Belkin F1DP116SEA manuale d’uso

OmniView ® Serial Consol e Server User Manual F1DP116Sea[...]

T abl e of Contents Product Ov erview....................................................................................................................1 Introduction ...................................................................................................................... 1 Package Contents ............................................[...]

T abl e of Contents System Status and Log .........................................................................................................37 System Status ................................................................................................................ 37 System Logging .......................................................[...]

[...]

1 section Product Ov erview Introduction Thank you for purchasing the Belkin OmniView Serial Console Server (Console Server). This device provides administrators secure monitoring and control of servers, routers, switches, and other serial devices from anywhere on the corporate TCP/IP network, over the Internet, or through dial-up modem connections[...]

2 Product Ov erview Console Server F eatures • In-bandandout-of-bandmanagement Console port management solutions offer remote, reliable, and secure access to serial- console ports through in-band networks and out-of-band connectivity options, such as serial terminal access and dial-up modem. • Managenetworkdevices/servers?[...]

3 section Product Ov erview Equipment Requirements • UniversalConnectivityKit(included) • RJ45-RJ45CAT5Cable(included) System Requir ements Web browser Java Plug-In The Console Server’s web interface requires installing JRE (Java Runtime Environment) v6.0 and above. You can get the latest Java software from the website[...]

4 Product Ov erview Unit Display Diagrams Front/RearPanel Fig. 1 Front View Fig.2RearView ReadyLED PowerLED LinkLED Resetbut- ton IECpower LANport Localconsoleport PortLEDs Deviceports[...]

5 section Product Ov erview LED Indicators, Button, and Connectors •  RESET button: Quickly press and release the button to reboot the Console Server. Press and hold the “Reset” button for more than five seconds to set the unit to its default configuration settings. • ETHERNET RJ45 connector: Ethernet interface • CONSO[...]

6 Product Ov erview Specifications Note: Specifications are subject to change without notice. Feature Specification General LEDs Power (red) Ready (green, normally blinking), Link/Act/10/100Mbps (Ethernet orange: 10Mbps, green: 100Mbps) Activity (blue for each serial port) Push button for reset, or restore to default RTC (real-time clock) [...]

7 section Local Installation WheretoplacetheConsoleServer: The enclosure of the Console Server is designed for stand-alone or rack-mount configuration. The Console Server can be mounted to a standard 19-inch server rack using the included rack-mount brackets and screws. Considerthefollowingwhendecidingwheretopla[...]

8 Local Installation Desktop or Rack-Mounting The Console Server can be placed on desktops or rack-mounted on 19-inch/1U racks. Note: Before you begin, locate the MAC address and serial number on the back of the Console Server. You may need these numbers later in the installation process, so it is highly recommended that you record these numbers be[...]

9 section Local Installation Connecting the T arget De vices to the Console Server 1. Power down the target device(s) that will be connected to your Console Server. 2. Connect the Ethernet cable to the port labeled LAN. 3. Locate the included power cord and plug the appropriate end into the power socket on the rear of the Console Server. Plug the o[...]

10 Network Configuration Before you can connect to a target device, you will need to configure the network settings. The Console Server offers two methods of setting the network: via web-browser interface or through the local console port. The Console Server offers support for both Dynamic Host Configuration Protocol (DHCP) and static IP address[...]

11 section Network Configuration Note:HTTPScanbeusedforcommunicationoveranencryptedsecuresocketlayer (SSL). When first connecting to the Console Server’s HTTPS configuration page, two browser security warnings may appear. Click “Yes” on both warnings. LoginPage Type in the following default user[...]

12 Network Configuration Click . The web interface will open at the “Connect” page (see below). Main-ConnectPage Step3NetworkConguration Click on “Network” to open the Network-Configuration page (see below). Network-CongurationPage Here you can assign a static IP and other network settings. Click on “Save & Rebo[...]

13 section Network Configuration Assigning IP fr om the Console Port—VT-100 (Console, T elnet, SSH) The Console Server also offers a user-friendly, menu-driven command-line interface. You can simply connect a VT-100 terminal to the local console port to access the Console Server. This is useful when you do not know the network settings of the Co[...]

14 Network Configuration The following figure depicts the structure of the interface. TheMenuLayout Tier2menu Tier1menu Productname Software version Congurationinput Navigationinput Tier3menu[...]

15 section Network Configuration Network>IPCong The page to the left shows the IP configuration items. 1. For IPmode — You can press the SPACE bar to select Static mode or DHCP mode. 2. For IPAddress,SubnetMask,DefaultGateway,PrimaryDNS,andSecondary DNS — You can change these network setti[...]

16 Network Configuration Note: Only the admin user has the privilege to log in to VT-100. All the other users are not authorized to make configuration with VT-100. W eb-Browser Management Interfac e The Console Server supports both HTTP and HTTPS (HTTP over SSL) protocols. Users must authenticate themselves by logging in to the system with a corr[...]

17 section Network Configuration Where available, the page will allow users to apply or cancel their actions. To apply all changes, select “Apply” and the new values will be applied to the configuration. If you do not want to save the new values, simply click “Cancel” and all changes made will be removed and the previous values restored.[...]

18 Network Settings You can configure the network IP settings via VT-100 or web interface. This section describes configuration through the web interface. IP Configuration The Console Server requires a valid IP address to operate within the user’s network environment. If the IP address is not readily available, contact the system administrator[...]

19 section Network Settings IP Filtering The IP filtering function keeps unauthorized hosts from accessing the Console Server by specifying rules. The IP address/mask specifies the host range by entering the base host IP address followed by “/” and the subnet mask (“/” is a required separator between the IP address and the subnet mask). T[...]

20 Network Settings When the Console Server receives a TCP packet, it will process the packet with the chain rule depicted below. The process order is important—the packet will enter the chain rule 1 first. If it meets the rule, then it will take action; otherwise, it will go on to chain rule 2. Fig.4ChainRuleofIPFilter You [...]

21 section Network Settings After these rules are applied, only the hosts that belong to the subnet 192.168.2.x can access the Console Server (through http port 80). In addition to the IP filter chain rule mentioned above, the web interface also provides a convenient way to enable/disable telnet (port 23) or the web-configuration port (port 80/44[...]

22 Network Settings Dynamic DNS If a user connects the Console Server to a DSL line or uses a DHCP configuration to get a dynamic IP address from the network, the IP address might change. This can make it difficult to know if an IP address has changed, or what the new IP address is. Fig.5DynamicDNS The Dynamic DNS service is provided [...]

23 section Network Settings RADIUS Authentication is the process of identifying an individual, usually based on a user name and password. The Console Server supports various authentication options, such as “Local” and “RADIUS”, to authenticate the users who access the serial port. When the authentication is set to “Local”, the unit will[...]

24 Network Settings RADIUS-Server Configuration HTTPS/SSL The Console Server supports both HTTP and HTTPS (HTTP over SSL) services simultaneously. You can enable or disable security function of each port individually. HTTPS provides a secure, encrypted web interface over SSL (secure sockets layer). The following steps should be used for HTTPS prot[...]

25 section Serial Ports Configuration Under the “Serial” menu heading, click “Configuration” to show the port summary list. Note that if the “Serial Port” is disabled, the “Serial port configuration” panel will display the port in a dark gray font. An enabled serial port will be displayed in a white bold font. PortAuthenticati[...]

26 Serial Ports PortEnable/Disable Each serial port can be individually enabled or disabled. A disabled serial port cannot be accessed by a user. Users can reset the serial port to default settings by clicking the “Set to default” button. Port Title Users can enter descriptive information for each port based on the device attached to it. We [...]

27 section Serial Ports OperationModes The Console Server unit provides four types of operation modes. These are described below. Console-ServerMode Configuring a serial port as a console server creates a TCP socket on the unit that listens to a telnet or SSH client connection. When you connect to the TCP socket, you have access to the devic[...]

28 Serial Ports The following parameters are configurable in console-server mode: ListeningTCPPortNumber You can also access a serial port through the IP address of the Console Server and the listening TCP port number of the serial port. If the IP address of the Console Server and the serial port are assigned as 192.168.123.100 and the li[...]

29 section Serial Ports In order to terminate a telnet/SSH/RawTCP session in terminal-server mode, you may use these three control-key sequences (Ctrl-Z / Ctrl-X / Ctrl-C). Dial-inModemMode In this mode, the Console Server assumes an external modem is attached to the serial port and waits for a dial-in connection from a remote site. When a us[...]

30 Serial Ports PortLogging While in console-server mode, the data received from the tracking serial port will be buffered in the unit’s memory. The “Port logging” feature is valid and visible only if the operation mode of the serial port is configured to console-server mode. If the “Port logging” option is enabled, the user can let t[...]

31 section Serial Ports Click “Port event handling”. The memory buffer size for logging data is 192K per port. If the log data grows larger than the memory size, the new data will overwrite the old data. BreakFunction In console-server mode, the Console Server is capable of sending a “break” signal to a connected serial device. A break i[...]

32 Serial Ports Use the hyperlink located at the bottom of the Connect Page to test your Java compatibility. Or use the link below to download the latest Java version. Make sure that you enable your browser’s Java support option and also check your Java Runtime Environment version (known as JRE version). You will need version 1.6.0 or above if yo[...]

33 section Serial Ports 2. Enter the user name and password to log in, so you can start to use it as if you were running a telnet client program (e.g., Telnet DOS program, PuTTY). Note: The active serial port’s name will appear on the window bar. A connection-status indicator will also appear on the lower-right side of the window.[...]

34 Serial Ports Serial-to-Serial Function The serial-to-serial function allows you to use a simple terminal device (video display and keyboard) to access and control any device connected to the Console Server on ports 1 through 15. You may also use an external terminal converter, like the Belkin F1D084Eea, to connect your Console Server to a KVM sw[...]

35 section Serial Ports 5. Choose the port number to which you wish to connect and the screen below will appear. 6. Type in the user name and password. The data-channel connection between port 16 and the selected serial port will be built, so the administrator can control the serial device or server. 7. Press the “Cntl” and “C” keys to get [...]

36 Serial Ports The web page also gives read-only settings of the serial-to-serial function; it will automatically change according to the setting change on the VT-100 console. Click “Cancel” to refresh the values.[...]

37 section System Status and Log System Status The “System Status” page lists current system information such as name, serial number, firmware versions, MAC address, current time, and the network settings. Data cannot be changed from this page. This page refreshes automatically every 10 seconds.[...]

38 System Status and Log System Logging You may enable or disable the system-logging process and set the log buffer size. The system log buffer’s default value is 50K bytes and can be allocated to up to 300KB maximum. If the logged data grows larger than the pre-allocated buffer size, the new data will overwrite the old data. The following system[...]

39 section System Administr ation User Administration At start-up, the system will prompt the user to enter the password to access the system. The administrator can add or remove a user easily via the web pages. There are two levels of access privileges: An “Access Deny” page will display if the user is not authorized to access the web page. Ad[...]

40 System Administr ation The figure below shows the “Add User” screen. The new user will now appear under the “User Name” list. RemoveUser To remove a user: • Checktheusersonthe“Useradministration”screen. • Clickthe“Remove”button[...]

41 section System Administr ation EdittheAccessControllist(ACL) The Console Server provides ACL (Access Control List) security where you can specify user access discretely by individual ports only, instead of all ports. To edit the ACL: • Checktheusersonthe“Useradministration”screen. • Clickthe?[...]

42 System Administr ation Change Password To change the parameters of the user account, open the “Edit user” screen by selecting the user name on the “User Configuration” screen and then edit the parameters of the user account such as adding a user. Date and Time (NTP) The Console Server maintains current date and time information. The clo[...]

43 section System Administr ation Firmware Upgr ade Firmware can be easily upgraded via a web page. This section describes the upgrade procedures. The latest firmware version is available from www.belkin.com/support. UpgradefromtheWebInterface Refer to web page “System > Firmware Upgrade”. Click “Browse” to search the firmw[...]

44 System Administr ation Warning!!!DONOT disconnect the power or the Ethernet cable during this upgrading process. Doing so may cause upgrade failure and destroy the image in memory. The Console Server will automatically initiate a self-reboot upon completion of the upgrade process to activate the new firmware. Once the counter expires, the[...]

45 section System Administr ation Once all certificate files are uploaded, users shall initiate a reboot command manually to make the new certificate effective. Browse prepared CA files (follow the procedure in Appendix E to prepare correctly the three CA files with the same assigned file names), and upload these files to the Console Server.[...]

46 System Administr ation[...]

47 section System Administr ation The other way to tell a secure web connection from an unsafe one is by looking for a lock symbol on your browser (bottom-right corner of Internet Explorer browser). You can double- click on the symbol to examine the detailed information of the server-side certificate. Once you have prepared a publicly signed CA su[...]

48 System Administr ation[...]

49 section System Administr ation Reset to F actory-Default Settings To roll back to factory-default settings, click on “Apply”. Reboot You can trigger the Console Server to perform a software reboot via the network. The reboot function is mandatory when the CA-certificate upload is complete.[...]

50 T echnical Data 50 Default Settings ServerName DHCP IPAddress NetMask Gateway BelkinSC Enabled 192.168.2.156 255.255.255.0 192.168.2.1 SerialNumber MACAddress xxxxxxxxx (printed on bottom of unit) xx:xx:xx:xx (printed on bottom of unit) Version and Date Current firmware version number and date UserName Password admin admin Pro[...]

51 51 Appendix A: Adapters F1D120ea (RJ45F–DB9F DTE) DB9FemaleDTEAdapter  Applications: Bay Accelar, Nortel, etc. Part No: F1D120ea - Single Pack F1D120ea8PK - 8 Pack F1D121ea (RJ45F–DB25F DTE) DB25FemaleDTEAdapter  Applications: DTE devices such as PC Part No: F1D121ea - Single Pack Adapter Signal RJ45 DB9F DSR 1 [...]

52 Appendix A: Adapters F1D122ea (RJ45F–DB25M DCE) DB25MaleDCEAdapter  Applications: Modems Part No: F1D122ea - Single Pack F1D123ea (RJ45F–DB25M DTE) DB25MaleDTEAdapter  Applications: Sun SPARC, etc. Part No: F1D123ea - Single Pack Adapter Signal RJ45 DB25M DSR 1 6 RTS 2 4 GND 3 5 TxD 4 2 RxD 5 3 DCD 6 1 CTS 7 5 D[...]

53 Appendix A: Adapters F1D124ea (RJ45F–RJ45M CISC O) RJ45MaleAdapter  Applications: Sun devices Part No: F1D124ea - Single Pack F1D124ea8PK - 8 Pack Adapter Signal RJ45 RJ45M DSR 1 2 RTS 2 8 GND 3 4 5 TxD 4 6 RxD 5 3 CTS 7 1 DTR 8 7[...]

54 54 54 Appendix B: Ethernet Pin-Outs (RJ45) Standard Ethernet Cabl e RJ45 Pin-Out Pin Description 1 Tx+ 2 Tx- 3 Rx+ 4 NC 5 NC 6 Rx- 7 NC 8 NC[...]

55 55 55 Appendix C: W ell-Known TCP/UDP Port Number s Port numbers are divided into three ranges: Well-Known Ports, Registered Ports, and Dynamic and/or Private Ports. Well-Known Ports are those from 0 through 1023. Registered Ports are those from 1024 through 49151. Dynamic and/or Private Ports are those from 49152 through 65535. Well-Known Ports[...]

56 56 Appendix D: Prot ocol Glossary BOOTP(BootstrapProtocol) Similar to DHCP, but for smaller networks. Automatically assigns the IP address for a specific duration of time. CHAP(ChallengeHandshakeAuthenticationProtocol) A secure protocol for connecting to a system; it is more secure than the PAP. DHCP(DynamicHostCon[...]

57 57 Appendix D: Prot ocol Glossary NTP(NetworkTimeProtocol) A protocol used to synchronize time on networked computers and equipment. PAP(PasswordAuthenticationProtocol) A method of user authentication in which the user name and password are transmitted over a network and compared to a table of name-password pairs. PPP(Point-[...]

58 58 58 Appendix E: Creating C A Files The Console Server supports secure web-page configuration (aka https). There are two types of certificate files for server-side authentication. •  Self-signed:Userscancreatethecerticatelesbythemselves.Thedownsideis that the client will be prompted to accept[...]

59 59 59 Appendix E: Creating C A Files ii) Strip passphrase: openssl rsa -in cakey.pem -out cakey-nopassword.pem iii) Combine the key and X.509 certificate files into server.pem: cat cakey-nopassword.pem cacert.pem > server.pem iv) Collect all 3 PEM files and prepare to upload to IPCS server: server.pem,cacert.pem,cakey.pem 2. Si[...]

60 Information FC C Statement DECLARATIONOFCONFORMITYWITHFCCRULESFOR ELECTROMAGNETICCOMPATIBILITY We, Belkin International, Inc., of 501 West Walnut Street, Compton CA 90220, declare under our sole responsibility that the product: F1DP116S, to which this declaration relates: Complies with Part 15 of the FCC Rules. Operation is [...]

61 Information Whatwillwedotocorrectproblems? Product Warranty. Belkin will repair or replace, at its option, any defective product free of charge (except for shipping charges for the product). Whatisnotcoveredbythiswarranty? All above warranties are null and void if the Belkin product is not provided to Belki[...]

62 Information Howstatelawrelatestothewarranty. THIS WARRANTY CONTAINS THE SOLE WARRANTY OF BELKIN. THERE ARE NO OTHER WARRANTIES, EXPRESSED OR, EXCEPT AS REQUIRED BY LAW, IMPLIED, INCLUDING THE IMPLIED WARRANTY OR CONDITION OF QUALITY, MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE, AND SUCH IMPLIED WARRANTIES, IF ANY, ARE L[...]

63[...]

© 2008 Belkin International, Inc. All rights reserved. All trade names are registered trademarks of respective manufacturers listed. Windows is either a registered trademark or trademark of Microsoft Corporation in the United States and/or other countries. P75598ea OmniView ® Serial Consol e Server Free T ech Support * You can find additional sup[...]