HP Systems Insight Manager 7.2 Technical Reference Guide

Configuring HP SIM SNMP Ports
HP SIM has a configuration file (globalsettings.propthat you can be modified to override
locale settings that control:
• SnmpTrapPortAddress
In the case where enhanced security is required and where HP SIM is the only application
that will be listening to SNMP traps, then the Windows SNMP Trap Service can be disabled
and the property snmp_java_trap_receiver should be set to true. This requires a HP SIM restart.
• snmpv3_java_trap_port
Set to 50005 by default. This port is active only in the case of a Windows CMS. In HPUX
and Linux, port 162 is used for trap reception in all SNMP versions. Not applicable for HPUX
and Linux CMS.
• snmp_java_trap_receiver
For exclusive bind to port 162 set this to true. Requires Windows SNMP Trap service to be
stopped and disabled and HP SIM to be restarted. Not applicable for HPUX and Linux CMS.
On a Windows CMS, SnmpTrapPortAddress and snmpv3_java_trap_port cannot be the same
unless snmp_java_trap_receiver is set to true and Windows SNMP Trap service is disabled. This
requires aHP SIM restart
Configuring the firewall
Configuring the firewall on a Windows system
Procedure 303 Configuring the firewall on a Windows system
1. Select Start→SettingsControl Panel.
2. Double-click Windows Firewall to configure the firewall settings.
3. Select Exceptions.
4. Click Add Port and add the ports from the inbound table above.
a. In the Name field, enter the protocol.
b. In the Port number field, enter the port number.
c. Click OK to save your settings and close the Add a Port dialog box.
5. Enable file and print sharing.
a. Select File and Print sharing.
b. Click OK.
6. Click OK to save your settings and close the Windows Firewall dialog box.
7. Enable Remote Administration Exception:
a. In the Control Panel, open the Group Policy editor.
b. Select Computer Configuration→Administrative Templates→Network→Network
Connections→Windows Firewall→Domain Profile→Enable the Windows Firewall: Allow
Remote Administration Exception.
Configuring the firewall on an HP-UX system
The HP-UX IPFilter firewall is included with HP-UX 11iv2 and might need to be installed on earlier
versions of HP-UX. To configure the firewall, a firewall rule-set must be added to the /etc/ipt/
ipf/ipf.conf file and the openings for the ports in the table above must be added. For details
on the file format, see the ipf(5) manpage. For instructions on enabling the firewall, see the ipf(8)
manpage.
Alternatively, you can use HP-UX Bastille can be used to create and enable the firewall configuration.
Add the ipf-formatted firewall port-openings from the table above to the /etc/opt/sec_mgmt/
Manage communications Learn More links 445