Brocade Communications Systems 53-1001778-01 manual Disable Http for security reasons

Disable HTTP for security reasons 2

Verifying that the SLP service is correctly installed and operating

1.Start the SLP service and SMI-A.

2.Open a command prompt via Start > Programs > Accessories > Command Prompt.

3.Change to the directory where slpd.bat is located:

cd C:\<SMIAgent>\agent\bin

4.Verify that the SLP service is properly running as a Service Agent.

>slptool findsrvs service:service-agent

5.Verify that the SLP service is properly advertising its WBEM services:

>slptool findsrvs service:wbem

6.Verify that the SLP service is properly advertising its WBEM SLP template over its configured Client Protocol Adapters. Note: Change the IP Address:Port to those displayed by slptool findsrvs service:wbem

>slptool findattrs service:wbem:http://192.168.0.100:5988

>slptool findattrs service:wbem:https://192.168.0.100:5989

Disable HTTP for security reasons

If security or mutual authentication is enabled, you might want to disable the unsecure HTTP protocol, leaving only the secure HTTPS enabled. There are two ways to enable and disable the HTTP protocol:

•Use the SMI-A Configuration Tool (see “Configuring HTTP access” on page 24).

•Use the command-line scripts packaged by the SMI-A installer.

The SMI-A installer packages the scripts DeleteXMLProtocolAdapter to permanently disable the HTTP port used by the SMI-A and CreateXMLProtocolAdapter to enable the HTTP port again. These scripts can be found in the following directory:

<SMIAgent>/agent/bin

Connection monitoring

The SMI-A handles connection monitoring for the connection to the proxy switch. Whenever there is a connection failure to the proxy switch, by default the SMI-A automatically tries to reconnect to the proxy switch 5 times with a wait time of 90 seconds between each retry. This process is repeated every 30 minutes until the connection is reestablished to the proxy switch.

NOTE

The actual time between each retry is the 90-second wait time plus the retry time (the time spent on reestablishing the connection to the proxy switch). The retry time is beyond the SMI Agent’s control.

These default values of 5 retries, 90-second sleep interval between retries, and 30 minutes between each retry process are all configurable through the Brocade_ConnectionMonitoringService and through instances of Brocade_ConnectionMonitor. These values are not configurable through the SMI-A installer or configuration tool.

Brocade SMI Agent User’s Guide	11
53-1001778-01