HP Serviceguard Version A.11.19 Release Notes, October 2009

• hacl-cfg 5302/udp
• hacl-probe 5303/tcp
• hacl-probe 5303/udp
• hacl-local 5304/tcp
• hacl-test 5305/tcp
• hacl_poll 5315/tcp
Serviceguard also uses port 9/udp discard during network probing setup when
running configuration commands such as cmcheckconf or cmapplyconf and
cmquerycl. If the port is disabled (in inetd.conf), the network probing may be
slower and under some conditions error messages may be written to syslog.
Serviceguard also uses dynamic ports (typically in the range of 49152 - 65535) for some
cluster services. If you have adjusted the dynamic port range using kernel tunable
parameters, alter your rules accordingly.
Ports Required by Serviceguard Manager
If you will be using Serviceguard Manager via HPSMH, make sure the following ports
are open in addition to the ports listed above:
• compaq-https 2381/tcp
• compaq-https 2381/udp
• cpq-wbem 2301/tcp
• cpq-wbem 2301/udp
In addition, if you are using DSAU consolidated logging and decide to use the TCP
transport, HP recommends you use TCP port 1775.
This port is configurable; if port 1775 is already being used by another application,
configure and open another free port when you configure the firewall.
System Firewalls
When using a system firewall such as HP-UX IPFilter with Serviceguard, you must
leave open the ports listed above and follow specific IPFilter rules required by
Serviceguard; these are documented in the HP-UX IPFilter Administration Guide,
available from http://www.docs.hp.com -> Internet and Security
Solutions.
Compatibility Information and Installation Requirements 59