I guess I should retest that in my lab.

Does 'ipmi.taggedvlan' sound sufficiently descriptive?



From:   Arif Ali <m...@arif-ali.co.uk>
To:     xCAT Users Mailing list <xcat-user@lists.sourceforge.net>,
Date:   05/01/2012 03:14 PM
Subject:        Re: [xcat-user] vLAN on ipmi interface



It has been requested on one my customer sites, and currently testing this
out.

On the nodes itself, no vconfig is required, and as long as the pvid is on
the lan network, it seems to work (This is on the BNT G8052 switches and
dx360 m4). The obvious thing there is that the MN needs to be configured
with IPs on the seperate vlans. This has been done on this particular
setup, and it seems to work.

Maybe have a vlan column in the ipmi table, and then the bmcsetup to
somehow grab the info from the fields.

The biggest problem for customers if the the network was not isolated, then
a person with root access would potentially be able to set an IP in the
rangeĀ  and able to power machines down. This is what is being restricted
here.

But, comments from other people around would also be useful here

regards,
--
Arif Ali

catch me on freenode IRC, username: arif-ali



On 1 May 2012 19:56, Jarrod B Johnson <jbjoh...@us.ibm.com> wrote:
  It's a moderately small change to support the vlan tag setup on IPMI 2.0
  devices. The biggest problem is in the case where it would be used, it's
  actually fairly spotty.

  For example, last time I looked, if you set a service processor to use a
  tagged vlan on an igb based device, the traffic would not be passed if
  the driver loaded and no one did a 'vconfig add' on the nic. In that
  scenario I personally couldn't seriously recommend the configuration (for
  one, it makes it more blatantly obvious there is little meaningful
  separation of the NIC VLAN from the service processor vlan, for another
  I'm wary of strategies which require the OS to be configured and run
  *just right* for the systems management to work...).

  If my view of the world is outdated or a significant number of people
  think I'm too picky, I can add the vlan config option.

  Inactive hide details for Arif Ali ---05/01/2012 02:13:54 PM---All, are
  there any plan to support vLAN on the ipmi interface atArif Ali
  ---05/01/2012 02:13:54 PM---All, are there any plan to support vLAN on
  the ipmi interface at all?

  From: Arif Ali <m...@arif-ali.co.uk>
  To: "Mailing list, xCAT" <xcat-user@lists.sourceforge.net>,
  Date: 05/01/2012 02:13 PM
  Subject: [xcat-user] vLAN on ipmi interface



  All,

  are there any plan to support vLAN on the ipmi interface at all?

  regards,
  --
  Arif Ali

  catch me on freenode IRC, username: arif-ali

  ------------------------------------------------------------------------------

  Live Security Virtual Conference
  Exclusive live event will cover all the ways today's security and
  threat landscape has changed and how IT managers can respond. Discussions

  will include endpoint security, mobile security and the latest in malware

  threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
  _______________________________________________
  xCAT-user mailing list
  xCAT-user@lists.sourceforge.net
  https://lists.sourceforge.net/lists/listinfo/xcat-user



  ------------------------------------------------------------------------------

  Live Security Virtual Conference
  Exclusive live event will cover all the ways today's security and
  threat landscape has changed and how IT managers can respond. Discussions
  will include endpoint security, mobile security and the latest in malware
  threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
  _______________________________________________
  xCAT-user mailing list
  xCAT-user@lists.sourceforge.net
  https://lists.sourceforge.net/lists/listinfo/xcat-user

------------------------------------------------------------------------------

Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and
threat landscape has changed and how IT managers can respond. Discussions
will include endpoint security, mobile security and the latest in malware
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
_______________________________________________
xCAT-user mailing list
xCAT-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/xcat-user

<<inline: graycol.gif>>

------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
_______________________________________________
xCAT-user mailing list
xCAT-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/xcat-user

Reply via email to