NETWORK ENGINEERING
Remote admin cards
Tom Lancaster
10.24.2005
Rating: -4.50- (out of 5)
|
For more IT articles and tips specific to small and midsized businesses, visit SearchSMB.com.
If you are responsible for managing servers from which you are physically separated, you should consider using a special card, usually in a PCI form factor, which gives you the equivalent of console access via the network. This can obviously be a good idea if you're a thousand miles away from the box, but it's also a good idea if your server is just down the hall in a secure raised-floor area, where you naturally want to minimize traffic and any physical activity. Either way, these cards let you do from your desk almost everything you can do from the server, including rebooting and working with the server's BIOS.
Each of the server manufacturers has a different name for their card. For example, IBM refers to its "Remote Supervisor Adapter" card and Dell calls theirs a "DRAC," but the basic functions are the same. The cards have their own Ethernet connection which can operate as long as there is power, and you use them by establishing a terminal session to this card. Many also have a keyboard/video/mouse connection too, so you can use that from a remote KVM switch.
Aside from making remote administration easier, these cards have several added security benefits. For example, they separate user traffic from admin traffic, which can be a big security benefit if your network is set up for "out-of-band" management. That is, you can isolate your management traffic to a separate VLAN or switch so that users can't get there, without affecting any connectivity to the server's primary network connection. Also, this is a security benefit because your operating system doesn't have to also be listening on any management ports, like ssh or Telnet, or for Windows Terminal Server or PCAnywhere, so obviously, your system won't be vulnerable to exploits in those services.
If your servers are a name brand like IBM, Dell or HP, you're probably better off getting a remote console card from the server manufacturer, so that it integrates with the BIOS. If you've rolled your own server from various components, you should probably go with a board like the eRIC, which acts like a stand-alone computer.
|
|
Rate this Tip
|
To rate tips, you must be a member of SearchNetworking.com.
Register now
to start rating these tips. Log in if you are already a member.
|
Submit a Tip
|
DISCLAIMER: Our Tips Exchange is a forum for you to share technical advice and expertise with your peers and to learn from other enterprise IT professionals. TechTarget provides the infrastructure to facilitate this sharing of information. However, we cannot guarantee the accuracy or validity of the material submitted. You agree that your use of the Ask The Expert services and your reliance on any questions, answers, information or other materials received through this Web site is at your own risk.
|
|
|
|
|
|
|
