Red Hat CLUSTER FOR ENTERPRISE LINUX 5.0, Руководство по настройке

Страница: 25 / 114

If a cluster node is running luci, port 11111 should already have been enabled.
IP Port
Number
Protocol Component Reference to Example of
iptables
Rules
8084 TCP luci (Conga user interface
server)
Example 2.2, “Port 8084: luci
(Cluster Node or Computer
Running luci)”
11111 TCP
ricci
(Conga remote agent) Example 2.3, “Port 11111: ricci
(Cluster Node and Computer
Running luci)”
Table 2.2. Enabled IP Ports on a Computer That Runs luci
2.3. Examples of
iptables
Rules
This section provides
iptables
rule examples for enabling IP ports on Red Hat Cluster nodes
and computers that run luci. The examples enable IP ports for a computer having an IP
address of 10.10.10.200, using a subnet mask of 10.10.10.0/24.
Note
Examples are for cluster nodes unless otherwise noted in the example titles.
iptables -A INPUT -i 10.10.10.200 -m multiport -m state --state NEW -p udp
-s 10.10.10.0/24 -d 10.10.10.0/24 --dports 5404,5405 -j ACCEPT
Example 2.1. Port 5404, 5405: cman
-A INPUT -i 10.10.10.200 -m state --state NEW -m multiport -p tcp -s
10.10.10.0/24 -d 10.10.10.0/24 --dports 8084 -j ACCEPT
Example 2.2. Port 8084: luci (Cluster Node or Computer Running luci)
-A INPUT -i 10.10.10.200 -m state --state NEW -m multiport -p tcp -s
Examples of
iptables
Rules
15