Trying to protect IPMI

Hi Folks,

I am about to deploy a new server in a new datacenter. This all happened very quickly after the one that I was using before went out of business. I purchased a new SuperMicro server and it has two ethernet ports. One is a standard port, the other is a bridged port that also includes IPMI. I don’t want to leave the IPMI interface exposed to the public internet, so I purchased a RB2011UiAS. Unfortunately, with such a short lead time, I think that I am over my head and hope that some kind soul will give me some help before I roll out to the data center tomorrow night…

My plan is to take the single uplink that I get and feed it into the RB2011UiAS. I get five IP addresses, so one would go to the router. Ideally, I would be able to access the remaining IPs, with no filtering, directly from the public internet. For the management port, I was thinking that I would be able to run OpenVPN, and connect to the other port which would be assigned a private address.

I am a Linux guy, not really a networking guy. Any help that I can get would be hugely appreciated. I have been messing with this thing for hours now on my home LAN. I can access the web interface and mess around with the settings, but nothing that I have been able to cook up in my head has worked. If I can’t get this working the way it needs to by tomorrow afternoon, I guess that I am going to have to scrap IPMI…

Thanks for reading, in any case.