Alcatel-Lucent 5620 Planning Manual page 125

Security
....................................................................................................................................................................................................................................
Table 7-26
Protocol
TCP
TCP
TCP
TCP
TCP
When there is a firewall at the interface that communicates with the 5620 SAM Servers,
the following rules apply. If multiple interfaces are used for 5620 SAM Server
communication to the clients (GUI and OSS) and auxiliary servers, the network traffic
from the 5620 SAM Auxiliaries could pass through the SAM client interface (NIC 3 on
Figure 8-2, "Distributed 5620 SAM Server/Database deployment with multiple network
interfaces" (p. 8-4)
5620 SAM Server/Database deployment with multiple network interfaces" (p. 8-4)
the 5620 SAM Auxiliary.
Table 7-27
Protocol
TCP
TCP
TCP
TCP
When there is a firewall at the interface that reaches the 5620 SAM Client(s) (NIC 3 on
Figure 8-2, "Distributed 5620 SAM Server/Database deployment with multiple network
interfaces" (p. 8-4)
following rules apply to allow the OSS clients to collect the logToFile accounting
statistics files. Services require the use of public addresses.
Table 7-28
Protocol
TCP
....................................................................................................................................................................................................................................
5620 SAM
3HE-09809-AAAG-TQZZA 13.0 R7
Issue 1 December 2015
Firewall rules for inter process communication on the 5620 SAM
Cflowd Auxiliary Server(s) (continued)
From port On
Any Auxiliary Server(s)
Any Auxiliary Server(s)
Any Auxiliary Server(s)
Any Auxiliary Server(s)
Any Auxiliary Server(s)
) or the SAM network interface (NIC 1 on
Firewall rules for traffic coming into the 5620 SAM Auxiliary Statistics
/ Call Trace Server(s) from the 5620 SAM Server(s)
From port On
1097 Server(s)
1099 Server(s)
4447 Server(s)
> 32768 Server(s)
) and NAT is used on the 5620 SAM Auxiliary Server(s), the
Additional Firewall rules required to allow services on the 5620 SAM
client(s) to communicate with the 5620 SAM Auxiliary(s) if NAT is
used on the Auxiliary Server(s).
From port On
Any Auxiliary Server Public
Address
To port On
4457 Auxiliary Server(s)
8083 Auxiliary Server(s)
9443 Auxiliary Server(s)
9990 Auxiliary Server(s)
9999 Auxiliary Server(s)
Figure 8-2, "Distributed
To port On
Any Auxiliary Server(s)
Any Auxiliary Server(s)
Any Auxiliary Server(s)
> 32768 Auxiliary Server(s)
To port On
21 Auxiliary Server Private
Address
Firewall and NAT rules
) of
7-27