I'm in the process of setting up a bunch of servers at the other end of the world (well, 8 hours travel time) in a co-location place.
The servers and firewall all have a remote management port (KVM, DRAC, you name it). I'm wondering what is the best practice how to access & secure that.
Obviously I could just put all those in a separate VLAN and put some filtering rules on the firewall (a Linux box). But then the accessibility of the firewall remote management depends on the firewall itself - I don't think this is a brilliant idea. One
ifdown and you're out.
I could also just put the servers management ports into a separate net, and leave the firewall management port open on the internet, but this doesn't seem to be very elegant.
I could also leave everything on public internet, of course.
What are your recommended best practices?