Diagnostics Agent ports required through firewalls

[former_member204618]

Hi all,

I have another set of systems I need to install the Diagnostics Agent onto, hosted on another set of remote servers.

What firewall ports need to be opened in order to facilitate the installation and managed system configuration processes?

I haven't been able to find a definitive listing.

I am assuming the following list with a system number of 00 :-

Message Server port 8101 to Solman
SLD port 50000 to Solman
sapstartsrv port 50013 to Managed System
saposcol port 1128 to Managed System
ICM http port 8000 to Managed System

Are there any others required?

Thanks

Craig

[Martina_Gállego]

Hi Craig,

Open the next ports:

From Managed System to SolMan:

TCP/8000

TCP/8101

TCP/50000-50999

From SolMan to Managed System database:

TCP/1433 (in case of MS SQL Server)

Best regards,

Martina

[former_member204618]

Hi Martina,

Thanks for that but I think I still need the port for Managed System ICM as per Step 3 Section Common Parameters of the Managed Systems Configuration Wizard.  As it states :-

The Load Balancer Host is used to generate jump-in URLs to the managed system. If you have configured a load balancer for this system, provide the appropriate information here, if not, enter the virtual hostname that is to be used for the system.In case no separate Load Balancer exists, check whether the Technical system is using ICM (like ABAP, #Double Stack# or recent Java Systems) and enter the ICM HTTP (in general 80<Central Instance number>) or HTTPS port number. For other systems, based on a NW JAVA stack 6.XX, etc, provide the Java Message Server HTTP (in general 81<Java Message Server Instance number>) or HTTPS port number. To retrieve this information, choose the Technical System Details link and drill down to the central instance.

The check URL link tries to run The Load Balancing URL http://host:8000/sap/public/ping could not be reached : Connection timed out: connect

You are correct about the ports for the database under the same step, I'd forgotten about them as we had already got these open.

I've checked my other systems open ports and I have the following from Managed Systems :-

50004 (P4 dispatcher)

50000 (HTTP dispatcher)

8000 (HTTP icm)

6001 (IntroScope EM)

sapgwxx (SAP GW)

sapmsxx (SAP MS)

Yet the logs show "ms://[host]:8101/P4] Agent ready"

So to summarise :-

From Managed System to SolMan (assuming instance no. is 00):

8000 (HTTP icm)

8101 (HTTP msg_server)

50000 (or which ever port is configured for HTTP for the JAVA stack)

50004 (P4 dispatcher)

6001 (IntroScope EM)

From SolMan to Managed System

1521 (Oracle DB)

1433 (MS SQL)

5000 (Sybase ASE)

8000 (HTTP icm)

sapgw00 (SAP GW)

sapmsSID (SAP MS)

50013 (sapstartsrv)

1128 (saposcol)

Have I missed anything?

Thanks

Craig

[Martina_Gállego]

Hi Craig,

For your reference, you can check too:

http://www.sdn.sap.com/irj/scn/index?overridelayout=true&rid=/library/uuid/4e515a43-0e01-0010-2da1-9...

Best regards,

Martina