HP Serviceguard Version A.11.19 Release Notes, March 2009

• hacl-probe 5303/udp
• hacl-local 5304/tcp
• hacl-test 5305/tcp
• hacl_poll 5315/tcp
Serviceguard also uses port 9/udp discard during network probing setup when
running configuration commands such as cmcheckconf or cmapplyconf and
cmquerycl. If the port is disabled (in inetd.conf), the network probing may be
slower and under some conditions error messages may be written to syslog.
Serviceguard also uses dynamic ports (typically in the range of 49152 - 65535) for some
cluster services. If you have adjusted the dynamic port range using kernel tunable
parameters, alter your rules accordingly.
Ports Required by Serviceguard Manager
If you will be using Serviceguard Manager via HPSMH, make sure the following ports
are open in addition to the ports listed above:
• compaq-https 2381/tcp
• compaq-https 2381/udp
• cpq-wbem 2301/tcp
• cpq-wbem 2301/udp
In addition, if you are using DSAU consolidated logging and decide to use the TCP
transport, HP recommends you use TCP port 1775.
This port is configurable; if port 1775 is already being used by another application,
configure and open another free port when you configure the firewall.
System Firewalls
When using a system firewall such as HP-UX IPFilter with Serviceguard, you must
leave open the ports listed above and follow specific IPFilter rules required by
Serviceguard; these are documented in the HP-UX IPFilter Administration Guide,
available from http://www.docs.hp.com -> Internet and Security
Solutions.
Installing Serviceguard on HP-UX
Dependencies
The following are required by Serviceguard. They are part of the HP-UX Base Operating
Environment:
• Open SSL, which includes the OPENSSSL-RUN and OPENSSL-LIB filesets.
• The EventMonitoring bundle, which contains the EMS-CORE and
EMS-CORE-COM filesets.
52 Serviceguard Version A.11.19 Release Notes