HAO

[Nobody's Hero]

I was wondering if anyone has experience setting up an HAO station. I seem to be having some routing issues. I believe the firewall is configured correctly however I still can not telnet to rsr1 which is the HP server on the other side. Can anyone give input to this? Any special configuration other than the firewall side that might be causing a problem?

[John Poff]

Hi,

We've been running HAO for a couple of years and we've been fighting router issues almost the entire time. It took several months to get it working correctly, and then somewhere along the way something changed and it isn't working again. One of our guys has been working with our network guys and HP for some time now but they can't seem to get it all together.

I love having HAO when it works, but it seems to be a real bear to get the routing straight.

Good luck!

JP

[Nobody's Hero]

Very interesting. I have a routing issue also. We have never got it to work. If you have any ideas on how you got it to work at least on a temp basis. Please respond.

Thanks You

[Ian_43]

Hi Robert

Telnet to rsr1 (rsr1 I believe is the Remote Support Resource system in Americas.)
I can only speak for Europe systems, as they???re the ones I look after within HP.

Due to HP security policy HP never accepts a connect such as telnet or (SSH) from the HAO node to the RSR system within HP.

With respect to HAO Remote connectivity. The telnet or (SSH) connection should always originate from HP. To access your (the customers) network, HP invokes SSH from the RSR located on the HAO Isolated LAN to the HP Support Node via the ISDN link. This connect is authenticated by the HP Support Node. Network traffic passing over the ISDN link is authenticated using CHAP The Isolated LAN Router and the Support Node Router use CHAP authentication to ensure network traffic is authenticated at each end of the ISDN link. CHAP authentication is repeated at regular intervals during the session to ensure the authenticity of the HAO routers. Once the routers have initially authenticated each other via CHAP, the Support Node Router utilizes a dial-back feature to terminate the connection and dial-back the ISOLATED LAN ROUTER

The HP ISOLATED LAN ROUTER only accepts network traffic with a source address of a known RSR, and a destination address of a known HP Support Node. For a customer using the alternate e-mail path to HP, the ISOLATED LAN ROUTER also accepts SMTP (port 25) network traffic between the known RSRs.

Each piece of equipment needs to be configured the RSR (Remote Support Resource), ILR (Isolated LAN Router), SNR (Support Node Router) and the HAO Workstation. And the Customers Network/Firewall.

My advice is you need to speak to the team in the Americas that administer those system.
The formal way of getting any HAO issue resolved is to inform your Account manager that there are problems and he will be able to get the relevant resources to help you, I know who my counter parts are in the Americas but do not wish to give there names out here. Can I please ask you to go through the formal way and approach your account manager???.. BUT if you get no were or feel you need more Information please come back to me??? and I will be happy you help further.


Best Regards
Ian

Ian Robertson
HAO Technologist Administrator
MCSC Support Centre Europe
Hewlett-Packard