System and method for consolidating, securing and automating out-of-band access to nodes in a data network
View Patent ↗A system and method for out-of-band network management is provided wherein one or more different management interfaces are converted into a common format management data. The system may encrypt the common format management data. The system may also authenticate each user that attempts to access the management interfaces.
1. An out-of-band network management apparatus for devices on a computer network employing data transmission interfaces for the devices to communicate substantive data on the network, the devices also having management systems to communicate management data associated with the devices, the management data being different from the substantive data, the apparatus comprising:
a plurality of network nodes on the computer network manageable through a dedicated management interface other than through the data transmission interfaces wherein the plurality of network nodes use at least a plurality of different types of management interfaces that communicate a plurality of different types of the management data over the dedicated management interface and not over the data transmission interfaces;
a management application executing on a computer system that receives the plurality of different types of the management data, converts the plurality of different types of management data into a common management data format and communicates that common management data format to a network management system; and
a web server application executing on the computer system that generates a graphical user interface based on the common management data format and a web-browser that permits a user to access each of the devices through the same management application using the common management data format, wherein the management application monitors and accesses said devices remotely to restore network connectivity when a network node of the plurality of network nodes fails.
2. The apparatus of claim 1 wherein the management application further comprises a module that converts one or more low-level protocols utilized by the management interfaces into one or more higher-level protocols suitable for transmission over the TCP/IP network.
3. The apparatus of claim 2 , wherein the low-level protocols include one or more of an RS-232 protocol, a keyboard video mouse protocol, an intelligent platform management interface protocol, an integrated lights out interface protocol, an advanced lights out management interface protocol and a Blade center management protocol.
4. The apparatus of claim 3 , wherein the network nodes include one or more of a serial console server, a keyboard video mouse switch, an intelligent platform management interface device, an integrated lights out interface device, an advanced lights out management interface device and a Blade center management module.
5. The apparatus of claim 1 wherein the management application further comprises a module that encrypts the common management data format to generate encrypted management data that is communicated to the network management system to prevent the common management data format from being intercepted when in transit.
6. The apparatus of claim 1 , wherein the management application further comprises a module that communicates with an enterprise authentication system in order to authenticate a user before giving them access to the management application and the management interfaces.
7. The apparatus of claim 6 , wherein the enterprise authentication system employs protocols comprising one of RADIUS, TACACS, SecureID, X509 certificates, Kerberos, NIS, Active Directory and LDAP.
8. The apparatus of claim 1 , wherein the management application further comprises an automation module that detects a pre-programmed event and executes pre-programmed action upon the detection of the pre-programmed event.