Secure Access to Console Ports on Network Devices
If you're a network administrator, then you already know how unpredictable network equipment can be (especially when it's located at a remote site.) Most of the time, everything runs smoothly and the network purrs along without much help. But the minute that you decide to take a vacation or leave work early, boom, that's when a troublesome firewall or a misbehaving switch decides to take a powder and bring the entire network to its knees.
WTI console terminal servers provide the perfect tool for quick, secure, access to console ports on remote network devices. Install a WTI console server in your equipment rack, an in many cases, you can whip out your laptop or smart phone and fix that network problem without driving into the office on your day off; much less taking a long, expensive trip to a remote network installation.
WTI offers three console terminal server product lines; RJ45 Port Console Terminal Servers (TSM Series), DB9 Port Console Terminal Servers (RSM Series) and RJ45 Console Terminal Server + Power Control Hybrids:
Reliable, Secure Terminal Server Access to Console Ports on Remote Network Equipment
- Terminal Server Access to Console Ports via Network, Modem or Local Setup Port
- Secure Terminal Server Access to Command Functions on Remote Devices
- Embedded Validated FIPS 140-2 Cryptographic Module
- LDAP, Kerberos, RADIUS, TACACS+ Authentication
- User-Defined Alarms to Monitor Environmental Conditions and Network Events
- Alarm/Event Notification via SNMP Trap, Email, Text Message, SYSLOG
- Multi-Level Subscriber Directory Controls Port Access and Command Access
- Multiple Concurrent SSH Sessions
- Full MIB Support
- Supports Both IPv4 and IPv6
Ping Response Alarm
The Ping-no-Answer Alarm allows the Console Terminal Server to regularly ping selected network elements, and then generate an alarm if the selected device fails to respond to a ping command. This allows network administrators to keep a very close watch on network devices, and be automatically notified when a device ceases to respond to ping commands. The Console Terminal Server's Ping-no-Answer alarm allows administrators to select the number of failed responses that will generate an alarm, the amount of time that will elapse between each ping command, the type of action that will be performed when the alarm is triggered and many other parameters which allow you to set up the Ping-no-Answer alarm to fit the requirements of your specific application.
Remote Authentication
The Console Terminal Server includes several different authentication protocols that enable the unit to check to make certain that each user who attempts to log in to command mode, is indeed who they claim to be. In order to allow the Console Terminal Server to adapt to a variety of different authentication needs, the unit supports LDAP, Kerberos, RADIUS and TACACS+ authentication protocols. Each authentication protocol is individually configurable, offering the definition of different access rights and contact parameters that are specific to each protocol.
Three Separate Control Interfaces
In order to fit the needs of different applications, Console Terminal Server units feature three separate control interfaces: the Text (CLI) Interface, the Web Browser Interface and the PDA Interface. In the Text or Command Line Interface, operation and configuration commands are invoked using simple, ASCII text commands to select parameters or establish port connections. The Web Browser Interface is mainly designed for configuration and status review functions; parameters are selected from a series of user-friendly web based menus, and status information is displayed in graphic format. The PDA Interface allows the Console Terminal Server command mode to be accessed by PDA users, and is limited to displaying unit and port status.
Alarm and Event Logging
WTI Console Terminal Server products include user-configurable logging functions, which can create a record of user command activity, alarm events and temperature trends. The Audit Log can be deployed to create a record of user command activity, including port connections, configuration changes and login/logout activity. The Alarm Log provides a record of the time, date and cause that generated each user defined event alarm and environmental alarm. The Temperature Log creates a record of temperature trends as measured by the Console Terminal Server, each record includes the time, date and temperature reading, and when accessed via the Web Browser interface, temperature information can also be displayed in graphic format.
Invalid Access Attempt Monitoring
One of the most important factors in protecting the network security is the ability to know when an unauthorized user might be attempting to gain access. Once you know that somebody is trying to bypass security, this allows you take additional preventative measures to prevent them from succeeding. WTI Console Terminal Server products can help you to keep out hackers and unauthorized users by immediately notifying you when excessive invalid access attempts are detected. In addition to providing notification when someone is trying to hack their way in, the Invalid Access Alarm can also automatically lock the network port to discourage further attempts. Convenient, user-friendly configuration menus allow administrators to set the number of invalid attempts that will generate an alarm, select notification via SNMP Trap, email, text message and/or Syslog, and specify up to three users who will be notified if the alarm is triggered.
SNMP Compatibility with Full MIB Support
WTI Console Terminal Server products feature full MIB support, allowing network administrators to employ MIB objects to remotely invoke configuration functions, monitor Console Terminal Server status and create and manage user accounts. SNMP compatibility allows WTI Console Terminal Server products to send captured data, error messages and alarm notification via SNMP trap.
IP Address Filtering
IP Address filtering provides a simple yet effective means to protect sensitive console terminal server command functions from unauthorized users. The IP address filter allows network administrators to restrict command access to only a specific IP address or range of addresses, or to designate specific IP addresses or ranges of addresses that will not be allowed to access command functions at all … regardless of whether a valid password is entered or not. When used in conjunction with the other formidable security and authentication features provided by WTI console terminal server products, IP address filtering makes it nearly impossible for unauthorized users to gain access to command and control functions.
SSHv2 Encryption Ensures Secure Communication
WTI Console Terminal Server products go one step further to ensure that sensitive network elements are protected from unauthorized access. In addition to password protection, an IP Address Filter and powerful authentication features, WTI Console Access Servers also provide SSHv2 encryption to protect transmitted data from being read by hackers and other interlopers. SSHv2 encryption helps to ensure that even in the rare event that unauthorized outsiders manage to intercept data and commands being sent to and from the Console Terminal Server, data and commands will still be unreadable by anyone who doesn’t posses a valid SSH key. If desired, WTI Console Terminal Severs can also be configured to supply authorized users with a public SSH key, to provide quick, secure access to command functions using SSH protocol.
Supports Both IPv4 and IPv6
In order to prepare for the upcoming switchover to IPv6 protocol, all WTI Console Server Management Units now provide full support for both IPv4 and IPv6 (the intended successor to IPv4.) This helps to ensure that WTI Console Server Management Units purchased today will be fully compatible with the planned IPv6 internet environment, and will not be rendered obsolete when the IPv6 protocol eventually becomes the new worldwide standard for network communications.