Securing The Ds5000 Storage Subsystem Client Using Remote Management - IBM Midrange System DS4000 Series Hardware Manual
Midrange system storage ds4000/ds5000 series
Hide thumbs
Also See for Midrange System DS4000 Series:
- Hardware maintenance manual (184 pages) ,
- Installation and user manual (84 pages) ,
- Planning and installation manual (44 pages)
Table of Contents
Advertisement
11.Extract the applicable SMCli commands in the configuration script file that you saved in
7.5.4, "Upgrading the controller firmware" on page 390 to recreate the FlashCopy images,
VolumeCopy images, remote mirror relationships, and host-to-LUNs map definitions, as
required.
12.Make sure that the enclosure IDs in each drive loop/channel contain a unique first-position
digit (x1). In addition, if the drive expansion enclosures are re-cabled behind the new
storage subsystem controller enclosure, modify the second-position digit (x10) so that they
have the same second-position digit for all the drive expansion enclosures in a drive
channel/loop.
13.Update the switch zoning definitions and any applications that rely on the storage
subsystem worldwide names to use the new storage subsystem worldwide names.
7.6 Securing the DS5000 storage subsystem client using
remote management
The Remote Services feature of Microsoft Windows XP allows users of the DS5000 storage
subsystem to remotely access the storage subsystem's client, profile, information, and logs
through a Virtual Private Network (VPN) connection and Microsoft's Remote Desktop (RDP)
function.
Remote access of the client workstation has some big advantages. It allows you to configure
the DS5000 storage subsystem without having to be physically present at the client
workstation. This will allow you to be more responsive to your storage environment at any
time and from any place. However, using a secure connection is very important. If
unauthorized users are able to gain access to your internal client workstation, they can launch
the Storage Manager client and gain access to any of the DS5000 storage subsystem's
configuration information. Also, if you do not have a password set, they can even modify the
configuration or potentially compromise data.
Note: The IBM System Storage DS Storage Manager client allows you to set a password
to prevent unauthorized users from making configuration changes. However, the password
does not prevent an unauthorized user from viewing the Storage Manager client if they can
gain access to your client workstation.
Securing your internal Storage Manager Client workstation, while allowing authorized users
remote access, can be best achieved by implementing the following:
Virtual Private Network (VPN) connection: Permits only authorized users access to your
internal network.
Remote Desktop Users/Passwords: Permits only authorized users to access your Storage
Manager Client workstation.
"Dual-homed" Storage Manager Client workstation:
– One network card for the DS5000 Management LAN
– One network card for the customer WAN
– Physically separates the DS5000 management network from the rest of the enterprise
network
Storage Manager Client Password: Permits only authorized users to make configuration
changes to the DS5000 storage subsystem through the Storage Manager Client.
394
IBM Midrange System Storage Hardware Guide
Advertisement
Table of Contents
