User's Manual

To use Integrated Windows Authentication for authentication, a Rack Power Manager software
administrator must first enable it. See Client session information on page 69.
Firewalls
In a typical network configuration, as shown in Figure 5.1, the Rack Power Manager software
client is located outside of the firewall and the Rack Power Manager server and managed
appliances reside inside the firewall. In this case, the firewall must be configured to allow two
TCP/IP ports inside the firewall.
One TCP port (default=443) is used for the HTTPS web browser connection between the Rack
Power Manager software client and the Rack Power Manager server. The other TCP port
(default=1078) is used for the Emerson Proxy Protocol to tunnel video and Telnet traffic. Both
ports are configurable.
If you are using the Rack Power Manager management software through a firewall, we
recommend the following:
• Place the Rack Power Manager server and all managed appliances within the same firewall
Demilitarized Zone (DMZ). If the managed appliances are not in the same DMZ with the
Rack Power Manager server, you must configure the firewall so all data may pass between
the zones using TCP/IP ports 22 (SSH), 3211, 2068, 8192 and 3871. You must also
configure the User Datagram Protocol (UDP) port 3211 so it may pass through the firewall
for initial network discovery of appliances that do not have an IP address.
Chapter 5: Basic Operations 53