Dell PowerFlex v3.6.x Security Configuration Guide

PDF

Port usage and changing default ports

Before installing or upgrading PowerFlex, ensure that the ports listed in the table are not used by other processes.

The following table lists the ports used by PowerFlex.

Table 1. Default ports
Port used by	Port #	Protocol	File to change	Field to modify (or to add, if it does not exist)	Notes
MDM listener	6611	Proprietary (Protobuf) over TCP	NOTE: Cannot be modified, and must be available
MDM cluster member	9011	Proprietary (Protobuf) over TCP	/opt/emc/scaleio/mdm/cfg/conf.txt	actor_cluster_port=`<NEW_PORT>`
MDM peer connection	7611	Proprietary (Protobuf) over TCP	/opt/emc/scaleio/mdm/cfg/conf.txt	mdm_external_port=`<NEW_PORT>`	To change the port assigned to the peer MDM system, first change the value of the mdm_external_port field. Then restart the MDM process. Finally, run the --modify_replication_peer_system_port SCLI command. For more information on this command, see the Dell PowerFlex CLI Reference Guide.
SDS listener	7072	Proprietary protocol over TCP	/opt/emc/scaleio/sds/cfg/conf.txt	tgt_port=`<NEW_PORT>`	SDCs and SDRs connect through this port for data communications and to the MDM for metadata communications.
SDR listener	11088	NEW_PORT	/opt/emc/scaleio/sdr/cfg/conf.txt	tgt_port=`<NEW_PORT>`	SDCs connect through this port for data communications and to the MDM for metadata communications. NOTE: Incoming and outgoing ports must be enabled.
Source SDR to target SDR	11088	NEW_PORT	/opt/emc/scaleio/sdr/cfg/conf.txt	tgt_port=`<NEW_PORT>`	SDCs connect through this port for data communications and to the MDM for metadata communications. NOTE: Incoming and outgoing ports must be enabled. SDRs communicate with each other, and send replicated data to eachother, over TCP port 11088. This port must be opened for egress in any firewall on the source system side, and it must be open for ingress on the target system side. If replication is being performed in both directions between the two systems, then port 11088 must be open in the firewall for both egress and ingress on both sides.
LIA listener	9099	Proprietary (Protobuf) over TCP	/opt/emc/scaleio/lia/cfg/conf.txt	lia_port=`<NEW_PORT>`	The PowerFlex Installer connects to the LIA to perform installation and maintenance-related operations.
PowerFlex Gateway-Installation Manager/REST (not secure)	80 (or 8080, together with 8443)	REST over HTTPS	<gateway installation directory>/conf/catalina.properties	http.port=80 (or 8080)	The ports mentioned in parentheses are alternative ports, but can only be used if they were specified during system deployment. After changing a port, you must restart the PowerFlex Gateway service/daemon: Linux: Run service scaleio-gateway restart Windows: Restart the EMC ScaleIO Gateway service NOTE: When deploying PowerFlex Gateway, if one of the following ports is not free, the deployment will fail: 80, 8080, 443, 8443. If this occurs, free the above-mentioned ports, and then redeploy the PowerFlex Gateway.
PowerFlex Gateway-Installation Manager/REST (secure)	443 (or 8443, together with 8080)	REST over HTTPS	<gateway installation directory>/conf/catalina.properties	ssl.port=443 (or 8443)
PowerFlex presentation server	8443	HTTPS and WSS	/etc/mgmt-server/.config/mgmt-server	MGMT_SERVER_OPTIONS='https.port=`<NEW_PORT>'`	This is the port used to open a web connection to the WebUI in the browser. NOTE: It is not recommended to install the PowerFlex presentation server and PowerFlex Gateway on the same host due to conflict on port 8443. If it is unavoidable, change the port used for the PowerFlex presentation server to 9443. For instructions, see the Deploy Dell PowerFlex Guide.
SNMP	162	SNMP v2 over UDP	<gateway installation directory>/webapps/ROOT/WEB-INF/classes/gatewayUserProperties	snmp.port	SNMP traps for system alerts are sent to a trap receiver via this port. The PowerFlex Gateway sends messages to: snmp.traps_receiver_ip on the port snmp.port If you change the port number, restart the PowerFlex Gateway afterwards.
SDBG for MDM (Manager)	25620				Used by PowerFlex internal debugging tools to extract live information from the system for debugging purposes.
SDBG for MDM (Tie Breaker)	25600
SDBG for SDS	25640

The following diagram illustrates the components and the ports they use.

NOTE: For iDRAC security-related information, see "iDRAC Port Information" in the iDRAC User's Guide.