DMZ IP

[Mousa55]

Hi
i want to know the DMZ IP and the ILO IP
for my server (rp8420 11i).
by command.
thanks

[VK2COT · Accepted solution]

Hello,

a) Due to complete separation of networks,
unless you have a very bad design,
you cannot view your ILO IP address
at Unix prompt.

You need to log into the ILO and
check if and what the network setup is.
I have seen many customers who do not
use remote consoles at all (or simply
forgot to set them up).

b) About DMZ. Its IP address (if it
exist) will be reported by standard Unix
commands that come with HP-UX
(linkinfo is a new one created by WTEC
team).

DMZ network interface is just another
active network interface on a given server.
It is just that its role might be
declared for Demilitarized Zone...

lanscan
netstat -rnv
laninfo
ifconfig lanX
linkinfo

As a good engineering rule, when we
design networks for Unix servers, AT LEAST
three interfaces are used (more if
some kind of network redundancy is
required).

Example for HP-UX servers:

1. Console LAN (ILO, GSP, and similar)

2. Confined LAN (also called "Management LAN"
for Unix admins to SSH into the server,
and also Network Time Protocol, possibly
Ignite make_net_recovery, Domain Name
Service resolution, and similar "management"
types of protocols).

We use this LAN to avoid "abusing"the customer's networks.

3. Application LAN (also called "Customer
LAN"). Note that there could be more than
one customer LANs...

In every single case, these three (or more)
networks must be fully isolated and
firewall-ed from each other. That is why I
said I hoped your setup does not merge
these networks :)

Cheers,

VK2COT