Sentry Industries PT22 manual

Server Technology Solutions for the Data Center Equipment Cabinet Sentry Remote Power Manager - PT22 Installation and Operations Manual © 2005 Server Technology , Inc. All rig hts reserved[...]

Instructions This symbol is intended to alert the user to th e presence of important operating and maintenance (servicing) instructions in the literature accomp anying the appliance. Dangerous Voltage This symbol is intended to alert the user to the presence of un-insulated dangerous voltage within the product’s enclosure that may be of sufficien[...]

Table of Contents C HAPTER 1: I NTRODUCT ION 4 Quick Start Guide ............................................................................................................................. 4 Technical Support ............................................................................................................................4 Equipment Ove[...]

Chapter 1: Introduction Quick Start Guide The following instructions will help you quickly install and configure your PT22 for use in your data center equipment cabinet. For detailed information on each step, go to the page number listed to the right. 1. Mount th e PT22................................................................................[...]

Equipment Overview 1. The power inlet/cord(s) connects the CDU to the electrical power source. 2. Two RJ45 connectors for Serial (RS-232) and Ethernet connection. 3. Two mini RJ11 connectors for Temperature/Humidity sensors. A number is printed above each PT22 outlet. These numbers may be used in commands that require an outlet name. 3 2 1 1 1 1 Fi[...]

Chapter 2: Installation Before installing your Sentry PT22, refer to the following lists to ensure that you have all the items shipped with the unit as well as all other items required for proper installation. Standard Accessories • Mounting bracket hardware: two mounting brackets and four screws • RJ45 to RJ45 crossover cable • RJ45 to DB9F [...]

Mounting 1. Select the appropriate bracket mounting points for proper mounting depth within the rack. 2. Attach the brackets to these mounting points with two screws for each bracket. 3. Install the enclosure into your rack, using the slots in each bracket. The slots allow about ¼ inch of horizontal adaptability to align with the mounting holes of[...]

Connecting to the Unit Serial (RS232) port The PT22 is equipped with an RJ45 Serial RS-232 port for attachment to a PC or networked terminal server using the supplied RJ45 to RJ45 crossov er cable and RJ45 to DB9F serial port adapter as required. See Power Ratings in Appendix C: Technical Specifications for more information on the Serial RS-232 por[...]

Chapter 3: Operations I NTERFACES 10 Outlet Nam ing and Grouping 10 Usernames and Passwords 10 HTML I NTERFACE 11 Logging I n 11 Outlet Control 12 Individual ..............................................................................................................................1 2 Group ........................................................[...]

Interfaces The PT22 has two interfaces: the HTML interface accessed via the HTTP enabled Ethernet connections and the command line for serial and Telnet connections. Outlet Naming and Grouping For commands requiring an outlet name, you may specify it in one of two ways: a predefined absolute name or a descriptive name assigned by an administrator. [...]

HTML Interface The HTML interface is constructed of three major components: the Syste m Location bar, the User/Navigation bar and the Control Screen. The System Location bar displays the Sentry’s location and IP address as well as the current Control Screen title. The User/Navigation bar displays the current user and privilege level and provides [...]

Outlet Control The Outlet Control section offers access to the Individual and Group outlet co ntrol pages. From the Individual and Group pages, the user can review and manipulate power control functions for all outlets and groups assigned to the current user. Both pages include the outlets absolute and descriptive na mes, the Outlet Status reported[...]

Environmental Monitoring Input Load The Input Load page displays the tower(s) absolute and descriptive name and the cumulative input load in amperes of all devices attached to the Sentry at the time the page was loaded. This page will refresh automatically every 10 seconds. Sensors The Sensors page displays: • Temperature/humidity sensor’s abso[...]

Network The Network configuration page is used for maintena nce of the network interface. From this page an administrator may configure the IP address, subnet mask, gateway address, DNS addresse s as well as view the link status, speed and duplex value. The Sentry is configured with the following networ k defaults to allow unit configuration out-of[...]

Setting SSL access level Sentry SSL supports configuration of SSL connections as being either optional or required. The default access level is set to optional. • Optional –Both non-secure (HTTP) and SSL encryp ted connections (HTTPS) are allowed access. • Required – ONLY SSL encrypted connections (HTTPS) are allowed access. Select Optional[...]

Editing modem initialization strings: Click on the Edit link in the Modem port Action column. On the subsequent Serial Port Edit page, enter the initialization string in the appropriate field and press Apply . The Init1 and Init2 strings may be up to 48 characters. The Attention and Hang-up strings may be up to 16 characters. Predefined Modem Initi[...]

Adding and Deleting outlets fr om a group: Press the Edit link in the Action column for the associated group. On the subsequent Group Edit page, select or deselect outlets to be included in that group. Press Apply . Users The Users configuration page is used for creation a nd removal of usernames, assignment of accessible outlets and group, assignm[...]

Adding and Deleting serial port acc ess: Click on the Ports link in the Access column for the associated user. On the subsequent User Ports page, select or deselect port s to be accessed by the user and press Apply . FTP The FTP configuration page is used for setup and ma intenance of all settings required to perform an FTP firmware upload. See App[...]

Configuring input feed traps: Click on the Input Feed Traps link. On the subsequent Input Feed Traps page, select or deselect the desired trap s and press Apply . For Load traps, enter a maximum load value for the infeed in the High Load Threshold field and press Apply . The High Load Threshold value may be 0 to 255 (in amperes). Configuring outlet[...]

Configuring the authenti cation order: Select Remote -> Local or Remote Only from the drop-down menu and press Apply . For more information on remote authentication order, see Setting the authentication order on page 57 . NOTE: Server Technology reco mmends NOT setting the authen tication order to Remote Only until the LDAP has been fully config[...]

Configuring the authenti cation order: Select Remote -> Local or Remote Only from the drop-down menu and press Apply . For more information on remote authentication order, see Setting the authentication order on page 64 . NOTE: Server Technology reco mmends NOT setting the authen tication order to Remote Only until the LDAP has been fully config[...]

Command Line Interface Logging In Logging in through Telnet requires directing the Telnet client to the configured IP address of the unit. Logging in through the Console (RS232) port requires the use of a terminal or terminal emulation software configured to support ANSI or VT100 and a supported data rate (300, 1200, 2400, 4800, 9600, 19200, 38400,[...]

Administrative Command Summary (continu ed) Delete Portfromuser Removes acce ss to one or all serial ports List User Displays all accessibl e outlets/groups/ports for a user List Users Displays priv ilege levels for all users Remove Group Deletes a group name Remove User Deletes a user account Restart Performs a warm boot Set DNS Sets the IP addres[...]

Operations Commands Operations commands manage outlet states, provide infor mation about the Sentry environment and control session operations. Turning outlets on The On command turns on one or more outlets. When the command completes, a display indicating all outlets affected and their current states will be displayed. To turn outlets on: At the S[...]

Displaying outlet status The Status command displays the on/off status of one or more outlets. The command displays the status of only those outlets for which the current username has power control access. This display includes the outlet absolute and descriptive na mes, the Outlet State reported to the Sentry by the outlet and the current Control [...]

Displaying accessible outlets The List Outlets command displays accessible outlets for the current user. The display includes the absolute and descriptive name of all outlets assigned to the current user. To display accessibl e outlets: At the Sentry: prompt, type list outlets and press Enter . Example The follow command displays all accessible out[...]

Displaying infeed status The Istat or Iload command displays the status of one or more infeed. This display includes the infeed absolute and descriptive na mes and the Input Status and current Load reported to the Sentry by the infeed. To display st atus of one or more infeeds: Type istat and press Enter , or Type iload and press Enter . Examples T[...]

Ending a session The Quit or Logout commands ends a session. A session ends automatically when no activity is detected for five minutes, or upon loss of connection. To end a session: At the Sentry: prompt, type quit and press Enter , or Type logout and press Enter . Administration Commands Administration commands may only be issued by a user with a[...]

Examples The following command changes the password for the user JohnDoe: Sentry: set user password johndoe<Enter> Password: <Enter> Verify Password: <Enter> Setting user access lev el privileges The Set User Access command sets the access level priv ileges for a user. The Sentry has four defined access privilege levels; Admin, Us[...]

Adding outlet access to a user The Add OutletToUser command grants a user access to one or all outlets. To grant access for more than one outlet, but not all outlets, you must use multiple Add OutletToUser commands. To grant outlet access to a us er: At the Sentry: prompt, type add outlettouser , optionally followed by an outlet name and a username[...]

Deleting serial port acces s for a user The Delete PortFromUser command removes a user’s access to a serial port. You cannot remove access to any serial port for an administrative level user. To delete serial port access for a user: At the Sentry: prompt, type delete portfromuser , optionally followed by a Port name and a username. Press Enter . [...]

Creating a descriptive outlet nam e The Set Outlet Name command assigns a desc riptive name to an outlet. You may use this name in commands that require an outlet name as an alternative to using the outlet’s absolute name. To create an outlet name: At the Sentry: prompt, type set outlet name , fo llowed by the absolute outlet name and a descripti[...]

Displaying outlet information The Show Outlets command displays infor mation about all outlets. This information includes: • Sequencing and reboot timer values • Descriptive outlet name, if applicable • Outlet wakeup state setting To display outlet info rmation: At the Sentry: prompt, type show outlets and press Enter . Example The following [...]

The following commands usese the outlets’ descriptive names to add outlets DataServer_1 an d WebServer_1 to group name ServerGroup_1: Sentry:add OutletToGroup DataServer_1 ServerGroup_1<Enter> Sentry:add OutletToGroup WebServer_1 ServerGroup_1<Enter> The following command add all outlets to group name ServerGroup_1: Sentry: add Outlet[...]

Setting the serial ports data-ra te The Set Port Speed command sets the defa ult data-rate for the serial port. Valid data-rates are 1200, 2400, 4800, 9600, 19200, 38400, 57600 and 115200. To set the serial port data-rate: At the Sentry: prompt, type set port speed , follow by the data-rate and press Enter . Example The following command sets the s[...]

Editing modem initialization strings The predefined modem initialization strings may be edited by an administrative user. The Init 1 and Init 2 strings may be up to 48 characters each and the Attention and Hang-up string s may be up to 16 characters. For more information on the predefined initialization strings, see Enabling or disabling modem init[...]

System Administration Creating a location description The Set Location command specifies text that a ppear s in the HTML control screen’s Location field. The text is also appended to a Welcome to banner that appears when a user succe ssfully logs in serially or through a Telnet session. If you do not issue this command, or if you issue this comma[...]

Displaying tower information The Show Towers command displays information about the Sentry. This infor mation includes the absolute and descriptive Sentry names. To display tower information: At the Sentry: prompt, type show towers and press Enter . Example Sentry: show towers<Enter> Tower Tower ID Name .A Florida_HQ_1 Creating a descriptive [...]

TCP/IP Administration NOTE: A restart of the Sentry is required after setting or changing ANY T CP/IP configurations. See Performing a warm boot on page 38 for more inform ation. Setting the IP address The Set Ipaddress command sets the TCP/IP address of the network interface controller. To set the IP address: At the Sentry: prompt, type set ipaddr[...]

Displaying network configuration information The Show Network command displays TCP/IP, Telnet, SSH, Web, SSL and SNMP configuration infor mation. • IP address, subnet mask, gateway and DNS IP addresses • Enabled-disabled status and port numbers for Telnet, SSH, HTTP,SSL and SNMP support • HTTP authentication method and SSL access setting • [...]

Telnet Administration NOTE: A restart o f the Sentry is required af ter setting or changing ANY Telnet/Web configurations. See Performing a warm boot on page 38 for m ore information. Enabling and disabling Telnet support The Set Telnet command is used to enable or disable Telnet support. To enable or disable Telnet support: At the Sentry: prompt, [...]

Setting the filename to be uploaded The FTP Filename command sets the filename of the fir mware file to be uploaded. To set the FTP filename: At the Sentry: prompt, type set ftp filename , followed by the firmware filename and press Enter . Example The following command sets the FTP filename to snb_s50a.bin: Sentry: set ftp filename snb_s50a.bin<[...]

Displaying SNTP configuration infor mation The Show SNTP command displays all SNTP configuration information. To display SNTP configuration information At the Sentry: prompt, type show sntp and press Enter . Example The following command displays the SNTP configuration information: Sentry: show sntp <Enter> SNTP Date/Time (GMT): 2003-02-21 21[...]

[...]

Chapter 4: Advanced Operations SSL 46 Enabling and Se tting up SSL Supp ort 46 SSL Technical Specifications 46 SSH 47 Enabling and S etting up SSH Su pport 47 SSH Technical Specifications 47 SNMP 48 MIB, OID a nd Support 48 Enabling and Setting up SNMP Support 48 SNMP Traps 50 Configuring Traps 51 LDAP 54 Enabling and Setting up LDAP Support 55 Con[...]

SSL Secure Socket Layers (SSL) version 3 enables secure HTML session s between a Sentry Remote Power Manager and a remote user. SSL provides two chie f features designed to make TCP/IP (Internet) transmitted data more secure: • Authentication – The connecting client is assured of the identity of the server. • Encryption – All data transmitt[...]

SSH Secure Shell (SSH) version 2 enables secure netw ork terminal sessions between a Sentry Remote Power Manager and a remote user over insecure networ k. SSH provides an encrypted terminal sessions with strong authentication of both the server and client, using public-key cry ptography and is typically used as a replacement for unencrypted Telnet.[...]

SNMP The Sentry family of products supports the Simple Network Management Protocol (SNMP). This allows network management systems to use SN MP requests to retrieve information and control power for the individual outlets. The Sentry includes an SNMP v2c agent supporting standard MIB I and MIB II objects. A private enterprise MIB extension (Sentry 3[...]

Setting the trap timer The Set Traptime command sets the timer period between repeated error-condition traps. The valid range for the timer period is 1 to 65535 (in seconds). The default value for the timer period is 60 seconds. To set the trap timer: At the Sentry: prompt, type set traptime , followed by the tim er period and press Enter . Example[...]

SNMP Traps The Sentry supports three types of SNMP traps. Trap s are enabled at the tower (T), infeed (I) or outlet (O) level. Trap Summary Name Level(s) Description Status T, I, O Operational status change Change O Control status change Load I Input load out of l imit All traps include the Location of the Sentry as defined with the Set Location co[...]

Load Trap The Load trap is generated whenever the total input lo ad on an infeed exceeds a preset threshold. Load traps include the reported input load, load status, Location of the Sentry, and identifier and name of the affected infeed. Any error state generates a Load trap and triggers the trap timer. A new trap is generated at the end of every t[...]

Enabling or Disabling a Load trap The Set Trap Infeed Load command is used to enable or disable an Infeed Load trap. To Enable or Disable a Load tra p: At the Sentry: prompt, type set trap infeed load , followed by the infeed name, and on or off . Press Enter , or Type set trap infeed load all , followed by on or off and press Enter . Examples The [...]

Displaying trap configuration informat ion The Show Traps command displays information about all traps. To display trap information: At the Sentry: prompt, type show traps and press Enter . Example The following command requests trap configuration information: Sentry: show traps <Enter> Tower trap configuration: Tower Tower Status ID Name Tra[...]

LDAP The Sentry family of products supports Lightweight Di rectory Access Protocol (LDAP) Version 3. This support enables authentication with LDAP servers; user accou nts do not need to be individually created locally on each Sentry device. This allows administrators to pre-define and c onfigure (in each Sentry product, and in the LDAP server) a se[...]

Enabling and Setting up LDAP Support There are a few configuration requirements for properly enabling and setting up LDAP support. Below is an overview of the minimum requirements. Directory Services server configuration requirements: 1. Define at least one LDAP group. 2. Assign users to that LDAP group. Sentry configuration requirements: 1. Enable[...]

Setting the search bind Distinguished Name (DN) The Set LDAP BindDN command is used to set the fully-qualified distinguished na me (FQDN) for user accounts to bind with. This is required for direct ory services that do not support anonymous binds. This field is used ONLY with Simple Binds. Maximum string length is 124 characters. NOTE: If left blan[...]

Setting the user search base Distingu ished Name (DN) The Set LDAP UserBaseDN command is used to set the base (DN) for the login username search. This is where the search will start, and will include all subtrees. Maximum size is 100 character s. To set the user searc h base DN: At the Sentry: prompt, type set ldap userbasedn and press Enter . At t[...]

Displaying LDAP configuration inform ation The Show LDAP command displays LDAP configuration information. • Enabled-disabled status of LDAP support • Directory Services server IP address and port • Bind request password type and remote authentication order • Search bind distinguished name and password • User search base distinguished name[...]

Configuring LDAP Groups Creating an LDAP group The Create LDAPGroup command creates an LDAP group. To create an LDAP group : At the Sentry: prompt, type create ldapgroup , optionally followed by a 1-16 character group name (Spaces are not allowed, and LDAP group names are not case sensitive). Press Enter . Example The following command creates the [...]

Displaying the LDAP access privilege levels The List LDAPGroups command displays all defined LDAP group with their access privilege level. To display LDAP gr oup access privilege levels: At the Sentry: prompt, type list ldapgroups and press Enter . Example The following command displays all LDAP groups with their access privilege level: Sentry: lis[...]

Adding serial port access to an LDAP group The Add PortToLDAP command grants an LDAP group access to the serial port. To grant serial port access to an LDA P group: At the Sentry: prompt, type add porttoldap console and a group name. Press Enter . Deleting serial port access for an L D AP group The Delete PortFromLDAP command removes an LDAP group?[...]

LDAP Technical Specifications 62 • Advanced Operations Sentry PT22 Simple Bind Authen tication Proce ss LDAP Server Sentry Client Initiate Sentry session Authentic ation reques t with Usename/ Password Successful Bind? Username found? Successful Bind? Attribut e match? Username found? Attri bute name compared t o Group Membership Attribut e Subtr[...]

TACACS+ The Sentry family of products supports the Terminal Access Controller Acc ess Control System (TACACS+) protocol. This enables authentication and authorization with a central TACA CS+ server; user accounts do not need to be individually created locally on each Sentry device. This allows administrators to pre-define and c onfigure (in each Se[...]

Setting the TACACS+ encryption key The Set TACACS Key comma nd sets the encryption key used to encry pt all data packets between the Sentry and the TACACS+ server. This key must match the key configured on the TACACS+ server. To set the encryption key: At the Sentry: prompt, type set tacacs key and press Enter . At the TACACS+ Key: prompt, type a k[...]

Configuring TACACS+ Priv ilege Levels Setting TACACS+ account acc ess level privileges The Set TacPriv Access command sets the access level privile ges for a TACACS+ account. The Sentry has four defined access privilege levels; Admi n, User, On-Only and View-Only. For more information on user access levels, see Changing a user’s access privil ege[...]

Deleting outlet access for a TACACS+ account The Delete OutletFromTACACS command removes a TACACS+ account’s access to one or all outlets. You cannot remove access to any outlet for an administrative level account. To delete outlet a ccess for a TACACS+ account: At the Sentry: prompt, type delete outletfromtacacs , optionally followed by an outle[...]

Displaying outlet, outlet group and s erial port access The List TacPriv command displays all accessible outlets, outlet groups and serial ports for a TACACS+ account. To display outlet, outlet group and seri al port access: At the Sentry: prompt, type list tacpriv , optionally followed by a TACACS+ account. Press Enter . Example The following comm[...]

Chapter 5: Appendices Appendix A: Resetting to Factory Defaults You may reset the non-volatile RAM that stores all configurable options. This clears all ad ministrator- editable fields and resets all command line configur able options to their default values, including all user accounts. You may reset the unit to factory defaults from th e command [...]

Appendix C: Techni cal Specifications Domestic Models Model Voltage Inlets* Outlets PT22-H004-1-02 100-120V, 50/60Hz 4 x IEC 60320 C20 4 x IEC 60320 C 19 PT22-H004-2-02 208-240V, 60Hz 4 x IEC 60320 C20 4 x IEC 60320 C 19 International Models Model Voltage Inlets* Outlets PT22-H004-2-02 230V, 50/60Hz 4 x IEC 6 0320 C20 4 x IEC 60320 C19 * Input cord[...]

Data Connections RS-232 port PT22s are equipped standard with an RJ45 DTE RS-232c serial port. This connector may be used for direct local access or from other serial devices such as a terminal server. An RJ45 crossover cable is provided for connection to an RJ45 DCE serial port. Pin DTE Signal Name Input/Output 1 Request to Send RTS Output 2 Data [...]

Regulatory Compliance Product Safety Units have been safety tested and certified to the following stan dards: • USA/Canada UL 508 and CAN/CSA 22.2 No.205 • European Union EN60950 This product is also designed for Norwegian IT pow er system with phase-to phase voltage 230V. USA Notification Note: This equipment has been tested and found to co mp[...]

Appendix D: Warranty, Product Registration and Support Warranty and Limitation of Liability Server Technology, Inc. agrees to repair or replace Products that fail due to a defect within twelve (12) months after the shipment date of each Product unit to Buyer (“Warranty Period”). For purposes of this Agreement the term “defect” shall mean th[...]

Technical Support Server Technology understands that there are often questions when installing and/or using a new product. Free Technical Support is provided from 8:30 AM to 5:00 PM, Monday-Friday, Pacific Time. Server Technology, Inc. 1040 Sandhill Drive Tel: 775.284.2000 Web: www.servertech.com Reno, Nevada 89521 USA Fax: 775.284.2065 Email: supp[...]

Solutions for the Data Ce nter Equipment Cabinet Server Technology, Inc. +1.800.835.1515 TF 1040 Sandhill Driv e +1.775.284. 2000 Tel Reno, NV 89521 +1.775.284. 2065 Fax www.servertech .com sales@servertech. com Sentry, Environmental Monitor ing Control Unit, Pass-Thru and Post-On ar e trademarks of Server Technology , Inc. Other trademarks and tra[...]