Firewall Setting Command For The Management Lan Interface (Setmlanfw.sh); Firewall Setting Command For The Management Lan; Interface (Setmlanfw.sh) - Fujitsu PRIMEQUEST 1000 Series Tool Reference

PRIMEQUEST 1000 Series Tool Reference
CHAPTER 4 PSA CLI (Command Line Interface) Operations
4.11 Firewall Setting Command for the Management LAN Interface
(setmlanfw.sh)
The setmlanfw.sh command is a tool that supports the opening of the necessary ports when the system has a firewall
configured for the management LAN interface and the system provides PRIMECLUSTER linkage through the
management LAN network.
This command opens the following ports for the specified IP addresses:
- snmptrap port: udp/162
- rmcp+ port: udp/7000 to 7100
Note
If you need to change the firewall configuration, such as because of a change to the IP address of the management
LAN interface, delete the firewall configuration according to the deletion procedure and then perform the
configuration procedure again.
Remarks
- This command is available only in Linux.
- The user must have root privileges to execute this command.
- Use the following procedure to execute this command.
(1) Syntax
For config_file, specify the file that contains the IP addresses of the ports to open.
/opt/FJSVpsa/sh/setmlanfw.sh {config_file}
(2) Options
None
(3) Usage example
For config_file, specify /tmp/config.txt, which contains the IP addresses of the ports to open.
# /opt/FJSVpsa/shsetmlanfw.sh /tmp/config.txt
(4) Output messages
The following messages appear for this CLI command.
For details on the messages, see the PRIMEQUEST 1000 Series Message Reference (C122-E111EN).
Too few or more argument
Cannot read the file : %s
No IP setting or illegal IP format in /etc/opt/FJSVpsa/usr/ipsetup.conf
No IP setting in %s
Already set iptables
363 C122-E110-10EN