VNC authentication | Black Box 1101, Secure Device Servers, 1102

Chapter 6: Secure SSH Tunneling and SDT Connector

Figure 6-29. IP address of console server unit.

To establish the VNC connection, simply activate the VNC Viewer software on the Viewer PC and enter the password.

Figure 6-30. VNC authentication.

NOTE: For general background reading on Remote Desktop and VNC access we recommend the following:

The Microsoft Remote Desktop How-To. http://www.microsoft.com/windowsxp/using/mobility/getstarted/remoteintro.mspx The Illustrated Network Remote Desktop help page. http://theillustratednetwork.mvps.org/RemoteDesktop/RemoteDesktopSetupandTroubleshooting.html

What is Remote Desktop in Windows XP and Windows Server 2003? by Daniel Petri. http://www.petri.co.il/what's_remote_desktop.htm Frequently Asked Questions about Remote Desktop. http://www.microsoft.com/windowsxp/using/mobility/rdfaq.mspx

Secure remote access of a home network using SSH, Remote Desktop, and VNC for the home user http://theillustratednetwork.mvps.org/RemoteDesktop/SSH-RDP-VNC/RemoteDesktopVNCandSSH.html

Taking your desktop virtual with VNC, Red Hat magazine. http://www.redhat.com/magazine/006apr05/features/vnc/ and http://www.redhat.com/magazine/007may05/features/vnc/

Wikipedia general background on VNC http://en.wikipedia.org/wiki/VNC.

6.10 Using SDT to IP Connect to Hosts that are Serially Attached to the Gateway

Network (IP) protocols like RDP, VNC, and HTTP can also be used for connecting to host devices that are serially connected through their COM port to the console server. To do this you must:

establish a PPP connection (Section 6.7) between the host and the gateway, then

set up Secure Tunneling—Ports on the console server (Section 6.7), then

configure SDT Connector to use the appropriate network protocol to access IP consoles on the host devices that are attached to the Console server serial ports (Section 6.7)

724-746-5500 blackbox.com

59

Image 59

Black Box 1101, Secure Device Servers, 1102 manual VNC authentication

Contents

1102 Secure Device Servers 1102 Secure Device Servers FCC and IC RFI Statements Normas Oficiales Mexicanas NOM Electrical Safety Statement Trademarks Used in this Manual Table of Contents Add a New Alert Local Authentication Tacacs AuthenticationSMS Alerts Snmp Alerts 110 106107 108 Fingerprinting Installing the Key and CertificatePowerMan Tool Pmpower Tool Specifications Specifications Types of Users Overview 2.1 IntroductionManual Organization Hardware Description 2.5.1 LES1101A Front Panel OverviewManagement Console RJ-45 Ethernet Activity Number Component Description DB9 connector2 LES1101A Back Panel Ethernet Connectivity LED 3 LES1102A Front Panel Number Component Description Barrel connector PowerLED left side of connector Ethernet Connectivity LED LED right side of connector Ethernet Activity LED 2 LES1102A What’s Included1 LES1101A Network Connection InstallationInstallation Power Connection Non RS-232 Serial Port Pinouts- LES1102A TX + Non RS-232 Serial Port Pinouts- LES1101A+3V RX+ TX+ +VIN Management Console Connection System ConfigurationConnected PC/Workstation Setup Browser connection System Configuration Administrator Password Network IP Address IPv6 configuration System Services System Services screen Forwarded to SDT ConnectorSDT connector SSH encrypted Communications Software SSHTerm PuTTY Configure Serial Ports Serial Port, Host, Device, and User Configuration Common Settings Serial Port, Host, Device, and User Configuration Console Server Mode Serial Port, Host, Device, and User Configuration 1102 Secure Device Servers SDT Mode Serial Bridging Mode Device RPC, UPS, EMD ModeTerminal Server Mode Local Ethernet LAN LES1102A COM port Syslog Add/ Edit Users Serial Port, Host, Device, and User Configuration Network Hosts Authentication Serial Port Redirection Trusted Networks LES1102A Retail data systems Managed Devices Serial Port, Host, Device, and User Configuration LES1102A Serial Connected Secure SSH Tunneling and SDT ConnectorSecure Local SDT Connector installation Secure SSH Tunneling and SDT ConnectorConfiguring for SSH Tunneling to Hosts SDT Connector Client Configuration 1102 Secure Device Servers Secure SSH Tunneling and SDT Connector Make an SDT Connection through the Gateway to a Host Manually Adding Hosts to the SDT Connector Gateway 10. Clients Manually Adding New Services to the New Hosts 1102 Secure Device Servers Adding a Client Program to be Started for the New Service 16. Telnet client Click OK 17. Edit SDT host screen SDT Connector to Management Console 1102 Secure Device Servers Secure SSH Tunneling and SDT Connector Importing and Exporting Preferences SDT Connector Public Key Authentication Setting up SDT for Remote Desktop Access 23. Remote Desktop Users dialog box Configure the Remote Desktop Connection Client Geometry width x height or 70% screen percentage Use -p to receive password promptComputer, enter the appropriate IP Address and Port Number SDT SSH Tunnel for VNC For Linux servers and clients Install, Configure, and Connect the VNC Viewer 30. VNC authentication 1102 Secure Device Servers 33. Incoming TCP/IP properties Set up SDT Serial Ports on Console Server Address of port01. Then select the RDP Service check box SSH Tunneling Using other SSH Clients for example, PuTTY 1102 Secure Device Servers Secure SSH Tunneling and SDT Connector 1102 Secure Device Servers Email Alerts Configure SMTP/SMS/SNMP/Nagios Alert ServiceAlerts and Logging Alerts and Logging Select Alerts & Logging Snmp SMS AlertsSnmp Alerts Activate Alert Events and Notifications Nagios Alerts Add a New Alert Configuring General Alert Types Serial port signal alert This alert type monitors UPSes, RPCs, and power devices Configuring Power Alert Type Network TCP or UDP Port Logging Remote Log StorageSerial Port Logging 1102 Secure Device Servers RPC Connection Power ManagementPower Management Remote Power Control RPC 1102 Secure Device Servers User Power Management RPC Access Privileges and Alerts Turn on Turn OFF Cycle Status Uninterruptible Power Supply Control UPSRPC Status Serial, USB, or Network Connections Managed Managed UPS Connections Click Add Managed UPS As Device Type UPS and clicking Apply Power Management Remote UPS Management UPS Status Controlling UPS Powered ComputersUPS Alerts 12. Log table Overview of Network UPS Tools NUT Refer to 1102 Secure Device Servers Tacacs Authentication AuthenticationAuthentication Configuration Local Authentication Enter the Server Password Radius Authentication RADIUS/TACACS User Configuration Ldap Authentication Radius Example PAM Pluggable Authentication ModulesPamtacplus Pamldap SSL certificates screen SSL Certificate Organizational Unit Challenge PasswordConfirm Challenge Password Common name Upload button Nagios Overview LES1102A Network Managed hosts ServicesNagios Integration Distributed console servers Black Box console servers Central Management and Setting Up SDT for NagiosNagios Integration Setup Distributed Console Servers Setup Central Nagios Server Description enter Administrator connection Select Users & Groups from the Serial & Network menu Configuring Nagios Distributed MonitoringEnable Nagios on the Console Server Tunneled SSH LES1102A Sendncsa Program/script Nagios Enable Nrpe MonitoringEnable Nsca Monitoring LES1102A Serial Check Nagios Configure the Upstream Nagios Monitoring Host Configure Selected Serial Ports for Nagios MonitoringConfigure Selected Network Hosts for Nagios Monitoring Hostname Server Use Generic-service Commandname checknrpedaemon CommandlineCommandname checkserialstatus Commandline Define service Checkportlog Define service Servicedescription port-log-serverServer Use Generic-service Activechecksenabled Passivechecksenabled Number of Supported Devices Basic Nagios Plug-Ins Distributed Monitoring Usage Scenarios Using Nagios in a local office Remote site Remote site with restrictive firewall System Management System Administration and Reset System Management Upgrade Firmware Configuration Backup Configure Date and Time 109 Statistics Port Access and Active UsersSelect the Status Port Access Status Reports Support Reports Status Reports Select Status Syslog Dashboard Configure dashboard screen Configuring the Dashboard Echo table Creating Custom Widgets for the Dashboard Port and Host Logs ManagementManagement Device Management Select Manage Terminal Serial Port Terminal Connection Select Manage Power Accessing config from the Command Line Configuration from the Command Line # config -g config Configuration from the Command LineConfig tool # config -g config.users.user1.description Serial Port Configuration SDT mode Device Mode Adding and Removing Users Terminal server modeSerial bridge mode Syslog settings # config -r users # ./delete-node config.users.user2 # rmuser Group7 # config -g config.groups.total# config -a Adding and Removing User Groups # config -s config.sdt.hosts.total=4 List of remote authentiction and authorization servers# config -r auth # config -g config.sdt.hosts.total # config -g config.portaccess.total Log level for services# config -g config.devices.total # config -hosts UPS Connections # config -s config.cascade.slaves.total=1# config -r cascade Cascaded Ports Remote UPSes # config -s config.ups.monitors.total=1# config -d config.ups.monitors.monitor1 RPC Connections To delete the above managed device # config -d config.devices.device8To configure serial/network port logging Port Log Connection Alert General settings for all alertsSignal Alert Alerts Smtp and SMS UPS Power Status AlertPower Sensor Alert # config -r alerts Snmp AdministrationIP Settings Date and Time Settings Dhcp Server Services# config -r time Nagios Enable SDT for Nagios ext Enabled SDT gateway addressPrefer Nrpe over Nsca Disabled defaults to Disabled To configure Nrpe with following settings Nrpe port Bin/sh /etc/scripts/alert-email $suffix Advanced Configuration! # ./delete-node config.users.user3 Echo Warning $TOTALNODE greater than number of items NEWTOTAL=$ $TOTAL # loop indefinitely While true do Add the following line to rc.local # /etc/scripts/backup-usb check-magic # configEtc/config/scripts/config-post Usage /etc/scripts/backup-usb Command File Etc/config/pmshell-start.sh #!/bin/sh PORT=$1 USER=$2 To set the Community field Snmp version 1 and 2c only Config --set config.system.snmp.address2=w.x.y.zConfig --set config.system.snmp.trapport2=162 To set the Manager Address field $&% ! $& ! $&$ $ mkdir keys $ ssh-keygen -t rsa Chown fred /etc/config/users/fred/.ssh/authorizedkeys#$! #$ Http//openssh.org/portable.html OpenSSH Windows http//sshwindows.sourceforge.net/download ! Http//www openbsd.org/cgi-bin/man.cgi?query=sshd Offending key in /.ssh/knownhosts1 # ssh remhost Ab7e33bd85505a430be0bd433f1ca5f8 Client Keys Uploading Keys Authorized Keys !! +- ! !$ % #% #$! #$ #% Target Specification Powerstrip IdName or ID of the device support/idPowerstrip Username PpasswordPport Targetaddress # #%& GNU Bourne-Again Shell Appendix a Linux Commands and Source CodeAppendix A. Linux Commands and Source Code Add a group or add an user to a group Add an user Iptables-save LoginReboot Ip6tables Smbmount VconfigSleep Smbmnt 164