IPMI Network Setup - vlan - switch - vpn?

[GoldenBigun]

Curious to hear about everyone's IPMI network setups. Wanted to see, seperate physical lan on its own switch, vlan setups, vpn setups that are used to secure and segment IPMI networks. Also look to learn about how you remotely access the IPMI network.

 

[Jeggs101]

We have a dedicated port on the firewall for IPMI that we segment from the rest of the network

That port is connected to a low power netgear switch

IPMI is attached to that switch

We VPN to the firewall box and the network port with the netgear switch and admin from there

 

[PigLover]

All of the admin access that can be is isolated onto a separate VLAN. Includes IPMI, switch/wifi-ap admin ports, ESXi management ports, whatever. There are no direct routes to access this VLAN except via physical access or through a VPN server.

 

[MiniKnight]

We just use one 48 port switch for everything. keeping it simple.

 

[Biren78]

ALWAYS make a private lan to VPN into. IPMI does now have some ability to filter unwanted hosts, but go with a real firewall and vpn solution.

 

[Peter_U]

ALWAYS make a private lan to VPN into. IPMI does now have some ability to filter unwanted hosts, but go with a real firewall and vpn solution.

What do you mean by real?