Avocent ACS 5000 console server Installation/Administration/User Guide

PDF

เอกสาร

โฆษณา

For Technical Support: www.avocent.com/support

590-815-501A

Cyclades

®

ACS 5000

Installation/Administration/User Guide

FCC Warning Statement

The Cyclades ACS 5000 advanced console server has been tested and found to comply with the limits for Class A digital devices, pursuant to Part 15 of the FCC rules. These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a commercial environment.

This equipment generates, uses and can radiate radio frequency energy and, if not installed and used in accordance with the Installation and Service Manual, may cause harmful interference to radio communications.

Operation of this equipment in a residential area is likely to cause harmful interference in which case the user is required to correct the problem at his or her own expense.

Notice about FCC Compliance for All Cyclades ACS 5000 Advanced Console

Server Models

To comply with FCC standards, the Cyclades ACS 5000 advanced console server requires the use of a shielded CAT 5 cable for the Ethernet interface. Notice that this cable is not supplied with the products and must be provided by the customer.

Canadian DOC Notice

The Cyclades ACS 5000 advanced console server does not exceed the Class A limits for radio noise emissions from digital apparatus set out in the Radio Interference Regulations of the Canadian

Department of Communications.

L’Cyclades ACS 5000 advanced console server n’émete pas de bruits radioélectriques dépassant les limites applicables aux appareils numériques de la classe A prescrites dans le règlement sur le brouillage radioélectrique edicté par le Ministère des Communications du Canada.

Cyclades

®

ACS 5000

Installation/Administration/

User Guide

Avocent, the Avocent logo, The Power of Being There, DSView and

Cyclades are registered trademarks of Avocent Corporation or its affiliates. All other marks are the property of their respective owners.

Instructions

This symbol is intended to alert the user to the presence of important operating and maintenance

(servicing) instructions in the literature accompanying the appliance.

Dangerous Voltage

This symbol is intended to alert the user to the presence of uninsulated dangerous voltage within the product’s enclosure that may be of sufficient magnitude to constitute a risk of electric shock to persons.

Power On

This symbol indicates the principal on/off switch is in the on position.

Power Off

This symbol indicates the principal on/off switch is in the off position.

Protective Grounding Terminal

This symbol indicates a terminal which must be connected to earth ground prior to making any other connections to the equipment.

iii

T A B L E O F C O N T E N T S

Chapter 1: Introduction ................................................................................................... 1

Overview ............................................................................................................................................ 1

Connectors ......................................................................................................................................... 2

Access Options ................................................................................................................................... 2

Web Manager..................................................................................................................................... 3

Types of Users.................................................................................................................................... 3

Services .............................................................................................................................................. 3

Authentication .................................................................................................................................... 4

Security Certificates........................................................................................................................... 5

Packet Filtering ................................................................................................................................. 5

SNMP ................................................................................................................................................. 5

Notifications, Alarms and Data Buffering ......................................................................................... 6

Configuration of Access to Connected Devices ................................................................................. 6

Power Management ........................................................................................................................... 6

Hostname Discovery .......................................................................................................................... 9

Chapter 2: Installation ................................................................................................... 11

Mount the Console Server................................................................................................................ 11

Make an Ethernet Connection ......................................................................................................... 11

Connect Devices to Serial Ports ...................................................................................................... 12

Make a Direct Connection to Configure Network Parameters ....................................................... 12

Turn Power On ................................................................................................................................ 12

Perform Basic Network Configuration using the wiz Command..................................................... 12

Add Users and Configure Ports with the Web Manager ................................................................. 14

Other Ways to Access the Web Manager......................................................................................... 14

Connect Power Devices ................................................................................................................... 14

Chapter 3: Web Manager for Regular Users................................................................ 17

Features of Regular User Screens ................................................................................................... 18

Connect ............................................................................................................................................ 19

IPDU Power Management............................................................................................................... 21

IPDU Power Mgmt. - Outlets Manager ................................................................................... 21

iv Cyclades ACS 5000 Installation/Administration/User Guide

IPDU Power Mgmt. - View IPDUs Info ................................................................................... 23

IPDU Power Mgmt. - Outlets Group Ctrl ................................................................................ 24

Security ............................................................................................................................................ 24

Chapter 4: Web Manager for Administrators............................................................... 25

Log Into the Web Manager .............................................................................................................. 25

Common Tasks for ACS 5000 Console Server Administrators........................................................ 26

Common Features of Administrator Forms..................................................................................... 26

Overview of Administrative Modes.................................................................................................. 27

Wizard mode ............................................................................................................................. 27

Expert mode .............................................................................................................................. 28

Chapter 5: Web Manager Wizard Mode........................................................................ 29

Step 1: Network Settings .................................................................................................................. 29

Step 2: Port Profile .......................................................................................................................... 29

Step 3: Access .................................................................................................................................. 30

Step 4: Data Buffering ..................................................................................................................... 31

Step 5: System Log ........................................................................................................................... 33

Chapter 6: Web Manager Applications Menu Options ............................................... 35

Expert - Applications - Connect....................................................................................................... 35

Expert - Applications - IPDU Power Mgmt..................................................................................... 36

Applications - IPDU Power Mgmt. - Outlets Manager............................................................ 36

Applications - IPDU Power Mgmt. - Outlets Group Ctrl......................................................... 39

Applications - IPDU Power Mgmt. - View IPDUs Info............................................................ 39

Applications - IPDU Power Mgmt. - Configuration ................................................................ 40

Applications - IPDU Power Mgmt. - Software Upgrade.......................................................... 41

Expert - Applications - PMD Configuration.................................................................................... 42

Applications - PMD Configuration- General ........................................................................... 43

Applications - PMD Configuration- Outlet Groups ................................................................. 43

Applications - PMD Configuration- Users Management......................................................... 44

Expert - Applications - Terminal Profile Menu ............................................................................... 45

Chapter 7: Web Manager Network Menu Options....................................................... 47

Expert - Network - Host Settings ..................................................................................................... 48

Expert - Network - Syslog ................................................................................................................ 49

Expert - Network - SNMP ................................................................................................................ 50

Table of Contents v

Expert - Network - Firewall Configuration ..................................................................................... 52

Expert - Network - Host Tables ....................................................................................................... 56

Expert - Network - Static Routes...................................................................................................... 57

Chapter 8: Web Manager Security Menu Options....................................................... 61

Expert - Security - Users and Groups.............................................................................................. 61

Expert - Security - Active Ports Sessions......................................................................................... 63

Expert - Security - Authentication ................................................................................................... 64

Expert - Security - Services.............................................................................................................. 66

Chapter 9: Web Manager Ports Menu Options............................................................ 69

Expert - Ports - Physical Ports ........................................................................................................ 69

Ports - Physical Ports - General .............................................................................................. 70

Ports - Physical Ports - Access................................................................................................. 76

Ports - Physical Ports - Data Buffering ................................................................................... 77

Configure hostname discovery ................................................................................................. 80

Ports - Physical Ports - Multi User .......................................................................................... 80

Ports - Physical Ports - Power Management ........................................................................... 81

Ports - Physical Ports - Other .................................................................................................. 84

Expert - Ports - Virtual Ports .......................................................................................................... 86

Expert - Ports - Ports Status ............................................................................................................ 89

Expert - Ports - Ports Statistics ....................................................................................................... 90

Expert - Ports - Hostname Discovery .............................................................................................. 90

Chapter 10: Web Manager Administration Menu Options.......................................... 93

Expert - Administration - System Information ................................................................................. 93

Expert - Administration - Notifications ........................................................................................... 94

Administration - Notifications - Serial ports alarm.................................................................. 95

Administration - Notifications - Email ..................................................................................... 95

Administration - Notifications - Pager ..................................................................................... 96

Administration - Notifications - SNMP trap............................................................................. 97

Expert - Administration - Time/Date ............................................................................................... 98

Expert - Administration - Boot Configuration ................................................................................. 99

Expert - Administration - Backup Configuration .......................................................................... 101

Expert - Administration - Upgrade Firmware ............................................................................... 102

Expert - Administration - Reboot................................................................................................... 103

vi Cyclades ACS 5000 Installation/Administration/User Guide

Expert - Administration - Online Help .......................................................................................... 103

Appendices................................................................................................................... 105

Appendix A: Technical Specifications ........................................................................................... 105

Appendix B: Safety, Regulatory and Compliance Information...................................................... 106

Appendix C: Technical Support ..................................................................................................... 112

L I S T O F F I G U R E S

List of Figures

Figure 1.1: ACS 5000 Advanced Console Server (ACS 5008 Console Server Shown).................. 1

Figure 1.2: Connectors on an ACS 5000 Console Server (ACS 5008 Console Server Shown) ..... 2

Figure 1.3: Example: Daisy-chained Cyclades IPDUs.................................................................. 7

Figure 2.1: Bracket Connections for Front Mount Configuration ............................................... 11

Figure 3.1: Regular User Screen.................................................................................................. 18

Figure 3.2: Java Applet Viewer .................................................................................................... 19

Figure 3.3: Regular User - IPDU Power Mgmt. Tabs ................................................................. 21

Figure 3.4: IPDU Power Mgmt. - Outlets Manager - Show Outlets Screen ................................ 22

Figure 3.5: IPDU Power Mgmt. - Outlet Groups Ctrl ................................................................. 24

Figure 4.1: Administrator - Web Manager Buttons ..................................................................... 26

Figure 4.2: Example of Web Manager Screen in Wizard Mode................................................... 28

Figure 4.3: Example of Web Manager Tabs in Expert Mode....................................................... 28

Figure 6.1: Expert - Applications - IPDU Power Mgmt. - Outlets Manager............................... 37

Figure 6.2: Expert - Applications - IPDU Power Mgmt. - Outlets Manager - Show Outlets ...... 37

Figure 6.3: Expert - Applications - IPDU Power Mgmt. - Outlet Groups Ctrl............................ 39

Figure 6.4: Expert - Applications - IPDU Power Mgmt. - View IPDUs Info .............................. 39

Figure 6.5: Expert - Applications - IPDU Power Mgmt. - Configuration ................................... 41

Figure 6.6: Applications - PMD Configuration - General ........................................................... 43

Figure 6.7: Expert - Applications - PMD Configuration - Outlet Groups Screen ....................... 43

Figure 6.8: Expert - Applications - PMD Configuration - Users Management Screen ............... 44

Figure 6.9: Expert - Applications - Terminal Profile Menu......................................................... 45

Figure 6.10: Expert - Terminal Profile Menu Example .............................................................. 46

Figure 7.1: Expert - Network - Host Settings [DHCP Enabled].................................................. 48

Figure 7.2: Expert - New/Mod SNMP v1 v2 Configuration Dialog Box..................................... 50

Figure 7.3: Expert - Network - SNMP - New/Mod SNMP v3 Configuration Dialog Box............ 51

Figure 7.4: Expert - Network - Firewall Configuration ............................................................... 52

Figure 7.5: Expert - Network - Firewall Configuration - Add Rule and Edit Rule LOG

Target Fields.......................................................................................................................... 53

Figure 7.6: Expert - Network - Firewall Configuration - Add Rule and Edit Rule

REJECT Target Menu Options.............................................................................................. 53

Figure 7.7: Expert - Network - Firewall Configuration - Add Rule and Edit Rule - TCP

Options................................................................................................................................... 54

vii

viii Cyclades ACS 5000 Installation/Administration/User Guide

Figure 7.8: Expert - Network - Firewall Configuration - Add Rule and Edit Rule UDP

Options................................................................................................................................... 54

Figure 7.9: Expert - Network - Firewall Configuration - Input/Output Interface Fields and Fragments Menu Options ............................................................................................... 55

Figure 7.10: Expert - Network - Host Tables .............................................................................. 56

Figure 7.11: Expert - Network - Static Routes ............................................................................ 57

Figure 7.12: Expert - Static Routes Add and Edit Dialog Boxes - Default Route....................... 57

Figure 7.13: Expert - Static Routes Add and Edit Dialog Boxes - Network Route ..................... 58

Figure 7.14: Expert - Static Routes Add and Edit Dialog Boxes - Host Route ........................... 58

Figure 8.1: Expert - Security - Users and Groups screen ............................................................ 62

Figure 8.2: Expert - Security - Authentication ............................................................................. 64

Figure 9.1: Expert - Ports - Physical Ports.................................................................................. 70

Figure 9.2: Expert - Ports - Physical Ports - General screen ...................................................... 71

Figure 9.3: Expert - Ports - Physical Ports - Data Buffering Enabled ........................................ 78

Figure 9.4: Expert - Ports - Physical Ports - Power Management ............................................. 82

Figure 9.5: Expert - Ports - Virtual Ports .................................................................................... 86

Figure 9.6: Ports - Virtual Ports - New/Modify Port Dialog Box (for Slave Configuration) ...... 87

Figure 9.7: Expert - Ports - Ports Status (Read-Only)................................................................. 90

Figure 9.8: Expert - Ports - Port Statistics (Read-Only).............................................................. 90

L I S T O F T A B L E S

List of Tables

Table 1.1: Connectors on ACS 5000 Console Servers ...................................................................... 2

Table 1.2: Authentication Methods Supported .................................................................................. 4

Table 2.1: ACS 5000 Console Server Serial Port Pinout ................................................................ 15

Table 3.1: Figure 3.1 Descriptions.................................................................................................. 18

Table 3.2: Java Applet Buttons........................................................................................................ 19

Table 3.3: IPDU Power Mgmt. - Outlets Manager Icons and Buttons ........................................... 22

Table 3.4: IPDU Power Mgmt. - View IPDUs Info Description .................................................... 23

Table 4.1: Common Administrator Tasks ........................................................................................ 26

Table 4.2: Administrator Web Manager Buttons............................................................................. 26

Table 4.3: Administrator - Options for Trying, Saving and Restoring Configuration Change....... 27

Table 5.1: Wizard - Step 2: Port Profile Setup Options .................................................................. 30

Table 5.2: Wizard - Data Buffering Field Names and Definitions .................................................. 31

Table 6.1: Expert - Applications Menu............................................................................................ 35

Table 6.2: Expert - Applications - IPDU Power Mgmt. - Outlets Manager Icons .......................... 37

Table 6.3: Expert - Applications - IPDU Power Mgmt. - View IPDUs Info Description ............... 40

Table 6.4: Expert - Applications - IPDU Power Mgmt Configuration Description........................ 41

Table 7.1: Expert - Network Menu .................................................................................................. 47

Table 7.2: Network Host Setting Field Definitions.......................................................................... 48

Table 7.3: Expert - Fields and Menu Options for SNMP Configuration ........................................ 50

Table 7.4: Expert - Network - Firewall Configuration - TCP and UDP Options Fields ................ 54

Table 7.5: Route Type Fields in the New/Modify Route Dialog Box............................................... 58

Table 8.1: Expert - Security Menu................................................................................................... 61

Table 8.2: Expert - Security - Active Ports Sessions Information ................................................... 63

Table 9.1: Expert - Ports Menu Options.......................................................................................... 69

Table 9.2: Connections Protocols for Serial Ports Connected to Device Consoles........................ 71

Table 9.3: Available Connection Protocols When Terminal is Connected to a Serial Port ........... 72

x Cyclades ACS 5000 Installation/Administration/User Guide

Table 9.4: Connection Protocols for Modems or IPDUs ................................................................ 72

Table 9.5: Access Screen Menu and Fields ..................................................................................... 76

Table 9.6: List of Authentication Method Procedures..................................................................... 77

Table 9.7: Expert - Ports - Physical Ports - Data Buffering Fields ................................................ 78

Table 9.8: Expert - Multi User Screen Fields.................................................................................. 80

Table 9.9: Options from the Allow Multiple Sessions Pull-down.................................................... 81

Table 9.10: Expert - Power Management Screen Fields................................................................. 82

Table 9.11: Expert - Ports - Physical Ports - Other Screen Fields ................................................. 84

Table 9.12: New/Modify Port Dialog Box Fields (for Slave Configuration) .................................. 87

Table 9.13: Expert - Ports - Hostname Discovery Fields................................................................ 91

Table 10.1: Expert - Applications Menu.......................................................................................... 93

Table 10.2: Expert - Administration System Information Screen .................................................... 93

Table 10.3: Email Notifications Dialog Box Fields ........................................................................ 95

Table 10.4: Pager Notification Add/Edit Dialog Box Fields........................................................... 96

Table 10.5: SNMP Trap Notifications Add/Edit Dialog Box Fields................................................ 97

Table 10.6: Expert - Administration - Boot Configuration Screen Fields....................................... 99

Table 10.7: Expert - Administration Backup Configuration Fields and Options.......................... 101

Table 10.8: Expert - Upgrade Firmware Screen Fields ................................................................ 102

Table A.1: Technical Specifications for the ACS 5000 Advanced Console Server Hardware ..... 105

C H A P T E R

Introduction

Overview

Each model in the Cyclades ACS 5000 advanced console server series is a 1U appliance that serves as a single access point to access and manage connected devices.

Figure 1.1: ACS 5000 Advanced Console Server (ACS 5008 Console Server Shown)

NOTE: References to ACS 5000 console servers in this document include all models in the 5XXX series.

CAT 5 cables are used to connect target devices (such as servers, routers or terminals) to the serial ports on the console server. Modems can be connected to serial ports for dial-in access, and power devices can be connected to serial ports for power management.

The console server provides secure local (console port) and remote (IP and dial-up) access.

Administration is performed either with the Web Manager, with commands or with the CLI utility invoked in the console of the Linux-based operating system. Local and remote authentication, data logging and event notifications can be configured.

ACS 5000 console servers can also be managed through DSView

3 management software version

3.4.1 and greater.

2 Cyclades ACS 5000 Installation/Administration/User Guide

Connectors

The following figure shows the connectors on the back of an ACS 5000 console server, and the following table describes them.

1 3

Figure 1.2: Connectors on an ACS 5000 Console Server (ACS 5008 Console Server Shown)

Table 1.1: Connectors on ACS 5000 Console Servers

Number Description

1 Power switch and connector

Serial ports

Ethernet port

Console port - for local (analog) access to the command line through a terminal or a computer with a terminal emulator program

The number of serial ports varies by model. The serial ports can be connected to the console ports on devices, to terminals, supported power devices or modems.

Access Options

Secure access is available through local (console port) and remote (IP and dial-up) access:

• LAN/WAN IP network connection.

• Dial-up to an optional external modem connected to a serial port.

• Target device connection - If a serial port is connected to the console of a device, an authorized user can make a Telnet, SSH v1, SSH v2 or Raw Socket connection to the device console through the Web Manager. An authorized user can also use a Telnet or SSH client to make a connection directly to the console of a device that has been configured for direct access. If a serial port is connected to a terminal, an authorized user can connect directly from the terminal to the console server or to a menu that an administrator can configure for management of other servers.

• ACS 5000 console server console connection - An administrator can log in either from a local terminal or from a computer with a terminal emulation program that is connected to the

Chapter 1: Introduction 3 console port and can enter commands in the Linux

shell or use the Command Line Interface

(CLI) utility.

NOTE: Only one root or admin user can have an active CLI or Web Manager session. A second root or admin user who attempts to access the console server must abort or close the other user session.

WARNING: If automated cron jobs are running, a root or admin user login can cause the cron jobs to fail.

Web Manager

Users and administrators perform most tasks through the Web Manager. The Web Manager runs in any supported browser (such as Netscape

, Internet Explorer, Firefox

or Mozilla) in any supported computer that has network access to the console server.

The administrator can use the Web Manager to authorize users and configure security and ports. An authorized user can access connected devices through the Web Manager to troubleshoot, maintain, cycle power and reboot connected devices and change the user password.

Types of Users

The console server supports the following user account types:

• A root user who can manage the console server and its connected devices. The root user performs the initial network configuration.

NOTE: It is strongly recommended that you change the default password avocent for root and admin before you put the console server into operation.

• An admin user and optionally added additional users who are in the Admin group.

• Regular users who can access the connected devices through the serial ports they are authorized for. Regular users have limited access to the Web Manager features.

Services

An administrator can enable or disable the following services based on the site security policy through the Web Manager and the CLI:

• Telnet

• ICMP

• HTTP

• HTTPS

• RPC

• SNMP

• SSH v1

• SSH v2

4 Cyclades ACS 5000 Installation/Administration/User Guide

The following global security policies are also configurable:

• Allow SSH root access

• HTTP redirection to HTTPS

The following options for configuration of serial ports can also be enabled or disabled:

• Console (Telnet)

• Console (SSH)

• Console (Raw)

• Authentication required for access to serial ports

Authentication

Authentication can be performed locally or on a remote server, such as an LDAP, RADIUS, or

TACACS+ authentication server. A fallback mechanism is also provided.

Table 1.2: Authentication Methods Supported

Authentication Type

None

DSView

DSView/Local

DSViewDownLocal

LDAP

LDAP/Local

LDAPDownLocal

Local

Local/Radius

Local/TACACS+

Radius

Definition

No authentication

Authentication is performed with a DSView 3 server

DSView authentication is tried first, then Local

Local authentication is performed only if the DSView 3 server is down

Authentication is performed with an LDAP server

LDAP authentication is tried first, then Local

Local authentication is performed only if the LDAP server is down

Authentication is performed locally (using the /etc/passwd file)

Local authentication is tried first, then RADIUS

Local authentication is tried first, then TACACS+

Authentication is performed with a Radius authentication server

RadiusDownLocal

TACACS+

TACACS+/Local

TACACS+DownLocal

Local authentication is performed only if the Radius server is down

Authentication is performed with a TACACS+ authentication server

TACACS+ authentication is tried first, then Local

Local authentication is tried only if the TACACS+ server is down

Chapter 1: Introduction 5

Security Certificates

The console server generates its own self-signed SSL certificate for HTTPS using OpenSSL.

NOTE: It is highly recommended that you use the OpenSSL tool to replace the automatically generated certificate. See the Cyclades ACS 5000 Command Reference Guide for procedures to obtain a Signed Digital

Certificate, configure a self-signed digital certificate and implement authentication of SSH sessions through exchange of X.509 certificates.

Certificate for HTTP security

A certificate for HTTP security is created by a Certificate Authority. Certificates are most commonly obtained through generating public and private keys using a public key algorithm like

RSA or X.509. The keys can be generated by using a key generator software.

User configured digital certificate

You can generate a self-signed digital certificate.

X.509 certificate on ssh

The OpenSSH software included with the console server has support for X.509 certificates. The administrator must activate and configure SSH to use X.509.

Packet Filtering

An administrator can configure the device to filter packets like a firewall. Packet filtering is controlled by chains. A chain is a named profile that must be configured with one or more rules that define both a set of characteristics to look for in a packet and what to do with any packet that has the defined characteristics.

The console server filter table contains a number of built-in chains that cannot be deleted; all input and output packets and packets to be forwarded are accepted. The policy for how to handle built-in chains can be modified.

To configure packet filtering, an administrator can do the following:

• Add a new chain and specify rules for that chain

• Add new rules to existing chains

• Edit a built-in chain or delete the built-in chain rules

SNMP

An administrator can enable and configure the Simple Network Management Protocol (SNMP) agent so that the SNMP agent sends notifications about significant events or traps to an SNMP

management application. The SNMP agent supports SNMP v1/v2 and v3. See Services on page 3

and Expert - Network - SNMP on page 50 for more information.

6 Cyclades ACS 5000 Installation/Administration/User Guide

Notifications, Alarms and Data Buffering

An administrator can set up logging, notifications and alarms to alert administrators of problems.

System generated messages on the console server and the connected devices can be sent to syslog servers for handling. The administrator can also configure storage of data from communication on serial ports in data buffer files. By default, logging, notifications, alarms and data buffering are not enabled. Data can be stored locally in the Flash memory or remotely, either on an NFS server or a syslog server.

Configuration of Access to Connected Devices

During hardware installation, the installer connects servers, devices and any modems or power units to the serial ports. During software configuration, the administrator must enable the ports, configure each port to match the type of device connected and also configure user authorizations for the ports and for optional power management.

For port configuration procedures, see Expert - Ports - Physical Ports on page 69. For user

configuration procedures, see Expert - Security - Users and Groups on page 61.

Power Management

Authorized users can power up, power down and reboot devices that are plugged into one of the following types of power devices, which can be optionally connected to any of the serial ports:

• Cyclades PM Intelligent Power Distribution Units (IPDUs) - With Cyclades PM IPDUs, up to

128 IPDU outlets can be daisy-chained from a single serial port.

• Avocent SPC power control devices

• Server Technology Sentry™ family of Switched Cabinet Power Distribution Units (CDUs) and switched CDU Expansion Module (CW/CX) power devices

• Server Technology Sentry Power Tower XL™ (PTXL) and Power Tower Expansion Module

(PTXM) power devices

NOTE: The term IPDU is used to refer to any of these types of power devices.

If a target device is connected to a serial port and is also connected to one or more IPDUs, an authorized user can manage power while connected to the target device. While connected, the user can enter a configurable hotkey to bring up a power management screen. The default hotkey is

Ctrl+Shift+p

The following figure shows two daisy-chained Cyclades IPDUs connected to serial port 2 on a console server.

Chapter 1: Introduction 7

Figure 1.3: Example: Daisy-chained Cyclades IPDUs

Administrators can use the Web Manager to authorize users and configure ports for power management. For information on how to configure power management and authorize users for

outlets, see Expert - Applications - IPDU Power Mgmt on page 36, Ports - Physical Ports - Power

Management on page 81 and Expert - Applications - PMD Configuration on page 42.

Authorized users can use the Web Manager to perform power management. For information on

how users manage power, see IPDU Power Management on page 21.

The ACS 5000 console server automatically recognizes and supports a Cyclades PM IPDU or

Avocent SPC device when the serial port to which the power device is connected has been configured for power management.

Additional requirements for Server Technology IPDUs

For supported Server Technology IPDUs, the following additional requirements apply:

• The ACS 5000 console server must be managed by a DSView 3 server (DSView 3 software version 3.4.1 or above).

• The needed power device license must be present, and the power device must be added to the

DSView 3 software.

The license is automatically downloaded from the DSView 3 server onto the ACS 5000 console server, and then configuration and management can be performed either through the DSView software or through the Web Manager.

8 Cyclades ACS 5000 Installation/Administration/User Guide

Conventions used to identify outlets

Several formats (such as outlet names, outlet groups, IPDU IDs and port names) can be used to identify outlets during configuration, as described below:

• An administrator can configure optional names for each outlet to replace the default names assigned by the system. Outlet names must begin with a letter. Valid characters are letters, numbers, dash (-) and underscore (_). When an outlet name is configured, the name can be used in other power management configurations.

NOTE: Outlet names can be configured in two places in the Web Manager. Ensure that names are consistent.

• An administrator can configure outlet groups. Once defined, outlet groups are specified with the dollar sign ($) prefix followed by the outlet group name: $outlet_groupname. For example,

$Cyclades_IPDU specifies an outlets group called Cyclades_IPDU.

• An administrator can specify outlets in any of the following ways:

• With a name that was configured for the outlet

• With an outlet group name preceded by the $ suffix

• With the IPDU ID assigned to the IPDU

• With the port number to which the IPDU is connected

The IPDU and port number are always followed by one or more outlet numbers in brackets:

[outlets]. Commas between outlet numbers indicate multiple outlets. Hyphens indicate a range.

For example, [1,5-8] specifies outlets 1, 5, 6, 7 and 8.

• IPDU ID - An IPDU ID is automatically assigned to each IPDU when the port to which it is connected is configured for power management. An administrator can optionally assign a name to each IPDU. Both automatically assigned and administrator-assigned names are referred to as IPDU IDs.

• Specify outlets with the IPDU ID in the following format: IPDU_ID[outlets]. For example, ilA[4,5] specifies outlets 4 and 5 on an IPDU whose ID is ilA.

• When devices are plugged into more than one IPDU, you can separate multiple IPDU entries with commas in the form IPDU_ID[outlets],IPDU_ID[outlets]. For example, i1A[1,5],i1B[2] specifies two outlets on IPDU i1A and one outlet on a daisy-chained

IPDU whose IPDU ID is ilB.

• Port number - To specify outlets by the port number to which the IPDU is connected, use the suffix !ttyS followed by the port number followed by [outlets]. For example, !ttyS2[16] indicates outlet 16 on an IPDU that is connected to serial port 2.

You can specify outlets in a chain of IPDUs with the port ID two different ways:

• By the outlet sequence. For example, in !ttyS3[2,16], outlet number 2 is the second outlet on the first IPDU in a chain that is connected to port 3. If the first IPDU has 10 outlets, outlet number 16 would be the sixth outlet on the second IPDU.

Chapter 1: Introduction 9

• By IPDU sequence, identified with alphabetic characters. The first IPDU is A and the second is B and so forth. Precede the character with a hyphen. For example, !ttyS3-B[6] would also refer to the sixth outlet on the second IPDU in the chain connected to port 3.

Hostname Discovery

An administrator can configure hostname discovery on the console server. When hostname discovery is enabled for a serial port, the console server attempts to discover the hostname of the server connected to the port. If the hostname of a server is successfully discovered, the hostname of the device connected to it is shown as the serial port alias.

If the server is later moved to another port, and the new port is also configured for hostname discovery, the hostname for the server is again discovered at the new serial port.

See To configure hostname discovery: on page 80 for more information.

NOTE: If the console server is being managed through DSView 3 software, hostname discovery can be configured through the DSView 3 software.

An administrator can also configure site-specific probe and answer strings. These strings are used to probe the target device that is connected to the selected serial port and extract the hostname from the answer that is received in response to the probe string. The result of each probe string is matched against all answer strings. If no match is found, the next probe string is sent until there are

no more probe strings or a match occurs. See To configure hostname discovery probe and answer

strings [Expert]: on page 91. The default strings have a broad range and work in most cases.

NOTE: Probe string configuration requires knowledge of C-style escape sequences. Answer strings require knowledge of POSIX extended regular expressions. Hostnames longer than 31 characters are truncated when the hostname is assigned to the serial port alias.

10 Cyclades ACS 5000 Installation/Administration/User Guide

C H A P T E R

Installation

You can mount the ACS 5000 console server on a wall, rack or cabinet or place it on a desktop or other flat surface. Two brackets are supplied with six hex screws to connect the brackets to the console server.

Figure 2.1: Bracket Connections for Front Mount Configuration

Mount the Console Server

To perform the following procedure, use a Phillips screwdriver and the screws provided with brackets plus the appropriate nuts and bolts for the rack.

To rack mount the console server:

Install the brackets to the front or back edges of the ACS 5000 console server using a screwdriver and the screws provided with the mounting kit.

Mount the console server in a secure position.

Make an Ethernet Connection

Connect an Ethernet cable from the 10/100BaseT port to an Ethernet hub or switch.

12 Cyclades ACS 5000 Installation/Administration/User Guide

Connect Devices to Serial Ports

Use RJ-45 to DB-9 CAT 5 crossover cables to connect the console port of each device to the serial port.

NOTE: Turn on the power switches of the connected devices only after you have completed the physical connection to the console server.

Make a Direct Connection to Configure Network Parameters

To connect a computer or terminal to the console port:

Connect a CAT 5 straight-through cable with RJ-45 connectors to an appropriate adaptor

(supplied). Adaptors have an RJ-45 connector on one end and either a DB-25 or DB-9 male or female connector on the other end.

Connect the RJ-45 end of the cable to the Console port on the console server.

Connect the adaptor end of the cable to a terminal or a computer that has a terminal emulator.

Make sure the terminal settings are 9600 bps, 8, None, 1 and None.

Turn Power On

Perform the following procedure in the order shown to avoid problems with components on connected devices.

To tun on power for the console server:

Make sure the power is turned off on the console server and connected devices.

Plug the power cable into the console server and into a power source.

Turn the console server power switch on.

Turn on the power switches of the connected devices.

Perform Basic Network Configuration using the wiz Command

The following procedure assumes that a hardware connection exists between the console port and either a terminal or computer with a terminal emulator.

Chapter 2: Installation 13

To log into the console server through the console:

From a connected terminal or computer with a terminal emulator, log into the console port as root.

ACS5000 login: root

Password: avocent

WARNING: For security reasons, it is recommended that you change the default password avocent as soon as possible for the root and admin users. To change the default password, enter the passwd command at the prompt and enter a new password when prompted.

To use the wiz command to configure network parameters:

Launch the configuration wizard by entering the

wiz

command.

[root@ACS5000 root]#

wiz

The system displays the configuration wizard banner and begins running the wizard.

At the prompt, enter

to change the defaults.

Set to defaults (y/n)[n]:

Press

Enter

to accept the default hostname, otherwise enter your own hostname.

Hostname [CAS]: fremont_branch_console server

Enter n to specify a static IP address for console server.

Do you want to use DHCP to automatically assign an IP for your system?

(y/n)[y] :

Enter an IP address at the prompt.

System IP[192.168.160.10]: <console server_IP_address>

Enter the domain name.

Domain name[avocent.com]: <domain_name>

Enter the IP address for a primary DNS (domain name) server.

Primary DNS Server[192.168.44.21] : <DNS_server_IP_address>

Enter the IP address for the gateway.

Gateway IP[eth0] : <gateway_IP_address>

Enter the netmask for the subnetwork.

Network Mask[#] : <netmask>

The network configuration parameters appear.

10. Enter

after the prompts shown in the following screen example.

Are all these parameters correct? (y/n)[n]:

14 Cyclades ACS 5000 Installation/Administration/User Guide

Do you want to activate your configurations now? (y/n)[y]:

Do you want to save your configuration to Flash? (y/n)[n]:

11. To confirm the configuration, enter the

ifconfig

command.

Add Users and Configure Ports with the Web Manager

NOTE: From the factory, the console server is configured with all serial ports disabled.

An administrator can add users, enable and configure serial ports and authorize users and groups to

access ports. For more information on how to manage users and ports, see Web Manager Security

Menu Options on page 61 and Web Manager Ports Menu Options on page 69.

For more information on how regular users access the Web Manager to manage devices, perform power management and change their own passwords, see Chapter 3.

Other Ways to Access the Web Manager

You can access the Web Manager with either a DHCP-assigned IP address or the default IP address.

NOTE: Web Manager access with either DHCP or the default IP address requires additional setup and configuration specific to your network configuration.

To use the default IP address to access the Web Manager:

The default IP address for the console server is 192.168.160.10. This procedure assumes that you are able to temporarily change the IP address of a computer that is located on the same subnet as the

ACS 5000 console server.

On a computer that resides on the same subnet as the console server, change the network portion of the IP address of that computer to 192.168.160. For the host portion of the IP address, you can use any number except 10, 0 or 255.

Open a browser on the computer with the changed address. Enter the console server’s default

IP address, http://192.168.160.10, to bring up the Web Manager and log in.

Connect Power Devices

You can connect Cyclades PM IPDUs to serial ports using an RJ-45 to RJ-45 UTP cable. Cyclades

IPDUs have two RS-232 connectors and can be daisy-chained. Any combination of Cyclades

IPDUs can be daisy-chained into a single virtual power distribution unit with a maximum of 128 outlets.

Avocent SPC and Server Technology PTXL power devices can be also connected to and managed by the ACS 5000 console server with special cabling and an adaptor. Daisy-chaining of SPC devices is not allowed. Only one level is allowed with Server Technology IPDUs The cables and

Chapter 2: Installation 15 adaptors are available from Avocent, or you can build your own cable if needed. The following table provides the serial port pinout information for the ACS 5000 console server.

Table 2.1: ACS 5000 Console Server Serial Port Pinout

Pin No.

Signal Name

RTS

DTR

TxD

GND

CTS

RxD

DCD

DSR

Input/Output

OUT

See Appendix C for information about how to contact Avocent Technical Support for more information about cable requirements and installation of Avocent SPC devices and Server

Technology IPDUs.

To daisy-chain Cyclades IPDUs from the console server:

This procedure assumes that one Cyclades PM IPDU is already connected to a serial port on the console server.

Connect one end of a UTP cable with RJ-45 connectors to the OUT port of the Cyclades IPDU that is directly connected to the serial port on the console server.

Connect the other end of the cable to the IN port of the next Cyclades IPDU.

Repeat steps 1 and 2 until you have connected the desired number of Cyclades IPDUs.

16 Cyclades ACS 5000 Installation/Administration/User Guide

C H A P T E R

Web Manager for Regular Users

Users perform most tasks through the Web Manager. The Web Manager runs in a browser and provides a real-time view of all equipment connected to the console server.

An authorized user can use the Web Manager to access devices connected to serial ports:

• If a device console is connected, the user can access the console of the target device.

• If a terminal is connected, the user can connect from the terminal to the console server and access other servers.

• If a modem is connected, a user can dial- and access the console server and connected devices.

• If an IPDU is connected, a user can manage power for devices connected to the outlets of the

IPDU.

Users can also change their own passwords through the Web Manger.

To log into the Web Manager:

Enter the IP address of the console server (for example, http://189.103.133.13) in the address field of a browser.

Press

Enter

. The Web Manager login screen appears.

Enter your username and password.

18 Cyclades ACS 5000 Installation/Administration/User Guide

Features of Regular User Screens

The following figure shows features of the Web Manager when regular users log in.

Figure 3.1: Regular User Screen

Table 3.1: Figure 3.1 Descriptions

Number

Description

Left menu

Logout and console server information area

Reload page button

Help button

Chapter 3: Web Manager for Regular Users 19

Connect

When you select Connect from the left menu, you can connect to the console of the console server or to the console of devices connected to the serial ports. The list of ports in the Serial pull-down menu includes the port names or administrator-defined aliases only for enabled ports that you are authorized to access.

When you select Connect, a Java applet viewer appears.

NOTE: The Java applet viewer needs the Java 2 Runtime Environment (JRE) version 1.4.2 or later, which must be installed on any computer used to connect to devices.

Figure 3.2: Java Applet Viewer

Table 3.2: Java Applet Buttons

Button

SendBreak

Disconnect

Purpose

Send a break to the terminal

Disconnect from the Java applet

20 Cyclades ACS 5000 Installation/Administration/User Guide

Table 3.2: Java Applet Buttons (Continued)

Button Purpose

Left icon: Reconnect

Right icon: End the session and disconnect from the Java applet.

To use the Web Manager to connect to the console of the console server:

Select Connect in the Web Manager. The Connect screen appears.

Click the Connect to ACS 50XX radio button. The Java viewer appears.

To use the Web Manager to connect to a device through a serial port:

Select Connect in the Web Manager. The Connect screen appears.

Select a port from the Serial pull-down list.

Select Connect. The Java viewer appears.

To use Telnet to connect to a device through a serial port:

For this procedure, you need the hostname of the console server or its IP address and the TCP port number for the serial port to which the device is connected.

The example assumes that the Telnet service is supported on the operating system where the telnet command is entered. To use a Telnet client, enter the information in the dialog boxes of the client.

To use Telnet in a shell, enter the following command:

# telnet hostname | IP_address TCP_port_number

To close a Telnet session:

Enter the Telnet hotkey defined for the client. The default is

Ctrl ]

to quit.

To use SSH to connect to a device through a serial port:

For this procedure, you need the username configured to access the serial port, the TCP port number and the hostname of the console server or its IP address.

To use SSH in a shell, enter the following command:

# ssh -l username:TCP_port_number console_server_IP_address_or_DNSname

To close an SSH session:

Enter the hotkey defined for the SSH client followed by a period at the beginning of the line (the default is

Chapter 3: Web Manager for Regular Users 21

IPDU Power Management

If you are authorized to manage outlets on a power management appliance, the IPDU Power Mgmt. option displays a screen with three tabs: Outlets Manager, Outlet Groups Ctrl and View IPDUs

Info.

Figure 3.3: Regular User - IPDU Power Mgmt. Tabs

You can use the screens under IPDU Power Mgmt. to manage outlets or view IPDU information.

IPDU Power Mgmt. - Outlets Manager

When you select IPDU Power Mgmt. - Outlets Manager, an error message appears either if the console server cannot detect an IPDU that has been configured for power management or if you are not authorized to manage power on any IPDU outlets.

If a configured IPDU is connected and you are authorized for power management of one or more outlets, the IPDU Power Mgmt. - Outlets Manager screen lists the following for each serial port that has an IPDU connected and is configured for power management: the port number (Serial Port:

N), the IPDU ID (Ipdu ID), the model (such as PM8) and the number of IPDUs connected (Number of Units). (More than one Cyclades IPDU can be daisy-chained from a serial port, so the Number of

Units is incremented by one for each daisy-chained IPDU.)

The Show button shows details about the outlets on the IPDU. For Avocent SPC power devices, the

Outlet Name, Minimum On Time, Minimum Off Time and Wake State are shown. For Server

Technology IPDUs, the Outlet Name, Post On Delay and Wake State are shown.

The following example shows the outlets and their states for a Cyclades IPDU connected to Port

16.

22 Cyclades ACS 5000 Installation/Administration/User Guide

[

Figure 3.4: IPDU Power Mgmt. - Outlets Manager - Show Outlets Screen

Table 3.3: IPDU Power Mgmt. - Outlets Manager Icons and Buttons

Button Purpose

Yellow bulb - Outlet is ON

Gray bulb - Outlet is OFF

Closed padlock - Outlet is locked

Open padlock - Outlet is unlocked

Outlet is ON

Displays a dialog box to configure an Outlet Name and Post On Delay. Outlet names must begin with a letter. Valid characters are letters, numbers, dash (-) and underscore

(_). The post on delay is the amount of time (in seconds) that elapses after the selected outlet is turned on before another outlet is turned on.

To view status, lock, unlock, rename or cycle power outlets:

NOTE: For a group of outlets, the Cycle button operates only if all outlets of the group are turned ON.

Select IPDU Power Mgmt. - Outlets Manager. The Outlets Manager screen appears.

Click the Show button for the IPDU whose outlets you want to manage. A list of outlets appears.

To switch an outlet (or an outlet group) on or off, click its light bulb icon.

NOTE: For Avocent SPC power devices or Server Technology IPDUs, a dialog box prompts you that you may need to refresh your browser to view the change in the Outlets Manager. Click OK and continue.

To lock or unlock an outlet (or an outlet group), click its padlock icon.

NOTE: The outlet locking function is available on Cyclades IPDUs only.

To cycle power to an outlet, click the adjacent Cycle button.

Chapter 3: Web Manager for Regular Users 23

To change the outlet name or the post on delay, click the Edit button. The Edit Outlet dialog box appears.

To change the name assigned to the outlet, enter a new name in the Outlet Name field.

Names must begin with a letter. Valid characters are letters, numbers, dash (-) and underscore (_).

To change the Post On Delay (the time between when this outlet is turned on and another can be turned on), change the default 0.50 number of seconds in the Post On Delay field.

NOTE: If you change the outlet name here, make sure it is consistent with any name that may have been configured under Ports - Physical Ports - Power Management.

Click OK.

Click the Save Outlets State button (saves outlet states to the IPDU only).

NOTE: For Avocent SPC power devices or Server Technology IPDUs, a dialog box prompts you that the screen automatically reloads. Click OK and wait for confirmation that the page has been reloaded.

Click apply changes.

IPDU Power Mgmt. - View IPDUs Info

If you select IPDU Power Mgmt. - View IPDUs Info, you can view the following information about each port configured for power management

Table 3.4: IPDU Power Mgmt. - View IPDUs Info Description

Screen Heading

Model

Number of Outlets

Number of Inlets

Syslog

Buzzer

Software Version

Polling Rate

Current [value]

Description

Either a default name or administrator-configured IPDU

ID appears followed by the serial port number to which the

IPDU is connected in parentheses.

i1A (serial port 1)

The model of supported IPDU connected to the console server at the designated port.

Cyclades PM8

The number of outlets on the IPDU.

Total number of inlets available on the target IPDU.

Example

Whether syslogging has been configured for messages from this IPDU.

ON when syslogging is configured

Whether a buzzer has been configured to sound when a specified alarm threshold has reached.

ON when the buzzer is configured

IPDU firmware version installed on the IPDU.

1.7.0

The time interval at which the IPDU is polled by the PMD. 10000 ms

The instantaneous current measured from the IPDU at this time.

1.3 A

24 Cyclades ACS 5000 Installation/Administration/User Guide

Table 3.4: IPDU Power Mgmt. - View IPDUs Info Description (Continued)

Screen Heading

Threshold Max

Max Detected

Description

The maximum current that can be reached before an alarm is initiated or the buzzer sounds, or both.

The recorded maximum current reported by this IPDU

(which may include transients).

Example

20.0 A

1.3 A

IPDU Power Mgmt. - Outlets Group Ctrl

If you select IPDU Power Mgmt. - Outlet Groups Ctrl, you can view the status of outlet groups and turn power off and then on again for an entire group of outlets, if outlet groups have been defined and if you are authorized to control them.

Figure 3.5: IPDU Power Mgmt. - Outlet Groups Ctrl

The same icons shown in Table 3.3 on page 22 appear on this screen. The Cycle button only can be

used to cycle the entire group of outlets and only when all the outlets are on.

Security

If you select Security, you can configure your password.

To change your password:

Select Security. The Security screen appears.

Enter your current password in the Current Password field.

Enter the new password in the New Password and the Repeat New Password fields.

Click OK.

C H A P T E R

Web Manager for Administrators

This section is for administrators who use the Web Manager to configure the ACS 5000 console server. For information on how to perform administration with shell commands or the Command

Line Interface (CLI), see the Cyclades ACS 5000 Command Reference Guide.

This section provides an overview of the Web Manager. Subsequent sections describe the menus, screens and the configuration procedures of the Web Manager in Wizard and Expert modes. If you are a regular user who is not a member of the Admin group, see Chapter 3 for more information.

Log Into the Web Manager

To log into the Web Manager:

To display the Web Manager, enter the IP address of the console server in the address field of your browser.

NOTE: The ACS console server is usually assigned a static IP address. If DHCP is enabled, you must find out the dynamically-assigned IP address each time you need to run the Web Manager. If necessary, use the default static IP address 192.168.160.10 pre-configured in the console server.

If DHCP is disabled, use the static IP address assigned by the administrator.

If DHCP is enabled, enter the dynamically-assigned IP address.

The Login page appears.

root

and enter the root password. The default password is

avocent.

CAUTION: It is important to change the root and admin default passwords as soon as possible to avoid security breaches.

If another administrator is already logged in, a dialog box will prompt you to log off the other administrator before logging in.

Select Yes or No and then click Apply.

26 Cyclades ACS 5000 Installation/Administration/User Guide

Common Tasks for ACS 5000 Console Server Administrators

The following table shows some of the common tasks that are performed by an administrator with references to more information about performing the task.

Table 4.1: Common Administrator Tasks

Task

Set up users and groups

Enable and configure serial ports and user authorizations for access to serial ports

Configure serial ports for power management

Where documented

Expert - Security - Users and Groups on page 61

Expert - Ports - Physical Ports on page 69

Authorize users to manage outlets

Set up local or remote data buffering and specify alarms for one or more serial ports

Set up logging of system messages to a syslog server

Select an authentication method for accessing connected devices

Configure packet filtering

To configure a serial port for an IPDU [Expert]: on page

To authorize a user for IPDU power management: on page 45

To configure data buffering for serial ports: on page 79

To choose a method for sending notifications: on page

To configure syslogging for serial ports and specify

message filtering [Expert]: on page 49

Expert - Security - Authentication on page 64

Expert - Network - Firewall Configuration on page 52

Common Features of Administrator Forms

The following figure shows the control buttons that appear when an administrator is logged into the

Web Manager.

Figure 4.1: Administrator - Web Manager Buttons

Table 4.2: Administrator Web Manager Buttons

Button name

back try changes cancel changes

Use

Only appears in Wizard mode; returns to the previous screen.

Tests the changes entered on the current screen without saving them.

Cancels all unsaved changes.

Chapter 4: Web Manager for Administrators 27

Table 4.2: Administrator Web Manager Buttons (Continued)

Button name

apply changes reload page

Help next no unsaved changes unsaved changes

Use

Applies and saves all unsaved changes to the Flash memory

Reloads the page.

Displays the online help.

Only appears in Wizard mode; goes to the next screen.

Button appears and a graphical LED appears in green when no changes have been made that need to be saved.

Only appears if the current user has made changes and has not yet saved them. Appears instead of the no unsaved changes button. The graphical

LED blinks red.

The Web Manager buttons to try, save and cancel configuration changes are summarized in the following table.

Table 4.3: Administrator - Options for Trying, Saving and Restoring Configuration Change

Button

try changes

Use

Click this button to update the appropriate configuration files. Changes are preserved if you log in and log out and even if you restart the system. Changes stay in effect unless the cancel changes button is clicked. The changes can be restored at any time until the apply changes button is clicked.

cancel changes Click this button to restore the configuration files from a previously created backup, which was created the last time changes were applied.

apply changes If try changes has not been previously clicked, click this button to update the appropriate configuration files. Overwrites the backed up copy of the configuration files.

Overview of Administrative Modes

The console server Web Manager operates in one of two modes, Wizard or Expert.

Wizard mode

The Wizard mode guides the administrator through five configuration steps.

The following is a typical screen of the console server web interface in Wizard Mode. The user entry screen varies with the selected menu option. The Expert button appears in Wizard mode.

28 Cyclades ACS 5000 Installation/Administration/User Guide

Figure 4.2: Example of Web Manager Screen in Wizard Mode

Expert mode

In Expert mode, the top menu bar list the primary menu options. The left menu options change based on which top menu option is selected. An option can have multiple tabs as shown in the following figure. The Wizard button appears at the lower left of the screen in Expert mode.

Figure 4.3: Example of Web Manager Tabs in Expert Mode

C H A P T E R

Web Manager Wizard Mode

Step 1: Network Settings

An administrator can select Step 1: Network Settings in Wizard mode to configure network settings.

Basic network settings that are required to enable logins through the Web Manager are configured during initial setup. Skip this step if the current settings are correct.

NOTE: An administrator can use the Expert - Network - Host Settings screen to perform advanced network configuration.

If DHCP is disabled, additional fields appear that allow the administrator to configure a static IP address.

To configure the network settings:

Select Wizard - Step 1: Network Settings.

To enable DHCP, make sure the DHCP checkbox is selected and select Step 2: Port Profile.

To disable DHCP, click on the checkbox to deselect DHCP.

Enter the required network information.

Click apply changes to save the configuration to Flash..

Step 2: Port Profile

An administrator can select Step 2: Port Profile in Wizard mode to enable all serial ports and to configure the protocol and connection parameters used to access all devices connected to all serial ports. This screen should be used to configure ports only if all serial ports are connected to the consoles of target devices and only if all target devices have the same connection parameters.

NOTE: All serial ports are disabled by default and they cannot be accessed until an administrator enables them.

NOTE: An administrator can use the Expert - Ports - Physical Ports tabs to assign different parameters to individual serial ports or groups of serial ports; specify Connection Protocols for other device types that may be connected, such as terminals, modems, and IPDUs; authorize users and groups for access to individual ports; configure data buffering and perform other advanced port configuration.

42 Cyclades ACS 5000 Installation/Administration/User Guide

Table 5.1: Wizard - Step 2: Port Profile Setup Options

Parameter Description

Connection Protocol Sets the protocol used to connect to the consoles of devices that are connected to all serial ports.

Console (SSH) encrypts data and authentication information.

Console (TelnetSSH) allows users to connect using either protocol.

Console (Raw) is for unnegotiated plain socket connections.

Must match the connection parameters on all devices connected to all serial ports.

• Flow Control

• Parity

• Baud Rate (Kbps)

• Data Size

• Stop Bits

Authentication Required If selected, authentication uses the local passwd database. To specify other authentication methods such as RADIUS, TACACS+, or LDAP, select Expert -

Security - Authentication.

To set parameters for all serial ports:

Select Wizard - Step 2: Port Profile.

Change default parameters, as appropriate.

To change whether authentication is required, check the Authentication Required checkbox to enable or leave it unchecked to disable.

Click apply changes.

Step 3: Access

An administrator can select Step 3: Access in Wizard mode to add or delete user accounts and set or change existing passwords. An admin account is listed by default and cannot be deleted. The administrator can grant administrator privileges to other users by adding the user accounts to an

Admin group.

NOTE: To define a new group, select Expert - Security - Users and Groups.

The Access screen lists the currently defined users and provides Add, Change Password and Delete buttons.

To add a user:

Select Wizard - Step 3: Access. The Access screen appears.

Click Add. The Add User dialog box appears.

Enter the username and password in the appropriate fields.

Select from the Group menu options.

Chapter 5: Web Manager Wizard Mode 43 a.

To create a regular user account without administrator privileges, select Regular User from the Group pull-down menu.

To create an account with administrator privileges, select Admin from the Group pulldown menus.

Enter the default shell in the Shell field (optional).

(Optional) Enter comments to identify the job or the user in the Comments field.

Click OK.

Click apply changes.

To change a password:

CAUTION: Leaving the default admin password (avocent) unchanged leaves the console server and connected devices open to anyone who knows the default password and the IP address. For better security, change the admin password from the default as soon as possible.

Select Wizard - Step 3: Access. The Access screen appears.

Select the name of the user whose password you wish to change.

Click Change Password. The Change User Password dialog box appears.

Enter the new password in both fields and click OK.

Click apply changes.

Step 4: Data Buffering

An administrator can select Step 4: Data Buffering in Wizard mode to save a record of all communication with serial ports. Data buffer files can be stored either in local files on the Flash memory or on the hard disk of an NFS server. If Enable Data Buffering is selected, different fields appear when the selected Destination is Local or Remote.

NOTE: Values configured on this screen apply to all serial ports. To configure a syslog server to store buffered data, an administrator can select Expert - Ports - Physical Ports - Modify Selected Ports - Data Buffering.

Table 5.2: Wizard - Data Buffering Field Names and Definitions

Field name Definition

Destination Location for storing the buffer file: Local (to Flash) or Remote (to an NFS server).

When Remote is selected, data is stored sequentially. The NFS server must be configured with the mount point shared (exported).

44 Cyclades ACS 5000 Installation/Administration/User Guide

Table 5.2: Wizard - Data Buffering Field Names and Definitions (Continued)

Field name Definition

Mode

File Size (Bytes)

Local Destination only - Select Linear to write the data to sequential files or Circular for non-sequential format.

In circular mode, data is written into the specified local data file until the upper limit on the file size is reached; then the data is overwritten from the top of the file as additional data comes in. Circular buffering requires the administrator to set up processes to examine the data during the timeframe before the data is overwritten by new data.

In linear mode, data is written into a sequence of files, and the files are not reused.

The administrator must make sure enough space is available for the expected amount of data and take measures such as moving unneeded data files offline, to ensure data does not outgrow the available space.

Local Destination only - Set a file size greater than zero. Make sure the file size does not exceed the space available on the Flash memory. The recommended size is 1024.

Record the timestamp

NFS File Path

Show Menu

If selected, the system inserts a timestamp in the buffer.

Remote Destination only - Enter the path to the NFS server and the shared directory where the data buffer file should be stored.

Select the options you wish to show in the menu of the buffer file.

To configure data buffering:

Select Wizard - Step 4: Data Buffering.

Click the Enable Data Buffering checkbox. The Destination pull-down menu appears.

Select a location (either Local or Remote) for the data files from the Destination pull-down menu. Additional pull-down menus and fields appear, based on which destination is selected.

When the destination is local, perform the following steps.

From the Mode pull-down menu, select Circular or Linear data buffering.

Type a file size in bytes into the File Size (Bytes) field. The file size should be greater than zero.

When the destination is Remote, perform the following steps.

In the NFS File Path field, enter the pathname for the mount point of the directory where the data buffer file is to be stored. For example, if the mount point pathname is

/var/adm/acslogs, enter

/var/adm/acslogs

in the field.

NOTE: The NFS server must already be configured with the mount point shared (exported), and the shared directory from the NFS server must be mounted on the console server. b.

To cause a timestamp to be saved with the data in the data buffer file, select the Record the

timestamp in the data buffering file checkbox.

Chapter 5: Web Manager Wizard Mode 45 c.

Select an option from the Show Menu pull-down menu. The choices are: show all options,

No, Show data buffering file only and Show without the erase options.

Click apply changes.

Step 5: System Log

An administrator can select Step 5: System Log in Wizard mode to configure one or more syslog servers to receive syslog messages generated by the serial ports and by IPDUs, if IPDU power management is configured.

NOTE: To configure a syslog server to store buffered data, select Expert - Ports - Physical Ports - Modify

Selected Ports - Data Buffering.

Make sure a configured syslog server is available on the same network as the console server. From the syslog server administrator, obtain the the IP address of the syslog server and the facility number for messages from the console server.

To add a syslog server:

This procedure assumes you have the IP address of the syslog server and the facility number for messages coming from the console server.

Select Wizard - Step 5: System Log. The System Log screen appears.

From the Facility Number pull-down menu, select the facility number.

In the New Syslog Server field, enter the IP address of a syslog server and then click Add.

(Repeat this step until all syslog servers are listed.)

The new server(s) appears in the Syslog Servers list.

Click apply changes.

46 Cyclades ACS 5000 Installation/Administration/User Guide

C H A P T E R

Web Manager Applications Menu

Options

This section describes the Web Manager Applications menu options and related screens in Expert mode.

Table 6.1: Expert - Applications Menu

Menu Selection

Connect

IPDU Power Mgmt.

PMD Configuration

Use this menu to:

Connect to the console server shell via a secure SSH session or connect to the serial ports.

Manage power outlets on supported IPDUs that are connected to serial ports that are configured for power management. Turn power on and off, reboot connected devices, change IPDU configuration, check the status or lock power outlets.

Configure a username and password pair to match the IPDU username and password configuration; authorize users for power management, and create outlet groups

Terminal Profile Menu Configure a menu of commands to be presented when a terminal that may be

connected to a serial port is turned on. The menu can be configured to present a list of servers to be accessed from the terminal menu. Without the menu, the terminal accesses the console of the console server directly.

Expert - Applications - Connect

An administrator can select Expert - Applications - Connect to connect to the console of the console server and to devices connected to the serial ports.

NOTE: The same screen appears when a regular user logs in.

To connect to the console of the console server [Expert]:

Select Expert - Applications - Connect.

Click the Connect to ACS 50XX radio button.

Click Connect. A Java applet viewer appears.

36 Cyclades ACS 5000 Installation/Administration/User Guide

To connect to a device through a serial port [Expert]:

Select Expert - Applications - Connect.

Select a port number or alias from the Serial pull-down menu.

Click Connect. A Java applet viewer appears. If authentication is specified for the selected port, you are prompted to log in. If not, you are logged in automatically.

Expert - Applications - IPDU Power Mgmt

When an administrator selects Expert - Applications - IPDU Power Mgmt., the following five tabs appear:

• View IPDUs Info

NOTE: You can manage the power on a connected IPDU only if the serial port where the IPDU is connected is

configured for power management (see To configure a serial port for IPDU power management [Expert]: on page

83). For other restrictions and prerequisites, see Power Management on page 6.

Applications - IPDU Power Mgmt. - Outlets Manager

An administrator can select Expert - Applications - IPDU Power Mgmt. - Outlets Manager to perform the following tasks:

• Check the status of outlets.

• Turn outlets on and off.

• Cycle power.

• Lock outlets to prevent accidental changes in power state (Cyclades IPDUs only).

• Unlock the outlets (Cyclades IPDUs only).

• Assign an alias to the outlet (to identify the device for which it provides power).

• Change the interval that elapses after one outlet is turned on before another outlet is turned on.

• Save the current configuration to Flash memory in the IPDU.

Chapter 6: Web Manager Applications Menu Options 37

Figure 6.1: Expert - Applications - IPDU Power Mgmt. - Outlets Manager

A list shows the port ID, IPDU ID, the model and vendor for IPDUs connected to ports that are configured for power management. The Show button shows details about the selected IPDU. For

Avocent SPC power devices, the Outlet Name, Minimum On Time, Minimum Off Time and Wake

State are displayed. For Server Technology IPDUs, the Outlet Name, Post On Delay and Wake

State are displayed.

The following example shows the outlets and their states for a Cyclades IPDU connected to Port 1.

Figure 6.2: Expert - Applications - IPDU Power Mgmt. - Outlets Manager - Show Outlets

Table 6.2: Expert - Applications - IPDU Power Mgmt. - Outlets Manager Icons

Button Purpose

Yellow bulbs indicate an outlet is switched ON. Gray bulbs indicate an outlet is switched OFF.

An opened padlock indicates that an outlet is unlocked. A closed padlock indicates that an outlet is locked.

38 Cyclades ACS 5000 Installation/Administration/User Guide

Table 6.2: Expert - Applications - IPDU Power Mgmt. - Outlets Manager Icons (Continued)

Button Purpose

An orange Cycle button is active next to each outlet that is on.

Displays a dialog box to configure an Outlet Name and Post On Delay. Outlet names must begin with a letter. Valid characters are letters, numbers, dash (-) and underscore

(_). The post on delay is the amount of time (in seconds) that elapses after the selected outlet is turned on before another outlet is turned on.

To view status, lock, unlock, rename or cycle power outlets [Expert]:

NOTE: For a group of outlets, the Cycle button operates only if all outlets of the group are turned ON.

Select Expert - Applications - IPDU Power Mgmt. - Outlets Manager. The Outlets Manager screen appears with each IPDU listed.

Click the Show button associated with the IPDU whose outlets you want to manage. A list of outlets appears.

To switch an outlet (or an outlet group) on or off, click its light bulb icon.

NOTE: For Avocent SPC power devices or Server Technology IPDUs, an alert window prompts you that you may need to refresh your browser to view the change in the Outlets Manager. Click OK and continue.

To lock or unlock an outlet (or an outlet group), click its padlock icon.

NOTE: The outlet locking function is available on Cyclades IPDUs only.

To turn power to an outlet on and off, click the adjacent Cycle button.

To change the outlet name or the Post On Delay, click the adjacent Edit button. The Edit Outlet dialog box appears.

To change the name assigned to the outlet, enter a new name in the Outlet Name field.

Names must begin with a letter. Valid characters are letters, numbers, dash (-) and underscore (_).

To change the Post On Delay, change the default 0.50 number of seconds in the Post On

Delay field.

NOTE: If you change the outlet name here, make sure it is consistent with any name that may have been configured for the outlet under Ports - Physical Ports - Power Management.

Click OK.

Click the Save Outlets State button (saves outlet states to the IPDU only).

NOTE: For Avocent SPC power devices or Server Technology IPDUs, an alert window prompts you that the screen is automatically reloaded. Click OK and wait for confirmation that the page has been reloaded.

Click apply changes.

Chapter 6: Web Manager Applications Menu Options 39

Applications - IPDU Power Mgmt. - Outlets Group Ctrl

An administrator can select Expert - Applications - IPDU Power Mgmt. - Outlet Groups Ctrl to view the status of outlet groups and turn power off and then on again for an entire group of outlets.

NOTE: Outlet groups can be defined under PMD Configuration - Outlet Groups.

Figure 6.3: Expert - Applications - IPDU Power Mgmt. - Outlet Groups Ctrl

The same icons shown in Table 6.2 on page 37 appear on this screen.

NOTE: The Cycle button only can be used to turn power on and off for a group of outlets when all the outlets are on.

Applications - IPDU Power Mgmt. - View IPDUs Info

An administrator can select Expert - Applications - IPDU Power Mgmt. - View IPDUs Info to view information about each IPDU controlled by the console server. The Clear Max Detected Current button resets the maximum detected current value. The Clear Max Detected Temperature button resets the maximum detected temperature value.

Figure 6.4: Expert - Applications - IPDU Power Mgmt. - View IPDUs Info

40 Cyclades ACS 5000 Installation/Administration/User Guide

Table 6.3: Expert - Applications - IPDU Power Mgmt. - View IPDUs Info Description

Screen Heading

Model

Number of Outlets

Number of Inlets

Syslog

Buzzer

Software Version

Polling Rate

Current [value]

Threshold Max.

Max Detected

Description Example

Either a default name or administrator-configured IPDU ID appears followed by the serial port number to which the

IPDU is connected in parentheses.

i1A (serial port 1)

The model of supported IPDU connected to the console server at the designated port.

The number of outlets on the IPDU.

Total number of inlets available on the target IPDU.

Cyclades PM8

Whether syslogging has been configured for messages from this IPDU.

ON when syslogging is configured

Whether a buzzer has been configured to sound when a specified alarm threshold has reached.

ON when the buzzer is configured

IPDU firmware version installed on the IPDU.

1.7.0

The time interval at which the IPDU is polled by the PMD. 10000 ms

1.3 A The instantaneous current measured from the IPDU at this time.

The maximum current that can be reached before an alarm is initiated or the buzzer sounds, or both.

20.0 A

The recorded maximum current reported by this IPDU

(which may include transients).

1.3 A

To view and reset IPDU information [Expert]:

Select Expert - Applications - IPDU Power Power Mgmt. - View IPDUs Info. The View IPDUs

Info screen appears.

To clear the stored values, click the Clear Max Detected Current button or the Clear Max

Detected Temperature button.

Applications - IPDU Power Mgmt. - Configuration

An administrator can select Expert - Applications - IPDU Power Mgmt. - Configuration to configure each configured IPDU.

NOTE: The operating parameters may differ depending on the make and model of IPDU.

Chapter 6: Web Manager Applications Menu Options 41

Figure 6.5: Expert - Applications - IPDU Power Mgmt. - Configuration

Table 6.4: Expert - Applications - IPDU Power Mgmt Configuration Description

Shown

ID:

Model:

Polling Rate

Enable Syslog

Enable Buzzer

Current

Threshold Max (A)

Total Load

Max (A)

Total Load

Min (A)

Element Type

Heading

Text field

Number field

Checkbox

Number field

Description

IPDU ID and port to which IPDU is connected.

Make and model of IPDU at the designated port.

Names must begin with a letter. Valid characters are letters, numbers, dash (-) and underscore (_).

Enter the polling time (how often the console server accesses the

IPDU for updates) in milliseconds. Default is 10000ms.

Click this checkbox to enable/disable syslog logging (Cyclades IPDUs only).

Click this checkbox to enable/disable IPDU alarm buzzer (Cyclades

IPDUs only).

Enter the maximum amperes allowed by the IPDU before generating an alarm (Cyclades IPDUs only). Exceeding the entered threshold maximum current will also prevent the IPDU from powering up again until the problem is corrected.

Enter the maximum amperes allowed by the IPDU before generating an event. (Always enabled, SPC and Server Technology IPDUs only.)

Usually set for zero, setting this field to a minimum value for current

(amperes) is useful for monitoring if a device or devices lose power unexpectedly, which will generate an event (Avocent SPC power devices and Server Technology IPDUs only).

Applications - IPDU Power Mgmt. - Software Upgrade

An administrator can select Expert - Applications - IPDU Power Mgmt. - Software Upgrade to upgrade software (firmware) for Cyclades PM IPDUs only. The screen shows the currently installed software version on the selected IPDU. If a newer software version is available, you can download new software for your IPDU using the following procedure.

42 Cyclades ACS 5000 Installation/Administration/User Guide

To download Cyclades IPDU software:

Point your browser to http://www.avocent.com/web/en.nsf/Content/Cyclades_Download-PM to open the Downloads page.

NOTE: The web server must be in the same subnet as the console server.

Compare the displayed version number to the version shown in the Applications - IPDU Power

Mgmt. - Software Upgrade screen.

If a newer firmware version is available, click the Firmware link associated with the appropriate version. The download starts.

After the download completes, copy the file into the /tmp folder and rename it with the filename pmfirmware.

To upgrade software on a Cyclades PM IPDU [Expert]:

Select Power Mgmt. - Software Upgrade. The Software Upgrade screen is displayed.

Click Refresh. If a /tmp/pmfirmware exists containing a more recent version of the PM firmware than the one currently installed, an Update button is displayed.

Click Update.

Click apply changes.

To upgrade software on a non-Cyclades IPDU:

Avocent SPC power devices are not user upgradable. For Server Technology IPDUs, upgrades must be done through a network port. Contact Server Technology support to check if new software is available and to obtain information on how to upgrade the device.

Expert - Applications - PMD Configuration

When an administrator selects Expert - Applications - PMD Configuration, the following three tabs appear:

• General

• Outlet Groups

• Users Management

An administrator can select these tabs to configure the username and password for IPDUs, create outlet groups and authorize users and groups to access specific outlets.

To find the IPDU ID [Expert]:

1. Select Expert - Access - IPDU Power Management - View IPDUs Info.

2. Note the string in the ID field.

Chapter 6: Web Manager Applications Menu Options 43

Applications - PMD Configuration- General

An administrator can select Expert - Applications - PMD Configuration - General to configure a username and password for each supported IPDU type. The areas on the screen are labeled:

Cyclades (for Cyclades PM IPDUs), SPC (for Avocent SPC power devices) and Server Tech (for supported Server Technology IPDUs). The username and password are used to authenticate communication between the console server and the IPDU. If the IPDU username and password are changed in the IPDU firmware, the username and password must be changed in this screen so the console server can use the correct username and password to communicate with the IPDU.

Figure 6.6: Applications - PMD Configuration - General

Applications - PMD Configuration- Outlet Groups

An administrator can select Expert - Applications - PMD Configuration - Outlet Groups to configure outlet groups.

Figure 6.7: Expert - Applications - PMD Configuration - Outlet Groups Screen

Any configured outlet groups are listed in the Group column, followed by the string used to identify the group during configuration (in the form IPDU_ID[outlets] as shown). The Add, Edit and Delete buttons are used to configure the outlet groups.

44 Cyclades ACS 5000 Installation/Administration/User Guide

Specify groups of outlets using the following format:

IPDU_ID[outlets]

Where IPDU_ID is the name configured for the IPDU (such as ilA) and outlets are numbers separated with commas or with dashes (to indicate a range), as in the following example: ilA[1,2,5-15]

You can assign outlets from more than one IPDU to a group by using commas to separate them.

The following example defines an outlet group for two IPDUs, one named ilA and the other ilB: ilA[1,5-8],ilB[1,3,4]

For more information, see Conventions used to identify outlets on page 8. See also Expert -

Applications - PMD Configuration on page 42 to find out the IPDU ID.

To configure an outlet group:

Click the Add button. The Add/Edit Outlet Groups dialog appears.

In the Group field, enter the name of the group you want to add, or to edit the existing name.

In the Outlets field, add the IPDU ID followed by the specific outlets to assign to the group in brackets. For example, i1A[1,5-8] creates a group of outlets numbered 1, 5, 6, 7 and 8 on IPDU

ID ilA. You can assign more than one IPDU to the group, with a comma between each IPDU.

Click OK.

To delete an outlet group:

Click the Delete button.

Select the group name you want to delete.

Click OK.

Applications - PMD Configuration- Users Management

An administrator can select Expert - Applications - PMD Configuration - Users Management to configure users to access outlets.

Figure 6.8: Expert - Applications - PMD Configuration - Users Management Screen

Chapter 6: Web Manager Applications Menu Options 45

The listed users are authorized to access and control the outlets specified under the Outlets heading.

To authorize a user for IPDU power management:

Select Expert - Applications - PMD Configuration - Users Management.

Click Add. Add/Edit PM Users dialog box appears.

In the User field, enter the username.

In the Outlets field, enter the group name, IPDU number and outlets that the user can control.

Click OK.

Expert - Applications - Terminal Profile Menu

An administrator can select Expert - Applications - Terminal Profile Menu to configure a terminal command menu. This menu is used if a terminal is connected to one of the serial ports and the serial port is configured as a local terminal. A connection to a serial port configured as a local terminal launches a session on the terminal with access to the Linux commands on the console unless you configure a menu here.

Figure 6.9: Expert - Applications - Terminal Profile Menu

The menu can contain any command recognized by the Linux operating system on the console server. The most common use of this feature is to create multiple menu options for launching SSH sessions on several remote hosts.

For example, you can create a menu called SSH to Servers with options that launch SSH connections to several servers, as shown in the following example.

46 Cyclades ACS 5000 Installation/Administration/User Guide

Figure 6.10: Expert - Terminal Profile Menu Example

To create a menu for a local terminal:

Select Expert - Applications - Terminal Profile Menu. The Terminal Profile menu appears.

Enter a title for the menu in the Menu title field.

To edit an existing menu option, select the Action Name from the table and then click Edit.

To add a new menu option, click Add. The Add Option dialog box appears.

Enter a title for the menu option in the Title field.

Enter an action or command to be executed when the user clicks the menu option in the

Action/Command field.

Click OK.

Click apply changes.

C H A P T E R

Web Manager Network Menu

Options

This section describes the Web Manager Network menu options and related screens in Expert mode.

Table 7.1: Expert - Network Menu

Menu Selection Use This Menu to:

Host Settings

Syslog

SNMP

Configure the network parameters such as Host Name, IP addresses,

DNS services, and Gateway.

Configure how the console server handles syslog messages. The console server generates syslog messages related to users connecting to ports, login failures and other information that can be used for audit and control purposes.

Configure SNMP with community names, OID and usernames. This section and the dialog boxes guide you to configure the required parameters.

Firewall Configuration

Host Tables

Configure how packets are filtered.

View information about the local network environment.

View table of hosts; configure hosts.

Static Routes Manually add static routes.

48 Cyclades ACS 5000 Installation/Administration/User Guide

Expert - Network - Host Settings

An administrator can select Expert - Network - Host Settings to configure host settings. The following screen appears if DHCP is enabled.

Figure 7.1: Expert - Network - Host Settings [DHCP Enabled]

If DHCP is not enabled, additional options appear.

Table 7.2: Network Host Setting Field Definitions

Field name Field Definition

Host Name

Console Banner

Primary Address

Secondary Address

Network Mask

Secondary Network Mask

MTU

Primary DNS Server

Secondary DNS Server

Domain Name

Gateway IP

The fully qualified domain name.

A text string designed to appear on the console upon logging into and exiting from a port as a way to identify the connected device.

IP address of the console server unit.

A secondary IP address assigned to the console server if the unit is on more than one network.

The 32-bit number used to group IP addresses together or to indicate the range of IP addresses for a subnet.

Optional.

Maximum Transmission Unit used by the TCP protocol.

Address of the Domain Name Server.

(Optional) Address of a backup Domain Name Server.

Example: domainname.com.

The IP address of the gateway on the subnet.

To configure host settings [Expert]:

Select Expert - Network - Host Settings. The Host Settings screen appears.

Chapter 7: Web Manager Network Menu Options 49

To configure a static IP address, make sure the DHCP checkbox is cleared. Additional fields appear.

Enter a name for the console server in the Host Name field.

(Optional) Enter a console banner in the Console Banner field.

Under Ethernet Port, complete or edit the following fields, as necessary.

Enter the IP address of the console server in the Primary IP field.

Enter the netmask in the Network Mask field.

Specify the desired maximum transmission unit in the Maximum Transmission Unit field.

Under DNS Service, specify or change the following information, if desired.

Enter the address of the domain name server in the Primary DNS Server field.

If there is a backup DNS server, enter the address of the secondary DNS in the Primary

DNS Server field.

Enter the domain in the Domain Name field.

Enter the IP address of the gateway in the Gateway IP field.

Click apply changes.

Expert - Network - Syslog

An administrator can select Expert - Network - Syslog to configure the following aspects of how the console server handles system log messages for ports connected to device consoles.

• One or more syslog servers to receive syslog messages related to ports.

• Rules for filtering messages.

• The facility number for the messages from device consoles. Obtain the facility numbers from the syslog server administrator.

• A destination for syslog messages:

• The console port - to enable logs of the messages even if no user is logged in.

• To all sessions where the root user is logged in.

• To one or more syslog servers.

To configure syslogging for serial ports and specify message filtering [Expert]:

Select Expert - Network - Syslog. The Syslog screen appears.

To select a facility number for messages generated by serial ports, select the number from the

CAS Ports Facility pull-down menu.

To select a destination for the syslog messages, click the checkbox next to one or all of the options: Console, Root User or Server.

To add a syslog server to the Syslog Servers list, enter its IP address in the New Syslog Server field and click Add.

Configure the message filtering to your requirements.

50 Cyclades ACS 5000 Installation/Administration/User Guide

Click apply changes.

Expert - Network - SNMP

An administrator can select Expert - Network - SNMP to configure notifications about significant events and traps to be sent from the console server to an SNMP management application, such as

Openview, Novell

NMS, IBM

NetView

or Sun

Net Manager.

Table 7.3: Expert - Fields and Menu Options for SNMP Configuration

Field or Menu Option Description

SysContact

SysLocation

Community

Source

OID

Permission

User Name and Password

Email address of the console server’s administrator, for example, [email protected].

Physical location of the console server. Default is Cyclades_ACS_5000.

SNMP v1 and v2 only. A community defines an access environment. The type of access is classified under Permission: either read only or read write. The most common community is public.

NOTE: Use of a public community name is discouraged because it is commonly known. By default, the public community cannot access SNMP information on the console server.

SNMP v1 and v2 only. Valid entries are default or a subnet address, for example, 193.168.44.0/24.

Object Identifier. Each managed object has a unique identifier.

Read Only or Read/Write access to the entire MIB except for SNMP configuration objects.

SNMP v3 only.

When an administrator clicks the Add and Edit buttons under SNMPv1/SNMPv2 Configuration, the New/Mod SNMP v1 v2 Configuration dialog box appears.

Figure 7.2: Expert - New/Mod SNMP v1 v2 Configuration Dialog Box

Chapter 7: Web Manager Network Menu Options 51

When an administrator selects the Add and Edit buttons under SNMPv3 Configuration, the New/

Mod SNMP v3 Configuration dialog box appears.

Figure 7.3: Expert - Network - SNMP - New/Mod SNMP v3 Configuration Dialog Box

To configure SNMP [Expert]:

Select Expert - Network - SNMP. The SNMP screen appears.

To enable any version of SNMP, perform the following: a.

To add an SNMPv1/SNMPv2 entry, click Add button the SNMPv1/SNMPv2

Configuration table. b.

To add an SNMPv3 entry, click Add at the bottom of the SNMPv3 Configuration table.

The New/Modify SNMP Daemon Configuration dialog box appears.

To edit any SNMP configuration, perform the following steps.

For SNMPv1 or SNMPv2 select the entry from the SNMPv1/SNMPv2 configuration list and click Edit.

To edit an SNMPv3 entry, select an entry from the SNMPv3 Configuration list and click

Edit. The New/Modify SNMP Daemon Configuration dialog box appears.

For SNMP v1 or v2 configuration, enter or change the following information: a.

Enter the community name in the Community field.

Enter the source IP address or range of IP addresses in the Source field.

For SNMP v3 configuration, enter or change the following information: a.

Enter the username in the User name field.

Enter the password in the Password field.

NOTE: The SNMPv3 password must be fewer than 31 characters.

For any version of SNMP, perform the following: a.

Enter the unique object identifier for the object in the OID field.

Select Read Only or Read/Write from the Permission menu.

52 Cyclades ACS 5000 Installation/Administration/User Guide

Click OK.

Click apply changes.

NOTE: In addition to SNMP configuration described in this section, you need to make sure SNMP service is enabled and configured for one or more serial ports in order to send SNMP traps.

Expert - Network - Firewall Configuration

An administrator can select Expert - Network - Firewall Configuration to configure the console

server to act as a firewall. See Packet Filtering on page 5 for an overview of configuration options.

Figure 7.4: Expert - Network - Firewall Configuration

By default, three built-in chains accept all INPUT, FORWARD and OUTPUT packets. The Edit,

Delete, Add and Edit Rules buttons are selected to: edit default chains, delete user-added chains, add new chains and configure rules for new chains. User-defined chains cannot be edited but they can be deleted. Default chains can be edited but cannot be deleted.

Only the policy can be edited for a default chain; default chain policy options are ACCEPT and

DROP.

NOTE: If a default chain is selected and Delete is clicked, an error message appears. If this message appears, click OK to continue.

When a chain is added, only a named entry for the chain is created. One or more rules must be configured for a chain after it is added.

Expert - Network - Firewall Configuration: Add and Edit Rule - Target actions

For each rule, an action (either ACCEPT, DROP, RETURN, LOG or REJECT ) must be selected from the Target pull-down menu. The selected action is performed on an IP packet that matches all the criteria specified in the rule.

If the administrator selects the Inverted checkbox for an option, the target action is performed on packets that do not match any of the criteria specified for that option.

Chapter 7: Web Manager Network Menu Options 53

If the LOG or REJECT options are selected, additional sections appear on the screen.

If LOG is selected from the Target pull-down menu, the administrator can configure a Log Level and a Log Prefix and can select whether the TCP sequence, TCP options and IP options are logged in the Log Options Section.

Figure 7.5: Expert - Network - Firewall Configuration - Add Rule and Edit Rule LOG Target Fields

If REJECT is selected from the Target pull-down menu, the administrator can select an option from the Reject with pull-down menu; the packet is dropped and a reply packet of the selected type is sent.

Figure 7.6: Expert - Network - Firewall Configuration - Add Rule and Edit Rule REJECT Target Menu

Options

Expert - Network - Firewall Configuration: Add and Edit Rule - Protocol options

On the Expert - Network - Firewall Configuration - Add Rule and Edit Rule dialog boxes, different fields appear for each option in the Protocol pull-down menu.

If Numeric is selected from the Protocol menu, a text field appears for the number.

If TCP is selected from the Protocol menu, a TCP Options Section appears for source and destination ports and TCP flags.

54 Cyclades ACS 5000 Installation/Administration/User Guide

Figure 7.7: Expert - Network - Firewall Configuration - Add Rule and Edit Rule - TCP Options

If UDP is selected from the Protocol menu, the UDP Options Section for source and destination ports.

Figure 7.8: Expert - Network - Firewall Configuration - Add Rule and Edit Rule UDP Options

The following table describes the options in the TCP Options and UDP Options sections.

Table 7.4: Expert - Network - Firewall Configuration - TCP and UDP Options Fields

Field/Menu Option Definition

A single IP address or a range of IP addresses. Source Port

- or -

Destination Port

- and - to

TCP Flags

Inverted

[TCP only] SYN (synchronize), ACK (acknowledge), FIN (finish), RST (reset),

URG (urgent) and PSH (push). The conditions in the pull-down menu for each flag are: Any, Set or Unset.

Invert the condition.

If ICMP is selected from the Protocol menu, the ICMP Type pull-down menu appears at the bottom of the screen.

Expert - Network - Firewall Configuration: Add and Edit Rule - Interface options

If an administrator enters the Ethernet interface (eth0) in the input or output interface fields and selects an option from the Fragments pull-down menu, the target action is performed on packets from or to the specified interface if they meet the criteria in the selected Fragments menu option.

Chapter 7: Web Manager Network Menu Options 55

Figure 7.9: Expert - Network - Firewall Configuration - Input/Output Interface Fields and Fragments Menu

Options

To add a chain [Expert]:

Select Expert - Network - Firewall Configuration.

Click Add. The Add Chain dialog box appears.

Enter the name of the chain to be added in the Name field.

Click OK. The name of the new chain appears in the list.

NOTE: Spaces are not allowed in the chain name.

Add one or more rules to complete the chain configuration, as described in To add a rule

[Expert]: on page 55.

To edit a default chain [Expert]:

Perform this procedure if you wish to change the policy for a default chain.

NOTE: User-defined chains cannot be edited. To rename a user-added chain, delete it and create a new one.

Select Expert - Network - Firewall Configuration.

Select one of the default chains and then click the Edit button. The Edit Chain dialog box appears.

Select the desired policy from the Policy pull-down menu.

Click OK.

Click apply changes.

To edit rules for this chain, go to To edit a rule [Expert]: on page 56.

To add a rule [Expert]:

Select Expert - Network - Firewall Configuration.

Select the chain to which you wish to add a rule from Chain list and then click the Edit Rules button. The Edit Rules dialog box appears.

Click Add Rule. The Add Rule dialog box appears.

Select menu options, enter information in fields and select checkboxes to configure the rule.

Click OK.

Click apply changes.

56 Cyclades ACS 5000 Installation/Administration/User Guide

To edit a rule [Expert]:

Select Expert - Network - Firewall Configuration.

Select the chain that you wish to edit from the list and click Edit Rules. The Edit Rules dialog box appears.

Select the rule to be edited from the Rules list and then click Edit. The Edit Rule dialog box appears.

Modify the rule.

Click OK.

Click apply changes.

Expert - Network - Host Tables

An administrator can select Expert - Network - Host Tables to define a table of host names and IP addresses that make up the local network.

Figure 7.10: Expert - Network - Host Tables

To define the console server IP address and hostname [Expert]:

Select Expert - Network - Host Tables. The Host Tables screen appears.

To edit a host, select the host IP address from the list and click Edit .

To add a host, click the Add button. The host table dialog box appears.

Enter the new or modified host address in the IP Address field and the host name in the Name field.

Click OK.

To delete a host, select the host and click Delete.

Click apply changes.

Chapter 7: Web Manager Network Menu Options 57

Expert - Network - Static Routes

An administrator can select Expert - Network - Static Routes to configure static routes.

Figure 7.11: Expert - Network - Static Routes

When an administrator clicks either Edit or Add, the screen shown in the following figure appears.

Figure 7.12: Expert - Static Routes Add and Edit Dialog Boxes - Default Route

58 Cyclades ACS 5000 Installation/Administration/User Guide

The following figure shows the fields and menus that appear when the Network route type is selected from the Route pull-down menu.

Figure 7.13: Expert - Static Routes Add and Edit Dialog Boxes - Network Route

The following figure shows the fields and menus that appear when the Host route type is selected.

Figure 7.14: Expert - Static Routes Add and Edit Dialog Boxes - Host Route

Table 7.5: Route Type Fields in the New/Modify Route Dialog Box

Field or Menu Name Definition

Route

Network IP

Options are Default, Network, or Host.

Appears only when Network is selected. Enter the IP address of the destination network.

Network mask

Host IP

Appears only when Network is selected. Enter the netmask of the destination network.

Appears only when Host is selected. Enter the IP address of the destination host.

Chapter 7: Web Manager Network Menu Options 59

Table 7.5: Route Type Fields in the New/Modify Route Dialog Box (Continued)

Field or Menu Name Definition

Go to

Metric

Options are Gateway or Interface. Enter the IP address of the gateway or the name of the interface in the adjacent field.

Enter the number of hops to the destination.

To configure static routes [Expert]:

Select Expert - Network - Static Routes. The Static Routes screen appears.

• To edit a static route, select a route from the Static Routes list and then click Edit.

• To add a static route, click Add. The New/Modify Route dialog box appears.

Choose Default, Network or Host from the Route pull-down menu.

If you selected Network, perform the following steps.

Enter the IP address of the destination network in the Network IP field.

Enter the netmask of the destination network in the Network Mask field.

If you selected Host, enter the IP address of the destination host in the Host IP field.

Select Gateway or Interface from the Go to pull-down menu and enter the address of the gateway or the name of the interface in the adjacent field.

Click apply changes.

60 Cyclades ACS 5000 Installation/Administration/User Guide

C H A P T E R

Web Manager Security Menu

Options

This section describes the Web Manager Security menu options and related screens in Expert mode.

Table 8.1: Expert - Security Menu

Menu Selection

Users and Groups

Use this menu to:

Configure users and groups

Active Ports Sessions View active port sessions

Authentication Configure unit authentication and authentication servers

Services Configure which services and security-related features are enabled on the console server

Expert - Security - Users and Groups

An administrator can select Expert - Security - Users and Groups to perform the following tasks:

• Set up user accounts

• Assign users to groups to share common authorizations

• Assign or change passwords

• Create new groups

The two default groups are:

• Admin - Read/Write Access

• Regular User - Limited Read/Write Access

CAUTION: For better security, make sure the default password (avocent) for the root and admin users is changed as soon as possible.

62 Cyclades ACS 5000 Installation/Administration/User Guide

Figure 8.1: Expert - Security - Users and Groups screen

To add a user [Expert]:

Select Expert - Security - Users and Groups. The Users and Groups screen appears.

Click Add. The Add User dialog box appears.

Enter the username in the User Name field.

Enter the password in the Password and Repeat Password fields.

Assign a group from the Group pull-down menu.

(Optional) Select a shell from the Shell pull-down menu.

(Optional) Enter information about the user (role or responsibilities).

Click OK.

Click apply changes.

To delete a user or group [Expert]:

Select Expert - Security - Users and Groups. The Users and Groups screen appears.

Select the name of a user or group to delete.

Click Delete.

Click apply changes.

To change a password [Expert]:

Select Expert - Security - Users and Groups. The Users and Groups screen appears.

Select the name of the user whose password you wish to change.

Click Change Password. The Change User Password dialog box appears.

Enter the new password in the New Password field and enter it again in the Repeat New

Password field.

Click OK.

Click apply changes.

Chapter 8: Web Manager Security Menu Options 63

To add a group [Expert]:

Select Expert - Security - Users and Groups. The Users and Groups screen appears.

Under the list of groups, click Add. The Add Group dialog box appears.

Enter the name for the new group in the Group Name field.

Enter one username or multiple comma-separated usernames in the Users field.

Click OK.

Click apply changes.

To modify a group [Expert]:

Select Expert - Security - Users and Groups. The Users and Groups screen appears.

Select the name of a group to modify.

Click Edit. The Edit Group screen appears.

Add or delete users from the group as desired.

Click OK.

Click apply changes.

Expert - Security - Active Ports Sessions

An administrator can select Expert - Security - Active Ports Sessions to view status and usage information about all active serial port sessions.

Open sessions are displayed with their identification and statistical data, and other related data such as CPU usage for a specific client, JCPU processes and PCPU processing time.

The administrator can click the Kill Sessions or Refresh buttons either to end or refresh a selected session.

Table 8.2: Expert - Security - Active Ports Sessions Information

Field Name Definition

User

TTY

From

Idle

JCPU

PCPU

First eight characters of the username.

Connection method.

Where the network connection is from.

How long since last activity.

The amount of CPU time consumed by all active processes including currently running background jobs.

The amount of CPU time consumed by the current process.

64 Cyclades ACS 5000 Installation/Administration/User Guide

Table 8.2: Expert - Security - Active Ports Sessions Information (Continued)

Field Name Definition

What Name of the current process.

To view, kill or refresh active user sessions:

Select Expert - Security - Active Ports Sessions. The Active Ports Sessions screen appears.

To refresh the display, click the Refresh button.

To kill a session, select the desired session and click the Kill Sessions button.

Expert - Security - Authentication

When an administrator selects Expert - Security - Authentication, the following four tabs appear:

AuthType, RADIUS, TACACS+ and LDAP.

Figure 8.2: Expert - Security - Authentication

An administrator can select Expert - Security - Authentication to configure a method to authenticate logins to the console server and to identify authentication servers.

The default authentication method for the console server is Local. You can either accept the default or select another authentication method from the Unit Authentication pull-down menu on the

AuthType screen.

Any authentication method selected for the console server is used for authentication of any user who attempts to log into the console server through Telnet, SSH or the Web Manager.

To configure the console server login authentication method:

Select Expert - Security - Authentication. The AuthType screen is displayed.

Select a method from the Unit Authentication pull-down menu.

NOTE: Make sure an authentication server is specified for the selected authentication type.

Chapter 8: Web Manager Security Menu Options 65

Click apply changes.

Configure authentication servers

For any authentication other than Local, make sure an authentication server is set up for that method.

• The ACS 5000 console server must be on the same subnet as the authentication server.

• Each authentication server must be configured and operational.

• The administrator should obtain the necessary information from each authentication server administrator, in order configure those servers on the console server.

To configure a RADIUS authentication server:

Perform this procedure to configure a RADIUS authentication server when the console server or any of its ports are configured to use the RADIUS authentication method or any of its variations

(Local/RADIUS, RADIUS/Local or RADIUS/DownLocal).

Select Expert - Security - Authentication - RADIUS.

Fill in the screen according to your local RADIUS server configuration.

Click apply changes.

To configure a TACACS+ authentication server:

Perform this procedure to configure a TACACS+ authentication server when the console server or any of its ports are configured to use TACACS+ authentication method or any of its variations

(Local/TACACS+, TACACS+/Local or TACACS+/DownLocal).

Select Expert - Security - Authentication - TACACS+. The TACACS+ screen appears.

Fill in the screen to match the TACACS+ server configuration.

To specify a time-out period in seconds for each authentication attempt, enter a number in the

Timeout field.

If the authentication server does not respond to the request for authentication of the user credentials before the specified time period, the login attempt is cancelled. The user can retry up to the maximum number of retries specified in the Retries field on this screen.

To specify a number of times the user can request authentication verification from the server before sending an authentication failure message to the user, enter a number in the Retries field.

Click apply changes.

LDAP authentication server configuration

You need the following information from the LDAP server administrator:

• The distinguished name of the search base

• The LDAP domain name

66 Cyclades ACS 5000 Installation/Administration/User Guide

• Whether to use secure LDAP

• The authentication server IP address

The following must also be configured:

• An account for admin.

• If LDAP authentication is specified for the console server, accounts for all users who need to log into the console server to administer connected devices.

• If LDAP authentication is specified for serial ports, accounts for users who need administrative access to the connected devices.

To configure an LDAP authentication server:

Perform this procedure to configure an LDAP authentication server when the console server or any of its ports are configured to use the LDAP authentication method or any of its variations (LDAP,

LDAP/Local or LDAPDownLocal).

Select Expert - Security - LDAP. The LDAP screen appears with LDAP Server and LDAP

Base fields filled in from with the current values in the /etc/ldap.conf file.

Enter the IP address of the LDAP server in the LDAP Server field.

If the LDAP authentication server uses a different distinguished name for the search base than the one displayed in the LDAP Base field, change the definition.

The default distinguished name is dc, as in dc=value,dc=value. If the distinguished name on the LDAP server is

, then replace dc in the base field with

, as in

o=value

Replace the default base name with the name of your LDAP domain.

For example, for the LDAP domain name avocent.com, the correct entry is:

dc=avocent

dc=com

Enable Secure LDAP, if required.

(Optional) Enter information in LDAP User Name, LDAP Password and LDAP Login

Attribute fields.

Click apply changes. The changes are stored in /etc/ldap.conf on the console server.

Expert - Security - Services

An administrator can select Expert - Security - Services to configure which of the following services are active on the console server according to the site security policies:

• Telnet

• SNMP

• RPC

• ICMP

• SSH v1

Chapter 8: Web Manager Security Menu Options 67

• SSH v2

• HTTP

• HTTPS

The administrator can configure the following global security policies on this screen:

• Allow SSH root access

• HTTP redirection to HTTPS

The administrator can also enable or disable the following options for configuration of serial ports:

• Console (Telnet)

• Console (SSH)

• Console (Raw)

• Authentication required for access to serial ports

To configure services:

Select Expert - Security - Services. The Services screen appears.

Select or deselect the checkboxes for services that must be enabled and disabled at your site.

Click apply changes.

68 Cyclades ACS 5000 Installation/Administration/User Guide

C H A P T E R

Web Manager Ports Menu Options

This section describes the Web Manager Ports menu options and related screens in Expert mode.

Table 9.1: Expert - Ports Menu Options

Menu Selection

Physical Ports

Virtual Ports

Use this menu to:

Enable ports, specify a connection protocol based on the type of connected device, authorize users to access the ports and optionally configure authentication for ports

Cluster multiple console servers to configure and access a large number of serial ports

(up to 1024) through one IP address

Ports Status

Ports Statistics

View information about the status of each serial port

View statistics about date transfer

Hostname Discovery Enter probe and answer strings for hostname discovery

Expert - Ports - Physical Ports

An administrator can select Expert - Ports - Physical Ports to enable ports, specify a connection protocol based on the type of connected device, authorize users to access the ports and optionally configure authentication.

NOTE: By default, all serial ports are disabled from the factory. An administrator needs to enable the ports and authorize users to access ports.

70 Cyclades ACS 5000 Installation/Administration/User Guide

Figure 9.1: Expert - Ports - Physical Ports

To select one or more serial ports:

Select Expert - Ports - Physical Ports. The Physical Ports screen appears.

To select a port or ports, perform one of the following steps.

To select a single port, click the port.

To select multiple ports in a range, select the first port and then hold down the

Shift

key while selecting another port or ports.

To select multiple ports that are not in a range, select the first port in the list and then hold down the

Ctrl

key while selecting another port.

To enable or disable serial ports:

Select Expert - Ports - Physical Ports. The Physical Ports screen appears.

To enable selected ports, click Enable Selected Ports.

To disable selected ports, click Disable Selected Ports.

Click Done.

Click apply changes.

Ports - Physical Ports - General

When an administrator selects Expert - Ports - Physical Ports, selects one or more ports and clicks the Modify button, the General screen appears.

Chapter 9: Web Manager Ports Menu Options 71

Figure 9.2: Expert - Ports - Physical Ports - General screen

The number of the selected port or ports appears next to the Done button at the bottom of the screen in the format: Selected ports #:N, where N stands for the port number.

An administrator must select a connection protocol for each port based on the type of connected device, whether it is a device console, a terminal, a modem or an IPDU.

Connection protocols for device consoles

When a serial port is connected to the console port on a device, an administrator can select a protocol with the Console suffix [such as Console (Telnet)] from the Connection Protocol pulldown menu.

• When a user accesses a serial port through the Web Manager, the specified protocol is used to connect to the console of the connected device.

• When a user logs in remotely to the serial port, access is allowed only for the selected protocol.

If another protocol is used, access is denied. For example, if you specify the Console (SSH) protocol, the user can use SSH but cannot use Telnet to access the serial port.

The following table describes the options from the list of connection protocols when the console server serial port is connected to the console port of a server or a device.

Table 9.2: Connections Protocols for Serial Ports Connected to Device Consoles

Protocol Name Result

Console (Telnet)

Console (SSH)

Console (TelnetSSH)

Authorized users can use Telnet to connect to the console of the connected device.

Authorized users can use SSH to connect to the console of the connected device.

Authorized users can use Telnet or SSH to connect to the console of the connected device. When the multiple sessions feature is configured, simultaneous Telnet and/or SSH sessions are allowed.

72 Cyclades ACS 5000 Installation/Administration/User Guide

Table 9.2: Connections Protocols for Serial Ports Connected to Device Consoles (Continued)

Protocol Name Result

Console (Raw) Authorized users can make a Raw Socket connection to the console of the connected device.

Ports - Physical Ports - General connection protocols for terminals

When a terminal is connected to the console port on a device, an administrator must select one of the connection protocols described in the following table from the Ports - Physical Ports - General screen. When the terminal connected to the selected port is turned on, the console server opens a connection of the specified type between the terminal and a remote server. The administrator must also specify the TCP port number, the terminal type and the IP address for the server on the Ports -

Physical Ports - Other screen.

Table 9.3: Available Connection Protocols When Terminal is Connected to a Serial Port

Protocol Name Result

Telnet

SSHv1

SSHv2

Local Terminal

Raw Socket

When the terminal connected to the selected port is turned on, the console server opens a Telnet connection between the terminal and the specified server.

When the terminal connected to the selected port is turned on, the console server opens an SSHv1 connection between the terminal and the specified server.

When the terminal connected to the selected port is turned on, the console server opens a SSHv2 connection between the terminal and the specified server.

When the terminal connected to the selected port is turned on, the console server opens a Telnet session between itself and the terminal. The user then can use any of the console server Linux commands. If a terminal profile menu has been configured (under

Expert - Applications - Terminal Profile Menu), the user can select and quickly launch sessions on any number of remote hosts.

When the terminal connected to the selected port is turned on, the console server opens a Raw Socket session on the specified server.

Ports - Physical Ports - General - modem and power management connection protocols

The following table shows the connection protocols that can be selected when a modem or IPDU is connected to a serial port.

Table 9.4: Connection Protocols for Modems or IPDUs

Protocol Name Result

PPP-No Auth

PPP

Starts a PPP session without interactive authentication required. Assumes the specified console server serial port is connected to an external modem.

Starts a PPP session with authentication required. Assumes the specified console server serial port is connected to an external modem.

Chapter 9: Web Manager Ports Menu Options 73

Table 9.4: Connection Protocols for Modems or IPDUs

Protocol Name Result

SLIP

CSLIP

Starts a SLIP session. Assumes the specified console server serial port is connected to an external modem.

Starts a CSLIP session. Assumes the specified console server serial port is connected to an external modem.

Power Management Configures the serial port for power management. Assumes an IPDU is connected to the serial port.

To configure a serial port for a console connection [Expert]:

This procedure assumes that the selected serial port is physically connected to a console port on a device.

Select Expert - Ports - Physical Ports, select a port or ports and click Modify Selected Ports.

The General screen appears.

Select an option from the Connection Protocol pull-down menu: Console (Telnet), Console

(SSH), Console (Telnet & SSH) or Console (Raw). The default is Console (Telnet).

If desired, enter a name for the port in the Alias field.

To change any of the other current settings, see To configure serial port connection settings to

match the connected devices [Expert]: on page 75.

To further configure the serial port perform the following tasks:

•

To configure user access and authentication, see Ports - Physical Ports - Access on page

76.

•

To configure the TCP Port number and other options see Ports - Physical Ports - Other on page 84.

To configure a serial port for a terminal server [Expert]:

This procedure assumes that the selected serial port is physically connected to a terminal. For more

information on Terminal Server connection protocols see Ports - Physical Ports - General

connection protocols for terminals on page 72.

Select Expert - Ports - Physical Ports, select a port or ports to modify and click Modify

Selected Ports. The General screen appears.

To configure a terminal to automatically connect to the console server, perform the following steps: a.

Select Local Terminal from the Connection Protocol pull-down menu.

If desired, define a menu of servers at Expert - Applications - Terminal Profile Menu.

If desired, enter a name for the port in the Alias field.

Click the Other tab,

74 Cyclades ACS 5000 Installation/Administration/User Guide a.

Enter the IP address of a server in the Host to Connect field. b.

Enter the terminal type in the Terminal Type field.

Configure other parameters on the Other screen as needed.

Specify authorized users or groups (see Ports - Physical Ports - Access on page 76).

Click Done.

Click apply changes.

To configure a serial port for direct connection with Telnet or SSH [Expert]:

Perform this procedure to enable users to directly connect (with either Telnet, SSHv1 or SSHv2) to the device that is connected to the selected serial port.

Select Expert - Ports - Physical Ports, select a port or ports to modify and click Modify

Selected Ports. The General screen appears.

Select one of the following options from the Connection Protocol pull-down menu: Telnet,

SSHv1 or SSHv2.

If desired, enter a name for the port in the Alias field.

If you wish to change any of the other current settings, see To configure serial port connection

settings to match the connected devices [Expert]: on page 75.

To further configure the serial port perform the following tasks:

•

To configure user access and authentication, see Ports - Physical Ports - Access on page

76.

•

To configure the TCP Port number and other options see Ports - Physical Ports - Other on page 84.

Click Done.

Click apply changes.

To configure a serial port for a modem [Expert]:

This procedure assumes that the selected serial port is physically connected to a modem.

Select Expert - Ports - Physical Ports, select a port or ports to modify and click Modify

Selected Ports. The General screen appears.

Select one of the following options from the Connection Protocol pull-down menu: PPP-No

Auth., PPP, SLIP or CSLIP.

If you wish to change any of the other current settings, see To configure serial port connection

settings to match the connected devices [Expert]: on page 75.

Specify authorized users or groups (see Ports - Physical Ports - Access on page 76).

To specify the TCP Port number and configure modem initialization and PPP options see Ports

- Physical Ports - Other on page 84.

Click Done.

Chapter 9: Web Manager Ports Menu Options 75

Click apply changes.

To configure a serial port for an IPDU [Expert]:

This procedure assumes that an IPDU is physically connected to the selected serial port.

Select Expert - Ports - Physical Ports, select a port to modify and click Modify Selected Ports.

The General screen appears.

Select Power Management from the Connection Protocol pull-down menu.

If desired, enter a name for the IPDU in the Alias field.

Select auto detect, Cyclades, or SPC from the Power management type pull-down menu.

Select an access method for the IPDU from the Allow Access by pull-down menu: SSH, Telnet or SSH and Telnet. Selecting an access option activates the Access and Other tabs.

Click the Access tab.

Enter the users/groups authorized to access the serial port.

Select an authentication type for the serial port from the pull-down menu.

NOTE: Authentication type None is not an option when the serial port is configured for Power Management. The default is Local if no authentication type is selected.

Click Done.

Click apply changes.

To configure an alias for a serial port [Expert]:

Select Expert - Ports - Physical Ports, select a port to modify and click Modify Selected Ports.

The General screen appears.

Enter the desired string in the Alias field.

Click Done.

Click apply changes.

To configure serial port connection settings to match the connected devices

[Expert]:

The settings for a serial port must match the connection settings on the connected device.

Select Expert - Ports - Physical Ports, select a port or ports to modify and click Modify

Selected Ports.

To change the baud rate, select an option from 2400 to 921600 Kbps from the Baud Rate pulldown menu. The default is 9600.

To change the flow control, select None, Hardware or Software from the Flow Control pulldown menu. The default is None.

To change the parity, select None, Odd or Even from the Parity pull-down menu. The default is

None.

76 Cyclades ACS 5000 Installation/Administration/User Guide

To change the data size, select an option from 5 to 8 from the Data pull-down menu. The default is 8.

To change the stop bits, select 1 or 2 from the stop bits pull-down menu. The default is 1.

To change whether the DCD (Data Carrier Detect) State is regarded or not, select either

Disregard or Regard.

NOTE: For hostname discovery to work, the DCD state must be set to Regard.

Click Done.

Click apply changes.

Ports - Physical Ports - Access

An administrator can select Expert - Ports - Physical Ports, select one or more ports, click Modify

Selected Ports, and then select the Access tab to authorize users and groups for access and configure authentication for the selected port(s).

Table 9.5: Access Screen Menu and Fields

Field Description

Authorized Users/Groups

Type

Restrict or deny access to a serial port by specifying one or more users or groups.

You can deny access to one or more users or groups by entering an exclamation point (!) before the user or group name.

For example, to explicitly deny access to a user called noadmin and enable access only to a single user called johnd you would enter the following:

!noadmin,johnd. Separate names with a comma.

Select an authentication type for the serial port from the pull-down list. The default is no authentication (Type=None).

NOTE: Authentication type None is not a valid option when the serial port is configured for Power Management. The system defaults to Local if no authentication type is selected.

NOTE: Authentication must be configured for ports if the following option is checked on the Expert - Security -

Services page: Authentication required for access to serial ports

To configure user access to serial ports:

Select Expert - Ports - Physical Ports, select a port or ports to modify and click Modify

Selected Ports.

Click the Access tab. The Access screen appears.

To restrict access to one or more users or to a group of users, enter previously defined user or group names in the Authorized Users/Groups field, with names separated by commas.

To deny access to one or more users or groups, preface the user or group names with an exclamation point (

Chapter 9: Web Manager Ports Menu Options 77

Click Done.

Click apply changes.

To configure a serial port login authentication method:

This procedure configures an authentication method that applies to logins to devices connected to serial ports. An administrator can configure the same method for all ports or different methods for individual ports or groups of ports.

Select Expert - Ports - Physical Ports, select a port or ports to modify and click Modify

Selected Ports.

Click the Access tab.

To select an authentication method, select one of the options in the Type menu.

Click Done.

Click apply changes. The changes are stored in the /etc/portSlave/pSlave.conf file on the console server.

Make sure that an authentication server is specified for the selected authentication type.

The following table lists the procedures for each authentication method.

Table 9.6: List of Authentication Method Procedures

Authentication Method Where Documented

LDAP, LDAP/Local or LDAP/DownLocal

To configure an LDAP authentication

server: on page 66.

RADIUS, Local/RADIUS, RADIUS/Local or RADIUS/DownLocal

To configure a RADIUS authentication

server: on page 65.

TACACS+, Local/TACACS+, TACACS+/Local or

TACACS+DownLocal

To configure a TACACS+ authentication

server: on page 65.

NOTE: Select a DSView authentication method in the Type menu only if the console server is managed by a

DSView 3 server.

Ports - Physical Ports - Data Buffering

An administrator can select Expert - Ports - Physical Ports - Data Buffering to enable and configure data buffering and send buffered data to a syslog server. Different fields appear on this screen when one or both options are enabled. The screen displays Enable Data Buffering and

Buffer to Syslog checkboxes.

If data buffering is enabled, the screen displays different fields depending on whether Local or

Remote are selected from the Destination menu.

78 Cyclades ACS 5000 Installation/Administration/User Guide

Figure 9.3: Expert - Ports - Physical Ports - Data Buffering Enabled

If Buffer to Syslog is checked, data buffer files are sent to the syslog server.

NOTE: Select Expert - Network - Syslog to set up a syslog server.

Table 9.7: Expert - Ports - Physical Ports - Data Buffering Fields

Field Name Definition

Destination

Mode (Local Destination) Circular or linear. In circular mode, data is written into the specified local data file until the upper limit on the file size is reached; then the data is overwritten starting from the top of the file as additional data comes in. Circular buffering requires the administrator to set up processes to examine the data during the timeframe before the data is overwritten by new data.

File Size (Bytes) (Local

Destination)

NFS File Path (Remote

Destination)

Location for the data files: Local or Remote.

The maximum file size for the data buffer file. The file size must be greater than zero.

The path for the mount point of the directory where data buffer file is to be stored.

NOTE: The NFS server must already be configured with the mount point shared

(exported), and the shared directory from the NFS server must be mounted on the console server.

Save a timestamp with the data in the data buffer file.

Record the timestamp in the data buffering file

Show Menu

Syslog Server

Facility Number

Syslog Buffer Size

Options for the buffer file.

The IP address for the preconfigured Syslog server.

Select a facility number to assign to the console server, from Local0 to Local7.

Maximum size of the buffer in the Syslog server.

Chapter 9: Web Manager Ports Menu Options 79

Table 9.7: Expert - Ports - Physical Ports - Data Buffering Fields (Continued)

Field Name Definition

Buffer SysLog at all times As indicated.

As indicated.

Buffer data only when nobody is connected to the port

Hostname Discovery

Timout (seconds)

Hostname discovery is activated only if data buffering is enabled and the DCD state is set to Regard (on the Ports - Physical Ports - General screen). The process of hostname discovery begins when the DSD state changes to ON. An administrator can configure probe strings and answer strings on the Ports -

Physical Ports - Hostname Discovery screen.

Hostname discovery time-out value.

To configure data buffering for serial ports:

Select Expert - Ports - Physical Ports, select a port or ports to modify and click Modify

Selected Ports.

Select the Data Buffering tab. The Data Buffering screen appears.

Select Enable Data Buffering.

From the Destination pull-down menu, choose Local or Remote to specify whether the data buffer files are stored locally or remotely on a file server.

If you chose Local from the Destination pull-down menu, perform the following: a.

Choose Circular or Linear from the Mode pull-down menu.

Enter a size larger than 0 in the File Size (Bytes) field. 1024 is the recommended size.

If you chose Remote from the Destination pull-down menu, enter the NFS mount point for the directory where data buffer file is to be stored in the NFS File Path field.

Click the Record the timestamp in the data buffering file checkbox to specify whether to include a timestamp with the data.

From the Show Menu pull-down menu, choose Show all options, No, Show data buffering file only or Show without the erase options.

If you checked Buffer to Syslog, enter the IP address of the syslog server in the Syslog Server field.

10. Choose an option from the Facility Number pull-down menu.

11. Enter the maximum size of the buffer in the Syslog Buffer Size field.

12. Click the radio button next to one of the following options: a.

Buffer Syslog at all times b.

Buffer only when nobody is connected to the port

13. Click Done.

80 Cyclades ACS 5000 Installation/Administration/User Guide

14. Click apply changes.

To configure alarm notifications to be sent based on the type of buffered data, select Expert -

Administration - Notifications.

Configure hostname discovery

To configure hostname discovery:

Select Expert - Ports - Physical Ports, select a port or ports to modify and click Modify

Selected Ports. The General screen appears.

Select Regard from the DCD state pull-down menu.

Select the Data Buffering tab. The Data Buffering screen appears.

Select Enable Data Buffering and perform all the configuration described in To configure data

buffering for serial ports: on page 79.

Click the Hostname Discovery checkbox.

Specify a time-out for hostname discovery in the Timeout (seconds) field. Ten seconds is a recommended value.

Click Done.

(Optional) Configure probe strings and answer strings on the Ports - Physical Ports - Hostname

Discovery screen.

Click apply changes.

Ports - Physical Ports - Multi User

An administrator can select Expert - Ports - Physical Ports - Multi User to allow multiple authorized users to connect simultaneously to a serial port and to authorize individual users for multiple user sessions.

Table 9.8: Expert - Multi User Screen Fields

Field Name Definition

Allow Multiple Sessions

Sniff Mode

Privileged Users

Menu Hotkey

Notify Users

Options are No, Yes (show menu), Read/Write (do not show menu) and

ReadOnly (do not show menu). See Table 9.9.

Enable use of sniff mode and select In, Out, In/out for the type of sniff mode.

Users authorized to use a multi user shared session.

The hotkey that users can use to access the menu.

Select the checkbox to notify users about their multiple user connection access.

Chapter 9: Web Manager Ports Menu Options 81

Table 9.9: Options from the Allow Multiple Sessions Pull-down

Menu Option Description

Yes (show menu)

Do not allow multiple user sessions. Only two users can connect to the same port simultaneously. One shared session and one standard session are allowed.

More than two simultaneous users can connect to the same serial port.

A Sniffer menu is presented to the user with the following options:

• Open a sniff session

• Open a read/write session

• Cancel a connection

• Send a message to other users connected to the same serial port.

Read/Write (do not show menu)

Read/write sessions are opened and the sniffer menu is not presented.

ReadOnly (do not show menu) Read only sessions are opened and the sniffer menu is not presented.

To configure multiple sessions and sniff mode for serial ports [Expert]:

Select Expert - Ports - Physical Ports, select a port or ports to modify and click Modify

Selected Ports.

Click the Multi User tab.

To allow or to prevent multiple sessions, select an option from the Allow Multiple Sessions pull-down menu. The options are: No, Yes (show menu), Read/Write (do not show menu),

ReadOnly.

To configure the type of data that displays on the monitor in a port-sharing session, select an option from the Sniff Mode pull-down menu.

If you have allowed multiple sessions, complete the following fields.

Add usernames to the Privilege Users field.

Enter a hotkey in the Menu Hotkey field to display the sniffer menu on the monitor. The default shown is

. The caret stands for the

Ctrl

key. c.

Enable the Notify Users field, if desired.

Click Done.

Click apply changes.

Ports - Physical Ports - Power Management

An administrator can select Expert - Ports - Physical Ports - Modify Ports - Power Management to configure the selected serial port so that an authorized user who is connected to the selected serial port can perform power management.

82 Cyclades ACS 5000 Installation/Administration/User Guide

Figure 9.4: Expert - Ports - Physical Ports - Power Management

Table 9.10: Expert - Power Management Screen Fields

Field Name Definition

Enable Power Management on this port

Outlets

Check to enable Power Management while users are connected to the the selected port.

Specify an outlet either with a name that has been administratively configured for the outlet, or with the IPDU ID or the port number, followed by the outlet number(s) in brackets.

Use commas between outlet numbers or hyphens to indicate a range, when multiple IPDUs are daisy-chained. Separate multiple

IPDU entries with commas in the form

IPDU_ID[outlets][,...IPDU_ID[outlets]]

For example, i1A[1,5-6] specifies outlets numbered 1, 5 and 6 on

IPDU ID ilA. The addition of ,i1B[2] (as in i1A[1,5,6),i1B[2) specifies that the device is also plugged into outlet 2 on a daisychained IPDU whose IPDU ID is ilB.

Power Management Key

Allow All Users

Allow Users

The hotkey that authorized user(s) can use to bring up a screen to perform power management. The default is Ctrl+p. The carat

(^) indicates the Ctrl key as shown in the default entry (^p).

Radio button to allow all users to perform power management on the configured port.

Radio button to allow only specified users to perform power management while connected to the configured port.

New User

(available only if Allow Users radio button is selected)

Entry field to add a new user.

Allowed Users (available only if Allow

Users/ radio button is selected)

List of authorized users.

Chapter 9: Web Manager Ports Menu Options 83

Power management while connected to a port is possible only when the device connected to the selected port is plugged into an IPDU connected to a serial port that is configured for power management.

If the administrator clicks Enable power management and clicks the Add button, the Add Outlet dialog box appears. In this dialog box, the administrator can specify the IPDU and the outlet number(s) into which the device is plugged.

The PM on the Power Management Alias pull-down menu in the example figure indicates that a serial port is configured for power management and an IPDU is connected to the configured port.

Separate outlet numbers with commas, as in

1,2,3,4

To configure a serial port for IPDU power management [Expert]:

Select Expert - Ports - Physical Ports, select a port or ports to modify and click Modify

Selected Ports.

Click the Power Management tab.

To enable Power Management of a device connected to the current port and plugged into a connected IPDU, click Enable Power Management on this port.

Select the name of a port configured for power management and click Add. The Add Outlet dialog box appears.

Enter the IPDUs and the outlet number(s) into which the device is connected. Separate entries for multiple IPDUs by commas.

Click Done. The power management port and the specified outlets are listed on the

PowerMgmt Port list.

Enter the power management hotkey in the Power Management Key field. Enter a caret (

) for the escape key, as in

. The caret stands for the

Ctrl

key.

Click Done.

Click apply changes.

To configure a user for IPDU power management while connected to a serial port

[Expert]:

Perform this procedure to allow a user to perform power management on a device while connected to it through one of the serial ports. You can also configure the hotkey used to bring up the power management menu.

Configure a serial port for IPDU power management as described in the previous section.

To permit everyone to perform power management on this port, click the Allow All Users radio button.

To restrict power management on this port to a set of users authorized to access this port, click the Allow Users/Groups radio button.

84 Cyclades ACS 5000 Installation/Administration/User Guide

Enter a valid username or group name in the New User/Group field and click Add. Repeat this step until all users and groups authorized to manage power for the device that is connected to this port are added.

Click Done.

Click apply changes.

Ports - Physical Ports - Other

An administrator can select Expert - Ports - Physical Ports, select one or more serial ports, click

Modify Ports, and click the Other tab to perform other configuration tasks for the selected port(s).

Table 9.11: Expert - Ports - Physical Ports - Other Screen Fields

Field Name Definition

TCP Port

Port IP Alias

Windows EMS

TCP Keep-alive Interval

Idle Timeout

STTY Options

Break Interval

Break Sequence

Host to Connect

Terminal Type

The TCP Port number for a serial port. The TCP port numbers by default start from 7001 and increment by +1 up to the number of serial ports on the console server unit. For example, a console server unit with 8 serial ports has TCP port numbers 7001 through 7008.

A name (alias) for the selected port. A port IP alias field appears when a console protocol (Console*) is selected from the Connection Protocol pull-down menu on the General screen.

Checkbox to enable Windows EMS (Emergency Management Services).

Appears only when a console (CAS) profile is selected from the

Connection Protocol pull-down menu on the General screen.

Specifies the time interval between the periodic polling by the system to check client processes and connectivity.

The maximum time (in seconds) that a session can be idle before the user is logged off.

Set terminal options.

Usually 250 to 500 milliseconds - sets a logical zero on the TXD or RXD lines to reset the communications line.

Usually a character sequence ~break (Ctrl-b).

Enter the text you wish to appear as a login banner when logging into a terminal.

This field should be populated with the IP address of the device you are connecting to. The field is displayed when a terminal server (TS) profile is selected from the Connection Protocol pull-down menu on the General screen.

When Local terminal is selected for the selected port from the Connection

Protocol pull-down menu on the General screen, a Terminal Type field appears. A pull-down menu with additional options appears when a

Console connection protocol is selected.

Chapter 9: Web Manager Ports Menu Options 85

NOTE: The Other tab does not appear when Power Management is selected from the Connection Protocol pulldown menu.

To configure TCP port number, STTY options, break interval and the login banner for a serial port connected to a device console [Expert]:

Select Expert - Ports - Physical Ports, select a port or ports to modify and click Modify

Selected Ports.

Click the Other tab.

A default TCP port number is displayed in the TCP Port field. Enter an alternate port number to override the default.

Enter an alias that can be used instead of the IP address to access the serial port in the Port IP

Alias field.

NOTE: The Port IP alias works only when the serial port is configured for direct Telnet or SSH access (see To

configure a serial port for direct connection with Telnet or SSH [Expert]: on page 74.

If connecting to a Microsoft

Windows Server

2003 operating system through the

Emergency Management Services (EMS) console, enable the Windows EMS console connection protocol only.

To change the Keep Alive interval, enter another number in the TCP Keep-alive Interval field.

To change the idle time-out interval, enter another value in the Idle Timeout field.

Specify stty options, if desired, in the STTY Options field.

To change the break interval, enter a new number in the Break Interval field.

10. To change the break sequence, enter a new sequence in the Break Sequence field.

11. To change the content of the login banner, enter new content in the Login Banner field.

12. Click Done.

13. Click apply changes.

To configure terminal server connection options [Expert]:

Perform this procedure if a terminal is connected to the selected serial port.

Select Expert - Ports - Physical Ports, select a port or ports to modify and click Modify

Selected Ports.

Choose a terminal option from the Connection Protocol pull-down menu on the General

screen. See Table 9.3 on page 72 for a list of terminal options.

Click the Other tab. The Other screen appears.

To change the TCP port number used to access the serial port, enter another number in the TCP

Port field.

To change the Keep Alive interval, enter another number in the TCP Keep-alive Interval field.

To change the idle time-out interval, enter another value in the Idle Timeout field.

86 Cyclades ACS 5000 Installation/Administration/User Guide

Specify stty options, if desired, in the STTY Options field.

To change the break interval, enter a new number in the Break Interval field.

To change the break sequence, enter a new sequence in the Break Sequence field.

10. To change the content of the login banner, enter new text in the Login Banner field.

11. For a dedicated terminal, enter the IP address of the desired host in the Host to Connect field.

12. Enter the type of terminal in the Terminal Type field.

13. Click Done.

14. Click apply changes.

Expert - Ports - Virtual Ports

An administrator can select Expert - Ports - Physical Ports - Virtual Ports to cluster one or more

ACS console servers to enable access to up to 1024 serial ports through one IP address. Only one cluster may be configured.

The ACS 5000 console server is the master that controls other console servers as slaves. The slaves can be any model of ACS console server on the same network as the master. They must not be cascaded from the ACS 5000 console server (that is, they should not be connected to serial ports on the master).

Figure 9.5: Expert - Ports - Virtual Ports

The administrator clicks the Add button to configure a slave and can also assign aliases to the slave ports

After configuration, each slave console server is added to the Slave list on the Virtual Ports screen, and the names of the serial ports on the slave are listed on the Connect - Serial pull-down menu in the Web Manager. Authorized users can also access individual ports on slaves directly through

SSH or Telnet connections.

NOTE: Daisy-chained IPDUs are supported only if they are connected to a serial port on the master.

Chapter 9: Web Manager Ports Menu Options 87

When an administrator clicks Add or Edit, the following dialog box appears to configure or modify a slave.

Figure 9.6: Ports - Virtual Ports - New/Modify Port Dialog Box (for Slave Configuration)

Table 9.12: New/Modify Port Dialog Box Fields (for Slave Configuration)

Field/Button Name Definition

Number of Ports

First Local Port Number

Number of ports on the slave.

The first unallocated port number to assign to the first port on the slave.

For example, if the master unit has 16 ports, ports 1-16 are already allocated, and the First Local Port Number could be 17. When more than one slave is configured, the Local Port Numbers do not need to be sequential but they should not overlap port numbers configured for previously configured slaves. For example, If the master unit has 16 ports and the first slave has 16 ports, and you entered 17 as the First

Local Port number for the first slave, you could enter 33 as the First

Local Port number for the second slave.

The public IP address configured for the console server.

Local IP

First Local TCP Port No.

The first unallocated TCP port number to assign to the first port on the slave as a virtual TCP port number. The remaining ports are assigned numbers in the sequence that begins with the First Local TCP Port No.

For example, if the master unit has 16 ports and the default TCP port numbers 7001-7016 are allocated to the master, the First Local TCP

Port No. could then be specified as 7017. The number of the second port would be 7018, and so forth. When more than one slave is configured, the First Local TCP Port Number must be based on the

TCP port numbers configured for previously configured slaves. The numbers do not need to be sequential, but the numbers must not overlap.

88 Cyclades ACS 5000 Installation/Administration/User Guide

Table 9.12: New/Modify Port Dialog Box Fields (for Slave Configuration) (Continued)

Field/Button Name Definition

Remote IP

First Remote TCP Port Number

The actual fixed IP address configured on the slave.

(Optional) The first TCP port number configured on the slave. The default is 7001.

Protocol

Port Names

The communication protocol that must be used for any connections to the slave. The options are Telnet or SSH. For example, if SSH is specified, an authorized user can make a direct connection to one of the ports on the slave only by using an SSH client or ssh on the command line. All ports on the slave must be configured with the same connection protocol, either Console(Telnet) or Console(SSH) under

Expert - Ports - Physical Ports.

Click to assign aliases to the slave serial ports.

Example connection to a port on a slave

With the following configuration, an authorized user could use SSH to access the second port on a second slave:

• A cluster has two slave units.

• Both slave units are configured with the same Local IP address of 172.36.14.2.

• Both the slave units are configured with the SSH protocol.

• The master and the first slave unit each have 16 ports.

• The default TCP port numbers (7001-7016) are in effect on the master and on the first slave.

• For the first slave unit, the First Local TCP Port No. (the virtual TCP port number) is configured as 7017.

• For the second slave unit, the virtual TCP port number is configured as 7033.

• The default TCP port number of the second port on the second slave is 7002.

The following command line example uses the ssh command with 172.36.14.2 as the IP address,

7002 as the TCP port number and 7034 as the virtual TCP port number to make a root user connection to the second port on the second slave: ssh -l root:7002 172.36.14.2 -p 7034

To configure console server clusters [Expert]:

Perform this procedure to cluster console servers and add or modify ports.

NOTE: The console servers should be connected individually to an IP network. The units should not be cascaded.

Select Expert - Ports - Virtual Ports and click the Add button to add a slave or click the Edit button to edit a slave. The New/Modify Port dialog box appears.

Chapter 9: Web Manager Ports Menu Options 89

From the pull-down menu select the number of ports on the slave.

Enter the First Local Port Number.

Enter a global IP address for the cluster in the Local IP address field.

Enter the First Local TCP Port Number.

Enter the Remote IP address.

(Optional) Enter the First Remote TCP Port Number. The default is 7001.

Select the communication protocol for all port on the the slave from the Protocol pull-down menu.

NOTE: Make sure that all ports on the slave are configured with the same connection protocol, either

Console(Telnet) or Console(SSH) under Expert - Ports - Physical Ports.

To assign aliases to ports on the slave, perform the following steps.

Click the Port Names button.

Enter aliases in the Port Name fields.

Click OK. The New/Modify Port dialog box appears.

10. Click OK.

11. Click apply changes.

To connect to a port on a slave:

Log into the Web Manager and select the port number from the Applications - Connect - Serial pull-down menu.

- or -

Use the communication protocol (SSH or Telnet) that is configured for the slave to make a direct connection to any of its ports. Enter the Local IP address as the IP address. With the ssh command, you need to enter both the actual TCP port number and the virtual TCP port number as shown in the following ssh command example.

ssh -l

username:TCP_port_number_of_the_slave_serial_port \

Local_IP_address -p virtual_TCP_port_number_of_the_slave_port

The telnet command requires only the virtual TCP port number, as shown:

telnet Local_IP_address -p virtual_TCP_port_number_of_the_slave_port

Expert - Ports - Ports Status

An administrator can select Expert - Ports - Ports Status to view the status of each serial port.

90 Cyclades ACS 5000 Installation/Administration/User Guide

Figure 9.7: Expert - Ports - Ports Status (Read-Only)

Expert - Ports - Ports Statistics

An administrator can select Expert - Ports - Port Statistics to view statistics about connections to the serial ports.

Figure 9.8: Expert - Ports - Port Statistics (Read-Only)

Expert - Ports - Hostname Discovery

An administrator can select Expert - Ports - Hostname Discovery to configure lists of probe and answer strings that apply to all serial ports that have been configured for hostname discovery.

See Hostname Discovery on page 9 for details about how the strings are used. For how to configure

hostname discovery on a port, see Configure hostname discovery on page 80.

Chapter 9: Web Manager Ports Menu Options 91

The probe and answer strings can be left blank. The default strings have a broad range and work in most cases.

Table 9.13: Expert - Ports - Hostname Discovery Fields

Fields Accepted Values

Hostname Discovery Probe Strings

A list of strings, delimited by double quotes (“) and separated by spaces. The following C-style escape sequences are accepted: “\n”

(new line; “\r” (carriage return); “\t” (horizontal tabulation); “\f” (formfeed); “\\” ((backslash) and “\”” (double-quote). Probe strings can have more than one escape sequence and use regular characters, but simpler sequences such as “\r” or “\n” are recommended. “\n” is the default if no strings are defined.

Hostname Discover Answer Strings

A list of strings, delimited by double quotes (“) and separated by spaces. Must be written as POSIX extended regular expressions. If no strings are defined, then “([A-Za-z0-9\\.-_]+)[ ]+[Ll]ogin[:]?[ ]?$” is the default. If the user regex has more than one group, then only the first group is matched.

To configure hostname discovery probe and answer strings [Expert]:

Select Expert - Ports - Hostname Discovery. The Hostname Discovery screen appears.

Enter one or more strings delimited by double quotes and separated by spaces.

Click apply changes.

Make sure that hostname discovery is configured on one or more ports, as described in To

configure hostname discovery: on page 80.

92 Cyclades ACS 5000 Installation/Administration/User Guide

C H A P T E R

Web Manager Administration

Menu Options

This section describes the Web Manager Administration menu options and related screens in

Expert mode.

Table 10.1: Expert - Applications Menu

Menu Selection Use this menu to:

System Information View information about all system parameters

Notifications

Time / Date

Configure notifications for trigger events

Configure the time and date, either locally or from an NTP server

Boot Configuration

Backup Config

Upgrade Firmware

Reboot

Online Help

Configure where the console server boots from and other boot parameters

Configure backup and restoration of configuration files

Upgrade firmware on the console server

Reboot the console server

Configure online help

Expert - Administration - System Information

An administrator can select Expert - Administration - System Information to view information about all of the system parameters shown in the following table.

Table 10.2: Expert - Administration System Information Screen

Information

System Information

Parameters

• Kernel Version

• Current Date

• Up Time

• Power Supply State

94 Cyclades ACS 5000 Installation/Administration/User Guide

Table 10.2: Expert - Administration System Information Screen (Continued)

Information

CPU Information

Memory Information

Ram Disk Usage

Parameters

• CPU Type

• Clock Speed

• Revision

• Bogomips

• MemTotal

• MemFree

• Buffers

• Cached

• SwapCached

• Active

• Inactive

• HighTotal

• HighFree

• LowTotal

• LowFree

• SwapTotal

• Filesystem

• 1k-blocks

• Used

• Available

• Use%

• Mounted

• SwapFree

• Dirty

• Writeback

• Mapped

• Slab

• CommitLimit

• Committed_AS

• PageTables

•

VmallocTotal

VmallocUsed

VmallocChunk

To view system information:

Select Expert - Administration - System Information. The System Information screen appears.

Scroll down to see all the information.

Expert - Administration - Notifications

An administrator can select Expert - Administration - Notifications to configure alarm notifications for system events and other events of interest that can occur on target devices connected to the serial ports. Notifications can be sent by email, pager or SNMP trap.

To choose a method for sending notifications:

Select Expert - Administration - Notifications. The Notifications screen appears.

Enable Notification Alarm for Data Buffering by clicking the checkbox.

Select Email, Pager or SNMP Trap from the pull-down menu.

To create a new entry for an event to trigger an alarm or notification, click the Add button.

To edit a previously-configured trigger, click the Edit button.

Chapter 10: Web Manager Administration Menu Options 95

Perform the appropriate procedure to configure the email, pager or SNMP trap notification:

•

To configure a trigger for email notification for serial ports: on page 96

•

To configure a trigger for pager notification for serial ports: on page 96

•

To configure a trigger for SNMP trap notification for serial ports [Expert]: on page 97

Administration - Notifications - Serial ports alarm

An administrator can configure the console server to monitor the DCD signal so that an alarm is generated if either of the following events occurs.

• A serial console cable is removed from the console server

• A device/server attached to the console is turned off

The administrator can also configure the console server to detect if a modem is in use and is still turned on and active.

To configure a trigger for serial port alarm notification [Expert]:

Select Expert - Administration - Notifications. The Notifications screen appears.

Enable the checkbox for Notification Alarm for Data Buffering.

Select Email, Pager or SNMP Trap from the pull-down menu.

Click the Add button.

Enter

Port

in the Alarm Trigger field.

Configure the rest of the parameters based on the option selected in step 3.

Click OK.

Click apply changes.

Administration - Notifications - Email

If an administrator selects Expert - Administration - Notifications, selects Email from the pull-down menu and clicks Add or Edit, the Email Notifications Add/Edit dialog box appears.

Table 10.3: Email Notifications Dialog Box Fields

Field Name

Alarm Trigger

[untitled drop-down field]

To/From/Subject/Body

SMTP Server IP

SMTP Port

Definition

The trigger expression used to generate an alarm.

The first time you specify an alarm trigger the pull-down menu is empty. A new trigger is listed in the menu after it is created.

The email for the designated recipient of the alarm notification.

The IP address of the SMTP server.

The port used by the SMTP server.

96 Cyclades ACS 5000 Installation/Administration/User Guide

To configure a trigger for email notification for serial ports:

Select Expert - Administration - Notifications. The Notifications screen appears.

Select Email from the pull-down menu. If desired, enable Notification Alarm for Data

Buffering for an alarm to sound when the trigger action occurs and click either Add or Edit.

The Notifications Entry dialog box appears.

Specify an event to trigger a notification in the Alarm Trigger field.

To edit an existing notification, select it from the pull-down list and proceed.

Configure the recipient and sender for the notification email in the To and From fields.

Configure the Subject field, the text message in the Body field, the IP address in the SMTP

Server field and the SMTP port number in the SMTP Port field.

Click OK.

Click apply changes.

Administration - Notifications - Pager

If an administrator selects Expert - Administration - Notifications, selects Pager from the pulldown menu and clicks Add or Edit, the Pager Notifications Add/Edit dialog box appears.

Table 10.4: Pager Notification Add/Edit Dialog Box Fields

Field Name

Alarm Trigger

[untitled drop-down field]

Pager Number

Text

SMS User Name

SMS Server

SMS Port

Definition

The trigger expression used to generate an alarm.

The first time you specify an alarm trigger, the pull-down menu is empty. A new trigger is listed in the menu after it is created.

The pager number of the notification recipient.

The text message for the pager.

The username of the notification recipient.

The name or the IP address of the SMS server.

The port used by the SMS server.

To configure a trigger for pager notification for serial ports:

Select Expert - Administration - Notifications. The Notifications screen appears.

Select Pager from the pull-down menu. If desired, enable Notification Alarm for Data

Buffering for an alarm to sound when the trigger action occurs; and click either Add or Edit.

The Notifications Add/Edit dialog box appears.

Specify an event to trigger a notification in the Alarm Trigger field.

If you need to edit an existing notification, select it from the pull-down list and proceed.

Chapter 10: Web Manager Administration Menu Options 97

Enter or change the pager number in the Pager Number field.

Enter or edit the text that describes the event in the Text field.

Enter or change the Short Message Services (SMS) username, the SMS server’s IP address or name and the SMS port number in the SMS User Name, SMS Server and SMS Port fields respectively.

Click OK.

Click apply changes.

Administration - Notifications - SNMP trap

If an administrator selects Expert - Administration - Notifications, selects SNMP Trap from the pull-down menu and clicks Add or Edit, the SNMP Notifications Add/Edit dialog box appears.

Table 10.5: SNMP Trap Notifications Add/Edit Dialog Box Fields

Field name

Alarm Trigger

[untitled drop-down menu]

OID Type Value

Trap Number

:Community

Server

Body

Definition

The trigger expression used to generate an SNMP trap.

By default, the pull-down menu is empty. A new trigger is listed in the menu after it is created.

The value that uniquely identifies an object to the SNMP agent.

The trap type as defined in the MIB. The choices are:

• Cold Start

• Warm Start

• Link Down

• Link Up

• Authentication Failure

• EGP Neighbor Loss

• Enterprise Specific

The password used to authenticate the traps.

The IP address of the server running the SNMP.

The content of the notification.

To configure a trigger for SNMP trap notification for serial ports [Expert]:

Select Expert - Administration - Notifications. The Notifications screen appears.

If desired, enable Notification Alarm for Data Buffering for an alarm to sound when the trigger action occurs.

Select SNMP Trap from the pull-down menu.

Click either Add or Edit. The Notifications Entry dialog box appears.

To edit an existing notification select it from the pull-down list.

98 Cyclades ACS 5000 Installation/Administration/User Guide

Specify an event to trigger a notification in the Alarm Trigger field.

Enter or change the number in the OID Type Value field.

Accept the trap number option or select a new one from the Trap Number pull-down menu.

Enter a community in the Community field.

10. Enter the IP address of the SMTP server in the Server field.

11. Enter a message in the Body text area.

12. Click OK.

13. Click apply changes.

Expert - Administration - Time/Date

An administrator can select Expert - Administration - Time/Date to configure the time and date by manually entering the time and date information in the screen or by configuring an NTP server.

To set the time and date manually [Expert]:

Select Expert - Administration - Time/Date in Expert mode. The Time/Date screen appears.

Select a time zone from the Timezone pull-down list.

Type the date and time in the fields provided.

Click apply changes.

To configure time and date using an NTP server [Expert]:

NOTE: NTP is disabled by default.

Select Expert - Administration - Time/Date in Expert mode. The Time/Date screen appears.

Select a time zone from the Timezone pull-down list.

Select Enable from the Network Time Protocol pull-down menu. The NTP Server field appears.

Type the IP address of the NTP server in the NTP Server field.

Click OK.

Click apply changes.

Customized time zone configuration

An administrator can click the Edit Custom button on the Expert - Administration - Time/Date screen to configure a customized time zone for daylight savings time or another time zone offset anomaly that could occur anywhere in the world. The time zone identifier is added to the Timezone pull-down menu on the main Time/Date screen.

To create a custom time zone option [Expert]:

Select Expert - Administration - Time/Date. The Time/Date screen appears.

Click Edit Custom. The Timezone Configuration dialog box appears.

Chapter 10: Web Manager Administration Menu Options 99

Enter a name in the Timezone Name Field and an acronym in the Standard Time Acronym field.

Enter the offset from GMT in the GMT off field. Enter any offset that is west of GMT as a negative number.

Click OK.

Click apply changes.

To use the custom option to set daylight savings time [Expert]:

Select Expert - Administration - Time/Date. The Time/Date screen appears.

Click Edit Custom. The Timezone Configuration dialog box appears.

Select the Enable daylight saving time checkbox. Additional fields appear on the dialog box.

Enter a daylight savings time (DST) acronym in the DST Acronym field.

Enter the number of hours and minutes (

HH:MM

format) in the Save time field.

Enter the date (month, day, day of the week) and time (hours:minutes) in both the DST start and DST end fields.

Click OK to update the Time/Date settings and return to the main Time/Date screen.

Click apply changes.

Expert - Administration - Boot Configuration

An administrator can select Expert - Administration - Boot Configuration to define the location from which the console server loads the operating system. The console server can boot either from its internal firmware or from the network. By default, the ACS console server boots from Flash memory.

To enable the console server to boot from the network, make sure the following prerequisites are met:

• A TFTP or BootP server must be available on the network

• An upgraded console server boot image file must be downloaded from Avocent and made available on the TFTP or BootP server

• The ACS console server must be configured with a fixed IP address

• The boot filename and the IP address of the TFTP or BootP server is known

Table 10.6: Expert - Administration - Boot Configuration Screen Fields

Field Name

IP Address assigned to

Ethernet

Watchdog Timer

Definition

A fixed IP address or a DHCP assigned IP address configured for the console server.

If the watchdog timer is active, the console server reboots if the software crashes.

100 Cyclades ACS 5000 Installation/Administration/User Guide

Table 10.6: Expert - Administration - Boot Configuration Screen Fields (Continued)

Field Name

Unit boot from

Boot Type

Boot File Name

Server’s IP Address

Console Speed

Flash Test

RAM Test

Fast Ethernet

Fast Ethernet Max.

Interrupt Events

Definition

Specify whether to boot the console server from Flash or from the network.

Select to boot from a TFTP server, a BootP server or both.

Filename of the boot program.

The IP address of the TFTP or the BootP server.

An alternative console speed from 4800 to 115200 (9600 is the default).

Select to test boot from the Flash card. You can skip this test or do a full test.

Select to test boot from RAM. You can Skip this test, do a Quick test or a Full test.

The speed of the Ethernet connection. Select the appropriate Ethernet setting if you need to change the Auto Negotiation (default value):

• 100BaseT Half-Duplex

• 100BaseT Full-Duplex

• 10BaseT Half-Duplex

• 10BaseT Full-Duplex

The maximum number of packets that the CPU handles before an interrupt (0 is the default).

To configure the console server boot [Expert]:

Select Expert - Administration - Boot Configuration. The Boot Configuration screen appears.

Enter the IP address of the console server in the IP Address assigned to Ethernet field.

Select Active or InActive from the Watchdog Timer menu.

Select Flash or Network from the Unit boot from menu.

Select TFTP, Bootp or Both from the Boot Type menu if you selected Network in step 4.

Accept or change the filename of the boot program in the Boot File Name field.

If specifying network boot, perform the following steps: a.

Enter the IP address of the TFTP or BootP server in the Server’s IP Address field.

Select a console speed from the Console Speed pull-down menu to match the speed of the terminal you are using on the console port of the console server.

Select Skip or Full from the Flash Test pull-down menu to bypass or run a test on the Flash memory at boot time.

Select Skip, Quick or Full from the RAM Test pull-down menu to bypass or run a test on the RAM at boot time.

Choose an Ethernet speed from the Fast Ethernet pull-down menu.

Specify the maximum number of packets that the CPU handles before an interrupt in the

Fast Ethernet Max. Interrupt Events field.

Chapter 10: Web Manager Administration Menu Options 101

Click apply changes.

Expert - Administration - Backup Configuration

An administrator can select Expert - Administration - Backup Config to configure backups of configuration files and restore saved backups.

NOTE: Use an FTP server to save and retrieve the console server configuration. For the backup configuration to work, the FTP server must be on the same subnet. Ensure that it is accessible from the console server by pinging the FTP server.

Table 10.7: Expert - Administration Backup Configuration Fields and Options

Field

Server IP

Path and Filename

Username and Password

Save

Load

Definition

IP address of an FTP server on the same subnet as the console server. (Verify accessibility by pinging the FTP server.)

Path of a directory on the FTP server where you have write access for saving the backup copy of the configuration file. Specify a filename if you wish to save the file under another name. For example, to save the configuration file zvmppccs.0720_qa.acs-k26 in a directory called /upload on the FTP server, you would enter the following in the Path and Filename field:

/upload/zvmppccs.0720_qa.acs-k26

Obtain the username and password to use from the FTP server administrator.

Saves the configuration.

Downloads a previously saved copy of the configuration file from the selected device.

To back up or restore the configuration files using an FTP server [Expert]:

Select Expert - Administration - Boot Configuration. The Boot Configuration screen appears.

Select FTP from the Type pull-down menu.

Enter the IP address of the FTP server in the Server IP field.

Enter the directory path on the FTP server where you have write permissions in the Path and

Filename field. Enter the filename after the directory path. For example,

/upload/ zvmppccs.0720_qa.acs-k26

Enter the username and password provided by your system administrator for the FTP server.

To backup a copy of the current configuration files, press the Save button.

To download a previously saved copy of the configuration files, press the Load button.

Reboot the system. See Expert - Administration - Reboot on page 103 for details.

102 Cyclades ACS 5000 Installation/Administration/User Guide

Expert - Administration - Upgrade Firmware

An administrator can select Expert - Administration - Upgrade Firmware to configure an automated upgrade of the console server’s firmware, which includes the Kernel, applications and configuration files. The firmware can be upgraded from an FTP server.

NOTE: Check the file name for the upgrade version and read the upgrade instructions carefully. Different procedures are required depending on the current version.

Table 10.8: Expert - Upgrade Firmware Screen Fields

Field/Menu Name

Type

FTP Site

Definition

FTP is the only supported type.

The URL of the FTP server where the firmware is located. http://www.avocent.com/web/ en.nsf/Content/Cyclades_Download-ACS5000 is available for downloading firmware upgrades.

Username

Password

Username recognized by the FTP server. The Cyclades FTP username for download is anonymous.

Password associated with the username. Any password is accepted for anonymous login.

Path and File Name The pathname of the firmware on the FTP server. The filename includes the version number in the following format: zImage_acs5000_100.bin.

Run Checksum Runs the checksum program to verify the accuracy of the uploaded data.

To upgrade the console server firmware [Expert]:

Use this procedure to upgrade to the latest release of the console server firmware. The upgrade installs the software on the Flash memory.

Select Expert - Administration - Upgrade Firmware. The Upgrade Firmware screen appears.

Choose FTP from the Type menu. (FTP is the only supported type).

Enter the URL of the FTP server in the FTP Site field.

Enter the username and password recognized by the FTP server in the Username and Password fields.

Enter the pathname of the file on the FTP server in the Path and Filename field.

Click the Upgrade Now button.

Click cancel changes if you need to restore the backed up configuration files.

Chapter 10: Web Manager Administration Menu Options 103

Expert - Administration - Reboot

An administrator can select Expert - Administration - Reboot to restart the console server. The

Reboot screen contains only a Reboot button.

To reboot the console server [Expert]:

Select Expert - Administration - Reboot. The Reboot screen appears.

Click the Reboot button. A confirmation dialog box appears.

Click OK.

Expert - Administration - Online Help

An administrator can select Expert - Administration - Online Help to configure an alternative location for online help.

The Help button on the Web Manager looks for help files in the location specified in the Online

Help Path field. By default, http://global.avocent.com/us/olh/acs5000/v_1.0.0 is the specified location. Access to the online help from the Avocent location that is specified by default may not be possible due to factors such as firewall configuration. The site administrator should install the help files onto a publicly accessible web server and reconfigure the path on this screen. Once the changes are saved, the console server stores the new link in Flash.

The online help files are shipped with the product and can also be downloaded from Avocent. For help with the download of the online help, contact Technical Support. See Appendix C for more information.

To configure a local online help path [Expert]:

The web server where the help is installed must be publicly accessible.

Extract the help files using the appropriate utility for the operating system and put them into the desired directory under a web server root directory.

For example, the following command line would work on a server running UNIX.

# cd $WEB_SERVER_ROOT/acs5000-help

# gunzip acs5000_online_hlp.zip

By default, the online help files are expanded into a directory under the directory where the zip file is located.

Log into the Web Manager as admin and select Expert - Administration - Online Help. The

Help configuration screen appears.

In the Online Help Path field, enter the URL of the help files on the server. The following example would work for a web server named remoteadmin.

http://www.remoteadmin.com/online-help/

104 Cyclades ACS 5000 Installation/Administration/User Guide

The software adds the name of the help directory to the URL prefix and launches the online help.

Click Save.

Click apply changes.

A P P E N D I C E S

Appendices

Appendix A: Technical Specifications

Table A.1: Technical Specifications for the ACS 5000 Advanced Console Server Hardware

Hardware

CPU

Memory

Interfaces

MPC855T (PowerPC Dual-CPU)

128MB DIMM SDRAM min./ 16MB Compact Flash min.

• 1 Ethernet 10/100BT on R-J45

• 1 RS232 Console on RJ-45

• RS232 Serial Ports on RJ-45

Power

Dimensions

Internal 100-240VAC, 50/60 Hz†

17 x 8.5 x 1.75 in (43.18 x 21.59 x 4.45 cm)

Environmental

Operating Temperature 50°F to 112°F (10°C to 44°C)

Storage Temperature

Humidity

-40°F to 185°F (-40°C to 85°C)

5% to 90% non-condensing

Safety and EMC

Standards Approvals and Markings

• FCC Part 15, A

• ICES-003

• C-Tick

• VCCI Class A

• BSMI Class A

• MIC Class A

• CE

• EN55022, Class A

• EN55024

• EN60950-1

• GS

• CB

• CSA/UL 60950-1

• Solaris Ready™

105

106 Cyclades ACS 5000 Installation/Administration/User Guide

Appendix B: Safety, Regulatory and Compliance Information

The following safety, regulatory and compliance information for the ACS 5000 console server is described in this appendix.

•

Safety and environmental guidelines for rack-mounting the console server on page 106

•

Safety precautions for operating the console server on page 108

•

Sicherheitsvorkehrungen beim Betrieb des Cyclades ACS 5000 Advanced Console Server on page 108

•

Working inside the console server on page 109

•

Working inside the console server on page 109

•

Replacing the battery on page 110

•

Austausch der Batterie on page 110

•

Remplacement de la batterie on page 110

•

FCC warning statement on page 110

•

Notice about FCC compliance for all Cyclades ACS 5000 advanced console server models on page 111

•

Canadian DOC notice on page 111

•

Technical Support on page 112

Safety and environmental guidelines for rack-mounting the console server

NOTE: Each heading and its contents in this section is also provided in German (Deutsch) in italics immediately following the English version.

The following considerations should be taken into account when rack-mounting a Cyclades ACS

5000 advanced console server.

Folgendes sollte beim Rack-Einbau des Cyclades ACS 5000 berücksichtigt werden.

Temperature

The manufacturer's maximum recommended ambient temperature for the Cyclades ACS 5000 advanced console server is 112 ºF (44 ºC).

Temperatur

Die maximal empfohlene Umgebungstemperatur des Cyclades ACS 5000 beträgt 44 ºC (112 ºF).

Elevated operating ambient temperature

If the console server is installed in a closed or multi-unit rack assembly, the operating ambient temperature of the rack environment may be greater than room ambient temperature. Therefore, consideration should be given to installing the equipment in an environment compatible with the manufacturer’s maximum rated ambient temperature. See above.

Appendices 107

Erhöhte Umgebungstemperatur im betrieb

Bitte treffen Sie entsprechende Vorkehrungen um die Herstellerangaben zur maximalen

Umgebungstemperatur einzuhalten. Bitte beachten Sie, dass bei einer Installation des ACS 5000 in einem geschlossenen oder mehrfach bestücktem Rack die Umgebungstemperatur im Betrieb höher sein kann als die Raumtemperatur.

Reduced air flow

Installation of the equipment in a rack should be such that the amount of air flow required for safe operation of the equipment is not compromised.

Luftdurchsatz

Für einen sicheren Betrieb bitte auf ausreichenden Luftdurchsatz im Rack achten.

Mechanical loading

Mounting of the equipment in the rack should be such that a hazardous condition is not achieved due to uneven mechanical loading.

Sicherer mechanischer Aufbau

Bitte vermeiden Sie beim Einbau der Geräte ungleichmäßige mechanische Belastung.

Circuit overloading

Consideration should be given to the connection of the equipment to the supply circuit and the effect that overloading of circuits might have on overcurrent protection and supply wiring.

Appropriate consideration of equipment nameplate ratings should be used when addressing this concern.

Elektrische Überlastung

Bitte beachten Sie beim elektrischen Anschluss der Geräte, dass diese zum Schutz vor Überlastung mit entsprechenden Schutzvorkehrungen ausgestattet sein können. Bitte sorgen Sie gegebenenfalls für Klarheit durch entsprechende Beschriftung:

Reliable earthing

Reliable earthing of rack-mounted equipment should be maintained. Particular attention should be given to supply connections other than direct connections to the branch circuit, such as power strips or extension cords.

Zuverlässige Erdung

Eine ausreichende Erdung der im Rack montierten Geräte muss sichergestellt sein. Insbesondere sollte indirekten Verbindungen zur Stromversorgung über Powerleisten oder Verlängerungen besondere Aufmerksamkeit gewidmet werden.

108 Cyclades ACS 5000 Installation/Administration/User Guide

Safety precautions for operating the console server

Please read all the following safety guidelines to protect yourself and your Cyclades ACS 5000 advanced console server.

Sicherheitsvorkehrungen beim Betrieb des Cyclades ACS 5000 Advanced

Console Server

Bitte lesen Sie alle folgenden Sicherheitsrichtlinien um sich und Ihren Cyclades ACS 5000 advanced console server vor Schäden zu bewahren.

WARNING:Do not operate your Cyclades ACS 5000 advanced console server with the cover removed.

Vorsicht: Bitte betreiben Sie den Cyclades ACS nicht mit geöffnetem Gehäuse.

CAUTION: To avoid shorting out your console server when disconnecting the network cable, first unplug the cable from the Host Server, unplug external power (if applicable) from the equipment and then unplug the cable from the network jack. When reconnecting a network cable to the back of the equipment, first plug the cable into the network jack and then into the Host Server equipment.

Vorsicht: Um Schäden beim Entfernen des Netzwerkkabels zu vermeiden bitte immer zuerst das Kabel vom

Host Server entfernen, anschließend die externe Stromzufuhr abklemmen und danach das Kabel aus der

Netzwerkbuchse ausstecken. Beim Wiederherstellen der Verbindung immer zuerst das Kabel in die

Netzwerkbuchse des ACS 5000 zuerst einstecken und danach das Kabel in den Host Server einstecken.

CAUTION: To help prevent electric shock, plug the console server into a properly grounded power source. The cable is equipped with a three-prong plug to help ensure proper grounding. Do not use adaptor plugs or remove the grounding prong from the cable. If you have to use an extension cable, use a three-wire cable with properly grounded plugs.

Vorsicht: Um Stromschläge zu vermeiden den ACS 5000 bitte mit einer ausreichend geerdeten Stromquelle verbinden. Zu diesem Zweck ist das Eingangskabel ist mit einem dreipoligen Stecker ausgestattet. Bitte keinesfalls dazwischen liegende adaptor einsetzen oder den Erdungsstift entfernen. Falls eine Verlängerung eingesetzt werden muss bitte ausschließlich dreipolige Kabel mit ausreichender Erdung verwenden.

CAUTION: To help protect the Cyclades ACS 5000 advanced console server from electrical power fluctuations, use a surge suppressor, line conditioner or uninterruptible power supply. Be sure that nothing rests on the cables of the console server and that they are not located where they can be stepped on or tripped over. Do not spill food or liquids on console server.

Vorsicht: Um den Cyclades ACS 5000 vor elektrischen Netzschwankungen zu bewahren bitte

Überspannungsfilter, Entstörfilter oder eine UVS einsetzen. Stellen Sie bitte sicher dass sich keine Gegenstände auf den Kabeln des ACS 5000 befinden und dass die Kabel tritt- und stolpersicher geführt sind. Bitte keine

Lebensmittel oder Flüssigkeiten über den ACS schütten.

CAUTION: Do not push any objects through the openings of the Cyclades ACS 5000 advanced console server.

Doing so can cause fire or electric shock by shorting out interior components.

Appendices 109

Vorsicht: Zur Vermeidung von Brandgefahr oder elektrischen Schlägen bitte keine Gegenstände durch die

Öffnungen des Cyclades ACS 5000 stecken.

CAUTION: Keep your Cyclades ACS 5000 advanced console server away from heat sources and do not block host’s cooling vents.

Vorsicht: Der Cyclades ACS 5000 muss vor Hitzequellen geschützt werden und die Lüfterausgänge dürfen nicht blockiert sein.

CAUTION: This unit has one or two power supply cords. Disconnect the power supply cord before servicing to avoid electric shock.

ATTENTION!: Cet appareil comporte un ou deux cordon d’alimentations. Afin de prévenir les choc électriques, debrancer les cordons d’alimentation avant de fairt le dépannage.

Vorsicht: Das Geraet hat entweder ein oder zwei Netzverbindungen. Um elektrischen Schlag zu vermeiden muessen die Netzverbindungen getrennt sein bevor Wartungsarbeiten vorgenommen werden.

Working inside the console server

Do not attempt to service the console server yourself, except when following instructions from

Avocent Technical Support personnel. In the latter case, first take the following precautions:

Turn the console server off.

Ground yourself by touching an unpainted metal surface on the back of the equipment before touching anything inside the unit.

Electrostatic Discharge (ESD) Precautions

When handling any electronic component or assembly, you must observe the following antistatic precautions to prevent damage.

• Always wear a grounded wrist strap when working around printed circuit boards,

• Treat all assemblies, components and interface connections as static-sensitive,

• Avoid working in carpeted areas and

• Keep body movement to a minimum while removing or installing boards to minimize the buildup of static charge.

Arbeiten am Cyclades ACS 5000

Bitte versuchen Sie nicht den ACS 5000 selbst zu warten mit Ausnahme unter Befolgung der

Anweisungen von Cyclades technischem Personal. In diesem Fall bitte folgenden

Vorsichtsmaßnahmen einhalten:

Schalten Sie den ACS 5000 aus.

Erden Sie sich bitte selbst durch Berühren einer blanken Metalloberfläche auf der Rückseite des Gerätes bevor Sie das Innere berühren

110 Cyclades ACS 5000 Installation/Administration/User Guide

Vorsichtsmassnahmen gegen Elektrostatische Entladung (ESD)

Zur Vermeidung von Beschädigungen sind bei Arbeiten an elektronischen Komponenten oder

Baugruppen die folgenden Vorsichtsmaßnahmen einzuhalten.

• Bitte immer ein Erdungsarmband während der Arbeit an elektronischen Platinen tragen.

• Bitte alle Baugruppen, Komponenten und Steckkontakte als elektrostatisch sensitiv behandeln.

• Bitte Arbeiten auf Teppichböden vermeiden und.

• Zur Minimierung von elektrostatischen Aufladungen alle Körperbewegungen während Ein- oder Ausbau von Boards auf ein Minimum reduzieren.

Replacing the battery

CAUTION: There is the danger of explosion if the battery is replaced incorrectly. Replace the battery only with the same or equivalent type recommended by the manufacturer. Dispose of used batteries according to the manufacturer's instructions.

Austausch der Batterie

Vorsicht: Bei Einsetzen einer falschen Batterie besteht Explosionsgefahr. Ersetzen Sie die Batterie nur durch den gleichen oder vom Hersteller empfohlenen Batterietyp. Entsorgen Sie die benutzten Batterien nach den

Anweisungen des Herstellers.

Remplacement de la batterie

ATTENTION!: Il y a risque d’explosion si la batterie est remplacée par une batterie de type incorrect. Mettre au rebut les batteries usagées conformént aux instructions.

Trabajar dentro del Cyclades ACS 5000 Advanced Console Server

No intente dar servicio al Cyclades ACS 5000 advanced console server, solo que este bajo la dirección de Soporte Técnico de Avocent. Si este es el caso, tome las siguientes precauciones:

Apague el Cyclades ACS 5000 advanced console server. Asegurase que este tocando tierra antes de tocar cualquier otra cosa, que puede ser al tocar la parte trasera del equipo.

Batería

IMPORTANTE: Una batería nueva puede explotar, si no esta instalada correctamente. Remplace la batería cuando sea necesario solo con el mismo tipo recomendado por el fabricante de la batería. Deshacerse de la batería de acuerdo a las instrucciones del fabricante de la batería.

FCC warning statement

The Cyclades ACS 5000 advanced console server has been tested and found to comply with the limits for Class A digital devices, pursuant to Part 15 of the FCC rules. These limits are designed to

Appendices 111 provide reasonable protection against harmful interference when the equipment is operated in a commercial environment.

Operation of this equipment in a residential area is likely to cause harmful interference in which case the user is required to correct the problem at his or her own expense.

Notice about FCC compliance for all Cyclades ACS 5000 advanced console server models

Canadian DOC notice

The Cyclades ACS 5000 advanced console server does not exceed the Class A limits for radio noise emissions from digital apparatus set out in the Radio Interference Regulations of the

Canadian Department of Communications.

112 Cyclades ACS 5000 Installation/Administration/User Guide

Appendix C: Technical Support

Our Technical Support staff is ready to assist you with any installation or operating issues you encounter with your Avocent product. If an issue should develop, follow the steps below for the fastest possible service.

To resolve an issue:

Check the pertinent section of this manual to see if the issue can be resolved by following the procedures outlined.

Check our web site at www.avocent.com/support to search the knowledge base or use the online service request.

Call the Avocent Technical Support location nearest you.

I N D E X

Index

A

access

configure root for SSH 4

options 2

to target devices

by SSH, configure root for 67

configure 76

to Web Manager, other configuration methods

ACS 5000 console server

access options 2

administrators, common tasks for 26

boot, to configure 100

cluster configuration 86 configure as master in a cluster 86

active ports sessions 63

add

chains and rules for packet filtering 5

event notifications 94

host 56

outlet group 43

outlets for a target device 83

packet filtering chains 52

packet filtering chains and rules 55

packet filtering rules 5

serial port alarm triggers 95

syslog server

users

for multiple sessions 81

for power management 45, 82, 84

post install configuration 14

with Wizard 30

admin group, configure 61

admin users

simultaneous sessions 3

warning to change default password 13, 61

administration

options, introduction 1

with shell commands or CLI 25

administrators

common tasks 26

configure event notifications 6

configure power management 7

no simultaneous sessions 3

Web Manager

introduction 3

overview 25

screens, common features 26

alarms

introduction 6

113

114 Cyclades ACS 5000 Installation/Administration/User Guide

triggers, configure 95

aliases

IPDU, configure 75

outlets, configure 36

serial ports 84

configure 75

configure for console connection 73

configure for direct connection 74

configure for terminal connection 73

connection list 19

authentication

overview 4

configure for appliance 64

require for all serial ports 4, 67, 76

authorizations for device access

introduction 3

configure 76

authtype 64

B

backup configuration 101

banners

console 48

battery replacement 110

baud rate

configure in Expert mode 75

configure in Wizard mode 30

boot configuration 99 bootp server, configure 99

break interval, configure 84 break sequence, configure 84

buffer

C

Canadian DOC notice 111

CAT 5 cables

introduction 1

RJ-45 straight-through for console port

connection 12

RJ-45 to DB-9 crossover for serial port

connections 12

shielded, requirement for FCC compliance 111

CLI utility 1

cluster configuration 86

commands

gunzip 103

Linux

configure terminal access to 72

enter in the console server shell 3

option for administration 1

passwd 13

ssh 20 telnet 20

terminal profile menu, configure 35

wiz 12

common features of administrator screens 26 common tasks for administrators 26

configuration

authentication 64

boot 99

device access 76

direct connections to serial ports 74

connections

protocol

configure for slave ports 88

configure in Expert mode 71

configure in Wizard 30

modem 72 power management 72

terminal 84

to console server or target devices 19, 35

connectors, ACS 5000 console server 2

console

banner 48

connection

ACS 5000 console server 2 device console 2

server, See ACS 5000 console server

CPU usage 63

cron jobs 3

CSLIP 73

D

daisy-chain IPDUs

list on Outlets Manager screen 21

Index 115

maximum number of outlets 6

data buffering

configure for ports

configure notifications 94

data size 30

default IP address 14

devices

access configuration overview 6

access through Web Manager 3

CAT 5 cable connections to 1

configuration overview 6

configure all with same parameters 29

configure authentication for 77

connect to 19, 35

connect to serial ports 12

console server as a single access point for 1

event notifications during connections 6

IPDUs, connect to console server 14

power management

overview 6

with multiple power supplies 8

serial port connectors for 2

DNS server 48 domain name 48

DSView 3 management software

authentication 4

116 Cyclades ACS 5000 Installation/Administration/User Guide

for console server management 1

hostname discovery through 9

requirement for Server Technology IPDUs 7

E

email notification 96

emergency management service

See EMS

EMS 84

Ethernet 100

events, data buffering 94

Expert mode, Web Manager 28

F

facility numbers 78

FCC compliance 111

FCC warning statement 110

file path, NFS, for buffered data files 78

firewall configuration 52

introduction 5

affect on online help 103

in Web Manager 52

firmware

configure boot from 99

IPDUs

download and install 42

view version 23

upgrade

appliance 102

IPDUs 42

First Local Port Number 87

Flash

configure boot from 99

minimum shipped size 105

save configuration changes to 27

save IPDU configuratrion to 36

save online help path on 103

storage of data buffer files 6, 31

test 100

upgrade console server firmware on 102

flow control 30

FTP server

configure for console server boot 100

for configuration file backup 101

upgrade firmware from 102

G

gateway IP 48

groups

authorize for port access 76

outlets

users

H

help

See online help

host name 48 host settings 48

host tables 56, 57

hostname discovery

overview 9

configure probe and answer strings 90

enable for serial ports 80

hotkeys

power management

HTTP/HTTPS

certificate for HTTP Security 5

configuration

overview 3

Web Manager 67

HTTP redirection to HTTPS

configure, Web Manager 67

overview 4

I

ICMP 3, 66

idle timeout 84

info, view IPDUs 23, 39

IP address

IPDUs

firmware

password configuration 43

J

JCPU 63

K

keep-alive interval, TCP 84

key, power management 82

L

LDAP authentication options 4

Linux commands 1

local authentication options 4

local terminal 72

log 25

logins

configure authentication for 64

M

modems

introduction 1

configure connection protocol 72

connectors for 2

modes

Web Manager, overview 27

Expert 28

Wizard 27

MTU 48

multiple sessions, allow 80 multi-user 80

Index 117

118 Cyclades ACS 5000 Installation/Administration/User Guide

N

names

See aliases

network mask 48

NFS file path for buffered data files 32, 78

NFS server for data buffer files

configure in Web Manager 6

configure in Wizard 31

notifications

overview 6

alarm 95

configure, Web Manager 94

email 96 pager 96

SNMP trap 97

NTP server configuration 98

O

online help

outlet groups

outlets manage

icons and buttons 22, 37

regular users 21

manage outlet groups 24

view information about 23, 40

P

packet filtering

introduction 5

See also firewall configuration

pager notification 96

parity 30

passwords configure

Web Manager Expert 61

Web Manager regular user 17

Web Manager Wizard 30

with passwd command 13

IPDU, configure 43

SNMP v3, configure 50

PCPU, view 63

physical ports 69

ports

alias 84

configure multiple sessions 80

TCP port, configure 84

power devices

power management

connection protocol 72

connections for 1

hotkey 82

IPDUs 36

PPP configuration options 72

protocol, connection

configure for all serial ports 30

modem 72 power management 72

used by slave console servers 88

R

RADIUS authentication

raw socket

connection, configure 72

RCP 3

reboot 103

regular user

configure 61

Web Manager screens 18

root users

access options 3

configure for SSH access 4

configure SSH access 67

log into the console server 13

types of access 3

routes, static 57

run checksum 102

S

safety precautions 108

screens

administrator 26

regular user 18

Index 119 serial ports

alarm notifications 95

note about authentication requirement 76

numbers of 2

required authentication, configure 67

See also ports 95

sessions

active ports, view, kill, or refresh 63

multiple, configure 80

settings, host 48

simultaneous sessions 3

slave console servers, configure 86

SNMP

notifications, configure 50

option to enable or disable 3

service

introduction 5

enable or disable 66

trap notification, configure 97

SSH

and authentication 64

configure

for device console access 4

for direct connection 74

for IPDU access 75

to use X.509 certificates 5

with Web Manager 67

connection to the console server 35

device console connection protocol 30, 71

menu configuration to launch 45

root access 67

120 Cyclades ACS 5000 Installation/Administration/User Guide

introduction 4

configure 67

X.509 certificates 5

SSH client

access option, overview 2

connect to a device 20

SSH v1/SSH v2

access options 2

configure with Web Manager 66

enable or disable 3 options to enable or disable 3

syslog

server, configure for data buffer files 78

servers 6

system information, view 93

T

table, host 56, 57

TACACS+ authentication 4

tasks for administrators 26

TCP

flags 54

keep-alive interval 84

port number

configure for a port 84

configure for slave console server ports 88

use for Telnet or SSH access to devices 20

technical support 112

Telnet

access option 2

console protocol 71

enable or disable 66

option to enable or disable 3

TelnetSSH console protocol 71

terminal connection protocol 72

terminal profile menu

overview 2

configure 45

terminals

configure 72

configure connection type 84

connect to console port 12

connectors for 2

required settings for command line access 12

server access option 2

use to configure network with wiz command 12

used for local access to the command line 2

TFTP 99

time/date

configure custom time zone 99 configure daylight savings time 99

configure, Web Manager 98

timer, watchdog 99

trap notification, SNMP 97 trap number 97

trigger, alarm 95

TTY 63

U

upgrade firmware

users

authorize

for multi user shared sessions 80

for port access 76

for power management 44

configure 61

multiple sessions, configure 80

port authorizations, configure, Web Manager 3

regular 18, 61

types of 3

V

view IPDUs info 23, 39

view system information 94

virtual ports 86

W

watchdog timer 99

Web Manager

overview 3

administrator modes, overview 27 log into 27

other methods to access 14

windows, EMS 84

wiz command 12

Wizard mode 27

X

X.509 certificates 5

Index 121

122 Cyclades ACS 5000 Installation/Administration/User Guide

FCC Warning Statement

Operation of this equipment in a residential area is likely to cause harmful interference in which case the user is required to correct the problem at his or her own expense.