locked
ConfigMan 2012 R2 Number Of IP Addresses? RRS feed

  • Question

  • We are setting up CM 2012 R2 for a small environment of 500 users.  300 in office and 200 laptops that will be IBCM.

    We want to set this up with one single server with both SQL 2012 and all the CM roles needed for inventory, software and OS deployment and software/Windows updating for LAN and WAN clients.  We may also add lite mobile device management in the future.

    We plan to use reverse proxy for WAN clients to reach the internal server rather than installing a second server that would go in the DMZ.

    How man NICs and IP addresses will this server need?  Is one IP and one NIC enough?


    • Edited by MyGposts Monday, June 23, 2014 8:23 PM
    Monday, June 23, 2014 8:23 PM

Answers

  • I wouldn't add more than one if we're talking about VM, if this is a bare metal installation, I'd consider checking at least two NICs and configure them as a team.

    • Marked as answer by MyGposts Wednesday, June 25, 2014 2:16 AM
    Tuesday, June 24, 2014 3:38 AM
  • A single IP address is fine just like it is for other network applications.

    Internal and external clients is much bigger than just an IP address though because the supported scenarios generally have the Internet facing roles separated onto their own site system(s).


    Jason | http://blog.configmgrftw.com

    • Marked as answer by MyGposts Wednesday, June 25, 2014 2:15 AM
    Tuesday, June 24, 2014 3:21 PM
  • No, same answer: ConfigMgr doesn't care or know. As long as the network can deliver the traffic to ConfigMgr, ConfigMgr will happily do its "magic".

    Jason | http://blog.configmgrftw.com

    • Marked as answer by MyGposts Wednesday, June 25, 2014 2:16 AM
    Wednesday, June 25, 2014 2:07 AM

All replies

  • I wouldn't add more than one if we're talking about VM, if this is a bare metal installation, I'd consider checking at least two NICs and configure them as a team.

    • Marked as answer by MyGposts Wednesday, June 25, 2014 2:16 AM
    Tuesday, June 24, 2014 3:38 AM
  • Are you talking about the reverse proxy or the ConfigMgr site server?

    ConfigMgr itself, just like every other application, doesn't care about NICs or IP addresses at all. As long as the traffic makes it to the appropriate roles, then ConfigMgr is happy. It has no knowledge or control of anything at layers 1, 2, or 3.

    If you are talking about the reverse proxy, that question is best asked of the vendor for the reverse proxy.


    Jason | http://blog.configmgrftw.com

    Tuesday, June 24, 2014 4:28 AM
  • Are you talking about the reverse proxy or the ConfigMgr site server?

    ConfigMgr itself, just like every other application, doesn't care about NICs or IP addresses at all. As long as the traffic makes it to the appropriate roles, then ConfigMgr is happy. It has no knowledge or control of anything at layers 1, 2, or 3.

    If you are talking about the reverse proxy, that question is best asked of the vendor for the reverse proxy.


    Jason | http://blog.configmgrftw.com

    I'm talking about the server itself.

    We need to spec out the server and request IP addresses to assign it and I wanted to know if there is ever a need for the SCCM server to have more than one IP address for anything no matter how many roles it has and if it is accessed by both internal and external clients.

    Tuesday, June 24, 2014 4:31 AM
  • A single IP address is fine just like it is for other network applications.

    Internal and external clients is much bigger than just an IP address though because the supported scenarios generally have the Internet facing roles separated onto their own site system(s).


    Jason | http://blog.configmgrftw.com

    • Marked as answer by MyGposts Wednesday, June 25, 2014 2:15 AM
    Tuesday, June 24, 2014 3:21 PM
  • A single IP address is fine just like it is for other network applications.

    Internal and external clients is much bigger than just an IP address though because the supported scenarios generally have the Internet facing roles separated onto their own site system(s).


    Jason | http://blog.configmgrftw.com

    We do not plan to separate anything into separate servers.  The plan is to run everything from a single server that hosts all related roles.  We want Internet clients to use a reverse proxy to access the same physical server as the internal clients will use.

    Does using a reverse proxy require the SCCM server to have anything more than a single IP address it would have if it was only working with internal clients?




    • Edited by MyGposts Wednesday, June 25, 2014 1:47 AM
    Wednesday, June 25, 2014 1:45 AM
  • Why not do Direct Access?

    http://www.enhansoft.com/

    Wednesday, June 25, 2014 1:47 AM
  • Because we do not have Software Assurance.
    Wednesday, June 25, 2014 1:48 AM
  • No, same answer: ConfigMgr doesn't care or know. As long as the network can deliver the traffic to ConfigMgr, ConfigMgr will happily do its "magic".

    Jason | http://blog.configmgrftw.com

    • Marked as answer by MyGposts Wednesday, June 25, 2014 2:16 AM
    Wednesday, June 25, 2014 2:07 AM
  • Because we do not have Software Assurance.

    ok I will bit, what does SA have to do with DA?

    http://www.enhansoft.com/

    Wednesday, June 25, 2014 3:11 AM
  • The client operating systems that are compatible with DA (such as Windows 7/8 Enterprise) are only available for SA customers.

    It does no good to have DA if your workstations are using non-Enterprise versions of Windows such as Windows 7 Professional.

     
    Wednesday, June 25, 2014 3:15 AM
  • BTW, Windows 7 Ultimate will support DA.

    IMO You will get much more out of DA than IBCM. Plus it is about the same amount of work to setup.


    http://www.enhansoft.com/

    Wednesday, June 25, 2014 12:08 PM
  • I know, but upgrading all the laptops now will be both expensive and very disruptive and labor intensive and there is no Ultimate version of Windows 8 and probably the next version of Windows after it, so we would be painted into a corner at the next upgrade.

    Simply implementing reverse proxy for IBCM clients would be much less disruptive to users and much more economical.

    We have already standardized on Windows 7 Pro and invested a lot of time and money into VPN infrastructure and they are not interested in paying for SA on top of that and then requiring to reimage clients with a new OS.  Maybe if it was a new network and we were starting from scratch, then they would consider it.

    Wednesday, June 25, 2014 12:48 PM