Firewalls and proxy servers
Some functions of Lenovo XClarity Administrator, including management server updates, firmware updates, service and support, require access to the Internet. If you have firewalls in your network, configure the firewalls to enable XClarity Administrator management server to perform these operations. If the management server does not have direct access to the Internet, configure XClarity Administrator to use a proxy server.
Firewalls
Ensure that the following DNS names and ports are open on the firewall. Each DNS represents a geographically distributed system with a dynamic IP address.
| DNS name | Ports | Protocols |
|---|---|---|
| Download license activation keys | ||
| fod.lenovo.com | 443 | https |
| Retrieve service bulletins | ||
| download.lenovo.com/servers/LXCA_Bulletin_Service.json | 443 | https |
| Download updates (management-server updates, firmware updates, UpdateXpress System Packs (OS device drivers), and repository packs) | ||
| download.lenovo.com | 443 | https |
| support.lenovo.com | 443 and 80 | https and http |
| Send service data to Lenovo Support (Call Home) | ||
| soaus.lenovo.com | 443 | https |
| logupload.lenovo.com/BLL/Logupload.ashx | 443 and 80 | https |
| Send service data to the Lenovo Update Facility | ||
| logupload.lenovo.com/BLL/Logupload.ashx | 443 and 80 | https |
| Retrieve warranty information | ||
| csapi.lenovo.com.cn (China only) | 443 | https |
| supportapi.lenovo.com (worldwide) | 443 and 80 | https and http |
Proxy server
If the management server does not have direct access to the Internet, ensure that the management server is configured to use an HTTP proxy server (see Configuring network access).
Ensure that the proxy server is set up to use basic authentication.
Ensure that the proxy server is set up as a non-terminating proxy.
Ensure that the proxy server is set up as a forwarding proxy.
Ensure that load balancers are configured to keep sessions with one proxy server and not switch between them.