Administrator Guide

Service Port
FTP (Passive) 44430–44439
SSH 22
Storage Manager communication 35451
Secured management can be enabled only after the system is deployed. To make a subnet secure:
• It must exist prior to enabling the secured management feature.
• It can reside on the client network (subnet-level isolation of management trac) or the LOM (Lights Out Management) Ethernet
port (physical isolation of management trac). The LOM Ethernet port is located on the lower-right side of the back panel of a
NAS controller.
• It must be the subnet that you log in from.
Add a Secured Management Subnet
The subnet on which you enable secured management must exist prior to enabling the secured management feature.
1. In the Storage view, select a FluidFS cluster.
2. Click the File System tab.
3. In the File System view, select Cluster Connectivity, and then click the Management Network tab.
4. In the Management Network panel, click Edit Settings.
The Modify Administrative Network dialog box opens.
5. From the State drop-down list, select a state to be used for the management network.
• Select Restricted for management functionality to be blocked on other subnets
• Select Unrestricted for management functionality to be available on all subnets.
6. To change the prex of the network, type a prex length in the Prex eld.
7. In the Network ID eld, type the ID for the network that you want to modify.
8. Add one or more management VIPs through which the administrator manages the FluidFS cluster.
a. In the Virtual IP eld, type a management virtual IP address.
b. In the box for the Controller IP Address eld, type a controller IP address and click Add. Repeat this step for each
controller.
9. To specify a VLAN tag, type a VLAN tag in the VLAN Tag eld. When a VLAN spans multiple switches, the VLAN tag is used to
specify which ports and interfaces to send broadcast packets to.
10. From the Interface drop-down list, select the interface on which the secured management subnet is located.
• Select Admin to use the LOM Ethernet port for physical isolation of management trac. You must also connect a network
cable to the LOM Ethernet port of each controller in the rst (or only) appliance.
• Select Client for subnet-level isolation of management trac.
11. Click OK.
Change the Secured Management Subnet Interface
Change the interface on which the secured management subnet is located.
1. In the Storage view, select a FluidFS cluster.
2. Click the File System tab.
3. In the File System view, select Cluster Connectivity, and then click the Management Network tab.
4. In the Management Network panel, click Edit Settings. The Modify Administrative Network dialog box opens.
5. From the Interface drop-down list, select the interface on which the secured management subnet is located.
• Select Admin to use the LOM Ethernet port for physical isolation of management trac. You must also connect a network
cable to the LOM Ethernet port of each controller in the rst (or only) appliance..
• Select Client for subnet-level isolation of management trac.
6. Click OK.
350
FluidFS System Management for FS Series Appliances