Additional Requirements - Red Hat NETWORK SATELLITE 5.3.0 Installation Manual

Chapter 2. Requirements

2.4. Additional Requirements

The following additional requirements must be met before the RHN Satellite installation:
• Full Access
Client systems need full network access to the RHN Satellite solution's services and ports.
•
Firewall Rules
RHN strongly recommends firewalling the RHN Satellite solution from the Internet. However, various
TCP ports must be opened on the Satellite, depending on your implementation of RHN Satellite:
Port
67
69
80
80
443
443
4545
5222
5269
Table 2.4. Ports to open on the Satellite
•
Synchronized System Times
There is great time sensitivity when connecting to a Web server running SSL (Secure Sockets
Layer); it is imperative that the time settings on the clients and server be reasonably close together
14
Direction
Inbound
Inbound
Outbound
Inbound
Inbound
Outbound
Outbound
Inbound
Inbound
Reason
Open this port to configure the Satellite
system as a DHCP server for systems
requesting IP addresses.
Open this port to configure Satellite as a
PXE server and allow installation and re-
installation of PXE-boot enabled systems.
Satellite uses this port to reach
1
rhn.redhat.com xmlrpc.rhn.redhat.com
,
satellite.rhn.redhat.com
and
running in a disconnected mode for
Satellite)
WebUI and client requests come in via
either http or https
WebUI and client requests come in via
either http or https
rhn.redhat.com
To reach
xmlrpc.rhn.redhat.com
satellite.rhn.redhat.com
a disconnected mode for Satellite)
RHN Satellite Monitoring makes
connections to rhnmd running on client
systems, if Monitoring is enabled and
probes are configured for registered
systems.
If you plan to push actions to client
systems
If you push actions to an RHN Proxy
Server
2
3
(unless
4
,
5
and
6
(unless running in