Servers - General
cancel
Showing results for 
Search instead for 
Did you mean: 

Suggestions? iLo configured with internet ip address for remote support

 
quorrum
Occasional Visitor

Suggestions? iLo configured with internet ip address for remote support

My department has been asked by a vendor put the iLo managmement port on the Internet with an ip address for support.  They gave us a couple of large ip address ranges (a couple class b and c networks) that are to be allowed for support.   

This type of configuration is against best practices, our department is against this deployment and have formally sited best practices and our secuirty concerns.  We are being directed to do implement this type of access, if we do not comply we will be insubortinate.  Should i be worried about this alarming access request?  

Recomendations, Thoughts and Concerns welcome. 

Thank you for your input.

2 REPLIES 2
Jimmy Vance
HPE Pro

Re: Suggestions? iLo configured with internet ip address for remote support

As you have stated, it is against best practices to connect iLO directly to the Internet.  It should ideally be placed on a separate management network.  For vendor access, you should let them have acces to a VPN connection that would then allow them to access the iLO interface. 

 

No support by private messages. Please ask the forum! Accept or KudoI work for HPE
Highlighted
Torsten.
Acclaimed Contributor

Re: Suggestions? iLo configured with internet ip address for remote support

It should be at least behind a VPN, better security for low cost.


Hope this helps!
Regards
Torsten.

__________________________________________________
There are only 10 types of people in the world -
those who understand binary, and those who don't.

__________________________________________________
No support by private messages. Please ask the forum!

If you feel this was helpful please click the KUDOS! thumb below!