SBC Management Interface

[perki31]

Can someone explain why the SBCs Management interface is required to be on a separate subnet from the SBC and the rest of the CM equipment??

[mlombardi1]

The deployment guide states separate subnets are required to prevent routing conflicts. I've installed several of these boxes and definitely agree with Avaya on this one.

[zakabog]

Generally you want a separate network for management for all of your devices (switches, firewalls, routers, etc), it'll keep intruders from having easy access to try and exploit any security flaws. If someone can get into the SBC they can do a LOT of monetary damage from fraudulent calls, Avaya kind of forces your hand here since there's no technical reason you can't have one of your LAN ports also act as the management interface. Although, if you really want to do it, and you know enough about the way Linux works, you can easily break it so it allows you to get onto the management page from the other interface ports (it just voids your warranty and I would highly not suggest doing this.)