Secure Web Console Follies

[Jon Mattatall]

Hi there...

Just baffled...
I've got a server in another location that's gone down hard. No problem, that's why we
have a SWC at that location. At that end, the tech can fire the SWC up in his browser and
get to the box easily. I try, and after the login screen the thing hangs and eventually
comes back with "network error".

SWC - 10.xx.xx.xx,
My workstation - 10.yy.yy.yy, W2K, IE5.5
His workstation - 10.xx.zz.zz, win98, IE5.5

I have tried using a win 95 and 98 workstation, resetting the SWC, changing Java settings, etc.

As near as I and network can tell, there is activity on port 80 till login, when I send
telnet packets but get no response.

Does the server, which can only boot to single user (hpux -is) have to have the telnetd (inetd) running for this thing to work? It seems unlikely as they can reach the box at the server site.

My understanding is that the telnet connection is between my workstation and the SWC, not the server itself.

(UPDATE)At the remote site, they cannot login from any other subnet either. I suspect gateway/mask issues on the SWC, but they assure me the settings are correct.

Any suggestions, other than take some vacation and fly there?

Jon

[Sanjay_6]

Hi Jon,

If your routing is configured correctly, you should be able to access the SWC through your browser. Look at the route configured in your network.

The commmunication between SWC and your PC does not have anything to do with system in single user mode and whether it is running telnetd or not. This is system independent.

Try the ip address of the swc on the browser address,

http://docs.hp.com/hpux/onlinedocs/hw/swc/secureweb/fault.html

Hope this helps.

Regds

[Craig Rants]

Jon,
The box does not have to be up for your WC to work. That is the beauty of the web console. Thus you should not have to work about inetd or anything like that. What I would be concerned about is the network connection between you and your box. It is not supprising the guy on the LAN can do everything and you cannot. I would check for any firewall or router acl's that control http traffic.

Just my initial thoughts,
C

[Uday_S_Ankolekar]

Hello,

Can you ping to web console..??

Try traceroute to webconsole and check where packets are moving..

To do a http connection to you web console, The server status is absolutely not needed

[John Payne_2]

Also, if they can get into the SWC, have them read the networking info to you. They might get irritated, but if the gateway or netmask is wrong, it is a whole lot easier to fix over the phone than by going there.

IMHO, if they have admin rights and they were the ones who made the change and broke it, can you change them to operator rights? Saves you trouble later...

John

[Jon Mattatall]

Hmmm.....
The SWC now works, AFTER yet another reconfiguration. I have my suspicions about the original settings, but have other fish to fry right now....

The advice about operator vs administrator is a good point. I think I'll take it...

Jon