Default Port Numbers Used on Exadata: Port Numbers for OEM Part 3 of 3

oem_12c

In the post of Part 1, I show the default port numbers for general purpose.

The Part 2 shows the port numbers related to ILOM. This post shows the port numbers for 12c Oracle Enterprise Manager (OEM) Cloud Control.


Port Name                Normal Ranges    Exadata Default Value
EM Upload HTTP Port      4889-4898        4889
EM Upload HTTPS Port     1559,4899-4908   1159

Node Mgr HTTPS Port      7401-7500        Check
Managed Server HTTP Port 7201-7300        Check
EM Console HTTP Port     7788-7798        7788
EM Console HTTPS Port    7799-7809        7799

Management Agent Port    3872,1830-1849   Check
Admin Server HTTP Port   7001             Check
Admin Server HTTPS Port  7101-7200        Check
Managed Server HTTPS Port 7301-7400       Check

Check means check the port number configured in the installation.

There are a few ports not necessarily through the firewall between Exadata and OEM OMS.

EM Repository DB Port                 1521

There are also some more ports related to OEM and optional, and only need when using the components.

Port Name                             Port Number
JVM Diagnostics Managed Server	      3800
JVM Diagnostics Managed Server (SSL)  3801

ADP RMI Registry Port	              51099
ADP Java Provider Port	              55003
ADP Remote Service Controller Port	  55000
ADP Listen                            4210
ADP Listen Port (SSL)                 4211
BI Publisher HTTP                     9701
BI Publisher HTTPS                    9702
Secure web connection to oracle.com   443

Note: Port 443 is https to updates.oracle.com, support.oracle.com, ccr.oracle.com, login.oracle.com,aru-akam.oracle.com
It is outgoing from OMS and used for communication with Oracle for OCM, MOS, Patching, Self-Updates, ASR.

To verify detail about the ports used in oms, you can run the followings

[oracle@gc12c bin]$ emctl status oms -details
Oracle Enterprise Manager Cloud Control 12c Release 2
Copyright (c) 1996, 2012 Oracle Corporation. All rights reserved.
Enter Enterprise Manager Root (SYSMAN) Password :
Console Server Host : gc12c.enkitec.com
HTTP Console Port : 7789
HTTPS Console Port : 7801
HTTP Upload Port : 4890
HTTPS Upload Port : 4901
EM Instance Home : /u01/app/oracle/oms12c/gc_inst/em/EMGC_OMS1
OMS Log Directory Location : /u01/app/oracle/oms12c/gc_inst/em/EMGC_OMS1/sysman/log
OMS is not configured with SLB or virtual hostname
Agent Upload is locked.
OMS Console is locked.
Active CA ID: 1
Console URL: https://gc12c.enkitec.com:7801/em
Upload URL: https://gc12c.enkitec.com:4901/empbs/upload

WLS Domain Information
Domain Name : GCDomain
Admin Server Host: gc12c.enkitec.com

Managed Server Information
Managed Server Instance Name: EMGC_OMS1
Managed Server Instance Host: gc12c.enkitec.com
WebTier is Up
Oracle Management Server is Up

I could not find a command to show what’s port number is used for something like Node Manager, Managed Server. But do find a way to show this kind of information from a temp file in the initial installation. The file is in MIDDLEWARE_HOME/.gcinstall_temp/staticports.ini on OMS host.

[oracle@gc12c oracle]$ cat /u01/app/oracle/oms12c/.gcinstall_temp/staticports.ini
Enterprise Manager Upload Http Port=4890
Enterprise Manager Upload Http SSL Port=4901
Enterprise Manager Central Console Http SSL Port=7801
Node Manager Http SSL Port=7405
Managed Server Http Port=7203
Enterprise Manager Central Console Http Port=7789
Oracle Management Agent Port=3872
Admin Server Http SSL Port=7102
Managed Server Http SSL Port=7302

The following chart shows firewall configurations for OEM components.

OEM_firewall_port

Related Posts:

Default Port Numbers Used on Exadata: Port Numbers for General Use Part 1 of 3

Default Port Numbers Used on Exadata: Port Numbers for ILOM Part 2 of 3

Advertisements

Default Port Numbers Used on Exadata: Port Numbers for ILOM Part 2 of 3

network_firewall

The previous post discusses the default port for general use. This post shows the default number for ILOM.

For the following SP Network Ports on db and cell nodes need to be opened. Otherwise opening remote console from ILOM will not work.

<br /><br />Port   Protocol  Application<br />5120   TCP       Oracle ILOM Remote Console: CD<br />5121   TCP       Oracle ILOM Remote Console: Keyboard and Mouse<br />5123   TCP       Oracle ILOM Remote Console: Diskette<br />5555   TCP       Oracle ILOM Remote Console: Encryption<br />5556   TCP       Oracle ILOM Remote Console: Authentication<br />6481   TCP       Oracle ILOM Remote Console: Servicetag Daemon<br />7578   TCP       Oracle ILOM Remote Console: Video<br />7579   TCP       Oracle ILOM Remote Console: Serial<br /><br />

The following are for Common Network Ports.

<br /><br />Port   Protocol       Application<br />22     SSH - TCP      SSH - Secure Shell<br />69     TFTP - UDP     TFTP (outgoing)<br />80     HTTP - TCP     Web<br />123    NTP - UDP      NTP (outgoing)<br />161    SNMP - UDP     SNMP<br />162    IPMI - UDP     IPMI (outgoing)<br />389    LDAP - UDP/TCP LDAP (outgoing)<br />443    HTTPS - TCP    Web<br />514    Syslog - UDP   Syslog - (outgoing)<br />623    IPMI - UDP     IPMI<br />546    DHCP - UDP     DHCP<br />1812   RADIUS - UDP   RADIUS (outgoing)<br /><br />

For more detail about default ports number used in ILOM, you can also check out document – Oracle Integrated Lights Out Manager (ILOM) 3.0 Concepts Guide.

Related Posts:

Default Port Numbers Used on Exadata: Port Numbers for OEM Part 3 of 3

Default Port Numbers Used on Exadata: Port Numbers for General Use Part 1 of 3

Default Port Numbers Used on Exadata: Port Numbers for General Use Part 1 of 3

network_port

There are many ports that need to be opened in firewall to allow certain types of communication on Exadata. Here is the list of the port numbers. Note: all ports below are on the management work with the only exception of port number 1521, which is on client or public network.

Source   Target               Protocol     Port  Application
         Database management  SSH - TCP    22    SSH
         DB, Cell, IB IlOMs   SSH - TCP    22    SSH
         KVM                  SSH - TCP    22    SSH
         Storage management   SSH - TCP    22    SSH
         KVM                  Telnet - TCP 23    Telnet
Cell     E-mail server        SMTP         25    SMTP
                                          465 if using SSL
DB, Cell
IB ILOMs                      TFTP - UDP   69    Outgoing TFTP
         DB,Cell, IB ILOMs    HTTP - TCP   80    Web
         KVM                  HTTP - TCP   80    Avocent video viewer
                                                 download for Java applet
         PDU                  HTTP - TCP   80    Web
DB, Cell                      NTP - UDP   123    Outgoing NTP
IB ILOMs

ASR Mgr  ASR asset            SNMP (get)  161    FMA enrichment
         DB, Cell, IB IlOMs   SNMP - UDP  161    SNMP
         KVM                  SNMP - UDP  161    SNMP
         PDU                  SNMP - UDP  161    SNMP

Cell     SNMP subscriber such SNMP        162    SNMP version 1
         as OEM or SNMP Mgr                      outgoing traps

DB, Cell ASR Manager          SNMP        162    Telemetry messages sent
ILOMs                                            to ASR Manager

DB, Cell                      IPMI - UDP  162    Outgoing IPMI
IB ILOMs
KVM                           SNMP - UDP  162    Outgoing SNMPv2 traps
PDU                           SNMP - UDP  162    Outgoing SNMPv2 traps
         DB, Cell, IB ILOMs   LDAP - UDP/TCP 389 Outgoing LDAP

ASR Mgr  ASR backend          HTTPS       443    Telemetry messages sent
                                                 to ASR backend
         DB, Cell, IB ILOMs   HTTPS - TCP 443    Web
         KVM                  HTTPS - TCP 443    Browser interface for
                                                 MergePoint Utility switch
                                                 and KVM sessions
         PDU                  HTTPS - TCP 443    Browser interface

DB, Cell                      Syslog - UDP 514   Outgoing Syslog
IB ILOMs
KVM, PDU

DB, Cell                      DHCP - UDP  546    client DHCP
IB ILOMs
KVM, PDU
         DB, Cell, IB ILOMs   IPMI - UDP  623    IPMI
OEM                           TCP        1159    OEM HTTPS upload port
         DB                   TCP        1521    Database listener
DB, Cell                      RADIUS - UDP 1812  Outgoing RADIUS
IB ILOMs
         KVM                  TCP        2068    KVM session data
OEM                           TCP        4889    OEM HTTP upload port
         DB                   TCP        7777    OEM HTTP console port
         DB                   TCP        7799    OEM HTTPS console port
         Cell                 TCP        7799    OEM HTTPS console port

The above port list is based on the document Default Service Ports for Exadata and Cloud Control /Enterprise Manager Configurations (Doc ID 1532838.1).

For me, it is not easy to figure out which port should be open on which hardware component. So I use Excel spreadsheet to create a matrix to show ports used on Exadata.

PortList_exadata

In the future, I will have another two posts discussing ports used by ILOM and OEM.

Related Posts:

Default Port Numbers Used on Exadata: Port Numbers for ILOM Part 2 of 3

Default Port Numbers Used on Exadata: Port Numbers for OEM Part 3 of 3