Re: Configuration Management (CM) for data centers

[Tighe <emry@accessus.net>]

Well, around these parts we have an admin manual that is both online and
printed out down in the server room.  It contains information on
every machine that we have:

Hardware info (processors, ram, disk, SAN connection, etc)
IP address, subnet, other networking information
hostid and any licensing information for that machine
OS version and patch level
programs that are running (Oracle, ssh, sniffers, etc)
ports that are open on the machine and a brief explain of why they are
startup, shutdown, upgrade (hardware/software) procedures
contact information for the box
maintance contracts or any other contracting information
security information, allowed hosts, allowed users, etc
disaster recovery plan for the machine

Also, there is a tracking page of work done on the machine, while it isn't
always updated it is good to know if something is.

Tighe


>Date: Fri, 6 Apr 2001 10:02:29 -0500 
>From: "Brune, Charlie" <Charlie.Brune@anheuser-busch.com>
>Reply-To: silug-discuss@silug.org
>To: "'silug-discuss@silug.org'" <silug-discuss@silug.org>
>Subject: Configuration Management (CM) for data centers
>
>Does anyone have any information on Configuration Management (CM) "best
>practices" for the HARDWARE in data centers, labs, etc.?
>
>Specifically, I'm looking for how folks track settings on their servers,
>firewalls, routers, etc.  I'm guessing that I should probably track items like
>the OS version #, hardware configuration (how much RAM, what kind of processor,
>how many processors, ...).
>
>For example, I'd like the person who handles my firewalls to be able to tell me
>very quickly from a document just what ports are open.  I'd like my router
>person to be able to tell me the connection points (probably not the right
>term).
>
>(Final requirement:  Walking up to the device and typing a command to see what's
>configured/loaded isn't an option.  Long story.)
>
>I sent my request to this mailing list because we appear to have a number of
>folks among us who are (or rely on) System Administrators.  CM is an important
>aspect to keeping any network alive and well.
>
>Thanks much,
>Charlie
>-
>To unsubscribe, send email to majordomo@silug.org with
>"unsubscribe silug-discuss" in the body.
>

-- 
Tighe Schlottog		Sys Admin at large	  /emry\"@"/accessus.net\
                             ook ook
"Mr. Wizard, I think I'd rather be a coot than a hacker. Yeah, sure, every
now and then a giant pink-haired ape would come running after me and 
chase me into the lake, but really, could it be that much worse? I'd have
a tiny little brain and wouldn't be expected to worry about anything." 
						-jwz from www.jwz.org

-
To unsubscribe, send email to majordomo@silug.org with
"unsubscribe silug-discuss" in the body.