Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.
View this topic in a long page with up to 500 replies per page Create new topic
1 | 2 | 3 


41 posts

Geek
+1 received by user: 2


  Reply # 1510654 10-Mar-2016 15:42
Send private message

timmmay:

 

Curious why you need multiple IPs, care to share? If you want to hide the IP address(s) just put CloudFlare in front of it and don't leak your source IP. It's a WAF, but works a lot like a reverse proxy. Maybe you can get away without multiple IPs.

 

 

So I am not a networking guy. Maybe naively, we have it set up so the box is running and reverse proxies various website-lets of our website. Then we have an ip for the idrac, which can control the box, check it's status. With vflash, we should even be able to load and install new OS's onto the box all remotely. (In fact this is something I / we want to experiment with...) So the idrac is really a separate ip to keep things not too confusing. (I gather for Dirac 7 you can have a pass through? so the same box can share the same ip between the main box and the idrac...? I am not sure about this...)

 

Then for setting up things like mail etc it is nice to be able to use some of the installers out of the box. Of course you can get around a lot of things with port mapping etc... and then the final reason is we have multiple boxes.

 

It would be nice to be able to ssh experimentalbox1.myhomeufb.co.nz and ssh experimentalbox2.myhomeufb.co.nz, and not have to put in a port mapping there... etc.


What does this tag do
947 posts

Ultimate Geek
+1 received by user: 192

Subscriber

  Reply # 1510838 10-Mar-2016 19:20
Send private message

You just need a router with VPN capabilities, VPN into the router to get to your management network which would have access to your iDRAC etc. 

 

Don't want the management VPN to be terminated on that computer as then you have no out of band management.

 

As you say, having at least a couple of IP addresses to play with does make things easier. 

 

 

 

 


What does this tag do
947 posts

Ultimate Geek
+1 received by user: 192

Subscriber

  Reply # 1510850 10-Mar-2016 19:23
One person supports this post
Send private message

I would say Ubiquiti EdgeRouter but that might be more complex than you like

 

A Sophos or WatchGuard UTM box would make light work of setting it all up, added benefit of being able to run a web application firewall on the box directly which could give you access through to the iDRAC interfaces a bit more securely if you really didn't want to VPN




41 posts

Geek
+1 received by user: 2


  Reply # 1510960 10-Mar-2016 22:15
Send private message

jnimmo:

 

I would say Ubiquiti EdgeRouter but that might be more complex than you like

 

A Sophos or WatchGuard UTM box would make light work of setting it all up, added benefit of being able to run a web application firewall on the box directly which could give you access through to the iDRAC interfaces a bit more securely if you really didn't want to VPN

 

 

Thanks for the recommendations! That edge router looks very reasonable and interesting. I had thought vayatta was dead but it looks like VyOS is actually under reasonable development.

 

Thanks, Jas


1 | 2 | 3 
View this topic in a long page with up to 500 replies per page Create new topic

Twitter »

Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:





News »

N4L helping TAKA Trust bridge the digital divide for Lower Hutt students
Posted 18-Jun-2018 13:08


Winners Announced for 2018 CIO Awards
Posted 18-Jun-2018 13:03


Logitech Rally sets new standard for USB-connected video conference cameras
Posted 18-Jun-2018 09:27


Russell Stanners steps down as Vodafone NZ CEO
Posted 12-Jun-2018 09:13


Intergen recognised as 2018 Microsoft Country Partner of the Year for New Zealand
Posted 12-Jun-2018 08:00


Finalists Announced For Microsoft NZ Partner Awards
Posted 6-Jun-2018 15:12


Vocus Group and Vodafone announce joint venture to accelerate fibre innovation
Posted 5-Jun-2018 10:52


Kogan.com to launch Kogan Mobile in New Zealand
Posted 4-Jun-2018 14:34


Enable doubles fibre broadband speeds for its most popular wholesale service in Christchurch
Posted 2-Jun-2018 20:07


All or Nothing: New Zealand All Blacks arrives on Amazon Prime Video
Posted 2-Jun-2018 16:21


Innovation Grant, High Tech Awards and new USA office for Kiwi tech company SwipedOn
Posted 1-Jun-2018 20:54


Commerce Commission warns Apple for misleading consumers about their rights
Posted 30-May-2018 13:15


IBM leads Call for Code to use cloud, data, AI, blockchain for natural disaster relief
Posted 25-May-2018 14:12


New FUJIFILM X-T100 aims to do better job than smartphones
Posted 24-May-2018 20:17


Stuff takes 100% ownership of Stuff Fibre
Posted 24-May-2018 19:41



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.