HP ProLiant Support Pack - Manual (Page 38)

Troubleshooting 38
o gcc-2.96-108.1 or later
o cpp-2.96-108.1 or later
o binutil-2.11.90.0.8 or later
o glibc-devel-2.2.4-26 or later
• How do I use HP SUM over a firewall? Which ports will I need to open? Are they configurable?
The ports that HP SUM uses cannot be configured. When HP SUM port initiates communications to
remote targets, it uses several well-known ports depending on the operating system. For Linux, HP SUM
uses port 22 (SSH) to start communications with the remote target.
HP SUM uses defined ports to communicate between the remote target and the workstation where HP
SUM is executing. When you run HP SUM, it uses the administrator/root privileges to dynamically
register the port with the default Linux firewalls for the length of the application execution, and then
closes and deregisters the port. All communications are over a SOAP server using SSL with additional
functionality to prevent man-in-the-middle, packet spoofing, packet replay, and other attacks. The
randomness of the port helps prevent port scanning software from denying service to the application.
The SOAP server is deployed on the remote target using the initial ports (138, 445, and 22) and then
allocates another independent port for its communications back to the workstation where HP SUM s
running. During shutdown of HP SUM, the SOAP server is shutdown and removed from the target
server, leaving the log files.
To deploy software to remote targets on their secure networks using HP SUM, the following ports are
used.
Ports Description
Port 22 This port establishes a connection to the remote Linux server using SSH.
Ports 60000-60007
Random ports are used in this range to pass messages back and forth between the
local and remote systems using SSL. These ports are used on the system running HP
SUM to send data to the target server.
Several internal processes within HP SUM automatically use the port from 60000
when no other application uses it. If a port has a conflict, the manager uses the next
available port. HP does not guarantee that the upper limit is 60007 because the
limit depends on how many target devices are selected for installation.
Ports 61000-61007 These ports are used to communicate from the target server to the system running HP
SUM. The same mechanism is used by the remote access code as the 60000 ports,
with the first trial port as 61000. The upper limit might not be 61007 when a
conflict occurs.
In the case of IPv4-only and one NIC, the lowest available port is used by HP SUM
to pass information between processes on the local workstation where HP SUM is
executed, and the next available port is used to receive messages from remote
servers.
Port 62286 This port is the default for some internal communications. This port is listening on the
remote side if a conflict does not exist. If a conflict occurs, the next available port is
used.
Ports 80 or
63000-63005
The logs are passed to the target, and the logs are retrieved using an internal secure
web server that uses port 80 (if available) or a random port between 63000 and
63005, if port 80 is not available.
This support enables updates of the iLO firmware without the need to access the host
server and enables servers running VMware or other virtualization platforms to
update their iLO without rebooting their server or migrating their virtual machines to
other servers.