Today I had quick task to change firewall port on VMware ESX 4.1 to allow to communicate with TSM on port different from default 1500. In principle you should follow VMware KB which explains in details how to change firewall rules. Unfortunately if you want to  change port 1500 for TSM to custom one you need to do it in other way.

Login to ESX Service Console and navigate to /etc/vmware/firewall and edit ibmTSM.xml.

Change port 1500 to custom one:

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18

<!- Firewall configuration information for IBM TSM ->
<ConfigRoot>
<service>
<id>TSM</id>
<rule id='0000'>
<direction>inbound</direction>
<protocol>tcp</protocol>
<port type='dst'>**CUSTOM PORT**</port>
<flags>-m state -state NEW</flags>
</rule>
<rule id='0001'>
<direction>outbound</direction>
<protocol>tcp</protocol>
<port type='dst'>**CUSTOM PORT**</port>
<flags>-m state -state NEW</flags>
</rule>
</service>
</ConfigRoot>

After changing port save file and restart firewall using command service firewall restart.