Remote Connectivity to OpenVMS Systems

[Martin P.J. Zinser]

Hello Mobeen,

how about two differnt ways to VPN in. E.g. one via a standard Internet connection (Cable modem, DSL etc. via a normal ISP) secured by a biometric reader or keyring FOB, the other via a dedicated Dialup with pre-determined callback. Obviously this should end in differnt routers (and preferably in different, but interconnected datacenters as well).

Greetings, Martin

P.S. I've seen and spoken with the Consoleworks people at the bootcamp. Their solution looks pretty good as a replacement for the CA stuff.

http://www.tditx.com/ for details.

[Mobeen_1]

Jim and Martin,
I am now decided that the alternate connectivity to my data centres would be using modems. What i plan to do is as follows

1. Identify one console system at each
data center (this system will in turn
be able to connect to all other VMS
systems at my data center)

2. Configure modem on the console system

3. From the remote sites (like India &
Europe), dial into the data centers in
US.

Now MCI has some products, i am not sure if this will provide what i am looking for. I will provide the link below to these products.

My question is

1. When i dial into my data centers from
Europe or India. will i be charged
ISD ?

Is there any other telecom operator who provides such services that you folks are aware of or are using?

I would appreciate if you could provide me with details on how you are doing this.

I am looking at "Dial Solo" and "Dial Office" from the below link

http://business.mci.com/small_business/internet/dial_office.jsp

regards
Mobeen

[Antoniov.]

Mobeen,
my experience on small business installation, for remote assistance is:
1) Main connection: the target host can access to internet via xDSL line and viceversa; need obviously one firewall and some security feature. This connection enable video terminal and file transfer.
2) Backup connection with modem; I wrote a simple script executor to make dial and open connection for video terminal, not for network; may do file transfer using ckermit.
As posted previous, modem connection sometimes is not stable but work fine as backup solution.

About your question:
1) Ok
2) Configure modem: I hint store a little software on remote host to configure modem, so if modem losts its internal data you are able to reconfigure.
3) Dial: for security reason I've installed a command to dial my center and then leave control; in this way I haven't to store the telephone number of every center and nobody can enter into host without authorization of my owner.
I work with DS10 that have 2 serial port: console and TTA0; i connected modem to TTA0 that's functionally as console.

Best Regards
Antonio Vigliotti

[Doug Graver]

Have had good results here using the inexpensive Lantronix EPS2 (www.lantronix.com) for remote access to the AlphaServer serial console port.

AlphaServer firmware settings must be as follows:

>>> SET COM1_BAUD 9600
>>> SET COM1_FLOW SOFTWARE
>>> SET COM1_MODEM OFF
>>> SET CONSOLE SERIAL
then power off/on the AlphaServer to apply the new settings.

Use the cable that comes with the EPS2 to connect port 2 of the EPS2 to the AlphaServer serial communications port 1. Reserve port 1 of the EPS2 for local management and port 1 is where EPS2 boot messages are sent.

Define the EPS2 serial port for remote mode.
Local_6>> DEF PORT 2 ACCESS REMOTE

Then you can telnet over your VPN to the IP of the EPS2, TCP port = 2002.

From there, you can do everything remotely: minimum boot, boot from CD, Ctrl-P to halt/crash, etc.

You can apply a connection password to the EPS2 for added security:
Local_6>> DEFINE SERVER INCOMING PASSWORD
Local_6>> DEFINE SERVER LOGIN PASSWORD secret
Local_6>> DEFINE PORTS ALL PASSWORD INCOMING ENABLED

Local_6>> DEFINE SERVER INACTIVITY TIMER 60
Local_6>> DEFINE PORTS ALL INACTIVITY LOGOUT ENABLED

[Mobeen_1]

Dough,
But i am looking for an alternative to VPN, in case the VPN is not available, how i can connect to my remote data centres ?

rgds
Mobeen

[Stanley F Quayle]

> But i am looking for an alternative to VPN, in case the VPN is not available, how i can connect to my remote data centres ?

Hook a modem to the Lantronix terminal server?

I have experience with DECserver 90M's. All of my console ports are accessible via both VPN and also modem.

[Doug Graver]

I agree. Both the DECserver 90M and the Lantronix EPS2 should handle modem control well, and they both also support LAT (extra $ for the EPS2). I have not tried the EPS2 with a modem.

The DECserver 90M is an excellent product that I know supports a dial-in modem properly, although it's significantly more expensive than the EPS2.

You would dial-in to the modem, and the 90M or EPS2 would give you a command prompt (with an optional login password for security) and you could telnet from there.

[Jim Strehlow]

For remote administration, for a monthly fee we are experimenting with WEBEX.
Using a web browser, we can
- initiate a support session
- e-mail or phone a customer
- the customer launches a browser of their choice and joins the support session
- either person may control the cursor on the customer's computer

I can run whatever software is on their workstation that can diagnose an OpenVMS or Windows or Unix or whatever server (or look at our company's software application running on the customer workstation.)

That might save you money on long distance support charges. You need to compare against what Webex charges.

Jim

[Lawrence Czlapinski]

1. The key is to have multiple paths to each data center. For a global situation you might have a combination of methods to get in.
2. Modem provides a backup to your VPN. I would strongly recommend a bank of modems path that rolls over (like the ISPs) rather than a single modem to your TNG Console would provide a backup. If you need to dial in because you can't get in through the VPN and your modem has a problem you're hosed.
We use modem to dial in to a Call Back Center that allows connections to our VMS network. We have a T1 line between 2 of our datacenters. We also can be routed through another datacenter if the T1 line fails.
We can then access any VMS host on that network. If we need to we connect to the host that has our CA Polycenter Console Manager.
For you, I would suggest having a US 800 number and an international 800 number (for those calls from outside the US).
3. Another backup method would be through the internet. If your Console Data Center has a VMS www server, you could have a serial line connection from that server to your Console host.

[Mobeen_1]

Folks,
I still have not found any cost effective solution to this. I have looked at many solutions but have not found one.

My Question Again :
-------------------
We are a global team (based in Europe, Asia and other places) trying to access servers in our data centers in US.

Currently we log into our local n/w's and use VPN services to connect to our data centers in US.

I am looking for an alternative solution without incuring any costs or atleast very little cost to connect to these data centers.

I am sure, this information may not be enough, but please ask me if you need any additional information. I would be glad to furnish the same.

Thanks for your time folks

rgds
Mobeen

[Antoniov.]

Mobeen,
you if are ready to modify software, I can send you my little solution but I guess you need change something.
I've installed onto my customer a little software; when my customer need my assistance, run this software. The command file read a .ini file then open a modem connection and dial my customer care telephone number while I opened another software onto my machine (connected to another modem).
Software is very secure because leave modem to not answer mode and need human operation (both on client machine and on server).
You can run terminal, activate file transfer and use many modem brands.
However modem connection sometimes can have trouble, it's not very quick and if you need long time connection may be expensive.

Cheers
Antonio Vigliotti

[Wim Van den Wyngaert]

Mobeen,

This is not a real solution to your problem but this is how I remotely manage my servers until I have remote access.

1) I installed HTTP server on some server nodes
2) I implemented a HTML page on which you can give nodename, user/password + a series of commands. The form is send to the http server that will use some kind of rsh to execute the command. The output is captured in a file and the http server will return the output in a page to the webbrowser.

Now how is it used ?
1) The operator finds a problem. He phones me.
2) I mail the command(s) I want to execute to him. He cuts and pastes the command in the webbrowser form and executes it on the node having the problem. He uses his own priviledged account.
3) The output of the command is shown in the webbrowser and the operator mails the contents back to me (file/send/page by e-mail).
4) Back to step 2.

This allows me to do most things from home. Even reboots. But not console interactions and not GUI's. I also made a button with about 10 commands to get a full system report (html file with example included).

Wim

[Ian Miller.]

wim - sounds a bit like what can be done with WBEM - some DCL command from a web interface are possible.

Here the general idea is that everything is accessable from our network (via firewalls, shh, telnet, whatever). so we access out network directly or via vpn then go from there.

[Wim Van den Wyngaert]

Ian,

Here too I will get remote access (could have said that in 2003 too, when the project started). It is however a nice failover when all other means no longer work. I once had to dictate commands to a French-only speaking person : that was the moment I implemented the web interface.

But if a system is blocked/crashed etc ... I must use my car.

Wim

[Lokesh_2]

Hi Mobeen,

You can put your query in Networking forum too. You may get useful inputs from there too.

Thanks & regards,
Lokesh

[Mobeen_1]

Antonio, Wim and Ian,
Thanks a lot for your suggestions. But still these don't help me any way. We have things like ControlIT from CA and if we would like to watch user's terminal or take over remote terminals we do that.

But the solution i am looking for is more than that and in our case calling the data centre staff and asking them to issue commands etc is ruled out :-(

Lokesh,
I did not really think about that...i will give it a try in NETWORKING arena...thanks

regards
Mobeen