Job Management Partner 1/Base User's Guide

Appendix C.2 Direction in which data passes through the firewall

The following table describes the direction in which data passes through the firewall. JP1/Base supports address conversion of the packet filtering type and the NAT (static mode) type.

Table C-2 Direction in which data passes through the firewall

Service name	Port number	Direction in which data passes through the firewall
jp1imevt	20098/tcp	JP1/Base that transfers JP1 events -> JP1/Base that receives JP1 events
jp1imevtapi	20099/tcp	A program such as JP1/IM - Manager that obtains JP1 events -> JP1/Base
jp1imrt	20237/tcp	JP1/IM - Manager -> JP1/Base Upper-layer JP1/IM - Manager -> lower-layer JP1/IM - Manager
jp1imcmda	20238/tcp	JP1/IM - View -> JP1/Base on the host where JP1/IM - Manager is installed JP1/IM - Manager -> JP1/Base
jp1imcmdc	20239/tcp	JP1/Base on the host running JP1/IM - Manager <--> JP1/Base on the host that executes the command
jp1bsuser	20240/tcp	JP1/IM - Manager -> JP1/Base JP1/AJS - Manager -> JP1/Base JP1/AJS - Agent -> JP1/Base
JP1AutoJob (in Windows) jesrd (in UNIX)	user-definable-value/tcp	JP1/Base <--> A product using the JP1/SES protocol
jp1bsplugin	20306/tcp	Upper-layer program using services such as JP1/IM - Manager -> JP1/Base When using the JP1/Base health check function: JP1/Base on the monitoring host -> JP1/Base on the monitored host
jp1bscom	20600/tcp	JP1/Base <--> JP1/Base on a different host
ldap	389/tcp#	JP1/Base (authentication server) -> Directory server
ldaps	636/tcp#

Legend:

->: Communication data goes in one direction (from left to right).

<-->: Communication data goes in both directions (from left to right, and from right to left).

#: The port number depends on whether SSL is used for communication between JP1/Base (authentication server) and a directory server. If SSL is used, 636/tcp is used.

To use the port numbers listed in Table C-2 to establish a connection, you must set the firewall that lets the service-name port pass through it. You must also set the firewall that allows ANY to pass through it in response to the session established for the port number for service-name. The response must be ANY because the OS performs automatic numbering.

When you install JP1/Base on a firewall server machine, communications within that machine might also be prohibited by the firewall functionality. Therefore, set the firewall server machine to allow communications within the same machine.

[Contents][Back][Next]

All Rights Reserved. Copyright (C) 2009, Hitachi, Ltd.