I work at a data center, we need to setup a completely separate OOB network, I know about OOB using access server/terminal server, I mean how to setup something like Cisco 2511 with SCSI-2 ports and octal cable, but what the heck do they mean OOB network? I mean am i supposed to create a whole new subnet and connect each and every router, switch, firewall, server... to that? I'm a bit lost, I read this doc on Cisco but can't get it right, please don't talk about configuration, just the positioning of devices, and the main concept of having an OOB management network/subnet, any kinda document in simple words will do good thank you
I mean am i supposed to create a whole new subnet and connect each and every router, switch, firewall, server... to that?
The OOB network is whatever you need to recover the network without relying on the network (Out Of Band). The form it takes will depend on the devices you could need to access out of band.
In many cases having remote access to a terminal server attached to console ports is sufficient for recovering from configuration mistakes but that's limited to devices with CLI and doesn't really help with recovering erased firmware, etc.
What I've done is take a router with dual-WAN and use my network for one WAN and the other WAN to a separate provider. Then I set up VPN access to the router. Then plug in every management port, server management card, console server, IP KVM, etc into the LAN side of the router. The idea being you VPN into the OOB router and have access to all devices that you'd need to fix to restore the network.
Im not sure this is exactly what you're after but where I work we have a physically separate color coded network for management which is connected to every machine in the network. The layout is pretty parallell to our "regular" network, just slower bandwidth. The problem with switches is that many of them don't have a dedicated management port but you can always dedicate e.g. port 1 on every switch for management. Servers is easy because they all have a mgt-port so we just have a second network in parallell.