UCSD APIC integration - Firewall between platforms

[albert.short]

Scenario ::

UCSD VM deployed on general ESXi cluster, APIC deployed behind PCI firewall, no VM environment inside PCI zone for UCSD.

Question ::

Can someone confirm the ports/protocols & traffic flow directions (source/destination) I would need to complete my UCSD/APIC integration (Add Multi-Domain Manger account)

I can find docs detailing various ports for VMware & BMA but nothing really detailing the direction & specifically APIC integration.

Any guidance would be good.

[ppenmeth]

Hi Albert,

UCS Director integration with APIC is over HTTP(Port 80) or HTTPS (Port 443) protocol.

UCS Director acts as a client and APIC controller acts as a server. (API provider)

If only HTTPS is enabled on APIC controller, then you need to open port 443 on firewall (Direction is: UCSD --> APIC)

Since UCSD is client here, it uses any random port.

As of today there is "NO" integration from APIC controller back to UCS Director, i.e. APIC controller is calling UCS Director API over HTTPs. So you do not need to open any firewall port from APIC to UCS Director.

Hope it clarifies.

Thanks,

Phani

[albert.short]

Thanks Phani. Just what I am looking for.