- Notes, cautions, and warnings
- Preface
- Introduction
- Access Control
- Access control settings
- Security for management access
- Authentication
- Authorization
- Component access controls
- Data security settings
- Password policy
- Physical security controls
- Login banner and message of the day
- Logging
- Communication Security
- Communication security settings
- Port usage
- Ports used by Unisphere components on VNX for block
- How VNX for file works on the network
- Network encryption
- Management support for TLS communications on VNX2 systems
- SSL certificates
- Planning considerations for Public Key Infrastructure on VNX for file
- IP packet reflect on VNX for file systems
- Effect of filtering management network
- vSphere Storage API for Storage Awareness (VASA) support
- Special configurations
- Secure Remote Procedure Call
- Other security considerations
- Data Security Settings
- Data at Rest Encryption overview
- Data at Rest Encryption feature activation
- Encryption status
- Backup keystore file
- Data in place upgrade
- Hot spare operations
- Adding a disk drive to a VNX with encryption activated
- Removing a disk drive from a VNX with encryption enabled
- Replacing a chassis and SPs from a VNX with encryption enabled
- Security Maintenance
- Advanced Management Capabilities
- Secure deployment and usage settings
- TLS cipher suites
- LDAP-based directory server configuration
- VNX for file CLI role-based access
- VNX for file CLI security configuration operations
- Configuring password policy
- Configuring session timeout
- Protect session tokens
- Configuring network encryption and authentication using the SSL protocol
- Configuring PKI
- Creating the certificate provided by the persona
- Using the Control Station as the CA
- Obtaining CA certificates
- Generate a key set and certificate request
- Send the certificate request to the CA
- Import a CA-signed certificate
- List the available CA certificates
- Acquire a CA certificate
- Import a CA certificate
- Generate a new Control Station CA certificate
- Display the certificate
- Distribute the Control Station CA certificate
- Request and Install Customer-Supplied Certificates for Control Station
- Managing PKI
- Customize a login banner
- Create a MOTD
- Restrict anonymous root login
- Locking accounts after a specific number of failed logins
- VNX for block SSL certificate import
EMC® VNX® Series Security Configuration Guide for VNX
Ports the Control Station may contact
| Protocol | Port | Purpose | To what host(s) |
|---|---|---|---|
| TCP | 21 | ConnectHome | Configured ConnectEMC FTP server |
| TCP | 25 | Notifications | SMTP server (if configured) for ConnectEMC or alerts |
| TCP/UDP | 53 | DNS | DNS server (if configured) |
| TCP | 80 | Multiple purposes:
|
|
| TCP/UDP | 123 | NTP | NTP server (if configured) |
| UDP | 162 | SNMP trap | VNX for Block management console |
| TCP/UDP | 389 | LDAP | All Windows 2000 and later Domain Controllers or other LDAP Servers |
| TCP | 443 | Multiple purposes:
|
|
| TCP/UDP | 636 | LDAPS | All Windows 2000 and later Domain Controllers or other LDAP Servers that use SSL |
| TCP | 2162 | Connect to VNX for block storage domain master by using HTTP (optional, only required if domain is configured to use this port instead of port 80) | The designated storage domain master |
| TCP | 2163 | Connect to VNX for block storage domain master by using HTTPS (optional, only required if domain is configured to use this port instead of port 443) | The designated storage domain master |
| TCP | 8000 | Multiple purposes:
|
|
| TCP | 9998 | Connect to VNX for block storage domain master by using HTTP (optional, only required if domain is configured to use this port instead of port 80) | The designated storage domain master |
| TCP | 9999 | Connect to VNX for block storage domain master by using HTTPS (optional, only required if domain is configured to use this port instead of port 443) | The designated storage master |
Please provide ratings (1-5 stars).
Please provide ratings (1-5 stars).
Please provide ratings (1-5 stars).
Please select whether the article was helpful or not.
Comments cannot contain these special characters: <>()\