Chase Research IOLAN+Rack Dokumentacja Strona 1

©2002, David K. Z. Harris1Pg. 1© 2002 David K. Z. HarrisAdv. Console Access (T12)Advanced Remote Console Accessversion 1.6David K. Z. Harriszonker@big

©2002, David K. Z. Harris10Pg. 10© 2002 David K. Z. HarrisTerminal Servers help reachØ One terminal server can support many devices in one area.Ø Conn

©2002, David K. Z. Harris11Pg. 11© 2002 David K. Z. HarrisBasic Serial HookupsØ Console Server connected to the same LAN with the hostsØ Serial connec

©2002, David K. Z. Harris12Pg. 12© 2002 David K. Z. HarrisTerminal Server MagicØ Reverse TCP (Reverse Telnet)² Basic functionality these daysØ Worksta

©2002, David K. Z. Harris13Pg. 13© 2002 David K. Z. HarrisTerminal & Console ServersØ Terminal Servers were designed to allow ‘dumb terminals’ to

©2002, David K. Z. Harris14Pg. 14© 2002 David K. Z. HarrisAn Important DistinctionØ Console Server Application² A host running software for controllin

©2002, David K. Z. Harris15Pg. 15© 2002 David K. Z. HarrisTerminal server advantagesØ Admin can operate many consoles at onceØ One serial port per soc

©2002, David K. Z. Harris16Pg. 16© 2002 David K. Z. HarrisTerminal Server DisadvantagesØ It’s not cheap to deploy.Ø Only one person can connect to a g

©2002, David K. Z. Harris17Pg. 17© 2002 David K. Z. HarrisThink About SecurityØ Do you have a security policy?Ø Does it consider remote access to seri

©2002, David K. Z. Harris18Pg. 18© 2002 David K. Z. HarrisTerminal Servers and SecurityØ Some vendors are adding SSH to their devices² How will you ma

©2002, David K. Z. Harris19Pg. 19© 2002 David K. Z. HarrisWho are the vendors?Ø Many players are still in the game² Cisco, Cyclades, Digi, LantronixØ

©2002, David K. Z. Harris2Pg. 2© 2002 David K. Z. HarrisAbout BigBand NetworksØ BigBand Networks makes Digital Video grooming hardware for Cable and S

©2002, David K. Z. Harris20Pg. 20© 2002 David K. Z. HarrisVendor LinksØ Cisco Systems² The 2600 and 3600 series.• 3660 line numbers are 33-224!• IOS 1

©2002, David K. Z. Harris21Pg. 21© 2002 David K. Z. HarrisVendor Links, cont’d.Ø Cyclades² Built-in Linux core² TS2000 is a great device!² PC multi-po

©2002, David K. Z. Harris22Pg. 22© 2002 David K. Z. HarrisVendor Links, cont’d.Ø Perle (Perle Systems Ltd.)² CS9000 is Sun-safe² Cables, status LEDs o

©2002, David K. Z. Harris23Pg. 23© 2002 David K. Z. HarrisNew or old? New or used?Ø Do you need support?Ø Do you need software?Ø Are you trying to exp

©2002, David K. Z. Harris24Pg. 24© 2002 David K. Z. HarrisSecurity Concerns and CostsØ Which network will you connect your devices to?Ø In compliance

©2002, David K. Z. Harris25Pg. 25© 2002 David K. Z. HarrisChoosing your hardwareØ Port densities needed?Ø Number of devices needed?Ø Cable lengths an

©2002, David K. Z. Harris26Pg. 26© 2002 David K. Z. HarrisSupplemental CostsØ High Availability costs more² Service Contract?² On-site Spare Equipment

©2002, David K. Z. Harris27Pg. 27© 2002 David K. Z. HarrisEvaluating the HardwareØ Cost per port is just one metricØ Security features may be needed²

©2002, David K. Z. Harris28Pg. 28© 2002 David K. Z. HarrisIs Serial BREAK a problem?Ø The answer varies, site to siteØ The answer today may change in

©2002, David K. Z. Harris29Pg. 29© 2002 David K. Z. HarrisTerminal Servers and SecurityØ Some vendors have added SSL and SSH to their devices² How wil

©2002, David K. Z. Harris3Pg. 3© 2002 David K. Z. HarrisPertinent Job History Ø Network Equipment Technologies ² (Comdesign, Bridge Communications)Ø T

©2002, David K. Z. Harris30Pg. 30© 2002 David K. Z. HarrisBasic Architectures (#1)Ø Adding Terminal Servers Ø Everything on the same network (the ‘no

©2002, David K. Z. Harris31Pg. 31© 2002 David K. Z. HarrisBasic Architectures (#2)Ø Adding a logging serverØ Similar to Terminal Server Deployment ² C

©2002, David K. Z. Harris32Pg. 32© 2002 David K. Z. HarrisAdding a Console Server AppØ Combination Server (CS/TS)² Logging server equipped with multi-

©2002, David K. Z. Harris33Pg. 33© 2002 David K. Z. HarrisBasic Architectures (#3) Ø Combining a Console Server App with Terminal Servers² You can add

©2002, David K. Z. Harris34Pg. 34© 2002 David K. Z. HarrisBasic Architectures (#4)Ø Client can access from anywhere on your network² Terminal Server i

©2002, David K. Z. Harris35Pg. 35© 2002 David K. Z. HarrisAdvanced Architectures (#5)Ø Addressing Security Concerns² Add a management Network² Put Net

©2002, David K. Z. Harris36Pg. 36© 2002 David K. Z. HarrisSecurity IssuesØ It’s easier to maintain secure communication to a Console Server Host, than

©2002, David K. Z. Harris37Pg. 37© 2002 David K. Z. HarrisAdvanced Architectures (#6)Ø Security for large networks² Physically extend Management Net²

©2002, David K. Z. Harris38Pg. 38© 2002 David K. Z. HarrisAdvanced Architectures (#7)Ø Security for large networks² Distributed Terminal Servers² Use

©2002, David K. Z. Harris39Pg. 39© 2002 David K. Z. HarrisFree software adds valueØ LoggingØ Forensics dataØ MentoringØ Data for other Apps ² Netcool²

©2002, David K. Z. Harris4Pg. 4© 2002 David K. Z. HarrisUseful URL’s for after classØ Conserver Software² www.conserver.com/Ø Console Connection Guide

©2002, David K. Z. Harris40Pg. 40© 2002 David K. Z. HarrisConsole Server App. CostsØ Software can be free² Commercial solutions ARE availableØ Can be

©2002, David K. Z. Harris41Pg. 41© 2002 David K. Z. HarrisAdding a logging serverØ Captures forensics information² Why did it crash? ² Who made change

©2002, David K. Z. Harris42Pg. 42© 2002 David K. Z. HarrisAdvanced Architectures (#8)Ø Distributed Console Servers² One master configuration file² Cli

©2002, David K. Z. Harris43Pg. 43© 2002 David K. Z. HarrisAdvanced Architectures (#9)Ø Distributed CS and Security² Distributed Console Server App and

©2002, David K. Z. Harris44Pg. 44© 2002 David K. Z. HarrisSynopsysØ Multiple distributed data centersØ 35+ field officesØ Field sites host a Conserver

©2002, David K. Z. Harris45Pg. 45© 2002 David K. Z. HarrisSynopsys Basic Field OfficeØ WAN for main trafficØ PSTN (ISDN) for field dialup² (Public Swi

©2002, David K. Z. Harris46Pg. 46© 2002 David K. Z. HarrisAdvanced Architectures (#10) Ø One server for controlØ Secondary logging server² Dedicated m

©2002, David K. Z. Harris47Pg. 47© 2002 David K. Z. HarrisInstalling Terminal ServersØ What networks will host them?² DNS addresses and names² Do you

©2002, David K. Z. Harris48Pg. 48© 2002 David K. Z. HarrisModular Adapters Will Help!Ø Pre-wired + labeled = trusted² Troubleshooting is faster² Easy

©2002, David K. Z. Harris49Pg. 49© 2002 David K. Z. HarrisSignal Tracer DemoØ Passive signal tracers don’t need batteries.Ø No Break-Out boxes.The ima

©2002, David K. Z. Harris5Pg. 5© 2002 David K. Z. HarrisWhy we’re here todayØ I’m here to inform you…² So, I need to keep you awake!Ø I’ve looked at a

©2002, David K. Z. Harris50Pg. 50© 2002 David K. Z. HarrisAdding Consoles to PCsØ Normally, this wouldn’t work…Ø Some vendors add BIOS support ² Compa

©2002, David K. Z. Harris51Pg. 51© 2002 David K. Z. HarrisPC BIOS limited accessØ Usually limited to ² P.O.S.T. output until GUI starts² A few BOIS se

©2002, David K. Z. Harris52Pg. 52© 2002 David K. Z. HarrisCompaq Serial ConsoleØ Integrated Remote Console (IRC)² Must be built into the server hardwa

©2002, David K. Z. Harris53Pg. 53© 2002 David K. Z. HarrisNetwork EnginesØ BIOS redirection in ROM > v.96² Can be installed from Mgmt System² Can b

©2002, David K. Z. Harris54Pg. 54© 2002 David K. Z. HarrisHP Admin ConsoleØ HP Remote Assistant² Specific to HP Hardware² Doesn’t catch ‘Smart NICs’Ø

©2002, David K. Z. Harris55Pg. 55© 2002 David K. Z. HarrisPC Weasel PointersØ PC Weasel² http://www.realweasel.com/Ø Detail demo ability via Internet.

©2002, David K. Z. Harris56Pg. 56© 2002 David K. Z. HarrisRackable SystemsØ Their 1000 Series servers² 2-rack units tall² Front-mounted connections² F

©2002, David K. Z. Harris57Pg. 57© 2002 David K. Z. HarrisRemote Power ControlØ Some vendors allow full network access, besides serial access.² Telnet

©2002, David K. Z. Harris58Pg. 58© 2002 David K. Z. HarrisWrap-upØ Did we cover everything?² Console Server features, sources² Evaluation criteria, BR

©2002, David K. Z. Harris59Pg. 59© 2002 David K. Z. HarrisSuggested ReadingØ Aurora Technologies² http://www.auroratech.com/² /free guide.html² A good

©2002, David K. Z. Harris6Pg. 6© 2002 David K. Z. HarrisWhat We’ll CoverØ Why console ports are good.Ø Console Server hardware optionsØ Why worry abou

©2002, David K. Z. Harris60Pg. 60© 2002 David K. Z. HarrisWeb LinksØ Stokely Consulting² http://www.stokely.com/² Good sysadmin and netadmin info² Use

©2002, David K. Z. Harris61Pg. 61© 2002 David K. Z. HarrisVendor LinksØ Cisco Systems² The 2600 and 3600 series.• 3660 line numbers are 33-224!• IOS 1

©2002, David K. Z. Harris62Pg. 62© 2002 David K. Z. HarrisVendor Links, cont’d.Ø Cyclades² Built-in Linux core² TS2000 is a great device!² PC multi-po

©2002, David K. Z. Harris63Pg. 63© 2002 David K. Z. HarrisVendor Links, cont’d.Ø Perle (Perle Systems Ltd.)² CS9000 is Sun-safe² Cables, status LEDs o

©2002, David K. Z. Harris64Pg. 64© 2002 David K. Z. HarrisAccessory Vendor InfoØ Nu-Data non-BREAK adaptersØ PC Weasel in-server cardsØ ASP Technology

©2002, David K. Z. Harris65Pg. 65© 2002 David K. Z. HarrisAccessory Vendor InfoØ Weeder Technologies² Serial interfaces for process control² Counters,

©2002, David K. Z. Harris66Pg. 66© 2002 David K. Z. HarrisRemote Power ControlØ American Power Conversion² MasterSwitch lineØ BayTech² RPC product lin

©2002, David K. Z. Harris67Pg. 67© 2002 David K. Z. HarrisAmericableØ Custom cables and adapters² Serial adapter kits for consoles• Annex/Bay/Nortel•

©2002, David K. Z. Harris7Pg. 7© 2002 David K. Z. HarrisHow do you work today?Ø How many of you, in class today, are still on-call?Ø How many of you a

©2002, David K. Z. Harris8Pg. 8© 2002 David K. Z. HarrisWhy Console Ports are GoodØ Sometime debug (trace, etc.) is best used on a console port.Ø Som

©2002, David K. Z. Harris9Pg. 9© 2002 David K. Z. HarrisWhat might you connect to?Ø Hosts ² workstations, servers, NMS hostsØ RAID arrays, Network App