Skip to content

Commit cc27534

Browse files
prmerger-automator[bot]prmerger-automator[bot]
authored
Merge pull request #271452 from Satya-talluri/stalluri/firewall-rules
[operator-nexus] Add iDRAC configuration and firewall rules.
2 parents 6fab7a7 + 70c3027 commit cc27534

File tree

1 file changed

+85
-2
lines changed

1 file changed

+85
-2
lines changed

‎articles/operator-nexus/howto-platform-prerequisites.md

Lines changed: 85 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -355,9 +355,9 @@ Terminal Server has been deployed and configured as follows:
355355
- Purity Code Level: 6.5.1
356356
- Safe Mode: Disabled
357357
- Array Time zone: UTC
358-
- DNS Server IP Address: 172.27.255.201
358+
- DNS (Domain Name System) Server IP Address: 172.27.255.201
359359
- DNS Domain Suffix: not set by operator during setup
360-
- NTP Server IP Address or FQDN: 172.27.255.212
360+
- NTP (Network Time Protocol) Server IP Address or FQDN: 172.27.255.212
361361
- Syslog Primary: 172.27.255.210
362362
- Syslog Secondary: 172.27.255.211
363363
- SMTP Gateway IP address or FQDN: not set by operator during setup
@@ -398,11 +398,94 @@ Terminal Server has been deployed and configured as follows:
398398
- puretune -set PS_RDMA_STALE_OP_THRESH_MS 5000 "PURE-209441";
399399
- puretune -set PS_BDRV_REQ_MAXBUFS 128 "PURE-209441";
400400
401+
## iDRAC IP Assignment
402+
403+
Before deploying the Nexus Cluster, it’s best for the operator to set the iDRAC IPs while organizing the hardware racks. Here’s how to map servers to IPs:
404+
405+
- Assign IPs based on each server’s position within the rack.
406+
- Use the fourth /24 block from the /19 subnet allocated for Fabric.
407+
- Start assigning IPs from the bottom server upwards in each rack, beginning with 0.11.
408+
- Continue to assign IPs in sequence to the first server at the bottom of the next rack.
409+
410+
### Example
411+
412+
Fabric range: 10.1.0.0-10.1.31.255 – iDRAC subnet at fourth /24 is 10.1.3.0/24.
413+
414+
| Rack | Server | iDRAC IP |
415+
|--------|---------------|---------------|
416+
| Rack 1 | Worker 1 | 10.1.3.11/24 |
417+
| Rack 1 | Worker 2 | 10.1.3.12/24 |
418+
| Rack 1 | Worker 3 | 10.1.3.13/24 |
419+
| Rack 1 | Worker 4 | 10.1.3.14/24 |
420+
| Rack 1 | Worker 5 | 10.1.3.15/24 |
421+
| Rack 1 | Worker 6 | 10.1.3.16/24 |
422+
| Rack 1 | Worker 7 | 10.1.3.17/24 |
423+
| Rack 1 | Worker 8 | 10.1.3.18/24 |
424+
| Rack 1 | Controller 1 | 10.1.3.19/24 |
425+
| Rack 1 | Controller 2 | 10.1.3.20/24 |
426+
| Rack 2 | Worker 1 | 10.1.3.21/24 |
427+
| Rack 2 | Worker 2 | 10.1.3.22/24 |
428+
| Rack 2 | Worker 3 | 10.1.3.23/24 |
429+
| Rack 2 | Worker 4 | 10.1.3.24/24 |
430+
| Rack 2 | Worker 5 | 10.1.3.25/24 |
431+
| Rack 2 | Worker 6 | 10.1.3.26/24 |
432+
| Rack 2 | Worker 7 | 10.1.3.27/24 |
433+
| Rack 2 | Worker 8 | 10.1.3.28/24 |
434+
| Rack 2 | Controller 1 | 10.1.3.29/24 |
435+
| Rack 2 | Controller 2 | 10.1.3.30/24 |
436+
| Rack 3 | Worker 1 | 10.1.3.31/24 |
437+
| Rack 3 | Worker 2 | 10.1.3.32/24 |
438+
| Rack 3 | Worker 3 | 10.1.3.33/24 |
439+
| Rack 3 | Worker 4 | 10.1.3.34/24 |
440+
| Rack 3 | Worker 5 | 10.1.3.35/24 |
441+
| Rack 3 | Worker 6 | 10.1.3.36/24 |
442+
| Rack 3 | Worker 7 | 10.1.3.37/24 |
443+
| Rack 3 | Worker 8 | 10.1.3.38/24 |
444+
| Rack 3 | Controller 1 | 10.1.3.39/24 |
445+
| Rack 3 | Controller 2 | 10.1.3.40/24 |
446+
| Rack 4 | Worker 1 | 10.1.3.41/24 |
447+
| Rack 4 | Worker 2 | 10.1.3.42/24 |
448+
| Rack 4 | Worker 3 | 10.1.3.43/24 |
449+
| Rack 4 | Worker 4 | 10.1.3.44/24 |
450+
| Rack 4 | Worker 5 | 10.1.3.45/24 |
451+
| Rack 4 | Worker 6 | 10.1.3.46/24 |
452+
| Rack 4 | Worker 7 | 10.1.3.47/24 |
453+
| Rack 4 | Worker 8 | 10.1.3.48/24 |
454+
| Rack 4 | Controller 1 | 10.1.3.49/24 |
455+
| Rack 4 | Controller 2 | 10.1.3.50/24 |
456+
457+
An example design of three on-premises instances from the same NFC/CM pair, using sequential /19 networks in a /16:
458+
459+
| Instance | Fabric Range | iDRAC subnet |
460+
|------------|-------------------------|--------------|
461+
| Instance 1 | 10.1.0.0-10.1.31.255 | 10.1.3.0/24 |
462+
| Instance 2 | 10.1.32.0-10.1.63.255 | 10.1.35.0/24 |
463+
| Instance 3 | 10.1.64.0-10.1.95.255 | 10.1.67.0/24 |
464+
401465
### Default setup for other devices installed
402466
403467
- All network fabric devices (except for the Terminal Server) are set to `ZTP` mode
404468
- Servers have default factory settings
405469
470+
## Firewall rules between Azure to Nexus Cluster.
471+
472+
To establish firewall rules between Azure and the Nexus Cluster, the operator must open the specified ports. This ensures proper communication and connectivity for required services using TCP (Transmission Control Protocol) and UDP (User Datagram Protocol).
473+
474+
| S.No | Source | Destination | Port (TCP/UDP) | Bidirectional | Rule Purpose |
475+
|------|------------------------|-----------------------|-----------------|----------------|----------------------------------------------------------|
476+
| 1 | Azure virtual network | Cluster | 22 TCP | No | For SSH to undercloud servers from the CM subnet. |
477+
| 2 | Azure virtual network | Cluster | 443 TCP | No | To access undercloud nodes iDRAC |
478+
| 3 | Azure virtual network | Cluster | 5900 TCP | No | Gnmi |
479+
| 4 | Azure virtual network | Cluster | 6030 TCP | No | Gnmi Certs |
480+
| 5 | Azure virtual network | Cluster | 6443 TCP | No | To access undercloud K8S cluster |
481+
| 6 | Cluster | Azure virtual network | 8080 TCP | Yes | For mounting ISO image into iDRAC, NNF runtime upgrade |
482+
| 7 | Cluster | Azure virtual network | 3128 TCP | No | Proxy to connect to global Azure endpoints |
483+
| 8 | Cluster | Azure virtual network | 53 TCP and UDP | No | DNS |
484+
| 9 | Cluster | Azure virtual network | 123 UDP | No | NTP |
485+
| 10 | Cluster | Azure virtual network | 8888 TCP | No | Connecting to Cluster Manager webservice |
486+
| 11 | Cluster | Azure virtual network | 514 TCP and UDP | No | To access undercloud logs from the Cluster Manager |
487+
488+
406489
## Install CLI extensions and sign-in to your Azure subscription
407490
408491
Install latest version of the

0 commit comments

Comments
 (0)