McDATA Eclipse 2640 SAN, Administration And Configuration Manual

Page: 45 / 276

2
Configuring System Basics
2-21
Configuring IP Addresses
connection is established are the TCP segments allowed to be
transmitted from the sender to the receiver.
A firewall can be used to block the establishment of TCP for some
applications while permitting other applications to transmit data. To
accomplish this, firewalls frequently use a combination of TCP port
numbers and IP addresses. Port numbers are used to identify the
sending and receiving application. The port number, along with the
source and destination IP addresses, uniquely identifies each
connection. The TCP header contains two 16 bit fields for the source
port number and the destination port number.
When firewalls are used, it is sometimes necessary to program the
firewall with the port numbers used by iFCP or iSCSI; otherwise the
firewall may block the traffic. The following are guidelines for iFCP
and iSCSI TCP ports and firewalls:
Port Numbers Used by SAN Routers
• These iFCP TCP ports must be opened across the network when
working with firewalls:
E/OSi Firmware: 3.X and above
Control Data -
hex: 9101 decimal: 37121
hex: 9102 decimal: 37122
Data -
hex: D5C decimal: 3420
• These iSCSI TCP ports must be opened across the network when
working with firewalls:
E/OSi Firmware: All
Control and Data -
hex: CBC decimal: 3260
Open Ports
The following datapath ports must be open if you want to manage
across a firewall using Element Manager:
• HTTP (80)
• SNMP Protocol (161)
• SNMP Traps (162)
• iSCSI and iFCP information (37009)