Seems that it’s a bit more complicated then I thought. Talked briefly with the storage admin Storage devices are not configured with a gateway. A management server for the storage is installed with 2 Nic’s, one for 10.128.x.x and the other one for 10.180.x.x subnet
Through iSCSI initiator, Clusters and ESX servers get access to the storage. The opsmgr server can’t connect to 10.180.x.x via LAN. But even if I would install OpsMgr Gateway server in 10.180.x.x subnet, how would SNMP traffic flow to the opsmgr server in 10.128.0.0 subnet, without a GW in 10.180.x.x NIC properties. A opsMgr server with 2 NIC’s, one in each subnet is not something to consider I suppose. Thanx Steve Wouden T +31 20 546 0243 M +31 6 531 750 78 F +31 20 546 07 05 [email protected] From: [email protected] [mailto:[email protected]] On Behalf Of elsalvoz Sent: Friday, June 26, 2015 10:38 PM To: SCOM List Subject: Re: [msmom] RE: Monitoring devices in another Subnet That should work just fine. Cesar A On Jun 26, 2015 11:17 AM, "Steve Wouden" <[email protected]<mailto:[email protected]>> wrote: Thanks for the info. I can open the appropriate ports on our Palo Alto firewall The only device in the 10.180.0.0 subnet is our HP StoreVirtual Storage - Lefthand 4530. The event flow to Opsmgr is going through SNMP.. All firewalls between the management servers in the resource pool and the network devices need to allow SNMP (UDP) and ICMP bi-directionally, and ports 161 and 162 need to be open bi-directionally. This includes Windows Firewall on the management server itself. Should this be enough? Thanx Steve Wouden T +31 20 546 0243<tel:%2B31%2020%20546%200243> M +31 6 531 750 78 F +31 20 546 07 05 [email protected]<mailto:[email protected]> From: [email protected]<mailto:[email protected]> [mailto:[email protected]<mailto:[email protected]>] On Behalf Of Orlebeck, Geoffrey Sent: Friday, June 26, 2015 4:40 PM To: '[email protected]<mailto:[email protected]>' Subject: [msmom] RE: Monitoring devices in another Subnet If it’s the same domain, no gateway should be necessary if you can hit those devices via LAN IP addresses (10.180.0.0). Can the SCOM management server(s) see/access the 10.180.0.0 subnet? If not, you can allow the appropriate ports for push/manual installation and client communication. See here: https://technet.microsoft.com/en-us/library/dn249696.aspx **Note: You will need to expand “Firewall > Operations Manager feature firewall exceptions” and it will give a list of server/client required ports. I don’t have an expertise in SCOM, but I did have to go through similar with our DMZ hosts. However, I would encourage others on this list to confirm or correct the above. Thanks, Geoff From: [email protected]<mailto:[email protected]> [mailto:[email protected]] On Behalf Of Steve Wouden Sent: Friday, June 26, 2015 7:32 AM To: [email protected]<mailto:[email protected]> Subject: [msmom] Monitoring devices in another Subnet We have a “flat” network infra. 10.128.0.0/16<http://10.128.0.0/16> subnet. We are migrating from EVA storage (FC) to Lefthand storage (ISCSI). Lefthand Storage is in another vlan/subnet 10.180.0.0/16<http://10.180.0.0/16> Everything is in the same domain With the HP Storage MP i want to monitor the Lefthand Storage. How do I monitor the lefthand storage. Do I have to install a gateway server in the 10.180.0.0 subnet? Thanks Steve Wouden T +31 20 546 0243<tel:%2B31%2020%20546%200243> M +31 6 531 750 78 F +31 20 546 07 05 [email protected]<mailto:[email protected]> [http://www.stibbe.com/~/media/6%20stibbe%20logo%20email%20disclaimer/stibbe%20disclaimer%20logo]<http://www.stibbe.com/> Amsterdam - Brussels - Luxembourg - Dubai - Hong Kong - London - New York Visitors address: Strawinskylaan 2001 - 1077 ZZ Amsterdam - The Netherlands Postal address: P.O. Box 75640 - 1070 AP Amsterdam - The Netherlands This e-mail may contain privileged or confidential information. If you have received this e-mail in error, please notify us immediately. Stibbe N.V. is a Dutch law firm registered with the Dutch Chamber of Commerce under number 34198700. Any services performed are carried out pursuant to an agreement for services ('overeenkomst van opdracht') with Stibbe N.V. This agreement is governed exclusively by Dutch law, with the exception of rules of Dutch private international law. All disputes shall be decided exclusively by the competent court in Amsterdam, The Netherlands, without prejudice to the right to appeal. The general conditions of Stibbe N.V., which include a limitation of liability, apply and are available on www.stibbe.com/generalconditions<http://www.stibbe.com/generalconditions> or upon request. Stibbe N.V. is part of an international network of Stibbe offices in Amsterdam, Brussels, Dubai, Hong Kong, London, Luxembourg and New York. More information about us and our services can be found on www.stibbe.com/importantinformation<http://www.stibbe.com/importantinformation>. Our general conditions have recently been amended. Before printing this e-mail, please consider the impact on the environment. Confidentiality Notice: This is a transmission from Community Hospital of the Monterey Peninsula. This message and any attached documents may be confidential and contain information protected by state and federal medical privacy statutes. They are intended only for the use of the addressee. If you are not the intended recipient, any disclosure, copying, or distribution of this information is strictly prohibited. If you received this transmission in error, please accept our apologies and notify the sender. Thank you.
