Separating Session Manager management and Security Module traffic

Last Updated : Jan 18, 2013 |
Prolog information
Metadata
Keywords:
As a best practice, Session Manager management and Security Module related traffic should be separate. There are many ways in which to separate Session Manager including VLANs, VMware port groups, and VMware virtual switches connected to different physical network interface cards.
Using a VLAN to separate management and Security Module related traffic must be done from a customer’s switch, as VLAN configuration cannot be accomplished from a virtual machine or Hypervisor level. The result is a Session Manager virtual machine with all of its NICs connected to the same vSwitch.
If the defaults are selected during deployment, management and Security Module traffic are placed on the same vSwitch. As a best practice, separate Session Manager management and Security Module traffic using the following procedure.
  1. Create a vSwitch for dedicated Session Manager Security Module traffic.
  2. From the vSphere client inventory view, right-click the Session Manager virtual machine and select Edit Settings.
  3. The Hardware tab is selected by default. Select the proper Network adapter from the hardware list on the left-side.
  4. On the right side, under the Network label list, select a separate vSwitch for this NIC.
  5. Click OK to complete configuration.