Access independent of the network.
WHAT IT IS
A separate path to manage equipment, independent of the network carrying normal traffic.
WHY IT EXISTS
When the main network fails, you still need to reach the equipment.
WHAT IT PROVIDES
Power control Console access Configuration, when the system is otherwise unreachable
WHAT IT USUALLY USES
A separate network, and sometimes an entirely separate connection.
WHY A SEPARATE CONNECTION
So a failure of the primary provider does not remove management access.
WHAT TO INCLUDE
Server management interfaces Console access to network equipment Switched power distribution
WHY SWITCHED POWER
So a frozen device can be power-cycled without attendance.
WHAT TO SECURE
All of it, tightly.
WHY
Management access is complete control.
WHAT TO NEVER DO
Expose management interfaces to the internet.
WHAT TO USE INSTEAD
A private path, or restriction to specific addresses.
WHAT TO TEST
That the out-of-band path works, before you need it.