Appendix D.2 Firewall passage directions

Organization of this subsection
(1) Setting firewall passage directions
(2) Setting firewall passage directions (for logical host operation)

(1) Setting firewall passage directions

If there is a firewall between PFM - Manager and PFM - Agent for Service Response, you must set fixed port numbers for all services of PFM - Manager and PFM - Agent. To enable communications to all services to pass through the firewall, the port numbers that you set must comply with the directions shown in the following table.

Table D-2 Firewall passage directions (between PFM - Manager and PFM - Agent)

Service nameParameterPassage directions
Agent Store servicejp1pcstovAgent [Figure] Manager
Agent Collector servicejp1pcagtvAgent [Figure] Manager
Legend:
Manager: PFM - Manager host
Agent: PFM - Agent host
[Figure]: Direction in which communication (connection) begins, from the right-hand item to the left-hand item.

When communication (connection) is initiated, the receiving side (the side indicated by the tip of the arrow) uses the port numbers shown in Table D-1 as receiving ports. The connecting side uses the free port numbers assigned by the OS as sending ports. The available range of port numbers depends on the OS.

Set the firewall so that the sending ports temporarily used by Manager can pass through to the receiving ports of Agent.

Note:
To execute the jcptool db dump (jpcctrl dump) command or jcptool service list (jpcctrl list) command on a PFM - Agent host, use one of the following methods:
  • Specify the proxy option of the jcptool db dump (jpcctrl dump) or jcptool service list (jpcctrl list) command to communicate through PFM - Manager. For details about the proxy option of the jcptool db dump (jpcctrl dump) or jcptool service list (jpcctrl list) command, see the chapter that describes commands in the manual Job Management Partner 1/Performance Management Reference.
  • Between each PFM - Agent host, set port numbers in the directions shown in the table below so that communication can pass through the firewall.

    Table D-3 Firewall passage directions (between PFM - Agent hosts)

    Service nameParameterPassage directions
    Agent Store servicejp1pcstovAgent [Figure][Figure] Agent
    Agent Collector servicejp1pcagtvAgent [Figure][Figure] Agent
Legend:
Agent: PFM - Agent host
[Figure][Figure]: Directions in which communication (connections) begin: from the left-hand item to the right-hand item, and from the right-hand item to the left-hand item.

(2) Setting firewall passage directions (for logical host operation)

If there is a firewall between PFM - Manager and PFM - Agent for Service Response, you must set fixed port numbers for all services of PFM - Manager and PFM - Agent. To enable communications to all services to pass through the firewall, the port numbers that you set must comply with the directions shown in the following table.

Table D-4 Firewall passage directions (between PFM - Manager and PFM - Agent (for logical host operation))

Service nameParameterPassage directions
Agent Store service (logical host)jp1pcstovAgent (logical host) [Figure] Manager
Agent Collector service (logical host)jp1pcagtvAgent (logical host) [Figure] Manager
Legend:
Manager: PFM - Manager host
Agent (logical host): PFM - Agent host
[Figure]: Direction in which communication (connection) begins, from the right-hand item to the left-hand item.

When communication (connection) is initiated, the receiving side (the side indicated by the tip of the arrow) uses the port numbers shown in Table D-1 as receiving ports. The connecting side uses the free port numbers assigned by the OS as sending ports. The available range of port numbers depends on the OS.

When a connection is initiated from Manager to Agent as shown above, set the firewall so that the sending ports temporarily used by Manager can pass through to the receiving ports of Agent.