This post is more than 5 years old
10 Posts
0
4966
November 14th, 2016 17:00
VMAX 250F - Question about the Internal default IP Subnets
Hi All,
A customer of mine is getting a new VMAX 250F. The customer has told me that they are using the 172.16.0.0, 172.17.0.0 and 172.18.0.0 in their datacenters already. These subnets are the default IP subnets used in the VMAX. As per the VMAX 250F installation documentation, we now have to request new IP subnets and perform the override procedure during the installation process.
The customer has asked why we have to change the default internal VMAX subnets?
If these are internal subnets, they should not be able to communicate out to the customer network.
So does anyone know why we have to change the default internal VMAX subnets?
Thank you,
Luke Littlefield
No Events found!
Scott_Dugan
26 Posts
0
November 15th, 2016 17:00
Hi llittlefield,
The default Subnets allocated to the internals of the VMAX3 are for EMC to access via ESRS. As with VMAX3 the new Module "VM" internals need a network to be contactable. To protect EMC and the customer the subnets need to be kept separate.
By connecting the VMAX to the same subnet of the customers network. From the SP EMC would have open access to the customer and the customer to the VMAX Frame. This is something that is not in EMC or the customers best interest.
Scott_Dugan
26 Posts
0
November 22nd, 2016 15:00
Hello Littlefield. If this question is answered can you please mark the post answered as well.
llittlefield
10 Posts
0
November 29th, 2016 17:00
Hi Scott,
My customer has pressed me further on this question. I provided him the information that you have already responded with, but he still has further questions.
His questions are:
1. The customer has to provide an external IP address for each MMCS. Does ESRS communicate to the MMCS via the external IP address?
2. Are the internal subnets hidden behind a NAT?
3. If the internal subnets are hidden behind a NAT, then how can there be a conflict with the customer network?
4. If the customer has 2 x VMAX 250F arrays, does the customer have to provide unique replacement subnets for each 250F?
I would have thought that the internal subnet is used only for communication between the devices on the same subnet within the VMAX3 array. They should never need to communicate outside of the internal subnets.
For things like eMGMT, this has an external network IP address. The customer will use this external IP address to use the eMGMT. The internal IP address of the eMGMT should never be seen by the customer network.
Are there routing issues on the internal subnets that somehow allows traffic from the internal VMAX network to get out into the customer network?
Can you help provide any more information here? If not, should I try to speak to someone in VMAX engineering?
Thank you in advance,
Luke
Scott_Dugan
26 Posts
0
November 29th, 2016 18:00
Hello llittlefield.
In relation to how the ESRS Gateway and the IP configuration of the backend of the VMAX is configured. I would not like to air this information over a public forum. I would like for you to create a case and the information can be addressed with you in a private, Security validated method. Feel free to call in to Dell EMC and log a case with the local CST in your location.