HP StorageWorks 2.32 Edge Switch - Manual (Page 216)

Configuring HAFM Through a Firewall
216 HA-Fabric Manager User Guide
The TCP port numbers of the RMI server are randomly and automatically selected
on both the HAFM appliance and Client as a full-duplex function. This poses a
major problem for firewalls because they need to know which TCP port numbers
to pass through and which numbers to block. Firewalls are configured to block all
unknown incoming connections with no mapping of outgoing connections based
on a socket part of TCP and IP.
To work around this problem, administrators can “predict” which ports will be
used by the Client and Server by configuring these port numbers into appropriate
batch files. Using the following procedures depends on how the firewall is set up.
Afterward you configure TCP port numbers in the following procedures, the
firewall must be configured to unblock the configured port numbers.
■ If the firewall prevents the client from connecting to arbitrary ports on the
server, then perform both of these procedures:
— “ Forcing Port in RMI Registry ” on page 216.
— “ Forcing Server and Client Export Port Number ” on page 218.
Note: You must configure both the Server and Client export port numbers.
■ If the firewall prevents the server from connecting to arbitrary ports on the
client, then configure the export port of the client in “
Forcing Server and
Client Export Port Number ” on page 218.
Note: If the firewall prevents the server from connecting to arbitrary ports on the
client, then just configure the export port of the client
(
-Dsmp.client.export.port=XXXX).
Forcing Port in RMI Registry
To force the RMI registry to use a particular TCP port for an RMI server,
configure the
Dsmp.registry.port=XXXX parameter in the
HAFM_sc.bat file. This file starts both the Client and Server and is installed on
a computers with the HAFM appliance software. The file is typically located in
c:\Program Files\HAFM 8.x\bin . Both the Client and Server areas of
the HAFM_sc.bat file must have matching parameters. Add a matching
parameter to the HAFM_co.bat file if, this is installed on your computer. This
file starts the Client only and is installed with the Client software.