Do+Able Products 12347 Uživatelský manuál stáhnout pdf (Strana 18)

Hardware Management Console Best Practices

- 18 -

The firewall interface allows you to customize remote access to the HMC by IP

address and network mask. An example of the customization screen is shown

below.

4.5 Network Access between HMC and FSP

The HMC communicates with the FSP to perform its management functions. To

do this, it establishes an SSL connection with port 30000 and 30001 of the FSP’s

Ethernet port. It is recommended that the network used for this communication

channel be private, although an open network is supported except on systems with

a Bulk Power Controller.

4.6 Restricted shell on the HMC

The HMC provides a rich set of commands that encompasses most of the tasks

found in the graphical user interface. We choose to use SSH as a means to run

these commands because it provides a secure way to perform remote command

execution. However, by itself, SSH would provide an authenticated user full

access to the shell. To protect the HMC from users trying to gain higher privileges

by some means of exploiting the system, we are enforcing a restricted shell when

remotely connecting to the HMC via SSH or when opening an rshterm on the

HMC console. In the restricted shell environment, users will only have access to a

small subset of operating system commands, along with all the HMC commands.

Users will not be able to use the cd command, nor can they use re-direction.

1 2 ... 13 14 15 16 17 18 19 20 21 22 23 ... 56 57

Žádné komentáře

Do+Able Products 12347 Uživatelský manuál Strana 18