NEC Express Server Express5800 Series - Setting Required after Installing NEC ESMPRO Agent

2. Setting up
Express5800/R320e-E4, R320e-M4 Installation Guide (Linux)
37
Chapter 1 Installing Operating System
2.3.9
Setting required after installing NEC ESMPRO Agent
NEC ESMPRO Manager uses the following network port when it monitors the server where NEC ESMPRO
Agent is installed.
When configuring access control on your server, allow these ports as accessible.
As for "Auto-assign" in the table, OS assigns available port within the certain range. Accordingly, these ports
cannot be fixed. The available range is described in the following file.
# cat /proc/sys/net/ipv4/ip_local_port_range
Tips
If you use an example of opening the port by using iptables, you have to install
iptables-services in advance.
Between NEC ESMPRO Agent and NEC ESMPRO Manager
Features
NEC ESMPRO
Agent
Direction
NEC ESMPRO
Manager
Remarks
Automatic registration (SNMP)
Server monitoring (SNMP)
161/udp


161/udp
snmp
Report to Manager (SNMP) Auto-assign

162/udp
snmp-trap
Report to Manager
(TCP/IP in Band, TCP/IP Out-of-Band)
Auto-assign


31134/tcp
* If left and right arrows are shown in Direction column, an upper arrow shows the direction at start-up, and the
lower shows the return.
* Port numbers not used by SNMP can be changed on alert setting screen.
* Shown below is an example of ports opened by using iptables. Setting must be saved finally.
# iptables -I INPUT -p udp --dport 161 -s <IP address of NEC ESMPRO Manager> -j ACCEPT
# iptables -I OUTPUT -p udp --dport 161 -j ACCEPT
# iptables -I OUTPUT -p udp --dport 162 -j ACCEPT
# iptables -I OUTPUT -p tcp --dport 31134 -j ACCEPT
# service iptables save
Between NEC ESMPRO Agent and a mail server
Features
NEC ESMPRO
Agent
Direction Mail Server Remarks
Express Report Service
(E-mail)
Auto-assign
→
←
25/tcp
smtp
→
←
110/tcp
pop3
* In the direction column, the upper arrow indicates the direction in which the communication started and
the lower arrow indicates the returning communication.
* The port to be used can be changed from the report setting screen.
* An example of opening the port by using iptables is shown below. Save the setting at the end.
# iptables -I OUTPUT -p tcp --dport 25 -j ACCEPT
# iptables -I OUTPUT -p tcp --dport 110 -j ACCEPT
# service iptables save