Sun Microsystems StorEdge 6320 System 1.0, Справочное и сервисное руководство

Страница: 108 / 176

6-4 Sun StorEdge 6320 System 1.0 Reference and Service Manual • May 2003
6.3 Fault Isolation
Fault isolation in the Sun StorEdge 6320 system is normally done using first-fault
isolation techniques. For instance, if a disk drive failure occurs, a notification is
immediately sent. In some cases diagnostics need to be executed and the Storage
Automated Diagnostic Environment software provides diagnostics for the Sun
StorEdge 6020 arrays including Volume Verification and loopback tests.
The diagnostics for the Storage Service Processor are monitored using remote access
to the Storage Service Processor module.
6.4 Security
The Sun StorEdge Remote Response service provides remote monitoring and
serviceability. Sun provides as safe an environment as possible for its Sun StorEdge
Remote Response service through the use of security software installed on the
Storage Service Processor.
Sun uses the secure shell (
ssh
(1)) command for the connection between the dial-up
line and the Storage Service Processor, which adds encryption and some
authentication. After access to the Storage Service Processor is established using PPP
and CHAP, the OPIE authentication tool requires the user to call the SunService
Center and answer a unique login challenge.
The SunService SM center, after authenticating the caller, provides the authentication
key to allow connection to the Storage Service Processor. When you access the
Storage Service Processor through the Storage Automated Diagnostic Environment
GUI, the GUI software contains an authentication process requiring a login and
password that can be tuned for specific users to have specific capabilities. Secure
Socket Layer (SSL) encryption is employed between the Storage Service Processor
and the customer’s network connection to prevent snooping. Through the Storage
Automated Diagnostic Environment, port 7654 (exclusively managed by this
software environment) and port 7443 (secure shell) are used.
If you activate the Sun StorEdge Remote Response service and want to access the
Storage Service Processor through the local area network (LAN), you should
implement your standard security procedures for the creation of a private network
using modems that also has access into your LAN.
The following services are enabled on the Storage Service Processor:
■
tftp
(1)