swinstall through firewall

[Leon A. Howorth]

I want to access an HP-UX 11.11 SW depot server on the trusted side of the network from a system in the DMZ. It appears that I'll need to request one or more ports be opened on the firewall between the DMZ and trusted side for this access to work. Can someone tell me what needs to be opened?

[Kent Ostby]

Leon --

There used to be a document online that listed this. I have this from my notes from that doc:

QUESTION
How can the SD-UX tools be used through a firewall?
RESOLUTION
SD-UX uses RPC ports to communicate. There is an
RPC_RESTRICTED_PORTS environment variable that can
be set to allow the use of desired ports on the firewall.

The variable should be set when starting the swagentd daemon
and should also be set in the shell or terminal session that
is executing swinstall, swcopy, swreg....etc.

For example, assuming that the desired ports on the firewall
are 2200-2205, follow these steps:


- add RPC_RESTRICTED_PORTS=ncacn_ip_tcp[2200-2205] to the
/sbin/init.d/swagentd startup script on the server, then
restart swagentd with the command:

# /sbin/init.d/swagentd stop;/sbin/init.d/swagentd start

- export RPC_RESTRICTED_PORTS=ncacn_ip_tcp[2200-2205] in the shell
where the swinstall, swcopy...etc will be executed.

[Leon A. Howorth]

Thanks for the reply.
Does your example mean that all six of the ports 2200 to 2205 need to be opened on the firewall?
Thanks.

[Pete Randall]

http://www1.itrc.hp.com/service/cki/docDisplay.do?docLocale=en_US&docId=200000080044997

TKB Doc ID: USDUXKBRC00011289

How to use SD-UX through a firewall?


Pete

[Pete Randall]

Also, this one:

http://www1.itrc.hp.com/service/cki/docDisplay.do?docLocale=en_US&docId=200000080038796

TKB Doc ID: A5062659
swinstall: Can a different network port other than 2121 be used


Pete