3.3. Enabling IP Ports
3.3. Enabling IP Ports Before deploying the Red Hat High Availability Add-On, you must enable certain IP ports on the cluster nodes and on computers that run luci (the Conga user interface server). The following sections identify the IP ports to be enabled: Section 3.3.1, "Enabling IP Ports on Cluster Nodes" Section 3.3.2, "Enabling the IP Port for luci " The following section provides the iptables rules for enabling IP ports needed by the Red Hat High Availability Add-On: Section 3.3.3, "Configuring the iptables Firewall to Allow Cluster Components" 3.3.1. Enabling IP Ports on Cluster Nodes To allow the nodes in a cluster to communicate with each other, you must enable the IP ports assigned to certain Red Hat High Availability Add-On components. Table 3.1, "Enabled IP Ports on Red Hat High Availability Add-On Nodes" lists the IP port numbers, their respective protocols, and the components to which the port numbers are assigned. At each cluster node, enable IP ports for incoming traffic according to Table 3.1, "Enabled IP Ports on Red Hat High Availability Add-On Nodes" . You can use system-config-firewall to enable the IP ports. Table 3.1. Enabled IP Ports on Red Hat High Availability Add-On Nodes IP Port Number Protocol Component 5404, 5405 UDP corosync/cman (Cluster Manager) 11111 TCP ricci (propagates updated cluster information) 21064 TCP dlm (Distributed Lock Manager) 16851 TCP modclusterd