EMC EMC Unity All Flash, Руководство по настройке безопасности

Страница: 34 / 70

Port usage
Communications with the Unisphere and CLI interfaces are conducted through HTTPS
on port 443. Attempts to access Unisphere on port 80 (through HTTP) are
automatically redirected to port 443.
Storage system network ports
Table 10 on page 34 outlines the collection of network services (and the
corresponding ports) that may be found on the storage system.
Table 10 Storage system network ports
Service Protocol Port Description
FTP TCP 21 Port 21 is the control port on which the
FTP service listens for incoming FTP
requests.
SFTP TCP 22 Allows alert notifications through SFTP
(FTP over SSH). SFTP is a client/server
protocol. Users can use SFTP to
perform file transfers on a storage
system on the local subnet. Also
provides outgoing FTP control
connection. If closed, FTP will not be
available.
SSH/SSHD, VSI TCP 22 Allows SSH access (if enabled). Also
used for VSI plugin. If closed,
management connections using SSH will
be unavailable and VSI plugin will not be
available.
Dynamic DNS update TCP/UDP 53 Used to transmit DNS queries to the
DNS server in conjunction with the
Dynamic Host Control Protocol (DHCP).
If closed, DNS name resolution will not
work.
DHCP client UDP 67 Allows the storage system to act as a
DHCP client during the initial
configuration process and is used to
transmit messages from the client
(storage system) to the DHCP server to
automatically obtain management
interface information. Also, used to
configure DHCP for the management
interface of a storage system which has
already been deployed. If closed,
dynamic IP addresses will not be
assigned using DHCP.
DHCP client UDP 68 Allows the storage system to act as a
DHCP client during the initial
configuration process and is used to
Communication Security
34 EMC Unity All Flash, EMC Unity Hybrid, EMC UnityVSA 4.0 Security Configuration Guide