VCS Expressway dual Nic and administration

[Jose_DA-SILVA]

Hi,

We plan to install a VCS Expressway Cluster in a DMZ.

Our network team requires us to have a dedicated network interface for administration because the management is operated behind another firewall.

We ave a dual nic option, do you think it's possible to use an interface connected to the DMZ and a second dedicated to admnistration and replication cluster (as you can see in attached) ?

Thanks

José

[Tomonori Taniguchi · Accepted solution]

VCS can be managed from both network interfaces.

Using “firewall rules” configuration introduce in X7.2 release, you may restrict service on specific network interface (allow/deny base configuration on IP address and port range).

Important that cluster configuration must use Ethernet 1 IP address.

Clustering peer communication use Ethernet 1 IP address between VCSs and also alternative IP address included in ACF will use it.

Based on network diagram snapshot seem VCS-E are connecting different network directly not connecting same switch.

If this is correct, then cluster communication will go through firewall/internet which is fine but delay must be within 30 ms.

[Jose_DA-SILVA]

Thank you very much Tomonori.