This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

IPMI & IPSec Site-to-Site Tunnels

I just picked up a small 1U Supermicro Atom server that has built-in IPMI capabilities. I got everything setup and working great when all machines are on the same subnet (server & client running IPMIview program).

However, I'm having difficulty connecting to the IPMI interface from a different location. I have a site-to-site IPSec tunnel setup through Astaro and it works well (can access computers on the remote network via IP address just fine). However, I can't seem to get Supermicro's IPMI View program to open up the IPMI server on 192.168.4.100 from a computer on the 192.168.0.*** subnet. Any suggestions on network modifications to make this work? I have VMWare vSphere running on 192.168.4.101 and can access it remotely from 192.168.0.*** just fine. Any suggestions on getting IPMI working through the IPSec tunnel would be great!

Location A: 192.168.4.***
Server w/IPMI: 192.168.4.100 (IPMI interface address)
|
|--IPSec VPN tunnel connecting 192.168.4.*** to 192.168.0.***
|
Location B: 192.168.0.***

This thread was automatically locked due to age.

Parents

0 BAlfson over 14 years ago

This makes me think that your problem is more complex. I wonder if this would work with a RED tunnel between two Astaros. Good question - I think I'm gonna learn something here!

Cheers - Bob
Cancel
Vote Up 0 Vote Down

Cancel
0 Jhaislet over 14 years ago in reply to BAlfson
This makes me think that your problem is more complex. I wonder if this would work with a RED tunnel between two Astaros. Good question - I think I'm gonna learn something here!

Cheers - Bob

One approach is to have all the BMC Ethernet ports connected to the management
LAN or VLAN, and then have a VPN or private network extension to that
management network that supports UDP transport. This is an excellent means of
secure remote SOL communications for the larger data center, but can be expensive
and prohibitively complex for smaller branch office networks.

Thanks Bob, I'm thinking the above method may be my best bet. This can't be THAT novel of situation/setup. I don't need any of the SOL features, so maybe I'm not SOL? I do have a Netgear GS108T that does VLANs and a bunch of other cool sounding stuff. I've only messed with the VLAN aspect of this smart switch.

I'd be open to suggestions on how to set this up with ASG and a smart switch, and in particular, how to get UDP packets into the same subnet from a remote location.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Jhaislet over 14 years ago in reply to BAlfson
This makes me think that your problem is more complex. I wonder if this would work with a RED tunnel between two Astaros. Good question - I think I'm gonna learn something here!

Cheers - Bob

One approach is to have all the BMC Ethernet ports connected to the management
LAN or VLAN, and then have a VPN or private network extension to that
management network that supports UDP transport. This is an excellent means of
secure remote SOL communications for the larger data center, but can be expensive
and prohibitively complex for smaller branch office networks.

Thanks Bob, I'm thinking the above method may be my best bet. This can't be THAT novel of situation/setup. I don't need any of the SOL features, so maybe I'm not SOL? I do have a Netgear GS108T that does VLANs and a bunch of other cool sounding stuff. I've only messed with the VLAN aspect of this smart switch.

I'd be open to suggestions on how to set this up with ASG and a smart switch, and in particular, how to get UDP packets into the same subnet from a remote location.
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data