No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

Administrator Guide

OceanStor V3 Series V300R006

This document is applicable to OceanStor 2200 V3, 2600 V3, 5300 V3, 5500 V3, 5600 V3, 5800 V3, 6800 V3, 18500 V3, and 18800 V3. Routine maintenance activities are the most common activities for the storage device, including powering on or off the storage device, managing users, modifying basic parameters of the storage device, and managing hardware components. This document is intended for the system administrators who are responsible for carrying out routine maintenance activities, monitoring the storage device, and rectifying common device faults.
Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
How Do I Check Whether Network Firewall Ports Are Enabled?

How Do I Check Whether Network Firewall Ports Are Enabled?

Question

How do I check whether network firewall ports are enabled?

Answer

The check method varies depending on whether the proxy server is configured or not.

Proxy Server Not Configured

  1. Test the connection between the DNS server and the storage system.

    1. Log in to DeviceManager.
    2. Choose Settings > Basic Information > DNS Service.
    3. Test the connection between the DNS server and the storage system. If the connection is normal, go to 2.
      • You can click Test of each DNS IP address to test its availability.
      • You can click Test All to test the connection between the DNS server and the storage system.

  2. Obtain the URL of the technical support center to which alarm and event data of the storage system will be uploaded.

    • Carrier in China region: icloudservice-cn.huawei.com
    • Carrier in Romania region: itr-eservicero-carrier.huawei.com
    • Enterprise in China region: ecloudService-cn.huawei.com
    • Enterprise in Romania region: itr-eservicero-ent.huawei.com

  3. Obtain the IP address of the technical support center.

    1. Log in to the storage system using the CLI.
    2. Run change user_mode current_mode user_mode=developer to go to the developer view.
    3. Run minisystem to go to the minisystem mode.
    4. Run ping URL of the technical support center. For example, run ping itr-eservicero-ent.huawei.com for Enterprise in Romania region.
      • If the ping operation succeeds, the value of XXX.XXX.XXX.XXX in the parentheses in the command output is the IP address of the technical support center.
      • If the ping operation fails, check the network firewall and DNS configuration.
      Storage: minisystem> ping tr-eservicero-ent.huawei.com
      PING tr-eservicero-ent.huawei.com (XXX.XXX.XXX.XXX) 56(84) bytes of data.
      64 bytes from XXX.XXX.XXX.XXX: icmp_seq=1 ttl=64 time=0.720 ms
      64 bytes from XXX.XXX.XXX.XXX: icmp_seq=2 ttl=64 time=0.181 ms

  4. Check whether the storage system can be properly connected to ports 7448, 8448, and 9448 of the technical support center.

    In minisystem mode, run telnet XXX.XXX.XXX.XXX 7448, telnet XXX.XXX.XXX.XXX 8448, and telnet XXX.XXX.XXX.XXX 9448.

    NOTE:
    • XXX.XXX.XXX.XXX is the IP address of the technical support center obtained in 3.d.
    • If the command output displays Connected to XXX.XXX.XXX.XXX, the connection is normal.
    • If the connection is abnormal, check the connectivity between the storage system and the external network, for example, firewall configuration.
    Storage: minisystem> telnet XXX.XXX.XXX.XXX 7448
    Trying XXX.XXX.XXX.XXX...
    Connected to XXX.XXX.XXX.XXX (XXX.XXX.XXX.XXX).
    Escape character is '^]'.

Proxy Server Configured

  1. Check the connection between the storage system and the proxy server

    1. Log in to the storage system using the CLI.
    2. Run change user_mode current_mode user_mode=developer to go to the developer view.
    3. Run minisystem to go to the minisystem mode.
    4. Run ping XXX.XXX.XXX.XXX. XXX.XXX.XXX.XXX is the proxy server's IP address.
      • If the ping operation succeeds, go to 1.e.
      • If the ping operation fails, check the network connection.
      Storage: minisystem> ping tr-eservicero-ent.huawei.com
      PING tr-eservicero-ent.huawei.com (XXX.XXX.XXX.XXX) 56(84) bytes of data.
      64 bytes from XXX.XXX.XXX.XXX: icmp_seq=1 ttl=64 time=0.720 ms
      64 bytes from XXX.XXX.XXX.XXX: icmp_seq=2 ttl=64 time=0.181 ms
      
    5. In minisystem mode, run telnet XXX.XXX.XXX.XXX YY to check whether the port used by the proxy server to communicate with the storage system is correct. XXX.XXX.XXX.XXX indicates the IP address of the proxy server, and YY indicates the port number of the proxy server.
      • If the port number of the proxy server is correct, go to 2.
      • If the port number of the proxy server is incorrect, correct it by referring to the related product documentation of the proxy server.

  2. Obtain the URL of the technical support center to which alarm and event data of the storage system will be uploaded.

    • Carrier in China region: icloudservice-cn.huawei.com
    • Carrier in Romania region: itr-eservicero-carrier.huawei.com
    • Enterprise in China region: ecloudService-cn.huawei.com
    • Enterprise in Romania region: itr-eservicero-ent.huawei.com

  3. Obtain the IP address of the technical support center.

    1. Log in to the management interface of the proxy server. The following uses the proxy server running Linux as an example.
    2. Run ping URL of the technical support center. For example, run ping itr-eservicero-ent.huawei.com for Enterprise in Romania region.
      • If the ping operation succeeds, the value of XXX.XXX.XXX.XXX in the parentheses in the command output is the IP address of the technical support center.
      • If the ping operation fails, check the network firewall and DNS configuration.
      [root@localhost ~]# ping tr-eservicero-ent.huawei.com
      PING tr-eservicero-ent.huawei.com (XXX.XXX.XXX.XXX) 56(84) bytes of data.
      64 bytes from XXX.XXX.XXX.XXX: icmp_seq=1 ttl=64 time=0.720 ms
      64 bytes from XXX.XXX.XXX.XXX: icmp_seq=2 ttl=64 time=0.181 ms

  4. Check whether the proxy server can be properly connected to ports 7448, 8448, and 9448 of the technical support center.

    Log in to the management interface of the proxy server, and run telnet XXX.XXX.XXX.XXX 7448, telnet XXX.XXX.XXX.XXX 8448, and telnet XXX.XXX.XXX.XXX 9448.

    NOTE:
    • XXX.XXX.XXX.XXX is the IP address of the technical support center obtained in 3.b.
    • If the command output displays Connected to XXX.XXX.XXX.XXX, the connection is normal.
    • If the connection is abnormal, check the configuration of the firewall between the proxy server and the external network.
    • If the connection is normal but alarms and logs cannot be sent to the eService after the eService is configured, enable the HTTP proxy service for ports 7448, 8448, and 9448 of the proxy server by referring to the related product documentation of the proxy server.
    [root@localhost ~]# telnet XXX.XXX.XXX.XXX 7448
    Trying XXX.XXX.XXX.XXX...
    Connected to XXX.XXX.XXX.XXX (XXX.XXX.XXX.XXX).
    Escape character is '^]'.

Download
Updated: 2019-07-12

Document ID: EDOC1000138854

Views: 36127

Downloads: 2047

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Share
Previous Next