Obtaining and using one time passwords for dial – Avocent 5240 User Manual

Page 45

Advertising
background image

Chapter 2: Accessing the MergePoint 5224/5240 Appliance and Target Devices 33

To access a native management application (from an SP):

If the management application resides on an SP and is an executable that can be invoked on the
command line, do one of the following to access the SP’s console and launch the
management application:

To use ssh to get to the SP’s console to launch the management application, do the
following steps.

a.

Enter

ssh

with the

spconsole

command on the command line of your workstation in the

following format.

b.

Bring up the management application from the SP’s command line.

-or-

To use the Web Manager, perform the following steps:

a.

Log into the Web Manager on the MergePoint 5224/5240 SP manager.

b.

Select Access - Target Devices, and find the entry for the target device to access on
the screen.

c.

Select the SPConsole link.

d.

Log into the SP if prompted.

e.

Bring up the management application from the SP’s command line.

Obtaining and Using One Time Passwords for Dial

-

ins

This section is for users authorized to dial into the MergePoint 5224/5240 SP manager through an
external modem, PC modem or phone card when the one time password (OTP) authentication
method is configured for logins to that target device. With OTP authentication, you supply a
different password every time you dial-in, so no one who discovers the password used for one
session can use that password later to access your account. An OTP is a group of six English words
that are entered all on the same line at the prompt.

When you dial into the MergePoint 5224/5240 SP manager and enter a username, the system
provides a challenge string starting with otp-md5, which tells opiekey to use the MD5 algorithm,
followed by a sequence number and a key and waits for a response.The key includes the first two
letters of the hostname and a pseudo random number. In the following example, the sequence
number is 499 and the seed is on93564.

login: username

otp

-

md5 499 on93564

Response:

The user copies the challenge and pastes it into the command line on a non-networked workstation.
The opiekey program then prompts the user for the user’s secret pass phrase.

%

ssh

-

t allSPs:[email protected] spconsole

Advertising
This manual is related to the following products: