January 5, 2015 at 5:40 am
Hi,
Is it possible for a clustered instance of SQL2012 to have 2 network names ?
Reason: I need to segregate admin access to a clustered instance so that the admins and SSMS connect via a different IP address than the application. I know I can block SSMS access via application-level firewalls, but ideally the application would connect to CLUSTER1\INSTANCE01 on , say, 10.192.5.5, and the admins would connect to CLUSTER1ADMIN\INSTANCE01 on 172.168.2.2, and they'd be the same instance, just using different names and IPs
There is a wish NOT to use a jump-station for this.
Any pointers greatly appreciated 🙂 Apols if I'm being thick.
[font="Courier New"]sqlmunkee[/font]
[font="Courier New"]Bringing joy and happiness via SQL Server since 1998[/font]
January 5, 2015 at 6:28 am
To my knowledge, no, you can't do this. The instance is exposed as a single IP, especially across the cluster. I've never seen anyone set up different IP addresses for admins. I have seen different AD groups set up and different AD logins created so that the standard login to the network where you get your email, etc., does not have access to the production machines. To get that access, you need to either log in under a different user or use Run As to get that other user.
"The credit belongs to the man who is actually in the arena, whose face is marred by dust and sweat and blood"
- Theodore Roosevelt
Author of:
SQL Server Execution Plans
SQL Server Query Performance Tuning
January 5, 2015 at 6:33 am
Thanks Grant 🙂
Been kicking this one around for a while. Might just chalk it up to 'Architect Fantasy'....;-)
[font="Courier New"]sqlmunkee[/font]
[font="Courier New"]Bringing joy and happiness via SQL Server since 1998[/font]
January 5, 2015 at 1:36 pm
multiple IP addresses on different subnets but not VNNs
-----------------------------------------------------------------------------------------------------------
"Ya can't make an omelette without breaking just a few eggs" 😉
Viewing 4 posts - 1 through 3 (of 3 total)
You must be logged in to reply to this topic. Login to reply