IBM DS8700, Введение и руководство по планированию

Страница: 227 / 256

Table 72. Outbound (call home) work sheet (continued)
Item or Setting Instructions MC1 MC2 (if applicable)
Although any combination of modes works, usually either By Internet VPN or By Internet SSL is configured,
depending on your companies network security policies. It is not required to enable those two modes together.
Selecting the modem is always recommended as a backup path for VPN or SSL and as a vehicle for unattended
remote access.
1
Selecting By Internet VPN means that you allow your management console to use VPN over an
Internet connection when a connection is established to the IBM service center. The IBM VPN implementation is a
client/server VPN that is only active when it is needed. The two VPN endpoints are on the management console
and on the IBM Boulder and the IBM Rochester VPN servers. There is no need for additional VPN hardware in
your network infrastructure.
If you use VPN, the management console must have access through your Internet firewall to the following servers:
v
IBM Boulder VPN server (IP address 207.25.252.196)
v
IBM Rochester VPN server (IP address 129.42.160.16)
The first package is always sent from the management console. Only the following ports need to be open to the
mentioned servers to use VPN:
v Port 500 UDP
v Port 4500 UDP
2
If you select By Internet SSL , you allow your management console to use a secure sockets layer (SSL) connection
over the Internet when a connection is established to the IBM service center. You must open port 443:tcp in your
network infrastructure for the following destination servers:
Americas
v
129.42.160.48
v
129.42.160.49
v
207.25.252.200
v
207.25.252.204
Non-Americas
v 129.42.160.48
v 129.42.160.50
v 207.25.252.200
v 207.25.252.205
Problem Reporting Servers
v
129.42.26.224
v
129.42.34.224
v
129.42.42.224
Configuration File Servers
v 129.42.56.216
v 129.42.58.216
v 129.42.60.216
Your IBM service representative can also provide you with additional information.
If VPN or SSL connectivity are not options, you can configure FTP to offload log and trace data faster.
For information about the IBM VPN and SSL implementation including technical details, access the following
website: www.ibm.com/support/docview.wss?uid=ssg1S1002693
Appendix E. Remote support work sheets
205