doesn't the dx360 m4 have a dedicated ethernet port that can be used
exclusively for the imm? if so, is there a reason you can't use it
and have the switch put it in a different vlan? i would think this
would be an easier and less error prone way to get network isolation
on your imm interfaces.
mike
On 05/01/2012 01:12 PM, Arif Ali wrote:
It has been requested on one my customer sites, and
currently testing this out.
On the nodes itself, no vconfig is required, and as long as the
pvid is on the lan network, it seems to work (This is on the BNT
G8052 switches and dx360 m4). The obvious thing there is that the
MN needs to be configured with IPs on the seperate vlans. This has
been done on this particular setup, and it seems to work.
Maybe have a vlan column in the ipmi table, and then the bmcsetup
to somehow grab the info from the fields.
The biggest problem for customers if the the network was not
isolated, then a person with root access would potentially be able
to set an IP in the range and able to power machines down. This
is what is being restricted here.
But, comments from other people around would also be useful here
regards,
--
Arif Ali
catch me on freenode IRC, username: arif-ali
On 1 May 2012 19:56, Jarrod B Johnson <[email protected]>
wrote:
It's a moderately small change to support the vlan tag
setup on IPMI 2.0 devices. The biggest problem is in the
case where it would be used, it's actually fairly spotty.
For example, last time I looked, if you set a service
processor to use a tagged vlan on an igb based device, the
traffic would not be passed if the driver loaded and no
one did a 'vconfig add' on the nic. In that scenario I
personally couldn't seriously recommend the configuration
(for one, it makes it more blatantly obvious there is
little meaningful separation of the NIC VLAN from the
service processor vlan, for another I'm wary of strategies
which require the OS to be configured and run *just right*
for the systems management to work...).
If my view of the world is outdated or a significant
number of people think I'm too picky, I can add the vlan
config option.
 Arif Ali ---05/01/2012 02:13:54
PM---All, are there any plan to support vLAN on the ipmi
interface at all?
From: Arif Ali <[email protected]>
To: "Mailing list,
xCAT" <[email protected]>,
Date: 05/01/2012 02:13
PM
Subject: [xcat-user]
vLAN on ipmi interface
All,
are there any plan to support vLAN on the ipmi
interface at all?
regards,
--
Arif Ali
catch me on freenode IRC, username: arif-ali
------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's
security and
threat landscape has changed and how IT managers can
respond. Discussions
will include endpoint security, mobile security and the
latest in malware
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
_______________________________________________
xCAT-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/xcat-user
------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security
and
threat landscape has changed and how IT managers can respond.
Discussions
will include endpoint security, mobile security and the latest
in malware
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
_______________________________________________
xCAT-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/xcat-user
------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and
threat landscape has changed and how IT managers can respond. Discussions
will include endpoint security, mobile security and the latest in malware
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
_______________________________________________
xCAT-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/xcat-user
|
------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and
threat landscape has changed and how IT managers can respond. Discussions
will include endpoint security, mobile security and the latest in malware
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
_______________________________________________
xCAT-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/xcat-user
