Labs / Under Load / Management & monitoring: LLDP, out of band, errors & SNMP

Lab 2 of 4 · Management & monitoring: LLDP, out of band, errors & SNMP

Out-of-band management: a way in that does not depend on the network

Lock yourself out with one wrong command, then get back in another way.

Open this lab Pro 5 steps

The idea

An admin laptop manages coreRouter, the Router between the office and an app server, over SSH. Manage a network over a separate one, so a mistake on the first does not lock you out: out of band management.

Three ways in, three ways to lose them
Three ways in, three ways to lose them

Steps

  1. In-band management

    Most networks are managed over themselves, and that has a weak spot. The admin manages coreRouter from the office, over the office's own cable. core is the admin's name for the router.

    adminLaptop:~# ssh core hostname
    adminLaptop:~# curl -s -m3 10.0.2.10
  2. One wrong command

    Changes are made over the network itself, so one mistake can cut the admin off. Over that session, the admin means to shut an unused card and shuts the office card, officeNetwork, instead.

    adminLaptop:~# ssh core ip link set officeNetwork down
    adminLaptop:~# ssh core hostname
    adminLaptop:~# curl -s -m3 10.0.2.10

Pro

3 more steps in the app

  1. Out of band, through the jump box
  2. Management on the management port only
  3. Locked out of every network
Get Pro

Learn it on real machines.

Every lab is a small network of real Linux machines in your browser. Start with a free account: Google or email, no card.

Open this lab