Digi Passport manual

90000767_D Digi Passport User’s Guide[...]

 Digi International Inc. 201 1. All rights reserved. Digi, Digi International, the Digi logo, Digi Passport, Digi One, and RealPort are trademarks or registered tradema rks of Digi International, Inc. in the United S tates and other countries worldwi de. All other trade marks are the property of their respective owners. This product contains [...]

Contents 3 Chapter 1 Introduction Digi Passport™ Model Support ............................................ ................................11 Feature Overview ...................... ................................................................ ...........11 Feature Summary................................................................. .....[...]

Contents 4 Add a User ......................... ................................................................ .......... 36 Edit a User ............................................... ..................................................... 38 Remove a User ............................................................. ..............................[...]

Contents 5 Supported SNMP Traps ............................................................................ .........109 Setting Additional Traps at the Port Leve l ..........................................................110 Configure SNMP v1 or v2............................................................... ....................111 Manage SNMP[...]

Contents 6 Connect to ports ................................................................................. ........ 162 Change password ......................... ............................................................. 162 Display and connect to slave units ............................................................. 162 To search via port[...]

Contents 7 Configure for Dial-In Terminal Server Access ....................................................191 Chapter 14 Power Controller About the Power Controller Feature ...................................................................192 Install Power Controller ...............................................................................[...]

Contents 8 Clustering push configuration .............................................................................236 Chapter 16 Configuration Menu Interface About the Configuration Menu.............................................. ..............................239 Access the Configuration Men u ................................................[...]

Contents 9 Chapter 17 Command Line Interface Back Up All Configuration Files Before Using Commands.................................276 Linux Commands ...................................................... .........................................277 Commands for Saving and Applying Changes ........................................... 277 Commands fo[...]

Chapter 19 Specificati ons and Certifications Hardware Specifications....................................................... ..............................299 Digi Passport 4 Models ........................... ................................................... 299 Digi Passport 8/16/32/48 Models ....................... ............................[...]

Digi Passport™ Model Support Chapter 1 Introduction 11 Digi Passport™ Model Support This manual offers information on the Di gi Passport 4-port, 8-port, 16-port, 32-port, and 48-port models. Feature Overview With the Digi Passport unit, administrators can securely monitor and control servers, routers, switc hes, and other network devices from a[...]

Feature Summary Chapter 1 Introduction 12 Feature Summary Feature Category Feature Network and Security • IP v4/v6 dual stack • RealPort ® and En crypted RealPort suppor t • SSH v2 server and client • TLS/SSL • IP Filtering • Central access to securi ty parameters via the Security Profile including network, port, and password securitie[...]

Feature Summary Chapter 1 Introduction 13 Digi Passport Self-Management Capabilities • Advanced Digi Discovery Protocol (ADDP) for locating the the Digi Passport unit unit on the network • Find Me locator light • T elnet/SSH • Command line interface • Web in terface--HTTP/HTTPS • SNMPv3 management interface • Secure Clustering: Single[...]

Discovering and Configurin g the Digi Passport unit Chapter 1 Introduction 14 Discovering and Configuring the Digi Pas sport unit See the Quick S tart Guide that came with the the Digi Passport unit to connect the hardware and configure an IP address for the unit. Alternatively , insert the Sof tware and Docume ntation CD in your computer ’s CD d[...]

Configuration User Interface Options for Digi Passport Chapter 1 Introduction 15 Configuration User Interfa ce Options for Digi Passport There are several interface options for configuring the Digi Passport unit: using the web interface, configurat ion menu, command li ne interface, or Simple Network Management Protocol (SNMP). Web In te rf a ce Th[...]

Configuration User Interface Options for Digi Passport Chapter 1 Introduction 16 Configuration Menu The root user and syst em administrator have full access to the configuration menu from a T elnet or SSH session or a serial connection through the console port. Functionality is similar to the web interface, with the exception of custom menus, which[...]

Configuration User Interface Options for Digi Passport Chapter 1 Introduction 17 Command Line Interface The command line interface can be accessed from a T elnet or SSH session or from the console port. The root user always has a ccess to this interface, and the admin user can be gr anted read-only permission. SNMP An SNMP MIB to config ure the Dig[...]

Users and User Groups Chapter 1 Introduction 18 Users and User Group s Root and Admin Usernames and Passwords The Digi Passport unit co mes with two default us ers; root and system admin. The user names of t he the Digi Passport uni t are case sensitive. Adding Port Administ rators and Users The system administrator an d root user can add po rt adm[...]

Options for Accessing t he Digi Passport Ports Chapter 1 Introduction 19 Options for Accessing the Digi Passport Port s There are multiple ways to access t he native serial ports on the Digi Passport unit: • Web Interface • Port Access Menu • Direct Port Access • Custom Menus Web Interface Access Menu The web interface menu provides easy an[...]

Options for Accessing t he Digi Passport Ports Chapter 1 Introduction 20 3. Select a port. A Java applet or T elnet window opens with a login prompt. The web interface can also be configured to call a local T elnet or SSH application, see "H ost Mode Configurat ion" on page 71.[...]

Options for Accessing t he Digi Passport Ports Chapter 1 Introduction 21 Port Access Menu The Port Access Menu provides access to ports. It is accessible to all users through the web interface, T elnet and SSH sessions, and remote modem access. Access Ty p e Permissions Procedure Web interface Any user can use this method. 1. Access the web interfa[...]

Options for Accessing t he Digi Passport Ports Chapter 1 Introduction 22 Direct Port Access Connect directly to a properly conf igured port through a T elnet or SSH session. Configuration requirements include setting the Host Mode to Console Server Mode and t he Protocol to either T elnet or SSH. Ports, by default are set to Console Server Mode and[...]

Options for Accessing t he Digi Passport Ports Chapter 1 Introduction 23 Port Escape Menu Port escape is the ability to escape from a port wit hout disconnecting. In port escape mode, a menu of options is displayed, for example, to power the connected device on or off, send messages to por t users, or close the current connection to the port. Port [...]

Automatic Device Recognition Chapter 1 Introduction 24 Automatic Device Recognition The Automatic Device Recognition featur e allows the Digi Passport unit to automatically detect and recognize at tached devices. The Digi Passport unit sends a set of automatic detection criteria, including sets of serial parameters and a probe string (defaul t is &[...]

Assign IP Settings fr om the Console Port Chapter 2 Getting St arted 25 This chapter covers basic configurat ion topics, including assigning IP settings, accessing and nav igating in the web interf ace, enabling secure access with the web interface, acce ssing the unit thr ough SSH, and user administration: adding, editing, or removing users, manag[...]

Assign IP Settings fr om the Console Port Chapter 2 Getting St arted 26 5. Enter the number 1 for Network Configuration. 6. Enter the number 1 to select the port for IP configuration 7. Enter 1 for IPv4. 8. Enter the appropriate parame ters for the IP settings. 9. From the menu, enter a to apply , and enter x to exit. Changes are saved and applied [...]

Access the Web interface Chapter 2 Getting St arted 27 Access the Web interface There are two ways to access the web interface. • Using Digi’ s device discovery tool , ADDP (Advanced Digi Discovery Protocol). This device discovery tool is used to find and launch the web configuration and management interfac e. ADDP will work whether or not the [...]

Saving and Applying Changes in the Web interface Chapter 2 Getting St arted 28 Saving and Applying Change s in the We b interface In the web interface, there are tw o ways save and apply configuration changes. • T o save and apply changes immediately , click the Save & apply button. • T o save multiple changes, but apply changes once , clic[...]

Serial Port Connection Page: Manage and Control Connections Chapter 2 Getting St arted 29 Serial Port Connection Page: Manage and Control Connections Upon login, a page showing the systems t hat can be managed and controlled is displayed. . The Serial port connection page displays st atus of all ports at a glance. Clicking on the port num ber or ti[...]

Serial Port Connection Page: Manage and Control Connections Chapter 2 Getting St arted 30 W arnings and Alert s on the Serial Port Con nection Page If the power to a unit is tu rned off, the power warning st atus is indicated on the main screen. If an event alert has bee n triggered, then the Al ert Icon wi ll appear . Cap abilities from the Serial[...]

Configure Access to Di gi Passport via SSH Chapter 2 Getting St arted 31 Configure Access to Di gi Passport via SSH Access to the Digi Passport unit's command line via SS H is enabled by default (TCP port 22). The Port A ccess Menu and individual ports can be configured for SSH. The Digi Passpor t unit supports Blowfish and 3DES encryption met[...]

Configure Access to Di gi Passport via SSH Chapter 2 Getting St arted 32 Configure a Port for SSH 1. Enter the IP address of the Digi Passport unit in to the address bar of the browser to access the web interface. 2. Log in as root , admin , or a member of the port administration group. The default password for root is dbp s , and the default p ass[...]

Configure Access to Di gi Passport via PPP Chapter 2 Getting St arted 33 Configure Access to Di gi Passport via PPP The Digi Passport unit can be configured to support a ccess to it via dial-in Point-to-Point (PPP) conn ections. PPP can be configured from a variety of interfaces, including the Digi Passport unit’s web interface, Windows XP , or a[...]

Configure Access to Di gi Passport via PPP Chapter 2 Getting St arted 34 Configure PPP from th e Windows XP Interface 1. Select St art > Control Panel > Network Connections . The Network Connections wi ndow is opened. 2. Select File > New connection to launch the New connection Wizard. 3. Select Connect to the network at my workplace and c[...]

Configure Access to Di gi Passport via PPP Chapter 2 Getting St arted 35 Configure PPP from a Linux Client 1. From the command line of a Linux client on a Redhat 9 machine, run the kppp utility : # kppp 2. On the KPPP window , click Set up . 3. On the Accounts t ab of the KPPP Conf iguration window , click New . 4. On the Create New Account window [...]

User Administration Chapter 2 Getting St arted 36 User Administration Required Privileges fo r User Administration Only root and admin user s can administer other us ers. The root user has unlimited administration privileges. The admin user ca n view and change all attributes except those that belong to t he root user . There are several ways to ma[...]

User Administration Chapter 2 Getting St arted 37 User attributes User attribute Description User name Name for the user . Rules for user names include: • User names are case-sensitive. • Must be betw ee n 3 an d 29 characters. • Cannot include colons (:), less than or gr eater tha n signs (< >), ampersand (&), spaces, or qu otation[...]

User Administration Chapter 2 Getting St arted 38 Edit a User 1. Enter the IP address of the Digi Passport unit in the address bar of a web browser to access the web interface. 2. Log in as root or admin . The default password for root is dbp s ; for admin, admin . 3. Under System administration , select User administration . The User administratio[...]

User Administration Chapter 2 Getting St arted 39 Remove a User 1. Enter the IP address of the Digi Passport unit in the address bar of a web browser to access the web interface. 2. Log in as root or admin . The default password for root is dbp s ; for admin, admin . 3. Under System administration , select User administration . The User administrat[...]

User Administration Chapter 2 Getting St arted 40 Add an Access List and Add Users to It Access lists are used to add right s to a single user or to multiple users at the same time. In addition, multip le users can be grouped and assigned one, some, or all these rights: • Port access rights • Port monitor rights • Power management rights to a[...]

User Administration Chapter 2 Getting St arted 41 6. Add the users to the access list. Add one user at a time to the access list by ent ering the name into the User name edit-box and clicking Add . Add users that are not locally configured on the Digi Passport unit , but use a centralized authentica- tion method such as RADIUS, LDAP etc. Import ant[...]

Compatible PC Cards Chapter 3 Install and Configure PC Cards 42 This chapter includes in formation on adding and c onfiguring PC cards for the Digi Passport 8, 16, 32, and 48 port units. PC card devices that can be added to the the Digi Passport unit include a serial modem, comp act-flash card, wireless LAN card, and a network LAN card. Comp atible[...]

Add a Compact-flash Card Chapter 3 Install and Configure PC Cards 43 Add a Comp act-flash Card A PC card slot is located on the fron t panel of the Digi Passport unit. The arrow in the following graphic indicates the PC card slot. Import ant : Before removing a PC card, always click the Stop card service button, then Save & apply . T o install [...]

Add a Network Card Chapter 3 Install and Configure PC Cards 44 Add a Network Card T o install and configure a network card on the Dig i Passport uni t, do the following. 1. Insert the card into the PC slot. 2. Enter the IP address of the Digi Passport unit in the address bar of a web browser to access the web interface. 3. Under the PC card heading[...]

Add a Wireless LAN Card Chapter 3 Install and Configure PC Cards 45 Add a Wireless LAN Card T o install and configure a wireless LAN ca rd on the Digi Passport unit, do the following. 1. Insert the card into the PC slot. 2. Enter the IP address of the Digi Passport unit in the address bar of a web browser to access the web interface. 3. Under the P[...]

Add a Serial Modem Chapter 3 Install and Configure PC Cards 46 Add a Serial Modem The modem must firs t be inserted and in stalled before it can be used. T o configure the modem do the following: 1. Enter the IP address of the Digi Passport unit in the address bar of a web browser to access the web interface. 2. From the m enu, select Configuration[...]

Available options for syst em status an port logs Chapter 4 System S tatu s an d Por t Logging 47 This chapter describes t he system status and port logs available for the Digi Passport. A vailable options for syst em st atus an port logs The Digi Passport unit provides four options for saving system status and and port logs: • A syslog server ?[...]

System Status & Log Chapter 4 System S tatu s an d Por t Logging 48 System St atus & Log For basic system in formation, click System st atus & log . System status information includes: System Information • Model No. : Identification of Digi device. • Serial No. : Serial number of product. • F/W Rev .: Revision number of firmware. [...]

Enable Log Storage Location Chapter 4 System S tatu s an d Por t Logging 49 Enable Log S torage Location Enable NFS Server Log data can be saved to an NFS se rver , but the NFS server must be configured with read and write privileges . T o use an NFS server , specify the NFS server ’s IP address and it s mount ing p ath. Encrypted NFS is using a [...]

Enable Log Storage Location Chapter 4 System S tatu s an d Por t Logging 50 3. Set or change the NFS Config uration parameters as needed: • NFS service : Enabled or disabled. • Primary NFS server name : IP address of NFS server or DNS name. • Mounting p ath on primary NFS server : Directory to primary NFS server . • Primary NFS timeout : In[...]

Enable Log Storage Location Chapter 4 System S tatu s an d Por t Logging 51 Set Up Alert for NFS Server Disconnect When the NFS server disconnects, an al ert in the form of an email message and/or an SNMP tr ap can be sent. T o conf igure an alert, follow these steps. 1. On the NFS Configur ation screen, at the Email alert configuration , select En[...]

Enable Log Storage Location Chapter 4 System S tatu s an d Por t Logging 52 Enable Syslog Server T o enable the Digi Passport unit for syst em or port l ogging on a syslog server: 1. Enter the IP address of the Digi Passport unit in the address bar of a web browser to access the web interface. 2. Under the Systems status & log heading, click SY[...]

Enable Log Storage Location Chapter 4 System S tatu s an d Por t Logging 53 Enable a Comp act-flash Card The compact-flash card must be in stalled and configured on the Digi Passport unit before it can be used for system logging or storing the Digi Passport unit’s configuration informat ion. When storing log files to an external flash card, the s[...]

Enable Log Storage Location Chapter 4 System S tatu s an d Por t Logging 54 File Size and Memory U se for System and Port Logs The Digi Passport unit’ s me mory is already enabled for port loggi ng. It only needs to be configured to accommodat e the system and po rt log files. When storing log files to the Digi Pa ssport unit’s local memory , a[...]

Configure System Logging Chapter 4 System S tatu s an d Por t Logging 55 Configure System Logging T o configure the Digi Passport unit fo r system logging: 1. Enter the IP address of the Digi Passport unit in the address bar of a web browser to access the web interface. 2. Select System status & log > System logging . The system logging sett[...]

View System Logs Chapter 4 System S tatu s an d Por t Logging 56 V iew System Logs The system logs can be viewed from the web interfac e on the System logging page or from the locati on where they have been saved. The following table list s the file locations of t he system logs. System Logfile Log Storage File Locati o n Digi memory /tmp/logs Comp[...]

Configure Port Logging Chapter 4 System S tatu s an d Por t Logging 57 Configure Port Logging If a serial port is co nfigured for cons ole server mode, the port logging feature can be enabled. Port logging save s serial data to the memory of the Digi Passport unit, a compact-flash ca rd, a syslog server , or an NFS server . If the memory is used fo[...]

Configure Port Logging Chapter 4 System S tatu s an d Por t Logging 58 • Logging direction : S pecifies what should be logged. Server : Server output only . User : User output only . Both Server and User with/without arrows : Server and user out- put with/without directional arrows. Default is Server output. Security note: During logging, user ou[...]

View Port Logs Chapter 4 System S tatu s an d Por t Logging 59 V iew Port Logs Port logs can be viewed from the web interface on the Port logging pag e or from the locati on where they have been saved. The following table lists the file locations of the system logs. T o view the port logs on the NFS server for port number 5, enter: more /mnt/nfs/po[...]

Chapter 5 Configure Ports 60 This chapter shows how to configure serial ports, bo th physical serial port s and remote ports, which are any type of ports that can be accessed using T elnet, SSH, or Raw TCP protocol, including support for the ALOM, ILOM, iLO, IPMI, DRAC, and SMASH protocols. It pr esents a quick-st art method for configuring all ser[...]

Configure Physical Serial Ports Chapter 5 Configure Ports 61 Configure Physical Serial Port s There are several ways to conf igure physical serial ports: • Using a quick-st art procedur e that applies a set of configuration settings to all serial ports, a nd configures the Automa tic Device Recognition (ADR) feature, s hown on page 62. • Settin[...]

Configure Physical Serial Ports Chapter 5 Configure Ports 62 Quick-St art Procedure Configure Port s with Automatic Device Recognition (Optional) This procedure is the fastest way to configure Automatic Device Recognition (ADR) for physical serial ports. It results in ports being configured identically , star ting from and retaining fa ctory defaul[...]

Configure Physical Serial Ports Chapter 5 Configure Ports 63 2. Before connecting any serial devices to the Digi Passport unit, configure the automatic detection feature. Automatic detection allows the Digi Pa ssport unit to automatically detect and recognize attached devices. The Di gi Passport unit sends a set of automatic detection criteria, inc[...]

Configure Physical Serial Ports Chapter 5 Configure Ports 64 Apply All Port s Settings As another aid in configur ing serial ports, the Di gi Passport unit supports managing all ports simu lt aneously . This featur e is referred to as Apply all ports settings . If configuration changes are made to a port and Apply all ports settings is enabled, the[...]

Configure Physical Serial Ports Chapter 5 Configure Ports 65 7. Click Save to flash and continue with other configurations , or click Save & apply . Clone port s T o clone ports, go to Serial port->Config-> "Port"->Copy config[...]

Configure Physical Serial Ports Chapter 5 Configure Ports 66 About Basic and Advanced Serial Port Settings Besides using the quick-st art procedure that applie s to all serial ports, serial port settings can be modified from their factory defaults. The Digi Passport unit has two levels of se rial port configuration settings: • Basic configuration[...]

Configure Physical Serial Ports Chapter 5 Configure Ports 67 Recommended sequence for configuring port se ttings If using the Basic and Adv anced configuration settin gs to configure serial ports, the sequence is: 1. In the Web interface for the the Digi Passport unit, go to Serial Port > Configuration . 2. Before connecting any serial devices t[...]

Configure Physical Serial Ports Chapter 5 Configure Ports 68 Basic Port Configuration Settings On the Ports configuration p age (selected by serial port > Configuration ), selecting any port number in the No. column displays the Basic configuration page. For example:[...]

Configure Physical Serial Ports Chapter 5 Configure Ports 69 The Basic configuration page sets the essential p arameters required to access the device attached to the corresponding serial port, including: • Enabling or disabli ng the serial port • Enabling or disabling use of RealPort for the serial port • Host mode, or the mode of communi ca[...]

Configure Physical Serial Ports Chapter 5 Configure Ports 70 RealPort Support The Digi-supplied RealPort dr iver provides a logical connection from a host computer to the physical serial por t on the Digi Pass port, regardless of where it is located on t he network. The software is installed directly on the host and allows applications to talk to d[...]

Configure Physical Serial Ports Chapter 5 Configure Ports 71 Host Mode Configuration The Digi Passport unit provides severa l modes of communication between serial devices and remote hosts: Cons ole server , terminal server , dial-in modem, dial-in terminal server , and Po int-to-Point Prot ocol (PPP) mode. On the Basic configuration page, for the [...]

Configure Physical Serial Ports Chapter 5 Configure Ports 72 T erminal Server Mode In terminal server mode, th e Digi Pass port unit’s serial por t is configured to wait for data from th e device connected to the port. If dat a is detected, the Digi Passport unit start s a TCP session as a T elnet or SSH client to a pre- defined server . The serv[...]

Configure Physical Serial Ports Chapter 5 Configure Ports 73 Dial-In Modem Mode In dial-in modem mode, the Digi Passport uni t assumes an external modem is attached to the se rial port and is waiti ng for a dial-in connection from a remote site. When a user dials in using a terminal application, the Digi Passport unit accepts the connec tion and di[...]

Configure Physical Serial Ports Chapter 5 Configure Ports 74 Dial-In T erminal Server Mode Dial-in terminal server mode is a comb ination of terminal server mode and dial-in modem mode. In this mode, the Digi Passport unit assumes the serial port is connected to an exte rnal modem and is waiti ng for a dial-i n connection from a remote site . When [...]

Configure Physical Serial Ports Chapter 5 Configure Ports 75 PPP Mode PPP (Point to Point Prot ocol) host mode configures the Digi Passport unit to support dial-in PPP co nnections to it. Listening TCP Port The listening TCP port is the TCP network port s pecified when connecting directly to the port using T elnet or SSH.[...]

Configure Physical Serial Ports Chapter 5 Configure Ports 76 Protocol setting The Protocol setting configures the communication protoc ol used over the serial port. There are three protocol options: RawTCP , SSH, and T elnet. • Select SSH when logging in from an SSH c lient program to access a port. • Select RawTCP when connecting directly to a[...]

Configure Physical Serial Ports Chapter 5 Configure Ports 77 Configure Automatic Det ection Automatic detection and it s role in Automatic Device Recognition The Automatic Device Recognition feature allows the Digi Passport unit to automatically detect and re cognize attached devices and the serial p arameters for the devices. The port c onfigurati[...]

Configure Physical Serial Ports Chapter 5 Configure Ports 78 Automatic detection st ate: Off, Active, Passive The automatic detection state for all or indi vidual port s can be set to one of three states: Off , Act ive , or Passive . The automatic detecti on state is set by the Basic serial port configuration setting Automatic detection : The three[...]

Configure Physical Serial Ports Chapter 5 Configure Ports 79 Port logging and p assi ve automatic detection In Passive automatic detection , the Port logging option setting for the port or ports is enabled automat ically , because passive aut omatic detection is done through the por t log file. For the port logging feature to create and log to the [...]

Configure Physical Serial Ports Chapter 5 Configure Ports 80 Automatic detection rules Automatic detection rules control how automatic de tection is performed on serial ports, such as how long to wait before performing the original probe, how long to wait until the next probe, whether to st art the probe at a particular time, and whether to use any[...]

Configure Physical Serial Ports Chapter 5 Configure Ports 81 When automatic detection for connected devices begins In factory default mode, if automatic detection is set to Active , the Digi Passport unit waits 5 minutes (the Initial delay setting), then probes the ports for which automatic detect ion is enabled using the specified port automatic d[...]

Configure Physical Serial Ports Chapter 5 Configure Ports 82 Configure automatic detection 1. Add the appropriate Po rt automatic detection list by navigating to Serial port > Port automatic detecti on configuration > Port automatic detection list . By factory de fault, there are no Port automatic detection lists defined as shown below: 2. Ad[...]

Configure Physical Serial Ports Chapter 5 Configure Ports 83 3. Set the Automatic Detection state (O f f, Active, or Passive) for all or selected ports. In the serial ports view ( Serial Port > Configuration ), click All or port number . Change the Automatic Detectio n setting from Off to Active . There are several other automatic det ection par[...]

Configure Physical Serial Ports Chapter 5 Configure Ports 84 5. S tart automatic detect ion on one or all ports. • If the Device detection method was set to Active , automatic detection is performed with the output mess ages of device. The Digi Passport unit performs serial parameter detecti on using the settings in the port automatic detection l[...]

Configure Physical Serial Ports Chapter 5 Configure Ports 85 free KVM Configuration freeKVM configuration is a link to the settings for configurin g the freeKVM feature. See "Configure and Use freeKVM" on page 168 for more information. Authentication Authentication is a link to the settings for configuring any user authentication desired [...]

Configure Physical Serial Ports Chapter 5 Configure Ports 86 Port Access Menu Configuration The Port Access Menu provides a m enu-driven command-line interface for Digi Passport users to access equi pment through a standa rdized interface without using the Web interf ace. It is one of severa l alternative mechanisms available. Other al ternatives i[...]

Configure Physical Serial Ports Chapter 5 Configure Ports 87 Port Group Configurat ion: Applying Commands to Multiple Port s As a convenience feature, port groups can be created to apply commands to multiple ports. Instead of issuing commands to indi vidual serial ports, the commands can be sent to all ports in a group simult aneous ly through the [...]

Configure Physical Serial Ports Chapter 5 Configure Ports 88 Create a port group T o create a port group: 1. On the serial port Configuration page, click the Port group configuration link. The Port group configurat ion settings are displayed. 2. In the Group name field, enter a nam e for the port group. 3. For the Login on each port setting , selec[...]

Configure Physical Serial Ports Chapter 5 Configure Ports 89 6. A list of serial ports is displayed. Select the seri al ports to add to the port group. If Login on each port is enabled, then a logi n will be performed for all selected ports. After adding the serial port s to t he group, they are listed on the Port group configuration page in the Po[...]

Configure Physical Serial Ports Chapter 5 Configure Ports 90 7. After port group s are def ined, port s can be a ssigned to group s on the Port management page. Click the Port management link. In the Group setting, select the appropriate group from the pull-down menu.[...]

Configure Physical Serial Ports Chapter 5 Configure Ports 91 Manage port group s from the Port Menu Once a port group is created and ports added to it , the Port Escape Menu displays an additional command, g . (See "Port Escape M enu" on page 23 for more details on accessing and using the Port Escape Menu.) Port Menu: b send break l show [...]

Configure Physical Serial Ports Chapter 5 Configure Ports 92 Advanced Port Configuration Settings T o display and configure mo re detailed serial port se ttings, click the Advanced configuration link. The adv anced port configuration settings are displayed: This topic covers groups of settings that are not ot herwise accessi ble from the Basic conf[...]

Configure Physical Serial Ports Chapter 5 Configure Ports 93 Advanced Automatic Detection Settings The advanced automatic det ection settings allow c onfiguring the rules and execution of the automatic detection feat ure in more detail than on the Basic settings. Note: If any settings on this page are chang ed from their default values for Active o[...]

Configure Physical Serial Ports Chapter 5 Configure Ports 94 • Use detected freeKVM : If enabled, the Digi Passp ort unit detect s the IP address of the server connected to t he serial port automatically and sets parameters related with freeKVM config uration, such as the IP address and client program. If the co nnected console is MS SAC, the IP [...]

Configure Physical Serial Ports Chapter 5 Configure Ports 95[...]

Configure Physical Serial Ports Chapter 5 Configure Ports 96 Including special characters in probe strings T o include special characters in the pr obe string, such as carriage returns, line feeds, and escape characters, specify them as hexadecimal values. For example, here are hexadecimal equi valents for several common special characters: • Car[...]

Configure Physical Serial Ports Chapter 5 Configure Ports 97 Advanced Host Mode Settings Advanced Host mode configuration settings allow for viewing and modifying the configuration settings that define the commun ication between serial devices and remote hosts in use with the Digi Passport unit in more detail than the Basic configuration se ttings.[...]

Configure Physical Serial Ports Chapter 5 Configure Ports 98 freeKVM Configuration freeKVM configuration is a link to the settings for configurin g the freeKVM feature. See "Configure and Use freeKVM" on page 168 for more information. Advanced Serial Port Parameters Serial port p arameters is a link to the serial p arameters for a port. W[...]

Configure Physical Serial Ports Chapter 5 Configure Ports 99 Special Use of Serial Port when Dat a is Processed in Chunks Some applications are written to proces s only chunks of da t a rather than continuous streams of data. The Digi Passport unit support s chunking , or holding back data from the serial device to the application on the network un[...]

Configure Physical Serial Ports Chapter 5 Configure Ports 100 Remote port p arameters If remote ports are defined and a remote port is selected, Remote port p arameters is a link to the settings for configuring remote ports. See "Configure Remote Ports" on p age 102 for descriptions of these settings. Port Logging Port logging is a link t[...]

Reset Ports Chapter 5 Configure Ports 101 Reset Port s The Digi Passport unit allows restarti ng all processes associated with a port and to disconnect all sessions. T o reset an individual port: 1. Click Serial port > Configuration > port number . 2. For Reset this port , click Reset . Reset Individual Port Settings Individual ports can be r[...]

Configure Remote Ports Chapter 5 Configure Ports 102 Configure Remote Port s The Digi Passport unit supports RemotePort s ™ . RemotePort s are any type of port that can be accessed using T elnet , SSH, or Raw TC P protocols, or through service processors (for deta iled information on configuring service processors, see "Service Processors&qu[...]

Configure Remote Ports Chapter 5 Configure Ports 103 Add and Configure a Remote Port T o configure a remote port: 1. Access the Digi Passpor t unit’ s web interface 2. Under the Serial Port heading, click Configuration . 3. On the Ports configuration p age, go to the Port title and Listening TCP port settings at the bottom of the page, as shown b[...]

Configure Remote Ports Chapter 5 Configure Ports 104 4. The serial port Basic configuration page is displayed, with several additional parameters for co nfiguring remote port s. Enter the remote port settings: • Remote port destination IP : The IP address of the remote device. • Remote port destination port (0-65535) : The port number on the re[...]

Configure Remote Ports Chapter 5 Configure Ports 105 The remote port will now be display ed in the list of ports on the Port s con- figuration page, under the heading Remote port configuration . For example: Advanced Remote Port Parameters When remote ports are defi ned and selected, the Advanc ed port configuration settings has a link, Remote port[...]

Configure Remote Ports Chapter 5 Configure Ports 106 Access a Remote Port T o connect to a remote port using the w eb, T elnet or SSH client, use the port access menu or a custom me nu to simplify navigation. • Web Access: Click Seri al port s > Connection > port number . Remote ports are sorted below the physi cal serial port s as the next[...]

About Alerts and Notifications Chapter 6 Alerts and Notifications 107 About Alert s and Notifications The Digi Passport unit can be co nfigured for system alerts and notifications. It sends email messages when the number of system log messages reaches a cert ain value or when an alarm message is detected in the serial port data. The Digi Pa ssport [...]

Configure SMTP Alerts Chapter 6 Alerts and Notifications 108 Configure SMTP Alert s Most SMTP servers chec k the sender ’ s email ad dress with the host domain name to verify the address as authent ic. Consequently , when assigning an email address for the dev ice email address, any arbitrary username with the registered hostname may be used. An [...]

Supported SNMP Traps Chapter 6 Alerts and Notifications 109 Supported SNMP T rap s The Digi Passport unit s upports SNMP aut hentication, power on, and link up traps. Applications such as an NMS (Netwo rk Management System) or an SNMP browser can exchange information with the Digi Passpor t unit and control actions to the unit. The protocol functio[...]

Setting Additional Traps at the Port Level Chapter 6 Alerts and Notifications 110 Setting Additional T rap s at the Port Level Additional traps can be set at the port level. The t able shows where the trap is located in the serial port configuration settings in the web interface (in Serial port > Configuration ), the trap name, and t he trap fun[...]

Configure SNMP v1 or v2 Chapter 6 Alerts and Notifications 111 Configure SNMP v1 or v2 T o configure the Dig i Passport unit for SN MP do the following: 1. Access the Digi Passpor t unit’ s web interface. 2. Select Network > SNMP configuration . 3. In the MIB-II system objects section, enter MIB-II info rmation as needed and enable authenticat[...]

Configure SNMP v1 or v2 Chapter 6 Alerts and Notifications 112 5. Enter T rap receiver settings. • IP Address : The IP address of the device receiving the trap alerts. • Community : The options are public or private; this value must match the string used in the SNMP software. • Ve r s i o n : The SNMP version, either version 1 or version 2c. [...]

Manage SNMP configuration Chapter 6 Alerts and Notifications 113 Manage SNMP configuration The Digi Passport unit’s SNMP confi guration can be managed using an NMS or SNMP browser . However , bef ore the NMS or SNMP browser can access the data, the Access control settin gs must list the IP address of the host from which the browser is exec uted. [...]

Manage SNMP configuration Chapter 6 Alerts and Notifications 114 3. Select 1 . The Access control settings (SNMP V3) - 1 pag e i s displayed: Enter settings: • User name : enter the user name that has been set up for SNMPv3 access in the SNMP browser software. • Security level : This setting should match t he security level that is configured i[...]

Manage SNMP configuration Chapter 6 Alerts and Notifications 115 4. Open the main SNMP configuration page again. It should look something like this. 5. Configure the T rap receiver settings . From the list, select number 1 . The trap receiver settings are displayed.[...]

Manage SNMP configuration Chapter 6 Alerts and Notifications 116 6. Select the T rap receiver enable/disable checkbox, then select v3 from the Ve r s i o n menu. The T rap receiver settings -1 page is displayed: Enter settings: • IP address : Enter the IP address of the T rap receiver . • User name : Fill in the User name ; this value is the sa[...]

Configure Port Event Handling Chapter 6 Alerts and Notifications 117 Configure Port Event Handling Once an SMTP or SNMP server has been conf igured, it can be used to send port-related alerts and notifications. T o configure a port for port event handling, follow these steps. This procedure assumes that SMTP is configured first. If not, see "C[...]

Configure Port Event Handling Chapter 6 Alerts and Notifications 118 7. Select Port event handling . The port event handling settings are displayed. • Select an action and enter the keyword for the port event handling. The keyword is any text string t hat will trigger an alert when it traverses the serial port. • Enable Email notification . •[...]

Configure Alerts for Automa tic Device Recognition (ADR) Chapter 6 Alerts and Notifications 119 Configure Alert s for Automatic Device Recognition (ADR) Before configuring the al erts for Automatic Devi ce Recognition (ADR), make sure the sure the port for ADR has been configured, as described in "Configure Automatic De tection" on page 7[...]

Configuring a Service Processor Chapter 7 Service Processors 120 Digi Passport provides s upport for various servic e processors, such as Intelligent Platform M anagement Interface (IPMI), Integrated Lights Out (iLO), Systems Management Architectu re for Server Hardware Command Line Protocol (SMASH CLP), and Dell Remote Access Controller (DRAC). Se[...]

Configuring a Service Processor Chapter 7 Service Processors 121 2. On the Host mode configuration page, use the Service processor setting to select the service pr ocessor . Available options are NONE , IPMI , iLO , and DRAC .[...]

Intelligent Platform M anagement Interface (IPMI) Chapter 7 Service Processors 122 Intelligent Plat form Mana gement Interface (IPMI) Intelligent Platform Managem ent Interface (IPM I) is a specification for the equipment that monitors the physica l environment and condition of a computer hardware server . The specif ication is intended to cover th[...]

Intelligent Platform M anagement Interface (IPMI) Chapter 7 Service Processors 123 3. Select Remote port parameters from the main conf iguration p age. The remote port setti ngs are displayed. • Destination IP : The address of the server to monitor . Generally , this is the address assigned to the BMC (Baseboard Management Controller). • Destin[...]

Intelligent Platform M anagement Interface (IPMI) Chapter 7 Service Processors 124 4. From the main confi guration page, select IPMI Configuration . The IPMI configuration se ttings are displayed. • Destination IP : The address of the server to monitor . Generally , this is the address assigned to the BMC (Baseboard Management Controller). For a [...]

Intelligent Platform M anagement Interface (IPMI) Chapter 7 Service Processors 125 Connect to a Server via IPMI 1. T o connect to a server via the IP MI GUI, select the serial port connection page. 2. Select the serial port configured for IPMI. This menu is displayed: 3. Select IPMI GUI Access . This connect to the serv er via IPMI. This p age is d[...]

Intelligent Platform M anagement Interface (IPMI) Chapter 7 Service Processors 126 5. Select the information to monitor from the pulldown menu. For example, if BMC hardw are information is select ed, this page is dis- played. The information displayed varies between server manufacturers.[...]

Intelligent Platform M anagement Interface (IPMI) Chapter 7 Service Processors 127 6. T o make an SOL connection to th e servers console port, click the Connect button. The resulting window is displayed. The example shown below is a console connecti on to a Window s 2003 servers SAC port.[...]

SMASH CLP Chapter 7 Service Processors 128 SMASH CLP Systems Management Architecture fo r Server Hardwa re Command Line Protocol (SMASH CLP) is a comman d/response specification transmitted and received over a text message-b ased transport protocol. It was developed and released by DMTF (Dis tributed Management T ask Force). SMASH CLP addresses the[...]

Integrated Lights Out (iLO, iLO2) Chapter 7 Service Processors 129 Configure iLO and SMAS H CLP on a Remote Port T o configure iLO includi ng SOL (Serial Over LA N) and SMASH CLP on a remote port, follow these steps. 1. In the Web interface, select Serial port configuration and select the port to configure for iLO. 2. From the menu, select Advanced[...]

Integrated Lights Out (iLO, iLO2) Chapter 7 Service Processors 130 Enter the remote port par a meters as follows: • Destination IP : The IP address of the serv er to monitor . Generally , this is the IP addr ess assigned to the iLO management channel. • Destination port : Normally 22 for SSH or 23 for T elnet; the actual port may vary on in div[...]

Integrated Lights Out (iLO, iLO2) Chapter 7 Service Processors 131 6. The Service processor configuration settings are di splayed at the bottom of the Serial port configuration p age. Select Service processor configuration . The Service processor configuration settings are displayed. Enter the Service processo r configuration settings: • Destinat[...]

Integrated Lights Out (iLO, iLO2) Chapter 7 Service Processors 132 Access iLO Port or SMASH-CLP Support After finishing configurations for iL O and SMASH-CLP , access iLO port or SMASH-CLP suppor t from the Serial port > Connection page. When iLO and SMASH are c onfigured, four connecti on icons are displayed on the Serial port connec tion page,[...]

Integrated Lights Out (iLO, iLO2) Chapter 7 Service Processors 133 iLO GUI Access is for connecting to a SAC-like iLO us er interface page, as shown below . SMASH GUI Access accesses the SMASH-CLP us er interface, as shown below .[...]

Integrated Lights Out (iLO, iLO2) Chapter 7 Service Processors 134 Under Ta r g e t s , click the links to move to the corresponding target p ath. SMASH-CLP shows sub target s and pr operties. Any commands that can be executed on the correspondi ng target p ath, such as Start , Sto p and Reset , are displayed. T o move to the root pa th, click the [...]

Integrated Lights Out (iLO, iLO2) Chapter 7 Service Processors 135 If the target p ath has properties th at can be set, t he SMASH-CLP user interface displays an edit box for changing properties; for example:[...]

Dell Remote Access Controller (DRAC) Chapter 7 Service Processors 136 Dell Remote Access Controller (DRAC) Dell Remote Access Controller (DRAC) is a specification for the equipment that monitors the physic al environment and conditi on of Dell servers. The specification is intended to cover the regulation of temperature, voltage and power , and to [...]

Dell Remote Access Controller (DRAC) Chapter 7 Service Processors 137 6. Select Remote port p arameters . Enter the remote port par a meter s: • Destination IP address : The address of the se rver to monitor . Generally this will be t he address assigned to the DRAC management channel. • Destination port : normally 22 for SSH or 23 for T elnet,[...]

Dell Remote Access Controller (DRAC) Chapter 7 Service Processors 138 After DRAC is configured, to a ccess the DRAC port, select Serial port > Connection . If DRAC and SMASH are configured, four connection icons are shown, as in the example below . Serial T erminal Connection is for direct access to the DRAC service process. View Port Log displa[...]

Dell Remote Access Controller (DRAC) Chapter 7 Service Processors 139 DRAC GUI Access is for connecting to a SAC- like DRAC user interface page as shown in the example screens.[...]

Dell Remote Access Controller (DRAC) Chapter 7 Service Processors 140 SMASH GUI Access opens the SMASH-CLP user interface, as shown in the example. Under Ta r g e t s , click the links to move to the corresponding target p ath, and SMASH-CLP shows sub target s and properties. Any commands that can be executed on the corr esponding target path, su c[...]

Methods for Controlling User Access Chapter 8 Users, Security , and Authentication 141 f Methods for Controlling User Access The Digi Passport unit provides four me thods for controllin g access to the network and the devic es on the network: • Restricting or permi tting IP filtering This method allows or prevents user s with specific IP addresse[...]

Configure User Access Control Chapter 8 Users, Security , and Authentication 142 Configure User Access Control Another method for controlling access to the serial ports on the Digi Passport unit is the User Access Control configurat ion. User access control can be set up either global ly (using the All Port s option) or per port. It is not necessar[...]

Configure User Access Control Chapter 8 Users, Security , and Authentication 143 A strategy for assi gning rights to a port can include: • Allowing <<Everyone>> access to a port and then restricting access to certain users -or- • S pecifying each individual user and their specific rights to a port • Adding a user to an established[...]

Configure User Access Control Chapter 8 Users, Security , and Authentication 144 Configure User Access Privileges 1. Select Serial Port Confi guration > All Ports or Serial Port Configuration > port number . 2. Click User access mode . 3. Enter the users and thei r privileges, and click Add user . Restrict a User ’ s Privileges T o restrict[...]

Configure User Access Control Chapter 8 Users, Security , and Authentication 145 Change the Privileges of an Access List 1. On the same screen shown in the pr evious procedure, select an access list from the pulldown box. 2. Click Add access , then click Save & apply . When the access list is a dded, it will include users Paul and Ti m . In thi[...]

Configure User Access Control Chapter 8 Users, Security , and Authentication 146 Sniff Session A sniff session enables multiple users to a ccess a single serial port for viewing the data stream. Anyone who is registered for a snif f session can access a specific serial port — even if someone else is us ing the port. The Digi Passport unit suppor [...]

Configure User Access Control Chapter 8 Users, Security , and Authentication 147 Sniff session settings include: • Enable/Disable sniff mode : • Disabled : No one can enter a sniff sess ion af ter the first user logs on. • Enabled : Allows all users with access t he following options in sniff mode: • Sniff session display mode : • server [...]

Security Profile Chapter 8 Users, Security , and Authentication 148 Security Profile The Security Profile tab, available under System Administration > Security Profile , provides a centralized access for enforcing site- appropriate, minimum security paramete rs on the Passport. These are the available control mechanisms: • System Security • [...]

Security Profile Chapter 8 Users, Security , and Authentication 149 Password Security Settings T o enhance password security , use these settings: • Minimum p assword length : Allows passwords that are 3 to 255 characters long; also allows spaces in p asswords. • Maximum p assword age : S pecified in days. T o disable this setting, enter 0. •[...]

Authentication Chapter 8 Users, Security , and Authentication 150 Authentication The Digi Passport unit supports multiple methods of user authentication, including local, T ACACS+, RADI US, RADIUS Down-Local, LDAP , Kerberos, and Custom P AM. The authent ication protocol depends on the environment. PC Connection request Authentication server Serve [...]

Configure Authentication Methods for Port Access Chapter 8 Users, Security , and Authentication 151 Configure Authentication Methods for Port Access Authentication can be perfo rmed either through a si ngle authentication method, such as RADI US, or an authentication method where a Local authentication service is used in additi on to the RADIUS , L[...]

Configure Authenticati on for the Web Server Chapter 8 Users, Security , and Authentication 152 Configure Authenticati on for the W eb Server 1. Enter the IP address of the Digi Passport unit in the address bar of a web browser to access the web interface. 2. Select Network > Web server configuration . The Web server configuration settings are d[...]

Configure Authentic ation for the CLI Chapter 8 Users, Security , and Authentication 153 Configure Authentic ation for the CLI The CLI configuration is for specifyi ng the authenticatio n method and shell when accessing the Passport di rectly . Avai lable options: • Authentication method: Local, Radius, T ACACS, LDAP , Kerberos • Timeout for CL[...]

Configure Authentic ation for the CLI Chapter 8 Users, Security , and Authentication 154 LDAP Authentication The Digi Passport unit supports authenticating against an LDAP-based database, including LDAP systems running on Linux servers, and Microsoft systems running the Microsoft Active Directory with the LDAP gateway ADAM (Active Director y Applic[...]

Configure Authentic ation for the CLI Chapter 8 Users, Security , and Authentication 155 Custom P AM Module The Digi Passport unit supports cu stom P AM modules for remote authentication. This allows creatin g a custom authentic ation schema or using any other third party P AM modu le. The module must be compiled for the Digi Passport unit’s envi[...]

Configure Authentic ation for the CLI Chapter 8 Users, Security , and Authentication 156 Configuration for a Samba Server On the Samba server Make a shared folder to use a Windows machine for a Samba server . For a Linux machine, run the smb service. On the Digi Passport 1. In the Web inte rface, go to Network > Samba configuration . 2. Set Samb[...]

Recommended Process for Im plementing Custom Menus Chapter 9 Custom and Default Menus 157 The Digi Passport unit has several de fault menus for easy configuration and access by different users. Depending on access privileges, the menus available are the Web Interface, Co nfiguration Menu, and Port Access Menu. A Custom Menu feature for creating men[...]

Add Users to the System Chapter 9 Custom and Default Menus 158 Add Users to the System Before users can be assigned menus, the users must be added to the system. 1. Enter the IP address of the Digi Passport unit in the address bar of a web browser to access the web interface. 2. Select System administration > Users administration . Click the Add[...]

Create Menu Names Chapter 9 Custom and Default Menus 159 Create Menu Names T o name a custom menu, do the following: 1. Enter the IP address of the Digi Passport unit in the address bar of a web browser to access the web interface. 2. Select Custom Menu > Configuration . 3. Enter the Menu Name to assign and click the Add Menu button. The menu is[...]

Add Menu Items Chapter 9 Custom and Default Menus 160 Add Menu Items 1. Select Custom Menu > Configuration > menu name link for the menu to configure. 2. Select Menu Items > Add Item . The Custom Menu Item Configuration settings are displayed. 3. Fill in the de sired parameters: • Key : Assign any letter or number ex cept a value already[...]

Assign Users to a Menu Chapter 9 Custom and Default Menus 161 Assign Users to a Menu 1. Enter the IP address of the Digi Passport unit in the address bar of a web browser to access the web interface. 2. Select Configuration > Custom Menu > Menu Us ers . A list of available users is displayed. 3. Select a menu for a user by selecting a menu fr[...]

Default Menu: The Port Access Menu Chapter 9 Custom and Default Menus 162 Default Menu: The Port Access Menu The port access menu is a flat (one level) menu showi ng all ports, port titles and the mode of each port. It provides an overview of all ports and initiating a connection to any of them. When connecting to a specific port, a prompt for the [...]

Support for Microsof t Windows Server 2003 in Digi Passport Chapter 10 Microsoft SAC Support 163 Support for Microsof t Windows Server 2003 in Digi Passport The Digi Passport unit provides a browser-based user interface to Microsoft’ s text-based S pecial Administ ration Console (SAC ), a n integral part of Windows Server 2003 Emer gency Manageme[...]

Process for Setting Up Microsoft SAC Support Chapter 10 Microsoft SAC Support 164 Process for Setting Up Microsof t SAC Support Setup for the Digi Passport unit SAC support is a three-step process: 1. Set up the Windows Serv er 2003 for SAC support. T o do this, ensure that the COM port used for console traffic is properly set up. This includes des[...]

Set Up the Windows Server 2003 Port Chapter 10 Microsoft SAC Support 165 Set Up the Windows Server 2003 Port 1. Sign on to the Windows Serv er 2003 as the administrator . 2. Access the command line. 3. Use the bootcfg command to redirect consol e traffic to the correct COM port. The followi ng is the command syntax and an example. See the Microsoft[...]

Set Up the Digi Passpor t Unit for SAC Support Chapter 10 Microsoft SAC Support 166 Set Up the Digi Passpor t Unit for SAC Support T o set up a serial port to provi de access to the Windows Server 2003 console port, do the following: 1. Enter the IP address of the Digi Passport unit in the address bar of a web browser to access the web interface. 2[...]

Access Windows Server 2003 Console Port from Digi Passport Unit’s GUI Chapter 10 Microsoft SAC Support 167 Access Windows Server 2003 Console Port from Di gi Passport Unit’ s GUI T o access the Windows Server 2003 console port, do the following: 1. Enter the IP address of the Digi Passport unit in the address bar of a web browser to access the [...]

About freeKVM Chapter 1 1 Config ur e an d Use fre eKVM 168 About freeKVM The Digi Passport provides a met hod, called freeKVM, for gaining access to the graphical interf ace of a system using t he network. Using freeKVM involves specifying a connection met hod and IP address to use to reach the system. Supported co nnection methods include: • Mi[...]

About freeKVM Chapter 1 1 Config ur e an d Use fre eKVM 169 Example Configuration Here is an example of a Digi Passpo rt managing a Linux SuSE 9.2 system, a Windows 2003 system, an d an HPUX system. The rest of this chapter describes how to set up freeKVM with each of the supported methods and connect to a system through freeKVM.[...]

Use freeKVM with Remo te Desktop Protocol Chapter 1 1 Config ur e an d Use fre eKVM 170 Use freeKVM with Re mote Desktop Protocol This section describes how to conf igure freeKVM with Remote Desktop Protocol, and connect to a system th rough freeKVM using Remote Desktop Protocol. Configure freeKVM with Remote Desktop Protocol T o set up freeKVM wit[...]

Use freeKVM with Remo te Desktop Protocol Chapter 1 1 Config ur e an d Use fre eKVM 171 4. Click freeKVM configuration . This window is displayed: 5. For the freeKVM configuration setting, select Enable . From the Client program pulldown, select Windows remote desktop connection . 6. If not using IP automatic det ection, enter t he IP address. 7. E[...]

Use freeKVM with Remo te Desktop Protocol Chapter 1 1 Config ur e an d Use fre eKVM 172 Connect to a System through free KVM using Remote Desktop Protocol When connecting through the C onnection window , and a freeKVM connection is configured, thes e things are now displayed: • The terminal monitor button, which connects to the raw ASCII SAC cons[...]

Use freeKVM with VNC Protocol Chapter 1 1 Config ur e an d Use fre eKVM 173 Use freeKVM with VNC Protocol This section describes how to config ure freeKVM with the VNC Protocol, and connect to a system th rough freeKVM using VNC. Configure freeKVM with VNC Protocol 1. Access the Digi Passport W eb interface and log in. 2. Select Serial Port > Co[...]

Use freeKVM with VNC Protocol Chapter 1 1 Config ur e an d Use fre eKVM 174 4. Select the freeKVM t ab. This window is displayed: 5. From the freeKVM connecti on pulldown list, select Enable . Then, from the Client program pulldown list, se lect the VNC Client program. 6. Adjust the VNC socket/screen number , if necessary . The default is 1. 7. Cli[...]

Use freeKVM with VNC Protocol Chapter 1 1 Config ur e an d Use fre eKVM 175 Connect to a System th rough freeKVM using VNC When connecting through the C onnection window , and a freeKVM connection is configured, t hese things are displayed: • The terminal monitor bu tton, which connects to the serial console. • A mouse button (next to the moni [...]

Use freeKVM with X Window System Protocol and XManager Software Chapter 1 1 Config ur e an d Use fre eKVM 176 Use freeKVM with X Window System Protocol and XMa nager Soft ware This section describes how to conf igure freeKVM with X Window System Protocol and XManager software and connect to a system with it. Configure freeKVM with X Window System P[...]

Use freeKVM with X Window System Protocol and XManager Software Chapter 1 1 Config ur e an d Use fre eKVM 177 4. Select freeKVM configuration . This window is displayed: 5. From the freeKVM connection pulldown list, select Enable . 6. From the Client program pulldown list, select the Xmanager program. 7. Click Save and Apply .[...]

Web Redirection Chapter 1 1 Config ur e an d Use fre eKVM 178 Connect to a system thr ough freeKVM using Xmanager When connecting through the C onnection window , and a freeKVM connection is configured, t hese things are displayed: • The terminal monitor bu tton, which connects to the serial console. • A mouse button (next to the moni tor icon)[...]

Installing Programs for freeKVM Chapter 1 1 Config ur e an d Use fre eKVM 179 Inst alling Programs for freeKVM freeKVM relies on software inst alled on the client system to provide access to the target syst em. This section is for troubleshooting common issues that may come up when using freeKVM. Check sof t ware levels and inst all sof tware as ne[...]

Installing Programs for freeKVM Chapter 1 1 Config ur e an d Use fre eKVM 180 VNC Viewer Required Client Sof tware Windows: • T ightVNC from http://www .tightvnc.com/ • RealVNC software from http://www .realvnc.com/ •U l t r a V N C f r o m http://www .ultravcn.com/ Linux: vncviewer from t he VNC client software p a ckage for the distribution[...]

About the Rackable Systems Management Card Chapter 12 Rackable® Systems Manag em e nt Card 181 About the Rackable Systems Management Card Rackable ® Systems manufactures a management card t hat is built into some of their servers. This card interfaces bet ween the Digi Passport unit and the server ’s serial port. In no rmal mode, it allows tran[...]

Rackable Systems Management Card Configuration Chapter 12 Rackable® Systems Manag em e nt Card 182 Rackable Systems Management Card Configuration T o configure the serial port to provide access to the Rackable Systems Management console: 1. Access the Digi Passpor t unit’ s web interface. 2. Select Serial Port > Configuration . 3. Select a po[...]

Access Rackable System s Management Card from Digi Passport GUI Chapter 12 Rackable® Systems Manag em e nt Card 183 Access Rackable Sy stems Mana gement Card from Digi Passport GUI 1. Access the Digi Passpor t unit’ s web interface. 2. Select Serial Port > Connection . A screen similar to the following is displayed. 3. Click on the Rackable S[...]

Access Rackable System s Management Card from Digi Passport GUI Chapter 12 Rackable® Systems Manag em e nt Card 184 4. Use the Digi Passport unit’s user interfac e to perform Rackable Systems Management Card functions. At tributes of the user interface controls are shown below and de scribed in the following table.[...]

Access Rackable System s Management Card from Digi Passport GUI Chapter 12 Rackable® Systems Manag em e nt Card 185 Rackable Systems Ma nagement Card Prop erties and Controls Field Description Control: Power st atus The first column shows the curr en t state. Three buttons are availab le to initiate an action to either , power on, power of f or re[...]

Chapter 13 Configure Re mote Dial-In Access 186 The Digi Passport unit s upports dial-in connections from remote sites for out-of-band access. In this configurati on, the Digi Passpor t unit has serial ports configured for exte rnal modems and wait s fo r dial-in connections from remote sites. When dialing in using a termin al application, the Digi[...]

Configure for Dial-In Modem Access Chapter 13 Configure Re mote Dial-In Access 187 Configure for Dial-In Modem Access T o configure a serial por t for a dial-in m odem, enter the values for these fields: Host mode , Modem init string , and Ina ctivity timeout . T o access the Host mode configurati on screen, do the following: 1. Enter the IP addres[...]

Configure for Dial-In Modem Access Chapter 13 Configure Re mote Dial-In Access 188 • Modem test : T o ensure the proper functi onality of the modem, the Digi Passport unit has th e ability to test the modem connection in a configurable interval. The modem test allows a phone number and an interval to be speci- fied. After the system ha s booted, [...]

Configure for Dial-In Modem Access Chapter 13 Configure Re mote Dial-In Access 189 By e-mail based notification . The Alert configuration dialog of the port conf iguration, contains multiple settings: The title of the e- mail and the address can be configured. T o configure e-mail notif ications, a primary SM TP server must be configured under Netw[...]

Add a PC Modem Chapter 13 Configure Re mote Dial-In Access 190 Add a PC Modem A PC card slot is provided on the fron t panel of the Digi Passport unit. T o install and configure the PC modem on the Digi Passpo rt unit, do the following. 1. Insert the card into the PC slot located on the front of the device. 2. Enter the IP address of the Digi Passp[...]

Configure for Dial-In Terminal Server Access Chapter 13 Configure Re mote Dial-In Access 191 Configure for Dial-In T erminal Server Access The host mode Dial-In T erminal Server is similar to the host mode T erminal Server , but also allows configuring a modem init string. In this mode, an incoming modem connection is auto matically connected to an[...]

About the Power C ontroller Feature Chapter 14 Power Controller 192 About the Power Controller Feature The Power Controller feature allows administrators of the Digi Passport unit to use console management to control power functions. Power control consists of three basic functions: on , off, and reboot (p ower cycle). There are two typical scenario[...]

Install Power Controller Chapter 14 Power Controller 193 Inst all Power Controller T o connect the Digi RPM power contro ller to the Digi Passport unit use the straight-thru cable provid ed with the Digi RPM unit . Plug one side into the “Console” port of the Digi RPM unit and the other into an y port of the Digi Passport unit. If connecting mu[...]

Configure Power Controller Chapter 14 Power Controller 194 Configure Power Controller Only system administrators can add a power controll er although authorized users may reconfigure out lets or serial ports . Configure the Serial Po rt Parameters to Match the P ower Controller 1. Log in to the Digi Pa ssport unit (username root , password dbp s ).[...]

Set Alarms and Thresholds Chapter 14 Power Controller 195 Set Alarms and Thresholds The Power Controller can be set to issu e an alert via E-mail notifica tion or an SNMP trap when envir onmental conditions exceed specifications. 1. On the Power Controller Configuration p age, click Alarms & thresholds . 2. Enter the appropriate parameters. Se [...]

Configure Outlets Chapter 14 Power Controller 196 Configure Outlet s T o configure the power supplied to the device from the power controller , follow these steps. 1. Under Power controller , click Outlet s . 2. Click the outlet nu mber to configure. 3. Select the serial port number that controls t he device connected to the Digi Passport unit (if [...]

Configure Outlets Chapter 14 Power Controller 197 6. Click Save & apply . This screen shows that serial port one on the Digi Passport unit is connected to a Sun Server that is supplied power from outlet 1 on the power controller . In this example, user tomw has access to the power outlets. 7. T o select the parameters for t he User Access Co nt[...]

User Access for Power Controller Chapter 14 Power Controller 198 User Access for Power Controller The Digi Passport unit c an be configured to allow all or specific users access to the power controlle r feature, as well as re stricting specific users to the power controller feature. User Access is configured on an per-outlet basis. User Access to a[...]

User Access for Power Controller Chapter 14 Power Controller 199 Configure to Restri ct Specific Users T o restrict specific us ers, select access for << Everyone>> and add the restricted user by desele cting his or her access. 1. Log in to the Digi Pa ssport unit (username root , password dbp s ). 2. Select Power Controller > Config[...]

User Access for Power Controller Chapter 14 Power Controller 200 The screen shows that ou tlets 1 and 2 control power to the Sun Server configured on port 1 of the Digi Passpor t unit. Outlets 3 and 4 are not serial devices. User janl has been designated the specific user to control outlet # 3. User tomw does not have access to Outlet # 4.[...]

Power Controller Management Chapter 14 Power Controller 201 Power Controller Management The Power Controller Management optio n changes outlet settings and provides a quick update of th e power controller status. 1. Under Power Control click Management . The Power controller management screen gives a quick view of all the power controllers and the [...]

Cascading Multiple Digi RPM Units Chapter 14 Power Controller 202 Cascading Multiple Digi RPM Unit s The Digi RPM power contro llers can be cascaded when used with the Digi Passport unit. The DIP switches on the front panel of the Digi RPM allow configuring unique identities (ID) to th e Digi RPMs so they can be identified. In a cascaded environmen[...]

Allowed IDs for Digi RPM Unit The figure shows all possib le IDs that can be confi gured on the Digi RPM unit, and the switch se ttings to configure each ID.[...]

Managing Digi RPM from the Command Line Chapter 14 Power Controller 204 Managing Digi RPM fr om the Comm and Line The Digi RPM can be managed using AS CII commands. For information about these commands, see the Di gi Knowledge Base article Quick reference to the RPM command line , at: http://www .digi.com/support/kb ase/kbaseresult detl.jsp?id=866 [...]

Third-Party Power Controllers Chapter 14 Power Controller 205 3. Select New in Port menu list on the Add power contro ller page as shown below . This page below will open: 4. Set the number of cascaded units. 5. Fill in the listening port (for ex ample 7049). This will be added as a remote port. 6. Fill in the destination IP address with the IP ass[...]

Third-Party Power Controllers Chapter 14 Power Controller 206 7. Set the Protocol to SNMP . 8. S pecify the destination port number . Normally , this number is 162. 9. S pecify the Get and Set commun ity st rings (by default these are public and private). 10. Set the Remote version to v1 from the drop down list. 1 1. Select the Web protocol. 12. Cl[...]

Third-Party Power Controllers Chapter 14 Power Controller 207 Locally connected ServerT ech power controller T o install a locally connected ServerT e ch power controller , follow the steps listed. 1. Connect the serial port of the ServerT ech devic e to one of the serial ports on the Passport using a st andard Ether net cable. 2. In the Web go to [...]

Third-Party Power Controllers Chapter 14 Power Controller 208 The resulting p age will open. 5. Set the number of cascaded units. 6. Set the web protocol. 7. Fill in the destinati on IP address. This is a ssigned to the ServerT ech device. 8. Press Add controller. After adding the Power cont roller a page similar to the one below will be displayed.[...]

Third-Party Power Controllers Chapter 14 Power Controller 209 9. T o configure the outlets on the cont roller , select a power controller from the installed Power controllers and a new page will be displayed, similar to the one shown below . 10. From this page select the Outlets link and a new p age will be displayed, where you can configure the ou[...]

Third-Party Power Controllers Chapter 14 Power Controller 210 1 1. A page and similar to t he following is displayed. From this page you can link the outlet to a serial port, give the outlet a name and assign user access rights. 12. When you are finished conf iguring the outlet. select Save & apply .[...]

Third-Party Power Controllers Chapter 14 Power Controller 211 Power group s Power groups are group s of outlets that can be controlled at the same time. T o configure a power group: 1. In the Web UI, go to Power controller > Power group and the p age below will be displayed. 2. Enter a name for the new group and click Add . This page is displaye[...]

Third-Party Power Controllers Chapter 14 Power Controller 212 8. Repeat steps until all out let s for this group are added. 9. Click Save & apply . A page similar to the one below is displayed.[...]

Third-Party Power Controllers Chapter 14 Power Controller 213 Outlet management T o manage the outlets on the power controller: 1. In the Web UI, go to Power controller > Manage and the page below will be displayed. 2. From this page, you can select power controller fr om the list or select the Power outlet management link. • Selecting the Pow[...]

Third-Party Power Controllers Chapter 14 Power Controller 214 3.Selecting the Power out let management link will result in a new page similar to the one shown below . From this page you can manage individual outlet s or manage a group of outlets. Manage individual outlet s 1. Select the outlet s from the list. 2. Select Power on , Power off or Rebo[...]

Third-Party Power Controllers Chapter 14 Power Controller 215 6. Click Save & Apply. Connect to the port T o connect to t he port, choose Serial Port > Connection and choose the port number . Y ou can either control t he power through the web interface by clicking on the Power control button or through the serial console connection by clicki[...]

Third-Party Power Controllers Chapter 14 Power Controller 216 Power Control Screen: Serial Console Screen:[...]

Third-Party Power Controllers Chapter 14 Power Controller 217 After typing the port menu key: T ype p to power device off or r to reboot device. The Hot Key by default is Ctrl-Z. This can be changed by going to Configuration > Seri al Ports > {Port # or All} > Host mode configuration > {set the Port Escape Sequence} > Save & Appl[...]

Pinouts for Third-Party Power Controllers and Digi Passport Chapter 14 Power Controller 218 Pinout s for Third-Party Power Controllers and Digi Passport Pinouts for supported power controll ers and the Digi Passport follow . An Ethernet cable can be used to connect the Se rverT ech Sentry Power Controller to the t he Digi Passport unit. Pinout s fo[...]

Pinouts for Third-Party Power Controllers and Digi Passport Chapter 14 Power Controller 219 Pinout s for console por t of Digi Passport Pin Number EIA-232 Signal 1C T S 2D S R 3R x D 4G N D 5 DCD 6T x D 7D T R 8R T S[...]

About Port Clustering Chapter 15 Po rt Clustering 220 About Port Clustering Port clustering is the ability to coherently manage serial port s across multiple devices. Digi Passport supports two meth ods of port clustering, both of which can be used concurrently: • Master/Slave Clustering • Peer-to-Peer Clustering Master/Slave Clustering Master/[...]

About Port Clustering Chapter 15 Po rt Clustering 221 Peer-to-Peer Clustering Peer-to-peer clustering a llows multiple Digi Passport units to share information and have equal status within a cluster , without requiring one of the units to be the master . Any unit in the cluster , ty pically , the closest unit to the user , can act as a master . Thi[...]

Configure Master-Slave Port Clustering Chapter 15 Po rt Clustering 222 Configure Master-Sla ve Port Clustering Configuring the Digi Pa ssport unit for port cluste ring requires these tasks: • Configure all the Digi Passport serial ports. • Assign one Digi Passport unit as the master clustering device; all other Digi Passport units def ault to s[...]

Configure Master-Slave Port Clustering Chapter 15 Po rt Clustering 223 Configure Slaves to Join a Cluster Digi Passport units can be configur ed as basic slaves without any additional configuration. T wo additio nal settings, however , enhance the clustering capability . • Authentication mode : Local authentication is the slave independently auth[...]

Configure Master-Slave Port Clustering Chapter 15 Po rt Clustering 224 Configure Advanced Clustering Settings T o refine a cluster environment, use th e advanced clusteri ng configuration settings. 1. Select Clustering > Configuration > Master > Save & apply . 2. Select the port number > Enable > Save & apply . 3. From the Cl[...]

Configure Master-Slave Port Clustering Chapter 15 Po rt Clustering 225 Advanced master-slave clus tering settings include: • Enable : Shows whether the port is enabled or dis abled. All ports are enabled by default. • Slave unit address : The IP address of slave. • No. of port s : The number of port s on the slave. • Slave authentication mo[...]

Configure Master-Slave Port Clustering Chapter 15 Po rt Clustering 226[...]

Configure Master-Slave Port Clustering Chapter 15 Po rt Clustering 227 Access the Cluster Port s Connect to the slav e port using the web interfac e, T elnet, or SS H client. Either access the port a ccess menu or custom me nu of each slave device or connect directly to each slave port. From the We b Interface 1. Clustered Ports appear in the W eb [...]

Configure peer-to-peer Clustering Chapter 15 Po rt Clustering 228 Configure peer-to -peer Clustering Configure Peer -to-peer Mode 1. Access the Digi Passport unit through the web interface. 2. Select Configuration > Peer-t o-Peer configuration . 3. Configure peer-to- peer mode settings: • Peer-to-peer mode : select Enable . • Peer-to-peer au[...]

Configure peer-to-peer Clustering Chapter 15 Po rt Clustering 229 Peer-to-peer Information Page The Peer to peer informati on p age allows for jo ining and withdrawing peer-to-peer connections, and displays status of peer-to-peer connections. S tatus fields and buttons on this page include: • Not ready : Peer-to-peer mode is not active • Not jo[...]

Configure peer-to-peer Clustering Chapter 15 Po rt Clustering 230 Join a Peer-to-peer Group T o join an existing peer-to -peer group, enter the IP address of a member of that group and click the Join button. If the peer is not enabled or the password is incorrect, the joining process will fail. Peer information for a joining peer This screen shows [...]

Configure peer-to-peer Clustering Chapter 15 Po rt Clustering 231 Invite Peers T o invite peers, enter thei r IP addresses and click the Invite button. Each unit will be invited to join the peer-to-peer grou p of the current unit (or a group will be established if there is no current group. If the remote host is not already part of a group and it s[...]

Configure peer-to-peer Clustering Chapter 15 Po rt Clustering 232 Peer-to-peer information af ter inviting peers • Withdraw : Withdraws the peer-to-peer group. • Remove : Removes the peer from the peers list. • Up date : Gets the information of the peers that have not responded.[...]

Connect to Peers Chapter 15 Po rt Clustering 233 Connect to Peers Link to Web Interface T o link to the web interfac e of the peer , click the prot ocol or the source port of the web port. Link to Port Access Menu T o connect to the port a ccess menu of the peer , clic k the protocol or the source port of t he port access menu. Use the Digi Passpor[...]

Connect to Peers Chapter 15 Po rt Clustering 234 Move to and Peer list T o limit those ports that belong to the selected peer , select a peer in the Peer list box. The port number consists of t he peer number , uni t number and port number . This example shows the first port of slave unit 4 of the second peer . Connect to a Port via connect.asp Con[...]

Connect to Peers Chapter 15 Po rt Clustering 235 Connect to a Port via SSH Users can also access ports us ing ssh console by including the t= or p= option. For example: ssh root:t=any-unique-port-title@192.168.12.8 (where 192.168.12.8 is any peer) ssh root:p=1@192.168.12.8 (192.168.12.8’ s local port 1) ssh root:p=R2P1@192.168.12.8 (Peer 2 port 1[...]

Clustering push configuration Chapter 15 Po rt Clustering 236 Clustering push configuration Clustering push configuration is used to push the conf iguration of one Passport (Push server) to the other Passport unit in the cluster . This can facilitate initial configur ation of mu ltiple Passport units. Because of security concerns, pushing configur [...]

Clustering push configuration Chapter 15 Po rt Clustering 237 If the unit is joined peer to peer clustering, you can see the peer list on the Push server filter ing configuration page. Y ou can also add the push server manually by enteri ng the IP address and net work mask to the new option box and then pressing Add . Once the push servers are conf[...]

Clustering push configuration Chapter 15 Po rt Clustering 238 Pushing the configurat ion can be done through Push configuration menu page. If the unit has salve unit or joins peer to peer clustering, you will see the list of clustered units on this p age. Af ter selecting the configuration and unit to be pushed the confi guration, press the push bu[...]

About the Configuration Menu Chapter 16 Configuration Menu Inter fa ce 239 About the Configuration Menu The configuration menu enables authorized users to configure the Digi Passport unit with the same functi onality as is ava ilable with the web interface, except for creating custom menus. Access the Configuration Menu The configuration menu is av[...]

Configure SSH Chapter 16 Configuration Menu Inter fa ce 240 Configure SSH 1. Select Serial Port C onfiguration > port number or 0 (zero) for all ports. 2. Select Host mode configurat ion > Protocol > SSH . 3. Use the ESC key to return to the main configuration menu. 4. Select Exit and apply changes. Add, Edit, and Remove Users 1. Select Sy[...]

Add and Configure a PC Card Chapter 16 Configuration Menu Inter fa ce 241 Add and Configure a PC Card T o add a modem card, compact-flash ca rd, wireless LAN card, or network card to the Digi Passport unit us ing the configurat ion menu, do the following: 1. Access the configuration menu. ( 1 Network Configuration , 5 Peripherals ). 2. Select PC Ca[...]

Host Mode Configuration Chapter 16 Configuration Menu Inter fa ce 242 Host Mode Configuration 1. Access the configuration menu. 2. Select Serial Port Configuration > port number or 0 (zero) for all ports > Host Mode Configuration . 3. Enter the desired parame ters for each menu item. Port Parameters 1. Access the configuration menu. 2. Select[...]

Port Access Menu Chapter 16 Configuration Menu Inter fa ce 243 Port Access Menu Another default menu is t he Port Access M enu, which is av ailable to all users. 1. Access the configuration menu. 2. Select Serial Port Configuration . 3. Select 0 for all ports. 4. Select Port access menu configuration . Access this menu through a T elnet or SSH sess[...]

System Logging Chapter 16 Configuration Menu Inter fa ce 244 System Logging System logging is a two-pa rt process. First, the dev ice being used to record the system logs must be configured. Second, system logging must be configured for the system under System status and log. S ystem logs can be saved to the Digi Pass port unit’s system memory (t[...]

System Logging Chapter 16 Configuration Menu Inter fa ce 245 Configure an NFS or SYSLOG Server 1. Access the configuration menu. 2. Select Network configuration > NFS or SYSLOG server configuration . 3. Disable or ena ble the server . Configure System Logging 1. Access the configuration menu. 2. Select System St atus & log > System loggin[...]

Configure SNMP Chapter 16 Configuration Menu Inter fa ce 246 Configure SNMP T o configure SNMP from the conf iguration menu, do the following: 1. Access the configuration menu. 2. Select Network Configuration > SNMP configuration . 3. Enter the desired paramete rs for the menu items. Configure SMTP T o configure SMTP fr om the configuration menu[...]

Configure Networ k IP Filtering Chapter 16 Configuration Menu Inter fa ce 247 Configure Network IP Filtering The Digi Passport unit offers built-in fi rewall functionality to lim it TCP/IP traffic to and from cert ain networks, TCP ports, and interfaces. The functionality implemented is based on the Linux tool IP tables. The next scenario shows tha[...]

Configure Networ k IP Filtering Chapter 16 Configuration Menu Inter fa ce 248 IP Filtering Settings The IP filtering settings page looks like this. Settings include: • Interface : The name of the network interface through which a packet is received. The name can be one of these values: • eth0 : The default Ethernet interfac e of the Digi Passpo[...]

Configure Networ k IP Filtering Chapter 16 Configuration Menu Inter fa ce 249 • Protocol : The protocol being accept ed on or dropped from the port: •T C P •U D P •I C M P • Port : A TCP/IP port on the Digi Passpor t unit that other hosts try to access. S pecify either one port, using a single value, or a range of ports using this form: p[...]

Configure Networ k IP Filtering Chapter 16 Configuration Menu Inter fa ce 250 IP Filtering Rules This table describes t he IP filtering rules. IP Filtering Rule Description #1 Defines SSH access to the Digi Passp ort unit (port 22). The Normal option specifies that the rule applies to a ll addr esses listed. The rule says to Accept traf fic from th[...]

Configure Networ k IP Filtering Chapter 16 Configuration Menu Inter fa ce 251 Configure Network IP Filterin g from the Configuration Menu T o configure the Digi Pass port unit for Network IP fi ltering, do the following: 1. Access the configuration menu. 2. Select Network configurati on > IP filtering . s 3. Select a menu item and enter t he des[...]

Configure Port IP Filtering Chapter 16 Configuration Menu Inter fa ce 252 Configure Port IP Filtering T o configure the Dig i Passport unit for Port IP filtering, do the following: 1. Access the configuration menu. 2. Select Serial port configuration . 3. Select port number or 0 (zero) for all ports > IP filtering . 4. Select a menu item and ent[...]

Configure and View Sniff Sessions Chapter 16 Configuration Menu Inter fa ce 253 Configure and View Sniff Sessions T o configure a port or all ports for snif f user s, do the following: 1. Access the configuration menu. 2. Select Serial port configuration . 3. Select port number or 0 (zero) for all ports > User access control . 4. Select User Acc[...]

Configure and View Sniff Sessions Chapter 16 Configuration Menu Inter fa ce 254 View a Sniff Session A sniff user enters a snif f session by starting a T elnet session on a specified port. In the following example, a sniff user uses T elnet to connect to port 7 of the Digi Pa ssport unit. From the co mmand prompt enter the following command: telnet[...]

Configure and View Sniff Sessions Chapter 16 Configuration Menu Inter fa ce 255 Escape Sequences for Sniff Sessions Escape Sequence Ctrl+ Action Occurrence m T ake over main session (read/write). P r esented only to users with read/write access upon enterin g a session. s Enter as a slave session (read only). Pr esented only to users with re ad/wri[...]

Authentication Chapter 16 Configuration Menu Inter fa ce 256 Authentication 1. Access the configuration menu. 2. Select Serial port configuration . 3. Select an individual port number or 0 (zero) for all ports > Authentication . 4. Select Authentication type . 5. T o the main menu, use the ESC key . 6. Select Save changes .[...]

Certificate Management Chapter 16 Configuration Menu Inter fa ce 257 Certificate Management Upload a Server Certificate T o upload a server certificate, use either of these methods, • Use the Upload Server Certificate menu. This menu is displayed only when running configmenu on the serial console of the Digi Passport unit. (Running configmenu on [...]

Certificate Management Chapter 16 Configuration Menu Inter fa ce 258 7. Use the configuratio n from this l ocation: /usr/local/ssl/lib/ssleay.cnf 8. Generate a 1024-bit RSA private key . ........++++++ ......................++++++ 9. Write new private key to this location: ./demoCA/private/./cakey.pem' 10. Enter the PEM pass phrase: ; CA Passw[...]

Make a Certificate Request T o make new certific ates, first, make a certificate request. 1. Enter: # cd /work/openssl-0.9.7c/CA 2. Run the following commands. It is a ssumed that the samp le configuration file, openssl.conf.digi , is being used. # openssl genrsa -out key.pem 1024 # openssl req -new -key key.pem -out req .pem 3. Use the configurati[...]

Sign a Certificate Request 1. T o sign a certif icate request, enter the following: # cd /work/openssl-0.9.7c/CA # cp req.pem newreq.pem # sh /usr/local/ssl/misc/CA.sh -sign 2. Use the configuratio n from sample file /usr/share/ssl/openssl.cnf . 3. Enter PEM pass phrase. Enter the CA Password created in "Create/Use a Server Certificate" o[...]

Certificate Management Chapter 16 Configuration Menu Inter fa ce 261 5. V erify that the signed certificate, newcert.pem , is generated. # ls demoCA key.pem newcert.pem newreq.pem re q.pem Make Certificate for the Digi Passport Unit 1. Remove headings in newcert.pem file: # cd /work/openssl-0.9.7c/CA # cp newcert.pem server.pem # vi server.pem Cert[...]

Dial-in Modem Access Chapter 16 Configuration Menu Inter fa ce 262 Dial-in Modem Access Individual serial ports on the Digi Pa ssport unit can be configured for dial-in modem access. T o use di al-in modem mode, an ex ternal modem is first attached to a serial port and then the serial port is configured for dial-in modem access. In the illu stratio[...]

Dial-in Terminal Server Access Chapter 16 Configuration Menu Inter fa ce 263 Dial-in T erminal Server Access Individual serial ports on the Digi Pa ssport unit can be configured for dial-in terminal server access. T o use dial-in terminal serv er access, an external modem is attached to a se rial port on the Digi Passpor t unit, then the serial por[...]

Clustering Chapter 16 Configuration Menu Inter fa ce 264 Clustering By default, clustered slave devices are configured using the T elnet protocol and the following port parameters: • bp s =9600 • dat a bit s =8 • pa ri t y =none • stop bit s =1 • flow control =none When the master device autoconfigures a slave device, it simply imports th[...]

Clustering Chapter 16 Configuration Menu Inter fa ce 265 7. Select the port number to configure or 0 for all ports. 8. Select Enable configuration . 9. Select Auto Configuration . 10. Select Exit and apply changes.[...]

Upgrade Firmware Chapter 16 Configuration Menu Inter fa ce 266 Upgrade Firmware Before upgrading firmware from the conf iguration menu: • Download the firmware to a system on the same subnet. • Set up a terminal emulation program that supports the Zmodem transfer protocol. T o upgrade the firmware wit h the configuration menu: 1. Access the con[...]

Restore Factory Defaults Chapter 16 Configuration Menu Inter fa ce 267 Restore Factory Default s There are two choices to re store the unit to its factory defaults: restoring all factory defaults, or rest oring all factory default s except IP settings. T o restore the Digi Pa ssport unit unit to t he factory defaults: 1. Access the configuration me[...]

Set Date and Time Chapter 16 Configuration Menu Inter fa ce 268 Set Date and Time Date and time on the Digi Pa ssport unit can either be kept internally or by an NTP server . It is easier to set t he date and time from the Digi Passport unit’s W eb interface "Set Date and T ime " on pa ge 298. T o set the date and time from the c onfigu[...]

Access the Boot Loader Program Chapter 16 Configuration Menu Inter fa ce 269 Access the Boot Loader Program The Boot Loader program can be access ed during the boot process. The main functi on of the program is to provide a backup mean s for restoring the firmware if the Digi Pa ssport unit will no longer boot . It also provides a hardware testing [...]

Access the Boot Loader Program Chapter 16 Configuration Menu Inter fa ce 270 Hardware T est Menu The Boot Loader program provides a hardware te st for detecting and testing hardware component s on the Digi Passport unit. From the Boot Loader menu, select the number 3 to access the Hardware test. Options for several components appear . Disaster Reco[...]

Access the Boot Loader Program Chapter 16 Configuration Menu Inter fa ce 271 5. Choose Firmware upgrade by entering 3 . The following screen is displayed. 6. Enter the information fo r the first menu i tems. • Protocol : The choices are BOOTP or TFTP . • IP address assigned : Enter the IP address of the Digi Passport unit. • Server ’ s IP a[...]

Configmenu scripting Chapter 16 Configuration Menu Inter fa ce 272 Configmenu scripting There are scripting capabili ties built into Config menu as a convenience for command-line users who need to configure multiple devices via scripts. Note: Not all sections of Configmenu support the scripting feature (Clustering and Power Controlle r do not suppo[...]

Configmenu scripting Chapter 16 Configuration Menu Inter fa ce 273 For example, you can find the XML pa ths related with IP configuration in file tmp/cnf/sys/network/ip.cnf as follows , T o get the IP address of Ethernet 2 por t(eth1), run the following command: T o set the IP address of Ethernet 2 port(eth1), run t he following command: T o save t[...]

Configmenu scripting Chapter 16 Configuration Menu Inter fa ce 274 The “apply” command can be also run separately after saving all changes Here is an example of addi ng a new remote port wi th a TCP port of 7005: All other settings, such as remote port parameters, must be set to make the remote port work correctly . [root@Digi_Passport ~]# conf[...]

Configmenu scripting Chapter 16 Configuration Menu Inter fa ce 275 Configuration commands can be entered and executed in a script file, as shown below . Each command should be on a separate line and the "save" and "apply" commands should be added at the end of fi le if you want to apply your changes. T o check XML paths and valu[...]

Back Up All Configuration Files Before Using Commands Chapter 17 Co mmand Line Interface 276 Digi Passport runs t he embedded Embedded Linux operating system. The command line interface for configurati on purposes is accessible only by the root user . The system administrato r has read only priv ileges from the command line. By default th e root us[...]

Linux Commands Chapter 17 Co mmand Line Interface 277 Linux Commands This section lists various Linux co mmands available on the Digi Passport unit. This is simply a listing of commands and does not detail what the commands do or give their particul ar p arameters. For more detailed command information, see the man pages on a Linux system. Commands[...]

Dual Network Options Chapter 17 Co mmand Line Interface 278 Dual Network Options Source Based Routing When more than one router is needed, with each ne twork interface using a different router , set up source -based routing on the Passport. The following commands are needed to be run for source based routing on the Passport # /sbin/ip rule add from[...]

Dual Network Options Chapter 17 Co mmand Line Interface 279 Ethernet Bridging Ethernet bridging is commonly used to connect different networks of Ethernets together , so that these Ethernets w ill appear as one Ethernet to the particip ants. Ethernet bridging essentially involves combining an Ethernet interface with one or more physical Et hernet i[...]

Dual Network Options Chapter 17 Co mmand Line Interface 280 Shell and Shell Utilities File and Disk Utilities System Utilities Network Utilities ash bash echo env false grep more pwd sed sh which cat chmod cp dd df du e2fsck find fsck gunzip gzip ln ls mkdir mkdosfs mke2fs mknod mount mv rm rmdir scp sync tail tar touch vi umount zcat date free hal[...]

Important File Locations Chapter 17 Co mmand Line Interface 281 Import ant File Locations The Digi Passport unit has several file s that are important for administrative use. This section lists an d briefly describes some of the files that the root user or system adminis trator may wish to vi ew , monitor , and edit. Default Script The default scri[...]

Important File Locations Chapter 17 Co mmand Line Interface 282 krb5.conf Kerberos configuration file . nsswitch Search order for files and DNS ./pam.d Authorization t able directory passwd Us er p assword file ./ppp PPP info directory resolv .conf DNS info server .pem S tores the priva te keys when using SSH w ith key certification. shadow The sec[...]

User Storage S p ace The Digi Passport unit come s with 16 megabytes of user storage space. This storage space can be used to store custom script s. The location is /usr2 . Custom scripts such as simple commands, are simply dropped into /usr2 . If a file needs to be ed ited, copy the file into usr2/rc.usr , kill the process, then restart the proces[...]

Example Scripts Chapter 17 Co mmand Line Interface 284 Example Script s Save IP t ables op tions permanently Add the following command in the /usr2/rc.user script file just above exit 0 . Disabling T elnet is just shown as one example. 1. Create a new script file /usr2/run.user that includes the desired commands. iptables -A INPUT -p tcp --dport 23[...]

Example Scripts Chapter 17 Co mmand Line Interface 285 Limit root access to the console on Digi Passport product s (for SSH only) Limiting root access to the console prevents root acce ss from any means except physically logging in on the Digi Passport consol e. T o limit root access: 1. Modify file /etc/inet d.conf and append -f /usr2/sshd_config [...]

User Administration Chapter 17 Co mmand Line Interface 286 User Administration Add, edit or delete users with the Digi Passport unit’ s command line interface. Add a user The syntax for adding a user is: adduser [username] -h /tmp [-g groupid] [-s shellprogram] Where: groupid Is an identifier for the th ree types of group s supporte d by the Digi[...]

User Administration Chapter 17 Co mmand Line Interface 287 Locator LED Script The Locator LED on the Digi Passport 48 can be deac tivated and reactivated with the followi ng file and command. /bin/blinkled [{start|stop}] For example, use these commands to stop and start Locator LEDS: root@mankato:~# /bin/blinkled stop root@mankato:~# /bin/blinkled [...]

Upgrade Firmware Chapter 18 System Administration 288 This chapter describes how to perform system adm inistration t a sks for the Digi Passport unit, when logged in as either th e root user or the system administrator . System administrati on tasks include firmware upgrades, saving configurations, resetting the Di gi Passport unit to defaults, and[...]

Configurati on Management Chapter 18 System Administration 289 Configuration Management Configuration management allows saving all or part s of a configuration at a specified interval: either periodically or ten mi nutes after the latest changes. The Digi Passport unit saves all configurations when clicking Save & apply or Apply changes . These[...]

Configurati on Management Chapter 18 System Administration 290 Automatically Save the Configuration Further down the screen ar e the options for autom atically saving the configuration either pe riodically or 10 minutes after the latest changes. Settings for automatic saving include:. • Automatic backup option: Disable : Select if not using an au[...]

Configurati on Management Chapter 18 System Administration 291 Option for auto backup configuration to use an auto file naming scheme The following file namin g schemes are supported for the auto backup configuration • $HOSTNAME$ : Add host name • $TIME$<time format>$ : Add current time. For example, config-$TIME$% m%d%y$.t ar .gz makes c[...]

Automatically Upgrade Firmware or Configuration using T FTP Chapter 18 System Administration 292 Automatically Upgrade Firmware or Configuration using TFTP The Digi Passport unit s upports upgrading the firmwa re, configuration, or any other files in the file system using a TFTP-based me chanism. When booting, the Digi Passport un it can verify a ?[...]

Automatically Upgrade Firmware or Configuration using T FTP Chapter 18 System Administration 293 Structure of the Hash File The hash file is an ASCII configuration file with one line per entry . Each entry defines one upgrade action. The hash file defines several actions: 1. Upgrade firmware 2. Upgrade configuration 3. Upgrade any file 4. Execute a[...]

Automatically Upgrade Firmware or Configuration using T FTP Chapter 18 System Administration 294 Upgrade configuration action The syntax for action 2, co nfiguration upgrade, is: action #,image name , model name , version Where: action # The action number to be performed, which is 2. image name The path and the fi lename of the configurati on file [...]

Automatically Upgrade Firmware or Configuration using T FTP Chapter 18 System Administration 295 Upgrade any file action The syntax for action 3, file upgrade, is: action #,file name , options , destination Where: action # The action number to be performed, which is 3. file name The path and the fil ename of the file on the TFTP server. options Act[...]

Reset the Digi Passport unit to Factory Defaults Chapter 18 System Administration 296 Reset the Digi Passport unit to Factory Default s There are several ways to reset the Digi Passport unit to the factory defaults: using the Factory reset button on the unit, using the web interface, or entering a command through the command-li ne interface. Using [...]

Reset the Digi Passport unit to Factory Defaults Chapter 18 System Administration 297 Using the Web Interface The web interface provides the option of retaining the IP settings. T o use the web interface to re set the Digi Passp ort unit, do the following: 1. Enter the IP address of the Digi Passport unit in the address bar of a web browser to acce[...]

Set Date and Time Chapter 18 System Administration 298 Set Date and Time The Digi Passport unit provides two options for keeping system time. The first is by using an NTP server and the other is th rough an internal battery backup. T o configure th e Digi Passport unit for date and time, do the following: 1. Enter the IP address of the Digi Passpor[...]

Hardware Specifications Chapter 19 S pecifications and Certifications 299 This chapter provides information on Digi Passpor t hardware, including hardware specifications, LED descrip tions, pinouts for Ethernet cable and cable adapter , and rack mounting s pecifications. It also includes certification statements fo r the Digi Pa ssport unit. Hardwa[...]

Hardware Specifications Chapter 19 S pecifications and Certifications 300 Digi Passport 8/16/32/48 Models Attribute Va l u e AC Powered Operating temper ature 0°C to 50°C (41°F to 122°F) S torage temp er ature -30°C to 60°C (-20°F to 140°F) Humidity 10% to 90% no n-condensing Power supply All models except Digi Passport 32 DC Inter nal, 100[...]

LED Indicators Chapter 19 S pecifications and Certifications 301 LED Indicators Use the LED indicato rs to confirm network conn ectivity and that the Digi Passport unit is able to send and receive dat a. Dimensions Digi Passport 8 Le ngth: 17.50 in (44.30 cm) Depth: 1.80 in (4.40 cm) Width: 8.0 in (20.30 cm) Digi Passport 16/32/48 Length: 17.50 in [...]

Serial Port Cabling Chapter 19 S pecifications and Certifications 302 Serial Port Cabling The Digi Passport unit simp lifies cabling. The RJ -45 8-pin c onfiguration matches all SUN and Cisco RJ-45 console port co nfigurations, enabling CA T 5 cabling without pinout c oncerns. Three DB-25 and one DB-9 adapters come in the package. A DB-25 male, a D[...]

Cable Adapters and Pinouts Chapter 19 S pecifications and Certifications 303 Cable Adapters and Pinout s The Digi Passport unit co mes with four cable a dapters. The following illustrations show c able adapter pin outs. A dditional adapters can be purchased from Digi in quantities of 8. DB-25 Male Console Adapter (Digi 8-pack re order P/N 76000672)[...]

Cable Adapters and Pinouts Chapter 19 S pecifications and Certifications 304 DB-9 Female Console Adapter (Digi 8-pack re order P/N 76000671) DB-9 Female to RJ-45 Pin Assignment s Pin #5 Pin #1 Pin #6 Pin #1 Pin #8 RJ-45 Signal DB-9F Signal 1 CTS Connected to 7 RTS 2 DSR Connected to 4 DTR 5D C D 3 RxD Connected to 3 TxD 4 GND Connecte d to 5 GND 6 [...]

Cable Adapters and Pinouts Chapter 19 S pecifications and Certifications 305 DB-25 Female Console Adapter (Digi 8-pack re order P/N 76000673) DB-25 Female to RJ-45 Pin Assignment s Pin#13 Pin #1 Pin#25 RJ-45 Signal DB-25M Signal 1 CTS Connected to 4 RTS 2 DSR Co nnected to 20 DTR 5D C D 3 RxD Connected to 2 TxD 4 GND Connected to 7 GND 6 TxD Co nne[...]

Cable Adapters and Pinouts Chapter 19 S pecifications and Certifications 306 DB-25 Male Modem Adapter (D igi 8-pack reorder P/N 76000670) DB-25 Male Modem to RJ-45 Pin Assignment Pin #1 Pin #13 Pin #25 RJ-45 Signal DB-25M Signal 1 C T S Connected to 5 C T S 2 D SR Connected to 6 DSR 3 R xD Connected to 3 RxD 4 G ND Connected to 7 GND 5 D CD Connect[...]

Cable Adapters and Pinouts Chapter 19 S pecifications and Certifications 307 DB-9 Male Modem Adapter (D igi 8-pack reorder P/N 76000702) (Available but not included DB-9 Male Modem to RJ-45 Pin Assignment Pin #1 Pin #8 Pin #5 Pin #1 Pin #6 RJ-45 Signal DB-9M Signal 1 CTS Connected to 8 CTS 2 DSR Connected to 6 DSR 3 RxD Connected to 2 RxD 4 GND Con[...]

Ethernet Pinouts Chapter 19 S pecifications and Certifications 308 Ethernet Pinout s The Digi Passport unit uses a standa rd Ethernet connector , that is a shielded and compliant with A T&T 258 specifications. Pin Description 1T x + 2T x - 3R x + 4N C 5N C 6R x - 7N C 8N C[...]

Rack Mounting Chapter 19 S pecifications and Certifications 309 Rack Mounting Rack Mounting Inst allation 1. Attach enclosed bracket ears to rack as shown in illustration. 2. Follow safety and installation cons iderations when pl acing the Digi Passport unit on the rack. Rack Mounting Safe ty and Inst allation Considerations • Physical location a[...]

Rack Mounting Chapter 19 S pecifications and Certifications 310 • Power and wiring : • This equipment is for indoor use and all the communication wirings are limited to inside of the building. • Locate the DC supply source within the sa me premises as the equipment. • Check equipment nameplate ratings before connecting to the supply circuit[...]

Lithium Battery Replacement Chapter 19 S pecifications and Certifications 311 Lithium Battery Replacement A 3 V olt CR2032 battery ma intains date and time in formation in the Digi Passport unit. If resetti ng the time and date informat ion af ter turning on the Digi Passport unit is necessa ry , replace the battery . Replace the battery with the s[...]

Certifications Chapter 19 S pecifications and Certifications 312 Certifications Safety Certifications • US: UL1950 • Canada: CSA 22.2 No. 60950 • Europe: EN60950 (CB Scheme Report) Working Ins ide the Digi Passport Unit NOTICE : Do not attempt to service the Digi Pa ssport unit yourself, except when following the instructions from T echnical [...]

Certifications Chapter 19 S pecifications and Certifications 313 Environment al Considerations and Cautions T o ensure safe and efficient operation of the Digi Passport unit, follow these guidelines: • Do not position the Digi Passpor t unit near high -powered radio transmitters or electrical equipment, such as electrical motors or air conditione[...]

Certifications Chapter 19 S pecifications and Certifications 314 Emissions Certifications • US: FCC part 15, Class A • Canada: ICES 003 Class A • Europe: EN55022 • Japan: VCCI • Australia: AS3548 Immunity Certifications Europe: EN55024:1998 EN61000-3-2: 2000 EN61000-3-3: 1998 Solaris Ready Certification All Digi Passport products are Sola[...]