HP AE370A - Brocade 4Gb SAN Switch 4/12, Administrator'S Manual

Page: 87 / 447

Fabric OS 5.2.x administrator guide 87
Port Configuration
lists the ports used. This table provides the information to make it clearer when configuring the switch,
taking into consideration firewalls and other devices that may sit between switches in the fabric or between
the managers and the switch.
Configuring for the SSL protocol
Fabric OS v4.4.0 and later supports Secure Sockets Layer (SSL) protocol, which provides secure access to
a fabric through Web-based management tools like Web Tools. SSL support is a standard Fabric OS
feature; it is independent of Secure Fabric OS, which requires a license and separate certification.
Switches configured for SSL grant access to management tools through hypertext transfer protocol-secure
links (which begin with
https://
) instead of standard links (which begin with
http://
).
SSL uses Public Key Infrastructure (PKI) encryption to protect data transferred over SSL connections. PKI is
based on digital certificates obtained from an Internet Certificate Authority (CA), which acts as the trusted
key agent.
Certificates are based on the switch IP address or Fully Qualified Domain Name (FQDN), depending on
the issuing CA. If you change a switch IP address or FQDN after activating an associated certificate, you
might have to obtain and install a new certificate. Check with the CA to verify this possibility, and plan
these types of changes accordingly.
Table 21 Port information
Port Type Common use Comment
22 TCP SSH
23 TCP Telnet
Use the
configure
command to
disable the telnet service.
37 TCP NTP
80 TCP HTTP
Use the
configure
command to
disable the port.
111 TCP sunrpc
This port is used by Platform API.
Use the
configure
command to
enable or disable daemons.
161 UDP SNMP
Disable the SNMP service on the
remote host if you do not use it, or
filter incoming UDP packets going to
this port.
443 TCP HTTP
Supported service (Web Tools).
Disable this port using the
config-
ure
command.
512 TCP exec
513 TCP login
514 TCP shell
897 TCP
This port is used by the Platform API.
Disable this port using the
configure
command.