...
- Before installing a cell environment, make sure to complete the sizing process with IBM Support Team to get recommendations for the hardware and architecture suitable for your requirements.
- DPOD cell manager and federated cell members must be of the same version (minimum version is 1.0.8.6).
- DPOD cell manager is usually virtual and can be installed in both Appliance Mode or Non-Appliance Mode with Medium Load architecture type, as detailed in the Hardware and Software Requirements.
- DPOD federated cell members (FCMs) can be one of the following:
- Physical servers installed in Non-appliance Mode (based on RHEL) with High_20dv architecture type, as detailed in the Hardware and Software Requirements.
Physical servers are used when the cell is required to process high transactions per second (TPS) load. - Virtual servers installed in Non-appliance Mode with Medium architecture type or higher, as detailed in the Hardware and Software Requirements.
Virtual servers are used when the cell is required to process moderate transactions per second (TPS) load, or when the cell is part of a non-production environment where the production cell uses physical servers (to keep environments architecture similar).
- Physical servers installed in Non-appliance Mode (based on RHEL) with High_20dv architecture type, as detailed in the Hardware and Software Requirements.
- All DPOD cell members must be identical - only physical or only virtual (cannot mix physical and virtual cell members in the same cell), and with the same resources (CPUs, RAM, disk type and storage capacity).
- Physical federated cell members with 4 CPU sockets and NVMe disks require special disks and mount points configuration to ensure performance. See Configuring Cell Members with 4 CPU Sockets and NVMe Disks.
- Each cell component (manager / FCM) should have two network interfaces:
- Internal network interface - dedicated for DPOD inter-communication between the cell components.
- External network interface - for communicating with the rest of the network. This includes users accessing the DPOD Web Console (on the cell manager), communication between DPOD and the Monitored Gateways, communication with DNS, NTP, SMTP, LDAP, and anything else on the network.
- This design was driven by customer requirements and allows separation between the two types of communications, which may be used to enhance the security (e.g.: deny end-users from being able to access the inter-cell communication).
- We recommend each network interface to have an IP address which belongs to a different subnet, as this makes it easier to configure the servers without using static routing and easier to configure the network firewall rules.
- Network ports rules should be allowed in the network firewall as detailed below:
...
From
...
To
...
Ports (Defaults)
...
Protocol
...
Usage
...
DPOD Cell Manager (external IP address)
...
Each Monitored Device
...
5550 (TCP)
...
HTTP/S
...
Monitored device administration management interface. If the SOMA port is different than 5550 - the port should be changed accordingly.
...
DPOD Cell Manager (external IP address)
...
TCP and UDP 53
...
DNS services. Static IP address may be used.
...
DPOD Cell Manager (external IP address)
...
NTP Server
...
123 (UDP)
...
NTP
...
Time synchronization
...
DPOD Cell Manager (external IP address)
...
Organizational mail server
...
25 (TCP)
...
SMTP
...
Send reports by email
...
DPOD Cell Manager (external IP address)
...
LDAP
...
TCP 389 / 636 (SSL).
TCP 3268 / 3269 (SSL)
...
LDAP
...
Authentication & authorization. Can be over SSL.
...
NTP Server
...
DPOD Cell Manager (external IP address)
...
123 (UDP)
...
NTP
...
Time synchronization
...
Users IPs
...
DPOD Cell Manager (external IP address)
...
443 (TCP)
...
HTTP/S
...
DPOD's Web Console
...
Admins IPs
...
DPOD Cell Manager (external IP address)
...
22 (TCP)
...
TCP
...
SSH
...
Each DPOD Federated Cell Member (external IP address)
...
TCP and UDP 53
...
DNS services
...
Each DPOD Federated Cell Member (external IP address)
...
NTP Server
...
123 (UDP)
...
NTP
...
Time synchronization
...
Each Monitored Device
...
Each DPOD Federated Cell Member (external IP address)
...
60000-60003 (TCP)
...
TCP
...
SYSLOG Data
...
Each Monitored Device
...
Each DPOD Federated Cell Member (external IP address)
...
60020-60023 (TCP)
...
HTTP/S
...
WS-M Payloads
...
NTP Server
...
Each DPOD Federated Cell Member (external IP address)
...
123 (UDP)
...
NTP
...
Time synchronization
...
Admins IPs
...
Each DPOD Federated Cell Member (external IP address)
...
22 (TCP)
...
TCP
...
SSH
- defined as detailed in Firewall Requirements.
Cell Manager Installation
...
Configure the monitored gateways to use the federated cells agents. Please follow instructions on Adding Monitored DevicesGateways.