Implement IP Filter on VIO server

[khuul]

If I implement IP filtering on the VIO servers allowing access only from certain IPs to connect to VIO (i.e, ssh), will it impact all the mapping for the LPARs to the VIO servers?

 

[p5wizard]

Whatever you do on the IP stack of the VIOS is for the VIOS IP stack alone. It won't have any impact on virtual ethernet (Shared EthernetAdapter operates on lower level, even SEA failover might rely on ICMP, but ipfilter doesn't bother that I should think). And it certainly won't have any impact on any virtual SCSI definitions.

If you want to be sure to be sure, and you have dual VIOSs with correctly implemented failover for both SEA and VSCSI, do your stuff on one VIOS and see what happens (or really: what doesn't happen).

HTH,

p5wizard