1 Reply Latest reply: May 24, 2013 9:22 AM by wehrli RSS

cDOT - VSC vs. System Manager

Currently Being Moderated

Hi volks,


I am here at a customer to implement the VSC with a cDOT System bellow. The customer has here two different department.

One for the whole vSphere environment and one for the storage environment. Of course both department knows the vsc-user

and the password to access the storage system. 


After reading a lot of documentation it is not a good idea to give the vsc-user only access to the vserver management IP address

due to a lot of restrictions in the VSC like 


• NFS path checking 

• Reports on space that is shared by volumes using data deduplication 

• EMS logging 

• Storage-side log collections for the nSANity Diagnostic and Configuration Data Collector program 


Unfortunately the vsc-user must have access to the cluster management IP. 


AND here begins the problem.


If the vsc-user has access to the cluster management IP, even it is read only, all the vSphere guys can install the System Manager

(ok - if they have the .exe) , can login into the cluster, can read and watch all the stuff and can ask tons of stupid questions !


Everyone have experience with this problem, or have a solution, even it is only a workaround ?




  • Re: cDOT - VSC vs. System Manager
    Currently Being Moderated

    have the same issue..


    there is the possibility to restrict the ip-access list with -firewall policy- on the cluster, but then system manager can be installed on allowed IP and it works again. so maybe there is no way to allow ontapi for the vsc-user using vsc-plugin, but not for the system-manager (application / user blocking).




More Like This

  • Retrieving data ...