Remote Administration on HP Unix Server

[Jacky Wong_1]

Dear All,
How can I setup remote dial in administration on Unix 10.0 server. Any information for it. And, if I want to use telnet through internet. What should I do?
Many thanks for your help!

[ramesh_6]

Hi Jacky,

If you want to do remote administration then you need to have the following

1) You server should be in the public network having a valid ip given by internic.

2) Since your server is going to be in public network you need to have proper security mechanisms in place to deny the breezy hackers any information.

3) You are taking a risk if you are connecting your server through telnet via the internet becos telnet sends information in cleartext including your username and password. So there are many sniffer programs which can catch your telnet information and use them for unnecessary purposes. so you should send the information in an encryypted form. For that you should use Secure Shell which uses the RAS and DES based key authentication and encryption mechanism.


Hope this helps

Regds
Ramesh

[Patrick Wallek]

If I were going to have a machine that were accessible via the Internet, then I would make sure it is locked down VERY tight.

Instead of telnet, I'd consider useing ssh (secure shell) for access. If you use telnet, you will be sending a clear text password over the internet.

If it is on the internet, I would also consider making it a Bastion host.

See here for info. on setting up a Bastion hosts:

HP-UX 10.x
http://us-support.external.hp.com/cki/bin/doc.pl/sid=8bccfe1f194f051234/screen=ckiDisplayDocument?docId=200000058036740

HP-UX 11.x
http://us-support.external.hp.com/cki/bin/doc.pl/sid=8bccfe1f194f051234/screen=ckiDisplayDocument?docId=200000058036742

Your most secure method of access would definitely be dial-up. Attach the modem to the machine, and set it up. You can usually do this pretty easily through SAM.

[Craig Falls]

Jacky,

1) For the remote dial in - you can use sam to add a modem and start a getty on that specific port and set the modem to auto answer. With a phone line you have remote access - but a serial link to the platform - i.e you couldn't run any GUI's. However you could set up ppp to run accross this interface.

2) As for a telnet to/from the internet - as long as there is connectivity, i.e. you company/workplace has a connection to the internet and address are either translated (eg NAT) or your companies IP address range is a vaild range supplied (aquired from) internic. This requires fairly good security tho' as by default passwords on a telent connection are plaintext (within the packets).

c