Firewalls and proxy servers

Some functions of Lenovo XClarity Administrator, including management server updates, firmware updates, service and support, require access to the Internet. If you have firewalls in your network, configure the firewalls to enable XClarity Administrator management server to perform these operations. If the management server does not have direct access to the Internet, configure XClarity Administrator to use a proxy server.

Firewalls

Ensure that the following DNS names and ports are open on the firewall.

Note: IP addresses are subject to change. Use DNS names when possible.
Table 1. Required Internet connections
DNS name IPv4 address IPv6 address Ports Protocols
Download management-server updates, firmware updates, UpdateXpress System Packs (OS device drivers), and repository packs
datacentersupport.lenovo.com N/A N/A 443 and 80 https
download.lenovo.com N/A N/A 443 and 80 https
filedownload.lenovo.com N/A N/A 443 and 80 https
support.lenovo.com N/A N/A 443 and 80 https and http
supportapi.lenovo.com N/A N/A 443 and 80 https
Download firmware (Flex System x220, x222, x240, x280 X6, x440, x480 X6, x880 X6, some Flex switches, and first-generation CMMs only)
www.ibm.com 129.42.56.216, 129.42.58.216, 129.42.60.216, 129.42.160.51, 207.25.252.197 N/A 443 and 80 https and http
www-03.ibm.com 204.146.30.17 N/A 443 and 80 https and http
download3.boulder.ibm.com 170.225.15.76 N/A 443 and 80 https and http
download3.mul.ie.ibm.com 129.35.224.114 N/A 443 and 80 https and http
download4.boulder.ibm.com 170.225.15.107 N/A 443 and 80 https and http
download4.mul.ie.ibm.com 129.35.224.107 N/A 443 and 80 https and http
delivery04-bld.dhe.ibm.com 170.225.15.104, 129.35.224.104 N/A 443 and 80 https and http
delivery04-mul.dhe.ibm.com 129.35.224.115, 170.225.15.115 N/A 443 and 80 https and http
delivery04.dhe.ibm.com 129.35.224.105, 170.225.15.105 N/A 443 and 80 https and http
Send service data to Lenovo Support (Call Home)
soa.lenovo.com 34.205.152.33, 52.6.12.38, 103.30.232.240 N/A 443 https
logupload.lenovo.com/BLL/Logupload.ashx N/A N/A 443 and 80 https
esupport.ibm.com
Note: Not required for XClarity Administrator v2.3 and later unless you want to retrieve status for service tickets that were opened before you updated to v2.3.
129.42.56.189, 129.42.60.189, 129.42.54.189 2620:0:6C0:200:129:42:56:189, 2620:0:6C2:200:129:42:60:189, 2620:0:6C4:200:129:42:54:189 443 and 80 https and http
www-945.ibm.com
Note: Not required for XClarity Administrator v2.3 and later unless you want to retrieve status for service tickets that were opened before you updated to v2.3.
129.42.26.224, 129.42.42.224, 129.42.50.224 2620:0:6C0:1::1000, 2620:0:6C2:1::1000, 2620:0:6C4:1::1000 443 and 80 https and http
Send service data to the Lenovo Update Facility
logupload.lenovo.com/BLL/Logupload.ashx N/A N/A 443 and 80 https
Retrieve warranty information
ibase.lenovo.com (worldwide) N/A N/A 443 and 80 https and http
service.lenovo.com.cn (China only) 114.247.140.212 (China only) N/A 83 http
supportapi.lenovo.com N/A N/A 443 and 80 https and http
Attention: For users in China, to retrieve warranty information for managed devices using XClarity Administrator, you must upgrade to XClarity Administrator v1.3.1 or later.

Proxy server

If the management server does not have direct access to the Internet, ensure that the management server is configured to use an HTTP proxy server (see Configuring network access).