Management Server Placement

[adamd]

Does anyone know the recommended practice for the placement for Management Servers?

We have Management HA and two clusters of Nokia's in two different locations.

One Management Server behind one cluster and the other behind the other cluster Connection to the Mgt Server is by SecureClient VPN. Both Mgt servers have public IP's. Access to the management servers is dependant on the firewalls.

I have been told it is common practice to place Management Servers behind Cisco routers connected to the internet protected by an access list so as not to be dependant on the the firewall being up to access it.

Any suggestions on this would be appreciated.

[pop_alex]

Hi,

I found this quite confusing for me

"We have Management HA and two clusters of Nokia's in two different locations.

One Management Server behind one cluster and the other behind the other cluster Connection to the Mgt Server is by SecureClient VPN. Both Mgt servers have public IP's. Access to the management servers is dependant on the firewalls."

From what I understand from your sentences, you have two cluster in different locations managed by individual management server. So, one management server per cluster. You mentioned you have management H.A (two management) ? Is this mean that you have two management server per cluster?

Regards,

Al

[chillyjim]

Originally Posted by adamd

I have been told it is common practice to place Management Servers behind Cisco routers connected to the internet protected by an access list so as not to be dependant on the the firewall being up to access it.

Any suggestions on this would be appreciated.

NO!!!! This is BAD!!!! You do not want you Management server out on the open Internet. If that is compromised you have no firewall security.

Your currently described configuration is normal.