Alcatel-Lucent 5620 Planning Manual page 123

Security
....................................................................................................................................................................................................................................
Table 7-22
Protocol From port
UDP Any
When there is a firewall at the interface that reaches the 5620 SAM Client(s) (NIC 3 on
Figure 8-2, "Distributed 5620 SAM Server/Database deployment with multiple network
interfaces" (p. 8-4)
by the OSS Client.
Table 7-23
Protocol From port
TCP Any
TCP 21/22
TCP > 1023
Only for 5620 SAM Auxiliary Call Trace Collectors
TCP Any
TCP Any
TCP Any
Table 7-24
Protocol From port
TCP Any
TCP 21/22
....................................................................................................................................................................................................................................
5620 SAM
3HE-09809-AAAG-TQZZA 13.0 R7
Issue 1 December 2015
Firewall rules for traffic coming into the 5620 SAM Auxiliary Cflowd
Server(s) from the Managed Network
On To port
Managed Network 4739
), the following rules apply for FTP access to the 5620 SAM Auxiliary
Firewall rules for OSS Client communication to the 5620 SAM
Auxiliary Server(s)
On To port
SAM-O Client 21/22
SAM-O Client Any
SAM-O Client Any
SAM-O Client 8086
SAM-O Client 8445
SAM-O 9735
3GPP-compliant Client
FTP/SFTP Firewall rules for the 5620 SAM Cflowd Auxiliary Server(s)
On To port
Auxiliary Server(s) 21/22
Target File Server Any
On Notes
Auxiliary Server(s) Cflowd flow records
from 7750 routers to
5620 SAM Cflowd
Auxiliary Server.
On Notes
Auxiliary Server(s) (S)FTP requests
(logToFile statistics, and
call trace information)
Auxiliary Server(s) (S)FTP responses
Auxiliary Server(s) Passive (S)FTP ports for
data transfer (See
between the 5620 SAM
Server and 5620 SAM
Auxiliary Statistics
Collector and the
managed network"
(p. 7-15)
Auxiliary Server(s) HTTP interface for
WebDAV for WTA
Auxiliary Server(s) HTTPS interface for
WebDAV for WTA
Auxiliary Server(s) Corba interface to
access Call Trace
information
On Notes
IPDR File Server (S)FTP requests
(logToFile statistics, and
call trace information)
Auxiliary Server(s) (S)FTP responses
Firewall and NAT rules
"FTP
)
7-25