Administrator Guide

About Dedicated Management Networks
For increased security, or if your environment requires the separation of management trac and iSCSI trac, you can congure a
dedicated management network (DMN) that is used only for administrative access to the group. The management network is
separate from the network that handles iSCSI trac to the group.
• Without a dedicated management network (the default conguration), administrators connect to the group IP address for both
administrative access to the group and iSCSI initiator access to iSCSI targets (volumes and snapshots).
• With a dedicated management network, administrators do not use the group IP address for administrative access to the group.
Instead, administrators connect to the management network address. All iSCSI trac – including trac by replication partners,
and access to Dell EqualLogic Auto-Snapshot Manager/Linux Edition (ASM/LE), Dell EqualLogic Auto-Snapshot Manager/
Microsoft Edition (ASM/ME), and Dell Virtual Storage Manager for VMware (formerly ASM/VE) – continues to use the group IP
address. SAN Headquarters can connect to the group using either the management network address or the iSCSI address.
NOTE: Dedicated management networks are supported with both IPv4 and IPv6. You can congure IPv4 dedicated
management networks using the Group Manager GUI; however, IPv6 networks must be congured with the CLI.
All currently available PS Series array control modules have an additional network interface dedicated for use with a management
network. However, some older array models do not have this extra network interface. On these systems, if you enable the dedicated
management network:
• The highest-numbered interface becomes the DMN interface and is no longer available for iSCSI trac.
• Your iSCSI bandwidth might decrease because iSCSI bandwidth trac is limited to the remaining interfaces.
See the hardware documentation for your array model for more information.
If the management interface fails in a single-member group, or if the management network loses connectivity, you lose management
access to the group. However, you can always connect to the serial port on a group member and use the Group Manager CLI to
manage the group.
Using IPv6 with Management Networks
When using IPv6 addressing in your management network, note the following limitations.
NOTE: Dedicated management networks are supported with both IPv4 and IPv6. You can congure IPv4 dedicated
management networks using the Group Manager GUI; however, IPv6 networks must be congured with the CLI.
• Management network are supported through IPv6 addressing only when all members of a group are using PS Series rmware
version 9.0 or later.
• If you use a management port, congure it promptly after adding the new member. That way, the management address remains
accessible when the group needs to recover from failures.
• FS Series appliances do not support IPv6.
• Virtual volumes (VVols) do not support IPv6.
• Management network support for IPv6 must be congured through the CLI.
• If IPv4 and IPv6 addresses are congured for MWKA (management well-known addresses), you can use the following methods
to display the IP addresses:
– To display IPv4 addresses, click Group → Group Conguration → General. The addresses are shown in the General Settings
panel. (IPv6 addresses are blank.)
– To display IPv6 addresses, use the CLI grpparams management-network show command. See the Dell EqualLogic Group
Manager CLI Reference Guide for more information.
Congure a Management Network
Perform these tasks before conguring a management network:
• Make sure your network environment can support a dedicated management network. You need a subnet for the management
network that is separate from the subnet (or subnets) for iSCSI trac.
About Group-Level Security
97