HPE Storage Users Group
https://3parug.com/

Service processor subnetting
https://3parug.com/viewtopic.php?f=18&t=773
Page 1 of 1

Author:  bparrucc [ Mon Jun 16, 2014 12:21 pm ]
Post subject:  Service processor subnetting

Settin up a new 7200 here and I have it networked to two standalone HP switches (no uplink to our production network). I have the Virtual Service processor setup in VMware and I can see it comes with 2 virtual NICs. However, since the VSP need access to the 3par (private network) and HP support (production network) what options do I have? Generally I would have 2 IP's on the VM but I don't see any options in the SPOCC to add another IP to allow access to a second subnet. Anyone run into this before?

Author:  Schmoog [ Mon Jun 16, 2014 1:33 pm ]
Post subject:  Re: Service processor subnetting

bparrucc wrote:
Settin up a new 7200 here and I have it networked to two standalone HP switches (no uplink to our production network). I have the Virtual Service processor setup in VMware and I can see it comes with 2 virtual NICs. However, since the VSP need access to the 3par (private network) and HP support (production network) what options do I have? Generally I would have 2 IP's on the VM but I don't see any options in the SPOCC to add another IP to allow access to a second subnet. Anyone run into this before?


HP has stated that the only reason the VSP has two nics is that the physical has 2 nics. You can only use 1

Author:  bparrucc [ Mon Jun 16, 2014 1:35 pm ]
Post subject:  Re: Service processor subnetting

I was afraid of that. Any options for me here? I can't imagine I'm the only one keeping SAN storage on it's own isolated switch.

Author:  Davidkn [ Mon Jun 16, 2014 2:28 pm ]
Post subject:  Re: Service processor subnetting

I've not really come across that setup before, you definitely keep the data traffic on their own switches, be it FC or iSCSI, but the management normally goes on a management network, which is normally routable to the LAN to enable access to the internet for phone home, and so that you can manage it from your desktop, and finally to route to the SMTP server to send internal email alerts.

I've not seen it implemented with a totally segregated management network before, how are you going to manage the San? As y need a direct connection to the inserv nodes, the imc doesn't connect through the SP.

Author:  bparrucc [ Mon Jun 16, 2014 3:01 pm ]
Post subject:  Re: Service processor subnetting

I have a physical windows server with a nic connecting to the storage switches. I installed the Management Console on there. This box has another nic with a production IP on it.

Author:  afidel [ Mon Jun 16, 2014 4:31 pm ]
Post subject:  Re: Service processor subnetting

bparrucc wrote:
I have a physical windows server with a nic connecting to the storage switches. I installed the Management Console on there. This box has another nic with a production IP on it.

Set that box as the gateway for the VSP and turn on RRAS and allow it to route outbound traffic for the VSP. You've already compromised your airgap so allowing the VSP to communicate through your dual homed host isn't a further transgression.

Author:  Schmoog [ Mon Jun 16, 2014 5:49 pm ]
Post subject:  Re: Service processor subnetting

Afidel's solution is certainly one way.

I'm not sure I understand why you can't put the vsp and node mgmt ports on your production LAN, and leave the actual fc/iscsi traffic completely air gapped

Author:  bparrucc [ Tue Jun 17, 2014 10:53 am ]
Post subject:  Re: Service processor subnetting

Actually that was my next question which i was thinking about last night.

so all iscsi is on the storage switch
then the 2 mgmt ports will be on the lan as well as the VSP correct?

Author:  Schmoog [ Tue Jun 17, 2014 2:31 pm ]
Post subject:  Re: Service processor subnetting

bparrucc wrote:
Actually that was my next question which i was thinking about last night.

so all iscsi is on the storage switch
then the 2 mgmt ports will be on the lan as well as the VSP correct?


Absolutely correct

Author:  bparrucc [ Tue Jun 17, 2014 2:40 pm ]
Post subject:  Re: Service processor subnetting

Worked great. Thank you guys.

Page 1 of 1 All times are UTC - 5 hours
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group
http://www.phpbb.com/