IBM TS4500, Введение и руководство по планированию

Страница: 76 / 218

All library communication requires explicit support by the library firmware that is
running in the library control system. The library firmware does not provide
capability for any of the following functions:
v
Answering an incoming call to the modem.
v
Communications between the Ethernet port and the modem port.
v
Communications between the Ethernet port and the TS4500 management GUI.
v
Communications between the TS4500 management GUI and the modem port.
v
Accessing data from tape cartridges through the Library/Drive Interface.
v
Sending or receiving data from tape cartridges through any port.
Security concerns when you use the TS4500 management GUI
The TS4500 tape library has remote support security through a system console
when you use the management GUI.
The management GUI does not allow any access to customer data, and it does not
allow FTP or TELNET type operations. It provides those functions that are allowed
coded in the library firmware. The only files that it can offload are library logs,
drive logs, and certain usage and error statistics files. It cannot be used to read or
write a customer cartridge or otherwise access customer data.
You can use the management GUI to set up an administrator password. No-one
without the password can use the management GUI to do anything to the library.
The management GUI also provides several levels of access through various preset
roles.
For more information, see the IBM TS4500 customer online documentation in the
IBM Knowledge Center.
The following list presents potential security concerns when you are using the
management GUI:
v
A Management GUI user might move a cartridge from one location to another
within the library. This change in position might confuse a host application, or
make the cartridge unavailable by moving it to a different partition.
v
A user might reconfigure the library and possibly cause problems at the hosts
because of changes in partitioning or device IDs.
v
A remote user might update the library or drive firmware. However, since the
library and drives ignore any firmware they do not recognize, the only exposure
is to loading older firmware.
These security concerns can be addressed by using the password, user role, and
authentication features that are provided by the management GUI, and also by
enabling SNMP audit logging. When SNMP audit logging is enabled, the library
sends notifications when certain events occur in the library.
Alerts and logging
The TS4500 tape library sends alerts about the library and attached tape drives,
and offers audit-logging to track user actions.
TapeAlert support
The TS4500 tape library is compatible with TapeAlert technology, which provides
error and diagnostic information about the drives and the library to the host
application.
58
IBM TS4500: Introduction and Planning Guide