DELL PowerFlex Rack Security Configuration ka PowerFlex 4.x
Tlhahisoleseding ya Sehlahiswa
Dell PowerFlex Rack e nang le PowerFlex 4.x ke sehlahisoa se shebaneng le ts'ireletso se etselitsoeng ho fa basebelisi mokhoa o sireletsehileng le o tšepahalang oa phepelo. Sehlahisoa se kenyelletsa likarolo tse kang
taolo ea tsamaiso, ts'ireletso ea marang-rang, le tšireletso ea stack ea tsamaiso ho netefatsa polokeho ea data le lisebelisoa. E boetse e kopanya theknoloji e tloaelehileng ea ts'ireletso 'me e fana ka tataiso e amanang le mekhoa e tobileng ea ho latela melao le litharollo tsa maru tse tsoetseng pele.
Lintlha, Litemoso, le Litemoso
- Hlokomela: Lintlha tsa bohlokoa ho u thusa ho sebelisa sehlahisoa sa hau hamolemo
- Tlhokomeliso: E bontša tšenyo e ka bang teng ho hardware kapa tahlehelo ea data mme e u bolella mokhoa oa ho qoba bothata
- Tlhokomeliso: E bontša monyetla oa tšenyo ea thepa, kotsi ea botho kapa lefu
Litaba
- Khaolo ea 1: Selelekela
- Khaolo ea 2: Histori ea ntlafatso
- Khaolo ea 3: Boitšoaro
- Khaolo ea 4: Mokhoa oa ho tsamaisa
- Khaolo ea 5: Lintlha tsa tšireletso
- Khaolo ea 6: Cloud Link Center server logs
- Khaolo ea 7: Tšireletso ea data
Litaelo tsa Tšebeliso ea Sehlahisoa
Mohlala oa ho Tsamaisa
Khaolo ea mohlala oa phepelo e fana ka tlhahisoleseling mabapi le mokhoa oa ho tsamaisa Dell PowerFlex Rack ka sehlahisoa sa PowerFlex 4.x. E kenyelletsa lintlha tse mabapi le likarolo tse fapaneng le mokhoa oa ho li tsamaisa. E boetse e fana ka tataiso mabapi le mokhoa oa ho sebelisa karohano ea mesebetsi le ho fokotsa ts'ebeliso ea mangolo a netefalitsoeng a arolelanoang.
Mehopolo ea Tšireletso
Khaolo ea menahano ea ts'ireletso e fana ka tlhahisoleseling mabapi le mokhoa oa ho netefatsa polokeho ea sehlahisoa. E kenyelletsa lintlha tse mabapi le taolo ea tsamaiso, ts'ireletso ea marang-rang, le tšireletso ea stack ea tsamaiso. E boetse e fana ka tataiso mabapi le mokhoa oa ho hapa lingoloa tsa liketsahalo ka sistimi ea tlhaiso-leseling le ts'ireletso ea liketsahalo (SIEM) le ho hlahloba litokelo tsohle le mesebetsi ea phetoho.
Tšireletso ea Boitsebiso
Khaolo ea ts'ireletso ea data e fana ka tlhahisoleseling mabapi le linotlolo tsa encryption le mokhoa oa ho netefatsa ts'ireletso ea data. E kenyelletsa tataiso mabapi le mokhoa oa ho laola linotlolo tsa encryption le ho li sireletsa khahlanong le phihlello e sa lumelloeng. Ka kakaretso, ke habohlokoa ho latela litaelo tse fanoeng ho Dell PowerFlex Rack e nang le PowerFlex 4.x Tataiso ea Tlhophiso ea Tšireletso ho netefatsa polokeho le ts'ireletso ea data le lisebelisoa tsa hau.
Lintlha, litemoso, le litemoso
- HLOKOMELA: TLHOKOMELISO e bontša lintlha tsa bohlokoa tse u thusang ho sebelisa sehlahisoa sa hau hamolemo.
- TLHOKOMELISO: TLHOKOMELISO e bonts'a tšenyo e ka bang teng ho Hardware kapa tahlehelo ea data mme e u bolella mokhoa oa ho qoba bothata.
- TLHOKOMELISO: TEMOSO e bontša monyetla oa tšenyo ea thepa, kotsi ea botho kapa lefu.
Selelekela
Tataiso ena e fana ka mekhoa e metle ea ts'ireletso ho matlafatsa ts'ireletso bakeng sa tikoloho ea rack PowerFlex. Bamameli ba reretsoeng tataiso ena ba kenyelletsa ba rerang, ba kenyang ts'ebetsong, ba tsamaisang kapa ba hlahlobang litaolo tsa ts'ireletso sebakeng sa rack sa PowerFlex. Bamameli ba ka sehloohong ke ba botekgeniki, empa tokomane e sebetsana le litlhoko tsa mefuta e mengata ea litsebi tsa lenaneo la ts'ireletso. U lokela ho ba le kutloisiso e utloahalang ea meralo ea rack ea PowerFlex, haholo-holo lisebelisoa tsa tsamaiso. Sheba Dell PowerFlex Rack e nang le PowerFlex 4.x Architecture Overview bakeng sa lintlha tse ling. Dell Technologies e fana ka thuso e 'ngoe e ka bang molemo ho thusa ka ts'ireletso kapa litaba tse amanang le melao ea tsamaiso, joalo ka
- Tataiso ea rack ea PowerFlex bakeng sa ho rarolla mathata a bahiri ba bangata
- Ts'ireletso ea likhokahano tsa taolo le karohano e ntlafalitsoeng ea mesebetsi, boitsebahatso, tumello, tlhahlobo le taolo ea phihlello.
- Ho kopanya theknoloji e tloaelehileng ea tšireletso le rack ea PowerFlex
- Tataiso e amanang le meralo le liphetho tse ikhethileng (bakeng sa mohlalaample, PCI, HIPAA, FISMA, joalo-joalo)
- Tataiso e amanang le tharollo ea maru e tsoetseng pele
Nalane ea ntlafatso
| Letsatsi | Tokomane tlhabollo | Tlhaloso ea liphetoho |
| Hlakubele 2023 | 1.2 | Lintlafatso tsa bohlophisi |
| Pherekhong 2023 | 1.1 | Lintlafatso tsa bohlophisi |
| Phato 2022 | 1.0 | Tokollo ea pele |
Boithorollo
- Boitsebiso bo bukeng ena bo fanoe ka “joalokaha bo le joalo.” Dell Technologies ha e fane ka boemedi kapa ditiisetso tsa mofuta ofe kapa ofe mabapi le tlhahisoleseding e leng kgatisong ena, mme ka ho qolleha ha e fane ka diwaranti kapa thekiso kapa ho itekanela ka sepheo se itseng.
- Likarolo tse ling tsa khoebo, lisebelisoa, kapa lisebelisoa li ka khetholloa tokomaneng ena ho hlalosa mokhoa oa liteko kapa mohopolo ka nepo. Boitsebahatso bo joalo ha bo reretsoe ho fana ka maikutlo a khothaletso kapa tumello ke Dell Technologies, ebile ha bo reretsoe ho fana ka maikutlo a hore mekhatlo, lisebelisoa kapa lisebelisoa ke tsona tse fumanehang hantle bakeng sa morero.
- Ha ho letho tokomaneng ena le lokelang ho nkoa e le ho hanana le litekanyetso le litataiso tse tlamang le tse tlamang ke melao kapa melao ea mekhatlo ea mmuso.
Mokhoa oa ho tsamaisa
- Tataiso ena e fana ka mekhoa e metle ea ts'ireletso ho matlafatsa ts'ireletso bakeng sa tikoloho ea rack PowerFlex.
- The Dell PowerFlex Rack e nang le PowerFlex 4.x Architecture Overview e hlalosa mokhoa oa kamehla oa phepelo le maemo a mang a thomello. Likhetho tsena tsa phepelo li ama boemo ba ts'ireletso bakeng sa rack ea PowerFlex mme haholoholo sebaka sa ts'ireletso sa taolo, moo litsamaiso tse ngata tsa ts'ireletso li kenang molemong oa ho romelloa tikolohong ea setsi sa hau sa data.
- Bakeng sa mohlala oa kamehla oa phepelo bakeng sa rack ea PowerFlex, moralo oa sistimi o nka hore o tla fana ka lits'ebeletso tsa ts'ireletso ea marang-rang bakeng sa ho sireletsa sebaka sa ts'ireletso sa taolo. Nahana ka ho kenya li-firewall moeling oa marang-rang a taolo ea rack ea PowerFlex ho fana ka litaolo tsena.
- Tataiso ena e fana ka litšupiso tsa tlhaiso-leseling e thusang mabapi le likhokahano tsa taolo ea marang-rang, likou le liprothokholo tse hlokahalang bakeng sa ts'ebetso ea tsamaiso le ea tsamaiso. Sebelisa lintlha tsena ho theha molao oa motheo oa firewall o ka sebelisoang ho fana ka taolo e hlokahalang ea phihlello ea marang-rang bakeng sa sebaka sa taolo.
Lintlha tsa ts'ireletso
Taolo ea tsamaiso
Dell Technologies e nka mehato e hlokolosi ea ho fetola li-password tsohle tsa batsamaisi ba kamehla mme e latela leano la ho theha li-password tse rarahaneng bakeng sa li-account tsohle tse laolang li-interfaces tsa taolo. Dell Technologies e sebelisa khetho e sireletsehileng haholoanyane ea ho boloka li-password ha ho khoneha. Ntle le ho fetola litlhophiso tsa kamehla tsa taolo ea phihlello, Dell Technologies e khothaletsa ho sebelisa mehato e latelang ea tšireletso, ha feela e sa hohlane le leano la ts'ireletso la mokhatlo oa hau.
- Sebelisa seva ea LDAP kapa netefatso ea Windows AD bakeng sa likarolo tsohle tsa rack tsa PowerFlex. Mehato ena ea ho hanyetsa e fokotsa litšokelo tse amanang le password ka maano a password le ho thusa tlhahlobo ea litokelo.
- Sebelisa likarolo tsa maemo a tlase bakeng sa likarolo tsohle tsa rack tsa PowerFlex.
- Sebelisa karohano ea mesebetsi ka hohle kamoo ho ka khonehang ha o tsamaisa likarolo.
- Fokotsa tšebeliso ea lintlha tse arolelanoang. Haholo-holo, fokotsa tšebeliso ea li-account tsa superuser tsa kamehla.
- Tšoara litlaleho tsohle tsa liketsahalo ka tsamaiso ea tlhahisoleseding ea ts'ireletso le tsamaiso ea liketsahalo (SIEM). Hlahloba mesebetsi eohle ea ho fetola litokelo le maemo, 'me u behe litlhokomeliso bakeng sa ketsahalo ena.
Tšireletso ea marang-rang
- Joalo ka libaka tse ling tsa marang-rang, rack ea PowerFlex e hloka ho sireletsoa litlhaselong tsa marang-rang tse kang spoofing, ho fofonela ha sephethephethe, le t.ampering. Likarolo tsohle tsa rack tsa PowerFlex li lokiselitsoe ho sebelisa li-interfaces tse sireletsehileng tsa tsamaiso tse netefalitsoeng le tse patiloeng. PowerFlex rack e netefatsa, e patala, 'me e arola sephethephethe ho tsamaiso, taolo le lifofane tsa data.
- Moralo oa kamehla oa rack oa PowerFlex o arola sephethephethe ka ho theha libaka tse ikhethileng tsa marang-rang bakeng sa taolo, data, VMware vSphere v Motion, bekapo, le merero e meng. Moralo oa marang-rang oa PowerFlex o kenyelletsa mekhoa e metle ea ts'ireletso ho tsoa ho baetsi ba likarolo bakeng sa likarolo tsa marang-rang tsa 'mele le tsa nnete.
- Haeba o hloka karohano ea marang-rang ka nqane ho li-VLAN, o ka hlophisa rack ea PowerFlex ho fana ka karohano e ntlafalitsoeng ea 'mele kapa e utloahalang ea libaka tsa marang-rang. Sehlahisoa se tloaelehileng se ka tšehetsa likhetho tse ling tsa tlhophiso, joalo ka manane a taolo ea phihlello ea marang-rang (ACLs) ho li-switches tsa Cisco Nexus kapa VMware ESXi e amohelang melao ea firewall. Likhetho tse ling tsa phetisetso li ka hloka lisebelisoa tse eketsehileng, software, kapa litokelo (joalo ka tharollo ea ecosystem ea balekane). Bakeng sa mohlalaample, le hoja e se karolo ea meralo e tloaelehileng ea lihlahisoa, theknoloji e lumellanang ea 'mele kapa ea sebele ea firewall e ka hlahisoa meeling ea bohlokoa ea marang-rang moo ho hlokahalang, ho finyella boemo bo hlokahalang ba tšireletso le taolo ea phihlello.
- Ikopanye le sehlopha sa akhaonto ea hau ea Dell Technologies ho ithuta haholoanyane ka likhetho tsa ho arola marang-rang le ts'ireletso.
Tsamaiso ea tšireletso ea stack
Ts'ireletso ea sistimi ea taolo e bohlokoa ts'ireletsong ea rack ea PowerFlex le likarolo tsa eona tse laoloang le matamo a lisebelisoa. Ntle le taolo ea netefatso, tumello le accounting (AAA), lintlha tse latelang ke lintlha tsa bohlokoa:
- Mahokelo a tsamaiso a tlameha ho ba le melaetsa ea libanner e tsebisang basebelisi ka molao ka leihlo, khaello ea litebello tsa lekunutu, le boikarabello ba sechaba le botlokotsebe bakeng sa boitšoaro bo lonya kapa bo kotsi, ho sa tsotelehe sepheo.
- Tlosa kapa u tima li-account tsa kamehla kapa tse tsebahalang.
- Beakanya lihokelo tsa taolo ho hloka li-password tse matla.
- Beakanya lihokelo tsa taolo ka nako e khuts'oane ea ho tima.
- Sebelisa bohloeki bo tloaelehileng ba ts'ebetso ho litsamaiso tse amohelang lits'ebetso tsa taolo. Bakeng sa mohlalaample, sebelisa lisebelisoa tse thibelang kokoana-hloko, mekhoa ea ho boloka, le tsamaiso ea ho pata.
VMware vSphere tikoloho VMware vCenter e sebelisa ho saena ha 'ngoe ho netefatsa mosebelisi ho ipapisitse le setho sa sehlopha sa mosebelisi. Seabo sa mosebedisi hodima ntho kapa
tumello ea lefats'e ea mosebelisi e etsa qeto ea hore na mosebelisi a ka etsa mesebetsi e meng ea VMware vSphere. Ho fumana lintlha tse ling, sheba lihlooho tse latelang:
- Litumello tsa vSphere le mesebetsi ea Tsamaiso ea Basebelisi
- Ho utloisisa Authorization ho vSphere
O ka kopanya VMware vCenter le Microsoft Active Directory bakeng sa boitsebiso bo bohareng le taolo ea phihlello.
PowerFlex Manager phihlello ea basebelisi ba lehae
Likarolo tsa basebelisi
- Likarolo tsa basebelisi li laola mesebetsi e ka etsoang ke mefuta e fapaneng ea basebelisi, ho latela mesebetsi eo ba e etsang ha ba sebelisa PowerFlex Manager.
- Likarolo tse ka abeloang basebelisi ba lehae le basebelisi ba LDAP lia tšoana. Mosebelisi e mong le e mong a ka abeloa karolo e le 'ngoe feela. Haeba mosebelisi oa LDAP a abetsoe ka kotloloho karolo ea mosebelisi le karolo ea sehlopha, mosebelisi oa LDAP o tla ba le tumello ea mesebetsi eo ka bobeli.
- HLOKOMELA: Litlhaloso tsa mosebelisi ha li tsoe liphetolelong tsa pejana tsa PowerFlex mme li tlameha ho hlophisoa hape.
Tafole e latelang e akaretsa mesebetsi e ka etsoang bakeng sa karolo e 'ngoe le e 'ngoe ea mosebedisi
| Karolo | Mesebetsi |
| Super User |
|
|
|
| Super User e ka etsa lits'ebetso tsohle tsa sistimi. |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| Tsamaiso ea Tsamaiso |
|
|
|
| Tsamaiso ea Tsamaiso e ka etsa lits'ebetso tsohle, ntle le taolo ea basebelisi le ts'ireletso. |
|
|
|
|
|
|
|
|
| Karolo | Mesebetsi |
|
|
| Sebaka sa polokelo Motsamaisi oa polokelo a ka etsa lits'ebetso tsohle tse amanang le polokelo ea pele ho kenyelletsa taolo ea likarolo tsa NAS e seng e ntse e seta le li-block system. Bakeng sa exampLe: theha bophahamo ba modumo, bopa file tsamaiso, laola file- li-quotes tsa basebelisi ba seva. HLOKOMELA: Ts'ebetso tse kang ho theha letamo la polokelo, theha file-server, 'me u kenye node ea NAS e ke ke ea etsoa ke Storage Admin, empa e ka etsoa ke karolo ea Lifecycle Admin. |
|
| Tsamaiso ea Lifecycle Mookameli oa Lifecycle a ka laola potoloho ea bophelo ea hardware le litsamaiso. |
|
| Motsamaisi oa Replication The Replication Manager ke karoloana ea karolo ea Storage Admin, bakeng sa mosebetsi ho litsamaiso tse seng li ntse li le teng bakeng sa ho seta le taolo ea ho pheta-pheta le linepe. |
|
| Motsamaisi oa Snapshot Snapshot Manager ke sehlopha se senyenyane sa Storage Admin, se sebetsa feela lits'ebetsong tse teng. Karolo ena e kenyelletsa lits'ebetso tsohle tse hlokahalang ho theha le ho laola linepe. |
|
| Tshireletso Admin Tsamaiso ea Ts'ireletso e laola taolo ea phihlello e thehiloeng ho karolo (RBAC), le mokhatlo oa basebelisi ba LDAP. E kenyelletsa likarolo tsohle tsa ts'ireletso ea sistimi. |
|
| Setsebi Mosebelisi enoa o lumelloa ho etsa mesebetsi eohle ea HW FRU ho sistimi. A ka boela a phetha litaelo tse amehang bakeng sa tlhokomelo e nepahetseng, joalo |
|
| Karolo | Mesebetsi |
| joalo ka ho kenya node mokhoeng oa tlhokomelo. | |
| Drive Replacer Ena ke karolo e nyane ea karolo ea Technician. Drive Replacer ke mosebelisi ea lumelletsoeng feela ho etsa lits'ebetso tse hlokahalang bakeng sa ho nchafatsa koloi. Bakeng sa mohlalaample: ts'ebetso ea potoloho ea bophelo sebakeng sa node, le ho ntša sesebelisoa sa block system. |
|
| Hlokomela Karolo ea Monitor e na le phihlello ea ho bala feela ho sistimi, ho kenyeletsoa topology, litemoso, liketsahalo, le metrics. |
|
| Tšehetso Karolo ea Ts'ehetso ke mofuta o khethehileng oa Tsamaiso ea Tsamaiso (mesebetsi eohle ntle le ts'ebetso ea ts'ebetso ea mosebelisi / ts'ireletso) e tla sebelisoa feela ke basebetsi ba ts'ehetso (CX) le bahlahisi. Karolo ena ea mosebelisi e na le phihlello ea lits'ebetso tse sa ngolisoang, tse ikhethileng le likhetho bakeng sa ts'ebetso e tloaelehileng, e hlokahalang feela bakeng sa merero ea ts'ehetso. HLOKOMELA: Karolo ena e khethehileng e lokela ho sebelisoa feela ka tšehetso. E bula litaelo tse khethehileng, hangata tse kotsi, bakeng sa ho thunya mathata a tsoetseng pele. |
|
Sireletsa ho daela hole ka thoko
- PowerFlex rack e sebelisa Secure Connect Gateway ho fana ka tšehetso e sireletsehileng ea ho daela ho tsoa ho Dell Technologies Support.
- Karolo ea netefatso ea ts'ebeletso e hole e fana ka mokhoa oa ho hlahisa li-tokens tsa netefatso tse thehiloeng ho nako ka mokhoa o sireletsehileng, ho sebelisoa ak'haonte ea ts'ebeletso e hlalositsoeng sesebelisoa se laoloang bakeng sa ts'ehetso ea ho daela hole.
Ak'haonte ea kamehla ea PowerFlex
PowerFlex Manager o na le akhaonto e latelang ea kamehla.
| Akhaonto ya mosebedisi | Tlhaloso |
| Admin |
|
Liakhaonto tsa basebelisi li bolokoa sebakeng sa heno kapa ka LDAP. Ho fumana leseli mabapi le 'mapa oa karolo ea mosebelisi, sheba Tataiso ea Tlhophiso ea Tšireletso ea Dell PowerFlex 4.0.x.
Li-node tsa PowerFlex
- U ka theha li-account tsa mosebelisi ka litokelo tse khethehileng (bolaoli bo thehiloeng ho karolo) ho laola li-node tsa PowerFlex u sebelisa Integrated Dell Remote Access Controller (iDRAC).
- Beha basebelisi ba lehae kapa sebelisa lits'ebeletso tsa bukana tse kang Microsoft Active Directory kapa LDAP ho theha li-account tsa mosebelisi.
- iDRAC e ts'ehetsa phihlello e thehiloeng ho basebedisi ka sehlopha sa litokelo tse amanang. Mesebetsi ke molaoli, opareitara, bala feela, kapa che. Karolo e hlalosa boholo ba litokelo tse teng.
- Ho fumana lintlha tse ling, bona Tataiso ea Basebelisi ea Mosebelisi ea Integrated Dell Remote Access Controller.
Liakhaonto tse kentsoeng tsa sistimi e sebetsang e thehiloeng ho jump server
Seva e kenelletseng ea sistimi e sebelisang sistimi e sebelisang li-account tse latelang:
| Akhaonto ya mosebedisi | Tlhaloso |
| admin | Ak'haonte e sebelisetsoang ho kena ka hole ka SSH kapa VNC |
| motso | Root SSH e holofalitsoe ke kamehla |
Ho fihlella ha SSH le GUI (VNC) ho nolofalloa ka ho sa feleng bakeng sa seva e kenelletseng ea sistimi e sebetsang.
Li-switches tsa Dell PowerSwitch
Li-switch tsa PowerSwitch li sebelisa OS10 joalo ka sistimi e sebetsang.
OS10 e ts'ehetsa basebelisi ba babeli ba kamehla
- admin - o ne a tloaetse ho saena ho CLI
- linuxadmin - e sebelisetsoang ho fihlella khetla ea Linux
Ho tima mosebelisi oa linuxadmin
- Kenya mofuta oa CONFIGURATION.
- Kenya taelo ena: OS10(config)# system-user linuxadmin disable
Phihlello e thehiloeng ho karolo bakeng sa li-switches tsa PowerSwitch
- Li-switches tsa PowerSwitch li tšehetsa taolo ea phihlello e thehiloeng ho karolo.
- Tafole e latelang e akaretsa mesebetsi eo mosebelisi a ka e abeloang
| Akhaonto ya mosebedisi | Tlhaloso |
| sysadmin | Motsamaisi oa sistimi |
| Akhaonto ya mosebedisi | Tlhaloso |
|
|
| sedmin | Motsamaisi oa ts'ireletso
|
| netadmin | Motsamaisi oa marang-rang
|
| netoperator | Mokhanni oa marang-rang
|
Maemo a tokelo bakeng sa li-switches tsa PowerSwitch
Sebelisa maemo a litokelo ho fokotsa phihlello ea basebelisi ho sehlopha sa litaelo. Tafole e latelang e hlalosa maemo a litokelo tse tšehetsoeng:
| Boemo | Tlhaloso |
| 0 | E fa basebelisi monyetla o fokolang, e thibelang phihlello ea litaelo tsa mantlha |
| 1 | E fana ka phihlello ea sehlopha sa litaelo tsa pontšo le ts'ebetso e itseng, joalo ka pint, traceroute, joalo-joalo. |
| 15 | E fana ka phihlello ea litaelo tsohle tse fumanehang bakeng sa karolo e itseng ea mosebelisi |
| 0, 1, le 15 | Maemo a litokelo tse hlophisitsoeng ke sistimi e nang le taelo e boletsoeng esale pele |
| 2 ho ea ho 14 | Ha ea hlophisoa; o ka hlophisa maemo ana ho basebelisi ba fapaneng le litokelo tsa phihlello. |
Bakeng sa lintlha tse ling, bona Tataiso ea Mosebelisi ea Khatiso ea Khoebo ea OS10.
Dell CloudLink
Mosebelisi e mong le e mong oa CloudLink o abetsoe karolo e lekanyetsang litumello tsa bona ho CloudLink Center. Tafole e latelang e thathamisa liakhaonto tsa kamehla tsa CloudLink Center:
| Akhaonto ya mosebedisi | Tlhaloso | Phasewete ea kamehla |
| motso | Ak'haonte ea metso ea sistimi e sebetsang | Ha ho letho |
| sedmin | E sebelisoa bakeng sa motsamaisi oa CloudLink Center ka ho web sehokelo sa mosebedisi | Ha ho letho; mosebelisi o tlameha ho beha phasewete ha a qala ho kena |
CloudLink e ts'ehetsa mefuta e fapaneng ea mekhoa ea netefatso ka
- Liakhaonto tsa basebelisi ba lehae ho seva sa CloudLink Center
- Windows Active Directory LDAP kapa tšebeletso ea LDAPs
- Netefatso ya dintho tse ngata o sebedisa Google Authenticator kapa RSA SecurID bakeng sa basebedisi ba lehae kapa Windows domain name CloudLink e tshehetsa phihlello e itshetlehileng bakeng sa diakhaonto tsa mosebedisi. Ho fumana lintlha tse ling, bona Tataiso ea Tsamaiso ea CloudLink ea Dell
Microsoft Windows Server 2019 e thehiloeng ho PowerFlex tlhophiso ea li-node tsa khomphutha feela
Karolo ena e na le lintlha tsa netefatso le tumello ea tlhophiso ea Windows Server 2019 e thehiloeng ho PowerFlex compute-only node.
Tlosa akhaonto ea moeti e hahelletsoeng ka hare
Sebelisa mokhoa ona ho tima ak'haonte ea moeti e hahelletsoeng kahare.
Mehato
- Ka fensetere ea Run, kenya gpedit.msc ebe o tobetsa OK. Local Group Policy Editor e bonts'itsoe.
- Fenstereng e ka ho le letshehadi, tobetsa Tlhophiso ya Khomphuta > Di-setting tsa Windows > Di-setting tsa Tshireletso > Maano a Lehae > Dikgetho tsa Tshireletso.
- Fensetereng ea Pholisi, tlanya habeli Liakhaonto: Boemo ba akhaonto ea baeti ebe u khetha E holofalitsoeng.
- Tobetsa OK.
Numella leano la ho rarahana ha phasewete
Sebelisa mokhoa ona ho thusa leano la ho rarahana ha password.
Mehato
- Ka fensetere ea Run, kenya gpedit.msc ebe o tobetsa OK. Local Group Policy Editor e bonts'itsoe.
- Ka fenstereng e ka ho le letšehali, tobetsa Tlhophiso ea Khomphuta > Litlhophiso tsa Windows > Litlhophiso tsa Tšireletso > Melao ea Akhaonto > Leano la Phasewete.
- Ka fenstereng ya Pholisi, tlanya habedi Password e tlameha ho kopana le ditlhoko tsa ho rarahana ebe o kgetha E nolofaditswe.
- Tobetsa OK.
Lokisa bonyane bolelele ba password
Sebelisa mokhoa ona ho hlophisa bolelele ba password ea Windows Server 2019.
Mehato
- Ka fensetere ea Run, kenya gpedit.msc ebe o tobetsa OK. Local Group Policy Editor e bonts'itsoe.
- Ka fenstereng e ka ho le letšehali, tobetsa Tlhophiso ea Khomphuta > Litlhophiso tsa Windows > Litlhophiso tsa Tšireletso > Melao ea Akhaonto > Leano la Phasewete.
- Ka fenstereng ya Pholisi, penya habedi Bonyane Bonyane bolelele ba phasewete le ho fetola Lekunutu e tlameha ho ba bonyane: ho ditlhaku tse 14.
- Tobetsa OK.
Tlosa Sebapali sa Melaetsa ea Seva
Sebelisa mokhoa ona ho tima Server Message Block (SMB) v1.
Mehato
- Bula Motsamaisi oa Seva, ebe u khetha seva e nang le tšobotsi.
- Ho hlooho, tobetsa Motsamaisi. Khetha Tlosa Mesebetsi le Likarolo ho tsoa lethathamong le theoha.
- Ka fensetere ea Khetha sebaka sa seva, khetha seva e loketseng ho tsoa karolong ea Khetho ea Seva ebe u tobetsa E 'ngoe.
- Tobetsa E latelang.
- Leqephe la Likarolo lea hlaha.
- Batla SMB 1.0/CIFS File Ho arolelana Tšehetso le ho etsa e 'ngoe ea tse latelang
- Haeba SMB 1.0/CIFS File Ho arolelana Lebokose la tlhahlobo la Tšehetso le hlakile, tobetsa Hlakola.
- Haeba SMB 1.0/CIFS File Ho khethiloe lebokose la ho hlahloba Tšehetso ea ho arolelana, hlakola lebokose la ho hlahloba ebe o tobetsa E latelang > Tlosa.
Beha moeli oa ho se sebetse le ho boloka skrine
Sebelisa mokhoa ona ho beha moeli oa ho se sebetse ho metsotso e 15 kapa ka tlase ho moo. Sena se notlela sisteme ka skrine saver.
Mehato
- Ka fensetere ea Run, kenya gpedit.msc ebe o tobetsa OK.
- Local Group Policy Editor e bonts'itsoe.
- Fenstereng e ka ho le letshehadi, tobetsa Tlhophiso ya Khomphuta > Di-setting tsa Windows > Di-setting tsa Tshireletso > Maano a Lehae > Dikgetho tsa Tshireletso. Pholisi e bonts'oa fenstereng e nepahetseng.
- Ka fenstereng ea Leano, tobetsa habeli Logon ea Interactive: Moeli oa ho se sebetse ha mochini le sete Mochini o tla notleloa kamora metsotsoana e 900 kapa ka tlase ho moo (ntle le 0).
- Tobetsa OK.
Thibela ho kena
Sebelisa mokhoa ona ho thibela phihlello ho tsoa marang-rang ho ea ho batsamaisi feela, basebelisi ba netefalitsoeng, le lihlopha tsa balaoli ba domain name ho balaoli ba domain.
Mehato
- Ka fensetere ea Run, kenya gpedit.msc ebe o tobetsa OK.
- Local Group Policy Editor e bonts'itsoe.
- Karolong e ka ho le letšehali, tobetsa Configuration ea Computer > Litlhophiso tsa Windows > Litlhophiso tsa Tšireletso > Melao ea Lehae > Kabelo ea Litokelo tsa Basebelisi.
- Fensetereng ea Policy, tobetsa habeli Fumana komporo ena ho tsoa marang-rang ebe u khetha Batsamaisi, Basebelisi ba Tiisitsoeng, le Balaoli ba Domain ea Khoebo feela.
HLOKOMELA: Ho khetha li-account kapa lihlopha tse ngata, tobetsa Ctrl ebe o tobetsa li-account kapa lihlopha tseo u batlang ho li khetha. - Tobetsa OK.
Ho hlahloba le ho rema lifate
Litlhokomeliso tsa tsamaiso
- PowerFlex Manager e bonts'a litlhokomeliso tsohle tse hlahisoang ke likarolo tsa sistimi joalo ka block, file lits'ebeletso, li-node le li-switches. U ka khona view tlhokomeliso ea sistimi ka ho sebelisa PowerFlex Manager, API, kapa CLI.
- Beha maano a tsebiso ho romella litlhokomeliso ho lengolo-tsoibila, maraba a SNMP, le syslog ea kantle. Ho fumana lintlha tse ling, sheba Eketsa leano la tsebiso.
- O ka fetola boemo ba ho teba ha tlhokomeliso ea sistimi. Litemoso tse hlalositsoeng ke feme li romelloa ho Dell Technologies, hammoho le data ea mantlha e hlalositsoeng ke feme bakeng sa tlhahlobo ea sesosa. Bakeng sa merero e meng, maemo a boima a hlalosoang ke basebelisi a sebelisoa.
Kenya leano la tsebiso
Ha o kenya leano la tsebiso, o hlalosa melao ea ho sebetsana le liketsahalo kapa litlhokomeliso ho tsoa mehloling, le hore na boitsebiso boo bo lokela ho romeloa hokae.
Mehato
- Eya ho Litlhophiso > Liketsahalo le Litlhokomeliso > Melao ea Tsebiso.
- Tobetsa Theha Leano le Lecha.
- Kenya lebitso le tlhaloso ea leano la tsebiso.
- Ho tswa ho Resource Domain menu, khetha sebaka sa lisebelisoa seo u batlang ho kenya leano la tsebiso ho sona. Likhetho tsa sebaka sa lisebelisoa ke:
- Tsohle
- Tsamaiso
- Thibela (Bobolokelo)
- File (Bobolokelo)
- Khomphutha (li-server, Sistimi ea Ts'ebetso, ts'ebeliso ea nnete)
- Marang-rang (Li-switches, khokahanyo joalo-joalo)
- Tšireletso (RBAC, litifikeiti, CloudLink joalo-joalo)
- Ho tsoa ho menu ea Mofuta oa Mohloli, khetha hore na u batla hore liketsahalo le litlhokomeliso li amoheloe joang. Likhetho tsa mofuta oa mohloli ke:
- Snmpv2c
- Snmpv3
- Syslog
- powerflex
- Khetha lebokose le haufi le maemo a boima ao u batlang ho amahanya le leano lena. Bohloko bo bontša kotsi (haeba e le teng) ho tsamaiso, mabapi le liphetoho tse hlahisitseng molaetsa oa ketsahalo.
- Khetha sebaka se hlokahalang ebe u tobetsa Romela.
Fetola leano la tsebiso
U ka fetola litlhophiso tse ling tse amanang le leano la litsebiso.
Mabapi le mosebetsi ona
U ke ke ua fetola mofuta oa mohloli kapa sebaka seo u eang ho sona hang ha se abetsoe leano la tsebiso.
Mehato
- Eya ho Litlhophiso > Liketsahalo le Litlhokomeliso > Melao ea Tsebiso.
- Khetha pholisi ea tsebiso eo u batlang ho e fetola.
- U ka khetha ho fetola pholisi ea tsebiso ka mekhoa e latelang:
- Ho kenya kapa ho tima pholisi, tobetsa Bula.
- Ho fetola pholisi, tobetsa Fetola. Fesetere ea Edit Notification Policy ea bula.
- Tobetsa Romela.
Hlakola leano la tsebiso
Hang ha pholisi ea tsebiso e hlakotsoe, e ke ke ea khutlisoa.
Mabapi le mosebetsi ona
Ho hlakola leano la tsebiso
Mehato
- Eya ho Litlhophiso > Liketsahalo le Litlhokomeliso > Melao ea Tsebiso.
- Khetha leano la tsebiso leo u batlang ho le hlakola.
- Tobetsa Hlakola. U fumana molaetsa oa tlhahisoleseding ho botsa hore na u na le bonnete ba hore u batla ho hlakola pholisi.
- Tobetsa Romela ebe o tobetsa Tlosa.
Litlaleho tsa liketsahalo tsa tsamaiso
- PowerFlex Manager e bonts'a lits'oants'o tsa liketsahalo tsa sistimi tse hlahisoang ke likarolo tsa sistimi, lisebelisoa tsa software le mekotla ea software. U ka khona view Lenaneo la liketsahalo tsa sistimi le sebelisa PowerFlex Manager, REST API, kapa CLI.
- Leano la ho boloka litlaleho tsa liketsahalo tsa sistimi ke likhoeli tse 13 kapa liketsahalo tse limilione tse 3. O ka seta maano a tsebiso ho romella lethathamo la liketsahalo tsa sistimi ho lengolo-tsoibila kapa o le romelle ho syslog. Ho fumana lintlha tse ling, sheba Eketsa leano la tsebiso.
Lintlha tsa kopo
Li-log tsa ts'ebeliso ke lits'oants'o tse tlase tsa likarolo tsa sistimi. Tsena li na le thuso haholo bakeng sa tlhahlobo ea sesosa. Khokahano e sireletsehileng ea khokahanyo e nolofalletsa khokahano e sireletsehileng, e lebelo le holimo, 24 × 7, lipakeng tsa Dell Technologies le lits'ebetso tsa bareki, ho kenyelletsa:
- Tlhokomelo e hole
- Tlhahlobo ea hole le ho lokisa
- Ho romelloa letsatsi le letsatsi ha liketsahalo tsa sistimi (syslog output), litemoso, le topology ea PowerFlex.
PowerFlex e romella data ho CloudIQ ka tsela e sireletsehileng ea khokahanyo. Ho nolofalletsa phetiso ea data ho CloudIQ, lokisa Thuso ea Ts'ehetso 'me u netefatse hore Connect to CloudIQ kgetho e nolofalitsoe. Bakeng sa tlhahisoleseding, sheba Enabling SupportAssist ho Dell PowerFlex 4.0.x Tsamaiso ea Tataiso.
Tafole e latelang e hlalosa likutu tse fapaneng tse bokelletsoeng ka likarolo tse fapaneng
| Karolo | Sebaka |
Setšoantšo sa MDM
|
Linux: /opt/emc/scaleio/mdm/logs |
| Karolo | Sebaka |
| Liaterese tsa IP, litaelo tsa tlhophiso ea MDM, liketsahalo, joalo-joalo. | |
| LIA logong | Linux: /opt/emc/scaleio/lia/logs |
Tsamaiso ea li-log le ho khutlisa
O ka laola le ho khutlisa li-log ka mekhoa e fapaneng:
- Viewing lintlha tsa kopo ea MDM sebakeng sa heno—Sebelisa taelo ea showevents.py, u sebelisa li-switch switches ho laola ho teba ha litlhokomeliso.
- Fumana Info - Fumana Info e u lumella ho bokella ZIP file ea li-log tsa sistimi bakeng sa ho rarolla mathata. O ka tsamaisa ts'ebetso ena ho tsoa sebakeng sa sebaka sa marang-rang bakeng sa lits'oants'o tsa eona, kapa ka ho sebelisa PowerFlex Manager ho bokella lits'oants'o tsohle tsa sistimi.
VMware vSphere tikoloho
Ho fumana lintlha tse ling ka VMware vSphere ESXi le vCenter Server log management, bona karolo e loketseng ea ho rema lifate tsa VMware vSphere Security.
Li-server tsa Dell iDRAC
Ho fumana leseli ka li-log tsa li-server tsa iDRAC, bona Tataiso ea Basebelisi e Kopanetsoeng ea Remote Access Controller.
PowerSwitch switch logs
PowerSwitch e fetola li-account tsa ts'ehetso le li-log tsa ts'ireletso.
| Log mofuta | Tlhaloso |
| Audit | E na le liketsahalo tsa tlhophiso le tlhahisoleseling, ho kenyeletsoa
|
| Tshireletso | E na le liketsahalo tsa tshireletso le tlhahisoleseding, ho kenyeletswa
|
Taolo ea phihlello e thehiloeng ho karolo (RBAC) e thibela phihlello ea li-log le tsa ts'ireletso, ho ipapisitse le karolo ea mosebelisi oa seboka sa CLI. Ho nolofaletsa RBAC ho khothaletsoa ha o nolofalletsa li-log le ts'ireletso. Ha RBAC e butswe:
- Ke karolo ea mosebelisi ea tsamaiso feela e ka tsamaisang taelo ea ho thusa ho rema lifate.
- Mookameli oa tsamaiso le tsamaiso ea ts'ireletso ea tsamaiso mesebetsi ea mosebedisi e ka view liketsahalo tsa tshireletso le liketsahalo tsa tsamaiso.
- Karolo ea mosebelisi oa tsamaiso ea tsamaiso e ka view tlhahlobo, ts'ireletso, le liketsahalo tsa sistimi.
- Ke feela mesebetsi ea mosebelisi ea tsamaiso le molaoli oa ts'ireletso e ka khonang view lipolokoe tsa tshireletso.
- Mookameli oa marang-rang le mesebetsi ea opareitara ea netweke ba ka view liketsahalo tsa tsamaiso.
O ka lokisa seva sa syslog se hole ho amohela melaetsa ea sistimi ho tsoa ho li-switch tsa PowerSwitch. Sheba Tataiso ea Configuration ea Dell bakeng sa switjha e itseng bakeng sa tlhaiso-leseling e batsi.
CloudLink Center server logs
Liketsahalo li kentsoe 'me li ka fumaneha ka sebopeho sa tsamaiso ea CloudLink Center. Seva ea CloudLink Center e boloka liketsahalo tsa ts'ireletso ho kenyelletsa:
- Maikutlo a basebelisi
- Maiteko a hlolehileng a ho notlolla CloudLink Vault o sebelisa paskhoutu
- Ngoliso ea mochini
- Liphetoho ho mokhoa oa CloudLink Vault
- Maiteko a atlehileng kapa a hlolehileng a ho etsa ketso e sireletsehileng ea mosebelisi
- Mesebetsi ea mantlha, joalo ka likopo, lintlafatso, kapa metsamao
Sebelisa a web sebatli ho view liketsahalo tsena ho CloudLink Center interface interface. Liketsahalo tsena li ka boela tsa romelloa ho seva se hlalositsoeng sa syslog.
Tšireletso ea data
CloudLink e fana ka taolo e thehiloeng ho melaoana le ts'ireletso ea data-at-rest-encryption bakeng sa mechini ea sebele le lisebelisoa tsa PowerFlex. CloudLink e na le likarolo tse peli tsa ts'ireletso ea data:
| Karolo | Tlhaloso |
| CloudLink Center | Web-based interface e laolang tikoloho ea CloudLink
|
| CloudLink SecureVM moemeli |
|
Likonopo tsa encryption
CloudLink e sebelisa mefuta e 'meli ea linotlolo tsa encryption ho sireletsa mechini e sebelisang encryption ea polokelo e thehiloeng ho software
| Senotlolo | Tlhaloso |
| Sesebediswa/notlolo ya senotlolo sa modumo (VKEK) | CloudLink e hlahisa para ea VKEK bakeng sa sesebelisoa ka seng. |
| Senotlolo sa encryption sa sesebelisoa | CloudLink e hlahisa senotlolo se ikhethileng sa sesebelisoa bakeng sa sesebelisoa ka seng se patiloeng. Theknoloji ea tlhaho tsamaisong ea mochine e sebelisa senotlolo sa encryption. |
Setsi sa CloudLink se tsamaisa li-drive tsa ho ingolisa (SED). SED e laoloang ke CloudLink e notletsoe. CloudLink Center e tlameha ho lokolla senotlolo sa encryption ho notlolla SED.
- Li-ports le liprothokholo tsa netefatso
Bakeng sa lenane la likou le liprothokholo tsa PowerFlex Manager, bona Tataiso ea Tlhophiso ea Tšireletso ea Dell PowerFlex 4.0.x. - VMware vSphere likoung le liprothokholo
Karolo ena e na le tlhahisoleseling bakeng sa likou tsa VMware vSphere le liprothokholo. - VMware vSphere 7.0
Ho fumana leseli mabapi le likou le liprothokholo tsa VMware vCenter Server le baamoheli ba VMware ESXi, bona VMware Ports le Protocols. - Likou tsa CloudLink Center le liprothokholo
CloudLink Center e sebelisa likou le liprothokholo tse latelang bakeng sa puisano ea data
| Boema-kepe | Protocol | Mofuta oa boema-kepe | Tataiso | Sebelisa |
| 80 | HTTP | TCP | Ka hare/ntle | Khokahano ea moemeli oa CloudLink le puisano ea sehlopha |
| 443 | HTTPs | TCP | Ka hare/ntle | CloudLink Center web phihlello le puisano ya dihlopha |
| 1194 | E na le thepa ho feta TLS 1.2 | TCP, UDP | Inbound | Puisano ea moemeli oa CloudLink |
| 5696 | KMIP | TCP | Inbound | Tšebeletso ea KMIP |
| 123 | NTP | UDP | Kantle | Sephethephethe sa NTP |
| 162 | SNMP | UDP | Kantle | Sephethephethe sa SNMP |
| 514 | syslog | UDP | Kantle | Puisano ea seva sa syslog e hole |
Tsamaiso e kenyellelitsoeng ea tsamaiso e thehiloeng tsamaisong ea li-server le liprothokholo
Seva e kenelletseng ea sistimi e sebelisang sistimi e sebelisa li-port le liprothokholo tse latelang bakeng sa puisano ea data:
| Boema-kepe | Protocol | Mofuta oa boema-kepe | Tataiso | Sebelisa |
| 22 | SSH | TCP | Inbound | Phihlello ea tsamaiso |
| 5901 | VNC | TCP | Inbound | Ho fihlella komporong e hole |
| 5902 | VNC | TCP | Inbound | Ho fihlella komporong e hole |
© 2022- 2023 Dell Inc. kapa lithuso tsa eona. Litokelo tsohle li sirelelitsoe. Dell Technologies, Dell, le matshwao a mang a kgwebo ke matshwao a kgwebo a Dell Inc
lithuso. Matšoao a mang e ka ba matšoao a khoebo a beng ba ona.
Litokomane / Lisebelisoa
 |
DELL PowerFlex Rack Security Configuration ka PowerFlex 4.x [pdf] Bukana ea Mosebelisi PowerFlex 4.x, PowerFlex Rack e nang le PowerFlex 4.x, PowerFlex Rack, PowerFlex Rack Security Configuration e nang le PowerFlex 4.x, PowerFlex Rack Security Configuration |
