Admin,
We run a number of ES40 T64 V5.0a Clusters.
Each cluster node has a "real" IP Address,
The cluster has a default alias and then there is
an extra alias, one for each node in the cluster.
Each additional alias is weighted with selp so that
all connects are made to a specific node, if up, else to another.
I would like to prevent certain groups of users from connecting to
the "real" IP address, ensuring effective failover.
e.g.
Node1 Real 10.10.10.1
Node2 Real 10.10.10.2
Def Alias 10.10.10.3
Node1Alias 10.10.10.3
Node2Alias 10.10.10.4
Currently all remote users can access the servers from subnet 10.160.x.x via
any IP.
I would like to prevent them from accessing Node1Real and Node2Real.
I get the impression I can do this using the gated.control file but this
file does not
exist on these boxes and the man page is a bit dense for me. Would anyone
be able to offer some advice, examples?
If this is not the best way to achieve my aim, please let me know.
Perhaps this can be achieved based upon local user group?
Changing the "real" IP addresses may present some organisation difficulty
and is not a preferred option.
Kind regards
Lawrie Smith
Capita Technical Services
West Malling
email: lawrie.smith_at_capita.co.uk
Tel: 01732 877266
Received on Mon Jan 28 2002 - 17:00:12 NZDT