On Saturday, 03/26/2011 at 05:06 EDT, George Henke/NYLIC 
<george_he...@newyorklife.com> wrote:
> Alan Altmark wrote: 
> 
> <Whatever you do, don't connect the SEs directly to your network!> 
> 
> Our networking people say the SE's are reachable from our corporate 
intranet so 
> that we can provide redundance for  two mainframes, 1000 miles apart. 
> 
> But I suspect they are reachable only through the HMC. 
> 
> If the SE's are connected directly to the corporate intranet,, what 
problems 
> might we expect to have? 

I meant that your SEs are on a private network, wherever they are.  It is 
a Best Practice not to have other network devices on that network.  To 
quote from the z10 Installation Guide:
  If connection to the enterprise LAN is desired, it is recommended that 
an
  Ethernet bridge or router be installed to isolate the Hardware 
Management
  Console and Support Element from other systems.

The SEs are secure, but keeping on an isolated LAN segment is simply 
another layer of protection.

Alan Altmark

z/VM and Linux on System z Consultant
IBM System Lab Services and Training 
ibm.com/systems/services/labservices 
office: 607.429.3323
mobile; 607.321.7556
alan_altm...@us.ibm.com
IBM Endicott

Reply via email to