topic Re: Managing HP servers through firewall with SIM in Server Management - Systems Insight Manager

Managing HP servers through firewall with SIM

Melinda Cooper — Fri, 17 Feb 2006 19:09:07 GMT

We're now using SIM V5 sp3 and will upgrade to sp4 on 2/21. Has anyone had success with managing a HP server through the firewall? We've managed to use the ILO but were wondering about the server side. We're at Windows 2003 with sp3.

Re: Managing HP servers through firewall with SIM

Igor Karasik — Sat, 18 Feb 2006 05:47:43 GMT

Melinda,
Did you see "Managing HP servers through firewalls with HP Systems Insight Manager 5.0"
ftp://ftp.compaq.com/pub/products/servers/management/hpsim/ManagingHPServers-withHPSIM.pdf

Re: Managing HP servers through firewall with SIM

kc2kth — Mon, 20 Feb 2006 13:52:48 GMT

So far I've been able to get most management functions to work after opening snmp, 2301, and 2381. However, Version Control Agent configuration still refuses to work. I haven't spent too much time on it though.

Re: Managing HP servers through firewall with SIM

Melinda Cooper — Tue, 21 Feb 2006 10:38:25 GMT

Yes, I've seen the article about Managing servers through the firewall. It's not really a white paper just three case studies. We were able to glean some information out of it.

Re: Managing HP servers through firewall with SIM

Troy DeHaven — Tue, 21 Feb 2006 11:00:04 GMT

I have two servers that I manage through the firewall. After I configured the firewall for the SNMP ports and ICMP ports I able to import certificate from management server and everything seems to work ok.

Re: Managing HP servers through firewall with SIM

Melinda Cooper — Tue, 21 Feb 2006 13:23:21 GMT

Troy, what version of HP SIM are you using? Also the two servers that you were successful in setting up, what is their operating system?

Re: Managing HP servers through firewall with SIM

Corey Adam — Fri, 24 Feb 2006 01:39:37 GMT

The white paper told you what ports to open so start with those. You can also look at your firewalls logs and see what ports are constantly being blocked. I had to open a few that the white paper evidently overlooked. Or I had to open a port in both directions where the whitepaper said it was only required in one direction. Also, I think WMI is DCOM based which will break if you are NATing between CMS and clients. Have to use WMI mapper I think.

Re: Managing HP servers through firewall with SIM

kc2kth — Tue, 21 Mar 2006 15:47:25 GMT

I've finally gotten SIM to work pretty reliably through a firewall and thought I'd share the ports I had to open. Note that the CMS and all hosts are Windows based, so no WEBM to consider. Assume a firewall between "hosts" and "CMS" below:

From CMS to hosts:
161/udp - snmp
icmp requests
2301/tcp
2381/tcp

From hosts to CMS:
162/udp - snmp-trap
icmp requests
280/tcp
2301/tcp
2381/tcp

I believe the whitepaper indicates 2301/tcp only needs to be opened from the CMS, however I found it was needed in both directions.