Western Telematic AFS-16-1 manual

WTI Part No. 14069 Rev . B AF S-16-1 RJ45 F allba ck Switch User's Guide[...]

i Warnings and Cautions: Installation Instructions Secure Racking If Secure Racked units are installed in a closed or multi-unit rack assembly , they may require further evaluation by Certification Agencies. The following items must be considered. 1. The ambient within the rack may be greater than room ambient. Installation should be such that the [...]

ii Warnings and Cautions T wo Power Supply Cables Note that the AFS-16 features two separate power inputs, and a separate power supply cable for each power input. Make certain to disconnect both power supply cables from their power source before attempting to service or remove the unit. Disconnect Power If any of the following events are noted, imm[...]

iii T able of Contents 1 .  I n t r o d u c t i o n  ............................................................. 1 - 1 2 .  U n i t  D e s c r i p t i o n  .......................................................... 2 - 1 2.1. The Dual Power Supply Module. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .[...]

T able of Contents iv 5. BasicConfiguration(continued) 5 . 7 . T h e C i r c u i t G r o u p D i r e c t o r y ............................................. 5 - 2 1 5 . 7 . 1 . V i e w i n g C i r c u i t G r o u p s .......................................... 5 - 2 1 5 . 7 . 2 . A d d i n g C i r c u i t G r o u p s .......................[...]

T able of Contents v 8 .  T h e  S t a t u s  S c r e e n s  ....................................................... 8 - 1 8 . 1 . P r o d u c t S t a t u s ........................................................ 8 - 1 8 . 2 . T h e N e t w o r k S t a t u s S c r e e n .............................................. 8 - 1 8 . 3 . T h e[...]

T able of Contents vi 1 6 .  U p g r a d i n g  A F S - 1 6  F i r m w a r e .............................................. 1 6 - 1 1 7 .  C o m m a n d  R e f e r e n c e  G u i d e  ............................................... 1 7 - 1 1 7 . 1 . C o m m a n d C o n v e n t i o n s ........................................[...]

T able of Contents vii List of Figures 2 . 1 . T h e P o w e r S u p p l y M o d u l e ................................................. 2 - 1 2 . 2 . T h e C o n t r o l M o d u l e ....................................................... 2 - 2 2 . 3 . T h e C i r c u i t M o d u l e ....................................................... 2 - 4 4.1[...]

1-1 1. Introduction The AFS-16-1 is a versatile switching system, designed for applications that require routing of analog or digital signals between a common RJ45 jack and “ A ” and “B RJ45 jacks. The AFS-16-1 is ideal for switching RS232, RS422/485, Ethernet/UTP or telephone lines. The system consists of a Card Rack, one Power Supply Module[...]

1-2 Introduction Environmental Monitoring and Management: The AFS-16 can constantly monitor temperature levels, ping response and other factors. If the AFS-16 detects that user defined thresholds for these values have been exceeded, the unit can promptly notify you via email, text message, SNMP trap, or Syslog message. The AFS-16 also records tempe[...]

2-1 ON I O POWER MODULE AFS-16 1 Figure 2.1: The Power Supply Module 2. Unit Description The AFS-16 consists of a frame unit, one Dual Power Supply Module, one Control Module, and up to sixteen Circuit Modules. 2.1. The Dual P ower Supply Module The Dual Power Supply Module, shown in Figure 2 1, provides AC power used by the Control Module and Circ[...]

2-2 Unit Description 2.2. The Control Module The Control Module, shown in Figure 2.2, coordinates switching of the individual Circuit Modules. The Control Module includes a Master A/B Gang Switch, status LEDs, a 10/100Base- T Ethernet connector and an RJ-45 RS232 Serial Port for connection to your PC, control device or external modem. An AUX jack i[...]

2-3 Unit Description  ResetSwitch: T o reinitialize the AFS-16, hold the Reset Switch in the "down" position for approximately five seconds. When the AFS-16 is reset, all users will be disconnected from the AFS-16 and the operating system will be reloaded.  RS232Connector: An RJ-45 Serial Port for connection to your PC, contro[...]

2-4 Unit Description 2.3. The Circuit Module The AFS-16 can accept up to sixteen Circuit Modules. Each Circuit Module includes a common jack, jacks for “ A ” and “B” paths, and a Manual A/B switch as described in Figure 2.3. A A C B B RJ45-3 1 2 3 4 5 Figure 2.3: The Circuit Module The AFS-16 Circuit Module includes the following components[...]

3-1 3. Getting Started This section describes a simplified installation procedure for the AFS-16 hardware, which will allow you to communicate with the unit in order to demonstrate basic features and check for proper operation. Note that this Quick Start procedure does not provide a detailed description of unit configuration, or discuss advanced op[...]

3-2 Getting Started 3.3. Communicating with the AFS-16 When properly installed and configured, the AFS-16 will allow command mode access via T elnet, Web Browser , S SH client, modem, or local PC. However , in order to ensure security , both T elnet and W eb Browser access are disabled in the default state. T o enable T elnet and/or Web Browser acc[...]

3-3 Getting Started 3. ReviewHelpMenu: If you are communicating with the AFS-16 via the text interface (SSH, T elnet or Modem), type /H and press [Enter] to display the Help Menu, which lists all available AFS-16 commands. Note that the Help Menu is not available via the Web Browser Interface. 3.4. F allback Switching A/B fallback switching c[...]

3-4 Getting Started 3.4.2. Fallback Switching - Web Browser Interface In the default state, the W eb Browser Interface will not be available until you have enabled Web Access as described in Section 5.9.2. After W eb Access has been enabled, access the AFS-16 Web Browser Interface as described in Section 3.3 and then proceed as follows: 1. Access?[...]

4-1 4. Hardware Installation 4.1. Connecting the P ower Supply Cable(s) Refer to the cautions listed below and at the beginning of this User's Guide, and then connect the AFS-16 to an appropriate 100 to 240 VAC power supply . CAUTIONS: • Beforeattemptingtoinstallthisunit,pleasereviewthewarningsand cautions[...]

4-2 Hardware Installation 4.3. Connecting a Local Control Device Use the supplied Ethernet cable and adapter to connect your PC COM port to the RS232 Console Port on the AFS-16 Control Module as shown in Figure 4.1 and Figure 4.2. For a description of the RS232 P ort Interface, please refer to Appendix A .1. 4.4. Connecting an External Modem (Optio[...]

4-3 Hardware Installation E D Enable Disable Figure4.3:CircuitModuleJumper 4.5. Module Set Up 4.5.1. Circuit Module Set Up The A/B Switch Jumper on the Circuit Module card (Figure 4.3) enables/disables the individual Circuit Module’s A/B Switch. If you wish to disable manual A/B switching control at a specific Module, then the A/B [...]

5-1 5. Basic Configuration This section describes the basic configuration procedure for AFS-16 units. For information on Alarm Functions, please refer to Section 7. 5.1. Communicating with the AFS-16 Unit In order to configure the AFS-16, you must first connect to the unit, and access command mode. Note that, the AFS-16 offers two separate configur[...]

5-2 Basic Configuration T o access command mode via the T ext Interface, proceed as follows: Note: Whencommunicatingwiththeunitforthefirsttime,youwillnotbeable tocontacttheunitviaT elnetuntilyouhaveaccessedcommandmodeviaLocal PCorSSHClientanduse[...]

5-3 Basic Configuration 5.1.3. Access Via PDA In addition to the Web Browser Interface and T ext Interface, the AFS -16 command mode can also be accessed by PDA devices. Note however , that due to nature of most PDAs, only a limited selection of AFS-16 operating and status display functions are available to users who communicate with the unit via P[...]

5-4 Basic Configuration 5.2. Configuration Menus Although the Web Browser Interface and T ext Interface provide two separate means for selecting parameters, both interfaces allow access to the same set of basic parameters, and parameters selected via one interface will also be applied to the other . T o access the configuration menus, proceed as fo[...]

5-5 Basic Configuration 5.3. Defining System Parameters The System P arameters menus are used to define the Site ID Message, set the system clock and calendar , set up log functions and calibrate temperature readings. T o access the System Parameters menu via the T ext Interface, type /F and press [Enter] . T o access the System Parameters menu via[...]

5-6 Basic Configuration • LogConfiguration: In the T ext Interface, this item provides access to a submenu which is used to configure the Audit Log, Alarm Log and T emperature Log as described in Section 5.3.3. In the Web Browser Interface, these parameters are directly accessed via the System P arameters menu.  AuditLog: When enabled[...]

5-7 Basic Configuration 5.3.1. The Real Time Clock and Calendar The Real Time Clock menu is used to set the AFS-16's internal clock and calendar . The configuration menu for the Real Time Clock offers the following options: • Date: The Month, Date, Y ear and day of the week for the real-time clock/calendar . • Time: Sets the Hour , M[...]

5-8 Basic Configuration 5.3.2. The Invalid Access Lockout Feature When properly configured and enabled, the Invalid Access Lockout feature will watch all login attempts made at the Network Port and RS232 P ort. If either port exceeds the selected number of invalid attempts, then that port will be automatically disabled for a user -defined length of[...]

5-9 Basic Configuration In the T ext Interface, the Invalid Access Lockout configuration menu is accessed via the System P arameters menu. In the Web Browser Interface, the Invalid Access Lockout configuration is accessed via the "General P arameters" link. The Invalid Access Lockout configuration menus allow you to select the following: [...]

5-10 Basic Configuration 5.3.3.1. The Audit Log and Alarm Log The System P arameters menu allows you to select three different configuration parameters for the Audit Log and Alarm Log. Note that the Audit Log and Alarm Log function independently , and parameters selected for one log will not be applied to the other . • Off: The Log is disabled[...]

5-11 Basic Configuration T o erase log data, access command mode via the T ext Interface, using an account that permits Administrator level commands, then type /L and press [Enter] to access the Display Logs menu and then proceed as follows: • AuditLog: At the Display Logs menu, type 1 and then press [Enter] . When the Audit Log appears, ty[...]

5-12 Basic Configuration In both the T ext Interface and Web Browser Interface, the Callback Security Menu offers the following options: • CallbackEnable: This prompt offers five different configuration options for the Callback Security feature: (Default = On - Callback (Without Password Prompt.)  Off: All Callback Security is disabled. [...]

5-13 Basic Configuration 5.3.5. Scripting Options The Scripting Options submenu provides access to parameters that are used to set up the AFS-16 unit for running various scripts. Notes: • T oaccessScriptingOptionsparametersviatheT extInterface,firsttype /F  andpress [Enter] todisplaytheSyst[...]

5-14 Basic Configuration 5.3.5.1. Automated Mode The Automated Mode allows the AFS-16 to execute A/B switching commands, without displaying menus or generating response messages. Automated Mode is designed to allow the AFS-16 to be controlled by a device which can generate commands to control power switching functions without human intervention. Wh[...]

5-15 Basic Configuration 5.4. User Accounts Each time you attempt to access command mode, you will be prompted to enter a username and password. The username/password entered at login determine which circuit(s) you will be allowed to control and what type of commands you will be allowed to invoke. Each username / password combination is defined wit[...]

5-16 Basic Configuration 5.4.2. Granting Circuit Module Access Each account can be granted access to a different selection of Circuit Modules. Note also, that several accounts can be allowed access to the Circuit Module. When accounts are created, the Circuit Access parameter in the Add User or Modify User menu can be used to grant or deny access t[...]

5-17 Basic Configuration 5.5. Managing User Accounts The User Directory function is employed to create new accounts, display parameters for existing accounts, modify accounts and delete accounts. Up to 128 different user accounts can be created. The "User Directory" function is only available when you have logged into command mode using a[...]

5-18 Basic Configuration • CircuitAccess: Determines which AFS-16 Circuit Modules this account will be allowed to access. (Defaults; Administrator & SuperUser = All Circuit Modules On, User and ViewOnly = All Circuit Modules Off.) Notes: • IntheT extInterface,CircuitAccessisconfiguredbyselectingitem[...]

5-19 Basic Configuration • CallbackNumber: Assigns a number that will be called when this account attempts to access command mode via modem, and the Callback Security Function has been enabled as described in Section 5.3.5. (Default = undefined.) Notes: • IftheCallbackNumberisnotdefined,thenCallbackswillno[...]

5-20 Basic Configuration 5.6. Circuit Configuration The Circuit P arameters menu allows you to select parameters for the AFS-16 Circuit Modules. This allows you to assign names to the A, C, and B connectors on each Circuit Module, and also define a default A/B setting for each A/B Switch. Note that the Circuit P arameters menu is only available whe[...]

5-21 Basic Configuration 5.7. The Circuit Group Directory The Circuit Group Directory allows you to designate "groups" of circuits that are dedicated to a similar function, and will most likely be switched at the same time. Circuit Groups allow you to direct A/B switching commands to a series of circuits, without addressing each circuit i[...]

5-22 Basic Configuration 5.7.2. Adding Circuit Groups The "Add Circuit Group to Directory" option allows you to create new Circuit Groups and assign circuit access rights to each group. Note that the Add Circuit Group function is only available when you have accessed command mode using a password that permits Administrator Level commands.[...]

5-23 Basic Configuration 5.8. Serial Port Configuration The Serial Port Configuration menus allow you to select parameters for the AFS-16 Control Module's RS232 Serial Port. The Serial Port can be configured for connection to a local PC or Modem. In addition, the Serial Port Configuration menu can also be used to set communications parameters,[...]

5-24 Basic Configuration • SequenceDisconnect: Enables/Disables and configures the Resident Disconnect command. This offers the option to disable the Sequence Disconnect, select a one character format or a three character format. (Default = One Character .) • InactivityTimeout: Enables and selects the T imeout Period for this port. [...]

5-25 Basic Configuration 5.9. Network Configuration The Network P arameters Menus are used to select parameters and options for the Network Port and also allow you to implement various security and authentication features. Although the Web Browser Interface and T ext Interface allow definition of essentially the same parameters, parameters are arra[...]

5-26 Basic Configuration 5.9.1. Network Port Parameters In the T ext Interface, these parameters are found in the main Network Configuration menu. In the Web Browser Interface, these parameters are found by placing the cursor over the "Network Configuration" link on the left hand side of the screen, and then clicking on the "Network [...]

5-27 Basic Configuration 5.9.2. Network Parameters In the T ext Interface, these parameters are accessed via the Network Configuration menu (Figure 5.9.) In the Web Browser Interface, these parameters can be found by clicking the "Network P arameters" link on the left hand side of the screen to display the Network P arameters menu. Note: [...]

5-28 Basic Configuration • HTTPSPort: Selects the TCP/IP port number that will be used for HTTPS connections. (Default = 443.) Notes: • IntheT extInterface,HTTPandHTTPSparametersresideinaseparate submenu.T oenableandconfigureHTTPandHTTPSAccessviathe T extInterfa[...]

5-29 Basic Configuration 5.9.3. IP Security The IP Security feature allows the AFS-16 to restrict unauthorized IP addresses from establishing inbound T elnet connections to the unit. This allows you to grant T elnet access to only a specific group of IP addresses, or block a particular IP address completely . In the default state, the AFS -16 accep[...]

5-30 Basic Configuration 5.9.3.1. Adding IP Addresses to the Allow and Deny Lists T o add an IP Address to the Allow or Deny list, and begin configuring the IP Security feature, proceed as follows. Notes: • BoththeAllowandDenylistcanincludeLinuxoperators,wildcards,and net/maskpairs. • Insome[...]

5-31 Basic Configuration 5.9.3.2. Linux Operators and Wild Cards In addition to merely entering a specific IP address or partial IP address in the Allow or Deny list, you may also use any standard Linux operator or wild card. In most cases, the only operator used is "EXCEPT" and the only wild card used is "ALL," but more experie[...]

5-32 Basic Configuration 2. MostlyOpen: Access is granted by default, and the only clients denied access, are those explicitly listed in the Deny list, and as exceptions in the Allow list. T o allow access to all clients except 192.255.255.192 and 168.112.112.05, the Allow and Deny lists would be defined as follows: • AllowList: 1. ALL E[...]

5-33 Basic Configuration 5.9.6. SNMP Access Parameters These menus are used to select access parameters for the SNMP feature. The SNMP Access P arameters menus allow the following parameters to be defined: Note: AfteryouhaveconfiguredSNMPAccessParameters,youwillthenbe abletomanagetheAFS-16's?[...]

5-34 Basic Configuration • AuthenticationProtocol: Determines which authentication protocol will be used. The AFS-16 supports both MD5 and SHA1 authentication. (Default = MD5.) Notes: • TheAuthenticationProtocolthatisselectedfortheAFS-16mustmatchthe protocolthatyourSNMPclientwilluse[...]

5-35 Basic Configuration 5.9.8. LDAP Parameters The AFS-16 supports LDAP (Lightweight Directory Access Protocol,) which allows authentication via the "Active Directory" network Directory Service. When LDAP is enabled and properly configured, command access rights can be granted to new users without the need to define individual new accoun[...]

5-36 Basic Configuration • SearchBindP assword: Sets the Password for the user who is allowed to search the LDAP directory . (Default = undefined.) • UserSearchBaseDN: Sets the directory location for user searches. (Default = undefined.) • UserSearchFilter: Selects the attribute that lists the user name. Note tha[...]

5-37 Basic Configuration 5.9.8.2 Viewing LDAP Groups If you need to examine an existing LDAP group definition, the "View LDAP Groups" function can be used to review the group's parameters and Circuit Access settings. 5.9.8.3. Modifying LDAP Groups If you need to modify an existing LDAP Group in order to change parameters or circuit a[...]

5-38 Basic Configuration 5.9.9. TACACS P arameters The T ACAC S Configuration Menus offer the following options: • Enable: Enables/disables the T ACAC S feature at the Network Port. (Default = Off .) • PrimaryAddress: Defines the IP address or domain name (up to 64 characters) for your primary T ACAC S server . (Default = undefined.) ?[...]

5-39 Basic Configuration  CircuitAccess: Selects the default Circuit Access setting for new T ACAC S users. The Circuit Access setting determines which Circuit Module(s) each account will be allowed to control. (Defaults; Administrator and SuperUser = All Circuits On, User = All Circuits Off, ViewOnly = All Circuits Off .) Notes: • Admin[...]

5-40 Basic Configuration 5.9.10. RADIUS Parameters The RADIUS Configuration Menus offer the following options: • Enable: Enables/disables the RADIUS feature at the Network Port. (Default = Off .) • PrimaryAddress Defines the IP address or domain name (up to 64 characters long) for your primary RADIUS server . (Default = undefined.) •[...]

5-41 Basic Configuration 5.9.10.1. Dictionary Support for RADIUS The RADIUS dictionary file can allow you to define a user and assign command access rights and port access rights from a central location. The RADIUS dictionary file, "dictionary .wti" is included on the CDROM along with this user's guide. T o install the dictionary fil[...]

5-42 Basic Configuration 5.9.11. Email Messaging Parameters The Email Messaging menu is used to define parameters for email messages that the AFS-16 can send to notify you when an alarm is triggered. T o define email message parameters, you must access the AFS-16 Command Mode using a password that permits access to Administrator Level commands. The[...]

5-43 Basic Configuration 5.10. Save User Selected Parameters It is strongly recommended to save all user -defined parameters to an ASCII file as described in Section 15. This will allow quick recovery in the event of accidental deletion or reconfiguration of port parameters. When changing configuration parameters via the T ext Interface, make certa[...]

6-1 6. Ping-No-Answer F allback Switching The Ping-No-Answer function can be used to automatically switch one or more circuit modules when an attached device fails to respond to a Ping Command. In addition, the Ping-No-Answer function can also be configured to send an email, text message, Syslog Message or SNMP T rap to notify you whenever a Ping-N[...]

6-2 Ping-No-Answer Fallback Switching • ConsecutiveFailures: Determines how many consecutive failures of the Ping command must be detected in order to initiate Ping-No-Answer fallback switching. For example, if this value is set to "3", then after three consecutive Ping failures, the specified Circuit Module(s) will then be switch[...]

6-3 Ping-No-Answer Fallback Switching 6.2. Viewing Ping-No-Answer Profiles After you have defined one or more Ping-No-Answer profiles, you can review the parameters selected for each profile using the View Ping-No-Answer feature. T o view the configuration of an existing Ping-No-Answer profile, you must access command mode using a password that all[...]

7-1 7. Alarm Configuration The AFS-16 can generate alarms when temperature readings exceed user-defined trigger levels, when input voltage is lost and then restored to the unit, when a Ping-No- Answer condition is detected and when the Invalid Access Lockout feature is triggered. In addition, the AFS-16 can also generate an alarm when the Monitor/A[...]

7-2 Alarm Configuration 7.1. The Output Contacts In addition to providing notification when an alarm is generated, the Over T emperature Alarms, Ping-No-Answer Alarm, Invalid Access Lockout Alarm and Monitor Input Alarm all offer the option to switch the output contacts on the Control Module AUX Connector when an alarm is triggered. The output cont[...]

7-3 Alarm Configuration 7.2. The Over T emperature Alarms The Over T emperature Alarms are designed to inform you when the temperature level inside your equipment rack reaches or exceeds certain user -defined levels. There are two separate Over T emperature Alarms; the Initial Threshold alarm and the Critical Threshold Alarm. T ypically , the Initi[...]

7-4 Alarm Configuration • EmailMessage: Enables/Disables email notification for this alarm. (Default = On.) Note: Ifeitherofthe"CopytoAllT riggers"optionsisselected,thenemail notificationforotheralarmswillbeswitchedOnorOffasindicatedbythis param[...]

7-5 Alarm Configuration 7.3. The Ping-No-Answer Alarm The Ping-No-Answer Alarm is intended to provide notification when one of the IP addresses defined via the Ping-No-Answer function (as described in Section 6) fails to respond to a Ping command. When one of the user -defined IP addresses fails to answer a Ping command, the AFS-16 can provide noti[...]

7-6 Alarm Configuration • EmailMessage: Enables/Disables email notification for this alarm. (Default = On.) Note: Ifeitherofthe"CopytoAllT riggers"optionsisselected,thenemail notificationforotheralarmswillbeswitchedOnorOffasindicatedbythis param[...]

7-7 Alarm Configuration 7.4. The Invalid Access Lockout Alarm The Invalid Access Lockout Alarm can provide notification when the AFS-16 has locked a port due to repeated, invalid attempts to access command mode. Normally , the Invalid Access Lockout feature (discussed in Section 5.3.2) will lock a port whenever the AFS-16 detects that a user-define[...]

7-8 Alarm Configuration • EmailMessage: Enables/Disables email notification for this alarm. (Default = On.) Note: Ifeitherofthe"CopytoAllT riggers"optionsisselected,thenemail notificationforotheralarmswillbeswitchedOnorOffasindicatedbythis param[...]

7-9 Alarm Configuration 7.5. The P ower Cycle Alarm The Power Cycle Alarm can provide notification when input power to the AFS-16 unit is lost and then restored. When the power supply is lost and then restored, the AFS-16 can provide notification via Email, Syslog Message or SNMP T rap. T o configure the Power Cycle Alarm, you must access the AFS-1[...]

7-10 Alarm Configuration 7.6. Monitor/Alarm Input The Monitor/Alarm Input feature allows the AFS-16 to monitor Pin 4 on the Control Module's AUX connector , and then switch circuit modules, and/or activate an audible alarm or other external device and/or send notification when the signal at Pin 4 changes. T o configure the Monitor/Alarm Input [...]

7-11 Alarm Configuration • ContactOutputEnable: Activates/deactivates the Output Contacts on the Control Module AUX Connector . When the Contact Output Enable parameter is set to "On", the Common line will be switched from the Normally Closed contact to the Normally Open contact. For more information on the Output Contacts, ple[...]

7-12 Alarm Configuration 7.6.1. Monitor Input Level Settings When the Monitor/Alarm Input feature is properly configured, the AFS-16 can trigger an alarm and/or perform A/B switching operations when the signal at Pin 4 (Monitor Input) on the Control Module AUX connector goes high or low . In set up this feature, you must first use the Control Card [...]

7-13 Alarm Configuration 7.6.1.1. Monitor Input Signal - T rigger When Low T o set up the Monitor/Alarm Input feature to trigger an alarm when the signal at AUX connector pin 4 (the Monitor Input) goes Low , configure the AFS-16 as follows: 1. ControlCardJumperSetting: Set the Jumper to the "1" position (default.) This will set t[...]

8-1 8. The Status Screens The Status Screens are used to display status information about the AFS-16 hardware and firmware, Network Port, Circuit Modules, Circuit Groups and other features. The Status Screens are available via both the T ext Interface and Web Browser Interface. 8.1. Product Status The Product Status Screen lists the model number , [...]

8-2 The Status Screens 8.3. The Circuit Status Screen The Circuit Status Screen shows the current status of the AFS-16's Circuit Modules, and also lists the unit's current temperature, Monitor/Alarm Input status, and Alarm Contact Output status. Note: • WhentheCircuitStatusscreenisviewedbyanaccountwith?[...]

8-3 The Status Screens 8.4. The Circuit Group Status Screen The Circuit Group Status screen shows the configuration details and A/B switching status for the AFS-16's user-defined Circuit Groups. Notes: • WhentheCircuitGroupStatusScreenisviewedbyanaccountwith AdministratororSuperUsercommandac[...]

8-4 The Status Screens 8.5. The Event Logs 8.5.1. The Audit Log The Audit Log provides a record of most command activity at the AFS-16 unit, including A/B switching, and login and logout activity . Note that the Audit Log does not include user information regarding access to configuration menus or status screens. T o view the Audit Log, access comm[...]

8-5 The Status Screens 8.5.2. The Alarm Log The Alarm Log provides a record of all alarm events that were initiated by the Over T emperature Alarms, Ping-No-Answer Alarm, Invalid Access Lockout Alarm, Power Cycle Alarm and Monitor/Alarm Input feature. T o view the Alarm Log, access command mode using a password that permits Administrator or SuperUs[...]

9-1 9. Operation As discussed in Section 5, the AFS-16 offers two separate command interfaces; the W eb Browser Interface and the T ext Interface (also known as the "Command Line Interface" or "CLI.") Both interfaces offer essentially the same command options and features, and in most cases, parameters defined via the Web Browse[...]

9-2 Operation 3. A/BSwitching: From the Circuit Control Menu, click the down arrow in the "Action" column for the desired circuit(s), then select position "A" or position "B" from the dropdown menu and click on the "Confirm Circuit Actions" button. Next the AFS-16 will display a screen which lists the sele[...]

9-3 Operation 3. A/BSwitching-CircuitGroups: From the Circuit Group Control Menu, click the down arrow for the desired Circuit Group(s), then select "A" or "B" from the dropdown menu and click on the "Confirm Circuit Group Actions" button. Next the AFS-16 will display a screen which lists the selected switc[...]

9-4 Operation 9.2. A/B Switching - T ext Interface When using the T ext Interface, all A/B switching functions are performed by invoking simple, ASCII commands. The T ext Interface includes a Help Menu, which summarizes all available AFS-16 commands. T o display the T ext Interface Help Menu (Figure 9.1), type /H and press [Enter] . Note: Whe[...]

9-5 Operation 9.2.2. A/B Switching Commands - T ext Interface These commands can be used to switch AFS-16’s circuit modules, and can also be used to set circuits to the user -defined default A/B positions. Circuits may be specified by number , name or Circuit Group Name. Notes: • WhenthePortandCircuitStatusScreenisdis[...]

9-6 Operation 4. The"T oggle"Command: As an alternative to the /T A and /TB commands, the /T (T oggle) command can also be used to perform A/B switching. T ype /T n,p and press [Enter] . Where " n " is the number or name of the desired Circuit or Circuit Group and " p " is the desired A/B position. For example: /[...]

9-7 Operation 9.3. Manual Operation In addition to the command driven A/B switching functions that are available via the W eb Browser Interface and T ext Interface, the AFS-16 Circuit Modules can also be manually switched. Circuit Modules can be individually controlled using the A/B switch on the Circuit Module front panel, or all 16 Circuit Module[...]

10-1 10. T elnet & SSH F unctions 10.1. SSH Encryption In addition to standard T elnet protocol, the AFS-16 also supports S SH connections, which provide secure, encrypted access via network. In order to communicate with the AFS-16 using S SH protocol, your network node must include an appropriate S SH client. Note that when the /K (Send SSH Ke[...]

10-2 T elnet & SSH Functions 10.2. Creating an Outbound T elnet Connection The AFS-16 includes a /TELNET command, that can be used to create an outbound T elnet connection. In order to use the /TELNET command, you must access the AFS-16's T ext Interface command mode using an account that permits T elnet Access and Outbound Access, via the[...]

10-3 T elnet & SSH Functions 10.3. Creating an Outbound SSH Connection The AFS-16's /S SH command can be used to create an outbound SSH connection. In order to use the /SSH command, you must access the AFS-16's T ext Interface command mode using an account that permits SSH Access and Outbound Access, via the AFS -16 Control Module&apo[...]

11-1 11. Syslog Messages The Syslog feature can create log records of each Alarm Event. As these event records are created, they are sent to a Syslog Daemon, located at an IP address defined via the Network P arameters menu. 11.1. Configuration In order to employ this feature, you must set the real-time clock and calendar via the System P arameters[...]

11-2 Syslog Messages 11.2. T esting Syslog Configuration After you have configured the AFS-16 as described in Section 11.1, the /TEST command can be used to make certain that the function is properly set up. T o test the Syslog function, access the AFS-16 command mode via the T ext Interface using an account that permits Administrator or SuperUser [...]

12-1 12. SNMP T raps SNMP is an acronym for "Simple Network Management Protocol". The SNMP T rap function allows the AFS-16 to send Alarm Notification messages to two different SNMP managers, each time one of the Alarms discussed in Section 7 is triggered. Note: • TheSNMPfeaturecannotbeconfiguredviatheSNMPM[...]

12-2 SNMP T raps 12.2. T esting the SNMP T rap F unction After you have finished setting up the SNMP T rap function, it is recommended to test the configuration to ensure that it is working correctly . T o test configuration of the SNMP T rap function, proceed as follows: 1. Configure the SNMP T rap function as described in Section 12.1. 2. Access [...]

13-1 13. Operation via SNMP If SNMP Access P arameters have been defined as described in Section 5.9.6, then you will be able to manage user accounts, control power and reboot switching and display unit status via SNMP . This section describes SNMP communication with the AFS-16 unit, and lists some common commands that can be employed to manage use[...]

13-2 Operation via SNMP • userTable::userCircuitAccess – A string of up to 16 characters, with one character for each of the 16 possible Circuit Modules on the AFS-16 unit. A ‘ 0 ’ indicates that the account does not have access to the circuit, and a ‘ 1 ’ indicates that the user does have access to the circuit. Note: Thenum[...]

13-3 Operation via SNMP 13.4. Circuit Control via SNMP 13.4.1. Controlling Circuits A/B Switching and Default commands can be issued for circuits via SNMP . Circuits are arranged in a table of N rows, where N is the number of circuits in the system. Circuit parameters are described below . • circuitTable::circuitID – String indicating the ci[...]

13-4 Operation via SNMP 13.5. Viewing AFS-16 Status via SNMP Status of various components of the AFS-16 can be retrieved via SNMP . Circuit Status, and Environmental Status are currently supported. 13.6.1. Circuit Status The status of each circuit in the system can be retrieved using the command below . • circuitTable::circuitStatus – The st[...]

13-5 Operation via SNMP 13.7. Sending T raps via SNMP T raps that report various unit conditions can be sent to an SNMP Management Station from the AFS-16. The following traps are currently supported. • WarmStart T rap – T rap indicating a warm start • ColdStart T rap – T rap indicating a cold start • Test T rap – T est trap in[...]

14-1 14 Setting Up SSL Encryption This section describes the procedure for setting up a secure connection via an https web connection to the AFS-16. Note: SSLparameterscannotbedefinedviatheWebBrowserInterface. InordertosetupSSLencryption,youmustcontacttheAFS -16viatheT[...]

14-2 Setting Up SSL Encryption 14.1. Creating a Self Signed Certificate T o create a Self Signed certificate, access the T ext interface via T elnet or S SH, using a password that permits access to Administrator level commands and then proceed as follows: 1. T ype /N and press [Enter] to display the Network P arameters menu. 2. At the Network P ara[...]

14-3 Setting Up SSL Encryption 4. After you have defined parameters 5 through 11, type 12 and press [Enter] (Create CSR) to create a Certificate Signing Request. By default, this will overwrite any existing certificate, and create a new Self Signed certificate. a) The AFS -16 will prompt you to create a password. Key in the desired password (up to [...]

14-4 Setting Up SSL Encryption 3. UploadtheSignedCertificatetotheAFS-16: After the "signed" certificate is returned from the security service, return to the W eb Access menu. a) Access the AFS -16 command mode via the T ext Interface using an account that permits Administrator level commands as described previously , the[...]

15-1 15. Saving and R estoring Configuration Parameters Once the AFS-16 is properly configured, parameters can be downloaded and saved as an ASCII text file. Later , if the configuration is accidentally altered, the saved parameters can be uploaded to automatically reconfigure the unit without the need to manually assign each parameter . Saved para[...]

15-2 Saving and Restoring Configuration Parameters 15.2. Restoring Saved P arameters This section describes the procedure for using your terminal emulation program to send saved parameters to the AFS-16. 1. Start your terminal emulation program and access the AFS-16’s T ext Interface command mode using an account that permits Administrator level [...]

15-3 Saving and Restoring Configuration Parameters 15.3. Restoring Previously Saved P arameters If you make a mistake while configuring the AFS-16 unit, and wish to return to the previously saved parameters, the T ext Interface's "Reboot System" command ( /I ) offers the option to reinitialize the AFS-16 using previously backed up pa[...]

16-1 16. Upgrading AFS -16 Firmware When new , improved versions of the AFS-16 firmware become available, the "Upgrade Firmware" function can be used to update the unit. Updates can be uploaded via FTP or SFTP protocols. Notes: • TheFTP/SFTPserverscanonlybestartedviatheT extInterface. • Allother?[...]

16-2 Upgrading RSM-8R4 Firmware 4. T o proceed with the upgrade, select either option 1 or option 2. The AFS-16 will display a message that indicates that the unit is waiting for data. Leave the current T elnet/S SH client session connected at this time. 5. Open your FTP/SF TP application and (if you have not already done so,) login to the AFS-16 u[...]

17-1 17. Command Reference Guide 17.1. Command Conventions Most commands described in this section conform to the following conventions: • T extInterface: Commands discussed in this section, can only be invoked via the T ext Interface. These commands cannot be invoked via the Web Browser Interface. • SlashCharacter: Most AFS-16 T ex[...]

17-2 Command Reference Guide 17.2. Command Summary Function Command Syntax Command Access Level Admin. SuperUser User ViewOnly Display Circuit Status /S [Enter] X  X  X  X  Circuit Group Status /SG [Enter] X  X  X  X  Network Status /SN [Enter] X X Help Menu /H [Enter] X  X  X  X  Log Functions /L [Enter] X X Sit[...]

17-3 Command Reference Guide 17.3. Command Set This Section provides information on all T ext Interface commands, sorted by functionality 17.3.1. Display Commands /S Display Circuit Status Screen Displays the Circuit Status Screen, which lists the current status of the AFS-16's Circuit Modules. For more information, please refer to Section 8.3[...]

17-4 Command Reference Guide /L Log F unctions Provides access to a menu which allows you to display the Audit Log, Alarm Log and T emperature Log. For more information on Log F unctions, please refer to Section 5.3.4. Availability: Administrator , SuperUser Format: /L [Enter] /J Display Site ID / Unit Information Displays the user -defined Site I.[...]

17-5 Command Reference Guide /T A T oggle to "A" Position T oggles a Circuit or a Circuit Group to the "A" position. Note: WhenthiscommandisinvokedinAdministratorModeorSuperUser Mode,itcanbeappliedtoallAFS-16CircuitsandCircuitGroups.Whenthis command[...]

17-6 Command Reference Guide /T T oggle Command This command can be used to toggle any Circuit or Circuit Group to either the "A" position or the "B: position. Note: WhenthiscommandisinvokedinAdministratorModeorSuperUser Mode,itcanbeappliedtoallAFS-16CircuitsandCircuit[...]

17-7 Command Reference Guide /K Send SSH Key Instructs the AFS-16 to provide you with a public S SH key for validation purposes. This public key can then be provided to your SSH client, in order to prevent the S SH client from warning you that the user is not recognized when you attempt to create an SSH connection. For more information, please refe[...]

17-8 Command Reference Guide /SSH Outbound SSH Creates an outbound SSH connection as described in Section 10.3. Notes: • Inorderforthe/SSHcommandtofunction,T elnet/S SHandOutbound ServiceAccessmustbeenabledforyouruseraccountasdescribedin Section5.5.Inaddition,S[...]

17-9 Command Reference Guide /G Circuit Group P arameters Displays a menu that is used to View , Add, Modify or Delete Circuit Groups. F or more information on Circuit Groups, please refer to Section 5.7. Availability: Administrator Format: /G [Enter] /N Network Port P arameters Displays a menu which is used to select parameters for the Network Por[...]

17-10 Command Reference Guide /I Reboot System (Default) Reinitializes the AFS-16 unit and offers the option to keep user-defined parameters or reset to default parameters. As described in Sections 5.10.1 and 15.3, the /I command can also be used to restore the unit to previously saved parameters. When the /I command is invoked, the unit will offer[...]

Apx-1 RJ-45 Pin No. 1 2 3 4 5 6 7 8 CTS DCD RXD TXD GND DTR RTS Request to Send Ready Out Data Out Ground Data In Carrier Detect Clear to Send Pin 8 Pin 1 Control Module RS232 Serial Port FigureA.1:SerialPortInterface Appendix A . Interface Description A.1. Serial P ort (RS232) DCD and DTR hardware lines function as follows: 1. Wh[...]

Apx-2 Appendix B. Specifications SwitchCard: Up to 16 Modules Interface: RJ45-3, Three Jacks, 8 Pins Switched Common Jack to A or B Jack. Contacts: High Reliability , Mechanical Relays, Break-Before-Make Contacts with 1 Amp @ 30 VDC Rating, 100 Million Cycle Life. Switching: Manual: Individual T oggle Switch, Gang Switching from Control Module. [...]

Apx-3 Appendix C. Customer Service Customer Service hours are from 8:00 AM to 5:00 PM, PST , Monday through Friday . When calling, please be prepared to give the name and make of the unit, its serial number and a description of its symptoms. If the unit should need to be returned for factory repair it must be accompanied by a Return Authorization n[...]

Apx-4 Appendices T rademark and Copyright Information WTI and Western T elematic are trademarks of Western T elematic Inc.. All other product names mentioned in this publication are trademarks or registered trademarks of their respective companies. Information and descriptions contained herein are the property of Western T elematic Inc.. Such infor[...]

Index-1 Inde x A A/B Gang Switch 2-2 A/B Switch 2-4 Jumper 2-4 A/B Switching T ext Interface 9-4 to 9-6 Web Browser Interface 9-1 to 9-3 Accept Break Network Port 5-26 Serial Port 5-24 Access Level 5-15, 5-17, 17-2 LDAP Group 5-36 T ACAC S 5-38 Accounting Port RADIUS 5-40 Accounts 5-15 to 5-23 Adding 5-17 Default 5-15 Add Circuit Group 5-22 LDAP Gr[...]

Index-2 Index Circuit Status Screen 8-2 T ext Interface 9-4, 17-3 Circuits to Switch Monitor/Alarm Input 7-11 CLI 5-1 to 5-2 Clock and Calendar 5-5, 5-7 to 5-8 Command Access Level 5-17, 17-2 Command Confirmation 5-13 Command Echo Network Port 5-26 Serial Port 5-24 Command Line Interface 5-1 to 5-2, 17-1 to 17-10 Command Mode Access 5-1 to 5-3 Logg[...]

Index-3 Index F Fallback 5-36 Fallback Local RADIUS 5-40 T ACAC S 5-38 Fallback T imer RADIUS 5-40 T ACAC S 5-38 Firmware Upgrade 16-1 to 16-2, 17-10 Firmware V ersion 8-1 From Address Email Parameters 5-42 From Name Email Parameters 5-42 G Gang Switch 2-2 Gateway Address Network Port 5-27 General Parameters 5-5 to 5-15 Group Membership Attribute 5[...]

Index-4 Index Local Control Device 4-2 Locality 14-2 Local PC Access 5-1 Lockout Attempts 5-9 Lockout Duration 5-9 Lockout Enable 5-9 Log Configuration 5-6, 5-9 to 5-10 Log Function 5-9 to 5-10 Reading and Erasing 5-10 Syslog 5-10 T ext Interface 17-4 Logging Out 9-7 T ext Interface 17-4 Login 5-2, 5-17 Logoff Character Network Port 5-26 Serial Por[...]

Index-5 Index Notify Upon Clear Invalid Access Lockout Alarm 7-7 Over T emperature Alarms 7-3 Ping No Answer Alarm 7-5 NTP Enable 5-7 NTP Timeout 5-7 Primary NTP Address 5-7 Secondary NTP Address 5-7 NTP Enable 5-7 NTP Timeout 5-7 O Operation 9-1 to 9-7 Organizational Name 14-2 Organizational Unit 14-2 Outbound Access 5-39 Outbound SSH 10-3, 17-8 O[...]

Index-6 Index Privacy SNMPv3 5-33 Product Information 17-4 Product Status Screen 8-1 Public Key 10-1 Q Quick Start Procedure 3-1 to 3-4 R RADIUS Accounting Port 5-40 Authentication Port 5-40 Debug 5-40 Dictionary Support 5-41 to 5-42 Enable 5-40 Fallback Local 5-40 Fallback T imer 5-40 Primary Address 5-40 Primary Secret Word 5-40 Retries 5-40 Seco[...]

Index-7 Index SNMP Adding Users 13-2 Circuit Status 13-4 Configuration 12-1 Configuration Via 13-1 to 13-5 Controlling Circuit Groups 13-3 Controlling Circuits 13-3 Deleting Users 13-2 Modifying Users 13-2 Sending T raps 13-5 SNMP T raps 12-1 to 12-2 T esting 12-2 Unit Environment Status 13-4 Unit Operation Via 13-1 to 13-5 Viewing Users 13-2 View [...]

Index-8 Index T T ACAC S Access Level 5-38 Authentication Port 5-38 Configuration 5-38 Default User Access 5-38 Enable 5-38 Fallback Local 5-38 Fallback T imer 5-38 Plug Access 5-39 Plug Group Access 5-39 Primary Address 5-38 Secondary Address 5-38 Secret Word 5-38 Service Access 5-39 T ech Support Apx -3 T elnet Access 5-18 Outbound 5-28, 17-7 T e[...]