Manage Locally-Managed Spark firewall via VPN

[JaySon_2021]

We have a Quantum Spark 2560 being installed at remote site. The firewall will be locally managed. Our only access to it will be through a VPN. (See crude drawing below).

I need to have an IP that I can hit to manage it. Should I use the .1 in the transit vlan? Or should I put an IP on one of the unused 1Gb ports and use that to manage the firewall, that way it is somewhat out of band and out of user traffic?

[the_rock · Accepted solution]

Im thinking 2nd option would be better, My reasoning would be isolation and access control.

[the_rock]

I asked one of my colleagues about this too and he agreed with me. Mind you, just to get an official answer, might be worth TAC case.

[JaySon_2021]

Thanks Andy. Appreciate the feedback.

[the_rock]

Of course, no worries.