Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I keep reading conflicting reports regarding Xencenters' management capabilities.

Is it true that you have to be on the same subnet to connect to Xenserver via XenCenter?

share|improve this question
    
Can you post some links to the information you're referring to? –  joeqwerty Jun 18 '10 at 20:23
    
forums.citrix.com/message.jspa?messageID=1012169 for example. –  edude05 Jun 19 '10 at 19:29

3 Answers 3

up vote 6 down vote accepted

So long as traffic is properly routed, you should be able to manage remotely via XenCenter, in fact, I've done it before. I believe XenCenter uses ports 80 and 443.

share|improve this answer

In my experience, I have had a XenServer hosted at a colo datacenter two counties away, and XenCenter running on a local PC in my office. I have never had any problems using most of the features in XenCenter to administer the Dom0 or DomUs on the XenServer.

However, I did have an issue with a firewall on the server-side (data center firewall) blocking ports that are used for the Console built-in to XenCenter. You would just have to make sure you have those ports unblocked. I believe they use 6001-600X (X being the total number of DomUs you have, so your fourth virtual machine would have its console available on 6005).

I do believe there are options in the command line of the XenServer that allow you to configure which hosts are allowed or disallowed from accessing any remote administration but I never enabled or used those features.

As ChrisSoyars stated above, XenCenter connects through port 80 and port 443 for XenCenter and port 22 for SSH. So, as long as those ports aren't blocked on the server-side firewall, you shouldn't have any problems.

share|improve this answer

As a own rule i NEVER allow direct access to my xenservers from WAN. I either setup a site-to-site vpn or just a standard roadwarrior vpn setup to be able to access the internal subnet.

This way you have secure access to the management subnet and don't have to expose your xenservers to outside threats.

I myself prefer OpenVPN but you could use any VPN solution.

If your firewall don't have the ability to act as a VPN server your could setup a Linux box with openvpn on 128MB ram.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.