Firewalls and proxy servers- Lenovo XClarity Administrator

Some functions of Lenovo XClarity Administrator, including management server updates, firmware updates, service and support, require access to the Internet. If you have firewalls in your network, configure the firewalls to enable XClarity Administrator management server to perform these operations. If the management server does not have direct access to the Internet, configure XClarity Administrator to use a proxy server.

Firewalls

Ensure that the following DNS names and ports are open on the firewall.

Note: IP addresses are subject to change. Use DNS names when possible.

Table 1. Required Internet connections
DNS name	IPv4 address	IPv6 address	Ports	Protocols
Download management-server updates, firmware updates, UpdateXpress System Packs (OS device drivers), and repository packs
datacentersupport.lenovo.com	N/A	N/A	443 and 80	https
download.lenovo.com	N/A	N/A	443 and 80	https
filedownload.lenovo.com	N/A	N/A	443 and 80	https
support.lenovo.com	N/A	N/A	443 and 80	https and http
supportapi.lenovo.com	N/A	N/A	443 and 80	https
Download firmware (Flex System x220, x222, x240, x280 X6, x440, x480 X6, x880 X6, some Flex switches, and first-generation CMMs only)
www.ibm.com	129.42.56.216, 129.42.58.216, 129.42.60.216, 129.42.160.51, 207.25.252.197	N/A	443 and 80	https and http
www-03.ibm.com	204.146.30.17	N/A	443 and 80	https and http
download3.boulder.ibm.com	170.225.15.76	N/A	443 and 80	https and http
download3.mul.ie.ibm.com	129.35.224.114	N/A	443 and 80	https and http
download4.boulder.ibm.com	170.225.15.107	N/A	443 and 80	https and http
download4.mul.ie.ibm.com	129.35.224.107	N/A	443 and 80	https and http
delivery04-bld.dhe.ibm.com	170.225.15.104, 129.35.224.104	N/A	443 and 80	https and http
delivery04-mul.dhe.ibm.com	129.35.224.115, 170.225.15.115	N/A	443 and 80	https and http
delivery04.dhe.ibm.com	129.35.224.105, 170.225.15.105	N/A	443 and 80	https and http
eccgw01.boulder.ibm.com	207.25.252.197	N/A	443	https
eccgw02.rochester.ibm.com	129.42.160.51	N/A	443	https
Send service data to Lenovo Support (Call Home)
soa.lenovo.com	34.205.152.33, 52.6.12.38, 103.30.232.240	N/A	443	https
logupload.lenovo.com/BLL/Logupload.ashx	N/A	N/A	443 and 80	https
esupport.ibm.com , eccgw01.rochester.ibm.com , eccgw02.boulder.ibm.com *	129.42.56.189, 129.42.60.189, 129.42.54.189	2620:0:6C0:200:129:42:56:189, 2620:0:6C2:200:129:42:60:189, 2620:0:6C4:200:129:42:54:189	443 and 80	https and http
www-945.ibm.com *	129.42.26.224, 129.42.42.224, 129.42.50.224	2620:0:6C0:1::1000, 2620:0:6C2:1::1000, 2620:0:6C4:1::1000	443 and 80	https and http
Send service data to the Lenovo Update Facility
logupload.lenovo.com/BLL/Logupload.ashx	N/A	N/A	443 and 80	https
Retrieve warranty information
ibase.lenovo.com (worldwide)	N/A	N/A	443 and 80	https and http
service.lenovo.com.cn (China only)	114.247.140.212 (China only)	N/A	83	http
supportapi.lenovo.com	N/A	N/A	443 and 80	https and http

Note: * These DNS names and IP addresses are not required to use Call Home for XClarity Administrator v2.3.0 and later; however, they are needed to retrieve status for open service tickets that were submitted prior to updating to v2.3.0.

Attention: For users in China, to retrieve warranty information for managed devices using XClarity Administrator, you must upgrade to XClarity Administrator v1.3.1 or later.

Proxy server

If the management server does not have direct access to the Internet, ensure that the management server is configured to use an HTTP proxy server (see Configuring network access).

Ensure that the proxy server is set up to use basic authentication.
Ensure that the proxy server is set up as a non-terminating proxy.
Ensure that the proxy server is set up as a forwarding proxy.
Ensure that load balancers are configured to keep sessions with one proxy server and not switch between them.