Using SDTConnector with IBM xseries/system x Servers

Transcription

1 APPLICATION NOTE Using SDTCnnectr with IBM xseries/system x Servers Rev: 1.0 May 25, Intrductin 2 2. Cnnecting t BMC services 3 Cnsle redirectin and serial ver LAN (SOL) 3 Cnfiguring BMC cnsle redirectin n the xseries/system x server 3 Installing the Systems Management Bridge n the PC running SDTCnnectr 4 Enable yur perating system's cnsle n the xseries/system x server 4 Cnfiguring the Opengear SSH gateway t permit SOL 5 Cnfiguring SDTCnnectr t cnnect the SOL sessin 6 Cnnecting the SOL sessin 6 Trubleshting/FAQ 7 3. Cnnect t RSA II services 8 Cnfiguring the RSA II 8 Cnfiguring the Opengear SSH gateway t permit access t the RSA II 8 Cnfiguring SDTCnnectr t access the RSA II 9 Cnnecting t the RSA II 9 4. Cnnecting t IBM Directr Server 9 Cnfiguring the Opengear SSH gateway t permit access t Directr 10 Cnfiguring SDTCnnectr t cnnect t Directr Cnnecting t Directr The IBM +Opengear slutin 10 Opengear Applicatin Nte: SDTCnnectr + IBM Page 1 f 12

2 1. Intrductin IBM's eserver, xseries and BladeCenter families include a range f system management hardware cmpnents and sftware supprt functins including IBM Directr sftware, IBM basebard management cntrllers (BMC) and Remte Supervisr Adapters (RSA, RSA II and RSA SlimLine). Opengear s IM4200 gateways are precnfigured with supprt fr these cmpnents and this Applicatin Nte explres hw Opengear s SDTCnnectr client enables yu t securely access and cntrl the IBM embedded service prcessrs and interface with the Directr and higher level management applicatins. IBM's server families all ffer management hardware fr arund-the-clck remte management. A BMC is a built-in system cmpnent in xseries and BladeCenter servers and it prvides basic mnitring and trubleshting facilities, such as sending alerts and remte pwer cntrl. Hwever it is IBM's Remte Supervisr Adapter (in particular the ppular RSA II) that represents the next generatin f cmprehensive server management. The IBM RSA II is a PCI card service prcessr and it is standard in sme servers and an ptin in thers. It manages the BMC lcated n the server mtherbard, and augments the BMC capability s yu can perfrm systems management functins whether yur server is peratinal r nt. The RSA II prvides an extensive range f remte server management features including Virtual KVM which prvides full graphic cnsle redirectin. S yu can use a lcal desktp t access and cntrl a remte server, run applicatins and receive system alerts in whatever frm yu chse (and n lnger is there a need fr any external KVMIP appliances at the remte site). Virtual KVM als maintains a lg f the last screen befre a system failure. The RSA has bth cmmand line and a Web interface and ther features include virtual media access; UDP/TCP Ethernet cnnectin; remte pwer cntrl; lcal lgs & alerts; and secure SSH, SSL & LDAP access. Anther RSA mdel is the SlimLine which is an internal card that includes the BMC and uses a dedicated Ethernet cnnectr n the server fr cmmunicatin. The BladeCenter s management mdule als uses a mdified versin f the RSA with an integrated KVM switch t prvide access t individual server blades. Mre details can be fund in the IBM Redbk ( which describes the integrated BMC, the RSA II family f adapters and the BladeCenter management mdule. IBM's service prcessrs can securely accessed with the IM4200 then managed using IBM Directr, an integrated suite f system management tls that enables administratrs t lcally r remtely track the usage and perfrmance f their server's prcessrs, disks, and memry. IBM Directr extends the basic RSA II sftware by prviding a central platfrm fr mnitring and managing all the IBM hardware resurces. Opengear Applicatin Nte: SDTCnnectr + IBM Page 2 f 12

3 2. Cnnecting t BMC services All xseries/system x servers cntain a basebard management cntrller (BMC). It is a service prcessr integrated int the mtherbard, designed t prvides access t the xseries/system x server independently f the perating system. The BMC typically des nt have its wn Ethernet NIC, it shares ne with the perating system. This NIC is cnfigured with tw IP addresses, ne f the perating system, and ne fr cmmunicatin with the BMC. Cnsle redirectin and serial ver LAN (SOL) The BMC can be used t redirect input and utput f the serial prt thrugh its shared NIC. When cupled with cnsle redirectin, it allws yu t remtely access BIOS cnfiguratin and see the bt messages as yur server bts r rebts. If yu als run a perating system cnsle n the redirected serial prt, after the system has bted yu als have ut-f-band access t the perating system fr disaster recvery, mnitring, rebting the system, etc. There are several steps fr setting up SDTCnnectr and yur perating system fr SOL: - Cnfigure the xseries/system x BMC and BIOS t enable cnsle redirectin - Install the Systems Management Bridge prgram n the client PC that will be running SDTCnnectr - Enable yur perating system's serial cnsle n the xseries/system x server - Cnfigure the Opengear SSH gateway t permit SOL - Cnfigure SDTCnnectr t access the BMC using Systems Management Bridge - Cnnect t the BMC using SOL Cnfiguring BMC cnsle redirectin n the xseries/system x server This prcess is detailed in the IBM technte entitled "Enabling Serial Over LAN fr a Remte Windws Text Cnsle using OSA SMBridge" and the Redbk entitled "IBM eserver xseries and BladeCenter Server Management", available frm the IBM web site. Belw is a brief walk thrugh. Refer t the IBM dcuments fr a mre thrugh guide. Ensure yu have a suitable Telnet client. Fr Windws users, dwnlad the HyperTerminal Private Editin (6.3) and install it f the client PC that will be running SDTCnnectr. The built is Windws telnet cmmand and built in HyperTerminal client are nt suitable. Otherwise, yur perating system's built in Telnet client shuld be suitable. Enable BMC and cnsle redirectin in the BIOS by rebting the xseries/system x server and press F1 during POST t enter BIOS setup Select Advanced Optins -> Basebard Management Cntrl -> (BMC) Settings Enter a unique, static IP address n yur management netwrk fr the BMC. In this example we use Enter the Subnet Mask f yur management netwrk, in this example we use Select Default Gateway and enter the IP address f yur Opengear unit, in this example the Opengear unit resides at Return t the main menu and select Devices and I/O Prts. Set Serial Prt A and Serial Prt B t Aut-cnfigure. Select Remte Cnsle Redirectin. Set Remte Cnsle Active t Active, Remte Cnsle Text Emulatin and Remte Cnsle Keybard Emulatin t VT100/VT220, Remte Cnsle Active After Bt t Enabled, and Remte Cnsle Flw Cntrl t Hardware. Ensure the Baud Rate is set t 19200, and Data Bits/Parity/Stp Bits are set t 8/Nne/1. Hit Esc twice t return t the main menu, select Start Optins. If available, set the fllwing ptins. Set Planar Ethernet 1 PXE t Disabled, Planar Ethernet 2 PXE t Enabled, Planar Ethernet PXE/DHCP t Planar Ethernet 2, and Run PXE nly n Select Planar NIC t Enabled. Opengear Applicatin Nte: SDTCnnectr + IBM Page 3 f 12

4 Hit Esc t return t the main menu, select Advanced Optins -> Basebard Management Cntrl (BMC) Settings. Set System-BMC Serial Prt Sharing t Enabled, and BMC Serial Prt Access Mde t Dedicated. Save yur changes and rebt. Installing the Systems Management Bridge n the PC running SDTCnnectr Cnnecting t the BMC requires the use f the Systems Management Bridge (SMBridge) service. SMBridge runs n the client PC running SDTCnnectr, and allws yu t use a Telnet client t cmmunicate with the redirected serial prt. SMBridge is used in lpback mde, as SDTCnnectr takes care f securely transprting the SOL traffic acrss the netwrk r Internet. Fr Windws: On the PC running SDTCnnectr, insert the Systems Management Bridge Installatin CD that shipped with yur xseries/system x server. If yu d nt have this CD, SMBridge can be dwnladed frm: ibm.cm/jct01004c/systems/supprt/supprtsite.wss/license?filename=system_x/39r6689.zip&rt=/systems/supprt/& brandind= Fllw the n screen prmpts, accepting the default settings. Once installed, check the Systems Management Bridge is running by clicking Start -> Run and typing telnet If the Systems Management Bridge prmpt is displayed, it has installed crrectly. Fr Linux: On the PC running SDTCnnectr, insert the Systems Management Bridge Installatin CD that shipped with yur xseries/system x server. If yu d nt have this CD, SMBridge can be dwnladed frm: ibm.cm/jct01004c/systems/supprt/supprtsite.wss/license?filename=system_x/39r6689.zip&rt=/systems/supprt/& brandind= Lcate the sasmbridge-*.rpm package and install it. If yu are using a distributin ther than Redhat, use a tl such as alien t rpm2targz t cnvert the package. The imprtant files are /etc/smbridge.cfg and /usr/bin/smbridge. Start SMBridge by running as rt: /etc/init.d/smbridge start If this fails, yu can run the fllwing cmmand as rt: /usr/bin/smbridge -d -c /etc/smbridge.cfg Check SMBridge is running by pening and terminal and typing telnet If the SMBridge prmpt menu is displayed, it has installed crrectly. Enable yur perating system's cnsle n the xseries/system x server In rder t access yur perating system using SOL, yu must tell it t run a cnsle n the serial prt when the OS starts. Fr Windws 2003 Server: (Emergency Administratin Services (EMS) and the Special Administratin Cnsle (SAC) are discussed at length in articles available at Micrsft's MSDN site.) Use the btcfg cmmand t start Emergency Administratin Services (EMS) n the serial prt. Frm a cmmand prmpt (Start -> Run -> cmd.exe), type: Opengear Applicatin Nte: SDTCnnectr + IBM Page 4 f 12

5 btcfg /ems ON /prt COM1 /baud /id 1 This enables EMS if yu nly have ne Windws perating system installed, r fr the first perating system in the Windws bt menu. Otherwise use /id 2 fr the secnd perating system, /id 3 fr the third, and s n. This als assumes that yu are using the first serial prt (COM1) as per the step Enabling cnsle redirectin in the BIOS. Rebt yur system t enable cnsle redirectin. Fr Linux: This prcess is detailed in the dcument entitled "IBM eserver xseries and BladeCenter Server Management" published as part f the IBM Redbks series, and available at the IBM web site. Warning: It is nt recmmended yu rely slely n this dcument t cmplete this step, the fllwing is an example nly t give yu a rught idea f what is invlved. Fllwing these steps verbatim may render yur system unable t bt. Refer t the IBM dcumentatin and yur Linux distributin's dcumentatin fr a mre thrugh guide. Cnfigure yur btlader t redirect t the serial prt. Using GRUB, yu wuld add the fllwing lines t the tp f yur grub.cnf r menu.lst file: serial --unit=0 --speed=19200 terminal --timeut=10 cnsle serial Find the entry fr the kernel image yu are using, and add the kernel ptins: cnsle=tty0 cnsle=ttys0,19200, e.g.: title Linux rt (hdx,x) kernel /vmzlinux-x.y.z r rt=/dev/hdxx cnsle=ttys0 cnsle=tty0 This als assumes that yu are using the first serial prt (/dev/ttys0) as per the step Enabling cnsle redirectin in the BIOS. Mdify the bt scripts t autmatically spawn a lgin prmpt n the serial prt nce Linux has bted. This varies frm distributin t distributin. Yu may be able t add the fllwing line t the tp f /etc/inittab: 0:12345:/sbin/agetty ttys Als ensure ttys0 is listed in /etc/securetty t allw rt t lgin thrugh the serial cnsle. Rebt yur system t enable cnsle redirectin. Cnfiguring the Opengear SSH gateway t permit SOL Ensure yur Opengear unit is running firmware versin r later. The latest firmware is available frm: ftp.pengear.cm Frm the Serial & Netwrk menu, select Netwrk Hsts. Click Add Hst. Enter the IP Address f the BMC, as per the step Cnfiguring the BMC (in this example we used ). Remve the Permitted Services yu d nt require, select the UDP radi buttn and enter Prt 623. Click Add. Scrll t the bttm f the page and click Apply. Frm the Serial & Netwrk menu, select Users & Grups. Click Add User. Enter a username fr the new user, e.g. ibmadmin. Enter and cnfirm a gateway Passwrd fr this user. Nte that this is separate frm the BMC passwrd. Opengear Applicatin Nte: SDTCnnectr + IBM Page 5 f 12

6 In Accessible Hst(s), select the IP address fr the BMC ( ). Click Apply. Cnfiguring SDTCnnectr t cnnect the SOL sessin Install and launch SDTCnnectr (1.2.x r later) n the client PC. Select File -> New Gateway Enter the IP address thrugh which the Opengear unit/management LAN gateway is accessible t this client PC (e.g ). Enter the gateway username (e.g. ibmadmin) and passwrd yu set in the previus step. Click OK. Right click n the newly created gateway and select New Hst. Enter the BMC's IP address ( ) in Hst Address. Select the SOL service and click OK. Cnnecting the SOL sessin Select the newly created hst and click the SOL buttn. A Telnet windw with the SMBridge prmpt is displayed: Type: OSA System Management Bridge (SMBridge), Versin Cpyright (c) OSA Technlgies, an Avcent Cmpany. All Rights Reserved. SMBridge> cnnect -ip u USERID -p PASSW0RD Substitute the BMC username after -u, and passwrd after -p. The defaults are USERID and PASSW0RD. The serial ver LAN sessin is nw cnnected. Opengear Applicatin Nte: SDTCnnectr + IBM Page 6 f 12

7 Trubleshting/FAQ Why d I need t run SMBridge? Systems Management Bridge cnverts TCP based Telnet traffic int UDP based SOL traffic and vice versa, s yu can talk t the BMC using a standard Telnet client. SMBridge listens n lcal TCP prt 623. Hw des SDTCnnectr transprt the UDP based SOL traffic t the BMC? In rder t transprt the UDP traffic ver the SSH tunnel, it must cnvert it int TCP traffic at the SDTCnnectr end f the tunnel, then cnvert it back int UDP at the Opengear end f the tunnel. The SDTCnnectr end f this tunnel is listening n lcal UDP prt 623, s when yu cnnect t (lcalhst) frm the SMBridge prmpt, it cnverts and transprts it dwn the tunnel, cnverts it back, and frwards it t the BMC. When I click the SOL buttn r type telnet lcalhst 623, the Telnet windw clses immediately. Ensure there are n ther Telnet sessins t SMBridge already running n the client PC. When I click the SOL buttn r type telnet lcalhst 623, I get a cnnectin refused errr r the Telnet windw clses immediately. First, ensure SMBridge is running. Under Windws, click Start -> Run -> and type services.msc. Scrll dwn t find OSA SMBridge. If the status is nt Started, right click it and click Start. Under Linux, as rt type /etc/init.d/smbridge start r run: /usr/bin/smbridge -d -c /etc/smbridge.cfg Ensure yur firewall settings aren't preventing yu frm cnnecting t TCP prt 623. Als ensure there are n ther running prgrams using TCP prt 623. When I click the SOL buttn r when I click Start -> Run -> and type telnet lcalhst 623, it appears t cnnect but I never see the SMBridge prmpt. Ensure yur firewall settings aren't preventing yu frm cmmunicating n TCP prt 623. Under Windws, this prblem can ccur when the TCP/IP stack has becme crrupted. Fllw the steps at this link t reset the TCP/IP stack: Als ensure there are n cnflicting services running n TCP prt 623. When I try t cnnect frm the SMBridge prmpt, the cnnectin times ut. Ensure the Opengear SSH gateway is cnfigured t allw SOL fr the gateway user yu are using with SDTCnnectr (e.g. ibmadmin), as per the sectin Cnfiguring the Opengear SSH gateway t permit SOL. Yu can cnfirm this is wrking by checking the Opengear system lgs, search fr utput by udpgw and ensure UDP prt 623 is being allwed fr yur user. Opengear Applicatin Nte: SDTCnnectr + IBM Page 7 f 12

8 If this is wrking, the prblem is with yur BMC r netwrk cnfiguratin. T trublesht this, install SMBridge n a system lcal t the BMC (e.g. n the management LAN itself) and ensure yu can cnnect directly t the BMC by clicking Start -> Run - > and type telnet lcalhst 623, then type: cnnect -ip u USERID -p PASSW0RD Substitute the IP address f the BMC after -ip, and the BMC username and passwrd after -u and -p. The values abve are the defaults used in this dcument. When I click the SOL buttn SDTCnnectr displays the errr, Culdn't redirect prt...? Ensure UDP prt 623 is nt in use by anther running prgram. In Linux, ensure yu are running SDTCnnectr with super user privileges, as prt 623 is a privileged prt and yu will be unable t bind it therwise. 3. Cnnect t RSA II services xseries/system x servers may be cnfigured with an ptinal remte access card (Remte Supervisry Adapter II, r RSA II) that cntains a sytems service prcessr. It prvides ut f band and remte access and cntrl f the xseries/system x server, independent f the perating system. This is similar t the nbard BMC, hwever the add n remte access cards and mre full featured and pwerful. Advantages ver the BMC include prviding remte graphical access t the xseries/system x server using a virtual KVM, ability t munt remte media, and remte server mnitring via a web page. The RSA II als has its wn Ethernet netwrk prt, while the BMC shares a prt with the system. Cnfiguring the RSA II By default, the RSA II Ethernet prt uses DHCP t acquire an address, with a static fall back address f We suggest yu use a static IP address rather than relying n a DHCP server, as this eliminates a pssible pint f failure. In this example, we will set the RSA II's IP address t , subnet mask t and gateway and , s it is cmpatible with the Opengear's default netwrk settings. If yu knw the RSA II's IP address, yu may brwse t it t apple these netwrk settings. Refer t IBM's RSA II user guide fr detailed instructins. Otherwise, rebt the xseries/system x server. During the POST messages, press F1 t enter the Cnfiguratin/Setup Utility menu. Select Advanced Setup, then RSA II Settings. Set DHCP Cntrl t Use Static IP, Static IP Address t , Subnet Mask t and Gateway t Select Save Values and Rebt RSA II. Press Esc twice and exit the Setup Utility. Refer t the IBM dcumentatin fr ther setup tasks such as cnfiguring users. In this example we use the default username/passwrd, USERID/PASSW0RD (nte the zer instead f "O" in PASSW0RD). Cnfiguring the Opengear SSH gateway t permit access t the RSA II Ensure yur Opengear unit is running firmware versin r later. The latest firmware is available frm: ftp.pengear.cm Opengear Applicatin Nte: SDTCnnectr + IBM Page 8 f 12

9 Frm the Serial & Netwrk menu, select Netwrk Hsts. Click Add Hst. Enter the IP Address f the RSA II, as per the step Cnfiguring the RSA II (in this example we used ). Remve the Permitted Services yu d nt require, but d nt remve HTTP (TCP prt 80). Select TCP, enter Prt 1044 and click Add. Select TCP, enter Prt 1045 and click Add. Select TCP, enter Prt 2000 and click Add. Select UDP, enter Prt 2000 and click Add. Scrll t the bttm f the page and click Apply. Frm the Serial & Netwrk menu, select Users & Grups. If yu have nt already, click Add User, therwise Edit the user and skip t the next paragraph. Enter a username fr the new user, e.g. ibmadmin. Enter and cnfirm a gateway Passwrd fr this user. Nte that this is separate frm the RSA II passwrd. In Accessible Hst(s), select the IP address fr the RSA II ( ). Click Apply. Cnfiguring SDTCnnectr t access the RSA II Install and launch SDTCnnectr (1.4.x r later) n the client PC. If yu haven't previusly added the Opengear SSH gateway, select File -> New Gateway. Otherwise skip the next paragraph. Enter the IP address thrugh which the Opengear unit/management LAN gateway is accessible t this client PC (e.g ). Enter the gateway username (e.g. ibmadmin) and passwrd yu set in the previus step. Click OK. Right click n the newly created gateway and select New Hst. Enter the RSA II's IP address ( ) in Hst Address. Select the RSA II service and click OK. Cnnecting t the RSA II Select the newly created hst and click the RSA II buttn. A brwser windw is launched. Lgin t the RSA II using yur RSA II username and passwrd (USERID/PASSW0RD). Frm this page yu can mnitr yu system, pwer it n and ff, and access the virtual KVM and munt remte media using Remte Cntrl. Nte that Remte Cntrl perfrms best when "Encrypt disk and KVM data during transmissin" bx is left unchecked. SDTCnnectr is already encrypting this data, s there is typically n need t encrypt it a secnd time. 4. Cnnecting t IBM Directr Server Directr is IBM's tl fr mnitring and administering f netwrk-cnnected systems. When the Directr client (Directr Cnsle) is installed alngside SDTCnnectr, yu can cnnect t a Directr server running n yur management LAN. The installatin and setup f Directr is utside the scpe f this dcument. The fllwing instructins assume yu have a Directr server running n yur management LAN, and the Directr Cnsle installed n the same PC that is running SDTCnnectr. Typically, yur management LAN will have a dedicated Directr server, independent frm the hsts being managed. In this example, the Directr server is assumed t be up and running n yur management LAN with an IP address f Opengear Applicatin Nte: SDTCnnectr + IBM Page 9 f 12

10 Cnfiguring the Opengear SSH gateway t permit access t Directr Ensure yur Opengear unit is running firmware versin r later. The latest firmware is available frm: ftp.pengear.cm Frm the Serial & Netwrk menu, select Netwrk Hsts. Click Add Hst. Enter the IP Address f the Directr server as displayed in Cntrl Panel -> Netwrk Settings -> Lcal Area Cnnectin -> Prperties, in this example we will assume it is at Remve any Permitted Services yu d nt require, select the TCP radi buttn and enter Prt 2033 and click Add. Scrll t the bttm f the page and click Apply. Frm the Serial & Netwrk menu, select Users & Grups. If yu have nt already, click Add User, therwise Edit the user and skip t the next paragraph. Enter a username fr the new user, e.g. ibmadmin. Enter and cnfirm a gateway Passwrd fr this user. Nte that this is separate frm the perating system r Directr passwrd. In Accessible Hst(s), select the IP address f the Directr server ( ). Click Apply. Cnfiguring SDTCnnectr t cnnect t Directr Install and launch SDTCnnectr (1.4.x r later) n the client PC. If yu haven't previusly added the Opengear SSH gateway, select File -> New Gateway. Otherwise skip the next paragraph. Enter the IP address thrugh which the Opengear unit/management LAN gateway is accessible t this client PC (e.g ). Enter the gateway username (e.g. ibmadmin) and passwrd yu set in the previus step. Click OK. Right click n the newly created gateway and select New Hst. Enter the Directr server's IP address ( ) in Hst Address. Select the Directr service and click OK. 5. Cnnecting t Directr Select the Directr server hst and click the Directr buttn. The Directr Cnsle is launched, with the IBM Directr Server address set t lcalhst r Leave this IP address as lcalhst r , and enter the User ID and Passwrd yu use t cnnect t the Directr server. It is pssible this User ID and Passwrd is the same as yur perating system username and passwrd n the Directr server Leave Use SSL unchecked, SDTCnnectr is already encrypting the traffic s it is nt typically necessary t encrypt it a secnd time. Click OK t establish the cnnectin. 6. The IBM +Opengear slutin Opengear Applicatin Nte: SDTCnnectr + IBM Page 10 f 12

11 Opengear IM4200 gateways and SDTCnnectr client ship precnfigured with supprt fr IBM's BMCs and RSA cards and assciated Directr tls. IBM best practice recmmends that the RSA cards nt be cnnected directly t the prductin netwrk, and the IM4200 gateway prvides the ideal slutin fr securely accessing and cntrlling these service prcessrs. Fr enterprises with distributed branch ffices the IM4200 family prvides a pwerful integrated slutin. In the smaller branches with nly a few racks f servers and netwrk devices t administer, the IM4200 ffers a single pint f lcal and remte access t all the serial cnsles, netwrk cnsles, service prcessrs and pwer units at the site. In larger branches with racks f servers t administer, the IM4200 can serve as the management LAN gateway that securely islates the service prcessrs. Fr the SMB custmer the IM SDTCnnectr ffers integrated ut-f-band management fabric fr RSAs/BMCs and remte access t IBM tls as well as management f nn-ibm serial cnsle equipment. It als delivers alternate cnnectivity fr the ut f band access with bradband and dial-up supprt. And fr data center custmers with racks f serial cnsle devices t administer, the IM (with its redundant pwer supplies, Ethernet failver, authenticatin and lgs f all accesses) prvides a mst reliable slutin, while the CM4148 prvides a mst affrdable slutin. When lcally administering an IBM server the Directr applicatin addresses the server at ne TCP/IP address n the LAN, the RAC Services tls address the RSA at anther IP address and the BMC is access fr SOL and fr IPMI cnnectin using yet ther UDP and TCP IP address. A selectin f authenticatin and encryptin ptins will then have been cnfigured fr each f these accesses. Administering this server remtely requires all the firewalls and ruters in the enterprise netwrk t be cnfigured t allw cmmunicatins thrugh all these prts. Administering a distributed netwrk f such servers remtely adds anther layer f cmplexity. The SDTCnnectr client that is supplied with each IM/CM4000 prvides a simple centralized slutin fr administratin f such distributed netwrks. With an IM4200 slutin all the Directr, IPMI and SOL access t each remte IBM server is securely tunneled thru SSH ver the ne selectable prt. SDTCnnectr then gives the sys admin secure access t all these lcal and remte servers and sites frm the ne screen n his/her desktp, and apprpriate tl fr accessing a particular server can then be pened with a simple pint-n-click Fr remte administratin, the SDTCnnectr client prvides a simple centralized slutin. RSA II, BladeCenter and BMC each use a variety f TCP/IP and UDP prts fr cmmunicatin nly sme f which the administratr can change. S the enterprise netwrk firewalls and ruters wuld need t allw cmmunicatins thrugh all these prts fr the adapters t functin prperly. Hwever with an IM4200 slutin all TCP and UDP access t the distributed servers is securely tunneled thru SHH ver the ne selectable prt. SDTCnnectr als then gives the sys admin secure access t all these lcal and remte servers and sites frm the ne screen n his/her desktp, and the RSA management sftware fr each f these servers can then be initiated with a simple pint-n-click Opengear Applicatin Nte: SDTCnnectr + IBM Page 11 f 12

12 Fr data center custmers, with rws f racked IBM servers, the IM4200 family prvides the mst reliable slutin fr accessing the service prcessrs - with redundant pwer supplies, Ethernet failver, authenticatin and lgs f all accesses. IBM's service prcessrs can accessed with the IM4200 then managed using Directr, IBM s integrated system management tls that prvides a central platfrm fr mnitring and managing all the IBM hardware resurces. And the IBM + Opengear service management can be extended even further as Directr als will seamlessly integrate with higher-level systems management fferings such as Tivli, HP OpenView, Micrsft SMS and MOM, CA Unicenter, BMC and Altiris. Opengear Applicatin Nte: SDTCnnectr + IBM Page 12 f 12