Alcatel-Lucent 5620, Руководство по планированию

Страница: 121 / 144

Table 7-16 Firewall rules for traffic coming into the 5620 SAM Database
Server(s) from the 5620 SAM Server(s) and 5620 SAM Auxiliary
Statistics / Call Trace Server(s)
Protocol From port On To port On
TCP Any Server(s) & Auxiliary
Server(s) 1523 Database Server(s)
TCP Any Server(s) & Auxiliary
Server(s) 9002 Database Server(s)
TCP > 32768 Server(s) & Auxiliary
Server(s) 9003 Database Server(s)
When there is a firewall at the interface that reaches the SAM management network (NIC
1 on
Figure 8-2, “Distributed 5620 SAM Server/Database deployment with multiple
network interfaces” (p. 8-4) ) and redundancy is configured, the following rules apply.
Configuration needs to be in both directions to handle an activity switch.
Table 7-17 Firewall rules for traffic between the 5620 SAM Database Servers
(redundant only)
Protocol From port On To port On
TCP Any Database Servers 22 Database Servers
TCP 22 Database Servers Any Database Servers
TCP Any Database Servers 1523 Database Servers
TCP 1523 Database Servers > 9000 Database Servers
TCP 9002 Database Servers 9002 Database Servers
TCP 9003 Database Servers 9003 Database Servers
5620 SAM Auxiliary Server firewall and NAT rules
When there is a firewall at the interface that reaches the managed network (NIC 2 on
Figure 8-2, “Distributed 5620 SAM Server/Database deployment with multiple network
interfaces” (p. 8-4)
), the following rules apply.
Table 7-18 SNMP Firewall rules for traffic coming into the 5620 SAM Auxiliary
Statistics Collector Server(s) from the Managed Network
Protocol From port On To port On Notes
UDP >32768 Auxiliary Server(s) 161 Managed Network SNMP request
UDP 161 Managed Network > 32768 Auxiliary Server(s) SNMP response
Security Firewall and NAT rules
....................................................................................................................................................................................................................................
....................................................................................................................................................................................................................................
5620 SAM
3HE-09809-AAAG-TQZZA 13.0 R7
Issue 1
December 2015
7-23