Note: The ports must be opened on the firewall
for access to the Address Manager services listed.
If the service isn't required or in use, it can be
blocked.
Address Manager listener ports:
| Port Number | Protocol | Use |
|---|---|---|
| 22 | TCP | SSH / SSH2 / SCP connectivity to servers / Address Manager replication |
| 80* | TCP | Management port for Address Manager access (HTTP) |
| 88 | TCP/UDP | Kerberos / Active Directory Authentication / GSS-TSIG |
| 123 | UDP | Network Time Protocol (NTP) |
| 161 | UDP | SNMP management |
| 443* | TCP | Secure management port used for Address Manager access (HTTPS) |
| 1099 | TCP | Address Manager replication / JMX service |
| 5432 | TCP | Address Manager replication |
| 10045** | TCP/UDP | Address Manager and DNS/DHCP Server notification (unencrypted) |
| 10046** | TCP/UDP | Address Manager and DNS/DHCP Server notification (encrypted) |
| 10048 | TCP | Prometheus for metrics exporter |
Address Manager ports used as a client:
| Port Number | Protocol | Use |
|---|---|---|
| 21 | TCP | FTP |
| 22 | TCP/UDP | Secure backup configured to save to a remote server (SFTP) |
| 22 | TCP | SSH / SSH2 / SCP connectivity to servers / Address Manager replication |
| 25*** | TCP/UDP | Email notification (SMTP) |
| 49 | TCP | TACACS+ authentication |
| 53 | TCP/UDP | DNS, Discovery, Response Policy Search |
| 88 | TCP/UDP | Kerberos / Active Directory Authentication / GSS-TSIG |
| 123 | UDP | Network Time Protocol (NTP) |
| 161 | TCP/UDP | IP Reconciliation, SNMP Monitoring |
| 162**** | UDP | SNMP Traps |
| 389**** | TCP/UDP | LDAP authentication |
| 514**** | UDP | Syslog redirection from Address Manager |
| 587*** | TCP/UDP | Email notification (SMTP with STARTTLS) |
| 636 | TCP | SSL support (LDAP) |
| 1099 | TCP | Address Manager replication |
| 1812**** | TCP/UDP | RADIUS authentication |
| 3269 | TCP | LDAPS for global catalog (GC) |
| 5432 | TCP | Reporting, Disaster Recovery, database replication |
| 10042** | TCP | Secure management and connectivity to DNS/DHCP Servers |
| 10048 | TCP | Prometheus for metrics exporter |
Note: Port notices
- * When using HTTP, port 80 is required and port 443 is optional. When using HTTPS, port 443 is required and port 80 is optional.
- ** Opening one of the two listener ports (10045/10046) is required to receive notifications from DNS/DHCP Server. 10045 is required if notifications are set to unencrypted, and 10046 is required if notifications are set to encrypted. Client port 10042 must also be open for management of DNS/DHCP Servers.
- *** When using SMTP without TLS encryption, port 25 must be open. When using SMTP with TLS encryption (SMTP with STARTTLS), port 587 must be open.
- **** These are the default ports, however you can specify different ports.
- Database replication: Port 10045/10046 (depending
on unencrypted/encrypted notifications) on all Address Manager servers in replication,
including the Primary server, must be open for incoming
connections. In addition, you must ensure to enable
Internet Control Message Protocol (ICMP) to
allow the Primary Address Manager server to
reach the Secondary and Tertiary server. When
configuring or running database replication, ports 22,
80†, 443†, 1099, and 5432 must
be open on the firewall between the affected
Address Manager servers.
†Address Manager uses port 80 and 443 for bidirectional communication between the Primary and Secondary servers. Port 80 is not required if you have HTTP set to disabled.
- iDRAC: Additional ports might need to be opened for iDRAC usage. For more information, refer to the Dell iDRAC User Guide.