The following firewall matrix summarizes the network communications required between Dell Automation Platform, Dell Private Cloud Manager, VMware vCenter, ESXi hosts, iDRAC interfaces, storage platforms, and supporting services such as DNS and NTP. These connections support key platform functions including infrastructure discovery, host commissioning, lifecycle management, blueprint execution, storage provisioning, monitoring, cluster management, and operational health checks. Before deployment, firewall policies should be reviewed to ensure all required ports are permitted between source and destination systems.
Note: For latest updates always refer to the VMware Cloud Foundation on Dell Private Cloud v1.4 Pre-Deployment Guide.
| Source | Destination | Ports | Protocol | Purpose |
|---|---|---|---|---|
| Dell Automation Platform Orchestrator | ESXi Management Network | 443, 902, 22 | TCP (902 TCP/UDP) | ESXi management and lifecycle operations |
| Dell Automation Platform Orchestrator | iDRAC OOB Network | 443, 623, 5900, 5901, 22 | TCP | Server discovery, management, console access |
| Dell Automation Platform Orchestrator | Dell Private Cloud Manager | 80, 443, 22 | TCP | Blueprint execution, management, API communication |
| Dell Automation Platform Orchestrator | Storage Array Management (PowerStore) | 443 | TCP | Storage management APIs |
| Dell Private Cloud Manager | vCenter | 443, 5480, 8443, 9443, 10080, 10443 | TCP | vCenter management and integration |
| vCenter | ESXi Management Network | 443, 902, 5988, 5989, 6500, 8000, 8001, 8848 | TCP | ESXi host management and inventory operations |
| Non-Principal DPC Manager | Principal DPC Manager | 80, 443 | TCP | Management-plane communication |
| Non-Principal DPC Manager | ESXi Hosts | 443, 902 | TCP (902 TCP/UDP) | Host monitoring and lifecycle management |
| Non-Principal DPC Manager | vCenter | 443, 5480, 8443, 9443 | TCP | Cluster management integration |
Note: All components within the Dell Automation Platform and VMware Cloud Foundation on Dell Private Cloud solution, require access to both DNS and NTP servers.
Note (SaaS Deployments): For SaaS deployments, both the Dell Private Cloud (DPC) Manager and Dell Orchestrator Proxy (OXY) require northbound outbound connectivity over TCP 443 (HTTPS) to communicate with Dell Automation Platform SaaS services and supporting cloud-based management components.
Reference:
VMware Cloud Foundation on Dell Private Cloud v1.4 Pre-Deployment Guide:
DavidRing.ie 