Balabit - Network sheet L1-L3 (site 2)

category: solutionz · date: 2018-12-31 · updated: 2026-10-03 · author: LALA

Balabit SCB Solution · Config document · referenced from Hardware, cabling and networks

noteThe L3 sheet of site 2 is a copy of the site 1 sheet with new addresses and names, and the copy shows: the Location column still says DC1-A and DC1-B, and the second host name of the production address is scb.example.net, the same name as in site 1. The cluster as exported has no CL2 interface (10.12.18.209/.210) at all, see the networking element of the site 2 config.xml.

The network spreadsheet of the site 2 cluster as I exported its sheets to text: the port layout of the SCB T-10, the cabling of both appliances to the site 2 switches, and the logical interfaces with VLANs, addresses and host names. Site 2 has no design document; this sheet, the connection summary, the user access guide and the support bundle are what the material holds about it.

Item	Value
Source	The L1-L3 spreadsheet of site 2
Cluster	`dc2-s-xblb001`, one appliance in datacenter A and one in datacenter B of site 2
Sheets	`Balabit SCB - LAN L1` (legend), `DC2-A - Balabit SCB - LAN L1`, `DC2-B - Balabit SCB - LAN L1`, `DC2 - Balabit SCB - LAN L3`
Left out	The last sheet, `Balabit - SuperMicro`, the same two vendor links as in site 1
Differences from site 1	`10.12.x` addresses with the same last octets, prefixes written into the address cells (`/ 24`, `/ 29`, `/28`, `/64`), `dc2-` names, the IPv6 production address `2001:db8:a2:c0e::f:1`, no DNS cheat sheet

The listing

output 70 lines

### sheet Balabit SCB - LAN L1
 | Balabit SCB T10 |  |  |  |  |  |  |  |  | 
 |  |  |  |  |  |  |  |  | eth2 | eth3
 |  | IPMI |  |  |  |  |  |  | 3.0 | 4.0
 |  |  |  |  |  |  |  |  | INT | HA
 |  | USB 1 |  |  |  |  | eth0 | eth1 | eth4 | eth5
 |  | USB 2 | SERIAL | VGA |  |  | 1.0 | 2.0 | 5.0 | 6.0
 |  |  |  |  |  |  | EXT | MGMT | A | B
 | OOB MGMT | 100 Mb Ethernet (IPMI/HW management) |  |  |  |  |  |  | XXX | Cable plugged
 | ETH-1Gb | 1 Gb Ethernet |  |  |  |  |  |  | XXX | Cable unplugged
 | ETH-10Gb | 10 Gb Ethernet SFP+ |  |  |  |  |  |  |  | 
 | USB | USB port |  |  |  |  |  |  |  | 
 | SERIAL | Serial port |  |  |  |  |  |  |  | 
 | VGA | VGA port |  |  |  |  |  |  |  | 
### sheet DC2-A - Balabit SCB - LAN L1
 | Balabit SCB T10 |  |  |  |  |  |  |  |  | 
 |  |  |  |  |  |  |  |  | eth2 | eth3
 |  | DC2-A-SOOB003-Gi1/0/16 |  |  |  |  |  |  | DC2-A-SPRO001-Eth1/21 | DC2-A-SPRO002-Eth1/21
 |  | IPMI |  |  |  |  |  |  | 3/INT | 4/HA
 |  | USB 1 |  |  |  |  | eth0 | eth1 | eth4 | eth5
 |  | USB 2 | DC2-A-ROOB002-port19 | VGA |  |  | DC2-A-SPRO001-Eth1/5 | DC2-A-SPRO002-Eth1/5 | 5.0 | 6.0
 |  |  |  |  |  |  | 1/EXT | 2/MGMT | A | B
 | OOB MGMT | 100 Mb Ethernet (IPMI/HW management) |  |  |  |  |  |  |  | 
 | ETH-1Gb | 1 Gb Ethernet |  |  |  |  |  |  |  | 
 | ETH-10Gb | 10 Gb Ethernet SFP+ |  |  |  |  |  |  |  | 
 | USB | USB port |  |  |  |  |  |  |  | 
 | SERIAL | Serial port |  |  |  |  |  |  |  | 
 | VGA | VGA port |  |  |  |  |  |  |  | 
 | XXX | Cable plugged |  |  |  |  |  |  |  | 
 | XXX | Cable unplugged |  |  |  |  |  |  |  | 
### sheet DC2-B - Balabit SCB - LAN L1
 | Balabit SCB T10 |  |  |  |  |  |  |  |  | 
 |  |  |  |  |  |  |  |  | eth2 | eth3
 |  | DC2-B-SOOB003-Gi1/0/16 |  |  |  |  |  |  | DC2-B-SPRO001-Eth1/21 | DC2-B-SPRO002-Eth1/21
 |  | IPMI |  |  |  |  |  |  | 3/INT | 4/HA
 |  | USB 1 |  |  |  |  | eth0 | eth1 | eth4 | eth5
 |  | USB 2 | DC2-B-ROOB002-port19 | VGA |  |  | DC2-B-SPRO001-Eth1/5 | DC2-B-SPRO002-Eth1/5 | 5.0 | 6.0
 |  |  |  |  |  |  | 1/EXT | 2/MGMT | A | B
 | OOB MGMT | 100 Mb Ethernet (IPMI/HW management) |  |  |  |  |  |  |  | 
 | ETH-1Gb | 1 Gb Ethernet |  |  |  |  |  |  |  | 
 | ETH-10Gb | 10 Gb Ethernet SFP+ |  |  |  |  |  |  |  | 
 | USB | USB port |  |  |  |  |  |  |  | 
 | SERIAL | Serial port |  |  |  |  |  |  |  | 
 | VGA | VGA port |  |  |  |  |  |  |  | 
 | XXX | Cable plugged |  |  |  |  |  |  |  | 
 | XXX | Cable unplugged |  |  |  |  |  |  |  | 
### sheet DC2 - Balabit SCB - LAN L3
ID | Location | Physical IF | Logical IF | OS Name | VLAN | OOB MGMT (IPMI) | IBM (OS MGMT) | PRO (Operation ACCESS) | CL2 (HA - Redundant) | BCK (Backup - Archive) | CL1 (HA - Primary)
1.0 | DC1-A | IPMI | - | - | 12.0 | 10.12.15.29 / 24 | - | - | - | - | -
 | DC1-A | 1.0 | 1.0 | eth0.1010 | 1010.0 | - | 10.12.16.81 (VIP) / 29 | - | - | - | -
 | DC1-A | 2.0 | 1.0 | eth1.1009 | 1009.0 | - | - | 10.12.16.65 (VIP) / 29 | - | - | -
 |  |  |  |  |  | - | - | 2001:db8:a2:c0e::f:1 (VIP) /64 | - | - | -
 | DC1-A | 3.0 | 1.0 | eth2.1018 | 1018.0 | - | - | - | 10.12.18.209 / 28 | - | -
 | DC1-A | 3.0 | 2.0 | eth2.1020 | 1020.0 | - | - | - | - | 10.12.18.225 (VIP) /28 | -
 | DC1-A | 4.0 | 1.0 | eth3 | 1016.0 | - | - | - | - | - | 1.2.4.1
 | Hostname |  |  |  |  | dc2-a-ablb001m.mgmt.example.net | dc2-s-xblb001.adm.example.net | dc2-s-xblb001pro.adm.example.net | dc2-a-ablb001cl02.adm.example.net | dc2-s-xblb001bck.adm.example.net | dc2-a-ablb001cl01.adm.example.net
 | Hostname 2 |  |  |  |  | - | - | scb.example.net | - | - | -
ID | Location | Physical IF | Logical IF | OS Name | VLAN | OOB MGMT (IPMI) | IBM (OS MGMT) | PRO (Operation ACCESS) | CL2 (HA - Redundant) | BCK (Backup - Archive) | CL1 (HA - Primary)
2.0 | DC1-B | IPMI | - | - | 12.0 | 10.12.23.29 / 24 | - | - | - | - | -
 | DC1-B | 1.0 | 1.0 | eth0.1010 | 1010.0 | - | 10.12.16.81 (VIP) / 29 | - | - | - | -
 | DC1-A | 2.0 | 1.0 | eth1.1009 | 1009.0 | - | - | 10.12.16.65 (VIP) / 29 | - | - | -
 |  |  |  |  |  | - | - | 2001:db8:a2:c0e::f:1 (VIP) /64 | - | - | -
 | DC1-B | 3.0 | 1.0 | eth2.1018 | 1018.0 | - | - | - | 10.12.18.210 / 28 | - | -
 | DC1-B | 3.0 | 2.0 | eth2.1020 | 1020.0 | - | - | - | - | 10.12.18.225 (VIP) /28 | -
 | DC1-B | 4.0 | 1.0 | eth3 | 1016.0 | - | - | - | - | - | 1.2.4.2
 | Hostname |  |  |  |  | dc2-b-ablb001m.mgmt.example.net | dc2-s-xblb001.adm.example.net | dc2-s-xblb001pro.adm.example.net | dc2-b-ablb001cl02.adm.example.net | dc2-s-xblb001bck.adm.example.net | dc2-b-ablb001cl01.adm.example.net
 | Hostname2 |  |  |  |  | - | - | scb.example.net | - | - | -
 |  |  |  |  |  | DNS record not in the INFOBLOX |  |  |  |  | 
 |  |  |  |  |  | DNS record in the INFOBLOX |  |  |  |  | 
 |  |  |  |  |  |  |  | ` |  |  |

The columns and the legend rows are read as in the site 1 sheet. The cabling is the same port for port: IPMI to Gi1/0/16 of the out-of-band switch DC2-x-SOOB003, serial to port 19 of DC2-x-ROOB002, ports 1 and 3 to Eth1/5 and Eth1/21 of DC2-x-SPRO001, ports 2 and 4 to Eth1/5 and Eth1/21 of DC2-x-SPRO002. The VLAN numbers are the same as in site 1; no switch port configuration of site 2 is in the material.

Row	Remark
IPMI `10.12.15.29 / 24` and `10.12.23.29 / 24`	The out-of-band addresses of the two modules; the material holds no IPMI configuration of site 2
CL2 `10.12.18.209 / 28`, `10.12.18.210 / 28`	Planned, not configured on the cluster
CL1 `1.2.4.1`, `1.2.4.2`	The same fixed HA addresses of the cluster link as in site 1 (marked `(FIX)` on the site 1 HA page), presumably on a separate network; the material has no site 2 switch configuration
`dc2-a-ablb001cl02`, `dc2-b-ablb001cl02`	Spelt consistently here, unlike site 1

Checked against One Identity Safeguard for Privileged Sessions 9.0

As built	Today
Two SCB T-10 appliances (2018)	T-Series End of Support 2024-07-31; SPS 8.0 is not supported on T-Series. An HA pair in 9.0 cannot be built from different types of hardware, so both nodes are replaced together
CL2 network planned for the redundant heartbeat	The redundant heartbeat interface still exists in SPS 9.0