out-of-band management
expressionnetworkingIT support
A separate management path - console servers, dedicated ports, even 4G - that still works when the production network is the thing that broke.
The difference between fixing a dead core switch from home and driving to the site at 3 a.m.
Out-of-band management is the ability to reach a device through a path that does not depend on the thing you are trying to fix. A serial console on a terminal server, a dedicated management processor with its own network interface, a cellular modem at a remote site: all of them exist so that a broken network does not also remove your ability to repair it.
The failure it prevents is the one everybody eventually experiences. A configuration change to the routing or the firewall is applied, it is wrong, and the change severs the connection you were making it over, leaving a device that is running, healthy, and unreachable. Without another path, the fix is a physical visit, which at a remote site is hours and at a distant one is days.
The security consideration is that this is by definition a path around your controls. A management processor with its own network stack, its own credentials and firmware that is patched on a different schedule from the operating system is an attractive target that many organizations forget they have. Out-of-band access needs to be genuinely isolated, genuinely monitored, and included in the inventory, or it becomes the way in rather than the way back.