Users Guide

A–Security Considerations
Managing Security
Doc No. TD-000971 Rev. 1
January 29, 2021 Page 171 Copyright © 2021 Marvell
b. Set a permanent port range of 1–1024 for TCP and UDP protocols (to
allow the qlnxremote management agent to communicate with the
outside world):
# firewall-cmd --permanent --zone=public
--add-port=1-1024/tcp
# firewall-cmd --permanent --zone=public
--add-port=1-1024/udp
c. Allow QCS CLI servers to connect to client machines:
 Identify the current active zone and related interface (displayed
by the command in Step a for the server machine.
 Set options permanently to allow port 8080 for HTTP and 8443
for HTTPS:
# firewall-cmd --permanent --zone=public --add-port=8080/tcp
# firewall-cmd --permanent --zone=public --add-port=8080/udp
# firewall-cmd --permanent --zone=public --add-port=8443/tcp
# firewall-cmd --permanent --zone=public --add-port=8443/udp
3. To reload the firewall settings to make the current permanent settings the
new runtime settings, issue the following command:
# firewall-cmd --reload
NOTE
The preceding commands reflect the default port numbers of
8080 for HTTP and 8443 for HTTPS. If different port numbers
were specified during QCS CLI installation, replace the port
numbers in the preceding commands with the port numbers
specified during installation.
NOTE
To ensure the rpcbind (universal addresses to RPC program number
mapper) service is running, issue the following commands:
# service rpcbind start
# systemctl enable rpcbind.service