SSH to ALOM instead of telnet?

I'm pretty new to admining sun boxes and due to new requirements I needed to learn all about ALOM and the net mgmt port. I got the port set up and it works via telnet with no problem. ALOM and I are good friends now.

Well, what I've come to find is that in ALOM v1.2 (the documentation I found initially, which I thought to be the most recent) there was the ability SSH to the net mgmt port, but in the version on the box I've been playing with (v1.3) and in v1.5 (from what I've found on the web), the "if_connection" "ssh-keygen" and "restartssh" or anything at all related to ssh isn't available. I've searched google, read every dang thing that refered to ALOM here, searched and read just about every doc that I could find in general. What happened to the ability to SSH to the net mgmt port in later versions of ALOM? Is it even possible to set it up?

Now, some of you are going to say "who cares if you can ssh, the port should never be sitting on a network that can be touched, snooped, scanned, looked at funny, seen or even spoken of"

Well due to the nature of my business, the team I've joined, places machines within customer networks with a hardened and stripped down image of Solaris 8. They are basically appliances once they are deployed, however due to the lack of "hands and eyes" support in one particular instance (and possibly future instances), I need to be able to remotely bounce/poweron/poweroff some machines (V210s specifically). I do NOT have, nor do I WANT access on the inside of the customer's network. I can admin my box just fine without ever needing to do anything on the customer's network.

Any insight would be greatly appreciated. It just doesn't make sense to me that ssh wouldn't be available, but telnet is.

Thanks

[1803 byte] By [arghm8y] at [2007-11-26 8:54:01]
# 1
[content deleted]Message was edited by: wsanders
wsanders at 2007-7-6 22:49:19 > top of Java-index,Sun Hardware,Servers - General Discussion...
# 2
SSH is supported on the X-series IIRC however - I don't have any available to check.
wsanders at 2007-7-6 22:49:19 > top of Java-index,Sun Hardware,Servers - General Discussion...
# 3
SSH is available in V1.6 of the ALOM.For the V210 that is available here: http://www.sun.com/servers/alom.html
BrianKing at 2007-7-6 22:49:19 > top of Java-index,Sun Hardware,Servers - General Discussion...
# 4

> SSH is available in V1.6 of the ALOM.

>

> For the V210 that is available here:

> http://www.sun.com/servers/alom.html

i have had the same problem [there is no if_connection option in sc]. but when i attempted to update the ALOM to version 1.6 [as suggested], the README file stated NOT to attempt via serial. what other way is there to accomplish an update beside serial or SSH [since ssh is not enabled and the only way i can currently login is via serial].

can someone direct me to an answer, or more detailed documentation on the flashupdate of ALOM?

null

jevin at 2007-7-6 22:49:19 > top of Java-index,Sun Hardware,Servers - General Discussion...
# 5
Hello Jevin,How about Installing the ALOM Firmware From the Solaris OS ? http://www.sun.com/products-n-solutions/hardware/docs/html/819-2447-14/README_O ther.html#pgfId-1000584Michael
MAALATFT at 2007-7-6 22:49:19 > top of Java-index,Sun Hardware,Servers - General Discussion...
# 6

> Hello Jevin,

>

> How about Installing the ALOM Firmware From the

> Solaris OS ?

>

> http://www.sun.com/products-n-solutions/hardware/docs/

> html/819-2447-14/README_Other.html#pgfId-1000584

>

> Michael

yes i understand that i have to update ALOM... but somehow ssh is not working. how can i get ssh to work? [i've tried svcadm enable svc:/network/ssh:default but it still doesn't work]. and i cannot update alom via serial

jevin at 2007-7-6 22:49:19 > top of Java-index,Sun Hardware,Servers - General Discussion...
# 7
Hello,how do you enter svcadm enable svc:/network/ssh:default without being connected/logged-in (svcadm is a Solaris 10 command! ) to the system ?Michael
MAALATFT at 2007-7-6 22:49:20 > top of Java-index,Sun Hardware,Servers - General Discussion...
# 8
right now i can only log in via serial/console NOT ssh. i want to get ssh working.
jevin at 2007-7-6 22:49:20 > top of Java-index,Sun Hardware,Servers - General Discussion...
# 9

Hello Jervin,

this thread is about using SSH to access the SC.

Usually the network management port of the SC is attached to a separate network, therefore using telnet isn't a security issue in this case.

Configuration of SSH is off-topic for these hardware forums.

Sorry for the confusion.

Michael

MAALATFT at 2007-7-6 22:49:20 > top of Java-index,Sun Hardware,Servers - General Discussion...
# 10
sorry for posting off-topic. my problems were resolved.
jevin at 2007-7-6 22:49:20 > top of Java-index,Sun Hardware,Servers - General Discussion...
# 11
To summarize - you need to rerun setupsc to enable SSH. Enabling SSH does not seem to be described in the documentation.You will be prompted as follows (in addition to all the rest of the stuff):Should the SC interface connection type be set [telnet]? ssh
wsanders at 2007-7-6 22:49:20 > top of Java-index,Sun Hardware,Servers - General Discussion...