Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


View this topic in a long page with up to 500 replies per page Create new topic
1 | 2 | 3 


41 posts

Geek
+1 received by user: 2


  Reply # 1510654 10-Mar-2016 15:42
Send private message

timmmay:

 

Curious why you need multiple IPs, care to share? If you want to hide the IP address(s) just put CloudFlare in front of it and don't leak your source IP. It's a WAF, but works a lot like a reverse proxy. Maybe you can get away without multiple IPs.

 

 

So I am not a networking guy. Maybe naively, we have it set up so the box is running and reverse proxies various website-lets of our website. Then we have an ip for the idrac, which can control the box, check it's status. With vflash, we should even be able to load and install new OS's onto the box all remotely. (In fact this is something I / we want to experiment with...) So the idrac is really a separate ip to keep things not too confusing. (I gather for Dirac 7 you can have a pass through? so the same box can share the same ip between the main box and the idrac...? I am not sure about this...)

 

Then for setting up things like mail etc it is nice to be able to use some of the installers out of the box. Of course you can get around a lot of things with port mapping etc... and then the final reason is we have multiple boxes.

 

It would be nice to be able to ssh experimentalbox1.myhomeufb.co.nz and ssh experimentalbox2.myhomeufb.co.nz, and not have to put in a port mapping there... etc.


What does this tag do
980 posts

Ultimate Geek
+1 received by user: 205

Subscriber

  Reply # 1510838 10-Mar-2016 19:20
Send private message

You just need a router with VPN capabilities, VPN into the router to get to your management network which would have access to your iDRAC etc. 

 

Don't want the management VPN to be terminated on that computer as then you have no out of band management.

 

As you say, having at least a couple of IP addresses to play with does make things easier. 

 

 

 

 


 
 
 
 


What does this tag do
980 posts

Ultimate Geek
+1 received by user: 205

Subscriber

  Reply # 1510850 10-Mar-2016 19:23
One person supports this post
Send private message

I would say Ubiquiti EdgeRouter but that might be more complex than you like

 

A Sophos or WatchGuard UTM box would make light work of setting it all up, added benefit of being able to run a web application firewall on the box directly which could give you access through to the iDRAC interfaces a bit more securely if you really didn't want to VPN




41 posts

Geek
+1 received by user: 2


  Reply # 1510960 10-Mar-2016 22:15
Send private message

jnimmo:

 

I would say Ubiquiti EdgeRouter but that might be more complex than you like

 

A Sophos or WatchGuard UTM box would make light work of setting it all up, added benefit of being able to run a web application firewall on the box directly which could give you access through to the iDRAC interfaces a bit more securely if you really didn't want to VPN

 

 

Thanks for the recommendations! That edge router looks very reasonable and interesting. I had thought vayatta was dead but it looks like VyOS is actually under reasonable development.

 

Thanks, Jas


1 | 2 | 3 
View this topic in a long page with up to 500 replies per page Create new topic



Twitter »

Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.


Geekzone Live »

Our community of supporters help make Geekzone possible. Click the button below to join them.

Support Geezone on PressPatron



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.