&quot;things like IPMI interfaces or SCADA devices the alternatives approache zero&quot;<p>My strategy with IPMI has been to assign IPMI non-routable, private IP addresses, then block that address space at the interior of the network (which is sort of redundant) and then require folks to SSH onto an interior host and connect to IPMI that way.<p>I would be very interested in, and receptive to, criticisms of this model ...