Adding a secured management subnet – Dell PowerVault NX3500 User Manual

Page 37

Advertising
background image

traffic. Other subnets will not have any of the management ports listening on them, making them
available only for client access, replication, and NDMP traffic. This prevents users on client (data) access
subnets from accessing any FluidFS cluster management functions.
In FluidFS, the ports listed in the following table do not participate in CIFS/NFS communication, but are
exposed on the client network by default. Enabling secured management allows you to expose the
management ports on a management subnet only.

Service Ports

Web Services

80

Secure Web Services

443

FTP

44421

FTP (Passive)

44430–44439

SSH

22

FluidFS Manager communication

35451

Secured management can be enabled only after the system is deployed. To make a subnet secure:

• It must exist prior to enabling the secured management feature
• It can reside on the client network (subnet

‐level isolation of management traffic) or the LOM (Lights

Out Management) Ethernet port (physical isolation of management traffic). The LOM Ethernet port is

on the lower right side of the back panel of a NAS controller.

• Log in from this subnet.

Secured management configuration, together with other networking features, is accessed through the
Security Access pane in the System\Internal view.

Adding a Secured Management Subnet

The subnet on which you enable secured management must exist prior to enabling the secured

management feature.

To add a secured management subnet:

1.

Click the System tab on the left.

2. Click the Internal tab on top.

3. In the Security Access pane, click

.

4. Click New Subnet for FluidFS Management.

The New Subnet for FluidFS Management dialog box is displayed.

5. Click

to the right of the VIP1 field.

6. In the IP Address field, type a management IP address and click OK.
7. For each NAS controller:

a) Click

to the right of the NAS controller field.

b) In the IP Address field, type an IP address for the NAS controller and click OK.

8. To automatically fill the IP addresses for the NAS Controllers and VIP, click Auto Fill.

37

Advertising
This manual is related to the following products: