Just curious...Prod and DMZ?

[Chad W]

How many of you have a UCS with both production and DMZ systems on it (same blades as well)?

The question has come up at work several times. I, being more security focused, about had a cow. But I want to know what others are doing and how you are assured one side can not see the other before I fly off the handle ;)

We do not currently have the vASA or NSX.

Thanks!

[Walter Dey · Accepted solution]

Hi Chad

Yes I have customers doing it; disjoint vlans is the design they use.

Another (better) solution would be to use a dedicated UCS domain for DMZ. mini UCS is a nice solution, and with 3.1 a second chassis is supported, therefore a total ot 16 blades.

Walter.

[Qiese Dides]

I have seen it throughout most of the customers environments.

http://www.cisco.com/c/en/us/solutions/collateral/data-center-virtualization/unified-computing/white_paper_c11-692008.html

As Walter stated with the new release of software 3.1 we might be seeing an influx of people trying to add the second Chassis to the UCS mini but I haven't seen anyone do that yet.

Hope that helps.

Qiese Dides

[Chad W]

Thanks to both of you!