At LSM installation time, the standard Linux firewall and SELinux are disabled, as the User installing LSM has the choice of disabling the firewall and SELinux or quitting the LSM installation.

 

It is the User's responsibility to configure and maintain the firewall.

 

LSM services use the following ports:

 

•22 for inbound SSH access to the LSM Server. Access is allowed only for IPs authorized by the User. When the LSM install process is via SSH the IP of the SSH access is auto-authorized.

•67-68 for LSM DHCP. LSM responds only to requests in the LSM designated range of IPs in the LSM subnet that has been User-defined at LSM install time.

•69 for TFTP for PXE responses. The LSM PXE listener responds to all PXE DHCP requests made on LSM subnet and PXE DHCP requests forwarded to the LSM Server IP.

•80 for HTTP. LSM GUI access is allowed only from the LSM Server IP and from other IPs the User has authorized in association with a Login User Name and Password.

•2049 for NFS for LSM RAM Agent data transport. It is allowed only to the LSM RAM Agent service IP while it is processing. The access allowed is restricted to Read-Only for LSM-related service directories with Read-Write allowed for User-related service directories.

 

 

Search keyword(s): secure_access