Table 7-22
Firewall rules for traffic coming into the 5620 SAM Auxiliary Cflowd
Server(s) from the Managed Network
Protocol
From port
On
To port
On
Notes
UDP
Any
Managed Network
4739
Auxiliary Server(s)
Cflowd flow records
from 7750 routers to
5620 SAM Cflowd
Auxiliary Server.
When there is a firewall at the interface that reaches the 5620 SAM Client(s) (NIC 3 on
), the following rules apply for FTP access to the 5620 SAM Auxiliary
by the OSS Client.
Table 7-23
Firewall rules for OSS Client communication to the 5620 SAM
Auxiliary Server(s)
Protocol
From port
On
To port
On
Notes
TCP
Any
SAM-O Client
21/22
Auxiliary Server(s)
(S)FTP requests
(logToFile statistics, and
call trace information)
TCP
21/22
SAM-O Client
Any
Auxiliary Server(s)
(S)FTP responses
TCP
> 1023
SAM-O Client
Any
Auxiliary Server(s)
Passive (S)FTP ports for
data transfer (See
)
Only for 5620 SAM Auxiliary Call Trace Collectors
TCP
Any
SAM-O Client
8086
Auxiliary Server(s)
HTTP interface for
WebDAV for WTA
TCP
Any
SAM-O Client
8445
Auxiliary Server(s)
HTTPS interface for
WebDAV for WTA
TCP
Any
SAM-O
3GPP-compliant Client
9735
Auxiliary Server(s)
Corba interface to
access Call Trace
information
Table 7-24
FTP/SFTP Firewall rules for the 5620 SAM Cflowd Auxiliary Server(s)
Protocol
From port
On
To port
On
Notes
TCP
Any
Auxiliary Server(s)
21/22
IPDR File Server
(S)FTP requests
(logToFile statistics, and
call trace information)
TCP
21/22
Target File Server
Any
Auxiliary Server(s)
(S)FTP responses
Security
Firewall and NAT rules
....................................................................................................................................................................................................................................
....................................................................................................................................................................................................................................
5620 SAM
3HE-09809-AAAG-TQZZA 13.0 R7
Issue 1
December 2015
7-25