ServerView Resource Orchestrator Cloud Edition V3.1.0 Design Guide

Appendix A Port List

This appendix explains the ports used by Resource Orchestrator.

The following figure shows the connection configuration of Resource Orchestrator components.

Figure A.1 Connection Configuration

Resource Orchestrator ports should be set up during the system configuration of each related server.
For details on setup, refer to the following:

• Changing Admin Server Port Numbers

  • "6.2 Changing Port Numbers" in the "User's Guide for Infrastructure Administrators (Resource Management) CE"

  • "8.3 Changing Admin Server Port Numbers" in the "Operation Guide CE"

• Changing Managed Server Port Numbers

  • "7.1.6 Changing Port Numbers" in the "User's Guide for Infrastructure Administrators (Resource Management) CE"

If any of those ports is already used by another service, allocate a different port number.

The following tables show the port numbers used by Resource Orchestrator. Communications should be allowed for each of these ports for Resource Orchestrator to operate properly.

Table A.1 Admin Client

Function Overview	Source				Destination				Protocol
	Server	Service	Port	Modification	Server	Service	Port	Modification
ROR console	Admin client	-	Variable value	Not possible	Admin server	rcxweb	23461	Not possible	tcp
ServerView Operations Manager (*)	Admin client	-	Variable value	Not possible	Admin server	http	3169	Not possible	tcp
						https	3170
Interstage Business Process Manager Analytics operation management console						http	80	Not possible	tcp
ROR console - L-Platform - Template - Tenant Management - Request - Usage Condition - Dashboard	Admin client	-	Variable value	Not possible	Admin server	rcxctext	3500	Possible	tcp
						rcxctext2	3501	Possible	tcp
Systemwalker Runbook Automation Web console	Admin client	-	Variable value	Not possible	Admin server	http	80	Possible	tcp

* Note: Required for PRIMERGY servers.

Table A.2 Firewall

Function Overview	Direction	Source		Destination		Protocol
		Server	Port	Server	Port
ROR console	One-way	Admin client	Variable value	Admin server	23461	tcp
ServerView Operations Manager (*1)					3169
					3170
Interstage Business Process Manager Analytics operation management console	One-way	Admin client	Variable value	Admin server	80	tcp
ROR console - L-Platform - Template - Request - Tenant Management - Usage Condition - Dashboard	One-way	Admin client	Variable value	Admin server	3500	tcp
					3501	tcp
Systemwalker Runbook Automation Web console	One-way	Admin client	Variable value	Admin server	80	tcp
ROR CE e-mail delivery (*2)	One-way	Admin server	Variable value	Mail server	25	smtp
Systemwalker Runbook Automation e-mail delivery (*2)	One-way	Admin server	Variable value	Mail server	25	smtp
ROR CE API	One-way	Admin client	Variable value	Admin server	8014 8015	tcp

*1: Required for PRIMERGY servers.
*2: When a mail server is not in an admin LAN

Table A.3 Admin Server

Function Overview	Source				Destination				Protocol
	Server	Service	Port	Modification	Server	Service	Port	Modification
ROR console	Admin client	-	Variable value	Not possible	Admin server	rcxweb	23461	Not possible	tcp
ServerView Operations Manager (*1)						http	3169	Not possible
						https	3170
Internal control	Admin server	-	Variable value	-	Admin server (*2)	- (*3)	3172	Not possible	tcp
		-	Variable value	-		nfdomain	[Windows Manager] 23457 [Linux Manager] 23455	Possible	tcp
		-	Variable value	-		rcxmgr	23460	Possible	tcp
		-	Variable value	-		rcxtask	23462	Possible	tcp
		-	Variable value	-		rcxmongrel1	23463	Possible	tcp
						rcxmongrel2	23464	Possible	tcp
						rcxdb	23465	Possible	tcp
						rcxmongrel3 (*4)	23466	Possible	tcp
						rcxmongrel4 (*4)	23467	Possible	tcp
						rcxmongrel5 (*4)	23468	Possible	tcp
Monitoring and controlling resources	Admin server	-	Variable value	-	Managed server (Physical OS)	nfagent	23458	Possible	tcp
		-	Variable value	-	Server management unit (management blade)	snmp	161	Not possible	udp
		-	Variable value	-		snmptrap	162	Not possible	udp
		-	Variable value	-	Server management unit (Remote Management Controller)	ipmi	623	Not possible	udp
		-	Variable value	-		snmptrap	162	Not possible	udp
		-	Variable value	-		telnet	23	Not possible	tcp
		-	Variable value	-	Server management unit (Remote Management Controller (XSCF))	snmp	161	Not possible	udp
		-	Variable value	-		snmptrap	162	Not possible	udp
		-	Variable value	-		ssh	22	Not possible	tcp
		-	Variable value	-	L2 Switch	telnet	23	Not possible	tcp
		-	Variable value	-		ping	-	-	ICMP
		-	Variable value	-		snmp	161	Not possible	tcp,udp
		-	Variable value	-	Firewall	telnet	23	Not possible	tcp
		-	Variable value	-		ping	-	-	ICMP
		-	Variable value	-		snmp	161	Not possible	tcp,udp
		-	Variable value	-	Server load balancer	telnet	23	Not possible	tcp
		-	Variable value	-		ping	-	-	ICMP
		-	Variable value	-		snmp	161	Not possible	tcp,udp
ServerView Agents (*1)	Admin server	-	Variable value	-	Managed server	snmp	161	Not possible	tcp udp
	Managed server	-	Variable value	-	Admin server	snmptrap	162	Not possible	udp
Backup, restore, Cloning	Admin server	-	4972	Not possible	Managed server	-	4973	Not possible	udp
	Managed server	-	4973	Not possible	Admin server	-	4972	Not possible	udp
		bootpc	68	Not possible		bootps	67	Not possible	udp
		-	Variable value	-		pxe	4011	Not possible	udp
		-	Variable value	-		tftp	69	Not possible	udp
	Admin server	-	Variable value	-	Admin server	-	4971	Not possible	tcp
Backup, cloning (collection)	Managed server	-	14974 - 14989 (*5) 4974 - 4989 (*6)	-	Admin server	-	14974 - 14989 (*5) 4974 - 4989 (*6)	-	udp
Restore, cloning (deployment)	Managed server	-	Variable value	-	Admin server	-	14974 - 14989 (*5) 4974 - 4989 (*6)	-	tcp udp
Monitoring server power status	Admin server	-	-	-	Managed server	-	-	-	ICMP (*7)
VMware ESX/ESXi, vCenter Server (*8)	Admin server	-	Variable value	-	Managed server, vCenter Server	-	443	Not possible	tcp
System Center Virtual Machine Manager	Admin server	-	Variable value	-	System Center Virtual Machine Manager	-	80	Not possible	tcp
						WinRM	443 5985
OpenDS	Admin server	-	Variable value	-	OpenDS	ldaps	1474	Possible	tcp
		-	Variable value	-		ldap	1473	Not possible	tcp
Active Directory	Admin server	-	Variable value	-	Active Directory	ldaps	636	Possible	tcp
Discover LAN switches	Admin server	-	-	-	LAN switch	-	-	-	ICMP
Collection of performance information	Admin server	-	-	-	Managed server (VMware ESX/ESXi)	https	443	Not possible	tcp
Collection of performance information	Managed server (Hyper-V/Solaris container/physical OS)	-	-	-	Admin server	-	2344	Not possible	tcp
Collection of performance information	Admin server	-	-	-	Managed server (Xen)	ssh	22	Possible	tcp
Storage of performance data configuration definitions	Admin server	-	-	-	Admin server	-	2344	Not possible	tcp
Acquisition of performance information from PDB	Admin server	-	-	-	Admin server	-	2345	Not possible	tcp
CMDB	Admin server	-	13300 13301 - 13322 13323 - 13325 13326 - - - - -	Not possible	Admin server	-	13300 13301 13321 - - 13324 - - 13327 13328 13331 13332 13333	Not possible	tcp
Interstage Business Process Manager Analytics rule engine	Admin server	-	-	-	Admin server	-	40320	Not possible	tcp
ROR console - L-Platform - Template - Tenant Management - Request	Admin client	-	Variable value	Not possible	Admin server	rcxctext	3500	Not possible	tcp
						rcxctext2	3501	Possible (*9)	tcp
Systemwalker Runbook Automation Web console	Admin client	-	Variable value	Not possible	Admin server	http	80	Possible (*9)	tcp
ROR CE management function	Admin server	-	Variable value	Not possible	Admin server	rcxcfvsys	8013	Possible (*9)	tcp
ROR CE API	Admin client	-	Variable value	Not possible	Admin server	rcxcfapi rcxctacnt	8014 8015	Possible (*9)	tcp
ROR CE for internal control	Admin server	-	Variable value	-	Admin server	rcxctrestchg	3550	Not possible	tcp
	Admin server	-	Variable value	-	Admin server	rcxctint	3551	Not possible	tcp
	Admin server	-	Variable value	-	Admin server	rcxctdbchg	5441	Possible (*9)	tcp
	Admin server	-	Variable value	-	Admin server	rcxctdbdsb	5442	Not possible	tcp
	Admin server	-	Variable value	-	Admin server	CORBA	8002	Possible (*9)	tcp
	Admin server	-	Variable value	-	Admin server	Servlet	9 available port numbers are used from Port 9000/tcp	Not possible	tcp
ROR CE e-mail delivery	Admin server	-	Variable value	-	Mail server	smtp	25	Possible	tcp
Systemwalker Runbook Automation e-mail delivery	Admin server	-	Variable value	-	Mail server	smtp	25	Possible	tcp
Interstage management console	Admin client	-	Variable value	-	Admin server	http	12000	Possible	tcp
Interstage Java EE Admin console	Admin server	-	Variable value	-	Admin server	-	12001	Possible (*10)	tcp
Systemwalker Runbook Automation file transfer platform	Admin server	-	Variable value	-	Admin server	-	9664	Possible	tcp
Systemwalker Runbook Automation for internal control	Admin server	-	Variable value	-	Admin server	CORBA	8002	Possible (*9)	tcp
	Admin server	-	Variable value	-	Admin server	-	9657	Not possible	tcp
	Admin server	-	Variable value	-	Admin server	-	12200	Not possible	tcp
	Admin server	-	Variable value	-	Admin server	-	12210	Not possible	tcp
	Admin server	-	Variable value	-	Admin server	-	18005	Not possible	tcp
	Admin server	-	Variable value	-	Admin server	-	18009	Not possible	tcp
	Admin server	-	Variable value	-	Admin server	-	28080	Possible (*11)	tcp
	Admin server	-	Variable value	-	Admin server	-	23600	Possible (*12)	tcp
	Admin server	-	Variable value	-	Admin server	-	23601	Possible (*13)	tcp
	Admin server	-	Variable value	-	Admin server	-	23602	Possible (*14)	tcp
	Admin server	-	Variable value	-	Admin server	-	8686	Possible (*15)	tcp
	Admin server	-	Variable value	-	Admin server	-	9690	Possible (*16)	tcp
	Admin server	-	Variable value	-	Admin server	-	9691	Possible (*16)	tcp
	Admin server	-	Variable value	-	Admin server	-	7676	Not possible	tcp
	Admin server	-	Variable value	-	Admin server	-	23700	Not possible	tcp
Network Device Automatic Configuration	Admin server	-	Variable value	-	L2 Switch	ftp	21	Not possible	tcp
						ssh	22	Not possible	tcp
						telnet	23	Not possible	tcp
		-	Variable value	-	Firewall	ssh	22	Not possible	tcp
						telnet	23	Not possible	tcp
		-	Variable value	-	Server load balancer	ssh	22	Not possible	tcp
						telnet	23	Not possible	tcp
Network Device Operation	Admin server	-	Variable value	-	Server load balancer	ssh	22	Not possible	tcp
						telnet	23	Not possible	tcp
Open the web management window	Admin server	-	Variable value	-	L2 Switch	http	80	Possible	tcp
		-	Variable value	-		https	443	Possible	tcp
		-	Variable value	-	Firewall	http	80	Possible	tcp
		-	Variable value	-		https	443	Possible	tcp
		-	Variable value	-	Server load balancer	http	80	Possible	tcp
		-	Variable value	-		https	443	Possible	tcp
LAN switch control	Admin server	-	Variable value	-	LAN switch	-	22,23	Not possible	ssh, telnet

*1: Required for PRIMERGY servers.
*2: For the port used by the ESC manager when coordinating with ETERNUS SF Storage Cruiser, refer to the ESC User's Guide.
For details on ports used when coordinating with the ETERNUS SF AdvancedCopy Manager Copy Control Module, refer to the "ETERNUS SF AdvancedCopy Manager Operator's Guide for Copy Control Module".
*3: ServerView Remote Connector Service. This is necessary when using VIOM coordination or when running VMware ESXi on managed servers.
*4: In Basic mode, these services are not supported.
*5: Required when the OS of the admin server is Windows.
*6: Required when the OS of the admin server is Linux.
*7: ICMP ECHO_REQUEST datagram.
*8: Required when running VMware ESX/ESXi on managed servers.
*9: Can be changed, only when installing a server.

*10: Can be changed via Interstage Java EE Admin Console's Configurations >> server-config >> HTTP Service >> HTTP listeners >> admin-listener >> Listener Port
*11: Can be changed via Interstage Java EE Admin Console's Configurations >> server-config >> HTTP Service >> HTTP listeners >> default >> Listener Port.
*12: Can be changed via Interstage Java EE Admin Console's Configurations >> server-config >> ORB >> IIOP Listeners >> orb-listener-1 >> Listener Port.
*13: Can be changed via Interstage Java EE Admin Console's Configurations >> server-config >> ORB >> IIOP Listeners >> SSL >> Listener Port.
*14: Can be changed via Interstage Java EE Admin Console's Configurations >> server-config >> ORB >> IIOP Listeners >> SSL_MUTUALAUTH >> Listener Port.
*15: Can be changed via Interstage Java EE Admin Console's Configurations >> server-config >> Admin Service >> system >> Port.
*16: Can be changed using the procedure below.

1. Stop the manager.
   Refer to "2.1 Starting and Stopping the Manager" in the "Operation Guide CE" for information on how to stop the manager.

2. Change the port numbers in the services file.

   [Windows]
   Change the following port numbers listed in <Windows system installation directory>\SYSTEM32\DRIVERS\ETC\SERVICES:

   jobsch_win9      9690/tcp                           #SWRBA Jobsch subsystem
   mjsnet9          9691/tcp                           #SWRBA MpMjes subsystem

   [Linux]
   Change the following port numbers listed in /etc/services:

   jobsch_win9      9690/tcp                           #SWRBA Jobsch subsystem
   mjsnet9          9691/tcp                           #SWRBA MpMjes subsystem

3. Start the manager.
   Refer to ""2.1 Starting and Stopping the Manager" in the "Operation Guide CE" for information on how to start the manager.

Table A.4 HBA address rename Server

Function Overview	Source				Destination				Protocol
	Server	Service	Port	Modification	Server	Service	Port	Modification
HBA address rename setup service	HBA address rename server	-	Variable value	Not possible	Admin server	rcxweb	23461	Possible	tcp
		bootps	67	Not possible	Managed server	bootpc	68	Not possible	udp
		pxe	4011	Not possible
		tftp	69	Not possible		-	Variable value	-	udp

Table A.5 Managed Server or Firewall

Functional Overview	Source				Destination				Protocol
	Server	Service	Port	Modification	Server	Service	Port	Modification
Monitoring and controlling resources	Admin server	-	Variable value	-	Managed server (Physical OS)	nfagent rcvat (*1)	23458	Possible	tcp
					Managed server (VMware)	https	443	Not possible	tcp
					Managed server (Xen, KVM, Solaris container)	ssh	22	Not possible	tcp
					Managed server (Hyper-V)	RPC	135	Not possible	tcp
						NETBIOS Name Service	137	Not possible	tcp udp
						NETBIOS Datagram Service	138	Not possible	udp
						NETBIOS Session Service	139	Not possible	tcp
						SMB	445	Not possible	tcp udp
					L2 Switch	telnet	23	Not possible	tcp
						ping	-	-	ICMP
						snmp	161	Not possible	tcp,udp
					Firewall	telnet	23	Not possible	tcp
						ping	-	-	ICMP
						snmp	161	Not possible	tcp,udp
					Server load balancer	telnet	23	Not possible	tcp
						ping	-	-	ICMP
						snmp	161	Not possible	tcp,udp
	System Center Virtual Machine Manager	-	Variable value	-	Managed server (Hyper-V)	RPC	135 Unused port greater than 1024	Not possible	tcp
ServerView Agents (*2)	Admin server	-	Variable value	-	Managed server	snmp	161	Not possible	tcp udp
	Managed server	-	Variable value	-	Admin server	snmptrap	162	Not possible	udp
Backup, restore, Cloning	Admin server	-	4972	Not possible	Managed server	-	4973	Not possible	udp
	Managed server	-	4973	Not possible	Admin server	-	4972	Not possible	udp
		-	Variable value	-		tftp	69	Not possible	udp
HBA address rename setup service	Managed server	bootpc	68	Not possible	HBA address rename server	bootps	67	Not possible	udp
						pxe	4011	Not possible	udp
		-	Variable value	-		tftp	69	Not possible	udp
VMware ESX/ESXi (*3)	Admin server	-	Variable value	-	Managed server	-	443	Not possible	tcp
Collection of performance information	Managed Server (Hyper-V/Solaris container/physical OS)	-	-	-	Admin server	-	2344	Not possible	tcp
Collection of performance information	Admin server	-	-	-	Managed server (Xen)	ssh	22	Not possible	tcp
Collection of performance information	Admin server	-	-	-	Managed server (VMware ESX/ESXi)	https	443	Not possible	tcp
Network Device Automatic Configuration	Admin server	-	Variable value	-	L2 Switch	ftp	21	Not possible	tcp
						ssh	22	Not possible	tcp
						telnet	23	Not possible	tcp
					Firewall	ssh	22	Not possible	tcp
						telnet	23	Not possible	tcp
					Server load balancer	ssh	22	Not possible	tcp
						telnet	23	Not possible	tcp
Network Device Operation	Admin server	-	Variable value	-	Server load balancer	ssh	22	Not possible	tcp
						telnet	23	Not possible	tcp
Open the web management window	Admin server	-	Variable value	-	L2 Switch	http	80	Possible	tcp
						https	443	Possible	tcp
					Firewall	http	80	Possible	tcp
						https	443	Possible	tcp
					Server load balancer	http	80	Possible	tcp
						https	443	Possible	tcp

*1: Required for SPARC Enterprise servers.
*2: Required for PRIMERGY servers.
*3: Required when running VMware ESX/ESXi on managed servers.

Table A.6 VM Management Server

Function Overview	Source				Destination				Protocol
	Server	Service	Port	Modification	Server	Service	Port	Modification
vCenter Server	Admin server	-	Variable value	-	vCenter Server	-	443	Not possible	tcp
System Center Virtual Machine Manager	Admin server	-	Variable value	-	System Center Virtual Machine Manager	-	80	Not possible	tcp
						WinRM	443 5985

Table A.7 Directory Service Server

Function Overview	Source				Destination				Protocol
	Server	Service	Port	Modification	Server	Service	Port	Modification
OpenDS	Admin server	-	Variable value	-	OpenDS	ldaps	1474	Possible	tcp
Active Directory	Admin server	-	Variable value	-	Active Directory	ldaps	636	Possible	tcp

Table A.8 NetApp Storage

Function Overview	Source				Destination				Protocol
	Server	Service	Port	Modification	Server	Service	Port	Modification
NetApp Storage	Admin server	-	Variable value	-	Data ONTAP	-	443	Not possible	tcp

Table A.9 EMC CLARiiON Storage

Function Overview	Source				Destination				Protocol
	Server	Service	Port	Modification	Server	Service	Port	Modification
EMC CLARiiON Storage	Navisphere CLI	-	Variable value	-	EMC Navisphere Manager	-	443 or 2163	Not possible	tcp

Table A.10 EMC Symmetrix DMX Storage or EMC Symmetrix VMAX Storage

Function Overview	Source				Destination				Protocol
	Server	Service	Port	Modification	Server	Service	Port	Modification
EMC Symmetrix DMX Storage or EMC Symmetrix VMAX Storage	SYMCLI	-	Variable value	-	SYMAPI Server	-	2707	Possible	tcp

Table A.11 [Hyper-V] L-Server Console

Function Overview	Source				Destination				Protocol
	Server	Service	Port	Modification	Server	Service	Port	Modification
Hyper-V	Admin server	-	Variable value	-	Managed server	-	2179	Possible	tcp