Fujitsu PRIMEQUEST 400 Series, Руководство по установке, Страница: 199 / 446

C122-E001-10EN 4-13
4.2 PSA Installation (Linux: Red Hat) (PRIMEQUEST 580A/540A/580/540/480/440)
4.2.3 Checking the firewall function (releasing ports)
If the partition port has not been released during the firewall setting, release the ports
required for PSA operation. Specifically, release the following ports for the
management LAN interfaces that have been set:
•
snmp port : udp / snmp or 161
• snmptrap port : udp / snmptrap or 162 (*1) (to the physical IP
address of the MMB (both systems))
•
web-mmb communication port : tcp / fj-webgate or 24450 (*2)
(to the virtual IP address of the MMB)
• rmcp+ port : udp/7000 to 7100 (*1) (to the physical IP
address of the MMB (both systems))
• localhost snmp port : udp/1025-65535
•
psa-mmb communication port : tcp/MMB side 5000 (Note 3) (to the virtual IP
address of the MMB)
icmp/icmp-type0, icmp-type8 (to the virtual IP
address of the MMB)
*1 Release the port only when a PCL linkage is used.
Use the iptables command for checking the firewall setting.
*2 web-mmb communication port
*3 This is communication for the MMB 5000 port.
Because the partition operates as the client under this communication, the port
number used at the partition side is undefined. (Any number from tcp/1025 to
65535 is selected for one port.)
Moreover, as indicated in the example below, no setting is required for port
number 5000 when connection startup from the partition is enabled, or when
communication is enabled for connection with the partition that has been
established.
(Example)iptables -A OUTPUT -m state --state NEW,ESTABLISH -j ACCEPT
iptables -A INPUT -m state --state ESTABLISH -j ACCEPT
Command syntax:
Use the iptables command or another command to release the port. For the usage, see
command man.
Command syntax:
/sbin/iptables –L
/usr/bin/man iptables