AIX

AIX

Connect with fellow AIX users and experts to gain knowledge, share insights, and solve problems.

 View Only
Expand all | Collapse all

Ports to opened on firewall for NIM Operations on different networks

  • 1.  Ports to opened on firewall for NIM Operations on different networks

    Posted Mon August 13, 2012 04:16 AM

    Originally posted by: muralisingaram


    Hi All,

    We have NIM Master on 172.20.140.XX network , and all the clients are on different networks ex:172.20.114.XX and 172.20.115.XX , What are all the ports need to opened to perform any nim operation on the clients.


  • 2.  Re: Ports to opened on firewall for NIM Operations on different networks

    Posted Mon August 13, 2012 06:13 AM

    Originally posted by: SystemAdmin


    Hi,

    google is your friend ;)

    
    bootp: Client UDP 68 --> Master UDP 67 Master UDP 67 --> Client UDP 68   So the client communicates from UDP port 68 to master
    's UDP port 67. Then the master
    's UDP port 67 responds to the client's UDP port 68.   tftp: Client UDP <--> Master UDP 69 Client UDP <--> Master UDP (random port between 32768 and 65535)   Here the client communicates via UDP to the master
    's port 69. The port that the client uses cannot be predicted. Then, the master responds from port 69 back to the same port that made the request. I used the bidirectional arrow to represent this. Then random UDP ports are chosen on both the master and the client to affect the transfer of data. Again bidirectional.   NFS: Client UDP <--> Master UDP 111 Client TCP <--> Master TCP (random port between 32768 and 65535, or the port specified in /etc/services 
    
    for mountd) Client TCP <--> Master TCP 2049   Similar 
    "statements" 
    
    for NFS
    's portmapper, mountd, and nfsd processes.   NIM: Client TCP <--> Master TCP 1058/1059 + 513-1023   For rsh operations, which 
    
    do not occur during install: Master TCP <--> Client TCP 513, 514 + 513-1023
    


    Source : http://www-01.ibm.com/support/docview.wss?uid=isg3T1011808#5


  • 3.  Re: Ports to opened on firewall for NIM Operations on different networks

    Posted Mon August 20, 2012 01:18 AM

    Originally posted by: muralisingaram


    thanks for the info, will ask security team to open the ports and will update with the results.Thanks again sir.


  • 4.  Re: Ports to opened on firewall for NIM Operations on different networks

    Posted Wed February 27, 2013 10:41 AM

    Originally posted by: SystemAdmin


    Hi,
    Is there a way to define a dedicated port for answer on UDP TFTP instead of a random one ?
    Client UDP <--> Master UDP (random port between 32768 and 65535)

    for NFS that's fine to modify /etc/services.