SharePoint 2010 :: Ports and protocols

摘要:SharePoint 2010 :: Ports and protocols

http://technet.microsoft.com/en-us/library/cc262849.aspx#PortProtocolService

TCP 80, TCP 443 (SSL)

  • Custom ports for search crawling, if configured
     
  • File and Printer Sharing service —either of the following, used by search roles:
    • Direct-hosted SMB (TCP/UDP 445) — this is the recommended port
       
    • NetBIOS over TCP/IP (NetBT) (TCP 137, UDP 138, UDP 139) — disable these ports if you do not use it
       
  • Ports required for communication between Web servers and service applications (the default is HTTP):
    • HTTP binding: TCP 32843
       
    • HTTPS binding: TCP 32844
       
    • net.tcp binding: TCP 32845 (only if a third party has implemented this option for a service application)
       
  • Ports required for communication between all farm servers when Kerberos authentication is being used:
    • TCP and UDP 88 (Kerberos)
       
    • UDP 464 (Kerberos Change Password)
       
  • Ports required for synchronizing profiles between SharePoint 2010 Products and Active Directory on the server that runs the Forefront Identity Management agent:
    • TCP 5725
       
    • TCP and UDP 389 (LDAP service)
       
    • TCP and UDP 88 (Kerberos)
       
    • TCP and UDP 53 (DNS)
       
    • UDP 464 (Kerberos Change Password)
       
    For information about how to synchronize profiles with other directory stores, see User Profile service hardening requirements, later in this article.
     
  • UDP 1434 and TCP 1433 — default ports for SQL Server communication. If these ports are blocked on the SQL Server computer (recommended) and databases are installed on a named instance, configure a SQL Server client alias for connecting to the named instance.
     
  • TCP 32846 for the Microsoft SharePoint Foundation User Code Service (for sandbox solutions) — This port must be open for outbound connections on all Web servers. This port must be open for inbound connections on Web servers or application servers where this service is turned on.
     
  • Ensure that ports remain open for Web applications that are accessible to users.
     
  • Block external access to the port that is used for the Central Administration site.
     
  • TCP 25 (SMTP for e-mail integration)