Use a Jump Server to connect and keep the block mode of Guardian

[Ed Yevi]

we need to meet a requirement to use a jump server (such as tectia or
ssh) to connect endlessly but keep the lockdown mode provided by win6530, do you have
any suggestions?

[Bill Honaker]

Post by Ed Yevi
we need to meet a requirement to use a jump server (such as tectia or
ssh) to connect endlessly but keep the lockdown mode provided by win6530, do you have
any suggestions?

Both solutions you mention seem to refer to SSH tunnels. I have used PuTTY tunnels for non-SSH clients (for example, debugging a Java VM).
But current versions of win6530, Outside View and Cail 6530 emulators all support SSH natively.

Not exactly sure what you're trying to solve, can you be more specific?

[Ed Yevi]

Post by Ed Yevi
we need to meet a requirement to use a jump server (such as tectia or
ssh) to connect endlessly but keep the lockdown mode provided by win6530, do you have
any suggestions?

Both solutions you mention seem to refer to SSH tunnels. I have used PuTTY tunnels for non-SSH clients (for example, debugging a Java VM).
But current versions of win6530, Outside View and Cail 6530 emulators all support SSH natively.
Not exactly sure what you're trying to solve, can you be more specific?

I need to implement a jump server but keeping the guardian block mode

MR-Win6530 is the best solution we have to connect to guardian in block mode locally, but we want to continue doing it through a jump server keeping the block mode.

so I want to know if you offer any product or add-on for MR-Win6530 that performs the function of jump server,

thank you very much for your support

[[e-mail]]

OutsideView explicitly supports this facility using both SSH tunneling and HTML tunneling. For more details and to request a free evaluation copy, go to http://www.crystalpoint.com

Jon Marcus
Crystal Point, Inc.

[Bill Honaker]

Post by Ed Yevi

Post by Ed Yevi
we need to meet a requirement to use a jump server (such as tectia or
ssh) to connect endlessly but keep the lockdown mode provided by win6530, do you have
any suggestions?

Both solutions you mention seem to refer to SSH tunnels. I have used PuTTY tunnels for non-SSH clients (for example, debugging a Java VM).
But current versions of win6530, Outside View and Cail 6530 emulators all support SSH natively.
Not exactly sure what you're trying to solve, can you be more specific?

I need to implement a jump server but keeping the guardian block mode
MR-Win6530 is the best solution we have to connect to guardian in block mode locally, but we want to continue doing it through a jump server keeping the block mode.
so I want to know if you offer any product or add-on for MR-Win6530 that performs the function of jump server,
thank you very much for your support

Ed,

When a 'jump server' is used, it generally means a Remote Desktop where all of the programs
needed are loaded, meaning that nothing running on my own computer can access the remote
server (the NonStop, in this case).

For customers of mine that have implemented this, they've loaded Outside View or Win6530 on that server.
Your description makes me thing that your own computer is connecting to a 'Jump Server' with
terminal services, where you login. On that server you open Win6530 and connect.

I suspect your first post using 'lockdown mode' was an incorrect translation of the phrase
'block mode', is that correct? If so you don't need any kind of 'jump server'.

What is the verions of MR-Win6530 you are running?
For a very long time, it has supported making an SSH connection (NOT a telnet connection) directly,
and no tunnels are needed. Your original question
To use this, use 'File / New Profile... choose '6530 Terminal' and click OK,
THen choose 'Options / Communication', change the Interface to 'SSH (Secure Shell)', and
click 'Configure'. There, you put your Host, port, userid, and choose appropriate authentication.

If your NonStop SSH requires public key pairs, you can mange those on the 'User Keys' tab.
Then back on main, check 'Publickey' and choose the one you created on the other tab.

On first connect, you'll be asked whether to store the signature of the remote server the first
time you connect

Make sure your authentication matches what hsa been configured for your user in SSHCOM.


If your version of Win6530 is too old to support SSH, you may be able to open an SSH tunnel using the (free)
PuTTY client, and configure tunnels there. Then your Win6530 connects to the local
tunnel port (typically, 127.0.0.1:23), and the remote tunnel is the local IP address and port 23.

Both of these cases use a Win6530 as the client and allow full 6530 block mode.

[[e-mail]]

It is common to install OutsideView on the “jump server” and access it via Remote Desktop, terminal services, or Citrix. However, it is not a requirement. Another common configuration has the NonStop system in a high security zone that cannot be accessed from the lower security zones. The users run OutsideView directly on their PCs in the lower security zone (e.g., the Internet). The “jump server” sits in a Demilitarized Zone that can see both the high security zone and the low security zone. The DMZ server does NOT directly route packets between the 2 zones.

When the end user configures OutsideView on their workstation, they supply 2 sets of credentials. One set to access the jump server from the local workstation and a second set of credentials to access the NonStop host from the jump server. The 6530 screen images are tunneled to the jump server over an SSH session or via HTML. The jump server then forwards the 6530 screen images onto the NonStop system.

Jon Marcus
Crystal Point, Inc.

[Bill Honaker]

Post by Bill Honaker

Post by Ed Yevi

Post by Ed Yevi
we need to meet a requirement to use a jump server (such as tectia or
ssh) to connect endlessly but keep the lockdown mode provided by win6530, do you have
any suggestions?

Both solutions you mention seem to refer to SSH tunnels. I have used PuTTY tunnels for non-SSH clients (for example, debugging a Java VM).
But current versions of win6530, Outside View and Cail 6530 emulators all support SSH natively.
Not exactly sure what you're trying to solve, can you be more specific?

I need to implement a jump server but keeping the guardian block mode
MR-Win6530 is the best solution we have to connect to guardian in block mode locally, but we want to continue doing it through a jump server keeping the block mode.
so I want to know if you offer any product or add-on for MR-Win6530 that performs the function of jump server,
thank you very much for your support

Ed,
When a 'jump server' is used, it generally means a Remote Desktop where all of the programs
needed are loaded, meaning that nothing running on my own computer can access the remote
server (the NonStop, in this case).
For customers of mine that have implemented this, they've loaded Outside View or Win6530 on that server.
Your description makes me thing that your own computer is connecting to a 'Jump Server' with
terminal services, where you login. On that server you open Win6530 and connect.
I suspect your first post using 'lockdown mode' was an incorrect translation of the phrase
'block mode', is that correct? If so you don't need any kind of 'jump server'.
What is the verions of MR-Win6530 you are running?
For a very long time, it has supported making an SSH connection (NOT a telnet connection) directly,
and no tunnels are needed. Your original question
To use this, use 'File / New Profile... choose '6530 Terminal' and click OK,
THen choose 'Options / Communication', change the Interface to 'SSH (Secure Shell)', and
click 'Configure'. There, you put your Host, port, userid, and choose appropriate authentication.
If your NonStop SSH requires public key pairs, you can mange those on the 'User Keys' tab.
Then back on main, check 'Publickey' and choose the one you created on the other tab.
On first connect, you'll be asked whether to store the signature of the remote server the first
time you connect
Make sure your authentication matches what hsa been configured for your user in SSHCOM.
If your version of Win6530 is too old to support SSH, you may be able to open an SSH tunnel using the (free)
PuTTY client, and configure tunnels there. Then your Win6530 connects to the local
tunnel port (typically, 127.0.0.1:23), and the remote tunnel is the local IP address and port 23.
Both of these cases use a Win6530 as the client and allow full 6530 block mode.

Based on what Jon posted, you could install PuTTY on the Juimp server,
then setup the profile, providing the port 22 local port to connect to the target server's port 22. Then connect.

Then from your own workstation, set the profile for your emulator (Win6530 in your case) to connect to port 22 on the Jump server.

At that point you have a tunnel from your machine to the jump server, and another tunnel from the jump server to the NonStop host.

[Randall]

Post by Bill Honaker

Post by Bill Honaker

Post by Ed Yevi

Post by Ed Yevi
we need to meet a requirement to use a jump server (such as tectia or
ssh) to connect endlessly but keep the lockdown mode provided by win6530, do you have
any suggestions?

Both solutions you mention seem to refer to SSH tunnels. I have used PuTTY tunnels for non-SSH clients (for example, debugging a Java VM).
But current versions of win6530, Outside View and Cail 6530 emulators all support SSH natively.
Not exactly sure what you're trying to solve, can you be more specific?

I need to implement a jump server but keeping the guardian block mode
MR-Win6530 is the best solution we have to connect to guardian in block mode locally, but we want to continue doing it through a jump server keeping the block mode.
so I want to know if you offer any product or add-on for MR-Win6530 that performs the function of jump server,
thank you very much for your support

Ed,
When a 'jump server' is used, it generally means a Remote Desktop where all of the programs
needed are loaded, meaning that nothing running on my own computer can access the remote
server (the NonStop, in this case).
For customers of mine that have implemented this, they've loaded Outside View or Win6530 on that server.
Your description makes me thing that your own computer is connecting to a 'Jump Server' with
terminal services, where you login. On that server you open Win6530 and connect.
I suspect your first post using 'lockdown mode' was an incorrect translation of the phrase
'block mode', is that correct? If so you don't need any kind of 'jump server'.
What is the verions of MR-Win6530 you are running?
For a very long time, it has supported making an SSH connection (NOT a telnet connection) directly,
and no tunnels are needed. Your original question
To use this, use 'File / New Profile... choose '6530 Terminal' and click OK,
THen choose 'Options / Communication', change the Interface to 'SSH (Secure Shell)', and
click 'Configure'. There, you put your Host, port, userid, and choose appropriate authentication.
If your NonStop SSH requires public key pairs, you can mange those on the 'User Keys' tab.
Then back on main, check 'Publickey' and choose the one you created on the other tab.
On first connect, you'll be asked whether to store the signature of the remote server the first
time you connect
Make sure your authentication matches what hsa been configured for your user in SSHCOM.
If your version of Win6530 is too old to support SSH, you may be able to open an SSH tunnel using the (free)
PuTTY client, and configure tunnels there. Then your Win6530 connects to the local
tunnel port (typically, 127.0.0.1:23), and the remote tunnel is the local IP address and port 23.
Both of these cases use a Win6530 as the client and allow full 6530 block mode.

Based on what Jon posted, you could install PuTTY on the Juimp server,
then setup the profile, providing the port 22 local port to connect to the target server's port 22. Then connect.
Then from your own workstation, set the profile for your emulator (Win6530 in your case) to connect to port 22 on the Jump server.
At that point you have a tunnel from your machine to the jump server, and another tunnel from the jump server to the NonStop host.

You will have to enable SSH port forwarding on your machine. This is not set ON by default on many different system types, but this is not generally hard. You need root/super to do this.