Troubleshooting
Problem
When updating server firmware from the IBM support system, the connection fails with message HSCF0004.
Resolving The Problem
The message indicates that the HMC cannot "see" or connect to the IBM Service System. To connect to this system, the HMC must be enabled as a call home server in Remote Service. If the HMC is using Internet VPN, the following firewall rules must be in place.
| IP Filter Rule to be Created on your Router / Firewall | Filter Values |
| UDP500 Inbound traffic filter rule | Allow port 500 for source VPN gateway TCP/IP address |
| UDP500 Outbound traffic filter rule | Allow port 500 for destination VPN gateway TCP/IP address |
| UDP4500 Inbound traffic filter rule | Allow port 4500 for source VPN gateway TCP/IP address |
| UDP4500 Outbound traffic filter rule | Allow port 4500 for destination VPN gateway TCP/IP address |
| ESP Inbound traffic filter rule | Allow ESP protocol (X’32’) for source VPN gateway TCP/IP address |
| ESP Outbound traffic filter rule | Allow ESP protocol (X’32’) for destination VPN gateway TCP/IP address |
The IP Filter rule should be created for both IBM VPN Gateway TCP/IP addresses: 207.25.252.196 (Boulder) and 129.42.160.16 (Rochester). The HMCs are configured to use both addresses; one as primary and the other as a backup. The address used as the primary varies by location.
[{"Type":"MASTER","Line of Business":{"code":"LOB57","label":"Power"},"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Product":{"code":"SWG60","label":"IBM i"},"Platform":[{"code":"PF012","label":"IBM i"}],"Version":"6.1.0"}]
Historical Number
349823148
Was this topic helpful?
Document Information
Modified date:
18 December 2019
UID
nas8N1015940