Thank you for selecting the
power distribution unit (
reliable, maintenance-free service.
development of high-performance electrical power conversion and
control products. We hope that you will find this product a valuable,
convenient addition to your system.
Please read this manual!
operating instructions that will help you get the most from your
MasterSwitch
Start Manual
detailed information on installing and setting up the unit.
VM power distribution unit. See the
includedwithMasterSwitchVMandonthisCDfor more
APC
MasterSwitch
PDU
). It has been designed for many years of
APC
is dedicated to the
It provides important configuration and
VM
(vertical-mount)
Installation and Quick
Contents
MasterSwitch VM
Introduction.................................
ProductDescription .............................1
—
1
—
VM
4
—
—
2
—
4
9
—
9
—
9
—
9
MasterSwitch
MasterSwitch VM Controller
—
LEDs
OperatingMasterSwitchVM.......................4
Initial setup
Configuring outlets for operation
Current sensing
Overload Outlet Restrictions
Overload Audible Alarm
Low Current Threshold
3
ManagingMasterSwitchVM ....................
ManagementInterfaces .........................10
Overview
Web interface
Control Console interface
SNMP interface
Auto-configuring MasterSwitch
—
10
—
10
—
12
—
11
VM
—
12
1
10
Password-ProtectedAccounts.....................13
Overview
Account access to outlets and menu items
—
13
—
13
MenuItems.................................
Outlets .....................................14
Control actions
Synchronization set configuration
MasterSwitch
Unit Configuration
Outlet Configuration
Outlet Configuration: Links
VM
—
14
—
15
..............................16
—
16
—
17
—
17
14
MasterSwitch VM User’s Guideiii
Contents
EventLog....................................18
18
19
—
—
—
—
26
26
20
21
—
—
—
—
18
20
—
25
—
21
—
25
25
23
—
—
—
—
24
19
22
21
—
—
—
19
Event Log
Accessing the Event Log using the FTP interface
Retrieving the Event Log using the FTP interface
Viewing the Event Log
Deleting an Event Log in the FTP interface
Network.....................................20
TCP/IP
TFTP/FTP
Telnet/Web
SNMP
SNMP: Access Control
SNMP: Trap Receiver
System......................................23
User Manager
Outlet User Manager
Identification
Date/Time
File Transfer
Tools
Links
Help........................................27
Overview
Contents
Interactive Assistant
About Card
—
—
27
27
—
27
—
27
Security....................................
SecurityFeatures ..............................28
Planning and implementing security features
—
Port assignments
User names, passwords, community names
Authentication................................29
Authentication versus encryption
authentication (Web interface)—29
MD5
Summary of access methods
28
—
30
—
29
—
—
28
28
28
MasterSwitch VM User’s Guideiv
Contents
ProductInformation ..........................
WarrantyInformation ..........................31
—
—
33
—
31
—
31
—
31
32
—
AP9221X166
33
)—34
—
35
Limited warranty
Obtaining service
Warranty limitations
Provides individually managed
power control to outlets.
Outlet status
#
Outlet labelIdentifies the outlet by number.
$
Overcurrent alarm silence
%
button
Overcurrent audible alarm
&
Overcurrent alarm
'
Modular ports (
(
LED
RJ11-6
LED
)
Indicates the state of the switched
outlet.
Silences the audible alarm.
Alertsyoutoanoverloadonthe
MasterSwitchVMunit.
Indicatesanoverloadonthe
MasterSwitchVMunit.
Connects a unit to the controller or to
another unit.
Continued on next page
MasterSwitch VM User’s Guide1
Introduction
Product Description continued
MasterSwitch VM
Controller
No.FeatureDescription
!
"
#
$
%
&
'
LED
Status
Configuration Port
Modular port (
Reset Button
10
Base-Tnetwork
port
Status
RX/TX LED
Link-
RJ11
LED
Indicates the status of the connection
with the unit.
Connects the unit to a serial port on a
device running the appropriate
terminal emulation software in order
to access the Control Console
Connects the unit to an Ethernet
)
for configuration or remote access
control.
Re-initializes the MasterSwitch
network interface without affecting
outlet state.
Connects the unit to an Ethernet
for configuration or remote access
control.
Indicates the status of the
management card.
Indicates the status of the Ethernet
LAN
connection.
.
LAN
VM
LAN
Continued on next page
MasterSwitch VM User’s Guide2
Introduction
Product Description continued
LED
s
LEDStatusDescription
MasterSwitch
Outlets
page 1
MasterSwitch
Overcurrent Alarm
page 1
MasterSwitch
Controller
Front Status
page 2
MasterSwitch
Controller
Rear Status
page 2
VM
, Item 3
VM
, Item 7
VM
, Item 1
VM
, Item 6
OnThe Outlet is on.
OffThe Outlet is off.
OffThe unit has no power.
Green
Flashing
green
Solid red
OnThe Controller has power.
OffThe Controller has no power.
OffThe unit has no power.
Solid greenThe unit has valid network settings.
Flashing
green
Solid red
The unit is operating under normal load
conditions.
The unit is approaching its maximum load.
(Warning threshold exceeded)
The unit has exceeded its maximum load.
(>
100
%)
The unit does not have valid network
settings.
A hardware failure has been detected in the
unit.
MasterSwitch
Controller Rear
Link-
RX/TX
page 2
, Item 7
VM
Blinking
Red (Slow)
Off
Flashing
Green
The unit is making
The device which connects the unit to the
network (whether a router, hub, or
concentrator) is off or not operating
correctly.
The unit is receiving data packets from the
network.
BOOTP
requests.
MasterSwitch VM User’s Guide3
Introduction
Operating MasterSwitch VM
Initial setup
You must configure the network settings of MasterSwitch
can operate on a network. The required settings are:
IP
•
address of MasterSwitch
•Subnet Mask
IP
address of the default gateway
•
Note: If a default gateway is not present, enter an
of a computer on the same subnet that is always active.
For instructions on configuring the MasterSwitch
see the installation manual included with the unit and on the
you have configured MasterSwitch
required. The remaining MasterSwitch
at the factory. However, you may want to customize these properties for
your application. See
changing MasterSwitch
VM
VM
, no further configuration is
VM
properties are pre-configured
Menu Items on page 14
VM
properties.
VM
before it
IP
VM
network settings,
CD
for more details on
address
. After
Configuring
outlets for
operation
MasterSwitch
VM
allows you to configure an outlet for on-demand
operation. On-demand operation consists of On, Off, and Reboot Outlet
Control Actions. The sections that follow describe each operation that
VM
you can configure for your MasterSwitch
unit.
Immediate On. This action immediately turns an outlet on.
Immediate Off. This action immediately turns an outlet off.
Immediate Reboot. This action immediately turns an outlet off, and
then turns it back on after the outlet’s Reboot Duration expires.
Outlet is on
Immediate Reboot
command is issued
Outlet is turned off
Cancel command
is issued
Reboot Duration
expires
Outlet remains
off
Outlet is turned
on
MasterSwitch VM User’s Guide4
Introduction
Operating MasterSwitch VM continued
Configuring
outlets for
operation,
continued
Delayed On. This action turns on an outlet according to its Power On
Delay.
Outlet is off
Delayed On
command is issued
Power On Delay
Never
Cancel command
is issued
Outlet remains
off
Delay
Power On Delay
expires
Outlet is turned
on
Delayed Off. This action turns off an outlet according to its Power Off
Delay.
command is issued
Power Off Delay
Never
Outlet is on
Delayed Off
Cancel command
is issued
Outlet remains
on
Delay
Power Off Delay
expires
Outlet is turned
off
Continued on next page
MasterSwitch VM User’s Guide5
Introduction
Operating MasterSwitch VM continued
Configuring
outlets for
operation,
continued
Delayed Reboot. This action turns an outlet off after the outlet’s Power
Off Delay expires. Once the outlet’s Reboot Duration expires, the outlet
is turned on.
Outlet is on
Delayed Reboot
command is issued
Power Off Delay
Never
Cancel command
is issued
Outlet remains
on
Delay
Power Off Delay
expires
Outlet is turned off
Cancel
command is
issued
Outlet
remains off
Continued on next page
Reboot
Duration
expires
Outlet is
turned ons
MasterSwitch VM User’s Guide6
Introduction
Operating MasterSwitch VM continued
Configuring
outlets for
operation,
continued
Sequenced Reboot. This action is available only through Master Outlet
Control. Initiating this action immediately powers off all outlets. Each
outlet will wait the longest Reboot Duration time (in seconds) in the set
VM
of outlets on a MasterSwitch
unit plus its own Power On Delay.
When these two delays expire, the outlet will be turned on.
Outlet is on
Sequenced Reboot†
command is issued
Outlet is turned off
Longest
Duration
Power On Delay
Reboot
expires
Never
Cancel command
is issued
Outlet
remains off
Delay
Power On Delay
expires
Outlet is
turned ons
Continued on next page
MasterSwitch VM User’s Guide7
Introduction
Operating MasterSwitch VM continued
Configuring
outlets for
operation,
continued
Delayed Sequenced Reboot. This action is available only through
Master Outlet Control. Initiating this action turns off outlets after their
Power Off Delay expires. Once all the outlets on the unit are turned off,
each outlet will wait the longest Reboot Duration time in the set of
outlets plus its own Power On Delay. When these two delays expire, the
outlet will be turned on.
Outlet is on
Delayed Sequenced
Reboot†
Never
command
is issued
Power Off Delay
Cancel command
is issued
Delay
Power Off Delay
expires
Outlet
remains on
Never
Outlet is
turned offs
Longest
Duration
Power On Delay
Reboot
expires
Cancel command
is issued
Outlet
remains off
Delay
Power On
Delay
expires
Outlet is
turned ons
MasterSwitch VM User’s Guide8
Introduction
Operating MasterSwitch VM continued
VM
Current sensing
Each MasterSwitch
the total current being used by the unit and devices connected to the
unit. The current measurement is displayed on the first screen that
appears when you log on and is used to generate alarms that you
define. The values displayed are:
•The aggregate current
•A percentage of the branch circuit rating, which is derived using
the following formula:
In the Unit Configuration section of the MasterSwitch
define Overload Outlet Restrictions, conditions that generate an
Overload Audible Alarm, and the Low Current Threshold. (See
Configuration on page 16
the menu.)
unit is equipped with a sensor that measures
for a detailed description of the items listed in
VM
menu, you can
Unit
Overload Outlet
Restrictions
Overload Audible
Alarm
Do not exceed the maximum voltage and current ratings listed
on the label on the back of the unit.
Outlet Restrictions prevents users from turning on outlets when the
current sensor detects an overload condition. The following restrictions
can be set for each unit:
None
On Warning
On Overload
You can customize the Overload Audible Alarm so that it never sounds,
it sounds when the load exceeds
exceeds its Overload Warning Threshold. The value for the Overload
Warning Threshold can be set at a value that you determine based on
the needs of your system. If the Overload Audible Alarm is set to On
Overload Warning and the load exceeds the Overload Warning
Threshold, the Overload Warning
sounds.
Outlets always turn on.
Outlets do not turn on when the Overload Warning
Threshold has been exceeded.
Outlets do not turn on when the full load percentage
100
exceeds
%.
100
%, or it sounds when the load
LED
flashes green and the alarm
Low Current
Threshold
MasterSwitch VM User’s Guide9
In addition to monitoring for overload conditions, the current sensor
monitors for low-current conditions. If current drops below the Low
Current Threshold that you have defined, the unit generates an
trap to alert the host computer.
Note
:This item is available only in the
SNMP
interface.
SNMP
MasterSwitch VM
Managing MasterSwitch VM
Management Interfaces
Overview
Web in terfac e
After you have configured MasterSwitch
settings (see
remotely through its Web, Control Console, and
can also manage locally on the Control Console through a serial
connection. Only one user at a time can access MasterSwitch
Serial connections (using a terminal emulator) have precedence over
Telnet users, and Telnet users have precedence over Web users.
To access and log on to the MasterSwitch
perform these steps:
URL
In the
Initial setup on page 4
Location field, do one of the following:
), you can manage MasterSwitch
VM
with the proper network
SNMP
VM
unit’s Web interface
interfaces.You
VM
VM
.
•If the MasterSwitch
value of 80, type http:// followed by the MasterSwitch
unit’sIPaddress. The following example shows a typical IP
address:
http://170.241.17.51
•If the MasterSwitch
80
default of
MasterSwitch
Web Port value (
•You can also enter the
entry for the MasterSwitch
Respond to the username and password prompts. The default
Administrator user name and password are both apc, all lowercase.
Note:
Note:
You can change the user name, password, and time-out values
in the System menu. See
User Manager on page 24
Some Web interface features (data verification,
Assistant, and
JavaScript and/or Java. In order for
you must also have cookies enabled on your Web browser.
, enter the SystemIPaddress (the IP address of the
http://170.241.17.51:8000
http://MasterSwitchVM25
VM
unit’s Web port is set to the default
VM
Web port is set to a value other than the
VM
unit) followed by a colon and the configured
8000
in the following example):
DNS
name—this requires a
VM
unit. See the example below:
User Manager on page 23
for more information.
MD5
authentication) require that you enable
MD5
to function properly
DNS
and
APC
VM
server
Outlet
Interactive
Continued on next page
MasterSwitch VM User’s Guide10
Managing MasterSwitch VM
Management Interfaces continued
Control Console
interface
In addition to using the Web, you can also manage MasterSwitch
VM
through the Control Console by one of the following modes of access:
•Telnet, for remote management
•A serial connection, for local management.
VM
Telnet . To access the MasterSwitch
unit’s Control Console using
Te ln e t:
1. Start a Telnet session and choose Remote System from the
Connect pull-down menu.
VM
2. Type in the IP address of the MasterSwitch
unit.
3. Click on the Connect button.
Serial connection. To access the Control Console using a serial
connection:
1. Use the supplied configuration cable (
0024
C) to connect your serial port to the configuration port on
VM
the MasterSwitch
Controller.
APC
part number
940-
2. Set the terminal port for the following communication settings:
ItemSetting
Baud Rate
2400
Data Bits
Stop Bits
ParityNone
HandshakingNone
Local EchoOff
Terminal Type
8
1
ANSI(VT100
)
Logging on. The procedure for logging on to the Control Console is the
same for both Telnet and a serial connection; respond to the user name
and password prompts.The default values of Administrator name and
password are both apc, all lowercase. You can change the username,
password and time-out values through the System menu. See
Manager on page 23
.
User
Structure. All menus in the Control Console list items by number and
NTER
name. To select an item, type in the number and press E
menus that configure values, always use the
Accept Changes
.For
option to
save any changes you have made.
Continued on next page
MasterSwitch VM User’s Guide11
Managing MasterSwitch VM
Management Interfaces continued
SNMP interface
Auto-configuring
MasterSwitch
VM
VM
MasterSwitch
are configurable through
manage MasterSwitch
CD
on the
Unit properties, outlet properties, and user accounts can be downloaded
to MasterSwitch
configuring your MasterSwitch
the apcConfigUtility directory on the
information on the I2C utility on page 15 of the Management CardAddendum.pdf locatedontheCD.
.
fully supports
SNMP
VM
VM
from a configuration file. For details on auto-
SNMP
. For instructions on how to use
,seetheMibguide.pdf file in the Snmp folder
VM
—all unit and outlet properties
SNMP
unit(s), open the README.txt file in
CD
. You can also find additional
to
MasterSwitch VM User’s Guide12
Managing MasterSwitch VM
Password-Protected Accounts
VM
Overview
MasterSwitch
that allow you to control access to the MasterSwitch
of account provides a different level of access to the management
menus. There is one Administrator account, one Device Manager
account, and up to
provides three types of password-protected accounts
16
Outlet User accounts.
VM
unit. Each type
Account access to
outlets and menu
items
Administrator and Device Manager accounts have access to all outlets.
Each Outlet User only has access to the outlets assigned to his or her
account. The Administrator account can configure and manage all other
accounts. For instructions on configuring Device Manager and Outlet
User accounts, see
on page 24
.
MasterSwitch VM
Main Menu Items
OutletsYesYesYes
MasterSwitch
Event LogYesYesNo
NetworkYesNoNo
SystemYesNoNo
LogoutYesYesYes
HelpYesYesYes
LinksYesYesYes
User Manager on page 23
Administrator
VM
YesYesNo
Account Type
Outlet User Manager
and
Device
Manager
Outlet
User
MasterSwitch VM User’s Guide13
MasterSwitch VM
Menu Items
Outlets
Control actions
Outlet Control Actions may be performed on individual outlets (by
Individual Outlet Control) or on all accessible outlets as a group (by
Master Outlet Control). A Control Action can only be applied to an outlet
that is not executing a command. If there is a command pending, the
State will be displayed orange.
ItemDefinition
Immediate OnTurns outlet on.
Immediate OffTurns outlet off.
Turns off the outlet immediately, waits the outlet’s Reboot
Immediate Reboot
Delayed On
Delayed Off
Sequenced
†
Reboot
Duration time, and turns the outlet back on. For further
explanation, see the Immediate Reboot sequence diagram on
page 4
Turns on the outlet according to its Power On Delay. For further
explanation, see the Delayed On sequence diagram on page 5
Turns off the outlet according to its Power Off Delay. For further
explanation, see the Delayed Off sequence diagram on page 5
Immediately powers off all outlets. Each outlet waits the longest
Reboot Duration time plus its own Power On Delay and then
turns on.
Note
.
The longest Reboot Duration is the longest Reboot
:
Duration (in seconds) in the set of outlets.
.
.
Turns an outlet off after the outlet’s Power Off Delay expires.
Delayed Reboot
Delayed
Sequenced
†
Reboot
Cancel
Applies only when using Master Outlet Control
†
Once the outlet’s Reboot Duration expires, the outlet is turned
on. For further explanation, see the Delayed Reboot sequence
diagram on
Turns off each outlet after its Power Off Delay. Once the outlets
are turned off, each outlet waits the longest Reboot Duration
time plus its own Power On Delay. When this delay expires, the
outlet turns on.
Note
Cancel all pending commands for the outlet(s).
Note
page 7
The longest Reboot Duration is the longest Reboot
:
Duration (in seconds) in the set of outlets.
Outlet State is displayed in orange with an asterisk (*)
:
whenacommandispendingfortheoutlet(s).
.
Continued on next page
MasterSwitch VM User’s Guide14
Menu Items
Outlets continued
Synchronized set
configuration
Outlets that are members of a synchronization set will all execute the
16
same control action simultaneously (within
configuration where multiple redundant power cords are being used in a
daisy-chain configuration, this feature permits synchronized switching
across units.
When you configure a synchronization set, you can assign an outlet to
only one set, and all the outlets in a specified set assume the
characteristics of the lowest numbered outlet. If you make changes to
any of the outlets in a given set, all of the outlets will take on the new
characteristics.
ItemDefinition
Set NumberIdentifies a specific set of outlets.
Member OutletsIdentifies the outlets assigned to a given set.
Note:In the Outlets menu, you can identify the synchronization set to
which an outlet belongs by the number in brackets. For
example:
(unit #: outlet # [synchronization set #])
milliseconds). In a
MasterSwitch VM User’s Guide15
Menu Items
MasterSwitch
Unit Configuration
VM
ItemDefinition
Name
Cold Start Delay
Overload Warning
Threshold
Overload Outlet
Restrictions
Name of the MasterSwitchVMunit (23characters
maximum).
ThetimethatMasterSwitch
to outlets, once theACpower is applied to the MasterSwitch
VM
unit.
The percentage of a full load that will trigger an overload
warning. An overload warning will cause the overcurrent
alarm
LED
to flash green and sound the audible alarm (if the
overload audible alarm property is configured to do so).
The overload conditions, if any, that will prevent outlets from
turning on. The following actions are available under this
item:
None
—Always allow outlets to be turned on.
On Warning
Overload Warning Threshold has been exceeded.
On Overload
theloadexceeds
—Do not allow outlets to be turned on when the
—Do not allow outlets to be turned on when
100
%.
VM
will delay in applying power
Overload Audible
Alarm
Low Current
Threshold
Reboot Duration
The overload conditions, if any, that will cause the audible
alarm to sound. Once the alarm starts sounding, you can
use the mute button to turn off the alarm or you can clear the
alarm; selecting Disabled will not clear the alarm. The
following actions are available under this item:
Disabled
On Overload
On Overload Warning
Note: When you change settings, the new setting is not
The threshold for load current below which an SNMP trap is
generated..
Longest reboot duration in the set of accessible outlets. You
can change this value only by modifying the reboot duration
of accessible outlets. Used by Sequenced Reboot and
Delayed Sequenced Reboot.
—Disables the audible alarm.
—Sounds the audible alarm when the load
exceeds
load exceeds the Overload Warning Threshold.
100
%.
—Sounds the audible alarm when the
used until the next time the event occurs. For
example, if the overload warning Threshold has
been exceeded and the setting is then changed from
On Overload to On Warning, the audible alarm will
not be activated.
Continued on next page
MasterSwitch VM User’s Guide16
Menu Items
MasterSwitch VM continued
Outlet
Configuration
Outlet
Configuration:
Links
.
ItemDefinition
Identifies each outlet, the unit to which the outlet is
Outlet
NameIdentifies each outlet (
Power On Delay
Power Off Delay
Reboot Duration
.
connected, and the synchronization set to which it belongs.
This information appears in the following form: unit #:outlet #
[synchronization set #]
The time that the outlet waits before turning on after the
command is issued. Used by Delayed On, Sequenced
Reboot, and Delayed Sequenced Reboot.
The time that the outlet waits before turning off after the
command is issued. Used by Delayed Off, Delayed Reboot,
and Delayed Sequenced Reboot.
The time that the outlet will remain off during a reboot. Used
by Immediate Reboot and Delayed Reboot.
ItemDefinition
Identifies each outlet, the unit to which the outlet is
Outlet
connected, and the synchronization set to which it belongs.
This information appears in the following form: unit #:outlet #
[synchronization set #]
23
characters maximum).
NameIdentifies the outlet (
LinkDefines
HTTP
23
characters maximum).
links to relevant Web sites.
MasterSwitch VM User’s Guide17
Menu Items
Event Log
Event Log
Accessing the
Event Log using
the FTP interface
The Event Log displays the MasterSwitch
VM
unit’slast
300
events. You
can view the Event Log by selecting the Event Log menu in the Web
TRL
interface or by pressing C
ItemDescription
DateDate the event occurred (
TimeTime the event occurred (
EventDescription of the event.
YoucanretrievetheEventLogusingclientside
MS-DOS
an
your MasterSwitch
prompt, type ftp card-ip where card-ip is theIPaddress of
VM
unit.) After logging into the unit's
+Lin the Control Console.
DD/MM/YYYY
HH:MM:SS
)
FTP
.(Forexample,from
)
FTP
server, type
dir. You will see a listing similar to the following:
To retrieve the Event Log, type get event.txt. The MasterSwitch
unit will transmit the Event Log to your specified drive. The unit ensures
300
that at least the last
similar to the following:
ftp>get event.txt
200 Command okay.
150 Opening data connection for event.txt
226 Closing data connection.
ftp: 3694 bytes received in 0.11Seconds
33.58Kbytes/sec.
ftp>
After retrieving the event.txt file, you can view it using a spreadsheet.
TAB
The file is
Note:The MasterSwitch
representation when logging and displaying event data.
However, you may need to select a four-digit date format in the
spreadsheet to display all four digits.
The event.txt file includes the following information not directly shown
in the Web and Control Console Event Log screens:
•The version of the event.txt file format (first field).
•The Date and Time the event.txt file was retrieved.
•The Name, Contact, Location, and
agement card.
•An unique Event Code for every type of event.
delimited so it will format automatically into columns.
events will be transmitted. You will see a list
VM
unit always uses four-digit year
IP
address of the unit’s man-
VM
Deleting an Event
Log in the FTP
interface
MasterSwitch VM User’s Guide19
To delete the Event Log, type del event.txt. No confirmation is
required. A new event.txt file is created immediately in response to the
Deleted Log event. You will see a list similar to the following:
ftp>del event.txt
250 Requested file action okay, completed.
ftp>
Menu Items
Network
TCP/IP
ItemDescription
System IPTheIPaddress of the unit
Subnet MaskThe network subnet mask
Default GatewayThe local default gateway (router address)
TFTP/FTP
BOOTP
Enables or disables
TCP/IP
settings at startup.
ItemDefinition
TFTP Client
Remote Server
FTP Client
Remote Server
User Name
Password
FTP Server
AccessEnable or Disable
Port
IP
IP
The network address of the
used for downloads.
The network address of the
used for downloads.
The user name for access to the
server.
Thepasswordforaccesstothe
server.
The
TCP/IP
for the Management Card is located.
Default
port on which the
21
:
port
BOOTP
FTP
server access.
requests for
TFTP
server
FTP
server
FTP
FTP
FTP
server
Continued on next page
MasterSwitch VM User’s Guide20
Menu Items
Network continued
Telnet/Web
Telnet
AccessEnables or Disables Telnet Access.
ItemDefinition
SNMP
SNMP: Access
Control
TCP/IP
The
Port
Web
AccessEnables or Disables Web Access.
Port
.
unit is located.
Default:
TCP/IP
The
unit is located.
Default
port where the Telnet server for the MasterSwitch
23
port
port where the Web server for the MasterSwitch
80
port
:
ItemDefinition
SNMP
AccessEnables or disables
Access ControlControls access to each of the four
Trap ReceiverDefines the
NMS
SNMP
access.
s(upto4) to which traps are sent.
ItemDefinition
NMS
Community
Name
The password that the
for
SNMP
access to MasterSwitchVM. The allowed access type is
defined by the Access Type option (
(identified by the
15
characters maximum).
SNMP
NMS IP
VM
VM
channels.
option) must use
NMSorNMSs
NMS
allows only the
to have access.
allows access for any
allows access for any
allows access for any
NMS
NMS
allows access for any
(identified by the
specified. You specify the value as a
or as anIPaddress filter for multiple
with the specificIPaddress of
NMS
NMS
NMS
NMS IP
159.215.12
on the
159.215
on the
on the 159 segment.
NMS
option) has Write
segment.
.
IP
NMS IP
Access
Type
Limits access to the
specificIPaddress for one
addresses. For example:
•
159.215.12.1
159.215.12.1
•
159.215.12.255
segment.
•
159.215.255.255
•
159.255.255.255
•
0.0.0.0or255.255.255.255
Defines whether an
access (can GETs and SETs), has Read access (can only GETs), or is
Disabled (cannot use GETs or SETs).
Continued on next page
MasterSwitch VM User’s Guide21
Menu Items
Network continued
SNMP: Trap
Receiver
ItemDefinition
Community Name
The password the unit uses when it sends
traps to the
NMS IP
NMS
identified by the Receiver
option (15character maximum).
Receiver
Trap Generation
Authentication Traps
NMS IP
TheIPaddress of the
receive traps sent by the unit.
Note
To send no traps to any
:
theTrapReceiver
Enables or disables the ability of the unit
to send traps to the
Receiver
Enables or disables the ability of the unit
to send authentication traps to the
identified by the Receiver
NMS IP
NMS
NMS
option.
that will
NMS
,set
IPto0.0.0.0
identified by the
NMS IP
.
NMS
.
MasterSwitch VM User’s Guide22
Menu Items
System
User Manager
The properties of the Administrator and Device Manager are configured
under the User Manager section. The Administrator has unrestricted
access, but the Device Manager can configure only the MasterSwitch
VM unit; the Device Manager cannot configure Network and System
items.
ItemDefinition
How long a user can be inactive before being logged off
Auto Logout
Authentication
Administrator
User Name
Password
automatically.
Default
A setting of Basic causes the Web Interface to use standard
HTTP 1.1
Web Interface to use an
order for
your browser.
Default
User name (
Default
Password for
maximum).
Default
3
minutes.
:
login (base64encoded passwords);
MD5
-based authentication login. In
MD5
to function properly, you must enable cookies in
Basic
:
10
characters maximum).
:apc
:
apc
HTTP 1.1
authentication only (10characters
MD5
causes the
Authentication
Phrase
Device Manager User
User Name
Password
Authentication
Phrase
Authentication phrase (for
to 32
characters.
Default
User name (10characters maximum).
Default
Password only for
maximum).
Default
Authentication phrase for
32
Default
admin user phrase
:
device
:
apc
:
characters.
device user phrase
:
HTTP 1.1
MD5
only). The phrase must be
authentication (10characters
MD5 only
. The phrase must be
Continued on next page
15
15 to
MasterSwitch VM User’s Guide23
Menu Items
System continued
Outlet User
Manager
You can create up to
MasterSwitch
name, password, description, and an outlet access list, as described
below.
CurrentOutletUserList.The list shows the existing outlet user
accounts and the outlets to which they have access. To edit an existing
account, click on the underlined user name. To add a user, select
New User
Configure the Outlet User Account Settings. Once you have
selected an Outlet User Account, you can configure or delete an
account. The following table lists and defines the configurable settings
for Outlet User Manager.
16
independent Outlet User accounts for the
VM
unit. Each Outlet User is assigned a unique user
.
ItemDefinition
Add
Outlet user name for both
User Name
Password
Authentication Phrase
User Description
Account Status
MasterSwitch
Access
Delete UserDelets an outlet’s account.
VM
Outlet
authentication (10characters maximum).
A User Name in orange indicates the
:
Note
user account has been disabled.
Outlet user password for
authentication (10characters maximum).
Outlet user authentication phrase for
authentication. The phrase must be
characters.
Identification/description of the outlet user (
characters maximum).
Enables, disables, or deletes an outlet’s
account.
A disabled account prevents the Outlet
:
Note
User of the account from logging on.
TheUserNameappearsinorangeif
the account has been disabled.
Selects the outlets to which users have
access.
HTTP 1.1
HTTP 1.1
and
MD5
15–32
MD5
30
Continued on next page
MasterSwitch VM User’s Guide24
Menu Items
System continued
Identification
ItemDefinition
Date/Time
File Transfer
Name
Contact
Location
The system name used to identify the device. This name will be
in the
in the
OID
SNMP
SNMP
in the
agent.
agent.
used for the sysName
The contact or owner of the device. This will be used for the
sysContact
The physical location of the device. This will be used for the
sysLocation
OID
OID
ItemDefinition
DateThedateforthesystemintheformof:
TimeThe time for the system in the form of:
.
ItemDescription
Describe the Current Transfer Settings
The IP
address of the remote
Remote
TFTP
Server
IP
in the Network menu’s
TFTP
Remote Server
:
SNMP
agent.
MM/DD/YY
HH:MM:SS(24
TFTP/FTP
IP
.
TFTP
server defined
settings.
hour time).
The IP
Remote
Remote
Remote
Configure the Name of the File to Download
FilenameThe name of the file to be downloaded
Initiate the File Transfer
Result of Last File TransferDisplays the result of the last file transfer.
Initiate File Transfer Via
FTP
FTP
FTP
IP
Server
Server User Name
Server Password
in the Network menu’s
FTP
Theusernameofthe
Network menu’s
FTP Client
Thepasswordofthe
Network menu’s
FTP Client
Allowsyoutochoosewhetherthefilewillbe
transferred using
address of the remote
Remote Server
:
TFTP/FTP
User Name
:
TFTP/FTP
Password
:
TFTPorFTP
IP
FTP
FTP
FTP
server defined
TFTP/FTP
settings.
server defined in the
settings.
server defined in the
settings.
MasterSwitch VM User’s Guide25
Menu Items
System continued
Tools
Links
.
ItemDefinition
No ActionCauses no action
Reboot Card
Reset Card to Defaults
Reset Card to Defaults
Except
TCP/IP
Restarts the management card operation, but
does not affect MasterSwitch
Restores all configuration settings, including
user accounts, to their default.
This will reset the
Warning
Restores all configuration settings (except
TCP/IP
:
and enable
) to their defaults.
ItemDefinition
Configure each User Link (up to 3)
NameThe link name that will appear on the menu bar.
URL
HTTP
The
mypage.com.
link in
URL
form: http://mysite.com/
BOOTP
VM
outlet states.
TCP/IP
!
settings
Configure the APC Links
NameViewthenameofan
URL
Define the URL of each
APC
link.
APC
link.
Note:The hyperlinks are defined and used only in the MasterSwitch
VM
Web interface.
MasterSwitch VM User’s Guide26
Menu Items
Help
Overview
Contents
Interactive
Assistant
About Card
MasterSwitch provides help menus on each interface. On the Web
interface, the help menu is located on the lower, left side of the screen
?
or as a button (
to access the Help menu.
The Contents screen provides an overview of many parameters
reported and configured through the Web and Control Console
interfaces. To access the internal help pages, select Help in the
navigation frame in the Web interface, or click the
black title bars in the Control Console.
Interactive Assistant brings
you select Interactive Assistant, the MasterSwitch VM unit transmits
information about the Management Card to
server. The server informs you if a newer version of firmware is
available and links you to extensive context-sensitive help.
About Card provides the following information about the MasterSwitch
VM
unit: the serial number, the hardware revision, and the date and time
that the version of
) on the black title bars. In the Control Console, type ?
?
at the end of the
APC
Customer Service to the Web. When
APC OS
APC’s
was loaded.
Interactive Assistant
MasterSwitch VM User’s Guide27
MasterSwitch VM
Security
Security Features
Planning and
implementing
security features
Port assignments
User names,
passwords,
community names
As a network device that passes information across the network, the
MasterSwitch unit is subject to the same exposure as other devices on
the network.
Use the information in this section to plan and implement the security
features appropriate for your environment.
FTP
If a Telnet,
specify the port when using the client interface, such as a Web browser.
The non-standard port address becomes an extra “password,” hiding
the server to provide an additional level of security. The
which the Telnet,
standard “well known ports” for the protocols.To hide the interfaces, use
any port numbers from
All user names, passwords, and community names for
transferred over the network as plain text. A user who is capable of
monitoring the network traffic can determine the user names and
passwords required to log in to the Administrator, Device Manager, and
Outlet User accounts of a MasterSwitch unit’s Control Console or Web
interface. This security limitation of the protocols affects any device
using Telnet, a Web server, or an
, or Web server uses a non-standard port, a user must
TCP
ports for
FTP
, and Web servers listen are initially set at the
5000 to 65535
.
SNMP
SNMP
version 1 agent.
are
MasterSwitch VM User’s Guide28
Security
Authentication
Authentication
versus encryption
MD5
authentication
(Web interface)
The MasterSwitch unit controls access by providing basic authentication
IP
through user names, passwords, and
type of encryption. These basic security features are sufficient for most
environments, in which sensitive data is not being transferred. To
ensure that data and communication between the MasterSwitch unit
and the client interfaces, such as Telnet and the Web browser, cannot
be captured, you can provide a greater level of security by enabling
MD5
authentication (described below) for the Web interface.
MD5
The Web interface option for
of access security than the basic
MD5
scheme is similar to
MD5
Enabling
•The Web server requests a user name and a password phrase
(distinct from the password). The user name and password
phrase are not transmitted over the network, as they are in
basic authentication. Instead, a Java login applet combines the
user name, password phrase, and a unique session challenge
number to calculate an
ber is returned to the server to verify that the user has the correct login information;
login information.
•In addition to the login authentication, each form post for configuration or control operations is authenticated with a unique challenge and hash response.
•After the authentication login, subsequent page access is
restricted by
must have cookies enabled in your browser.) Pages are transmitted in their plain-text form, with no encryption.
implements the following security features:
CHAP
IP
addresses and a hidden session cookie. (You
authentication enables a higher level
HTTP
and
MD5
MD5
addresses, but provides no
authentication scheme. The
PAP
remote access protocols.
hash number. Only the hash num-
authentication does not reveal the
MD5
If you use
interface, disable the less secure interfaces, including Telnet,
SNMP
.For
access and trap facilities are still available.
Although
than the plain-text access methods, complete protection from security
breaches is almost impossible to achieve. Well-configured firewalls are
an essential element in an overall security scheme. For additional
information on
Web site of the Internet Engineering Task Force. For
document #
MasterSwitch VM User’s Guide29
authentication, which is available only for the Web
SNMP
, you can disable write-only access so that read
MD5
authentication provides a much higher level of security
1994
MD5
authentication, see
.
RFC
document #
Continued on next page
1321
CHAP
FTP
at the
,see
,and
RFC
Security
Authentication continued
Summary of access
methods
The following table describes each interface and its access methods.
InterfaceSecurity AccessNotes
Serial Control
Console
TelnetControl
Console
SNMP
FTP Server
Web Server
Access is by user name and
password.
These methods are available:
• User name and password
• Selectable server port
• Server Enable/Disable
These methods are available:
• Community Name
• NMS IP
• Agent Enable/Disable
• Four access communities with
read/write/disable capability
These methods are available:
• User name and password
• Selectable server port
• Server Enable/Disable
These methods are available:
• User name and password
• Selectable server port
• Server Enable/Disable
•
MD5
filters
Authentication option
Always enabled.
The user name and password
are transmitted as plain text.
NMS IP
from either one IP address or
from multiple IP addresses.
You specify multiple NMSs not
by their literal IP addresses but
intheformatofan
See
this page
Only the Administrator account
has access.
In basic
mode, the user name and
password are transmitted base64 encoded (with no
encryption).
mode uses a user name and
password phrase.
filters allow access
NMS IP
SNMP: Access Control on
for more information.
HTTP
authentication
MD5
authentication
filter.
MasterSwitch VM User’s Guide30
MasterSwitch VM
Product Information
Warranty Information
Limited warranty
Obtaining service
War ranty
limitations
APC
American Power Conversion (
free from defects in materials and workmanship for a period of two
years from the date of purchase. Its obligation under this warranty is
limited to repairing or replacing, at its own sole option, any such
defective products. This warranty does not apply to equipment which
has been damaged by accident, negligence, or misapplication or has
been altered or modified in any way. This warranty applies only to the
original purchaser.
To obtain service under warranty you must obtain a returned material
RMA
authorization (
center. Products must be returned to
transportation charges prepaid and must be accompanied by a brief
description of the problem encountered and proof of date and place of
purchase. See
including packaging, shipping, and labeling requirements for returned
products.
Except as provided herein, American Power Conversion makes no
warranties, express or implied, including warranties of merchantability
and fitness for a particular purpose. Some jurisdictions do not permit
limitation or exclusion of implied warranties; therefore, the aforesaid
limitation(s) or exclusion(s) may not apply to the purchaser.
) number from
If problems persist on page 32
) warrants MasterSwitch
APC
or a designated
APC
APC
or an
for more information,
service center with
APC
VM
to be
service
Except as provided above, in no event will APC be liable for direct,
indirect, special, incidental, or consequential damages arising out of the
use of this product, even if advised of the possibility of such damage.
APC
Specifically,
revenue, loss of equipment, loss of use of equipment, loss of software,
loss of data, costs of substitutes, claims by third parties, or otherwise.
This warranty gives you specific legal rights and you may also have
other rights which vary from state to state.
MasterSwitch VM User’s Guide31
is not liable for any costs, such as lost profits or
Product Information
Troubleshooting
If problems persist
For problems not covered in this manual, or if your problem persists,
follow this procedure:
1. Note the serial number and date of purchase of the
VM
MasterSwitch
number or address on the back cover of this user guide (see
APC Worldwide Customer Support on page 38
2. Be prepared to provide a description of the problem. A
technician will help solve the problem over the phone, if
possible, or will give you a Return Material Authorization (
number.
3. If the MasterSwitch
replacement is free of charge. If the warranty has expired, there
will be a charge for repair or replacement.
4. Pack the MasterSwitch
transit. Damage sustained in transit is not covered under the
warranty. Enclose a letter in the package with your name,
address,
phone number, and check (if applicable).
5. Mark the
carton. The factory will not accept any materials without this
marking.
6. Return the MasterSwitch
the address provided by the Customer Support technician.
RMA
RMA
unit. Contact Customer Support at a phone
).
RMA
VM
unit is under warranty, repairs or
VM
unit carefully to avoid damage in
number, a copy of the sales receipt, daytime
number clearly on the outside of the shipping
VM
unit by insured, prepaid carrier to
)
MasterSwitch VM User’s Guide32
Product Information
Life-Support Policy
General policy
As a general policy, American Power Conversion (
recommend the use of any of its products in life-support applications
where failure or malfunction of the
expected to cause failure of the life-support device or to significantly
affect its safety or effectiveness.
any of its products in direct patient care.
products for use in such applications unless it receives in writing
assurances satisfactory to
have been minimized, (b) the customer assumes all such risks, and (c)
the liability of American Power Conversion is adequately protected
under the circumstances.
APC
) does not
APC
product can be reasonably
APC
does not recommend the use of
APC
will not knowingly sell its
APC
that (a) the risks of injury or damage
Examples of lifesupport devices
The term life-support device includes but is not limited to neonatal
oxygen analyzers, nerve stimulators (whether used for anesthesia, pain
relief, or other purposes), autotransfusion devices, blood pumps,
defibrillators, arrhythmia detectors and alarms, pacemakers,
hemodialysis systems, peritoneal dialysis systems, neonatal ventilator
incubators, ventilators (for adults or infants), anesthesia ventilators,
infusion pumps, and any other devices designated as “critical” by the
U.S. FDA
Hospital-grade wiring devices and leakage current protection may be
ordered as options on many
units with this modifications are certified or listed as hospital-grade by
APC
requirements for use in direct patient care.
.
APC UPS
or any other organization. Therefore these units do not meet the
systems.
APC
does not claim that
MasterSwitch VM User’s Guide33
Product Information
Specifications
Product
specifications
AP9221X166
(
The following table shows the product specifications for the
VM
MasterSwitch
)
power distribution unit (
ItemSpecification
Electrical
Input:
Nominal input voltage
Acceptable input voltage
Nominal input frequency
Input connector
Power Off Delay
Power On Delay
Preliminary setup
Product description
Product information
,23– 24
configuration
RJ11
,1– 2
,28
,2
,17
,17
,4
,1– 3
,31– 35
R
Reboot Card
Reboot Duration
Receiver NMS IP (SNMP)
Redundant power
Remote management
Repairs
Reset button
Reset Card to Defaults
RJ11 port
RMA (return material
authorization) number
,26
,16– 17
,15
,10– 11
,32
,2
,26
,1– 2
,31
S
Security
Sequenced Reboot
Serial interface
Service, obtaining
Set Number
Setting IP address
Setup, preliminary
Silence button
SNMP
Specifications
,28
authentication
,29
,11
,15
,1
,21
Access Control
Community Name
interface
NMS IP
Trap Receiver
TFTP client
Time
Tools
transferring files
Trap Generation (SNMP)
Trap Receiver (SNMP)
Troubleshooting
Unit Configuration
User Description
User Manager (System
User Name
,20
,11
port settings
Console)
,25
,26
menu)
,23
,21
,11
,20
,25
,21
,32
,16
,24
,23– 24
W, X, Y, Z
Warranty
Web interface
Web port settings
,31
,10
,21
,11
,22
MasterSwitch VM User’s Guide37
APC Worldwide Customer Support
Customer support for this or any other APC product is available at no charge in any of the
following ways:
•Visit the APC Web site to find answers to frequently asked questions (FAQs), to access
documents in the APC Knowledge Base, and to submit customer support requests.
http://www.apcc.com
–
Connect by links to APC Web pages for specific countries and regions, each of which
provides customer support information.
http://www.apcc.com/support/
–
Submit customer support requests.
•Contact an APC Customer Support Center by telephone or e-mail.
– Regional centers:
(Corporate Headquarters)
APC Headquarters (U.S. and
Canada)
Latin America
Europe, Middle East, Africa
Japan
– Local, country-specific centers: go to
http://www.apcc.com/support/contact
(1) (800) 800-4272 (toll free)
(1) (401) 789-5735 (United States)
apctchla@apcc.com
(353) (91) 702020 (Ireland)
apceurtech@apcc.com
(03) 5434-2021
jsupport@apcc.com
for
contact information.
•Contact the APC representative or other distributor from whom you purchased your APC
product for information on how to obtain local customer support.