Avocent SPC420 User Manual
50 DSView 3 Software Installer/User Guide
Firewalls
In a typical network configuration, as shown in Figure 4.1, the DSView 3 software client is located
outside of the firewall and the DSView 3 server and managed appliances reside inside the firewall.
In this case, the firewall must be configured to allow two TCP/IP ports inside the firewall.
outside of the firewall and the DSView 3 server and managed appliances reside inside the firewall.
In this case, the firewall must be configured to allow two TCP/IP ports inside the firewall.
One TCP port (default=443) is used for the HTTPS web browser connection between the DSView
3 software client and the DSView 3 server. The other TCP port (default=1078) is used for the
Avocent Proxy Protocol to tunnel video and Telnet traffic. Both ports are configurable.
3 software client and the DSView 3 server. The other TCP port (default=1078) is used for the
Avocent Proxy Protocol to tunnel video and Telnet traffic. Both ports are configurable.
If you are using the DSView 3 management software through a firewall, we recommend the
following:
following:
•
Place the DSView 3 server and all managed appliances within the same firewall Demilitarized
Zone (DMZ). If the managed appliances are not in the same DMZ with the DSView 3 server,
you must configure the firewall so all data may pass between the zones using TCP/IP ports 22
(SSH), 3211, 2068, 8192 and 3871. You must also configure the User Datagram Protocol
(UDP) port 3211 so it may pass through the firewall for initial network discovery of appliances
that do not have an IP address.
Zone (DMZ). If the managed appliances are not in the same DMZ with the DSView 3 server,
you must configure the firewall so all data may pass between the zones using TCP/IP ports 22
(SSH), 3211, 2068, 8192 and 3871. You must also configure the User Datagram Protocol
(UDP) port 3211 so it may pass through the firewall for initial network discovery of appliances
that do not have an IP address.