IBM Midrange System DS4000 Series Hardware Manual page 338

Internal firewall
RSM for Storage includes an internal firewall to limit the scope of access a remote user has to
your network. It also limits the IP destinations that can be accessed by local and remote users
of the system. The rules for inbound and outbound IP traffic that control the internal firewall
are managed dynamically by the RSM for Storage software.
The normal state for the firewall is Enabled:Closed, which means that the firewall is
operational and configured to allow SNMP traps to be received and e-mails to be sent;
however, access to other devices on your network is not allowed.
The Enabled:Custom state indicates that one or more custom rules have been added to
/etc/rsm/rsmfirewall.conf. These rules will be active any time the firewall is enabled.
The Enabled:Open state means that access to one or more other devices has been
enabled. The firewall allows access to any storage subsystem that has an active alert, and
also storage subsystems and other SAN devices that have been placed in Service Access
mode.
Service Access mode allows you to manually allow access to a device from the RSM for
Storage system. You can select storage subsystems that you have previously configured.
Disabling the firewall allows unrestricted access from the RSM for Storage system to your
network. To maintain the security of your network, disabling the firewall will also disables
remote access. Likewise, enabling Remote Access will automatically enable the firewall.
Note: Subsystems with active alerts are automatically allowed access from the Remote
Support Manager while the alert is active and do not need to be enabled for Service
Access.
To manage the RSM internal firewall and service access of your managed storage
subsystems (and other SAN devices) from the Web interface, click Firewall on the Main
Menu, as shown in Figure 6-26 on page 317.
320
IBM Midrange System Storage Hardware Guide