Fujitsu PRIMEQUEST 1000 Series Installation Manual page 164

PRIMEQUEST 1000 Series Installation Manual
CHAPTER 6 Work after Operating System Installation (PRIMEQUEST 1800E)
The following is a sample configuration file.
/opt/FJSVpsa/sh/sample_conf_setmlanfw.txt
Remarks
A PSA update will overwrite the above sample file. Save a copy of the configuration file to retain the original
values.
In the configuration file, write [PCL] only on the first line. Then, on separate lines, write the physical IP
addresses of the MMBs (MMB#0/MMB#1) belonging to all the cluster nodes defined for PRIMECLUSTER,
or write the network IP addresses including the physical IP addresses of the aforementioned MMBs.
Sample configuration file:
[PCL]
192.168.0.0/24
192.168.1.5
3. Execute the shell script.
In the first variable, specify the path to the configuration file prepared in step 2.
A confirmation message appears for the contents of the configuration file. Enter "Y".
Execution example: (The prepared configuration file "fwconf.txt" is
assumed to be in the current directory.)
# /opt/FJSVpsa/sh/setmlanfw.sh ./fwconf.txt
Management LAN IP address:
192.168.0.1
Source IPs for PRIMECLUSTER Service:
192.168.0.0/24
192.168.1.5.
Press "Y" to confirm above settings, "N" to cancel all settings
> Y
#####################################################################
# Created the MMLAN chain on your
# firewall(iptables)
# For more detail on how to set firewall, refer to the Installation #
# Manual.
#####################################################################
The setting was completed
4. Execute iptables -L -n. Then, confirm that the "MMLAN" chain exists.
Execution example:
# iptables -L -n
Chain INPUT (policy DROP)
target prot opt source
136
destination
#
#
#
C122-E107-09EN