Brocade Fabric Manager Administrator's Guide v6.1.0 (53-10000610-02, June 2008)

Fabric Manager Administrator’s Guide 13
53-10000610-02
Planning for the installation
2
Uncomment the following lines in connservice.conf file under <FabricManager Install
folder>\server\conf
and provide port numbers to be used by SAN management connector to
connect to switch. Lines to uncomment include:
#wrapper.java.additional.12=-Dfa.rpc.client.port.range=24610-24610
#wrapper.java.additional.13=-Dfa.event.server.port.range=24611-24611
#wrapper.java.additional.14=-Dfa.arp.server.port.range=24612-24612
These ports should be unblocked by the firewall.
The FTP client in Fabric Manager connects to the FTP server in passive mode, and the FTP server
uses different ports to transfer data from the client to server during operations such as firmware
import. This can cause a problem if there is a firewall between the client and the server because
the ports to be unblocked would change every time.
The FTP server configuration file <FabricManager Install folder>\fmftp\apps\ftp\conf\ftpd.conf
will have an entry to specify the range of ports. You can allocate up to 20 ports in this entry:
FtpServer.server.config.data.port.pool=0
To run the application in a firewall environment, update this entry to specify the ports to be used by
the FTP server to allow passive connection, then restart the services from SMC.
An example entry would look like the following:
FtpServer.server.config.data.port.pool=10002,10003,10004
• 22 TCP SSH
• 23 TCP Telnet/SecTelnet
• HTTP and HTTPS port numbers (by default, these
are ports 80 and 443, respectively)
TCP This is the default setting but can be
changed either during installation or after
using SMC. If a non-default port is used
then open that port instead.
• 111 TCP RPC (FAL-API)
If a firewall exists between the FM server and Authentication Server:
The only ports needed are for the type of authentication server set up during Installation of FM Server or changed through
SMC.
• HTTP and HTTPS port numbers (by default, these
are ports 80 and 443, respectively)
TCP This is the default setting but can be
changed either during installation or after
using SMC. If a non-default port is used
then open that port instead.
If a firewall exists between the FM server and other external servers
Should only be required if this feature is being used.
• 514 UDP External Syslog server that is retrieving
messages from switch and forwarding
them to the FMServer syslog. This is the
default setting but can be changed either
during installation or after using SMC. If a
non-default port is used then open that
port instead.
1. The file is in the following location: <Fabric Manager Install folder>\fmftp\apps\ftp\conf.
TABLE 3 Ports required to be opened for proper communication when using a firewall (Continued)
Port Number TCP, UDP or
Both
Description