Question from HP labs

[Brad Klein]

The HP Partition Management group would like to understand how users of HP's hardware partitionable systems configure the network access to the service processor (also known as the SP, MP, or GSP). This information will help us design better system management tools which take into account customer network topologies and configurations. Please respond the question(s) which apply to your environment:

1) For owners of HP Superdome systems (SD16000, SD32000, and SD64000), is the PRIVATE lan port of the service processor connected to:
a) a private network only accessible via the SMS station.
b) the intranet (i.e. the same network the partitions are connected)
c) not connected to any network
d) other, (please specify)

2) For owners of HP Superdome systems (SD16000, SD32000, and SD64000), is the PUBLIC lan port of the service processor connected to:
a) a private network only accessible via the SMS station.
b) the intranet (i.e. the same network the partitions are connected)
c) not connected to any network
d) other, (please specify)

3) For owners of HP non-Superdome partitionable systems (rp7410 and rp8400), is the lan port of the service processor connected to:
a) a private network only accessible via an intermediate system.
b) the intranet (i.e. the same network the partitions are connected)
c) not connected to any network
d) other, (please specify)

Thanks in advance for your replies,

HP Partition Management group.

[Chris Vail · Accepted solution]

1) N/A
2) N/A
3) B


Chris

[John Bolene]

1 A
2 B
3 B

[Ross Zubritski]

1) N/A

2) N/A

3) B

Regards,

RZ

[John Poff]

Hi,

No Superdomes here, but for #3 we do B) - the intranet.

JP

[Paul Sperry]

1) N/A
2) N/A
3) B

[Michael Steele_2]

1) N/A
2) N/A
3) some b and some c

[John Dvorchak]

1. n/a
2. n/a
3. c but exploring use in this mode.

[Michael Tully]

Hi,

1) N/A
2) N/A
3) B

Cheers
Michael

[S.K. Chan]

1- NA
2- NA
3- B

[Sridhar Bhaskarla]

1. A
2. b
3. b

-Sri

[Brian M Rawlings]

1> N/A
2> N/A
3> It depends*

* Many customers just put the GSP/console port on their intranet, against our recommendations. It is easier, and they have lots of other security holes anyway, so why bother with VLANs and all that stuff.

* Our recommendation is that all consoles like this port, and all admin ports for network switches and appliances be put on a seperate, non-routed, 'admin LAN' (or VLAN, which is becoming more accepted and more common). Plenty of customers take our advice and either implement this scheme, or correct their existing scheme to add this level of additional security.

Frankly, the percentages of those who build their houses on the sand and on the rock are about equal. Scary but true...

Best Regards, --bmr

[Tom Ward_1]

1) N/A
2) N/A
3) B mostly. Some C.

[A. Clay Stephenson]

1) n/a
2) n/a
3) A

[Ian Kidd_1]

(1) N/A

(2) N/A

(3) B

Regards,
Ian

[avsrini]

Hi,
1. N.A.
2. N.A.
3. B

Rgds
Srini.

[John Payne_2]

1) N/A
2) N/A
3) A -> Accessable only via our VPN.

Hope it helps

John

[Ravi_8]

Hi,

1)a
2)b
3)b

[Rajeev Shukla]

1) N/A
2) N/A
3) c But would like to explore the possibilities

Raj

[James A. Donovan]

1)NA
2)NA
3)B, but seperate VLAN

[Christian Gebhardt]

1 A
2 B
3 n/a

[Tom Geudens]

Hi,

1) N/A
2) N/A
3) B

Regards,
Tom

[Balaji N]

1) N/A
2) N/A
3) B. Though we have suggested having a private LAN(or a VLAN) for the purpose.
hth
-balaji

[Carlos Fernandez Riera]

1)a
2)b
3)d diferent cases.


But, we try to connect all GSP lans to a unique network ( by now shared ) in order to get reswtricted access someone day.

[Vicente Sanchez_3]

1) N/A
2) N/A
3) b

Regards, Vicente.