DCE Network over IPSec tunnels from mutiple sites

DCIM_Support · ‎2020-07-04

Hello All,

When DCE was initially setup for our Data Center, we did not have APC appliances at our site offices. Since then, we have added multiple UPS and PDU units which will need to communicate with DCE.

4 Site offices all connected through IPSec tunnels.

Question 1: will changing the IP address scope of Private Network LAN 1 require a reset of the APC devices currently connected to DCE?

Question 2: Is the routing from the Sites to DCE provided by simply setting DHCP relay for the VLAN to DCE with a Default gateway on the site firewall?

DCIM_Support · ‎2020-07-04

Hi Daniel

The DCE Private network is non routable so you can forget using it to connect to any other IP network. The Public NIC is routable and can be used simultaneously to discover and monitor devices just like the Private NIX EXCEPT there is no DHCP server (thankfully).

Does that clarify/help?

Cheers

Ed

DCIM_Support · ‎2020-07-04

not really sorry. i'm a little confused as the Private LAN 2 (network A) is providing DHCP in our environment and is being routed over P2P wireless links which we're trying to decommission at this time.

The Private subnet was set to 192.168.0.0 255.255.240.0 and i need to change it to something else completely. But wanted to know if anyone has done this and if the APC devices were rebooted in the process.

DCIM_Support · ‎2020-07-04

Hi Daniel.

What's the Priv NIC secondary config?

AFAIK a gateway IP address cannot be set on the DCE Private NIC. I understand the term 'routing' as being IP layer 3 comms (needs gateway IP), therefore not possible on DCE Private NIC. You can certainly use layer 2 (bridging) which sounds like your P2P wireless? If the devices you're monitoring on the DCE Private NIC have IPs outside 192.168.0.0 OR outside the secondary IP range, pls advise how you're doing this.

If it does turn out to be layer 2 over primary and secondary IPs on DCE Priv NIC, you must replace with another layer 2 setup - layer 3 IP routing without gateway address wont work. (unless SE has added this feature)?

Cheers

DCIM_Support · ‎2020-07-04

This question is closed for comments. You're welcome to start a new topic if you have further comments on this issue.