Required Ports to Open in Firewalls

Table 1 lists the ports that need to be opened between the client and the server so that the client and server are able to communicate with each other. Most of the port numbers can be configured to user-defined port numbers if needed during the installation process.

For HTTP tunneling, if there is a firewall between the client and server, the external IP address should also be configured in the Advanced Configuration Settings. For more information, see Additional Steps for Installing IP/MPLSView in a NAT Environment.

For more information about SSH tunneling, see Setting Up Port Forwarding for Secure Communications.

Port Map

Figure 1 illustrates the required ports and direction in a completely distributed environment using all server packages.

Note: The illustrations shows data flows, not physical connections.

Figure 1: Port Map

Key

• Base Ports are a group of ports used for offline and online networks.
• Clients are a group of ports used for performance management and fault management features using a client connection to the application server or Viewserver. The features marked with an asterisk (*) are only available for clients connected to the application server.
• Online Networks are a group of ports used for online networks.

Basic Configuration

• The Application Server is the main data processing and simulation server. The default installation setting installs the Database, LDAP, and Traffic Data Collector program packages on the application server. If these packages are not specified as distributed, then the port and direction along those paths can be ignored.
• The Client is the client machine running either Windows or Java Web Start.
• The Traffic Data Collector can be used to distribute the traffic collection.

Advanced Configuration

• The Viewserver complements the application server by offering a streamlined client for network operators and planners who don’t require the full capabilities of the application server. Only network administrators need the full capabilities of the client connected to the application server. Using the Viewserver offloads users and system resources from the application server.
• The Distributed Database server can be used for data storage on a server other than the application server.
• The Collection Server can be used for the remote VLAN autodiscovery module and remote data collection.
• The External LDAP server can be used for user administration and authentication on a server other than the application server. For more information, see the Security Management chapter in the IP/MPLSView Java-based Management and Monitoring Guide.
• The Backup Application server can be used with Rsync packages for redundancy.
• The Backup Database server can be used with Rsync and Replication packages for redundancy.

Port Table

Table 3 lists the required ports and direction by suite, module, or package for clients.

Table 4 lists the required ports and direction by suite, module, or package for the application client only.

Table 5 lists the required ports and direction by suite, module, or package for the application and Viewserver.

Table 6 lists the required ports and direction by suite, module, or package for the Traffic Data Collector.

Table 7 lists the required ports and direction by suite, module, or package for the primary and backup application servers.

Table 8 lists the required ports and direction by suite, module, or package for the Remote Collection Server.