UNSOLVED

imrankhani7

updated

10 years ago

I

imrankhani7

1 Rookie

16 Posts

0

2837

January 13th, 2017 09:00

Isilon Integration with Antivirus

hi..


Thanks the response..I had gone through the mentioned white paper earlier today prior posting the question in community.

Customer just want us to provide the IP details from ISILON so he can add those ISILON IP's in ICAP server for successful connection between ICAP & ISILON.


So can i confirm customer it should be Node IP's (part of SMB Pool) which needs to communicate with ICAP server not the management IP's.

Regards

Imran Khan

  • imrankhani7

    1 Rookie

    16 Posts

    1421

    0

    Posted January 29th, 2017 21:00

    Further to my above note , customer have added Isilon Management IP's in the ICAP servers to successful build the connection between ISILON & ICAP servers.

    So the traffic is flowing on Management subnet between ISILON to ICAP(Anti virus) using  1Gige subnet but customer would like to use the Data Subnet (10 gige) instead Managemnet subnet for the traffic to flow between ISILON & ICAP server.

    how this can be achieved to reroute the Antivirus traffic from management subnet to Data subnet.

  • Phil.Lam

    4 Apprentice

    641 Posts

    12 Points

    1420

    0

    Posted January 30th, 2017 22:00

    Do they have static 10G IPs? Can't they change to Data Subnet IPs (10G)  in ICAP servers?

  • imrankhani7

    1 Rookie

    16 Posts

    1425

    0

    Posted January 30th, 2017 22:00

    yes they do have SMB Pools (static 10gige IP's).

    when they change to Data Subnet IP's(10gige) in ICAP servers the connection between ICAP & ISILON is lost where the ICAP server status changes from active to inactive in isilon.

    Further if the add both Management (1Gige) & Data (10gige) IP's in ICAP server again the connection between ICAP & ISILON is lost.

    Only the Connection is established with Management IP's in ICAP server where Antivirus scanning also works fine with these IP's in place.

    but customer wants to use 10gige interface instead 1gige

  • imrankhani7

    1 Rookie

    16 Posts

    1425

    0

    Posted January 30th, 2017 22:00

    1 gige are in system access zone...

    10 gige are in Data Access zone... SMB pool belongs to Data Access zone which is using 10gige aggregation interface

  • Phil.Lam

    4 Apprentice

    641 Posts

    12 Points

    1425

    0

    Posted January 30th, 2017 22:00

    What Access Zones are the Static 10G IPs in? Are the 1G IPs in the System Access Zone?

  • imrankhani7

    1 Rookie

    16 Posts

    1425

    0

    Posted January 30th, 2017 22:00

    ok I can try this out and will let you know if its going to work. i hope by placing the Data IP's of 10gige is system access zone will not impact the user connections to isilon and the performance.

    will try this out and share the results.. thanks.

  • Phil.Lam

    4 Apprentice

    641 Posts

    12 Points

    1425

    0

    Posted January 30th, 2017 22:00

    I recall ICAP IPs has to be in System Access Zone. Can you put some 10G  IPs in System Access Zone.

  • imrankhani7

    1 Rookie

    16 Posts

    1425

    0

    Posted January 30th, 2017 23:00

    8.0.0.3

  • Phil.Lam

    4 Apprentice

    641 Posts

    12 Points

    1425

    0

    Posted January 30th, 2017 23:00

    BTW, What version of OneFS are you using?

  • Phil.Lam

    4 Apprentice

    641 Posts

    12 Points

    454

    0

    Posted January 30th, 2017 23:00

    What Access Zones are the AV servers on? On management Zone?