iSTAR eX Network Topology
iSTAR eX Installation and Configuration Guide 2–3
iSTAR eX configurations that accept translated network addresses are usually 
managed at the remote site. 
During firewall configuration the following TCP/IP ports must be open: 
 1999
 2001
 2800-2802
 28000-28010
Local Address Management 
Although it is not required, System Managers who want to maintain local 
address management can configure iSTAR eX with locked IP addresses. 
Locked IP addresses retain the iSTAR eX address that is specified locally or by 
a local Dynamic Host Configuration Protocol (DHCP) server. When IP 
addresses are locked, iSTAR eX communicates across gateways using only the 
IP address that you configure: translated addresses are not accepted.
Before you lock an IP address, ensure that it is reliable (not subject to 
translation) and can be reached from the local network. 
Example:
The example displayed in Figure 2.2 on page 2-4 shows a locked 
iSTAR eX configuration. To configure this cluster, the System Manager is 
in the branch office:
• Use PING to check communication to the exposed (translated) address 
from the Corporate Office. 
• Use the ICU to configure the master controller and lock the exposed 
C•CURE address. 
• Use the ICU to configure the member controllers and lock the local 
subnet addresses.