Dell Storage Manager 2020 R1 Administrator's Guide

Managing Secured Management

By default, all FluidFS cluster management ports are open on all subnets, along with the other ports needed for client access (SMB/NFS/FTP), replication, and NDMP. Secured management, when enabled, exclusively limits all management traffic to one specific subnet. The subnet on which secured management is enabled also has the necessary ports open for client access, replication, FTP, and NDMP traffic. Other subnets will not have any of the management ports listening on them, making them available only for client access, replication, and NDMP traffic. This setup prevents users on client (data) access subnets from accessing any FluidFS cluster management functions.

In FluidFS, the management ports listed in the following table do not participate in SMB/NFS communication, but are exposed on the client network by default. When you enable secured management, you can expose the management ports on a management subnet only.

Secured management can be enabled only after the system is deployed. To make a subnet secure:

• It must exist prior to enabling the secured management feature.
• It can reside on the client network (subnet-level isolation of management traffic) or the LOM (Lights Out Management) Ethernet port (physical isolation of management traffic). The LOM Ethernet port is located on the lower-right side of the back panel of a NAS controller.
• It must be the subnet that you log in from.