SUM network ports used

SUM requires that certain network ports are available. If you lock down network ports, make sure that the ports listed in the network port tables are open so that SUM works correctly when connecting to remote node servers and hosts. If you are unable to unlock these network ports, you must run SUM locally and update network-based hosts through their web interfaces (for example, the OA, iLO, and VC modules).

NOTE:

Use the open_firewall parameter for SUM to automatically open the required firewall ports on the local host and any remote servers.

Updates for most node types require network traffic in both directions between the server running SUM and the node. The server running SUM creates a local HTTP server, which is used to serve firmware binaries to the node and to communicate node status. The remote node issues HTTP requests and posts status updates to the server running SUM during the update process. If there is a routing problem or firewall blocking traffic back from the remote node to the system running SUM, firmware updates might be blocked, status updates blocked or delayed, or both.

After creating the initial communication binds to one of the available ports, SUM traffic can move to a dedicated high-number port number (greater than 1024). This frees up the initial port for new requests.

System running SUM	Target node type	Inventory phase		Deployment phase
		To target	From target (SUM 7.3.0 and later)	To target	From target (SUM 7.3.0 and later)
Windows	Windows	445, 135, 137, 138, 139	None	445, 135, 137, 138, 139	None
Windows or Linux	Linux	22	None	22	None
Windows or Linux	HP-UX	22, 63002	63001, 63002	22	63001, 63002
Windows or Linux	VMware	443, 5989	63001	443, 5989	63001
Windows or Linux	OA	22, (80), 443	None	22, (80), 443	None
Windows or Linux	Moonshot, Superdome X	22, (80), 443	None	22, (80), 443	63001, 63002
Windows or Linux	iLO, VC, FC switch, SAS switch	22, (80), 443	None	22, (80), 443	63001

SUM uses port 63002 to communicate between the sum_binary and sum_service applications on both Windows and Linux systems. If ports are listed in both columns, SUM communicates bidirectionally.

NOTE:

Windows to Windows traffic uses WMI, a standard DCOM-In port 135 and Async-in and WMI-in.

Issue the commands /port and /ssl_port to change from ports 63001 and 63002 if there are firewall conflicts. Use --open_firewall to open the HTTP and HTTPS ports used by SUM for external access. Open these ports for remote node functionality and for remote browser access. For example:

smartupdate /port 80 /ssl_port 443

You can issue the command /ftp_port to assign which port to use for FTP service. By default the FTP port is disabled. Use the command to enable the service.