Out-of-Band Management (OOBM): What is it and why do I need it?

Julkaistu 16/04/2020
Kirjoittajana Timeless Technology

What is Out-of-Band Management (OOBM)?

While In-Band Management is the ability to administer a network via the LAN, Out-of-Band Management is a solution that provides a secure dedicated alternate access method into an IT network infrastructure to administer connected devices and IT assets without using the corporate LAN.

Why do I need Out-of-Band Management?

The primary benefit of an out-of-band management interface is its availability when the network is down, a device is turned off, in sleep mode, hibernating, or otherwise inaccessible. OOBM can be used to remotely reboot devices that have crashed and manage powered-down devices. The core idea is to preserve 24/7 uptime of your network by ensuring you always have access to critical IT assets like routers, switches, firewalls, servers, power, storage, and telecom appliances that operate the organizations’ backbone communication framework.

When a Network Administrator needs to monitor, manage, troubleshoot, or re-boot critical IT assets, they will generally access the devices directly over an Ethernet network. However, when 24/7 uptime is expected this single point of access is not enough. When IT assets are in off-site locations, controlled server rooms, or the network administrator is in a different location, they need a secure way to remotely access the USB or RS232 console management port of every device on the network.

In today’s world, organizations find it impossible to work without access to their network computers and enterprise-wide systems. The ability to monitor and manage these networks and keep them up and running is pivotal to their business. The responsibility to ensure that organizations have faultless access to their systems is placed on Network Administrators. They must ensure that servers supplying mission-critical applications are functioning and that the entire network connecting the data to a multitude of users remains functional. When networks crash, so do productivity and profits. And, the longer a network is down, the greater the impact on the enterprise.

Is Out-of-Band Management a software or hardware solution?

Software management tools can be used for performance monitoring, and some remote troubleshooting but, they only work when the network is up. During system or network outages, a Console Server is a single hardware solution that provides secure OOBM to monitor IT assets and devices from multiple vendors. The Console Server gives administrators access to multiple USB or RS232 console ports from anywhere, anytime, and any platform, as if they were locally connected through a direct serial console port connection. They can be used to reconfigure, reboot, and reimage remotely across the internet or WANs. Disruption and downtime are minimized by providing better visibility of the physical environment and the physical status of equipment. This ensures business continuity through improved uptime and efficiencies.

What alternate access methods do Console Servers provide?

A Console Server will generally provide one, or more, of the following access methods.

Redundant copper and fiber Ethernet network access. Any dual combination of 10/100/1000Base-T Copper Ports and 100/1000Base-X SFP Fiber Ports can be used to meet unique network access requirements. This design provides users with a flexible, cost-effective solution to transmit data from mission-critical equipment over Copper or Fiber-based Ethernet networks.
Built-in high-speed 4G LTE with HSPA+, UMTS, EDGE, and GPRS/GSM fallback networks to protect against wired LAN failure. It can also be used to transmit serial data or establish a direct serial to serial peer connection, over cellular networks. This is ideal when devices are located where hardwired Ethernet connections are not available but cellular networks, with their affordable data packages, are accessible.
Built-in WiFi network access over dual-band radio antennas for optimal wireless performance, signal reliability, and range.
Integrated V.92 modem connection for a secure and reliable out-of-band connection over the POTS network.

For optimal uptime, it is best to choose a Console Server with multiple access methods, fail-over to OOBM, and fail-back to the primary network.

How secure is using a Console Server for Out-of-Band Management?

While device management through the out-of-band management connection can be done via a network connection, it is physically separate from the ”in-band” network connection that the system is serving. Unauthorized users do not have access to the out-of-band network channel because there is no connection to it from the regular network channel, making it very secure. It is best practice to choose a Console Server that offers high-level security features for secure access to critical network devices. Considerations include:

Strong authentication schemes such as RADIUS, TACACS+, LDAP, Kerberos, NIS, and RSA to comply with existing network security policies
Built-in usernames and passwords and support for encryption protocols such as SSH, SSL/TLS, IPSec VPN, SNMPv3, Telnet, and HTTPS for secure management sessions
Packet filtering to ensure the Console Server can be kept secure from unauthorized access
Support SLIP and PPP for remote user dial-in

What about the cost?

Using a Console Server for out-of-band management leads to cost reduction. Numerous studies can be found that show the average annual downtime cost to an organization can be more than $1 million. Depending on the size of your organization downtime cost can range anywhere from $10,000 to $5M per hour.

Console Servers maximize system administrators’ productivity. A single interface provides them with simultaneous connectivity to multiple appliances and system consoles from any location. Most Console Servers offer Port Buffers of varying sizes to ensure data from the attached devices is not lost. Without Port Buffers, any data sent from a device, while an administrator is not attached, is lost. With Port Buffers this data is captured and can be viewed later to aid in problem diagnosis. Cost savings come from:

The ability to continually support sales and payment transactions.
Saving administrators’ valuable time and costs.
Minimizing expensive training.
Reduced HR and travel costs.

Why Choose a Perle Console Server for Out-of-Band Management?

Up to 50 Console Management Ports that support RS232 RJ45 and USB 3.0 Interfaces
Dual 10/100/1000 Ethernet connection for always-on redundant copper and SFP fiber network access with automatic failover when a primary link goes down
Optionally integrated 4G LTE Cellular (with failback support), WiFi, or V.92 modem for multiple alternate access methods when the network is down
Built-in Centralized Management Software consolidates your network and IT infrastructure into a single application and provides secure reliable access and visibility during normal operations and critical network failures.
Support for all AAA security services used in corporate networks, including TACACS+, RADIUS, LDAP, Kerberos, NIS, and RSA. And, to further protect IDs and passwords from someone ’snooping’ on the network, SSH/SSL/TLS, IPSec VPN, SNMPv3, Telnet, and HTTPS secure management sessions are supported.
Straight cabling to Cisco switches, routers and firewalls save time and money during install.
Perle Console Servers are made from certified components with high MTBF rates that can withstand the harshest environments. An open-source platform and enterprise-grade security ensure you have the best value in one box. Also, we provide the best-in-class Lifetime Warranty.

What do users like about IOLAN SCG Console Servers for OOBM?

"It is so easy to mix and match the USB 3.0 and RS232 RJ45 interface modules to have the right ports I need to manage all of my equipment."

"Finally, a Console Server that allows me to use straight-through patch cables to Cisco equipment! No more adapters, dongles, or special cables cluttering up my racks."

"No matter where I install a Perle IOLAN, I know it will have the right AAA security and encryption protocols to meet the corporate compliance policies."

"I love the Front-Panel Display and Keyboard. With a quick IP address set-up, the unit is up and running. It is also a convenient way to monitor and trouble-shoot the RS232, USB, Ethernet and dual power supply activity."

Perle Systems – Tietoliikenne ja teollinen IoT

Perlellä on laaja valikoima tiedonsiirto, tietoliikenne ja teollinen Internet (IoT) tuotteita soveltuen organisaatioille, joiden on muodostettava luotettavat verkkoyhteydet useisiin paikkoihin, lähetettävä turvallisesti kriittistä ja arkaluontoista tietoa tai valvottava ja ohjattava verkossa olevia laitteita etänä.

Perle Systems on kasvattanut liiketoimintojaan vuodesta 1976 alkaen keskittymällä tutkimus- ja kehitysinvestoinneissa verkkolaitteiden, niiden ominaisuuksien ja toiminnallisuuden kehittämiseen ja siten vastaamaan eri toimialojen muuttuneita tarpeita. Perlen tuotteilla on korkeat MTBF-arvot ja ne on valmistettu luotettavista komponenteista, jotka kestävät ankaria ympäristöjä ja jotka toimivat saumattomasti yhteen verkkoarkkitehtuurin kanssa.

Perlen asiakkaiden joukossa on monia maailman tunnetuimpia nimiä kuten Siemens, Fujitsu, GE, Lockheed Martin, Ticketmaster, Kennedy Space Center, HP, Marriott International, Heinz, Tesco, Telefonica ja Orange.