E.3 Settings for the Windows firewall
If PFM - RM for Platform establishes an outgoing connection, an empty port assigned by the operating system is used as the send port. In this case, because it is assumed that the default Windows firewall settings allow outgoing communication, set up incoming permission only.
For PFM - RM for Platform, you must register the ports used by the services below to the inbound rules.
|
Parameter |
Port number |
Service |
|---|---|---|
|
jp1pcagt7[n] |
20281/tcp |
Remote Monitor Collector service# |
|
jp1pcsto7[n] |
20282/tcp |
Remote Monitor Store service# |
- #
-
You must register a port number for each instance created. Serial numbers are assigned to the parameters of the second and subsequent instances. No serial number is assigned to the instance that is created first.
Use the following procedure to register the inbound rules:
-
Execute the jpcconf port define command to set the port numbers for use by the above services. Then, execute the jpcconf port list command to confirm the port numbers for the services. For details about the jpcconf port command, see the manual JP1/Performance Management Reference.
-
Use either of the following steps to register inbound rules.
-
Select [Administrative Tools], and then [Windows Firewall with Advanced Security]. Then, from the [Action] menu for [Inbound Rules], select [New Rules], and then follow the instructions in the [New Rule Wizard] to register the following inbound rules:
- For the Remote Monitor Collector service
Rule Type: Port
Protocol and Ports: TCP-specific local port 20281#
Action: Allow the connection.
Profile: Select all check boxes.
Name: PFM - RM for Platform <instance-name>
- For the Remote Monitor Store service
Rule Type: Port
Protocol and Ports: TCP-specific local port 20282#
Action: Allow the connection.
Profile: Select all check boxes.
Name: PFM - RM Store for Platform <instance-name>
-
Use the following commands to register inbound rules:
- For the Remote Monitor Collector service:
netsh advfirewall firewall add rule
name="PFM - Master Manager"
action=allow dir=in enable=yes
localport=20271#
protocol=TCP
- For the Remote Monitor Store service
netsh advfirewall firewall add rule
name="PFM - RM Store for Platform inst1"
action=allow dir=in enable=yes
localport=20282#
protocol=TCP
- #
-
If you have changed the default port numbers by using the jpcconf port command, your port numbers are different from those shown in this document. Register the port numbers you confirmed in step 1 above.
-
-
Select [Administrative Tools], and then [Windows Firewall with Advanced Security]. In the Inbound Rules window, make sure that the above settings you entered are displayed and enabled. The registration is completed.
If you uninstall PFM - RM for Platform, delete the rules registered in step 2 from the Windows Firewall with Advanced Security window opened from [Administrative Tools].
To delete a registered rule, select the information in the Inbound Rules window, and then click [Delete]. If you want to temporarily disable registered information rather than deleting it, click [Disable Rule].