8 Security

The purpose of this chapter is to assist system and network administrators in understanding the network ports and protocols used by Ignite-UX during its various phases of operation, and to assist in configuring the HP-UX Bastille and IPFilter products. HP is not able to provide support for configuring third-party firewalls to work with Ignite-UX.

Ignite-UX Server Ports

Ignite-UX server network port usage is described below by server activity. Diagrams follow that describe the port activity by network communication task and timing. See the product documentation to get the protocol for your system when the protocol is listed as tcp/udp.

•Initiate LAN Boot for Itanium-Based clients, Figure 26 (page 85): ports 67 and 68.

•Initiate LAN Boot for PA-RISC clients, Figure 27 (page 85): ports 1067, 1068.

•Cold boot and installation initiated from client, Figure 28 (page 86): 69, 2049, 2121, an SD dynamically allocated port.

•Live system reinstall via bootsys initiated from the server, Figure 29 (page 87): 2049, 69, 2121, an SD dynamically allocated port, and 514 or 22.

•make_net_recovery initiated from client, Figure 30 (page 88): 69, 2121, an SD dynamically allocated port, 2049.

•make_net_recovery initiated from the server, Figure 31 (page 89): 69, 2121, an SD dynamically allocated port, 2049, and 514 or 22.

•make_sys_image initiated from client, Figure 32 (page 89): 514 or 2049.

84 Security