Tru64 V5.0a PK3 and TruC 5.1
We operate a number of clusters for DB access.
The users attach via telnet sessions from remote networks.
Each server has a "real" IP address provided by NetRAIN (ee0 and ee1 as nr0)
There is of course a default cluster alias.
The databases are single instance applications running under CAA control.
Each cluster has two additional alias addresses weighted with selp to ensure
that
if the preferred node is up, connections are made to that server.
I would like to prevent users from attaching to the "real" IP addresses and
force them
to use the appropriate alias. I am aware if ifaccess.conf but presume that
if I block
network access to a device, it will effect all offered IP addresses, which
is not the idea.
This is more to do with user convenience that security. I want to be able to
provide users with
a valid application IP address which will work irrespective of which server
provides the service,
while preventing access to the real address because of the requirement for
users to be aware
of multiple addresses in the event of a node failover.
Ideas?
Kind regards
Lawrie Smith
Capita Technical Services
West Malling
email: lawrie.smith_at_capita.co.uk
Tel: 01732 877266
**********************************************************************
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.
This footnote also confirms that this email message has been swept by
MIMEsweeper for the presence of computer viruses.
www.mimesweeper.com
**********************************************************************
Received on Mon Jan 21 2002 - 15:23:08 NZDT