> Jared, > Are you suggesting separate physical subnet, or simply a logical subnet > on the same physical network (using netmask)?
Mine's physically separate. I think it's what is required (google UNIX STIG; see section 12.6), and it simplifies configuration and usage (this network does this thing; the other doesn't). Also once kickstarting is over, I'm going to trust the new host and allow it access to a bunch of things, calm in knowing that I caused every formative change to its configuration. I don't want to be wrong about that. And there's no effort wasted on this in our office: the IT team receives all the new systems, and we have to configure the BIOS anyway before letting one out on the floor, so just drop it in the inner sanctum for an hour or two to kickstart. -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-users@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.