slide 1 - köszöntjük a comfort-netshare kft. oldalán
DESCRIPTION
TRANSCRIPT
© 2006 AVOCENT CORPORATION
The Cornerstone of ManageabilityThe Cornerstone of Manageability
Rev 1.1
© 2006 AVOCENT CORPORATION
Avocent Management InfrastructureAvocent Management Infrastructure
Software
© 2006 AVOCENT CORPORATION
© 2006 AVOCENT CORPORATION
ACS FamilyACS Family
Advanced Console Server Appliance
© 2006 AVOCENT CORPORATION
Cyclades ACS Application ExampleCyclades ACS Application Example
Cyclades ACS Appliance
© 2006 AVOCENT CORPORATION
Cyclades Advanced Console ServersCyclades Advanced Console Servers
Models:
– Cyclades ACS 48
– Cyclades ACS 32
– Cyclades ACS 16
– Cyclades ACS 8
– Cyclades ACS 4
– Cyclades ACS 1
© 2006 AVOCENT CORPORATION
Cyclades ACS AdvantageCyclades ACS Advantage• Easy and flexibly to use:
– Powerful CLI & wiz commands– Customizable menuing system– Easy-to-use web GUI (wizard & expert modes)
• Complies with your existing security infrastructure:– RADIUS, TACACS+, LDAP, Kerberos, SecureID– Automatic local fall-back (configurable)– SSH v2, logging of system events and user access– IP filtering, IPsec support
• Saves valuable cost and time by rich functionality & connectivity:– Cascading and IPMI Support– Data logging, Event notification– Dial-up support for remote access, 2 PCMCIA Slots– Unlimited number of simultaneous sessions to serial ports & port sniffing
• Unique integration of power management:– No operator error when powering server on/off
• Integrates into a huge variety of customer environments:– Port densities from 1 to 48, Clustering– Single and dual power supply, 220v or –48V DC
© 2006 AVOCENT CORPORATION
DSR® FamilyDSR® Family
KVM over IP Switching Solutions
© 2006 AVOCENT CORPORATION
DSR Application ExampleDSR Application Example
• Accessible through:• Local (OSCAR® Interface)• Direct Web access• DSView® 3.x Software• Modem (OOB)
• Accessible through:• Local (OSCAR® Interface)• Direct Web access• DSView® 3.x Software• Modem (OOB)
© 2006 AVOCENT CORPORATION
DSR2035/8035 Switch ConnectivityDSR2035/8035 Switch Connectivity
2 Power Control Ports
USB ports for local keyboard and mouse or USB devices
Analog connection for KVM access
Dual 10/100/1000 Ethernet connections for digital KVM access and failure/redundancy
Universal AC power 32 CAT 5 connections for DSRIQ
smart cables
© 2006 AVOCENT CORPORATION
DSR KVM over IP AppliancesDSR KVM over IP Appliances
Branch/RemoteOffices
Branch/RemoteOffices with Virtual Media
Enterprise/SMBEnterprise
with Virtual Media
Enterprise/SMB with
Virtual Media
DSR1021, DSR1022DSR1024
DSR1031 DSRx020 DSRx030 DSRx035
TargetDevices
1, 4 or 8 Servers 8 Servers 16 Servers 16 Servers 32 Servers
Connections 1 Local, 1 Digital 1 Local, 1 Digital1 Local, Choice of 1, 2, 4 or 8 Digital
1 Local, Choice of 1, 2, 4 or 8 Digital
1 Local, Choice of 2 or 8 Digital
Platforms PS/2, Sun, USB, Serial-based devices
PS/2, Sun, USB, Serial-based devices
PS/2, Sun, USB, Serial-based
devices
PS/2, Sun, USB, Serial-based
devices
PS/2, Sun, USB, Serial-based devices
Virtual Media Yes Yes Yes
On board Webbrowser
Yes Yes Yes Yes Yes
AdditionalFeatures
Local/remote sharing;
Dual SPC ports;5 USB 2.0 ports
Local USB ports forkeyboard/mouse
5 USB 2.0 ports
Dual SPC ports;5 USB 2.0. ports;Dual NIC ports for
failover/redundancy
© 2006 AVOCENT CORPORATION
DSRIQ (Computer Interface Module)DSRIQ (Computer Interface Module)
• Exclusive CAT 5 technology– Reduces cable volume – Designed for high density racks– Provides connection from the DSR KVM switches to servers
• Exclusive Keep Alive technology– Allows attached servers to continue network functions
in the event of power failure to the switch– Keyboard and mouse emulation processing
powered from the keyboard connection on the servers• DDC2B compliant
– Meets current VESA standards– Provides optimal Digital Display resolution
and video settings• Connectivity
– PS/2, Sun, USB, VT100 serial-based devices and Virtual Media– Available in 14- and 20-inch lengths
© 2006 AVOCENT CORPORATION
What is DS Virtual Media?What is DS Virtual Media?
Virtual Media Defined – A straight-forward method for customers to load CDs/USB from a server at
a central site and transfer the information to a server at a remote site – in the same building or around the world.
• Available on:– DSR1030– DSR1031 (with DSVIEW 3.x)– DSR2030– DSR4030– DSR8030
• Provides KVM and VM access
to a single appliance
via an IP address
© 2006 AVOCENT CORPORATION
DSView 3 Virtual Media At a GlanceDSView 3 Virtual Media At a Glance
Virtual Media provides the ability to remotely load SW and diagnostic information, with or without a working OS, from devices that are centrally located.
© 2006 AVOCENT CORPORATION
DSR KVM AdvantageDSR KVM Advantage
• Easy and flexibly to use:– OnBoard Web-Interface– Integration into DSView Software– CAT5 cabling– Interfaces with PS/2, USB and SUN keyboard/mouse
• Complies with your existing security infrastructure:– authentication by LDAP, NT, AD, TACACS+, RADIUS via DSView Software (also SecurID)– selectable encryptions (DES, Triple DES, 128-bit, AES and also on VM) incl. Video via DSView Software
• Easy to connect, easy to use:– UTP (CAT5) cabling– Interfaces with PS/2, USB and SUN keyboard/mouse– Web-GUI for access and configuration, no extra SW to install– Cascading
• Saves valuable cost and time by rich functionality & connectivity:– Cascading– Virtual Media (xx3x models)– Dual Ethernet for failover (DSR 2035/8035 Switches)
• Unique integration of power management:– No operator error when powering server on/off
• Integrates into a huge variety of customer environments:– Port densities from 1 to 32, Clustering– 1, 2, 4 or 8 IP-Users
© 2006 AVOCENT CORPORATION
PM FamilyPM Family
Integrated Power Management Solutions
© 2006 AVOCENT CORPORATION
Cyclades PM Application ExampleCyclades PM Application Example
ACS / DSR®
© 2006 AVOCENT CORPORATION
Cyclades PMCyclades PM
• Models:–Cyclades PM10i 10A
– Cyclades PM10i 16A
– Cyclades PM10i 32A
– Cyclades PM10i 32AU
– Cyclades PM20i 16A Cyclades PM20i 32A Cyclades PM20i 32AU
© 2006 AVOCENT CORPORATION
Cyclades PM AdvantageCyclades PM Advantage• Complies with existing security infrastructure:
– Fully integrated into Avocent DSView® /ACS/DSR® security concept– User access list per port
• Safes your time and resources:– Remote and independent control of power outlets– Automatic sequential power-up– Global current monitoring with threshold alarm– Event notification (email, SMS, SNMP trap)
• Easy to use:– Quick identification of correct power unit and power outlet– Support for name assignment to power outlets– Coverage of large power port densities (daisy-chaining)
• Reduced risk:– No operator error when powering server on/off– Power port state locking support (lock port on or off)
© 2006 AVOCENT CORPORATION
OnBoard, MergePoint™OnBoard, MergePoint™
Service Processor Management Appliances
© 2006 AVOCENT CORPORATION
Service ProcessorsService Processors
• processor within server• out-of-band access to server• communicates over Ethernet
• Functions:• SoL• KVM• Power• Virtual Media• HW Sensors
• Versions:• IPMI: Standard• ILO: HP, Compaq• DRAC: Dell• RSA: IBM• RSB: Fujitsu Siemens• ALOM: SUN
© 2006 AVOCENT CORPORATION
Blade Management ModulesBlade Management Modules
© 2006 AVOCENT CORPORATION
Service Processor ProtocolsService Processor Protocols
• IPMI (Standard):– Serial over LAN (IPMI 2.0), Power control
• iLO, Riloe (HP, Compaq):– Web, Serial over LAN, KVM, Power, Virtual Media
• SMASH/CLP (HP):– Serial over LAN, Power
• DRAC (Dell):– Web, Serial over LAN, KVM, Power, Virtual Media
• RSA (IBM):– Web, Serial over LAN, KVM, Power, Virtual Media
• Sun ALOM:– Serial over LAN, Power
© 2006 AVOCENT CORPORATION
Service Processor ProtocolsService Processor Protocols
© 2006 AVOCENT CORPORATION
Problems with Service ProcessorsProblems with Service Processors
• Low Level of Security– little centralized authentication
(most)– unsecure protocols:
TELNET or HTTP(some)
• Difficult to scale– no single sign-on– no consolidation– each server adds one
ADDITIONAL IP-address
• Deployment costs:– Extra Ethernet connection
per server– Requires twice as much switch-ports– Additional internal or even external
IP-addresses required
© 2006 AVOCENT CORPORATION
Problems with Service ProcessorsProblems with Service Processors
• Management:– dependency between server
and networking groups
• Multiple non-standard protocols, propietary SW for each vendor
• Separation of OOB from production network
– requires management network
• Lack of centralised Logging and Auditing
© 2006 AVOCENT CORPORATION
OnBoard: Secure Rack ManagementOnBoard: Secure Rack Management
© 2006 AVOCENT CORPORATION
Cyclades OnBoard SP ManagerCyclades OnBoard SP Manager
Server Ethernet ports
User Ethernet ports
Aux Port
Console
•ATP8124: 24 port, single AC
•ATP8224: 24 port, dual AC
•ATP8424: 24 port, dual DC
•ATP8140: 40 port, single AC
•ATP8240: 40 port, dual AC
•ATP8440: 40 port, dual DC
© 2006 AVOCENT CORPORATION
MergePoint 5200 SP ManagerMergePoint 5200 SP Manager
• Two Ethernet ports• Serial console for initial setup• RDP and VNC support
• MGP5200-xxx: base unit, 64 targets enabled• MGPUG64-xxx: 64-target add-on license• MGPUG128-xxx: 128-target add-on license
(maximum: 256 targets by one MergePoint 5200 appliance)
• User interfaces:- Web-based interface- CLI based on SMASH CLP
© 2006 AVOCENT CORPORATION
DSView® 3DSView® 3
Enterprise Management Software Solution
© 2006 AVOCENT CORPORATION
Enterprise Management Solution Enterprise Management Solution
DSView Software provides secure browser control to your local and remote IT assets and uses a fully redundant, replicating database system
© 2006 AVOCENT CORPORATION
DSView 3 NavigationDSView 3 Navigation
© 2006 AVOCENT CORPORATION
OS supportOS support
(x86) Enterprise Server 8 and 9WS v3, AS v3, ES v3; kernel 2.4.21
© 2006 AVOCENT CORPORATION
RDP and VNC services addedRDP and VNC services added
• What is RDP?• Who uses it?• Why?
• What is VNC?• Who uses it?• Why?
• Why is this addition important to customers?– Answer- We combine their “in-band” methods with our “out-of-
band” management solutions to provide failover capabilities and central event logging
© 2006 AVOCENT CORPORATION
Failover to a “real” connectionFailover to a “real” connection
Only Avocent can do that today
© 2006 AVOCENT CORPORATION
Security – AES EncryptionSecurity – AES Encryption
AES Encryption
Only vendor to currently offer this option
© 2006 AVOCENT CORPORATION
Security - RSA SecurIDSecurity - RSA SecurID
• Two Factor Authentication– Something you know (PIN Number)– Something you have (number on token)
• Authenticators (Tokens)
– Authenticators Time Sync’d with RSA Server– Time on RSA Server is critical
• Passcode– PIN & Number on Authenticator– 2745 & 79249134 = PASSCODE
Only vendor to currently offer this option
© 2006 AVOCENT CORPORATION
DSView 3 AdvantageDSView 3 Advantage• Consolidated access with single sign-on:
– Central management of different HW and OS• Easy and flexibly to use:
– Browser based– Customizable user interface– Scalable video
• Safe, complies with your existing security infrastructure:– authentication by LDAP, NT, AD, TACACS+, RADIUS– selectable encryptions (DES, Triple DES, 128-bit,) AES, RSA– Redundancy/Failover– Detailed audit log and reporting interface– Virtual Media helps to avoid viruses or unwanted SW loaded onto remote servers– Moderated connection scheme
• Saves valuable cost and time by rich functionality & connectivity:– Scheduled tasks– Simultaneous flash update– Auto discovery of appliances– Installation wizards– Virtual Media– Event notification
© 2006 AVOCENT CORPORATION