Novell ZENWORKS LINUX MANAGEMENT 7.2 IR2 - ADMINISTRATION GUIDE 09-25-2008 Administration Manual page 363

Configuring a WAN/VLAN With Preboot Services and DHCP Running on Separate Servers
You can install ZENworks Linux Management (which includes Preboot Services) on a separate
server than where DHCP is installed and running. However, you must configure the network
equipment so that it correctly forwards Preboot Services network traffic.
IMPORTANT: If the switch is acting as a firewall and limiting the type of traffic on the network,
understand that the novell-tftp and novell-zmgprebootpolicy daemons are not firewall or network
filter friendly. You should not attempt to run these daemons through a firewall. If users need to pass
preboot work through a firewall, then all Preboot Services work needs to be on the outside and
merely reference a Web service inside the firewall.
An example deployment is given below of a WAN/VLAN environment with Preboot Services and
DHCP running on the same server. The following sections provide the specific steps required to
configure network equipment so that it correctly forwards Preboot Services network traffic.
Example Deployment
In this example, three VLANs are configured on a Bay Networks Accel 1200 switch running
firmware version 2.0.1. One VLAN hosts the Proxy DHCP server, the second VLAN hosts the
DHCP server, and the third VLAN hosts the PXE device. The PXE device's DHCP broadcast is
forwarded by the switch to both the Proxy DHCP server and the DHCP server. The response from
both servers is then routed correctly back to the PXE device, and the PXE device starts the Preboot
Services session correctly.
The three VLANs are all 24-bit networks; their subnet mask is 255.255.255.0.
The first VLAN gateway is 10.0.0.1. This VLAN hosts the PXE device that is allocated an IP in the
range of 10.0.0.2 to 10.0.0.128. This VLAN is named VLAN1.
The second VLAN gateway is 10.1.1.1. This VLAN hosts the DHCP server with IP 10.1.1.2. This
VLAN is named VLAN2.
The third VLAN gateway is 196.10.229.1. This VLAN hosts the server running novell-proxydhcp
and novell-zmgprebootpolicy. The server's IP is 196.10.229.2. This VLAN is named VLAN3.
Routing is enabled between all VLANs. Each VLAN must be in its own spanning tree group.
Configuring Cisco Equipment
1 Go to the Global configuration mode.
2 Type ip forward-protocol udp 67, then press Enter.
3 Type ip forward-protocol udp 68, then press Enter.
4 Go to the LAN interface that serves the PXE device.
5 Type ip helper-address 10.1.1.2, then press Enter.
6 Type ip helper-address 196.10.229.2, then press Enter.
7 Save the configuration.
Configuring Nortel Network Equipment
1 Connect to the router with Site Manager.
Setting Up Preboot Services 363