Thu Nov 16 11:33:35 +07 2023

Using Out of Band connection to CSIM

Out of Band (OOB) can be used in a case of an incident where CSIM router or fireall is unresponsive and need a reboot (like the incident of November 11th, 2023). It allows to by-pass the router and the firewall and still gain access to CSIM network. 1) Connect to AIT VPN Download AIT VPN configuration from https://helpdesk.ait.ac.th/wp-content/uploads/sites/2/downloads/AIT_Net_vpn_ait_ac_th.ovpn Connect to AIT VPN with a command like (for Ubuntu): sudo openvpn --config AIT_Net_vpn_ait_ac_th.ovpn NOTE: You *must* use your *AIT* credentials to connect. More information about AIT VPN at https://helpdesk.ait.ac.th/services/ait-vpn/ 2) Connect to OOB device ssh -i <key_file> -p 2222 on@oob-ait.cs.ait.ac.th NOTE: You *must* authenticate with a key_file. NOTE: you *must* use port 2222. If you need more than a console access, for example if you need to access to the GUI of the firewall: sudo ssh -i <key_file> -p 2222 -L 443:firewall:443 on@oob-ait.cs.ait.ac.th VMware GUI/vmplayer needs port 443. Proxmox GUI needs port 8006. I don't *think* you can use CSIM VPN at this stage.

Posted by Olivier | Permanent link | File under: administration