Ignite Server Implementation over Secure Shell Bundle

[Xavier Gutierrez_2]

Hi everyone.

I would like to know if any of you has faced this already.
We have some servers on our DMZ that we wanted to backup to the Ignite Server on the production LAN.
The problem is that the ports for NFS are closed and the r disabled.

Is there any workaround for this using SSH bundle?

Thanks a lot in advance,

Javier.

[harry d brown jr]

Is there any workaround for this using SSH bundle?

Yes, local tape drives.

live free or die
harry d brown jr

[Steven E. Protter]

Ignite has not been engineered as of my last check to work with ssh. It needs to use NFS and in some cases the r-protocols.

I have an enhancement request into HP for this change. You should contact HP and ask them to make this change as well.

Because of the current implementation putting an Ignite Server in a DMZ is a very tricky proposition.

SEP

[Xavier Gutierrez_2]

Yes, we do have tape drives but we would like to copy to the ignite server which is in a safe room, different building.

We do not want to setup an ignite server in the DMZ as it would be of no use after being online for 5 minutes (so f'kin open to attacks)

BTW, how can I get rid of the r-suite for ignite backups? That would be a lot for the moment...

[Steven E. Protter]

If the only kind of Ignite backups you do is local tape, you can get rid of the r-protocols.

If you try and boot a client of an Ignite Server, this pushes the initial boot image through tftp and then uses NFS to load the image. You might under that circumstance be able to disable the r-protocols on the server.

However I tried this very thing and had troubles in the Ignite 3.x days and had to re-enable the r-protocols. Its worth a try but I know of no comprehensive ssh support and I use the product pretty extensively.

Finally if you want to use the Ignite server to boot the client and dump it into install mode, the r-protocols are required.

Ignite is a wonderful product but the lack of ssh support can be difficult.

Seriously, the best thing you can do is what I do. I contact HP regularly and ask for this feature. If enough customers want it, eventually we'll get it.

Secure Shell support and Linux backup and images would make Ignite a perfect product in my opinion.

SEP

[Xavier Gutierrez_2]

Steve,

I totally agree it is a must. My company will be moving soon to SSH and deprecate the use of telnet, ftp, NFS...

Also, we have some linux servers that should be able to do make_net_recovery as well...

Is there any URL where I can submit a request for such an enhancement?

Thanks in advance,

Javier.

[Jannik]

You should be able to forward specific ports with ssh look at the -L option in the man pages for ssh it looks something like this:
ssh -L port:host:hostport ... etc.

[Xavier Gutierrez_2]

Jannik,

Well, I would need to have running RPC services on the DMZ servers for the NFS stuff to run...

Would it be for connecting two secure, remote sites your solution would be great. But I do not want to have those services running on the DMZ...


Cheers,

Javier.

[Xavier Gutierrez_2]

We'll see with newer Ignite-Ux versions...