Tuesday Jun 02, 2009

A Sunday wedding at a public pavilion in the town park. Another two restaurants closed and are up for sale.  In front of a church a sign that read "Free Lunch Saturday" was still displayed.  Many motor homes and boats for sale too along the way. Was upstate this past weekend. Took a ride.  Hesitant due to gas increasing in price again, but went anyway.  Great day for a ride. Motorcycles are starting to arrive for Americade.   Elvis Convention and the Tow Truck Show are just winding down.  

Elvis Photo

A quick stop at a motorcycle show.  A stop to take in the beauty of a lake.  A very nice couple offers me the 2 hour balance of their parking meter. Thanked them, but passed since I was only passing through. 


-- Frank



Friday Jun 20, 2008


We were challenged recently to demonstrate the capabilities of our Sun Ray 2 technology with the embedded VPN feature to several customers that required wireless networking.  So here is what was done to showcase this technology.


We had on hand a Sun Ray 270 thin client which had the latest firmware that allows configuration of the integrated VPN.  We employed the help of a LinkSys Wireless-G Access Point  model number WAP54G revision 3.1 with firmware version  V3.04, dated December 27, 2007.  The WAP was configured via the web interface to function as a "access point client" prior to connection to the Sun Ray 270.   By doing so it allows a hard wired Ethernet device to plug in and participate on a wireless network.  To put the WAP in "access point client" mode a MAC address of the remote access point is required.  The LinkSys WAP web interface has the facility to conduct a site survey to determine existing access points and allows for the selection of a remote access point.





Here are the steps taken to get connected.
  • Insure you have a Sun Ray 2 or 270 thin client with the latest firmware with VPN capabilities.
  • Get and configure a wireless access point (WAP) via another computer.
  • Verify connection to the wireless network with that computer. 
  • Connect the WAP to the Sun Ray.
  • Power on the Sun Ray
  • If previously configured to access a VPN you will be prompted for a username and a one time password generated via a secure id device.










  • Your internal login screen will be displayed.
  • If you have deployed smart cards insert it at this point.


  • If a previous session exists you will be displayed a lock screen, Enter your password.
  • The Sun Ray should come to life and your desktop through the VPN should be displayed with the applications you had previously started.



-- Frank





Wednesday May 14, 2008


A few weeks ago I had a chance to visit one of our new Sun Blade 6000 System customers,  the University at Albany which is part of the State University of New York or SUNY  System.  A little background on the University at Albany  They are an internationally recognized institution, with a mission of undergraduate and graduate education.   More than 17,000 students are enrolled in nine schools and colleges.  The University at Albany's location, in the capital of New York State, provides a rich environment for collaboration with NYS government, other educational institutions, and private industry.  University at Albany is part of the the State University of New York system which is the parent agency. The   SUNY consists of 64 campuses with 427,398 total students enrolled during the 2007 school year.

University at Albany's Sun Blade 6000 System

The newly installed Sun Blade 6000 System is located in their datacenter on the uptown campus at 1400 Washington Ave.  It is equipped with (4) AMD processor-based server modules and (2) Intel Xeon processor-based server modules with (4) open slots for future expansion.  The Sun Blade 6000 System is protected by a APC UPS which is mounted in the lower quarter of the cabinet.  The system is being used to consolidate their existing Microsoft Windows/Exchange infrastructure servers.  This project followed a major redesign of their datacenter with the placement of interconnect cabling in overhead trays  and system cabinets positioned for optimal air flow.


IMG, an Albany, NY based Sun Microsystems partner, was instrumental in the university's deployment of the Sun Blade 6000 System.


-- Frank




Thursday May 08, 2008

 

I just received a brand new Sun Ray 270 thin client.  I have been using one at home since January 2007.   I have had one on my desk since 2000 and have used them in many of the Sun Offices across the US.   The purpose of this new unit is to replace an aging Sun Ray 150 which had been used for years to show off Sun Microsystems thin client technology at various marketing events.   We also use a  Sun Ray 150 in our conference room for customer meetings and product briefings.


One of the new features of the  Sun Ray 270 is the built in VPN capabilities. It is enabled through the latest firmware release.  To deploy a remote Sun Ray used for access into Sun's internal network a CISCO 831 router with VPN access was required.  With the latest firmware the VPN client is now integrated into the Sun Ray platform.  No longer is the costly external CISCO 831 router required.

The unit arrived without the latest firmware so the hunt was on to locate the commands to apply it.   I realized my new unit was down a revision by the absence of the advanced commands such as STOP-S, STOP-M, or ALT-V.  They are the new Sun Ray Hot Keys.

 

Sun Ray 270 Hot Keys 

 STOP-S  Bring you to the configuration menu
 STOP-M  Bring you to the configuration menu
 ALT-V or Control+Pause+V  Displays the firmware version    (CoronaP2. . . . .)
 Control+Pause+C

  Clears all configuration data stored in the DTU. 


I was able to install the firmware via the /opt/SUNWut/lib/utload command.  The Sun Ray Server must be running version 4.0 or greater.  Once the latest firmware was installed the advanced STOP-S keys now work.  I checked the version number of the firmware with the ALT-v keys.  It included the string VPN in the version number so I must have the correct firmware installed.  

Now it's on to configuring the Sun Ray 270 to be a VPN client.  First I checked to see that it would still work as a Sun Ray client before enabling the VPN.   It still worked just fine.   To start the process of VPN configuration the STOP-S keys are depressed.  A configuration menu is displayed.  The main menu consists of the following selections:

  • Servers: To set the names of the Sun Ray Servers (more then one is suggested), firmware download server, and log server. 
  • TCP/IP:  To set IP addressing
  • DNS:  To set the domain name, the name servers, and search path.
  • VPN/IPsec:  To enable the VPN client and identify a VPN gateway.  A group name, group key, username and password
  • Authentication:  To set an authentication type, HTTP or none. 
  • Security: Lets you set a password to secure the firmware configuration.
  • Status: Displays the firmware version number.
  • Advanced Settings (bandwidth, video and save configuration): Bandwidth may be limited if needed.  The "Video” feature allows you to force a screen blank if the screenlock isn't doing it properly. You can  store all the configuration in a file and retrieve it via  tftp.  This is a  way to streamline the configuration of many units  at a time.  

I configured it for my specific environment in a mater of minutes.  Inserted my smart card (Sun ID) and entered my password.   Jazz music started to play from KKJZ 88.1 FM of Long Beach, California and my email client with several unread messages appeared.  All of this information can be found in the Sun Ray Server Software Collection located on Sun's Online Documentation site http://docs.sun.com 

Don't overlook the power savings of a Sun Ray 270.  See Clay's World for a recent blog entry on power savings in a lab environment.


--Frank

 


 

 

Friday Feb 22, 2008

 

Was looking for something else on YouTube and I came across several interesting videos on virtualization.   Specificly what Sun is doing with virtualization.  This video shows how Sun Microsystems' technologies let you virtualize your datacenters.

 

 

 

Dr. James Baty, Chief Technology Officer with Sun Microsystems, discusses the challenges and approaches to addressing a virtualization strategy.

 

 

 

 

 

-- Frank

 


 

Thursday Feb 14, 2008

 

A friend of mine has pointed out that if you are using an older version of the browser Mozilla or Fire Fox you have the ability to save the page you are viewing as postscript. Then with any old text editor you can go into the postscript file and change the information as you see fit.

 

In the case of online airline check in, a security hole has been brought to my attention. Someone can display and print a boarding pass. They also can save it to a file and edit it. Changing the flight number, date and time this allows someone with a questionable background access beyond the airport security check points. Of course if an airline is using some type of scanning as part of their boarding process they should not get access to the plane.

 

-- Frank 

 


 

 

Monday Feb 04, 2008

 

I was asked to assist someone with a "computer" problem they were having recently. As soon as I sat down in front of their personal computer I noticed their personal firewall was "disabled". I questioned why it was disabled. They replied that some application they had attempted to use did not work. So they turned it off. I asked how long had it been disabled? They indicated a few days. While fixing their original problem I updated their virus protection software with the latest files. It had been many months since their virus definitions had been updated. So "Keep Your Guard Up"!

 

-- Frank 

 


 

Wednesday Dec 27, 2006

I have been asked this question several times this past week so I will formalize my response as a Christmas Gift to you all.

Well you are now on your second or third generation digital camera. You have 3000 to 5000 photos on the hard disk of you home computer or laptop. If you are like myself you have been taking digital photos since the late 1990's. You now have a digital camera built into you phone. Sure hope all of these priceless photos are backed up someplace!

 

Verizon Wireless CDM 8945

My recommendation to you all is to go out and get some high quality write once CD-ROM media that can be found at places like CompUSA or Wal-Mart. Divide your photos into some logical grouping. I like filing by year and then by activity or event. If I don't have a specific activity or event but have several disparate photos, I just file them in a directory/folder named month_year, like Feb_06 (usually a slow month). This way I can archive an entire year at a time. So far I have not hit the maxium size of a CD-ROM in a given year.

Memorex 100 Pack Standard 120mm CD-R Discs 52X

I burn two copies. One I keep in my computer CD-ROM collection at home. The other I put in a safe place such as a bank safety deposit box or fire proof safe. Preferably someplace other than where you are keeping your first copy. I archive my photos yearly. I backup my photos on hard disk every few weeks.

Now for a great Christmas gift for that owner of that digital camera. Get them a USB thumb drive or memory card/stick to keep their most recent photos on. This will allow them to bring their most recent photos with them to show off at family gatherings and other various social events that typically take place here in the United States at this time of the year.



Happy Holidays! --Frank

Tuesday Nov 07, 2006

Was in lower Manhattan yesterday between customer meetings. Walking across Cedar Street to Broadway very near Wall Street. I passed a FedEX truck with the rear door open. A stack of boxes sitting on the sidewalk. All unattended. As I passed I noticed one of the boxes was clearly marked in bold lettering Iron Mountain. I got to the end of the block before thinking of getting a photo if they were still there. So I returned to get this snapshot, the boxes still unattended.

Do you think this customer entended to have their data or backup tapes out on display for all to see on Cedar Street?  Do you think they were protected in some way?


I sure hope my personal information isn't on these tapes.


-- Frank




This blog copyright 2009 by FrankWickham