Cisco Cisco Prime Central 1.5.1 Guía De Instalación
The system administrator should...
Used by...
Protocol
Exposure
Port No.
Apply a rate-limiting policy.
Internal services for SSH
communication
communication
SSH
Public
1107
Apply a rate-limiting policy.
Embedded Oracle database
TCP
Public
1108
Only allow access to this port from localhost.
RMI service
TCP
Private
1199
Apply a rate-limiting policy.
Oracle database server listener
TCP
Public
1521
Only allow access to this port (or its equivalent)
from the Prime Central portal, unless remote
shutdown is required.
from the Prime Central portal, unless remote
shutdown is required.
Tomcat shutdown
TCP
Private
8005
Disable this port if it is not in use.
Apache JServ Protocol (AJP)
TCP
Private
8009
Only allow access to this port from localhost.
Discovery service
TCP
Private
8090
Apply a rate-limiting policy and make this port
available to all users who need to access the
Prime Central portal.
available to all users who need to access the
Prime Central portal.
Default HTTPS port; subject to
change during installation
change during installation
TCP
Public
8443
Prime Central Integration Layer
Allow a dynamic range from 1099 to the number
of integration layer registrations; for example,
1103. Set aside a range of 10 ports.
of integration layer registrations; for example,
1103. Set aside a range of 10 ports.
Karaf JMX RMI registry (Prime
Central integration layer
management)
Central integration layer
management)
TCP
Private
1099–1103
Allow a dynamic range from 8101 to the number
of integration layer registrations; for example
8105. Set aside a range of 10 ports.
of integration layer registrations; for example
8105. Set aside a range of 10 ports.
Karaf SSH shell
TCP
Private
(localhost)
(localhost)
8101–8105
Only allow access to this port from localhost,
unless alarm management NBI access is required.
If so, enable access from the alarm management
client machines and apply a rate-limiting policy.
unless alarm management NBI access is required.
If so, enable access from the alarm management
client machines and apply a rate-limiting policy.
Alarm management northbound
interface (NBI)
interface (NBI)
TCP
Private/Public
9020
Only allow access to this port from localhost,
unless MTOSI NBI access is required. If so,
enable access from the MTOSI client machines
and apply a rate-limiting policy.
unless MTOSI NBI access is required. If so,
enable access from the MTOSI client machines
and apply a rate-limiting policy.
Multi-Technology Operations
System Interface (MTOSI)
WS-SOAP NBI
System Interface (MTOSI)
WS-SOAP NBI
TCP
Private/Public
9110
Only allow access to this port from localhost,
unless 3GPP NBI access is required. If so, enable
access from the 3GPP client machines and apply
a rate-limiting policy.
unless 3GPP NBI access is required. If so, enable
access from the 3GPP client machines and apply
a rate-limiting policy.
3GPP NBI
TCP
Private/Public
9220
9