Hpe 3Par Communication Settings; Using Customer Controlled Access; Selecting The Cca Setting - HPE 3PAR StoreServ Software User's Manual

HPE 3PAR Communication Settings

This chapter provides an overview of the communication settings available through SPOCC and
SPMAINT. These settings enable you to control and monitor communications between the 3PAR storage
system and 3PAR Headquarters through the SP.
NOTE:
The SPMAINT menu does not provide option to change connection portal parameters. This functionality
is available in CPMAINT menu only.
There are two methods for controlling communication between the storage system and 3PAR
Headquarters: Customer Controlled Access and 3PAR Policy Server. Policy Server is a optional feature
that requires an 3PAR Policy Server license. For information about using Policy Server, see the 3PAR
Policy Server installation and setup guide.

Using Customer Controlled Access

Customer Controlled Access (CCA), available through SPOCC and SPMAINT, allows you to limit the
network communication of external sources from or to the SP. CCA has three settings:
• BOTH (or bidirectional HQ communications) is the default position that allows SSH communications
outbound from the SP to transfer information back to the connection portal and inbound
communications from the connection portal to SP ports 80 or 22, enabling remote operations.
• OUT (or outbound-only HQ communications) allows the SP to send data to the connection portal
through SSH but blocks remote connectivity. Control sequences such as acknowledgements are
allowed in both directions in order to continue communication, but incoming updates, patches,
manually requested data, and so on are blocked.
• OFF (or turn off HQ communications) blocks all communication between the SP and 3PAR Central or
a local service provider, both inbound and outbound.
NOTE: If the SP is running in Secure Network Mode, the 3parcust user can set the CCA setting to
OUT (to disable remote operations) or BOTH (to allow bidirectional communications). In Secure
Network Mode, the 3parcust user cannot set the CCA setting to OFF.
NOTE:
Starting with SP 4.2.0, when SP setup and connection to HPE HQ are successfully completed, the SP is
configured to accept automatic software downloads from HQ. Downloaded software will not be installed
but will be available on the SP or 3PAR StoreServ Storage system for later installation. Users can disable
automatic software downloads, as described below.
CCA works the same whether the connection to 3PAR Central or a local service provider is through the
network or through a point-to-point modem connection. If the connection is set up to go through the
network and out through the Internet, you can also restrict or allow transmissions with the network
firewall.

Selecting the CCA Setting

The default setting for CCA is BOTH. Using either of the other settings can limit maintenance activities or
possibly delay the resolution of problems. Consider the following trade-offs when selecting a setting for
the HQ Customer Controlled Access:
HPE 3PAR Communication Settings 57