If PSA version 2.8.0 or earlier is installed when the iptables service has stopped, the existing settings are cleared.
Deal with this problem in the following way.
- To use the iptables service:
After making the settings to open the ports necessary for the system, open the necessary ports. For details,
see
TABLE 6.5 Ports to open for the PSA-to-MMB communication LAN interfaces
.
- To use a firewall tool other than iptables:
The setting of the PSA-to-MMB communication LAN (PSA-MMB_LAN chain) has been added to iptables.
Delete it manually, and then open the necessary ports. For details, see
TABLE 6.5 Ports to open for the PSA-
to-MMB communication LAN interfaces
PSA-to-MMB communication LAN interfaces (for PSA version 2.6 or later)
The firewall settings vary depending on the environment. The settings shown in the following procedure are an
example of settings for PSA-to-MMB communication.
Example: REJECT setting in INPUT and FORWARD
# iptables -L -n
Chain INPUT (policy ACCEPT)
target prot opt source destination
ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
ACCEPT icmp -- 0.0.0.0/0 0.0.0.0/0
ACCEPT all -- 0.0.0.0/0 0.0.0.0/0
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:22
REJECT all -- 0.0.0.0/0 0.0.0.0/0 reject-with icmp-host-
prohibited
Chain FORWARD (policy ACCEPT)
target prot opt source destination
REJECT all -- 0.0.0.0/0 0.0.0.0/0 reject-with icmp-host-
prohibited
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
Chain PSA-MMB_LAN (2 references)
target prot opt source destination
ACCEPT all -- 0.0.0.0/0 0.0.0.0/0
ACCEPT all -- 0.0.0.0/0 0.0.0.0/0
ACCEPT icmp -- 0.0.0.0/0 0.0.0.0/0 icmp type 8
ACCEPT icmp -- 0.0.0.0/0 0.0.0.0/0 icmp type 0
ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:161
ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp spt:161
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:24450
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:24450
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:5000
PRIMEQUEST 1000 Series Installation Manual
APPENDIX B Manual PSA Installation and Uninstallation
239
C122-E107-09EN