HP StorageWorks 1510i Modular Smart Array iSCSI concepts and deployment guide (431338-002, July 2008)

Service
Default
TCP port
Default
state
Description
Telnet
23
Disabled
When enabled, a
ny Telnet client can connect to this service to
access the MSA1
510i command line interface. It should be noted
that a path or c
ontroller failure will disconnect the session and
requires a rec
onnect by the client application.
Note: Because
Telnet passwords are not encrypted, this
management se
rvice in not secure.
SSH 22
Enabled
Secure Shell allows access to the MSA Command Line Interface
(MSA-CLI) through an encrypted session. All text on this service,
including the management username and password, is encrypted
on the wire. It should be noted that a path or controller failure will
disconnect the session and will require a reconnect by the client
application.
HTTP
80
Enabled
This service is the non-encrypted web service interface for the
Storage Management Utility.
HTTPS
443
Enabled
This service provides an encrypted 128-bit SSL session for the
Storage Management Utility. The MSA1510i has a self-signed
certifica
te, which generates a security alert in the web browser.
The MSA15
10i also supports using an administrator-loaded SSL
certificate.
SNMP
161
Enabled
An SNMP-capable management system, such as HP Systems Insight
Manager,canconnecttothisserviceontheMSA1510iifitknows
the SNMP community string (default is “public”).
Management port NTP support
Management port configuration options include a provision for an NTP IP address. If a time server is in
the network, the MSA1510i contacts the NTP server during the startup process and every five minutes to
synchronize itself with the time server. Each event in the event log is marked with the approximate time.
All events that occur before the MSA communicates with an NTP server are marked with elapsed time.
The MSA1510i uses UDP on port 123 to communicate with the NTP server and time is reported in UTC
without the benefit of time zones. (The MSA1510i does not have a setting for a local time zone.)
In multipath configurations, be sure to enter the NTP IP address for both management ports. By
default, NTP is disabled and must be enabled using the Group Security Policy editor. For more
information,seetheknowledgebasearticleonconfiguring a time server in Windows Server 2003:
h
ttp://support.microsoft.com/kb/816042/.
Management port gateway support
If your network uses routers, when configuring an MSA1510i management port, you can enter the IP
address of the default gateway through which the management port will attempt to establish a connection
to the destination network host (if the host is not on the same subnet as the management port.) If DHCP
is enabled for the management port, the Gateway IP address is obtained from the DHCP server and
saved into this setting.
Management port VLAN support
If your network uses VLANs, when configuring the MSA1510i management port, you can specify the ID of
the network VLAN through which you want management traffic to pass.
For more information about VLANs, see Virtual LANs (VLANs).
newpage pi
1510i Modular Smart Array iSCSI concepts and deployment guide
19