mc/service guard use of udp port 5302

[Daniel Pinolini]

I have a 2 node cluster in my DMZ running OVO7. Our firewll shows the physical address of the primary node sending out udp broadcasts to 255.255.255.255 for port 5302 which is set up in /etc/services for hacl-cfg. What is this broadcast trying to do?

thanks

[Duncan Edmonstone]

Daniel,

you can read ITRC article:

-----------------------------------------

Date: 5/9/03
Document description: HP-UX ServiceGuard: "cmviewcl -c cluster" issues udp broadcast messages
Document id: 4000057019


HTH

Duncan

[Sridhar Bhaskarla]

Hi,

When you run "Cmviewcl" with -c option to find out the status of a remote cluster, it uses the UDP port 5302 (hacl-cfg) to query the remote nodes on the subnet by issuing a broadcast. So anytime this command is run with that option, it would generate traffic.

-Sri

[melvyn burnard]

port 5302 is used by the hacl-cfg to check and distribute configuration information.
Every time you do a cmviewcl , for example, you will fire off a cmclconfd process on each node, and the connection between nodes is via this 5302 port.
Do not try to block any of the hacl ports in the 53xx range, or your cluster will have problems.

[Daniel Pinolini]

Thanks for the responses all, I have 1 follow up question. My firewall guy says he sees this traffic all day long. I am not aware of anyone running cmviewcl -c on the dmz cluster. What would be generating this traffic? Is it part of the heartbeat processing?

Thanks