Good point,
But now you're looking at extra N number of switches, and N*42
cables; which would imply cost
with the original config NW, and IB cables alone creates a big bunch
at the front, with the doors barely closing. Lets say we do decide
with that suggestion then extra cables this setup will provide, it
would be immensely difficult to tidy away, or even for the doors to
close.
But yes, your idea did crop up in my mind as well
regards,
Arif
On 01/05/12 20:51, Mike Lovell wrote:
doesn't the dx360 m4 have a dedicated ethernet port that can be
used exclusively for the imm? if so, is there a reason you can't
use it and have the switch put it in a different vlan? i would
think this would be an easier and less error prone way to get
network isolation on your imm interfaces.
mike
On 05/01/2012 01:12 PM, Arif Ali wrote:
It has been requested on one my customer sites, and
currently testing this out.
On the nodes itself, no vconfig is required, and as long as the
pvid is on the lan network, it seems to work (This is on the BNT
G8052 switches and dx360 m4). The obvious thing there is that
the MN needs to be configured with IPs on the seperate vlans.
This has been done on this particular setup, and it seems to
work.
Maybe have a vlan column in the ipmi table, and then the
bmcsetup to somehow grab the info from the fields.
The biggest problem for customers if the the network was not
isolated, then a person with root access would potentially be
able to set an IP in the range and able to power machines down.
This is what is being restricted here.
But, comments from other people around would also be useful here
regards,
--
Arif Ali
catch me on freenode IRC, username: arif-ali
On 1 May 2012 19:56, Jarrod B Johnson <jbjoh...@us.ibm.com>
wrote:
It's a moderately small change to support the vlan tag
setup on IPMI 2.0 devices. The biggest problem is in the
case where it would be used, it's actually fairly
spotty.
For example, last time I looked, if you set a service
processor to use a tagged vlan on an igb based device,
the traffic would not be passed if the driver loaded and
no one did a 'vconfig add' on the nic. In that scenario
I personally couldn't seriously recommend the
configuration (for one, it makes it more blatantly
obvious there is little meaningful separation of the NIC
VLAN from the service processor vlan, for another I'm
wary of strategies which require the OS to be configured
and run *just right* for the systems management to
work...).
If my view of the world is outdated or a significant
number of people think I'm too picky, I can add the vlan
config option.
 Arif Ali
---05/01/2012 02:13:54 PM---All, are there any plan to
support vLAN on the ipmi interface at all?
From: Arif Ali <m...@arif-ali.co.uk>
To: "Mailing list,
xCAT" <xcat-user@lists.sourceforge.net>,
Date: 05/01/2012
02:13 PM
Subject: [xcat-user]
vLAN on ipmi interface
All,
are there any plan to support vLAN on the ipmi
interface at all?
regards,
--
Arif Ali
catch me on freenode IRC, username: arif-ali
------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's
security and
threat landscape has changed and how IT managers can
respond. Discussions
will include endpoint security, mobile security and the
latest in malware
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
_______________________________________________
xCAT-user mailing list
xCAT-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/xcat-user
------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's
security and
threat landscape has changed and how IT managers can
respond. Discussions
will include endpoint security, mobile security and the
latest in malware
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
_______________________________________________
xCAT-user mailing list
xCAT-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/xcat-user
------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and
threat landscape has changed and how IT managers can respond. Discussions
will include endpoint security, mobile security and the latest in malware
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
_______________________________________________
xCAT-user mailing list
xCAT-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/xcat-user
------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and
threat landscape has changed and how IT managers can respond. Discussions
will include endpoint security, mobile security and the latest in malware
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
_______________________________________________
xCAT-user mailing list
xCAT-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/xcat-user
|
