This post is more than 5 years old
1 Rookie
•
19 Posts
0
21981
January 23rd, 2014 03:00
Access controls and IP addressses
Could someone clarify something for me, do the access controls limit access to a volume from the specified IP address only, or does it allow access from any IP address from a computer that also includes the specified IP address...
An example of what I mean...
I have a volume1, which has a access control record of 192.168.1.10, and no others.
I have a server with two isci connections to the switch, 192.168.1.10 and 192.168.1.11
When I look at the current connections to the volume it shows both the IP addresses as having connections - but I would like only one of the to connect.
0 events found
No Events found!
awesom-o
1 Rookie
•
19 Posts
0
January 23rd, 2014 06:00
They are in separate pools.
awesom-o
1 Rookie
•
19 Posts
0
January 23rd, 2014 06:00
Ok thanks, that clears that up at least.
The iscsi traggic is separated, what I am trying to accomplish is connecting to a 10gb san and 1gb san that are within the same group, but i want the 10gb san to connect with the 10gb server nics and the 1gb san to connect to the 1gb server nics.
awesom-o
1 Rookie
•
19 Posts
0
January 23rd, 2014 06:00
Hi yes I do have HIT installed. When you say creates addional entries - where are these created as the group manager interface only shows the access entries I created.
It's not that i don't want there to be multiple connections, I just want to control which nics connect to which volumes. Just seems a bit odd to have the ability to specify exact IP addresses if it just goes ahead and allows others...
awesom-o
1 Rookie
•
19 Posts
0
January 23rd, 2014 06:00
Thanks yeah i'm familiar with that and previous ones, but it assumes that you're wanting to connect to the 1gb san from a 1gb server and the 10gb san from a 10gb server.
What I'd like to to is connect to both from one server. So given I don't want to overload the ports on the 1gb san I'd like to connect the 1gb to the 1gb and the 10gb to the 10gb.
It seemed like it should be a fairly straightforward thing to do...I thought!
awesom-o
1 Rookie
•
19 Posts
0
January 23rd, 2014 07:00
Hhmm, back to the drawing board on this one!
Thanks for your help Don.
awesom-o
1 Rookie
•
19 Posts
0
January 23rd, 2014 07:00
No, the 10gb san is in addition to several 1gb sans, so it'll be some time before they can all be replaced with 10gb.
I guess I could still move the 10gb unit into it's own group and change the subnets and do it that way.
Not ideal but may be the only way.