Multicluster considerations when using a firewall

If there is a firewall between the multicluster primary and the proxy clusters connecting to the primary cluster, then you must open the ports so the two can communicate.

Multicluster primary firewall configuration

The following table shows the default port assignments for the multicluster primary host. Ensure that on this host, you open these ports so that the IBM® Spectrum Symphony client has access to the multicluster primary cluster.

Environment variable	Default port	Function	Configuration file
SMC_MASTER_IDL_PORT	Linux®: 7892 Windows: 7890	Listening port for IBM Spectrum Symphony client and multicluster proxy connections.	Linux: $EGO_CONFDIR/../../eservice/esc/conf/smcm.xml Windows: %EGO_CONFDIR%\..\..\eservice\esc\conf\smcm.xml
EGO_KD_PORT	7870	Listening port for VEMKD on the multicluster primary cluser, which connects to the IBM Spectrum Symphony cluster.	Linux: $EGO_CONFDIR/../../eservice/esc/conf/smcm.xml Windows: %EGO_CONFDIR%\..\..\eservice\esc\conf\smcm.xml
REPOSITORY_SERVICE_PORT	7873	Listening port for the repository service (RS). which is used for service package deployment.	Linux: $EGO_CONFDIR/../../eservice/esc/conf/rs.xml Windows: %EGO_CONFDIR%\..\..\eservice\esc\conf\rs.xml

Port configuration for the multicluster primary cluster is set in the smcm.xml file on the primary host:

Linux: $EGO_CONFDIR/../../eservice/esc/conf
Windows: %EGO_CONFDIR%\..\..\eservice\esc\conf\

To change the port assignment:

Open the smcm.xml file.
Modify the port setting.
Save your changes.
Restart EGO:
```
egosh ego restart
```

Proxy cluster firewall configuration

The following table shows the default port assignment for the multicluster proxy.

Environment variable	Default port	Function	Configuration file
SMC_PROXY_IDL_PORT	0 (random)	Connection port for the agent on the multicluster proxy host.	Linux: $EGO_CONFDIR/../../eservice/esc/conf/smcp.xml Windows: %EGO_CONFDIR%\..\..\eservice\esc\conf\smcp.xml
SMC_KD_PORT	7880	Connection port for VEMKD on the multicluster primary cluster. This port number must match the port number of EGO_KD_PORT configured in the ego.conf file on the multicluster primary cluster.	Linux: $EGO_CONFDIR/../../eservice/esc/conf/smcp.xml Windows: %EGO_CONFDIR%\..\..\eservice\esc\conf\smcp.xml

Another environment variable, SMC_KD_MASTER_LIST, which is used to connect the multicluster proxy to the primary cluster, contains the host name of VEMKD. The proxy is then able to query EGOSC for the URL of the SMCM daemon. If primary candidates hosts are also configured, the host names are delimited by spaces.

Configuration of these environment variables can be modified by editing the smcp.xml file on the multicluster proxy host:

Linux: $EGO_CONFDIR/../../eservice/esc/conf/services
Windows: %EGO_CONFDIR%\..\..\eservice\esc\conf\services

To change the settings of the proxy environment variables:

From the multicluster management console Dashboard, select Common Tasks > System Services.
A list of system services displays.
Select Configure Services.
Click the SMCP service.
The SMCP service profile displays.
Locate the applicable environment variable: SMC_KD_PORT or SMC_KD_MASTER_LIST.
In the content field, specify the new value.
Click Save. Click OK.
A successful update message displays.
Click OK.
In the Actions list for the SMCP service, select Start.
The SMCP service is restarted.

IBM Spectrum Symphony client configuration

The IBM Spectrum Symphony client must set the SMC_MASTER_CLUSTER_URL environment variable that points to multicluster's primary cluster.

Multicluster management console configuration

To change the port number for the multicluster management console, refer to Changing web server ports for more information.