The operation of Checkmk requires specific ports and protocols to be opened to ensure normal functionality. In this article, you can find these requirements.
General Ports
| CENTRAL Site → | REMOTE Site(s) |
|---|---|
| DST 6557/tcp | For Livestatus (when running several sites on the same host, additional ports may be necessary) |
| DST 80/tcp and/or 443/tcp | Used for the Sync if distributed WATO is enabled |
| DST 6555/tcp | Used for notification forwarding when central notification is enabled and the central site establishes the notification spooler connection to the remote site |
| REMOTE Site(s) → | CENTRAL Site |
|---|---|
| DST 80/tcp and/or 443/tcp | Used for the agent bakery and the dynamic host configuration |
| DST 6555/tcp | Used for the forwarding of the notifications when central notification is enabled and the Remote site is establishing the connection |
| CENTRAL /Remote Site(s) → | Monitored hosts |
|---|---|
| DST 6556/tcp | Is used for the connections to the CMK Agent |
| DST 161/udp | Is used for SNMP |
| DST 443/tcp | For hosts which are monitored via the API (VMware or NetApp) |
| Further ports e.g. for active checks |
| Monitored hosts → | CENTRAL /Remote Site(s) |
|---|---|
| DST 80/tcp and/or 443/tcp | Agent updater (Agent Bakery) |
| DST 6559/udp | RealTime Checks (rarely used) |
| DST 162/tcp | Processing SNMP traps (Event Console) |
| DST 514/udp and 514/udp | Processing syslog messages (Event Console) |
| DST 8000/tcp | Agent Controller TLS registration (when running several sites on the same host, additional ports may be necessary) |
Checkmk Appliance Cluster
| Checkmk Appliance Node 1 <-> | Checkmk Appliance Node 2 |
|---|---|
TCP 80/443 | Is used for the Webconf Access |
TCP 7789 DRBD | Is used or the DRBD sync |
UDP 4321 Corosync UDP 4323 Corosync | Is used for corosync |
TCP 3121 Pacemaker | Is used for Pacemaker |
Additional Ports
Some more ports you may need (outgoing from the Checkmk server):
- Sending notifications from Checkmk Server via Mail (SMTP or SMTPS)
- NTP Time synchronization
- DNS
- LDAP Authentication (LDAP/LDAPS)
Related articles
Add Comment