Search <book_title>...

Veritas Access Installation Guide

Last Published: 2018-07-27

Product(s): Access (7.3.1)

Platform: Linux

OpenDedup ports and disabling the iptable rules

This use case is specific to running OpenDedup on Veritas Access. Each time a SDFS volume is created and mounted on Veritas Access, it starts listening on a specific port. Initially, it starts with port 6442 and goes on incrementing +1 for further subsequent volumes.

Table: OpenDedup ports

Port Range	Protocol or Service	Purpose	Impact if Blocked
Starts from 6442 and increments +1 for subsequent volumes	TCP	Allows communication between Veritas Access and OpenDedup	Veritas Access cannot communicate with OpenDedup

To allow communication to the OpenDedup port running on Veritas Access, disable the iptable rules completely

Use the df command to show that the SDFS volume is mounted and on which port it is listening.
The SDFS volume is already mounted as part of the LTR script.
```
[root@ltrclust_02 ~]# df -h | tail -2
sdfs:/etc/sdfs/pool100-volume-cfg.xml:6442
11G     0   11G   0% /pool100
```

Use the netstat command to verify that the port is open.

[root@ltrclust_02 ~]# netstat -tulpn | grep 6442
tcp        0      0 :::6442   :::*       LISTEN      
3761/jsvc.exec

Disable the iptable rules to allow communication to the OpenDedup port once the volume is mounted and to disallow traffic to this port once the volume is unmounted.
Use the following commands to disable the iptable rules:
```
[root@ltrclust_02 ~]# iptables -F
```
```
[root@ltrclust_02 ~]# /etc/init.d/iptables stop
```
```
[root@ltrclust_02 ~]# iptables -L
```
Use the iptables -L command to verify that all the iptable rules are disabled.
The iptable rules should be run on all the Veritas Access cluster nodes and on the NetBackup media server if OpenDedup is installed on it.
An alternative to disabling the iptable rules in Step 3 is to add an iptable rule to open the OpenDedup port, so that the existing iptable rules are also used.
Example:
```
[root@ltrclust_02 ~]# iptables -A INPUT -p tcp --dport 6442 -j ACCEPT
```