Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

iSCSI - Best practices....

routable or non-routable iSCSI VLAN??

1 ACCEPTED SOLUTION

Accepted Solutions
New Member

Re: iSCSI - Best practices....

We route our iSCSI for two reasons:

1. SAN-SAN replication to remote site

2. Management - no dedicated management interface in our arrays without sacrificing one of the iSCSI data transfer port

We do put an ACL on the iSCSI VLAN to restrict traffic to just the needed management ports, and the iSCSI port between the local & remote arrays. That also prevents initiators in servers or wherever from accidentally making a connection over a routed path vs. a dedicated NIC directly on the iSCSI VLAN.

I'd say if you have no replication need, and if your system has dedicated management interfaces, then don't route iSCSI.

4 REPLIES
Cisco Employee

Re: iSCSI - Best practices....

An isolated VLAN for iSCSI is not a bad idea, but not a requirement. If the situation permits it, I would use an isolated VLAN for the iSCSI hosts and if needed a separate one for the iSCSI targets. The iSCSI traffic is 100% routable. Best practice would be also to use jumbo frames if the network devices support it.

Hope this helps,

Mike

New Member

Re: iSCSI - Best practices....

we do have jumbo frames enabled.

We are just trying to figure out the advantages and disadvantages of routing iscsi. Any security concerns?

New Member

Re: iSCSI - Best practices....

We route our iSCSI for two reasons:

1. SAN-SAN replication to remote site

2. Management - no dedicated management interface in our arrays without sacrificing one of the iSCSI data transfer port

We do put an ACL on the iSCSI VLAN to restrict traffic to just the needed management ports, and the iSCSI port between the local & remote arrays. That also prevents initiators in servers or wherever from accidentally making a connection over a routed path vs. a dedicated NIC directly on the iSCSI VLAN.

I'd say if you have no replication need, and if your system has dedicated management interfaces, then don't route iSCSI.

New Member

Re: iSCSI - Best practices....

just what I was looking for... Thanks!

4449
Views
4
Helpful
4
Replies
CreatePlease to create content