Dell EMC VxRail E series - Appendix B: Vxrail Open Ports Requirement

44 | Network Planning Guide
© 2018 Dell Inc. or its subsidiaries
Appendix B: VxRail Open Ports Requirement
Use the tables in this appendix for guidance on firewall settings specific for the VxRail cluster
The VxRail cluster needs to be able to connect to specific applications in your data center. DNS is required and NTP is optional.
Open the necessary ports to enable connectivity to the external syslog server, and for LDAP and SMTP
Data Center Application Access
Description
Source Device(s)
Destination Device(s)
Protocol
Port(s)
DNS
VxRail Manager, Dell iDRAC
DNS Server(s)
UDP
53
NTP Client
Host ESXi Management Interface,
Dell iDRAC,
VMware vCenter Servers,
VxRail Manager
NTP Server(s)
UDP
123
SYSLOG
Host ESXi Management Interface,
vRealize Log Insight
Syslog Server
TCP
514
LDAP
VMware vCenter Servers, PSC
LDAP Server
TCP
389, 636
SMTP
ESRS Gateway VMs, vRealize Log
Insight
SMTP Server (s)
TCP
25
Open the necessary firewall ports to enable IT administrators to manage the VxRail cluster
Administration Access
Description
Source Device(s)
Destination Device(s)
Protocol
Port(s)
ESXi Management
Administrators
Host ESXi Management
Interface
TCP. UDP
902
VxRail Management GUI/Web
Interfaces
Administrators
VMware vCenter Server,
VxRail Manager, Host ESXi
Management,
Dell iDRAC port,
vRealize Log Insight,
PSC
TCP
80, 443
Dell server management
Administrators
Dell iDRAC
TCP
623, 5900,
5901
SSH & SCP
Administrators
Host ESXi Management,
vCenter Server Appliance,
Dell iDRAC port,
VxRail Manager Console
TCP
22
If you plan to use a customer-supplied vCenter Server instead of deploying a vCenter Server in the VxRail cluster, open the
necessary ports so that the vCenter instance can manage the ESXi hosts
vCenter and vSphere
Description
Source Device(s)
Destination Device(s)
Protocol
Port(s)