Fencing with drac6 (firewalled)

[dt47]

Hi,

so far I have setup everything for HA except fencing on my Two-Node-Cluster. The wiki mentions, that the Proxmox hosts need ssh access to the cards. The IPs (v4) assigned to the dracs are in a protected network though and thus the controllers arent accessible this way. The IPs are also in a different subnet than the hosts. Surely, I am not the only one, having the IPs of the dracs in a management network and still wanting to use the controllers to be used as fencing devices as well?

Thanks!

 

[spirit]

Hi,

so far I have setup everything for HA except fencing on my Two-Node-Cluster. The wiki mentions, that the Proxmox hosts need ssh access to the cards. The IPs (v4) assigned to the dracs are in a protected network though and thus the controllers arent accessible this way. The IPs are also in a different subnet than the hosts. Surely, I am not the only one, having the IPs of the dracs in a management network and still wanting to use the controllers to be used as fencing devices as well?

Thanks!

you need to have network access to control your fencing devices...this is the only way. Can't you route your networks and firewall them to just open ssh ?

 

[dt47]

Thanks, thats what I thought and read. I hoped I overlooked something though. Making changes to the firewall in that regard is out of the question. Maybe I get to atleast circumvent the issue by using ipv6.