Dell EqualLogic PS6210XS EqualLogic Group Manager Administrator s Guide PS Ser - Page 97

About Dedicated Management Networks For increased security, or if your environment requires the separation of management traffic and iSCSI traffic, you can configure a dedicated management network (DMN) that is used only for administrative access to the group. The management network is separate from the network that handles iSCSI traffic to the group. • Without a dedicated management network (the default configuration), administrators connect to the group IP address for both administrative access to the group and iSCSI initiator access to iSCSI targets (volumes and snapshots). • With a dedicated management network, administrators do not use the group IP address for administrative access to the group. Instead, administrators connect to the management network address. All iSCSI traffic - including traffic by replication partners, and access to Dell EqualLogic Auto-Snapshot Manager/Linux Edition (ASM/LE), Dell EqualLogic Auto-Snapshot Manager/ Microsoft Edition (ASM/ME), and Dell Virtual Storage Manager for VMware (formerly ASM/VE) - continues to use the group IP address. SAN Headquarters can connect to the group using either the management network address or the iSCSI address. NOTE: Dedicated management networks are supported with both IPv4 and IPv6. You can configure IPv4 dedicated management networks using the Group Manager GUI; however, IPv6 networks must be configured with the CLI. All currently available PS Series array control modules have an additional network interface dedicated for use with a management network. However, some older array models do not have this extra network interface. On these systems, if you enable the dedicated management network: • The highest-numbered interface becomes the DMN interface and is no longer available for iSCSI traffic. • Your iSCSI bandwidth might decrease because iSCSI bandwidth traffic is limited to the remaining interfaces. See the hardware documentation for your array model for more information. If the management interface fails in a single-member group, or if the management network loses connectivity, you lose management access to the group. However, you can always connect to the serial port on a group member and use the Group Manager CLI to manage the group. Using IPv6 with Management Networks When using IPv6 addressing in your management network, note the following limitations. NOTE: Dedicated management networks are supported with both IPv4 and IPv6. You can configure IPv4 dedicated management networks using the Group Manager GUI; however, IPv6 networks must be configured with the CLI. • Management network are supported through IPv6 addressing only when all members of a group are using PS Series firmware version 9.0 or later. • If you use a management port, configure it promptly after adding the new member. That way, the management address remains accessible when the group needs to recover from failures. • FS Series appliances do not support IPv6. • Virtual volumes (VVols) do not support IPv6. • Management network support for IPv6 must be configured through the CLI. • If IPv4 and IPv6 addresses are configured for MWKA (management well-known addresses), you can use the following methods to display the IP addresses: - To display IPv4 addresses, click Group → Group Configuration → General. The addresses are shown in the General Settings panel. (IPv6 addresses are blank.) - To display IPv6 addresses, use the CLI grpparams management-network show command. See the Dell EqualLogic Group Manager CLI Reference Guide for more information. Configure a Management Network Perform these tasks before configuring a management network: • Make sure your network environment can support a dedicated management network. You need a subnet for the management network that is separate from the subnet (or subnets) for iSCSI traffic. About Group-Level Security 97