.
Table 2 HP SUM Windows network ports
Description
Ports
A secure data port used to transfer information.
Port 443
Connects to the remote ADMIN$ share on target servers. These are the
standard ports Windows servers use to connect to the remote file shares. If
Ports 445 and 137/138/139 (Port
137 is used only if you are using
NetBIOS naming service.)
you can connect remotely to a remote Windows file share on the target server,
then you have the right ports open.
Default for some internal communications. This port listens on the remote side
if there is no conflict. If a conflict occurs, the next available port is used.
Port 62286
Logs are passed to the target and retrieved through an internal secure web
server that uses port 80 if it is available. If it is not available, the Web server
Ports 80 or 63000–63005
uses first available port in the range of 60000-63005. This support allows
updates of the iLO and VC firmware without the need to access the host server.
It also allows the servers to run VMware or other virtualization platforms to
update the iLO firmware without requiring a server reboot or a migration of
the virtual machines to other servers.
NOTE:
HP SUM attempts to determine if a server running HP SUM also hosts
a web server. In some cases, HP SUM cannot detect an existing web server
and attempts to use port 80. If this occurs, installations that are using HP SUM
will fail. If failure occurs, you can move HP SUM to another server or
workstation that is not already running a web server. You can also disable
the web server until HP SUM installations are complete.
Network ports used by HP SUM
59