ServerView Resource Orchestrator Virtual Edition V3.3.0 Design Guide

Appendix A Port List

This appendix explains the ports used by Resource Orchestrator.

The following figure shows the connection configuration of Resource Orchestrator components.

Figure A.1 Connection Configuration

Resource Orchestrator ports should be configured during the system configuration of each related server.
For details on setup, refer to the following:

• Changing Admin Server Port Numbers

  • "8.2 Changing Port Numbers" in the "User's Guide VE"

• Changing Managed Server Port Numbers

  • "9.1.6 Changing Port Numbers" in the "User's Guide VE"

• Changing Port Numbers for Communication Between the HBA address rename Setup Service and the Admin Server

  • "9.2.2 Changing the Port Number Used to Communicate with the Admin Server" in the "User's Guide VE"

If any of those ports is already used by another service, allocate a different port number.

The following tables show the port numbers used by Resource Orchestrator. Communications should be allowed for each of these ports for Resource Orchestrator to operate properly.

Table A.1 Admin client

Function Overview	Source				Destination				Protocol
	Servers	Service	Port	Modification	Servers	Service	Port	Modification
ROR console	Admin client	-	Variable value	Not possible	Admin server	rcxweb	23461	Possible	tcp
ServerView Operations Manager (*)
						http	3169	Not possible
						https	3170

* Note: Required for PRIMERGY servers.

Table A.2 Firewall

Function Overview	Direction	Source		Destination		Protocol
		Servers	Port	Servers	Port
ROR console	One-way	Admin client	Variable value	Admin server	23461	tcp
ServerView Operations Manager (*)
					3169
					3170

* Note: Required for PRIMERGY servers.

Table A.3 Admin server

Function Overview	Source				Destination				Protocol
	Servers	Service	Port	Modification	Servers	Service	Port	Modification
ROR console	Admin client	-	Variable value	Not possible	Admin server	rcxweb	23461	Possible	tcp
ServerView Operations Manager (*1)						http	3169	Not possible
						https	3170
Internal control	Admin server	-	Variable value	-	Admin server (*2)	- (*3)	3172	Not possible	tcp
		-	Variable value	-		nfdomain	[Windows Manager] 23457 [Linux Manager] 23455	Possible	tcp
		-	Variable value	-		rcxmgr	23460	Possible	tcp
		-	Variable value	-		rcxtask	23462	Possible	tcp
		-	Variable value	-		rcxmongrel1	23463	Possible	tcp
						rcxmongrel2	23464	Possible	tcp
						rcxdb	23465	Possible	tcp
Monitoring and controlling resources	Admin server	-	Variable value	-	Managed server (Physical OS)	nfagent	23458	Possible	tcp
		-	Variable value	-	Server management unit (management blade)	snmp	161	Not possible	udp
		-	Variable value	-	Server management unit (Remote Management Controller)	ipmi	623	Not possible	udp
		-	Variable value	-		telnet	23	Not possible	tcp
		-	Variable value	-	Server management unit (Remote Management Controller (XSCF))	snmp	161	Not possible	udp
		-	Variable value	-		ssh	22	Not possible	tcp
		-	Variable value	-	L2 switches	telnet	23	Not possible	tcp
		-	Variable value	-		ping	-	-	ICMP
		-	Variable value	-		snmp	161	Not possible	tcp,udp
		-	Variable value	-	Firewall	telnet	23	Not possible	tcp
		-	Variable value	-		ping	-	-	ICMP
		-	Variable value	-		snmp	161	Not possible	tcp,udp
		-	Variable value	-	Server load balancer	telnet	23	Not possible	tcp
		-	Variable value	-		ping	-	-	ICMP
		-	Variable value	-		snmp	161	Not possible	tcp,udp
		-	Variable value	-	Ethernet Fabric switches (Converged Fabric)	ssh	22	Not possible	tcp
		-	Variable value	-		ping	-	-	ICMP
		-	Variable value	-		snmp	161	Not possible	tcp,udp
		-	Variable value	-	Ethernet Fabric switches (VCS)	ping	-	-	ICMP
		-	Variable value	-		netconf	830	Not possible	tcp
		-	Variable value	-	Management host	ping	-	-	ICMP
		-	Variable value	-		snmp	161	Not possible	tcp,udp
	Server management unit (management blade)	-	Variable value	-	Admin server	snmptrap	162	Not possible	udp
	Server management unit (Remote Management Controller)
	Server management unit (Remote Management Controller (XSCF))
	L2 switches	-	Variable value	-	Admin server	snmptrap	162	Not possible	tcp,udp
	Firewall
	Server load balancer
	Ethernet Fabric switches
	Management host
ServerView Agents (*1)	Admin server	-	Variable value	-	Managed servers	snmp	161	Not possible	tcp udp
	Managed servers	-	Variable value	-	Admin server	snmptrap	162	Not possible	udp
Backup, restore, cloning	Admin server	-	4972	Not possible	Managed servers	-	4973	Not possible	udp
	Managed servers	-	4973	Not possible	Admin server	-	4972	Not possible	udp
		bootpc	68	Not possible		bootps	67	Not possible	udp
		-	Variable value	-		pxe	4011	Not possible	udp
		-	Variable value	-		tftp	69	Not possible	udp
	Admin server	-	Variable value	-	Admin server	-	4971	Not possible	tcp
Backup, cloning (collection)	Managed servers	-	Variable value	-	Admin server	-	14974 - 14989 (*4) 4974 - 4989 (*5)	Possible	udp
Restore cloning (deployment)	Managed servers	-	Variable value	-	Admin server	-	14974 - 14989 (*4) 4974 - 4989 (*5)	Possible	tcp udp
Monitoring server power status	Admin server	-	-	-	Managed servers	-	-	-	ICMP (*6)
VMware ESX/ESXi, vCenter Server (*7)	Admin server	-	Variable value	-	Managed server, vCenter Server	-	443	Not possible	tcp
System Center Virtual Machine Manager	Admin server	-	Variable value	-	System Center Virtual Machine Manager	-	80	Not possible	tcp
						WinRM	443 5985
Directory services provided with ServerView Operations Manager	Admin server	-	Variable value	-	Directory services provided with ServerView Operations Manager	ldaps	1474	Possible	tcp
		-	Variable value	-		ldap	1473	Not possible	tcp
Active Directory	Admin server	-	Variable value	-	Active Directory	ldaps	636	Possible	tcp
Discover LAN switches	Admin server	-	-	-	LAN switch	-	-	-	ICMP
LAN switch control	Admin server	-	Variable value	-	LAN switch	-	22,23	Not possible	ssh, telnet
Open the web management window	Admin server	-	Variable value	-	L2 switches	http	80	Possible	tcp
		-	Variable value	-		https	443	Possible	tcp
		-	Variable value	-	Firewall	http	80	Possible	tcp
		-	Variable value	-		https	443	Possible	tcp
		-	Variable value	-	Server load balancer	http	80	Possible	tcp
		-	Variable value	-		https	443	Possible	tcp
		-	Variable value	-	Management host	http	80	Possible	tcp
		-	Variable value	-		https	443	Possible	tcp

*1: Required for PRIMERGY servers.
*2: For the port used by the ESC manager when coordinating with ETERNUS SF Storage Cruiser, refer to the "ETERNUS SF Storage Cruiser Operation Guide".
*3: ServerView Remote Connector Service. This is necessary when using VIOM coordination or when running VMware ESXi on managed servers.
*4: Required when the OS of the admin server is Windows.
*5: Required when the OS of the admin server is Linux.
*6: ICMP ECHO_REQUEST datagram.
*7: Required when running VMware ESX/ESXi on managed servers.

Table A.4 HBA address rename Setup Service Server

Function Overview	Source				Destination				Protocol
	Servers	Service	Port	Modification	Servers	Service	Port	Modification
HBA address rename setup service	HBA address rename setup service server	-	Variable value	Not possible	Admin server	rcxweb	23461	Possible	tcp
		bootps	67	Not possible	Managed servers	bootpc	68	Not possible	udp
		pxe	4011	Not possible
		tftp	69	Not possible		-	Variable value	-	udp

Table A.5 Managed Server or Firewall

Function Overview	Source				Destination				Protocol
	Servers	Service	Port	Modification	Servers	Service	Port	Modification
Monitoring and controlling resources	Admin server	-	Variable value	-	Managed server (Physical OS)	nfagent rcvat (*1)	23458	Possible	tcp
					Managed server (VMware)	https	443	Not possible	tcp
					Managed server (Xen, KVM, Solaris zones)	ssh	22	Not possible	tcp
					Managed server (Hyper-V)	RPC	135	Not possible	tcp
						NETBIOS Name Service	137	Not possible	tcp udp
						NETBIOS Datagram Service	138	Not possible	udp
						NETBIOS Session Service	139	Not possible	tcp
						SMB	445	Not possible	tcp udp
					L2 switches	telnet	23	Not possible	tcp
						ping	-	-	ICMP
						snmp	161	Not possible	tcp,udp
					Firewall	telnet	23	Not possible	tcp
						ping	-	-	ICMP
						snmp	161	Not possible	tcp,udp
					Server load balancer	telnet	23	Not possible	tcp
						ping	-	-	ICMP
						snmp	161	Not possible	tcp,udp
					Ethernet Fabric switches (C-Fabric)	ssh	22	Not possible	tcp
						ping	-	-	ICMP
						snmp	161	Not possible	tcp,udp
					Ethernet Fabric switches (VCS)	ping	-	-	ICMP
						netconf	830	Not possible	tcp
					Management host	ping	-	-	ICMP
						snmp	161	Not possible	tcp,udp
	L2 switches	-	Variable value	-	Admin server	snmptrap	162	Not possible	tcp,udp
	Firewall
	Server load balancer
	Ethernet Fabric switches
	Management host
ServerView Agents (*2)	Admin server	-	Variable value	-	Managed servers	snmp	161	Not possible	tcp udp
	Managed servers	-	Variable value	-	Admin server	snmptrap	162	Not possible	udp
Backup, restore, cloning	Admin server	-	4972	Not possible	Managed servers	-	4973	Not possible	udp
	Managed servers	-	4973	Not possible	Admin server	-	4972	Not possible	udp
		-	Variable value	-		tftp	69	Not possible	udp
HBA address rename setup service	Managed servers	bootpc	68	Not possible	HBA address rename setup service server	bootps	67	Not possible	udp
						pxe	4011	Not possible	udp
		-	Variable value	-		tftp	69	Not possible	udp
VMware ESX/ESXi (*3)	Admin server	-	Variable value	-	Managed servers	-	443	Not possible	tcp
Open the web management window	Admin server	-	Variable value	-	L2 switches	http	80	Possible	tcp
						https	443	Possible	tcp
					Firewall	http	80	Possible	tcp
						https	443	Possible	tcp
					Server load balancer	http	80	Possible	tcp
						https	443	Possible	tcp
					Management host	http	80	Possible	tcp
						https	443	Possible	tcp

*1: Required for SPARC M10/M12 and SPARC Enterprise servers.
*2: Required for PRIMERGY servers.
*3: Required when running VMware ESX/ESXi on managed servers.

Table A.6 VM Management Server

Function Overview	Source				Destination				Protocol
	Servers	Service	Port	Modification	Servers	Service	Port	Modification
vCenter Server	Admin server	-	Variable value	-	vCenter Server	-	443	Not possible	tcp
System Center Virtual Machine Manager	Admin server	-	Variable value	-	System Center Virtual Machine Manager	-	80	Not possible	tcp
						WinRM	443 5985

Table A.7 Directory Service Server

Function Overview	Source				Destination				Protocol
	Servers	Service	Port	Modification	Servers	Service	Port	Modification
Directory services provided with ServerView Operations Manager	Admin server	-	Variable value	-	Directory services provided with ServerView Operations Manager	ldaps	1474	Possible	tcp
Active Directory	Admin server	-	Variable value	-	Active Directory	ldaps	636	Possible	tcp

Table A.8 ISM Server

Function Overview	Source				Destination				Protocol
	Servers	Service	Port	Modification	Servers	Service	Port	Modification
Internal control	Admin server	-	Variable value	-	ISM Server	-	25566	Possible	tcp

Table A.9 DHCP Server

Function Overview	Source				Destination				Protocol
	Servers	Service	Port	Modification	Servers	Service	Port	Modification
DHCP service	Admin server	-	Variable value	Not possible	DHCP Server	nfagent	23458	Possible	tcp
						tftp	69	Not possible	udp
						bootps	67	Not possible	udp