I've got six V240s running Trusted Solaris 8 with 4 onboard bge interfaces, and 
a single Quad Fast Eternet card (QFE) with four qfe ports. The first bge is a 
Trusted Solaris protocol channel for auditing, the second bge is for the Sun 
Rays, and the remaining bge and qfe ports connect to independent classified 
networks at separate levels. Each interface connects to a separate physical 
network switch, other than bge0, the Trusted Solaris protocol.
 
I've also got four x4450s running Solaris 10 Trusted Extensions with the same 
setup, 12 Ethernet ports each, only the first connecting all machines for 
auditing and remote maintenance. All other interfaces have their own switch, 
including the Sun Rays.
 
Gets ugly at times for wiring and maintenance, but it beats the heck out of 
having desktop systems!
 
AJ Levy 
IS Admin/Security Mgr 
301-342-5707 work 
240-925-8113 cell

________________________________

From: [EMAIL PROTECTED] on behalf of Lajber Zoltan
Sent: Fri 10/17/2008 2:13 PM
To: SunRay-Users mailing list
Subject: Re: [SunRay-Users] SRSS and VLANs - best practice ?



Hi,

On Fri, 17 Oct 2008, Samuel Olampi wrote:

> What do you consider as the best practice when setting up SRSS in a
> multi-NIC gigabit server ?
> Take for instance the trusty V240 which has 4 Gb NICs.

We have x4100/x4500 for sunray with 4 GE and cisco 6500 network devices
-e1000g0 is in the vlan for the terminals. this vlan even not routed (no
default gw, no router on thins lan). We use RFC1918 ip-s for this.
-e1000g1 is for real the real word, with real ip-s, with router as default
gw, etc
-e1000g3 for the inter-server comm: NFS/LDAP between some x4100 and one
x4500, some printers... this vlan isn't routed either.

So, on server side, no visible vlan. In the network devices these lans are
separated vlans.

Bye,
-=Lajbi=-----------------------------------------------------------------
 LAJBER Zoltan                Szent Istvan Egyetem,  Informatika Hivatal
  HTH=Hope This Helps, YMMV=Your Mileage May Vary, HAND=Have A Nice Day

_______________________________________________
SunRay-Users mailing list
[email protected]
http://www.filibeto.org/mailman/listinfo/sunray-users

___________________

This email has been scanned for all viruses by Webroot Email
Security System. 
___________________


___________________ 
 
This email has been scanned for all viruses by Webroot Email 
Security System.  
___________________

<<winmail.dat>>

_______________________________________________
SunRay-Users mailing list
[email protected]
http://www.filibeto.org/mailman/listinfo/sunray-users

Reply via email to