Manuals / Black Box / Marine Equipment / Marine Safety Devices

Black Box Secure Device Servers, 1102, 1101 manual Remote site with restrictive firewall

Models: 1101 1102 Secure Device Servers

1 164

Download 164 pages 30.63 Kb

Page 105

Chapter 10: Nagios Integration

Remote site with restrictive firewall

In this scenario, the role of the console server will vary. One aspect may be to upload check results through NSCA. Another may be to provide an SSH tunnel to allow the Nagios server to run NRPE commands.

Nagios

SSH travel initiated for remote site

NRPE server at branch server‘s request

Internet

Console

server

Figure 10-9. Using Nagios in a remote site with a restrictive firewall.

Remote site with no network access

In this scenario the console server allows dial-in access for the Nagios server. Periodically, the Nagios server will establish a connection to the console server and execute any NRPE commands, before dropping the connection.

724-746-5500 blackbox.com

105

Image 105

Black Box Secure Device Servers, 1102, 1101 manual Remote site with restrictive firewall

Contents

1102 Secure Device Servers 1102 Secure Device Servers FCC and IC RFI Statements Normas Oficiales Mexicanas NOM Electrical Safety StatementTrademarks Used in this Manual Table of Contents Local Authentication Tacacs Authentication SMS Alerts Snmp AlertsAdd a New Alert 107 106108 110PowerMan Tool Installing the Key and CertificatePmpower Tool FingerprintingSpecifications SpecificationsOverview 2.1 Introduction Manual OrganizationTypes of Users Overview Management ConsoleHardware Description 2.5.1 LES1101A Front Panel 2 LES1101A Back Panel Number Component Description DB9 connectorEthernet Connectivity LED RJ-45 Ethernet ActivityLED left side of connector Ethernet Connectivity LED Number Component Description Barrel connector PowerLED right side of connector Ethernet Activity LED 3 LES1102A Front PanelWhat’s Included 1 LES1101A2 LES1102A Installation InstallationPower Connection Network ConnectionNon RS-232 Serial Port Pinouts- LES1102A +3V Non RS-232 Serial Port Pinouts- LES1101ARX+ TX+ +VIN TX +System Configuration Connected PC/Workstation SetupManagement Console Connection Browser connection System ConfigurationAdministrator Password Network IP Address IPv6 configuration System ServicesSystem Services screen SDT connector SSH encrypted SDT ConnectorCommunications Software Forwarded toSSHTerm PuTTYConfigure Serial Ports Serial Port, Host, Device, and User ConfigurationCommon Settings Serial Port, Host, Device, and User ConfigurationConsole Server Mode Serial Port, Host, Device, and User Configuration 1102 Secure Device Servers SDT Mode Device RPC, UPS, EMD Mode Terminal Server ModeSerial Bridging Mode Local Ethernet LAN LES1102A COM port SyslogAdd/ Edit Users Serial Port, Host, Device, and User Configuration Network Hosts AuthenticationSerial Port Redirection Trusted NetworksLES1102A Retail data systems Managed DevicesSerial Port, Host, Device, and User Configuration Secure SSH Tunneling and SDT Connector Secure LocalLES1102A Serial Connected Configuring for SSH Tunneling to Hosts Secure SSH Tunneling and SDT ConnectorSDT Connector Client Configuration SDT Connector installation1102 Secure Device Servers Secure SSH Tunneling and SDT Connector Make an SDT Connection through the Gateway to a Host Manually Adding Hosts to the SDT Connector Gateway10. Clients Manually Adding New Services to the New Hosts1102 Secure Device Servers Adding a Client Program to be Started for the New Service 16. Telnet client Click OK 17. Edit SDT host screen SDT Connector to Management Console1102 Secure Device Servers Secure SSH Tunneling and SDT Connector Importing and Exporting Preferences SDT Connector Public Key AuthenticationSetting up SDT for Remote Desktop Access 23. Remote Desktop Users dialog box Configure the Remote Desktop Connection ClientUse -p to receive password prompt Computer, enter the appropriate IP Address and Port NumberGeometry width x height or 70% screen percentage SDT SSH Tunnel for VNC For Linux servers and clients Install, Configure, and Connect the VNC Viewer 30. VNC authentication 1102 Secure Device Servers 33. Incoming TCP/IP properties Set up SDT Serial Ports on Console Server Address of port01. Then select the RDP Service check box SSH Tunneling Using other SSH Clients for example, PuTTY1102 Secure Device Servers Secure SSH Tunneling and SDT Connector 1102 Secure Device Servers Alerts and Logging Configure SMTP/SMS/SNMP/Nagios Alert ServiceAlerts and Logging Email AlertsSMS Alerts Snmp AlertsSelect Alerts & Logging Snmp Activate Alert Events and Notifications Nagios AlertsAdd a New Alert Configuring General Alert TypesSerial port signal alert This alert type monitors UPSes, RPCs, and power devices Configuring Power Alert TypeRemote Log Storage Serial Port LoggingNetwork TCP or UDP Port Logging 1102 Secure Device Servers Power Management Power ManagementRemote Power Control RPC RPC Connection1102 Secure Device Servers User Power Management RPC Access Privileges and AlertsUninterruptible Power Supply Control UPS RPC StatusTurn on Turn OFF Cycle Status Serial, USB, or Network Connections Managed Managed UPS ConnectionsClick Add Managed UPS As Device Type UPS and clicking ApplyPower Management Remote UPS Management Controlling UPS Powered Computers UPS AlertsUPS Status 12. Log table Overview of Network UPS Tools NUTRefer to 1102 Secure Device Servers Authentication Configuration AuthenticationLocal Authentication Tacacs AuthenticationEnter the Server Password Radius AuthenticationRADIUS/TACACS User Configuration Ldap AuthenticationPamtacplus PAM Pluggable Authentication ModulesPamldap Radius ExampleSSL certificates screen SSL CertificateConfirm Challenge Password Challenge PasswordCommon name Organizational UnitUpload button LES1102A Network Managed hosts Services Nagios IntegrationNagios Overview Central Management and Setting Up SDT for Nagios Nagios IntegrationDistributed console servers Black Box console servers Setup Distributed Console Servers Setup Central Nagios ServerDescription enter Administrator connection Configuring Nagios Distributed Monitoring Enable Nagios on the Console ServerSelect Users & Groups from the Serial & Network menu Enable Nsca Monitoring Enable Nrpe MonitoringLES1102A Serial Check Nagios Tunneled SSH LES1102A Sendncsa Program/script NagiosConfigure Selected Serial Ports for Nagios Monitoring Configure Selected Network Hosts for Nagios MonitoringConfigure the Upstream Nagios Monitoring Host Commandname checkserialstatus Commandline Commandname checknrpedaemon CommandlineDefine service Hostname Server Use Generic-serviceServer Use Generic-service Define service Servicedescription port-log-serverActivechecksenabled Passivechecksenabled CheckportlogNumber of Supported Devices Basic Nagios Plug-InsDistributed Monitoring Usage Scenarios Using Nagios in a local office Remote siteRemote site with restrictive firewall System Management System Administration and ResetSystem Management Upgrade FirmwareConfiguration Backup Configure Date and Time109 Select the Status Port Access Port Access and Active UsersStatus Reports StatisticsSupport Reports Status ReportsSelect Status Syslog DashboardConfigure dashboard screen Configuring the DashboardEcho table Creating Custom Widgets for the DashboardManagement ManagementDevice Management Port and Host LogsSelect Manage Terminal Serial Port Terminal ConnectionSelect Manage Power Accessing config from the Command Line Configuration from the Command LineConfig tool Configuration from the Command Line# config -g config.users.user1.description # config -g configSerial Port Configuration SDT mode Device ModeSerial bridge mode Terminal server modeSyslog settings Adding and Removing Users# config -r users # ./delete-node config.users.user2# config -a # config -g config.groups.totalAdding and Removing User Groups # rmuser Group7# config -r auth List of remote authentiction and authorization servers# config -g config.sdt.hosts.total # config -s config.sdt.hosts.total=4# config -g config.devices.total Log level for services# config -hosts # config -g config.portaccess.total# config -r cascade # config -s config.cascade.slaves.total=1Cascaded Ports UPS Connections# config -d config.ups.monitors.monitor1 # config -s config.ups.monitors.total=1RPC Connections Remote UPSesTo configure serial/network port logging # config -d config.devices.device8Port Log To delete the above managed deviceSignal Alert General settings for all alertsAlerts Connection AlertPower Sensor Alert UPS Power Status Alert# config -r alerts Smtp and SMSAdministration IP SettingsSnmp Date and Time Settings Services # config -r timeDhcp Server Prefer Nrpe over Nsca Disabled defaults to Disabled Enable SDT for Nagios ext Enabled SDT gateway addressTo configure Nrpe with following settings Nrpe port Nagios Advanced Configuration ! Bin/sh /etc/scripts/alert-email $suffix # ./delete-node config.users.user3Echo Warning $TOTALNODE greater than number of items NEWTOTAL=$ $TOTAL Add the following line to rc.local# loop indefinitely While true do Etc/config/scripts/config-post # configUsage /etc/scripts/backup-usb Command File # /etc/scripts/backup-usb check-magic Etc/config/pmshell-start.sh #!/bin/sh PORT=$1 USER=$2 Config --set config.system.snmp.trapport2=162 Config --set config.system.snmp.address2=w.x.y.zTo set the Manager Address field To set the Community field Snmp version 1 and 2c only$& ! $&$ $&% ! #$! Chown fred /etc/config/users/fred/.ssh/authorizedkeys#$ $ mkdir keys $ ssh-keygen -t rsaHttp//openssh.org/portable.html ! Http//www openbsd.org/cgi-bin/man.cgi?query=sshdOpenSSH Windows http//sshwindows.sourceforge.net/download # ssh remhost Ab7e33bd85505a430be0bd433f1ca5f8 Offending key in /.ssh/knownhosts1Client Keys Uploading Keys Authorized Keys !$ % +- ! !!#$ #$! #% #% Target SpecificationPowerstrip IdName or ID of the device support/id Powerstrip Pport PpasswordTargetaddress Username# #%&Appendix A. Linux Commands and Source Code Appendix a Linux Commands and Source CodeAdd a group or add an user to a group Add an user GNU Bourne-Again ShellReboot LoginIp6tables Iptables-saveSleep VconfigSmbmnt Smbmount164