02-11-2011 10:31 PM
I'm using the Brocade SMI-S Agent for switch management. I'm curious whether it's possible to lock down the RPC ports on the switch to prevent the SMI-S agent from communication with it as a proxy switch? If so, Is this common practice in secure environments? Can someone explain the procedure for locking down and re-enabling these ports within the fabric OS, or point me to a document that explains the procedure? Any information would be appreciated.
Thanks in advance!
02-12-2011 12:08 AM
I never heard of such practice.
You could perhaps use the ipfilter rules on the switch to deny out-of-band interswitch traffic, but I'm not sure if thats going to break other things.