Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I'm looking for recommendations and reasons for having the BladeCenter Management Modules either on the same network as the Blades and other servers or on a separate network.

Configuration Information

  • IBM BladeCenter (MTM 8677-2XX)
  • Three HS20 Baldes
  • Two Management Modules (not the Advanced Management Modules)
  • Static IPs for both the Blades and the Management Modules
share|improve this question
add comment

2 Answers 2

up vote 4 down vote accepted

I'll disagree with dan here.

There are 2 reasons to have your management network segregated from your production network.

  1. security. Typically you pass traffic over the mgmt network that's a bit more sensitive and trusted than the traffic in the production network. I'm not 100% convinced this is a sufficient reason to set up a management network. Say, for instance, if you're doing SNMPv2, it helps to have this stuff on a totally independent link / network.
  2. your management network shouldn't be routed and you should have out-of-band access to it. That way, if you do something to your production network that causes it to not work or work very poorly, you can still access all of your devices. Very handy if you screw up a routerID or a firewall rule or are dealing with a broadcast storm...

In my opinion, the reliability aspect of the management network (reason 2) is the primary justification.

share|improve this answer
    
It's not a prerequisite. You can, and may need to, terminate OOB on a production network. Still a good point: +1 –  Dan Carley Dec 10 '09 at 17:36
add comment

There's just one compelling reason to do so - security.

Putting all of your management devices including any other switch and KVM-IP hardware into a separate network means that they are far away from your public production networks. This prevents management traffic from being as exposed and allows you to enforce different policies for access.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.