IBM Midrange System DS4000 Series Hardware Manual page 413

Figure 7-49 shows how to secure your environment for remote access. By introducing
multiple layers of security, you will be best protected from unauthorized access to your
DS5000 storage subsystem.
Figure 7-49 Securing remote access to the Storage Manager Client
In addition, Remote Desktop (RDP) is a high-encryption client that can run on any Windows
server. It uses RSA Security's RC4 cipher and it has key strengths of 40-, 56-, or 128-bit.
Hardware requirements
In order to use Remote Desktop for the secure remote management of the DS5000 storage
subsystem, you must have the following hardware/settings:
Windows XP Professional on the client workstation
Client workstation must be "dual-homed"
– One network card for the dedicated DS5000 Management LAN (can be VLAN)
– One network card for the customer WAN
Accounts that will allow authorized users to remote control the desktop
Client configured with Remote Desktop
Client configured for Remote Assistance
The client should have these DS5000 storage subsystem tools installed for management:
– Storage Manager Client (latest version)
– Storage Manager Utilities (latest version)
– Qlogic SANsurfer (latest version)
– PuTTy Version 0.6 or higher
Dedicated DS5000 Management LAN (or VLAN)
Authorized Remote User
Customer WAN
Dual-homed Storage Manager Client
Remote Desktop – Windows XP
Dedicated SAN Management LAN
Chapter 7. Advanced maintenance, troubleshooting, and diagnostics
395