Configuring firewall rules for HP Serviceguard on SUSE SLES and Red Hat

NOTE: The numbers in the list above are the default ranges for dynamic ports. If you have adjusted the ranges, adjust

these numbers accordingly.

If you are using smnp, add:

• snmp (udp)

• snmptrap (udp)

If you are using the WBEM provider, add:

• wbem-http (tcp)

• wbem-https (tcp)

If you are using the HPVM Appserver, add:

• hacl-poll (udp)

If you are running Quorum server on this system, add:

• hacl-qs (tcp)

If you are using the Serviceguard Manager, add:

• compaq-https (tcp)

• compaq-https (udp)

• cpq-wbem (tcp)

• cpq-wbem (udp)

Additionally, the port 1118 is used for Apache-Tomcat communication within the local host and this port should

be opened.

Configuring firewall rules on SUSE SLES 10

Using the command line

For a basic Serviceguard installation, configure the firewall ports using the following commands:

lower_dynamic=$(cat /proc/sys/net/ipv4/ip_local_port_range|awk '{ print$1} ')

upper_dynamic=$(cat /proc/sys/net/ipv4/ip_local_port_range|awk '{ print $2 }')

/sbin/SuSEfirewall2 open EXT TCP ident hacl-hb hacl-cfg hacl-local

"$lower_dynamic":"$upper_dynamic"

/sbin/SuSEfirewall2 open EXT UDP hacl-hb hacl-cfg "$lower_dynamic":"$upper_dynamic"

If you are using snmp, add:

/sbin/SuSEfirewall2 open EXT UDP snmp snmptrap

If you are using the WBEM provider, add:

/sbin/SuSEfirewall2 open EXT TCP wbem-http wbem-https

If you are using the HPVM Appserver, add:

/sbin/SuSEfirewall2 open EXT UDP hacl-poll

If you are running Quorum server on this system, add:

/sbin/SuSEfirewall2 open EXT TCP hacl-qs