Out of Band remote management dial in access

I have a cisco 2821 router with a WIC-1AM card in it. The router recognizes it ( ie it shows up as an async interface).
Could someone please point me towards a configuration guide or example that would show me how to configure this for remote access?
The end goal of this is if the internet circuit goes down I can dial into the router to see if it is a router issue and make changes as necessary.
There will be a POTS line connected to the wic card and I have a phone number for the card.
Thank you
Lynne

Hi,
I hope this link helps you:
http://www.cisco.com/en/US/docs/ios/dial/configuration/guide/12_4/dia_12_4_book.html
Best Regards,
Federico.

Similar Messages

Cisco 7606 and out of band remote management

Hi
I have been trying to look for a document to confirm that Cisco 7606 support out of band remote management via Aux port. Can anyone please confirm whether 7606 support out of band remote management.
Regards

The 7606 with a sup will only have a console port and no aux port.
Yes the console port supports OOB management using an external modem.
Thanks, Mak

Nexus 5500 - inband via default vrf and out-of-band via management vrf

Nexus 5548 with no layer 3 module. Want to manage the device via 10.122.122.5 9 (inband) and 10.122.123.58 (out-of-band)
Currently i can get to the device using 10.122.123.58 via management vrf but can't get to 10.122.122.5 via default vrf.
A couple of questions please:
1) Is this design support? or do i need a layer 3 module + licensing to use the default vrf?
2) What does "pending" in the default vrf routing table indicate?
interface Vlan12
no shutdown
ip address 10.122.122.5/25
ip route 0.0.0.0/0 10.122.122.1
interface mgmt0
vrf member management
ip address 10.122.123.58/26
vrf context management
ip route 0.0.0.0/0 10.122.123.1
sh ip route vrf all
IP Route Table for VRF "default"
'*' denotes best ucast next-hop
'**' denotes best mcast next-hop
'[x/y]' denotes [preference/metric]
'%<string>' in via output denotes VRF <string>
0.0.0.0/0, ubest/mbest: 1/0, pending
*via 10.122.122.1, [1/0], 3w1d, static
10.122.122.0/25, ubest/mbest: 1/0, attached, pending
*via 10.122.122.5, Vlan12, [0/0], 3w1d, direct
10.122.122.5/32, ubest/mbest: 1/0, attached, pending
*via 10.122.122.5, Vlan12, [0/0], 3w1d, local
IP Route Table for VRF "management"
'*' denotes best ucast next-hop
'**' denotes best mcast next-hop
'[x/y]' denotes [preference/metric]
'%<string>' in via output denotes VRF <string>
0.0.0.0/0, ubest/mbest: 1/0
*via 10.122.123.1, [1/0], 3w1d, static
10.122.123.0/26, ubest/mbest: 1/0, attached
*via 10.122.123.58, mgmt0, [0/0], 3w1d, direct
10.122.123.58/32, ubest/mbest: 1/0, attached
*via 10.122.123.58, mgmt0, [0/0], 3w1d, local

Hi,
Yes, it is possible. When you login as admin and you want to get to another vdc, you just use this command:
switchto vdc
This will take to the that vdc. If you want to switch back to the admin vdc, you just type "switchback"
HTH

Remote Manage cant be accessed by Admin

I am running SLES 11 SP3 / OES11 SP2 and for some reason the admin account can no longer access the Remote Manager but the Root user can. I did an "id admin" and it says No such user.
I checked in Imanager and it shows that the admin account has LUM values. I used to be able to access it but not sure when it stopped working.
What could be wrong?
Sincerely,
Ken

Originally Posted by ab
Looking at this, combined especially with your feedback earlier that the
'id admin' command is now working, I'm guessing LUM is fine. Next is
probably to troubleshoot NRM specifically, which is not a specialty of mine.
Perhaps NRM uses PAM, in which case seeing your /etc/nsswitch.conf file
along with some details in /etc/pam.d could potentially help, but that's
just a guess.
Good luck.
If you find this post helpful and are logged into the web interface,
show your appreciation and click on the star below...
Is there a way to roll back updates? I did some updates on Sunday that may be making things worse. I used the Yast Online updater.
Assuming I can login to the server again is there a quick way to make a roll back?
Sincerely,
Ken

NAC in-band vs out-of-band bandwidth management

Hi,
I am new to NAC. Would you please give me hints about bandwidth/traffic policy/QoS management when using out-of-band deployment of NAC? Is it possible NAC to configure the switch port with the appropriate bandwidth limiting template when it recognizes a certain user identity?
Regards,
Mladen

Refer to NAC appliance configuration guide for more information
http://www.cisco.com/en/US/docs/security/nac/appliance/configuration_guide/413/cam/m_intro.html

Powershell generic session and import this session in Exchange remote management session c#

The situation :
I am trying to make an application (c#-asp.net) to manipulate user's on an exchange server. The application will be on a different server than the exchange's one. So, to manipulate the data, I am using an "Exchange remote management session" created
with c#. Exchange remote management session give access to simple powershell command like "New-Mailbox" and "Set-User" - This is good for simple task, but in my case, I have to do more complexe operations that will need some specific command
that is not included in the default command. To access this command, I have to use some specific module like "ActiveDirectory". It is simple ? Only use "Import-Module" ! Not really, like I said, the "Exchange remote management session"
is very limited with the command, and "Import-Module" is not allowed...
So what we can do ?
I read a lot about my problem, and the most "simple" (That I understand the theory) solution is something like :
Start with a generic PS session, import the AD module, then connect to an Exchange management session and do an Import-PSSession and use implicit remoting for the
Exchange management stuff.
Given that I am pretty new to manipulate the Powershell with c#, I have no idea how to use this awesome solution in my code. So I am asking your help.
Here's my current code :
// Prepare the credentials.
string runasUsername = @"MarioKart 8";
string runasPassword = "MarioKart";
SecureString ssRunasPassword = new SecureString();
foreach (char x in runasPassword)
ssRunasPassword.AppendChar(x);
PSCredential credentials =
new PSCredential(runasUsername, ssRunasPassword);
// Prepare the connection
var connInfo = new WSManConnectionInfo(
new Uri("MarioKart8Server"),
"http://schemas.microsoft.com/powershell/Microsoft.Exchange",
credentials);
connInfo.AuthenticationMechanism =
AuthenticationMechanism.Basic;
connInfo.SkipCACheck = true;
connInfo.SkipCNCheck = true;
// Create the runspace where the command will be executed
var runspace = RunspaceFactory.CreateRunspace(connInfo);
// create the PowerShell command
var command = new Command("New-Mailbox");
// Add the command to the runspace's pipeline
runspace.Open();
var pipeline = runspace.CreatePipeline();
pipeline.Commands.Add(command);
// Execute the command
var results = pipeline.Invoke();
if (results.Count > 0)
System.Diagnostics.Debug.WriteLine("SUCCESS");
else
System.Diagnostics.Debug.WriteLine("FAIL");
This code work great for simple task (like "New-Mailbox") ! But how can I create a "generic PS session" and then use this session in the "Exchange remote management session" ?

Hi Vincent,
Generally we can use the cmdlet "import-module" to import the AD module on DC (Domain Controller), and we can also create a exchange remote powershell session with the cmdlet new-pssession, for more detailed information to create exchange remote session,
please refer to this article:
Managing Exchange 2010 with Remote PowerShell
In addition, to invoke powershell cmdlet in C#, please also try to save all the cmdlets to a powershell script (.ps1 file), then we can add the powershell script to C# like:
Pipeline pipeline = runspace.CreatePipeline();
pipeline.Commands.AddScript(scriptText);
If I have any misunderstanding, please let me know.
Best Regards,
Anna Wang

Nexus 1010, out of band

We are installing Nexus 1010 using the topology 3 connection and we will configure VSB DCNM.
1st Question
Topology 3, use the interfaces 1 and 2 for traffic management vlan and I want to know if I can connect these interfaces to my segment from out of band or needs to go connected on the segment from server.
2nd Question
we are going to configure DCNM on Nexus 1010 which must have comunication with the management interfaces from the other nexus switch through of the network out of band. Management interfaces of VSMS should be on the same network OOB? or must be on another network?
Thanks in advance

Hi,
Yes, it is possible. When you login as admin and you want to get to another vdc, you just use this command:
switchto vdc
This will take to the that vdc. If you want to switch back to the admin vdc, you just type "switchback"
HTH

Remote out-of-band management for my me3400

Dear all , I need to solve a little anoying situation at work.
My me3400 that work as a big layer2 traffic conentrator for 5 500mbps radio links and is located very far from the head-end office.
Every time I need to make a change on the configuration I have to use telnet access through the same main traffic link ,(in-band-management).
It is really frustrating when you apply a wrong line and your management session goes down .... In my case I need to take the car and drive many kilometers to the site , connect to console port and rollback.
So ...Im thinking , one solution could be some kind of protocol converter ethernet-serial , so I can leave the device near my me3400 and connected to a different link of course.
I saw this :
http://www.perle.com/products/techspecs/IOLAN-SCS-diagrams.shtml
IOLAN solution seems to be good, is there any other way to achieve this ? Other idea ?
THX,
Leo.

Leo, ethernet-serial is a great solution and there are various ways of accessing your me3400 out-of-band.
As a Cisco dev partner, we(WTI) make a variety of OOB console servers with either dual ethernet(using maintenance or production network), built-in dial-up modem or 3g modem support that give you telnet, ssh or web access. There's no need to drive to the site as you will have multiple ways to access the console port even when production network is down.
Ethernet-Serial:
https://marketplace.cisco.com/catalog/products/1401
In some cases the rollback will also require a hard power reboot, which can be done with a console server + power reboot combo.
Console/Reboot Combo:
https://marketplace.cisco.com/catalog/products/1215
Hope that helps!
-Dustin

Out of band access of Cisco ASA5505

Hi Team, Can i access Cisco ASA 5505 Remotely Via Modem? l mean out of band management of Cisco ASA 5505? is that possible??

Hi,
Do you mean connecting a dial up modem directly to the ASA? If so this is not possible.
If you had a spare router however you could set up a terminal server for out of band management.
If say for example you lost IP connectivity to the ASA you could telnet to the terminal server. From this device you can then access the ASA via the console cable connected to this router.
http://www.cisco.com/en/US/tech/tk801/tk36/technologies_configuration_example09186a008014f8e7.shtml

Out of Band Dial Up... (Regarding Module Support)

Hi Friends,
Can I use the PVDM2-12DM module for Out of Band Dial Up management of CPE routers. Dialing to remote connected modem with Call Back function.
Might sound stupid, but I would also like to know whether the same is supported on Japanese PSTN system.
Thanks,
~sultan

Out-of-band management requires the optional Cisco network management module.
Initiate XMODEM upgrade. Initiate an out-of-band firmware upgrade. The XMODEM protocol is used to perform this upgrade

Out-of-band management using WAC-AM-1 card

HI
I am trying to configure cisco 2811 router which has WIC-AM-1 card installed. I want to connect and configure this router using PSTN line terminated onto router. I am looking for only remote management and not backup solutuon. Please help.
Amol

This is what we use. We have a ACS server that hands out our dialback number per user or if it can't contact the TACACS server it will use the local username/password. Works like a champ. It will give you a 192.168.51.x address you telnet to 192.168.51.1. We also have 2 octopus cable to reverse telent to other devices.
aaa group server tacacs+ TACACSServers
server 10.x.x.x !
aaa authentication login default local-case
aaa authentication login RemoteAdmin group TACACSServers local-case
aaa authentication enable default enable group TACACSServers
aaa authentication ppp RemoteAdmin group TACACSServers local
aaa authentication dot1x default group RadiusServers
aaa authorization config-commands
aaa authorization exec RemoteAdmin group TACACSServers local
aaa authorization commands 1 RemoteAdmin group TACACSServers local
aaa authorization commands 15 RemoteAdmin group TACACSServers local
aaa authorization network RemoteAdmin group TACACSServers local
aaa accounting exec default start-stop group TACACSServers
aaa accounting exec RemoteAdmin start-stop group TACACSServers
aaa accounting commands 1 default stop-only group TACACSServers
aaa accounting commands 1 RemoteAdmin stop-only group TACACSServers
aaa accounting commands 15 default stop-only group TACACSServers
aaa accounting commands 15 RemoteAdmin stop-only group TACACSServers
aaa accounting network default start-stop group tacacs+
aaa accounting network RemoteAdmin start-stop group TACACSServers
aaa accounting connection default start-stop group TACACSServers
aaa accounting connection RemoteAdmin start-stop group TACACSServers
aaa accounting system default start-stop group TACACSServers
ip dhcp excluded-address 192.168.51.1
ip dhcp pool RemoteAdmin
network 192.168.51.0 255.255.255.0
ip host CON1 2033 223.223.223.1
ip host CON2 2034 223.223.223.1
ip host CON3 2035 223.223.223.1
ip host CON4 2036 223.223.223.1
ip host CON5 2037 223.223.223.1
ip host CON6 2038 223.223.223.1
ip host CON7 2039 223.223.223.1
ip host CON8 2040 223.223.223.1
username mikedesk callback-dialstring 1xxxxxxxxxx password 7 blah
interface Loopback192
ip address 192.168.51.1 255.255.255.0
interface Loopback223
ip address 223.223.223.1 255.255.255.255
interface Async1
ip unnumbered Loopback192
no ip redirects
no ip unreachables
no ip proxy-arp
encapsulation ppp
dialer in-band
dialer callback-secure
dialer-group 1
async mode dedicated
peer default ip address dhcp-pool RemoteAdmin
ppp callback accept
ppp authentication chap callin RemoteAdmin
ppp authorization RemoteAdmin
ip tacacs source-interface FastEthernet0/0
ip radius source-interface FastEthernet0/0
dialer-list 1 protocol ip permit
tacacs-server host 10.x.x.x port 49 key xxx
tacacs-server directed-request
tacacs-server key xxx
line 1
exec-timeout 5 0
modem InOut
modem autoconfigure discovery
transport input telnet
transport output telnet
autoselect ppp
stopbits 1
speed 115200
flowcontrol hardware
line 33 48
transport input telnet
line aux 0
line vty 0 4
password xxx
authorization commands 1 RemoteAdmin
authorization commands 15 RemoteAdmin
authorization exec RemoteAdmin
accounting connection RemoteAdmin
accounting commands 1 RemoteAdmin
accounting commands 15 RemoteAdmin
accounting exec RemoteAdmin
logging synchronous
login authentication RemoteAdmin
transport input telnet
line vty 5 15
authorization commands 1 RemoteAdmin
authorization commands 15 RemoteAdmin
authorization exec RemoteAdmin
accounting connection RemoteAdmin
accounting commands 1 RemoteAdmin
accounting commands 15 RemoteAdmin
accounting exec RemoteAdmin
logging synchronous
login authentication RemoteAdmin
transport input telnet

Out of Band Management aka Lights Out ala ALOM/LOM/iLO ?

I'm researching Xserve hardware for a project at work and am having a hard time finding out if these are real servers or not.
By real server I mean that an out of band lights out management facility is there. One which would allow you to connect via serial or network (preferred) to a service processor. The service processor would then let you power the machine on/off, change firmware settings to ie: boot from network on the next boot, or from disk 3 or what-have-you.
It should also give you access to the text console at a minimum once the os has loaded, and optionally let you see the gui (if there is any graphics adaptor installed).
Something akin to Sun's LOM or ALOM, or HP's iLO facilities.
If it isn't there, then this project isn't going to work with Xserves.

Like you, I'm very familiar with Sun various LOM implementations. The ALOM is, IMHO, by far the most useful one [RSC supports telnet not SSH; eLOM is IPMI 2.0 like Apple but very clunky to work with in the CLI].
The IPMI BMC present in the Xserve has a ton of capabilities, including Serial-over-LAN (SOL) for remote console access, but most features are (currently) unused. Apple ships the open-source ipmitool, as does Sun on S10 x64 systems, but no man pages (sourceforge has them); I think this is telling about how much effort has been put in to the Lights Out capability so far. I have been able to remotely query the Xserve LOM using ipmitool (from a Sun box) for various environmental conditions and to simply power-on/off the box. The GUI Server Manager client has equivalent functionality.
While I can enable the SOL capability with ipmitool, I don't (yet) know how to connect for serial console access. One other point of frustration so far has been that the RS-232 console port on the Xserve is only used for getty to listen on; thus if the box is not fully booted, the console port does no good whatsoever.
Don't get me wrong though; we are slowly replacing our Sun equipment with Xserve systems, as they offer much greater capability and easier management (in general) at a significantly lower cost than Sun. I just wish Apple would fix some of the basic Lights Out functionality that we have come to expect.
Xserve Quad Xeon Mac OS X (10.4.9)

Is it possible to have 2500 series management interface out of band of APs?

I currently have 2500 series WLCs. Our wireless network is completely separate from our internal network, keeping the WLC from talking to any internal servers. The company would like to start using AD(LDAP authentication) for end users while still keeping the APs on a completely separate network. Since the 2500 series does not support a "service port", Is there any way to move the management port out-of-band with no access to APs and just use the other ports for AP management?

I haven't had my morning coffee ... But let me give this a shot..
I am going to say no. The managment interface is needed for APs to join. If you isloate this interface no APs can join. Even if AP managers are used, the AP requries to touch the managment interface when booting up.
"Satisfaction does not come from knowing the solution, it comes from knowing why." - Rosalind Franklin
‎"I'm in a serious relationship with my Wi-Fi. You could say we have a connection."
"Im like bacon, I make your wireless better"

C220M3 Out of Band Managment

I am trying to use the out of band managment port (RJ45 port) on the back of the C220M3 server so we can connect it to an MRV. Does anyone know what the baude rate is? I would think 9600, N, 8,1 and tried several buade rates, but I could not get in. Does anyone have any ideas?

The Management interface is an OOB network interface, not a console port.
You might want to review the following documents for configuring & accessing the CIMC interface via GUI or CLI.
http://www.cisco.com/en/US/partner/products/ps10739/products_installation_and_configuration_guides_list.html
Regards,
Robert

Management Out of Band with ISe Appliance

Hello,
I want to know if it is possible to use port GigabitEthernet 1 as a managmenet port ( Management out of Band) .
I try to configure it.
When I do that I can ping it , but I cannot do an SSH to this Ip adresse.
The errror message is : "The remote system refused the connection."
Why doesn't it work ?
( Note that it works on an Prime appliance which is pretty the same.)
Here is my config
+++++++++++++++++
ZZSDC2ISE3/admin# sh run
Generating configuration...
hostname ZZSDC2ISE3
ip domain-name resource.local
interface GigabitEthernet 0
ip address 172.26.58.138 255.255.255.240
ipv6 address autoconfig
interface GigabitEthernet 1
ip address 172.26.200.62 255.255.255.0
ipv6 address autoconfig
+++++++++++++++++++++
Miche Misonne

Hello Michel
You cannot for the moment
Management is restricted to Gig0
You can refer to this document for better understanding
http://www.cisco.com/en/US/docs/security/ise/1.1.1/installation_guide/ise_app_e-ports.html
Tony

Out of Band remote management dial in access

Similar Messages

Maybe you are looking for