Remote Access Security - IBM System Storage DS3500 Introduction And Implementation Manual

7914RSM.fm
Figure 16-31 RSM main menu: Configured
Note: If you decide to install the RSM for Storage software on another server, you will need
to contact IBM Service to obtain a new activation key for the new server.

16.2.6 Remote access security

This section will cover how to secure your IBM System Storage DS subsystem from
unauthorized access.
SSH connectivity
In the RSM for Storage Remote Access window, click Enable Remote Access. This will
reconfigure the RSM for Storage internal firewall to allow connections through SSH port 22.
Verify connectivity in the following sequence:
1. From inside your network, open an SSH client and connect to the RSM for Storage system
on port 22. (Remember, if you perform these connectivity checks over several days, that
the RSM for Storage Remote Access control has a timeout that might need to be reset.)
Verify that you are able to obtain a login prompt from the RSM for Storage system.
2. From outside your network, open an SSH client and connect to your external IP address
port that has been assigned (port mapped) to the RSM for Storage system.
You should be connected to the RSM for Storage system and receive a login prompt.
Note: You will not be able to complete the login. Authentication requires a special tool
only available to IBM Remote Support.
If an authentication process has been put in place by your firewall administrator, verify that
the user ID and password for the external firewall is specified in the RSM for Storage
Connections configuration.
3. Verify that the SSH connection is correctly configured on the Connections Configuration
page. This information will be encrypted and sent with each alert to IBM.
524
IBM System Storage DS3500: Introduction and Implementation Guide
Draft Document for Review March 28, 2011 12:24 pm