topic Re: Management Interface for Spesific Virtual System in Firewall and Security Management

Management Interface for Spesific Virtual System

Adity12 — Tue, 30 Jan 2024 10:26:25 GMT

Hi All,

Have a good day.

I am a little bit confused with the environment of the VSX Cluster in my lab

So here is my setup:

I just installed one open server SMS on my lab and then I installed 2 Open Server ( Installed as VSX Cluster )

Then I create 1 VS on the VSX Cluster with 1 uplink interface and 1 downlink interface.

Each VSX Cluster has 1 dedicated interface management, which is on the same segment network with SMS

The question is how VS is sending logs to SMS? is there a need to add a specific management interface for those VS? ( I have 1 Management interface only for each VSX Cluster Member.

Or I can use 1 interface dedicated management interface on each VSX Cluster for sending logs to SMS?

Sorry, my question can cause confusion for some people,

If you need something, please let me know.

Thanks, Regards

Dio Aditya P

Re: Management Interface for Spesific Virtual System

Bob_Zimmerman — Tue, 30 Jan 2024 16:39:26 GMT

This gets to one of the core misunderstandings of VSX. VSs aren't really separate things. They're not VMs. They're just VRFs. Multiple routing tables all running under one OS. All management traffic, including logging, leaves from VS0.

Re: Management Interface for Spesific Virtual System

Chris_Atkinson — Tue, 30 Jan 2024 23:49:00 GMT

@Bob_Zimmerman is correct however there are enhancements planned around this with ElasticXL/R82 which we will discuss more at the upcoming CPX events.

Re: Management Interface for Spesific Virtual System

Adity12 — Wed, 31 Jan 2024 06:55:09 GMT

Hi @Bob_Zimmerman and @Chris_Atkinson,

Thanks for your answer, that's clear to me.

I will accept your feedback as a solution.

Thanks, Regards

Dio Aditya P