HP OneView 1.10 User Guide

Table 1 Ports required for HP OneView
DescriptionUseProtocolPort number
Used for the HTTP interface. Typically, this port redirects to
port 443; this port provides the access required by the iLO.
InboundTCP80
HP OneView acts as an NTP server, both iLO and Onboard
Administrator require access.
InboundUDP123
Used as an NTP client to synchronize the appliance time.OutboundUDP123
Supports SNMP GET calls to obtain status data from a server
through iLO. Also used for iPDU.
OutboundUDP161
Used for SNMP trap support from the iLO, Onboard
Administrator, and iPDU devices.
InboundUDP162
Used for the HTTPS interface to user interface and APIs.InboundTCP443
Used for secure SSL access to the iLO and Onboard
Administrator. Used for RIBCL, SOAP, and iPDU
communication.
OutboundTCP443
Used as an alternative SNMP trap port.InboundUDP2162
Allows external scripts or applications to connect to and
monitor messages from the SCMB (State-Change Message
Bus).
InboundTCP5671
Provides browser access to the remote console.Browser to iLOTCP17988
Provides remote console access to iLO virtual media.Browser to iLOTCP17990
3.14 Controlling access to the appliance console
Use the hypervisor management software to restrict access to the appliance, which prevents
unauthorized users from accessing the password reset and service access features. See “Restricting
console access” (page 59).
Typical legitimate uses for access to the console are:
• Troubleshooting network configuration issues
• Resetting an appliance administrator password
• Enabling service access by an on-site authorized support representative
The virtual appliance console is displayed in a graphical console; password reset and HP Services
access use a non-graphical console.
Switching from one console to another (VMware vSphere and Microsoft Hyper-V)
1. Open the virtual appliance console.
2. Press and hold Ctrl+Alt.
3. Press and release the space bar (VMware vSphere only).
4. Press and release F1 to select the non-graphical console or F2 to select the graphical console.
Switching from one console to another (KVM)
1. Open the Virtual Machine Manager.
2. In the Menu bar, select Send Key→Ctrl+Alt+F1 for the non-graphical console or select Send
Key→Ctrl+Alt+F2 for the graphical console.
3.14.1 Enabling or disabling authorized services access
When you first start up the appliance, you can choose to enable or disable access by on-site
authorized support representatives. By default, on-site authorized support representatives are
58 Understanding the security features of the appliance