Black Box LES1408A Configuring for SSH Tunneling to Hosts, SDT Connector Client Configuration

Using SDT Connector to Telnet or SSH connect to devices that are serially attached to the console server (Section 6.4).

The chapter then covers more advanced SDT Connector and SSH tunneling topics:

Using SDT Connector for out-of-band access (Section 6.5).

Automatic importing and exporting configurations (Section 6.6).

Configuring Public Key Authentication (Section 6.7).

Setting up a SDT Secure Tunnel for Remote Desktop (Section 6.8).

Setting up a SDT Secure Tunnel for VNC (Section 6.9).

Using SDT to IP connect to hosts that are serially attached to the console server (Section 6.10).

6.1Configuring for SSH Tunneling to Hosts

To set up the console server to SSH tunnel access a network attached host:

Add the new host and the permitted services using the Serial & Network: Network Hosts menu as detailed in Network Hosts (Chapter 4.4). Only these permitted services will be forwarded through by SSH to the host. All other services (TCP/UDP ports) will be blocked.

Note Following are some of the TCP Ports used by SDT in the console server:

22SSH (All SDT Tunneled connections)

23Telnet on local LAN (forwarded inside tunnel)

80HTTP on local LAN (forwarded inside tunnel)

3389 RDP on local LAN (forwarded inside tunnel)

5900 VNC on local LAN (forwarded inside tunnel)

73XX RDP over serial from local LAN – where XX is the serial port number (that is, 7301 to 7348 on a 48 port console server)

79XX VNC over serial from local LAN – where XX is the serial port number

Add the new Users using Serial & Network: Users & Groups menu as detailed in Network Hosts (Chapter 4.4). Users can be authorized to access the console server ports and specified network attached hosts. To simplify configuration, the Administrator can first set up Groups with group access permissions, then Users can be classified as members of particular Groups.

6.2SDT Connector Client Configuration

The SDT Connector client works with all Black Box console servers. Each of these remote console servers has an embedded OpenSSH based server that you can configure to port forward connections from the SDT Connector client to hosts on their local network (as detailed in the previous chapter). You can also pre-configure the SDT Connector with the access tools and applications that are available to run when you’ve established access to a particular host.

SDT Connector can connect to the console server using an alternate OoB access. It can also access the console server itself and access devices connected to serial ports on the console server.

_____________________________________________________________________

724-746-5500 blackbox.com Page 103