Avocent Cyclades ACS4, Cyclades ACS48 Installation/administration/user Manual

Cyclades® ACS

Installation/Administration/User Guide

FCC Warning Statement

The Cyclades ACS advanced console server has been tested and found to comply with the limits for Class A
digital devices, pursuant to Part 15 of the FCC rules. These limits are designed to provide reasonable protection
against harmful interference when the equipment is operated in a commercial environment.

This equipment generates, uses and can radiate radio frequency energy and, if not installed and used in
accordance with the Installation and Service Manual, may cause harmful interference to radio communications.

Operation of this equipment in a residential area is likely to cause harmful interference in which case the user is
required to correct the problem at his or her own expense.

Notice about FCC Compliance for All Cyclades ACS Advanced Console Server Models

To comply with FCC standards, the Cyclades ACS advanced console server requires the use of a shielded
CAT5 cable for the Ethernet interface. Notice that this cable is not supplied with either of the products and must
be provided by the customer.

Canadian DOC Notice

The Cyclades ACS advanced console server does not exceed the Class A limits for radio noise emissions from
digital apparatus set out in the Radio Interference Regulations of the Canadian Department of Communications.

L’Cyclades ACS advanced console server n’émete pas de bruits radioélectriques dépassant les limites
applicables aux appareils numériques de la classe A prescrites dans le règlement sur le brouillage
radioélectrique edicté par le Ministère des Communications du Canada.

Cyclades® ACS Advanced
Console Server

Installation, Administration and
User

Guide

Avocent, the Avocent logo, The Power of Being There and Cyclades are
registered trademarks of Avocent Corporation or its affiliates. All other
marks are the property of their respective owners.

© 2006 Avocent Corporation. All rights reserved. 590-660-501A

Instructions

This symbol is intended to alert the user to the presence of important operating and maintenance
(servicing) instructions in the literature accompanying the appliance.

Dangerous Voltage

This symbol is intended to alert the user to the presence of uninsulated dangerous voltage within the
product’s enclosure that may be of sufficient magnitude to constitute a risk of electric shock to persons.

Power On

This symbol indicates the principal on/off switch is in the on position.

Power Off

This symbol indicates the principal on/off switch is in the of f position.

Protective Grounding Terminal

This symbol indicates a terminal which must be connected to earth ground prior to making any other
connections to the equipment.

iii

Table of Contents

List of Figures ................................................................................................................ vii

List of Tables................................................................................................................... xi

Chapter 1: Introduction ................................................................................................... 1

Overview............................................................................................................................................1

Connectors on the ACS Console Server ............................................................................................1

Accessing the ACS Console Server and Connected Devices.............................................................2

Web Manager.....................................................................................................................................2

Prerequisites for Using the Web Manager........................................................................................3

Types of Users....................................................................................................................................3

Security ..............................................................................................................................................3

Authentication....................................................................................................................................5

VPN....................................................................................................................................................6

Packet Filtering .................................................................................................................................6

Structure of IP filtering...............................................................................................................6

Add rule and edit rule options....................................................................................................7

SNMP.................................................................................................................................................8

Notifications, Alarms and Data Buffering .........................................................................................9

Syslog servers .............................................................................................................................9

Managing Users of Connected Devices.............................................................................................9

Configuring access to connected devices.................................................................................10

ACS Console Server and Power Management ................................................................................10

Configuring power management ..............................................................................................10

Options for managing power....................................................................................................11

Chapter 2: Installation ................................................................................................... 13

Supplied with the ACS Console Server............................................................................................13

Important Pre-installation Requirements........................................................................................14

Basic Installation Procedures..........................................................................................................14

Making an Ethernet connection................................................................................................15

Making a direct connection to configure the network parameters...........................................15

Powering up the console server and the connected devices.....................................................16

TABLE OF CONTENTS

iv Cyclades ACS Advanced Console Server Installation, Administration and User Guide

Performing basic network configuration using the wiz command ...........................................16

Adding users and configuring ports using the Web Manager..................................................19

Other Methods of Accessing the Web Manager......................................................... ......................19

Installing PCMCIA Cards ...............................................................................................................20

Connecting PM IPDUs....................................................................................................................20

Chapter 3: Web Manager for Regular Users................................................................ 23

Using the Web Manager ..................................................................................................................23

Features of Regular User Forms.....................................................................................................24

Connect............................................................................................................................................25

Connect to the console server...................................................................................................25

Connect to serial ports .............................................................................................................25

Connection protocols for serial ports.......................................................................................26

IPDU Power Management...............................................................................................................27

Outlets Manager.......................................................................................................................27

View IPDU info.........................................................................................................................28

IPDU Multi-Outlet Ctrl .................................... ...............................................................................29

Security ............................................................................................................................................31

Chapter 4: Web Manager for Administrators............................................................... 33

Common Tasks for ACS Console Server Administrators.................................................................33

Common Features of Administrator Forms.....................................................................................34

Logging Into the Web Manager.......................................................................................................35

Overview of Administrative Modes..................................................................................................36

Wizard mode.............................................................................................................................36

Expert mode..............................................................................................................................37

Chapter 5: Configuring the ACS Console Server in Wizard Mode ............................ 39

Step 1: Security Profile.............................................................................................................39

Step 2: Network Settings...........................................................................................................43

Step 3: Port Profile...................................................................................................................45

Step 4: Access.............................. .............................................................................................47

Step 5: Data Buffering..............................................................................................................49

Step 6: System Log....................................................................................................................52

Chapter 6: Applications................................................................................................. 55

Table of Contents v

Configuring the Console Server in Expert Mode.............................................................................55

Overview of menus and forms...................................................................................................55

Mapping the expert mode menus and forms.............................................................................56

Applications Menu and Forms.........................................................................................................57

Connect.....................................................................................................................................57

IPDU Power Management .......................................................................................................59

IPDU Multi-Outlet Ctrl .............................................. ..............................................................67

IPMI Power Management.........................................................................................................70

Terminal Profile menu........................................ ......................................................................74

Chapter 7: Network Menu and Forms .......................................................................... 77

Host Settings ....................................................................................................................................78

Syslog...............................................................................................................................................81

PCMCIA Management.....................................................................................................................82

VPN Connections.............................................................................................................................91

SNMP...............................................................................................................................................95

Firewall Configuration............... .....................................................................................................99

Host Table......................................................................................................................................108

Static Routes ..................................................................................................................................108

Chapter 8: Security Menu and Forms ........................................................................ 113

Users and Groups..........................................................................................................................113

Active Ports Sessions.....................................................................................................................116

Authentication................................................................................................................................117

Configuring authentication for console server logins............................................................117

Security Profiles................................................... ..........................................................................124

Security certificates ................................................................................................................128

Chapter 9: Ports Menu and Forms ............................................................................. 131

Physical Ports................................................................................................................................131

Virtual Ports ..................................................................................................................................153

Ports Status....................................................................................................................................156

Ports Statistics ...............................................................................................................................157

Chapter 10: Administration Menu and Forms........................................................... 159

System Information ........................................................................................................................159

Notifications...................................................................................................................................160

vi Cyclades ACS Advanced Console Server Installation, Administration and User Guide

Time/Date.......................................................................................................................................164

Boot Configuration ........................................................................................................................166

Backup Configuration....................................................................................................................168

Upgrade Firmware........................................................................................................................170

Reboot............................................................................................................................................171

Online Help....................................................................................................................................171

Appendices................................................................................................................... 175

Appendix A: Technical Specifications ...........................................................................................175

Appendix B: Safety, Regulatory and Compliance Information......................................................176

Appendix C: Technical Support.....................................................................................................183

Index.............................................................................................................................. 185

vii

List of Figures

Figure 1.1: Front of the ACS Console Server with PCMCIA Card Slots (ACS4 shown)...............1

Figure 1.2: Back of the ACS Console Server Showing Connectors (ACS16 shown) .....................1

Figure 1.3: ACS Console Server Connectors................................................................................. 2

Figure 2.1: Placement of Mounting Brackets (Forward Mounting Configuration Shown).........15

Figure 2.2: Configuration Wizard Screen....................................................................................17

Figure 3.1: Regular User Form....................................................................................................24

Figure 3.2: Regular User - IPDU Power Mgmt. Forms ..............................................................27

Figure 3.3: Regular User - View IPDUs Info...............................................................................28

Figure 3.4: Regular User - IPDU Multi-Outlet (no permissions)................................................30

Figure 3.5: Regular User - IPDU Multi-Outlet (with permissions)............................................30

Figure 4.1: Administrator - Web Manager Buttons .....................................................................34

Figure 4.2: Example of Web Manager Form in Wizard Mode .....................................................37

Figure 4.3: Example of Web Manager Form in Expert Mode...................................................... 38

Figure 5.1: Administrator - Physical Ports Factory Settings .......................................................41

Figure 5.2: Wizard - Step 1: Security Profile Form.....................................................................42

Figure 5.3: Custom Security Profile Dialog Box .........................................................................43

Figure 5.4: Wizard - Step 2: Network Settings - DHCP Disabled ...............................................44

Figure 5.5: Wizard - Step 2: Network Settings - DHCP Enabled ................................................44

Figure 5.6: Wizard - Step 3: Port Profile.....................................................................................45

Figure 5.7: Wizard - Step 4: Access.............................................................................................47

Figure 5.8: Wizard - Step 4: Access Add User Dialog Box..........................................................47

Figure 5.9: Wizard - Step 4: Change Password Dialog Box........................................................48

Figure 5.10: Wizard - Step 5: Data Buffering [Local].................................................................50

Figure 5.11: Wizard - Step 5: Data Buffering [Remote]..............................................................50

Figure 5.12: Wizard - Step 6: System Log....................................................................................52

Figure 6.1: Expert Mode Screen Elements...................................................................................55

Figure 6.2: Expert - SSH session Java Applet ..............................................................................58

Figure 6.3: Expert - Applications - IPDU Power Mgmt. - Outlets Manager...............................60

Figure 6.4: IPDU Power Mgmt. - View IPDUs Info....................................................................61

Figure 6.5: IPDU Power Mgmt- Users Manager........................................................................63

Figure 6.6: Expert - IPDU Power Mgmt. - Users Manager - Add User......................................64

LIST OF FIGURES

viii Cyclades ACS Advanced Console Server Installation, Administration and User Guide

Figure 6.7: Example of Adding IPDU Users................................................................................64

Figure 6.8: Expert - Applications - IPDU Power Mgmt. - Configuration .................................. 65

Figure 6.9: Expert - Applications - IPDU Power Mgmt. - Software Upgrade.............................66

Figure 6.10: Expert - Applications - IPDU Multi-Outlet Ctrl.....................................................67

Figure 6.11: Expert - Applications - Multi-Outlet Ctrl [not configured].................................... 67

Figure 6.12: Expert - Applications - Multi-Outlet Control Icons................................................68

Figure 6.13: Expert - IPMI Power Mgmt. Add and Edit IPMI Device Dialog Boxes..................70

Figure 6.14: Expert - IPMI Power Mgmt. Device Entry Example............................................... 70

Figure 6.15: Expert - Serial Port - Power Management - Enable Power Management.............73

Figure 6.16: Expert - Serial Port - Power Management - User Permissions .............................73

Figure 6.17: Expert - Serial Port - Power Management - Enable IPMI..................................... 74

Figure 6.18: Expert - Applications - Terminal Profile Menu.......................................................74

Figure 6.19: Expert - Terminal Profile Menu Example ..............................................................75

Figure 7.1: Expert - Network - Host Settings [DHCP Enabled]..................................................78

Figure 7.2: Expert - Network - Host Settings [DHCP disabled].................................................. 78

Figure 7.3: Expert - Network - Syslog..........................................................................................81

Figure 7.4: Expert - Network - PCMCIA Management................................................................82

Figure 7.5: PCMCIA Card Type by Slot ......................................................................................83

Figure 7.6: Expert - PCMCIA CompactFlash/Hard Disk Configuration Dialog Box................ 88

Figure 7.7: Expert - PCMCIA Wireless LAN Card Configuration Dialog Box.......................... 89

Figure 7.8: Expert - VPN New/Modify Connection Dialog Box .................................................. 92

Figure 7.9: Security Custom Profile Dialog.................................................................................94

Figure 7.10: Expert - Network - SNMP.......................................................................................96

Figure 7.11: Expert - New/Mod SNMP v1 v2 Configuration Dialog Box...................................97

Figure 7.12: Expert - New/Mod SNMP v3 Configuration Dialog Box ................................ ........ 98

Figure 7.13: Expert - Network - Firewall Configuration............................................................ 99

Figure 7.14: Expert - Firewall Configuration Edit Chain Dialog Box.....................................100

Figure 7.15: Firewall Configuration User-defined Chain Message ..........................................100

Figure 7.16: Expert - Firewall Configuration Add Chain Dialog Box ......................................100

Figure 7.17: Firewall Configuration Edit Rules for chain_name Form ...................................101

Figure 7.18: Firewall Configuration Edit Rules for chain_name Buttons.................................101

Figure 7.19: Expert - Firewall Configuration Add Rule and Edit Rule Dialog Boxes ..............101

Figure 7.20: Firewall Configuration TCP Protocol Fields and Menu Options.........................102

Figure 7.21: Firewall Configuration Add Rule and Edit Rule UDP Protocol Fields................103

Figure 7.22: Input/Output Interface Fields and Fragments Menu Options............................... 104

List of Figures ix

Figure 7.23: Firewall Configuration Add Rule and Edit Rule LOG Target Fields ...................104

Figure 7.24: Firewall Configuration Add Rule and Edit Rule REJECT Target Menu Options.105

Figure 7.25: Edit Chain Dialog Box .......................................................................................... 107

Figure 7.26: Expert - Network - Host Tables............................................................................ 108

Figure 7.27: Expert - Network - Static Routes ..........................................................................109

Figure 7.28: Expert - Static Routes Add and Edit Dialog Boxes - Default Route.....................109

Figure 7.29: Expert - Static Routes Add and Edit Dialog Boxes - Network Route ...................110

Figure 7.30: Expert - Static Routes Add and Edit Dialog Boxes - Host Route .........................110

Figure 8.1: Expert - Security - Users and Groups Form............................................................113

Figure 8.2: Expert - Security - Active Ports Sessions.................................................................116

Figure 8.3: Expert - Security - Authentication ...........................................................................117

Figure 8.4: Expert - Security - Authentication - LDAP.............................................................. 121

Figure 8.5: Expert - Administration - Time/Date......................................................................123

Figure 8.6: Expert - Security - Authentication - Kerberos.........................................................123

Figure 8.7: Expert - Security - Authentication - NIS..................................................................124

Figure 8.8: Expert - Security - Security Profile.........................................................................124

Figure 8.9: Expert - Physical Ports Default Factory Settings ................................. .................127

Figure 8.10: Serial Ports Protocol Incompatibility Dialog Box ................................................127

Figure 8.11: Custom Security Profile Dialog Box ....................................................................128

Figure 9.12: Ports - Physical Ports............................................................................................131

Figure 9.13: Ports - Physical Ports - General Form ................................................................. 133

Figure 9.14: Ports - Physical Ports - Data Buffering Enabled ...................................... ............ 143

Figure 9.15: Ports - Physical Ports - Power Management, Enable IPMI Checked................... 147

Figure 9.16: Ports - Physical Ports - Power Management-Allow All Users .............................149

Figure 9.17: Ports - Physical Ports -Power Management -Allow Users and Groups ...............150

Figure 9.18: Ports - Virtual Ports..............................................................................................153

Figure 9.19: Ports - Virtual Ports - New/Modify Port Dialog Box............................................154

Figure 9.20: Ports - Virtual Ports - New/Modify Port Dialog Box............................................155

Figure 9.21: Ports - Virtual Ports - New/Modify - Port Names Dialog box..............................156

Figure 9.22: Ports - Ports Status (Read-Only)...........................................................................156

Figure 9.23: Ports - Port Statistics (Read-Only)........................................................................157

Figure 10.1: Expert - Administration - Time/Date....................................................................164

Figure 10.2: Expert - Administration - Time and Date - NTP Enable...................................... 165

Figure 10.3: Expert - Administration - Time/Date - Edit Custom..............................................166

Figure 10.4: Expert - Administration - Online Help..................................................................172

x Cyclades ACS Advanced Console Server Installation, Administration and User Guide

xi

List of Tables

Table 1.1: Security Profile Availability.............................................................................................4

Table 1.2: Enabled Services to Access the Serial Ports Under Each Profile....................................4

Table 1.3: Enabled Protocols for Each Profile Shown with a Check Mark......................................4

Table 1.4: Authentication Methods Supported ..................................................................................5

Table 1.5: Add Rule and Edit Rule Option Definitions .....................................................................7

Table 1.6: TCP Protocol Option Definitions.....................................................................................8

Table 1.7: Common Administrator Tasks for Configuring Software.............................. .................10

Table 1.8: Power Management Configuration Tasks......................................................................10

Table 1.9: Power Management Options in the Web Manager ........................................................11

Table 2.1: ACS Console Server Shipping Box Contents, Part Numbers and Description ..............1 3

Table 2.2: Additional Information About Configuration and Administration.................................19

Table 2.3: Tasks related to connecting Cyclades IPDUs ................................................................21

Table 3.1: Common Screen Information..........................................................................................24

Table 3.2: Java Applet Buttons for Connecting to the Console Server...........................................25

Table 3.3: Available Serial Port Protocols .....................................................................................26

Table 3.4: Regular User - Outlet Management Buttons..................................................................28

Table 3.5: Power Management Display Information by Configured Port......................................28

Table 4.1: Administrator - Common Administrative Tasks .............................................................33

Table 4.2: Description of Administrator Web Manager Buttons.................................................. ...34

Table 4.3: Administrator - Options for Trying, Saving and Restoring Configuratio n Change.......35

Table 4.4: Administrator - Logout Button and Other Information in the Upper Right...................35

Table 5.1: Wizard - Serial Port Enabled Services for Each Security Profile..................................40

Table 5.2: Wizard - Serial Port Enabled Services for Each Security Profile..................................40

Table 5.3: Wizard - Enabled Protocols for Each Security Profile ..................................................40

Table 5.4: Port Profile Setup Options.............................................................................................45

Table 5.5: Wizard - Add User Dialog: Field Names and Definitions .............................................48

LIST OF TABLES

xii Cyclades ACS Advanced Console Server Installation, Administration and User Guide

Table 5.6: Wizard - Data Buffering Field Names and Definitions..................................................51

Table 5.7: Differences beween remote and local data buffering.....................................................51

Table 6.1: Expert Mode Menu and Forms, Applications, Network and Security............................56

Table 6.2: Expert Mode Menu and Forms, Ports and Administration............................................56

Table 6.3: Expert - Applications Menu............................................................................................57

Table 6.4: Expert - Outlets Manager Icons Description.................................................................60

Table 6.5: Expert - View IPDUs General Information....................................................................62

Table 6.6: Expert - View IPDUs Unit Information..........................................................................62

Table 6.7: Expert - IPDU Multi-Outlet Ctrl Form Icons ................................................................68

Table 6.8: Expert - IPMI Information .............................................................................................71

Table 6.9: Expert - IPMI Power Mgmt. Form Icons .......................................................................71

Table 7.1: Expert - Network Menu Descriptions.............................................................................77

Table 7.2: Network Host Setting Field Defintions...........................................................................79

Table 7.3: Modem Dialog Box Fields..............................................................................................84

Table 7.4: ISDN Dialog Box Fields.................................................................................................85

Table 7.5: GSM Dialog Box Fields ...................................... ...........................................................86

Table 7.6: Ethernet Dialog Box Fields............................................................................................87

Table 7.7: CompactFlash / Hard Drive Dialog Box Fields ............................................................88

Table 7.8: Wireless LAN Dialog Box Fields....................................................................................89

Table 7.9: CDMA Dialog Box Fields ..............................................................................................90

Table 7.10: Field and Menu Options for Configuring a VPN Connection......................................93

Table 7.11: Expert - Fields and Menu Options for SNMP Configuration . .....................................97

Table 7.12: Expert - TCP Options Fields......................................................................................103

Table 7.13: UDP Options..............................................................................................................103

Table 7.14: Expert - Firewall Configuration Input/Output Interface and Fra gments Fields.......104

Table 7.15: Expert - Target LOG Options Selection Fields..........................................................105

Table 7.16: Reply Packet Names and Definitions .........................................................................105

Table 7.17: Routing Type Fields in the New/Modify Route Dialog Box .......................................110

List of Tables xiii

Table 8.1: Expert - Add User Dialog Field Names and Definitions..............................................114

Table 8.2: Expert - Active Ports Sessions Information..................................................................116

Table 8.3: Tasks for Setting up Authentication Servers.................................................................118

Table 8.4: Enabled Services to Access the Console Server Under Each Security Profile ...........125

Table 8.5: Enabled Services to Access the Serial Ports Under Each Security Profile..................125

Table 8.6: Enabled Protocols for Each Security Profile Shown with a Check Mark....................126

Table 9.7: List of Procedures for Serial Port Configuration ........................................................132

Table 9.8: Connections Protocols When Serial Port is Connected to Device Console Port ........134

Table 9.9: Available Connection Protocols When Terminal is Connected to a Serial Port .........134

Table 9.10: Connection Protocols for Modems or IPDUs............................................................136

Table 9.11: Access Form Menu and Fields.................................. .................................................140

Table 9.12: Expert - Authentication Methods and Fallback Mechanisms ....................................141

Table 9.13: List of Authentication Method Procedures.................................................................142

Table 9.14: Data Buffering Form Fields................... ....................................................................143

Table 9.15: Expert - Multi User Form Fields................................................................................145

Table 9.16: Available Options from the Allow Multiple Sessions Pull-down ...............................146

Table 9.17: Expert - Power Management Form Fields.................................................................147

Table 9.18: Other Form Fields......................................................................................................150

Table 9.19: New/Modify Port Dialog Box Fields..........................................................................154

Table 9.20: Expert - Port Status Read-Only Form........................................... .............................157

Table 9.21: Expert - Ports-Port Status Read-Only Form..............................................................157

Table 10.1: System Information Form...........................................................................................159

Table 10.2: Notifications Form Fields ..........................................................................................160

Table 10.3: Email Notifications Dialog Box Fields ......................................................................161

Table 10.4: Pager Notification Add/Edit Dialog Box Fields.........................................................162

Table 10.5: SNMP Trap Notifications Add/Edit Dialog Box Fields..............................................163

Table 10.6: Boot Configuration Form Fields................................................................................167

Table 10.7: Backup Configuration Settings if Using FTP Server .................................................168

Table 10.8: Backup Configuration if Using Storage Device.........................................................169

xiv Cyclades ACS Advanced Console Server Installation, Administration and User Guide

Table 10.9: Expert - Upgrade Firmware Form Fields..................................................................170

Table 1.1: Technical Specifications for the ACS Console Server Hardware................................175

1

CHAPTER

1

Introduction

Overview

Each model in the Cyclades ACS advanced console server family is a 1U appliance serving as a
single access point for accessing and administering servers and other devices. The following figure
shows the front of the console server with its two PCMCIA card slots

.

Figure 1.1: Front of the ACS Console Server with PCMCIA Card Slots (ACS4 shown)

The following figure shows the back of an ACS16 with its Serial, Ethernet and Console ports.

Figure 1.2: Back of the ACS Console Server Showing Connectors (ACS16 shown)

Connectors on the ACS Console Server

The following figure depicts the connectors on the back of an ACS16.

COL

100

P1
P2

Console

10/100Base-T

LK/
DT

LK/
DT

CP

l

O

100-240V, 50/60Hz 0.3A P1

DT

LK

1 2 3 4 5 6 7 8

9 10 11 12 13 14 15

16

A

C

S

16

2 Cyclades ACS Advanced Console Server Installation, Administration and User Guide

Figure 1.3: ACS Console Server Connectors

The number of serial ports and power supplies depends on the model.

Accessing the ACS Console Server and Connected Devices

You can access a console server and the connected servers or devices either locally or remotely
using any of the following methods.

• Web Manager through LAN/WAN IP networks.

• A modem, ISDN, GSM or CDMA optional PCMCIA card.

• Using the W eb Manager, you can log in and launch a console session such as T elnet or SSH to

connect to the devices attached to the console server’s serial ports.

• Connecting a server running a terminal emulation program enables an administrator to log into

the console server and either enter commands in the console server shell or use the Command

Line Interface (CLI) tool.

NOTE: Only one root or admin user can have an active CLI or Web Manager session. A second root or admin
user must abort the session or close the other user’s session.

CAUTION: If there are cron jobs running through automated scripts, a root or admin user login can cause the
automated cron jobs to fail.

Web Manager

ACS console server administrators perform most tasks through the Web Manager either locally or
from a remote location. The Web Manager runs in a browser and provides a real-time view of all
equipment connected to the console server.

The administrator can use the Web Manager to configure users and ports. An authorized user can
access connected devices through the Web Manager to troubleshoot, maintain, cycle power and
reboot connected devices.

Access the Web Manager using one of the following ways:

• The IP Network.

• A dial-in or callback connection with one of the following:

COL

100

P1
P2

Console

10/100Base-T

LK/
DT

LK/
DT

CP

l

O

100-240V, 50/60Hz 0.3A P1

DT

LK

1 2 3 4 5 6 7 8

9 10 11 12 13 14 15

16

A

C

S

16

Ethernet Port
Console Port

Power Supplies

Serial Ports

Chapter 1: Introduction 3

• An optional external modem connected to one of the serial ports.

• A modem on an optional PCMCIA modem card.

• An optional CDMA, GSM or ISDN card.

Prerequisites for Using the Web Manager

The following conditions must be met prior to accessing the Web Manager.

• Basic network parameters must be defined on the console server so the Web Manager can be

launched over the network.

• The dynamically-assigned IP address of the console server must be known. This address is

found in one of the following three ways:

• Make an inquiry to the DHCP server on the subnet that the console server resides, using
the MAC address.

• Connect to the console server remotely using Telnet or SSH and use the
ifconfig command.

• Connect directly to the console server and use the ifconfig command through a terminal
emulator application.

• A Web Manager user account must be defined. The admin has an account by default, and can
add regular user accounts to grant access to the connected servers or devices using the
Web Manager.

Types of Users

The ACS console server supports the following user account types:

• The root user who can manage the console server and its connected devices. The root user
performs the initial network configuration. Access privileges are full read/write and
management.

NOTE: It is strongly recommended that you change the default password tslinux before setting up the console
server for secure access to the connected servers or devices.

• Users who are in an Admin group with administrative privileges.

• Regular users who can access the connected devices through the serial ports they are
authorized for. Regular users have limited access to the Web Manager features.

Security

The Cyclades ACS advanced console server includes a set of security profiles that consists of
predefined parameters to control access to the console server and its serial ports. This feature
provides more control over the services that are active at any one time. As an additional security
measure, all serial ports are disabled by default, allowing the administrator to enable and assign
individual ports to users.

4 Cyclades ACS Advanced Console Server Installation, Administration and User Guide

The following table shows the available security profiles and the active services under each profile.
See Security Profiles on page 124 for detailed information and procedures.

NOTE: The Default security profile parameters are the same as Moderate profile.

NOTE: The Default security profile parameters are the Same as Moderate Profile.

Table 1.1: Security Profile Availability

Access to the Console Server Secure Moderate Open Default

Telnet P
sshv1 P P P
sshv2 PPPP
Allow SSH root access P P P
HTTP PPP
HTTPS PPPP
HTTP redirection to HTTPS P P

Table 1.2: Enabled Services to Access the Serial Ports Under Each Profile

Access to Serial Ports Secure Moderate Open Default

Console (Telnet) P P P
Console (ssh) PPPP
Console (Raw) P P P
Serial Port Authentication P
Bidirect (Dynamic Mode Support) P P P

Table 1.3: Enabled Protocols for Each Profile Shown with a Check Mark

Other Services Secure Moderate Open Default

SNMP P
RPC P
ICMP PPP
FTP

Chapter 1: Introduction 5

NOTE: The Default security profile parameters are the same as Moderate profile.

Authentication

The ACS console server supports a number of authentication methods to assist the administrator
with user management. Authentication can be performed locally or with a remote server, such as
RADIUS, TACACS+, LDAP or Kerberos. An authentication security fallback mechanism is also
employed should the negotiation process with the authentication server fail. In such situatio ns, the
console server follows an alternate defined rule when the authentication server cannot authenticate
the user.

The following table lists the supported authentication methods.

IPSec

Table 1.3: Enabled Protocols for Each Profile Shown with a Check Mark (Continued)

Other Services Secure Moderate Open Default

Table 1.4: Authentication Methods Supported

Authentication Type Definition

None No authentication.
Kerberos Authentication is performed using a Kerberos server.
Kerberos/Local Kerberos authentication is tried first, switching to Local if unsuccessful.
KerberosDownLocal Local authentication is performed only when the Kerberos server is down.
LDAP Authentication is performed against an LDAP database using an LDAP server.
LDAP/Local LDAP authentication is tried first, switching to Local if unsuccessful.
LDAPDownLocal Local authentication is performed only when the LDAP server is down.
Local Authentication is performed locally. For example using the /etc/passwd file.
Local/Radius Authentication is performed locally first, switching to Radius if unsuccessful.
Local/TACACS+ Authentication is performed locally first, switching to TACACS+ if unsuccessful.
Local/NIS Authentication is performed locally first, switching to NIS if unsuccessful.
NIS NIS authentication is performed.
NIS/Local NIS authentication is tried first, switching to Local if unsuccessful.
NISDownLocal Local authentication is performed only when the NIS server is down.
OTP Uses the one time password (OTP) authentication method.

6 Cyclades ACS Advanced Console Server Installation, Administration and User Guide

VPN

The console server administrator can set up VPN connections to establish an encrypted
communication between the console server and a host on a remote network. The encryption creates
a security tunnel for dedicated communications.

You can use the VPN features on the console server to create a secure connection between the
console server every machine on the subnet at the remote location or between the console server
and a single remote host.

To set up a security gateway, install IPSec on any machine performing networking over IP,
including routers, firewall machines, application servers and end-user machines.

The ESP and AH authentication protocols are supported. RSA Public Keys and Shared Secret
are supported.

For detailed information and procedures to configure a VPN connection, see VPN Connections on
page 91.

Packet Filtering

The administrator can configure the device to filter packets like a firewall. IP filtering is controlled
by chains and rules.

Structure of IP filtering

The Firewall Configuration form in the Web Manager is structured on two levels:

• The view table of the Firewall Configuration form containing a list of chains.

• The chains which contain the rules controlling filtering.

OTP/Local Uses the local password if the OTP password fails.
Radius Authentication is performed using a Radius authentication server.
Radius/Local Radius authentication is tried first, switching to Local if unsuccessful.
RadiusDownLocal Local authentication is performed only when the Radius server is down.
TACACS+ Authentication is performed using a TACACS+ authentication server.
TACACS+/Local TACACS+ authentication is tried first, switching to Local if unsuccessful.
TACACS+DownLocal Local authentication is tried only when the TACACS+ server is down.

Table 1.4: Authentication Methods Supported (Continued)

Authentication Type Definition

Chapter 1: Introduction 7

Chain

A chain is a named profile that includes one or more rules defining either a set of characteristics to
look for in a packet or what to do with any packet having all the defined characteristics.

The console server filter table contains a number of built-in chains, each referenced according to
the packet type they handle. As defined in the rules for the default chains, all input and output
packets and packets being forwarded are accepted.

Rule

Each chain can have one or more rules that define either the packet characteristics being filtered or
what to do when the packet matches the rule.

Each filtered packet characteristic is compared against the rules. All defined characteristics must
match. If no rules are found then the default action for that chain is applied.

Administrators can:

• Add a new chain and specify rules for that chain

• Add new rules to existing chains

• Edit a built-in chain or delete the built-in chain rules

Add rule and edit rule options

When you add or edit a rule, you can define any of the options described in the following table.

Flag any of the above elements with Inverted to perform target action on packets not matching any
criteria specified in that line. For example, if you select DROP as the target action, specify Inverted
for a source IP address and do not specify any other criteria in the rule, any packets arriving from
any other source IP address than the one specified are dropped.

Table 1.5: Add Rule and Edit Rule Option Definitions

Filter Options Description

Source IP and Mask
Destination IP and Mask

With source IP, incoming packets are filtered for the specified IP address. With
destination IP, outgoing packets are filtered.
If you fill in a source or destination mask, all packets are filtered for IP addresses

from the subnetwork in the specified netmask.
Protocol Select protocol options for filtering from ALL, Numeric, TCP, UDP and ICMP.
Input Interface The input interface (ethN) used by the incoming packet.
Output Interface The output interface (ethN) used by the outgoing packet.
Fragments The types of packets to be filtered are All packets, 2nd, 3rd... fragmented packets,

non-fragmented and 1st fragmented packets.

8 Cyclades ACS Advanced Console Server Installation, Administration and User Guide

Numeric protocol options

If you select Numeric as the protocol when specifying a rule, you need to specify the
desired number.

TCP protocol options

If you select TCP as the protocol when specifying a rule, you can define the following options.

UDP protocol options

Select UDP options by selecting UDP as the protocol when selecting a rule. Choose either the
Source or Destination Port from the field, as defined above.

ICMP protocol options

When you select ICMP as a protocol when specifying a rule, you can select the ICMP options
available on the display.

Target actions

The Target is the action to be performed on an IP packet that matches all the criteria specified in
a rule.

NOTE: If the LOG and REJECT targets are selected, additional options are available.

For detailed information on LOG target options, see LOG target on page 104.
For detailed information on REJECT target options, see REJECT target on page 105.

SNMP

The administrator can activate the Simple Network Management Protocol (SNMP) agent that
resides on the console server so that the SNMP agent sends notifications about significant events or
traps to an SNMP management application. The console server SNMP agent supports SNMP v1/v2
and v3.

See To configure SNMP: on page 98 for more information.

Table 1.6: TCP Protocol Option Definitions

Field/Menu option Definition

Source or Destination Port Specify a source or destination port number for filtering. Specify a range to

filter TCP packets for any port number within the range.

TCP Flags Specify any of the flags: SYN (synchronize), ACK (acknowledge), FIN

(finish), RST (reset), URG (urgent), PSH (push) and one of the Any, Set, or
Unset conditions to filter TCP packets for the specified flag and
selected condition.

Chapter 1: Introduction 9

Notifications, Alarms and Data Buffering

The administrator can set up logging, notifications and alarms to alert administrators of problems.
System generated messages on the console server and the connected servers or devices can be sent
to syslog servers for handling. The administrator can also configure data buffering to store data
from communication on serial ports for monitoring.

Data from communication with serial-connected consoles can be stored locally in the console
server’s flash memory or remotely either on an NFS server or a syslog server.

Syslog servers

Messages about the console server and connected servers or devices can be sent to central logging
servers, called syslog servers. Console data from devices connected to serial ports can be stored in
data buffer files on syslog servers. By default, logging and data buffering are not done.

Prerequisites for logging to syslog servers

Before configuring syslogging, ensure that syslog server is pre-configured with a public IP address
and is accessible from the console server. The system administrator must obtain both the IP address
of the syslog server from the syslog server’s administrator and the facility number for messages
from the console server. Facility numbers are used on the syslog server for handling messages
generated by multiple devices.

Facility numbers for syslog messages

Each syslog server has seven local facility numbers available for its administrator to assign to
different devices or groups of devices, at different locations. The available facility numbers are
Local0 through Local7.

Example of using facility numbers

The syslog system administrator sets up a server called syslogger to handle log messages from two
console servers. One console server is located in São Paulo, Brazil and the other in Fremont,
California. The syslog server’s administrator wishes to aggregate messages from the São Paulo
console server into the local1

facility and to aggregate messages from Fremont console server into

the local2

facility.

On syslogger the system administrator has configured the system logging utility to write m essages
from the

local1 facility to the /var/log/saopaulo-config file and the messages from the local2

facility to the

/var/log/fremont-config file. If you were in Fremont and identifying the syslog server

using the Web Manager, according to this example, you would select the facility number local2
from the Facility Number pull-down menu on the Syslog form.

Managing Users of Connected Devices

This section provides a list of tasks that a Cyclades ACS advanced console s erver administrator can
perform to enable access to connected devices.

10 Cyclades ACS Advanced Console Server Installation, Administration and User Guide

Configuring access to connected devices

During hardware installation of the console server, the installer connects the servers, devices and
any IPDUs to the serial ports. During software configuration, the console server administrator
performs the common tasks listed in the following table.

ACS Console Server and Power Management

The ACS console server enables users who have power management permissions to power up,
power down and reboot devices. The console server offers the following power
management options:

• Remote power management of servers that have Intelligent Platform Management Interface
(IPMI) controllers. The console server's implementation of the IPMI protocol lets authorized
users manage power for servers that have embedded IPMI controllers. IPMI servers do not
need to be connected to the console server because their IPMI controllers respond to out-of­band IPMI commands. Authorized users can also perform IPMI power management of
serially-connected devices. The console server uses IPMI V1.5.

• Remote power management of devices plugged into a Cyclades IPDU connected to the
console server.

• The IPDU can be connected to any serial port. Up to 128 IPDU outlets can be daisy-chained.

Configuring power management

Administrators commonly perform power management through the Web Manager to assign power
management permissions to users, configure IPMI devices and configure ports for
power management. The following table list the tasks for power management and where they
are described.

Table 1.7: Common Administrator Tasks for Configuring Software

Task Where Documented

To Configure a Serial Port Connection Protocol for a Console Connection Page 136
To Configure User Access to Serial Ports. Page 141
To Configure a Serial Port for IPDU or IPMI Power Management Page 72
To Configure a User for IPDU Power Management Page 73

Table 1.8: Power Management Configuration Tasks

Task Where documented

Configure users to manage power on IPDUs To configure a user for IPDU power management while

connected to a serial port: on page 73

Chapter 1: Introduction 11

Configuring ports for power management by authorized users

Administrators of connected devices who have power management permissions can do power
management while connected by using a hotkey that brings up a power management screen.

For IPMI power management the default hotkey is

Ctrl+p. For IPDU power management, the

default hotkey is

Ctrl+Shift+I.

Configuring ports for power management using the CLI

ACS console server administrators can use the CLI command with the config ipmi options to
manage power on IPMI devices while logged into the console server with administrative rights.
The ipmitool command is documented in the Cyclades ACS Advanced Console Server Command
Reference Guide.

Options for managing power

Authorized users can perform power management through the console server by using forms in the
web manager, from a power management screen while logged into a device or from the command
line while logged into the console server.

An authorized user with administrative privileges can perform IPDU and IPMI power management.
A regular user with permissions to the connected devices can perform IPDU power management.

Power management through the Web Manager

Users with power management permissions can perform power management through the Web
Manager. The Web Manager menu includes the two power management options listed in the
following table.

Identify servers for IPMI power management To delete, add or edit an IPMI device to enable or disable IPMI

power management: on page 72

Configure ports for power management by
authorized users

To configure a serial port for IPDU power management: on
page 148.

Table 1.8: Power Management Configuration Tasks (Continued)

Task Where documented

Table 1.9: Power Management Options in the Web Manager

Form Name Where Documented

IPDU Power Mgmt IPDU Power Management on page 59

To view status, lock, unlock, rename or cycle power outlets: on page 60

IPMI Power Mgmt IPMI Power Management on page 70

To delete, add or edit an IPMI device to enable or disable IPMI
power management: on page 72
To manage power on an IPMI device: on page 72

12 Cyclades ACS Advanced Console Server Installation, Administration and User Guide

Power management from the console server command line

ACS console server administrators can use the ipmitool command to manage power on IPMI
devices while logged into the console server with administrative rights. The ipmitool command is
documented in the Cyclades ACS Advanced Console Server Command Reference Guide.

13

CHAPTER

2

Installation

Supplied with the ACS Console Server

The shipping box contains the console server along with the items shown in and Table 2.1 for
ACS4 through ACS48. Use the part numbers from this table to reorder any of the parts.

Table 2.1: ACS Console Server Shipping Box Contents, Part Numbers and Description

P/N Description Purpose

PAC0199 ACS console server QuickStart Guide Basic installation guide in printed format.
N/A Power cable.

One cable is included with the AC
single power supply products.
Two cables are included with the AC
dual power supply products.
No cables are included with any DC
power supply products.

To connect the console server to a power source.
The destination country is used to determine which
type of cord is shipped based on the country’s
standard power outlet. Talk with an Avocent sales
representative if you have special requirements.

CAB0010 NEMA5--15P. Flat blades with round

grounding pin.

United States and Canada

CAB0037 Schuko. Round pin attachment plug. Continental Europe
CAB0055 Oblique flat blades with ground. Australia and New Zealand
CAB0056/

CAB0104

Rectangular blade plug. UK and Ireland

CAB0278 Flat blades with round grounding pin. Japan
ADB0017 RJ45 to DB25F crossover adaptor To connect the console port to a server with a DB-25

male connector.

ADB0025 RJ45 to DB25M crossover adaptor To connect the console port to a server that has a

DB-25 female connector.

ADB0036 RJ45 to DB9F crossover adaptor To connect the console port to a server that has a

DB-9 connector.

14 Cyclades ACS Advanced Console Server Installation, Administration and User Guide

Important Pre-installation Requirements

Before installing and configuring the console server, ensure that you have the following:

• Root Access on your local UNIX machine to use the serial ports.

• An appropriate terminal application for your operating system.

• IP address, DNS, Netwoprk Mask and Gateway addresses of your server or terminal, the
console server and the machine to which the console server is connected.

• A web browser that supports the console server Web Manager, such as Netscape, Internet
Explorer, Firefox or Mozilla.

• Java 2 Runtime Environment (JRE) version 1.4.2 or later . If a more recent version is available,
go to http://java.com to locate and download the latest version of J2RE.

Basic Installation Procedures

Mounting the console server

You can mount the ACS console server on a wall, rack or cabinet or place it on a desktop or other
flat surface. Two brackets are supplied with six hex screws for attaching the brackets to the console
server for mounting.

ADB0039 Sun/Netra crossover adaptor To connect the console port to a Sun Netra server,

or other devices with the same pinout configuration.

CAB0018 RJ45 to RJ45 7ft. CAT5 cable Use for the following:

To connect a device or an IPDU to a serial port.
To connect an Ethernet port to the LAN.

To connect a terminal to a console port.
CAB0025 RJ45 to DB25M straight-thru cable Use for modems and other DCE devices.
CON0071 DB25F Loopback Use to test and diagnose serial ports.
HAR0220 2 - Mounting brackets with

8 - screws (2 spares)

Use to mount the console server to a rack or

cabinet. To mount on a wall, order the brackets

under part number: HAR0220.

Table 2.1: ACS Console Server Shipping Box Contents, Part Numbers and Description (Continued)

P/N Description Purpose

Chapter 2: Installation 15

I

Figure 2.1: Placement of Mounting Brackets (Forward Mounting Configuration Shown)

• You will need a hex screwdriver and the nuts and bolts provided with the mounting brackets to
perform the following procedure.

To rack mount the console server:

1. Install the brackets on to the front or back edges of the ACS console server using a screw
driver and the screws provided with the mounting kit.

2. Mount the console server unit in a secure positio n.

Making an Ethernet connection

Connect a CAT5 patch cable from the console server port labeled 10/100Base-T to an Ethernet hub
or switch.

To connect devices to serial ports:

Using patch cables with RJ-45 connectors and DB-9 console adaptors assemble crossover cables to
connect the console server serial ports to the device’s console port.

NOTE: For ACS16 and ACS32 models with single or dual DC power supplies, make sure you use shielded
cables when connecting devices to the serial ports. Shielded cables are required to comply with NEBS Level 3
certification on these models.

Making a direct connection to configure the network parameters.

On your Windows workstation, ensure that a terminal emulation program is installed. On servers
running a UNIX-based operating system such as Solaris or Linux, make sure that a compatible
terminal emulator such as Kermit or Minicom is installed.

To connect to the console port:

You can use a CAT5 straight-through cable with RJ-45 connectors and the appropriate adaptor
provided in the product box to assemble a console cable. All adaptors have an RJ-45 connector on
one end and either a DB25 or DB9 male or female connector on the other end.

1. Connect the RJ-45 end of the cable to the port labeled Console on the console server.

2. Connect the adaptor end of the cable to the console port of your server or device.

Brackets

16 Cyclades ACS Advanced Console Server Installation, Administration and User Guide

3. Open your terminal emulation program, start a connection session, select an available COM
port and enter the following console parameters.

• Bits per second: 9600 bps

• Data bits: 8

•Parity: None

• Stop bit: 1

• Flow control: None

Powering up the console server and the connected devices

Perform the following procedures in the order shown to avoid problems with components on
connected devices.

To power up the console server:

1. Make sure the console server’s power switch is off.

2. Plug in the power cable.

3. Turn the console server’s power switch(es) on.

NOTE: If your console server model is equipped with dual power supplies, make sure you turn both power
switches on. After system initialization, a beep sound may warn if one of the power supplies is off.

To power up connected devices:

Turn on the power switches of the connected devices only after you have completed the physical
connection to the console server.

Performing basic network configuration using the wiz command

The following procedure assumes that a hardware connection is made between the console server’s
console port and the COM port of a server.

To log into the console server through the console:

From your terminal emulation application, log into the console port as root.

console server login: root
Password: tslinux

WARNING:For security reasons, it is recommended that you change the default password tslinux as soon as
possible. To change the default password, enter the passwd command at the prompt and enter a new password
when prompted.

NOTE: The Security Advisory appears the first time console server is accessed or after a reset to factory default
parameters.

If you are upgrading the firmware on the console server, the previously configured security

parameters are retained in the Flash memory.

Chapter 2: Installation 17

To use the wiz command to configure network parameters:

1. Launch the Configuration Wizard by entering the

wiz command.

[root@CAS root]# wiz

As shown in the sample screen below, the system displays the configuration wizard banner and
begins running the wizard.

Figure 2.2: Configuration Wizard Screen.

2. At the prompt, enter n to change the defaults.

Set to defaults (y/n)[n]: n

3. Press Enter to accept the default hostname, otherwise enter your own hostname.

Hostname [CAS]: fremont_branch_console server

4. Press Enter to keep DHCP enabled or enter n to specify a static IP address for console server.
By default, console server uses the IP address provided by the DHCP server. If your network
does not use DHCP, then console server will default to 192.168.160.10.

Do you want to use DHCP to automatically assign an IP for your system?
(y/n)[y] :

5. To change the default static IP address, see your network administrator to obtain a valid
IP address.

System IP[192.168.160.10]: console server_IP_address

6. Enter the domain name.

18 Cyclades ACS Advanced Console Server Installation, Administration and User Guide

Domain name[cyclades.com]: domain_name

7. Enter the IP address for the Primary DNS (domain name) server.

Primary DNS Server[192.168.44.21] : DNS_server_IP_address

8. Enter the IP address for the gateway.

Gateway IP[eth0] : gateway_IP_address

9. Enter the netmask for the subnetwork.

Network Mask[#] : netmask

The network configuration parameters appear.

10. Enter

y after the prompts shown in the following screen example.

Are all these parameters correct? (y/n)[n]: y
Do you want to activate your configurations now? (y/n)[y]: y
Do you want to save your configuration to Flash? (y/n)[n]: y

11. To confirm the configuration, enter the ifconfig command.

12. After the initial configuration proceed to the Web Manager to select a security profile as
described in the following section.

NOTE: To use the Web Manager, obtain your ACS console server’s IP address. The console server may be set
up with a static IP address at your site. By default, the console server uses the IP address provided by the DHCP
server. If your network does not use DHCP, then the console server defaults to 192.168.160.10.

Selecting a security profile using the Web Manager

After the initial configuration, connect to the Web Manager by entering the IP address of the
console server in a supported browser.

NOTE: Once you log in to the Web Manager, a Security Profile must be selected to further configure console
server using the Web Manager. For this reason your browser redirects to Wizard - Step1: Security Profiles.

Selecting a Security Profile

Select a pre-defined Security Profile or define a Custom profile for specific services. The
profiles are:

• Secured - Disables all protocols except sshv2, HTTPS and SSH to Serial Ports.

• Moderate - Enables sshv1, sshv2, HTTP, HTTPS, Telnet, SSH and Raw connections to Serial
Ports, ICMP and HTTP redirection to HTTPS.

• Open - Enables Telnet, sshv1, sshv2, HTTP, HTTPS, SNMP, RPC, ICMP, SSH and Raw
connections to Serial Ports.

• Default - Sets the profile to the same configuration as Moderate profile.

• Custom - Allows custom configuration of individual protocols and services.

Chapter 2: Installation 19

For detailed information on Security Profiles, see Security Profiles on page 124.
The administrator can perform the following tasks using the Web Manager.

• Administer the console server and its connected devices.

• Configure user and group permissions.

• Access the serial ports and the connected devices.

Adding users and configuring ports using the Web Manager

NOTE: From the factory, the console server is configured with all serial ports disabled.

The administrator can add users, enable or disable the serial ports and select and assign specific
users to individual ports. For more information on managing users and ports, see Security Menu
and Forms on page 113 and Ports Menu and Forms on page 131.

For additional configuration and administration options and oth e r im portant related information,
see the chapters in the console server user manual listed in the following table.

Other Methods of Accessing the Web Manager

You can access the Web Manager using either DHCP or the default IP address.

NOTE: Accessing the Web Manager using either DHCP or the default IP address requires additional setup and
configuration specific to your site’s network configuration.

To use a dynamic IP address to access the Web Manager:

This procedure assumes that DHCP is enabled and that you are able to obtain the dynamic IP
address currently assigned to the console server.

1. Mount the console server.

2. Connect servers and other devices to be managed through the console server.

3. Power up the console serv er and connected devices.

4. Enter the console server’s IP address in the browser’s address field.

Table 2.2: Additional Information About Configuration and Administration

Topic Where Documented

Installation and Configuration Process. Chapter 2 beginning on page 13
For Regular Users - How to use the Web Manager to access

servers and connected devices.

Chapter 3 beginning on page 23

Web Manager in Wizard Mode. Chapter 5 beginning on page 39
Web Manager in Expert Mode. Chapter 6 beginning on page 55

20 Cyclades ACS Advanced Console Server Installation, Administration and User Guide

5. Log in to the console server and fi nish configuring users and other settings using the
Web Manager.

To use the default IP address to access the Web Manager:

The default IP address for the console server is 192.168.160.10. This procedure assumes that you
are able to temporarily change the IP address of a server located on the same subnet as the ACS
console server.

1. On a server that resides on the same subnet as the console server, change the network portion
of the IP address of that server to 192.168.160. For the host portion of the IP address, you can
use any number except 10, 0 or 255.

2. Open a browser on the server with the changed address. Enter the console server’s default IP
address, http://192.168.160.10, to bring up the Web Manager and log in.

Installing PCMCIA Cards

The front panel of the console server has two PCMCIA card slots. You can insert and configure one
card in each of the slots.

To see a list of supported PCMCIA cards go to http://www.cyclades.com/ and follow the links
Products - Cyclades ACS Advanced Console Servers - pc cards list.

To install a PCMCIA card:

1. Insert the PCMCIA card into slot 1 or slot 2.

2. Use the Web Manager to configure the PCMCIA card.

NOTE: A hard disk PCMCIA card is automatically mounted and configured once it is inserted.

To remove a PCMCIA card:

CAUTION: Always use the Web Manager to eject a PCMCIA card. Any other method may cause a kernel panic.

1. Eject the card by using the Eject button on the Web Manager’s PCMCIA Management form,
Expert - Network - PCMCIA Management - Eject.

2. Remove the card from the slot.

To configure a PCMCIA card:

See To configure a PCMCIA card: on page 83 and the sections related to the type of card you need
to configure.

Connecting PM IPDUs

You can connect PM IPDUs to the serial ports on the console server using an RJ-45 to RJ-45 UTP
cable. Cyclades IPDUs include two RS-232 outlets for serial management and daisy-chaining. Any

Chapter 2: Installation 21

combination of Cyclades IPDUs up to 128 outlets can be daisy-chained into a single virtual power
distribution unit.

The following table lists the related tasks on connecting IPDU units and managing power.

To daisy-chain Cyclades IPDUs to the console server:

This procedure assumes that you have one Cyclades PM IPDU connected to a serial port on the
console server.

1. Connect one end of a UTP cable with RJ-45 connectors to the OUT port of the IPDU
connected to the serial port on the console server.

2. Connect the other end of the cable to the IN port of the next Cyclades IPDU.

3. Repeat steps 1 and 2 until you have connected the desired number of Cyclades IPDUs.

Table 2.3: Tasks related to connecting Cyclades IPDUs

Task Where Documented

Configure serial ports for power management protocol. To configure a serial port for IPDU power

management: on page 148

How administrators perform IPDU power management
using the Web Manager

IPDU Power Management on page 59

How regular users manager power outlets using the
Web Manager

To close an SSH session: on page 26

Connect the IPDU to the console server unit and daisy­chain multiple IPDUs.

To daisy-chain Cyclades IPDUs to the console
server: on page 21

Configure users for IPDU power management To configure users to manage power outlets on

IPDUs: on page 64

Configure servers for IPMI power management
while connected.

To delete, add or edit an IPMI device to enable or
disable IPMI power management: on page 72

22 Cyclades ACS Advanced Console Server Installation, Administration and User Guide

23

CHAPTER

3

Web Manager for Regular Users

Using the Web Manager

ACS console server users perform most tasks through the Web Manager. The Web Manager runs in
a browser and provides a real-time view of all equipment connected to the console server.

The console server administrator can use the Web Manager to configure users and ports. An
authorized user can access connected devices through the Web Manager to troubleshoot, maintain,
recycle powerand reboot connected devices.

To log into the Web Manager:

1. Connect your web browser to the co nsole server by typing in the console server’s IP address
(e.g., https://10.10.10.10) in your browser’s address field.

NOTE: Refer to Chapter 2 for requirements to start the Web Manager.

2. Press Enter. The system displays the console server Web Manager Login form.

3. Type in your username and password.

24 Cyclades ACS Advanced Console Server Installation, Administration and User Guide

Features of Regular User Forms

The following figure shows features of the Web Manager when regular users log in.

Figure 3.1: Regular User Form

NOTE: The form in the middle changes according to which menu option is selected.

The following table illustrates the functions common to all the forms.

Table 3.1: Common Screen Information

Form Area Purpose

logout Click to log out.
Console server information area Displays the hostname and IP address assigned during initial

configurationand the model number of the console server.

? Help Displays the online help.

Form Area

Menu

Logout Button and Console Server
Information Area

Chapter 3: Web Manager for Regular Users 25

Connect

When you select the Connect option, the form displayed will allow you to connect to the console
server or to serial ports.

Permission to access a port or perform power management is granted by the administrator when
your user account is created.

Connect to the console server

When you click the Connect to ACS radio button on the Connect form, a Java applet viewer appears
running an SSH session on the console server. A Java applet displays when you connect to the
console server. The IP address of the console server is followed by the session type.

The following table describes the available buttons in the Java applet:

Connect to serial ports

The list of serial ports includes the port names or administrator-defined aliases only for ports you
have permission to access.

Port access requirements

When you connect to a serial port to access a server or another device, access rights to the specific
serial port on the console server is required.

NOTE: If an authentication server is setup in your network, an authentication method and the related parameters
should be setup to allow access to the connected devices.

When you select a port from the Serial pull-down list and click the Connect button, a Java applet
viewer appears. The Connected to message in a gray area at the top of the screen shows the IP
address of the console server followed by the TCP port number.

Table 3.2: Java Applet Buttons for Connecting to the Console Server

Button Purpose

SendBreak To send a break to the terminal
Disconnect To disconnect from the Java applet

Select the left icon to reconnect to the server or device; or select the right icon to end
the session and disconnect from the Java applet.

26 Cyclades ACS Advanced Console Server Installation, Administration and User Guide

Connection protocols for serial ports

You can access a server or a device connected to a serial port by using the connection protocol
specified for the port. The following table shows the protocols available for the serial ports.

TCP port numbers for serial ports

The TCP port numbers by default start at 7001 for serial port 1 and increment up to the number of
serial ports on your console server. The console server administrator may change the default port
numbers if needed.

To use Telnet to connect to a device through a serial port:

For this procedure you need the hostname of the console server or its IP address and the TCP port
number for the serial port to which the device is connected.

• To use Telnet in a shell, enter the following command:

telnet hostname | IP_address TCP_port_number

To close a Telnet session:

Enter the Telnet hotkey defined for the client. The default is

Ctrl ] and q to quit.

To use SSH to connect to a device through a serial port:

For this procedure, you need the username configured to access the serial port, the TCP port
number and the hostname of the console server or its IP address.

• To use SSH in a shell, enter the following command:

ssh -l username:TCP_port_number console server_IP_address

To close an SSH session:

Enter the hotkey defined for the SSH client followed by a period. The default is

~.

NOTE: Make sure you enter the escape character followed by a period at the beginning of a line to close the

SSH session.

Table 3.3: Available Serial Port Protocols

Connection Type Protocol

Console Access Server (CAS) Telnet, ssh, Telnet&ssh, Raw
Terminal Server (TS) Telnet, sshv1, sshv2, Local Terminal, Raw Socket
Dial-up PPP-No Auth., PPP, SLIP, CSLIP
Other Power Management, Bi-directional Telnet

Chapter 3: Web Manager for Regular Users 27

IPDU Power Management

IPDU management allows you to manage the power outlets on power management appliance
products. If you have permission to manage outlets on a power management appliance, selecting
the IPDU Power Mgmt. option will display a form with two tabs, Outlets Manager and View
IPDUs Info.

Figure 3.2: Regular User - IPDU Power Mgmt. Forms

Access the forms under IPDU Power Mgmt. menu to manage outlets or view IPDU information.

Outlets Manager

When you go to IPDU Power Mgmt.-Outlets Manager tab, an error message appears either if you
do not have permission to manage power on any of the IPDU outlets or the console server cannot
detect an IPDU that has been configured for power management.

If you have permission to manage power on one or more outlets of the power management
appliance, the Outlets Manager form displays.

The form shows separate entries for each serial port configured for power management, a name for
the configured serial port if one is defined by the administrator and the number of IPDUs
connected. The matrix displays a line item for each outlet you are authorized to manage.

The authorized user can perform the following for any listed outlet:

• Edit the outlet name. Enter a name to identify the server or device plugged into the outlet.

• Edit the power up interval. The power up interval is the time interval (in seconds) that the
system waits between turning on the currently-selected outlet and the next outlet. The default
is set at 30 seconds.

• Cycle - Turn power briefly off and on again.

• Turn the power On/Off to the outlet.

• Lock or unlock the outlet to prevent accidental changes to the power state.

28 Cyclades ACS Advanced Console Server Installation, Administration and User Guide

The following table describe the corresponding buttons to perform the above operations:

View IPDU info

Selecting IPDU Power Mgmt.-View IPDUs Info will display the following form.

Figure 3.3: Regular User - View IPDUs Info

The following information is displayed for each port configured for power management.

Table 3.4: Regular User - Outlet Management Buttons

Button or icon Purpose

Edit Lets you edit an outlet name and the power up interval.
Cycle Turn power briefly off and then on again.
Lighted (yellow) bulb

Unlit (gray) bulb

Turn power on.

Turn power off.

Locked padlock

Unlocked padlock

Lock the outlet.

Unlock the outlet.

Table 3.5: Power Management Display Information by Configured Port

Form Heading Description Example

Number of Units The number of IPDUs connected to the port. The first IPDU is

referred to as the master. Any other IPDUs daisy-chained off the
first IPDU are referred to as Slaves.

1

Syslog Whether syslogging has been configured for messages from

this IPDU.

ON

Chapter 3: Web Manager for Regular Users 29

IPDU Multi-Outlet Ctrl

Selecting IPDU Multi-Outlet Control form allows you to view and manage the power on a group of
outlets that provide power to a multi power supply server or device connected to a serial port.
Whether the outlets that the multi power supply device is connected to are on the same power
management appliance or not, the outlets can be grouped together and managed simultaneously
from this form.

When you select the IPDU Multi-Outlet Ctrl form, the following error message appears if:

• there is no multi-outlet device defined.

• power management is not enabled for the serial port the device is connected to.

• the console server cannot detect an IPDU that has been configured for power management.

Buzzer Whether a buzzer has been configured to sound when a specified

alarm threshold is exceeded.

ON

Number of Outlets Total number of outlets on all connected IPDUs. 8
Over Current Protection Whether over current protection is enabled (to prevent outlets from

being turned on if the current on the IPDU exceeds the
specified threshold).

OFF

Model IPDU model number. PM8 15A
Software Version IPDU firmware version 1.5.0
Alarm Threshold Number of amperes that triggers an alarm or syslog message if it

is reached.

15.0A

Current Current level on the IPDU. 0.0A
Maximum Detected Maximum current detected. 0.4A
Clear Max

Detected Temperature

Use this button to refresh the currently displayed maximum
detected temperature.

Temperature Temperature on the IPDU (available only on selected models with

temperature sensors).

Maximum Detected Maximum temperature detected (Available only on selected

models with temperature sensors).

Clear Max
Detected Current

Use this button to refresh the currently displayed maximum
detected current.

Table 3.5: Power Management Display Information by Configured Port (Continued)

Form Heading Description Example

30 Cyclades ACS Advanced Console Server Installation, Administration and User Guide

Figure 3.4: Regular User - IPDU Multi-Outlet (no permissions)

The following form appears if you have permission to view and control the outlets to which a multi
power supply server or device is connected.

.

Figure 3.5: Regular User - IPDU Multi-Outlet (with permissions)

Notice in the above figure that the top icons operate over the entire group. The light bulb and lock
icons displayed next to the individual outlets are used to display the status of each outlet but cannot
be used to control the individual outlets.

NOTE: Only one outlet needs to be powered on or unlocked for the entire group to be consider ed ON or
unlocked respectively. For more information on controlling IPDU groups, see IPDU Multi-Outlet Ctrl on page 67.

The Cycle button operates only if all outlets of a group are turned on.
The Power Up (PU) interval parameter is configured for each outlet so that the next outlet in the

group turns ON only after the power up interval specified for the current outlet has elapsed. The PU
interval parameter can be configured through the IPDU Power Mgmt. form. For more information,
see To close an SSH session: on page 26.

Chapter 3: Web Manager for Regular Users 31

Security

Use the following procedure to set or change your password.

To change your password:

1. Select the Security option from the menu panel. The Security form appears.

2. Enter your current password in the Current Password field.

3. Enter the new password in the New Password and the Repeat New Password fields.

4. Click OK.

5. Log out and log in using your new passwo rd to verify your password change.

32 Cyclades ACS Advanced Console Server Installation, Administration and User Guide

33

CHAPTER

4

Web Manager for Administrators

This chapter is for system administrators who use the Web Manager to configure the Cyclades ACS
advanced console server and its users. For information on how to configure the console server
using vi or Command Line Interface (CLI), please consult the Cyclades ACS Advanced Console
Server Command Reference Guide.

The ACS console server’s Web Manager for administrators describes two modes of operation,
Wizard and Expert.

This section provides an overview of the Web Manager forms. Subsequent sections describe the
menus, forms and the configuration procedures of the Web Manager in Wizard and Expert modes.
If you are a regular user see Chapter 3, Web Manager for Regular Users.

Common Tasks for ACS Console Server Administrators

The following table shows some of the common tasks that are performed by an administrator and
references to more information about performing the task.

Table 4.1: Administrator - Common Administrative Tasks

Task Where documented

Set up users and groups to access connected
devices.

Users and Groups on page 113

Set up user authentication to access serial ports. Access on page 140
Configure serial ports for power management. To configure a power management protocol for an

IPDU: on page 138

Assign users permissions to manage outlets on
connected AlterPath PMs.

To configure users to manage power outlets on IPDUs:
on page 64

Set up local or remote data buffering and specify
alarms for one or more serial ports.

To configure data buffering for serial ports: on page 144
To choose a method for sending notifications for serial
port data buffering events: on page 160

34 Cyclades ACS Advanced Console Server Installation, Administration and User Guide

Common Features of Administrator Forms

The following figure shows the control buttons displayed at the bottom of the form when logged
into the Web Manager as administrator.

Figure 4.1: Administrator - Web Manager Buttons

The following table describes the uses for each control button.

Set up logging of system messages to a
syslog server.

To specify names, alarms, syslogging and over
current protection for IPDUs: on page 65
To configure syslogging for serial ports and specify
message filtering: on page 82

Configure devices for IPMI power management. IPMI Power Management on page 70
Select an authentication method for accessing

connected devices.

Authentication on page 117

Configure packet filtering. Firewall Configuration on page 99

Table 4.1: Administrator - Common Administrative Tasks (Continued)

Task Where documented

Table 4.2: Description of Administrator Web Manager Buttons

Button name Use

back Only appears in Wizard mode. Returns the previous form.
try changes Tests the changes entered on the current form without saving them.
cancel changes Cancels all unsaved changes.
apply changes Applies and saves all unsaved changes.
reload page Reloads the page.
Help Displays the online help.
next Only appears in Wizard mode. Goes to the next form.
unsaved changes The unsaved changes button appears on the lower right hand corner of the

Web Manager and a graphical LED blinks red whenever the current user
has made any changes and has not yet saved the changes.

no unsaved changes The no unsaved changes button appears and a graphical LED appears in

green when no changes have been made that need to be saved.

Chapter 4: Web Manager for Administrators 35

The various Web Manager actions for trying, saving and restoring configuration changes are
summarized in the following table.

The following table illustrates the information that displays in the upper right corner of all Web
Manager forms.

Logging Into the Web Manager

The following procedure describes the login process to the Web Manager and what should be
expected the first time you login to console server.

To log into the Web Manager:

1. To display the Web Manager, enter the IP address of the console server in the address field of
your browser.

NOTE: The ACS console server is usually assigned a static IP address. If DHCP is enabled, you must find out
the dynamically-assigned IP address each time you need to run the Web Manager. If necessary, use the default
static IP address 192.168.160.10 pre-configured in the console server.

a. If DHCP is disabled, use the static IP address assigned by the administrator.
b. If DHCP is enabled, enter the dynamically-assigned IP address. The Login page displays.

2. Log in as

root and type in the root password. The default password is tslinux.

Table 4.3: Administrator - Options for Trying, Saving and Restoring Configuration Change

Task Action Result

try changes Click the try changes button Updates the appropriate configuration files. Changes are

preserved if you log in and log out and even if you restart
the system. Changes stay in effect unless the cancel
changes button is clicked. The changes can be restored
at any time until the apply changes button is clicked.

cancel changes Click the cancel changes

button

Restores the configuration files from the backup that was
created the last time changes were applied.

apply changes Click the apply changes

button

If try changes has not been previously clicked, updates
the appropriate configuration files. Overwrites the backed
up copy of the configuration files.

Table 4.4: Administrator - Logout Button and Other Information in the Upper Right

Form Area Button and Information Purpose

logout Click this button to log out.
Host Name: Cyclades

IP Address: 192.168.48.11
Model: ACS16

Displays the hostname, IP address assigned during initial configuration
and the model number of the Cyclades ACS advanced console server.

36 Cyclades ACS Advanced Console Server Installation, Administration and User Guide

CAUTION: It is important to change the root password as soon as possible to avoid security breaches.

If another administrator is already logged in, a dialog box will prompt you to log off the other
administrator before logging in.

3. Select Yes or No and then click Apply.

NOTE: Be sure to read the Security Advisory message that appears on the screen. Y our pop-up blocker must be
disabled for the Security Advisory to appear.

Overview of Administrative Modes

The console server Web Manager operates in one of two modes, Wizard or Expert.

NOTE: If you select Wizard, the mode button will read Expert. If you select Expert , the mode button will
read Wizard.

Wizard mode

The Wizard mode is designed to simplify the setup and configuration process by guiding the
administrator through six configuration steps.

When you log in to the console server as an administrator or as a user with administrative
privileges, by default the system point to Expert Mode-Ports-Ports Status form.

The following is a typical form of the console server web interface in Wizard Mode. The user entry
form varies depending on the selected menu item.

Chapter 4: Web Manager for Administrators 37

Figure 4.2: Example of Web Manager Form in Wizard Mode

Expert mode

Expert is the default mode when logging in to the ACS console server. The following is a typical
console server screen in Expert mode. The main difference in the interface when you switch
between the two modes is the addition of a top menu bar in the Expert mode to support more
detailed and customized configuration.

In Expert mode the top menu bar contains the primary commands and the left menu panel contains
the secondary commands. Based on what you select from the top menu bar, the left menu selections
will change accordingly. Occasionally, an Expert mode menu selection has multiple forms
identified by tabs as shown in Figure 4.3.

38 Cyclades ACS Advanced Console Server Installation, Administration and User Guide

Figure 4.3: Example of Web Manager Form in Expert Mode

39

CHAPTER

5

Configuring the ACS Console
Server in Wizard Mode

Step 1: Security Profile

A security profile consists of a set of parameters that can be configured in order to have more
control over the services active at any time.

Pre-defined security profiles

There are three pre-defined security profiles:

• Secure - Authentication to access Serial Ports is required and SSH root access is not allowed.

NOTE: SSH root access is enabled when the security profile is set to Moderate or Open. If a Secured security
profile is selected, you must switch to a Custom security profile and enable the allow root access option.

• Moderate - The Moderate profile is the recommended security level. This profile enables
sshv1, sshv2, HTTP, HTTPS, T elnet, SSH and Raw connections to the Serial Ports. In addition,
ICMP and HTTP redirection to HTTPS are enabled. Authentication to access the serial ports is
not required.

• Open - The Open profile enables all services such as Telnet, sshv1, sshv2, HTTP, HTTPS,
SNMP, RPC, ICMP, SSH and Raw connections to the Serial Ports. Authentication to access
serial ports is not required.

Default security profile

See the following tables for the list of enabled services when the Default security profile is used.

Custom security profile

The Custom security profile opens up a dialog box to allow custom configuration of individual
protocols or services.

NOTE: By default, a number of protocols and services are enabled in the Custom profile; however, they are
configurable to a user’s requirements.

40 Cyclades ACS Advanced Console Server Installation, Administration and User Guide

The following tables illustrate the properties for each of the security profiles. The enabled services
in each profile are designated with a check mark.

Table 5.1: Wizard - Serial Port Enabled Services for Each Security Profile

Access to console server Secure Moderate Open Default

Telnet

3

sshv1

333

sshv2

3333

Allow SSH root access

333

HTTP

333

HTTPS

3333

HTTP redirection to HTTPS

33

Table 5.2: Wizard - Serial Port Enabled Services for Each Security Profile

Access to Serial Ports Secure Moderate Open Default

Console (Telnet)

333

Console (ssh)

3333

Console (Raw)

333

Serial Port Authentication

3

Bidirect (Dynamic Mode Support)

333

Table 5.3: Wizard - Enabled Protocols for Each Security Profile

Other Services Secure Moderate Open Default

SNMP

3

RPC

3

ICMP

333

FTP
IPSec

Chapter 5: Configuring the ACS Console Server in Wizard Mode 41

The first step to configure your ACS console server is to select a security profile. One of the
following situations is applicable when you boot the console server.

• The ACS console server is starting for the first time or after a reset to factory default. In this
situation when you boot the console server and log in as an administrator to the Web Manager ,
a security warning dialog box appears. The Web Manager is redi rected to Step 1: Security
Profile in the Wizard mode. Further navigation to other sections of the Web Manager is not
possible without selecting or configuring a security profile. Once you select or configure a
security profile and apply the changes, the console server Web Manager restarts for the
security configuration to take effect.

• The console server firmware is upgraded and the system is restarting with the new firmware.In
this situation the console server was already in use and certain configuration parameters were
saved in the Flash memory. In this case the console server automatically retrieves the Custom
Security Profile parameters saved in the Flash memory and behaves as it was a normal reboot.

• The console server is restarting normally. In this situation, the console server detects the pre­defined security profile. You can continue working in the Web Manager.

Serial port settings and security profiles

All serial ports on console server units shipped from the factory are disabled by default. The
administrator can enable ports individually or collectively and assign specific users to
individual ports.

The following figure shows the default factory settings of serial ports.

Figure 5.1: Administrator - Physical Ports Factory Settings

If you reconfigure the security profile and restart the Web Manager, make sure the serial ports
protocols and access methods match the selected security profile. A reminder dialog box will
appear before you can proceed to Step 2: Network Setting.

42 Cyclades ACS Advanced Console Server Installation, Administration and User Guide

To select or configure a security profile:

The following procedure assumes you have installed a new console server at your site or you have
reset the unit to factory default.

1. Enter the assigned IP address of the console server in your browser and login as
an administrator.

2. Review the Security Advisory and click the Close button.

NOTE: Your browser’s pop-up blocker must be disabled to see the Advisory.

3. The Web Manager is automatically redirected to Wi zard - Step 1: Security Profile.
The following form is displayed.

Figure 5.2: Wizard - Step 1: Security Profile Form

4. Select a pre-defined security profile by pressing one of the Secure, Moderate, Open or Default
profiles or create a Custom profile.

The following dialog box is displayed when you select the Custom profile.

Chapter 5: Configuring the ACS Console Server in Wizard Mode 43

Figure 5.3: Custom Security Profile Dialog Box

CAUTION: Take the required precautions to understand the potential impacts of each individual service

configured under the Custom profile.

NOTE: It is not possible to continue working in the Web Manager without selecting a security profile. A reminder
dialog box will appear if you attempt to navigate to other sections of the Web Manager.

5. Once you select a security profile or configure a custom profile and apply the changes, the
console server W eb Manager must restart for the changes to take ef fect. A reminder dialog box
is displayed. Click OK to continue.

6. Select apply changes at the bottom of the Web Manager form to save the co nfiguration to
Flash. The Web Manager restarts.

7. Log in after Web Manager restarts and click on the Wizard button to switch to Wizard mode.

8. Proceed to Step 2: Network Settings.

Step 2: Network Settings

Selecting Step 2: Network Settings displays a form for reconfiguring existing network settings.
During initial setup of the console server, the basic network settings required to enable logins were
configured through the Web Manager. Skip this step if the current settings are correct.

In Expert mode, under Network menu, you can specify additional networking-related information
and perform other advanced configuration tasks.

If the DHCP is disabled, the form appears as shown in the following figure.

44 Cyclades ACS Advanced Console Server Installation, Administration and User Guide

Figure 5.4: Wizard - Step 2: Network Settings - DHCP Disabled

If the DHCP is enabled, the following form appears.

Figure 5.5: Wizard - Step 2: Network Settings - DHCP Enabled

To configure the network settings:

1. Select Step 2: Network Settings. The DHCP form is displayed. By default, DHCP is active.

NOTE: If DHCP is enabled, a local DHCP server assigns console server a dynamic IP address that can change.
The administrator chooses whether or not to use DHCP during initial setup.

2. If you are using DHCP, proceed to Step 3: Port Profile, if not, click on the checkbox to deselect
DHCP and enter your network settings manually.

3. Enter the required network information.

4. Select apply changes to save configuration to Flash.

5. Select the Next button or proceed to Step 3: Port Profile.

Chapter 5: Configuring the ACS Console Server in Wizard Mode 45

Step 3: Port Profile

Selecting Step 3: Port Profile displays a form for configuring the Console Access Profile (CAS).
The protocol used to access the serial ports can be configured in this form.

Figure 5.6: Wizard - Step 3: Port Profile

In Wizard mode, the system assumes that all devices will be connected to the serial ports with the
same parameter values. If you need to assign different parameters to the serial ports that each server
or device is connected to, use the Expert mode, Ports - Physical Ports to assign individual
port parameters.

NOTE: All serial ports are disabled from the factory by default. The administrator can enable ports and assign
specific users to individual ports through the Expert mode.

The following table lists the parameters with the available options and a brief description for each.

Table 5.4: Port Profile Setup Options

Parameter Options Description

Connection
Protocol

Console (Telnet) [Default]
Console (ssh)
Console (Telnetssh)
Console (Raw)

Sets the protocol to be used to connect to devices
that are connected to serial ports.
Console (ssh) encrypts data and
authentication information.
Console (Telnetssh) allows users to connect using
either protocol.
Console (Raw) is for unnegotiated plain
socket connections.
Use Expert mode if you wish to specify any of
several other connection protocols that are listed
under Ports-Physical Ports-Modify-General.

Flow Control None [Default]

Hardware
Software

Must match the flow control method of the devices
connected to all serial ports.

46 Cyclades ACS Advanced Console Server Installation, Administration and User Guide

Expert mode provides additional options for custom configuration of serial ports, such as assigning
an alias to a serial port, specifying individual parameters to the serial ports (or groups of serial
ports) or using any of several other connection protocols.

To set parameters for all serial ports:

This step configures all serial ports with the same values. Use this form if all the devices connected
to the serial ports on the console server can run using the same connection protocol with the same
speed. Also, make sure the values you specify here are the same as those in effect on the
connected devices.

If the connected devices require different connection protocols and speed, configure individual
settings in Expert mode - Ports - Physical Ports.

1. Change network parameters as needed.

2. To change whether authentication is required, check the Authentication Required checkbox to
enable or leave it unchecked to disable.

3. Select apply changes to save configuration to Flash.

4. Select the Next button or proceed to the next section, Step 4: Access.

Parity None [Default]

Odd
Even

Must match the parity used by the devices
connected to all serial ports.

Baud Rate (Kbps) 9600 [Default]

Options range from 2400–921600
Kbps

Must match the baud rates of the devices
connected to all serial ports.

Data Size 8 [Default]

Options range from 5–8

Must match the number of data bits used by the
devices connected to all ports.

Stop Bits 1 [Default]

Options are either 1 or 2

Must match the number of stop bits used by the
devices connected to all ports.

Authentication
Required

Check for enabled.
Unchecked for disabled. [Default]

If the Authentication Required is enabled, user
authentication is enforced using the local
passwd database.
To specify other authentication methods such as
RADIUS, TACACS+, LDAP, Kerberos or NIS go to
Expert mode and select Security-Authentication.

Table 5.4: Port Profile Setup Options (Continued)

Parameter Options Description

Chapter 5: Configuring the ACS Console Server in Wizard Mode 47

Step 4: Access

Selecting Step 4: Access displays the form shown in the following figure that enables you to add or
delete user accounts and set or change existing passwords.

In addition, administrative privileges can be granted to added users by adding the user accounts to
an admin group, enabling them to administer the connected devices without the ability to change
the configuration of the console server. By default any user can access any port as long as a valid
user ID and password are used.

Figure 5.7: Wizard - Step 4: Access

The Access form lists the currently defined users and features Add, Change Password and
Delete buttons.

In the Users list by default, there is a root account that cannot be deleted. The root has access
privileges to all the Web Manager’s functionality as well as access to all the serial ports on the
console server.

Click the Add button. The following form is displayed.

Figure 5.8: Wizard - Step 4: Access Add User Dialog Box

48 Cyclades ACS Advanced Console Server Installation, Administration and User Guide

The following table defines the information required in the fields.

If you click the Change Password button, the following dialog box appears.

Figure 5.9: Wizard - Step 4: Change Password Dialog Box

To add a user:

1. Select Step 3: Access. The Access form displays.

2. Click Add. The Add User dialog box appears.

3. Enter the user name and password in the User Name and Password fields and enter the
password again in the Repeat Password field.

4. Select from the Group menu options.
a. To create a regular user account without administrator privileges, select Regular User

[Default] from the Group pull-down menu.

Table 5.5: Wizard - Add User Dialog: Field Names and Definitions

Field name Definition

User Name The user name for the account being added.
Password and Repeat

Password

The password for the account.

Group The choices in the Group menu are Regular User [Default] or Admin.

NOTE: To configure a user to be able to perform administrative functions, select
the Admin group. To define a new group, go to the Expert mode and select
Security - Users and Groups.

[dropdown list] Select whether the user of this group is a NonBio [Default] or a BioUser. The

BioUser group should only be selected if authentication will be made through
Cyclades biometric authentication.

Shell Optional. The default shell when the user makes an SSH or a Telnet

connection. Choices are: sh [Default] or bash.

Comments Optional notes about the user’s role or configuration.

Chapter 5: Configuring the ACS Console Server in Wizard Mode 49

b. To create an account with administrator privileges, select Admin from the Group pull-

down menus.

NOTE: To define a new group, switch to Expert mode and select Security - Users and Groups.

5. Select whether the user of this group is a NonBio or a BioUser. The BioUser group should only
be selected if authentication is made through the Cyclades biometric authentication.

6. Enter the default shell in the Shell field (optional).

7. Enter comments to identify the user’s role or configuration in the Comments field (optional).

8. Click OK.

9. Click the apply changes button.

To delete a user:

1. Select Step 3: Access. The Access form displays.

2. Select the user name to delete.

3. Click Delete.

4. Click apply changes.

To change a password:

CAUTION: Leaving the default root password unchanged leaves the console server and connected devices

open to anyone who knows the default password and the console server’s IP address. For security reasons,
change the root password from the default tslinux as soon as possible.

1. Select Step 3: Access. The Access form displays.

2. Select the name of the user whose password you wish to change.

3. Click Change Password. The Change User Password dialog box displays.

4. Enter the new password in both fields and click OK.

5. Click apply changes.

Step 5: Data Buffering

Selecting Step 5: Data Buffering displays a form to allow logging the console data to a data buffer
file either locally in the console server or remotely to an external storage source such as an NFS
server or Syslog server. Once Enable Data Buffering is selected, the form displays a number of
fields. The displayed fields depends on whether selected Destination is Local or Remote.

The values set in this form apply to all serial ports. Data buffering allows a site to save a record of
all communication during a serial port connection session. You can set up data buffer files to be
stored either in local files on the console server’s Flash memory or on the hard disk of an external
server, such as an NFS or Syslog server.

50 Cyclades ACS Advanced Console Server Installation, Administration and User Guide

The following figure shows the form when Enable Data Buffering is checked and the Destination is
set to Local.

Figure 5.10: Wizard - Step 5: Data Buffering [Local]

The following figure shows the form when the data buffering Destination is set to Remote.

Figure 5.11: Wizard - Step 5: Data Buffering [Remote]

Chapter 5: Configuring the ACS Console Server in Wizard Mode 51

The following table provides description for each field whether local or remote destination
is selected.

The following table shows the differences between remote and local data buffering.

NOTE: You can perform advanced configuration in Expert mode including the option of setting up data buffering
separately for individual or groups of serial ports.

To configure data buffering:

1. Select Step 4: Data Buffering.

2. Click the Enable Data Buffering checkbox. The Destination pull-down menu appears.

Table 5.6: Wizard - Data Buffering Field Names and Definitions

Field name Definition

Destination Where the buffer files should be stored. Local, for example, Flash or Remote on

a server.

Mode For Local Destination - Select Linear for sequential files or Circular for non-

sequential format.
Local data buffering stores data in circular or linear mode. In circular mode, data is
written into the specified local data file until the upper limit on the file size is
reached; then the data is overwritten starting from the top of the file as additional
data comes in. Circular buffering requires the administrator to set up processes to

examine the data during the timeframe before the data is overwritten by new data.
File Size (Bytes) For Local Destination - Sets the value for this field to be greater than zero.
Record the timestamp If enabled, the system inserts a timestamp in the buffer.
NFS File Path For Remote Destination - Includes the path where the data buffer file should

be stored.
Show Menu Defines the options you wish to show in the menu of the buffer file.

Table 5.7: Differences beween remote and local data buffering

Option Description

Remote server Data is stored in files sequentially. The NFS server must be configured with the mount

point shared (exported). In linear mode, data is written into a continuous sequence of
files and the file spaces is not reused. The administrator needs to allow enough space
for the expected amount of data and take measures such as moving unneeded data files
off line, to ensure data does not outgrow the available space.

Local files Set a file size greater than zero. Make sure the file size does not exceed the space

available on the console server’s Flash memory. If needed, you can supplement the
Flash memory module by installing a Flash memory card (with an adaptor) or other
storage device in a PCMCIA slot.

52 Cyclades ACS Advanced Console Server Installation, Administration and User Guide

3. Select a location for the data files from the Destination pull-down menu (ei ther Local or
Remote). Additional pull-down menus and fields appear, depending on which destination
is selected.

4. When the destination is local, perform the following steps.
a. From the Mode pull-down menu, select Circular or Linear data buffering.
b. Type a file size in bytes into the File Size (Bytes) field. The file size should be greater

than zero.

5. When the destination is Remote, perform the following steps.
a. In the NFS File Path field, enter the pathname for the mount point of the directory where

data buffer file is to be stored. For example, if the mount point directory’s pathname is /
var/adm/acslogs, enter

/var/adm/acslogs in the field.

NOTE: The NFS server must already be configured with the mount point shared (exported) and the shared

directory from the NFS server must be mounted on the console server.

b. To cause a timestamp to be saved with the data in the data buffer file, enable the Record

the timestamp in the data buffering file.

c. Select an option from the Show Menu pull-down menu. The choices are: show all options,

No, Show data buffering file only and Show without the erase options.

6. Click apply changes.

Step 6: System Log

Selecting Step 6: System Log displays a form for identifying one or more syslog servers to receive
syslog messages generated by the console server’s serial ports. Syslogging for IPDUs is also
possible if IPDU power management is configured.

The form displays as shown in the following figure.

Figure 5.12: Wizard - Step 6: System Log

Chapter 5: Configuring the ACS Console Server in Wizard Mode 53

NOTE: To configure syslog with data buffering features for specific ports, switch to the Expert mode, Ports -

Physical Ports - Modify Selected Ports - Data Buffering.

Before setting up syslogging, make sure a pre-configured syslog server is available on the same
network as the console server. From the syslog server administrator, obtain the the IP address of the
syslog server and the facility number for messages coming from the syslog server.

To add a syslog server:

This procedure assumes you have the IP address of the syslog server and the facility number for
messages coming from the console server.

1. Select Step 6: System Log. The System Log form displays.

2. From the Fa cility Number pull-down menu, select the facility number.

3. In the New Syslog Server field, enter the IP address of a syslog server and then click the Add
button. (Repeat this step until all syslog servers are listed.)

4. The new server(s) appears in the Syslog Servers list.

5. Click apply changes.

To delete a syslog server:

1. From the Syslog Server list, select the syslog server that you wish to delete from the current
facility location and then click Delete.

2. Click apply changes.

54 Cyclades ACS Advanced Console Server Installation, Administration and User Guide

55

CHAPTER

6

Applications

Configuring the Console Server in Expert Mode

Most applications require that you set the Web Manager to Expert mode. If you are in Wizard mode
and need to perform advanced configuration, click the Expert button at the bottom of the left menu
panel to switch to Expert mode. If the Wizard button displays at the lower left of the screen, you are
in Expert mode.

Overview of menus and forms

Figure 6.1 shows a typical Wizard mode screen. The top menu bar contains the primary commands
and the left menu panel contains the secondary commands. Based on what you select from the top
menu bar, the left menu panel selections change accordingly and the form area may include tabs for
other options as shown.

Figure 6.1: Expert Mode Screen Elements

Wizard/Expert

Left Menu

Top Menu

Tabs

Form Area

Command Buttons

56 Cyclades ACS Advanced Console Server Installation, Administration and User Guide

NOTE: Procedures in this manual use shortcuts to tell how to get to Web Manager forms. For example, a step

telling the user to access the Outlets Manager form uses this convention, In Expert mode, go to Applications­IPDU Power Mgmt.-Outlets Manager.

Mapping the expert mode menus and forms

The following tables illustrate mapping of the menus and forms available in Expert mode. If you
are viewing this document online, click any term to go to the section where the form is described.

Table 6.1: Expert Mode Menu and Forms, Applications, Network and Security

Applications Network Security

• Connect

• IPDU Power Management

• Outlets manager

• View IPDUs info

• Users Manager form

• Configuration

• Software Upgrade form [for
the IPDU]

• IPDU Power Management

• IPMI Power Management

• Terminal Profile menu

• Host Settings

• Syslog

• PCMCIA Management

• VPN Connections

• SNMP

• Firewall Configuration

• Host Table

• Static Routes

• Users and Groups

• Active Ports Sessions

• Authentication

• Auth Type

• Radius

•Tacacs+

• Ldap

• Kerberos

•NIS

• Security Profiles

Table 6.2: Expert Mode Menu and Forms, Ports and Administration

Ports Administration

• Physical Ports

• Modify Selected/All Ports

• General form

• Access

• Data Buffering

• Multi User

• Power Management

• Other

• Virtual Ports

• Ports Status

• Ports Statistics

• System Information

• Notifications

• Time/Date

• Boot Configuration

• Backup Configuration

• Upgrade Firmware

• Reboot

• Online Help

Chapter 6: Applications 57

Applications Menu and Forms

This remainder of this chapter describes the Applications menu and the related forms. The
following table provides a description of the left menu panel and link s to the detailed information
and associated procedure. If you are in Wizard mode and need to perform advanced configuration,
clicking the Expert button at the bottom of the left menu panel to switch the Web Manager to
Expert mode. The following table describes each item in the left hand menu of the Applications
form and references the detailed information and appropriate procedure for each item.

Connect

Using the Connect form, you can connect directly to the console server or to devices connected to
the serial ports.

Connecting to the console server

Clicking the Connect to ACS radio button and then clicking on the the Connect displays a Java
applet running an SSH session similar to the following figure.

Table 6.3: Expert - Applications Menu

Menu Selection Use this menu to: Where Documented

Connect Connect to the console server shell via a secure SSH

session or connect to the serial ports.

Page 57

IPDU Power Mgmt. Manage power outlets on the IPDUs. From here you can

power remote machines up and down, check the status
and lock the power outlet in the on or off state to prevent
accidental changes.

Page 59

IPDU Multi-Outlet Ctrl Manage all power outlets of a multi-outlet server or device

connected to the IPDU in one single operation.

Page 67

IPMI Power Mgmt. Manage IPMI (Intelligent Platform Management Interface)

devices. Power ON/OFF remote machines and check their
current status.

Page 70

Terminal Profile Menu Configure a menu of commands that will be presented to

the user when they power on their server terminal and
login to the console server. This is a special application
used only when the console server is being used as server
with terminals attached.

Page 74

58 Cyclades ACS Advanced Console Server Installation, Administration and User Guide

Figure 6.2: Expert - SSH session Java Applet

NOTE: SSH root access is enabled when the security profile is set to Moderate or Open. If a Secured security

profile is selected, you need to switch to a Custom security profile and enable allow root access option.

Connecting to devices connected to the serial ports

The Serial pull-down menu lists all the serial port numbers or the administrator-assigned aliases
that a user is authorized to access. Selecting a port number or alias and clicking Connect displays a
Java applet with a connection protocol for which the serial port is configured.

If authentication is in effect for the port, you need to supply a user name and password to log into
the device.

To connect to the console server:

This procedure logs you into the console server as a Regular User in an SSH session.

1. Go to Applications - Connect in Expert mode.

2. Click the Connect to ACS radio button.

3. Click the Connect button. A Java applet viewer appears.

NOTE: The login prompt is displayed whenever your security profile is set to Moderate or Open; otherwise, an
authentication form appears. You cannot authenticate unless you change the security profile to Custom and
enable allow root access.

To connect to a device through a serial port:

1. Go to Applications - Connect in Expert mode.

Chapter 6: Applications 59

2. Click the Serial radio button.

3. Select a port number or alias from the Serial pull-down menu.

4. Click Connect. A Java applet viewer appears. If authentication is specified for the selected
port, you are prompted to log in. If not, you are logged in automatically.

IPDU Power Management

Selecting IPDU Power Mgmt. displays five tabs in the form area. The following list shows the
names of the tabs. If viewing this information online, you can click on any of the following to get
more information on the purpose and function of each form:

• Outlets manager on page 59

• View IPDUs info on page 61

• Users Manager form on page 63

• Configuration on page 64

• Software Upgrade form [for the IPDU] on page 66

NOTE: Using the IPDU power management forms, you can manage the power to connected devices only if a
serial port is configured for power management.

Outlets manager

On the Outlets Manager form under Applications-IPDU Power Mgmt., you can perform the
following tasks for all outlets on all connected IPDUs.

• Check the status of outlets.

• Turn outlets on and off.

• Cycle power.

• Lock outlets to prevent accidental changes in power state.

• Unlock the outlets.

• Assign an alias to the outlet (to identify the device for which it provides power).

• Change the power up interval.

• Save the current configuration to Flash memory.

The following figure shows an Outlets Manager form.

60 Cyclades ACS Advanced Console Server Installation, Administration and User Guide

Figure 6.3: Expert - Applications - IPDU Power Mgmt. - Outlets Manager

The following table illustrates what each icon indicates.

Clicking the Edit button displays the dialog box for specifying the outlet name and power
up interval.

You can specify a name for the outlet, for example, the server or device name and change the
power up interval.

NOTE: The power up interval is the amount of time (in seconds) that elapses after the selected outlet is turned
on before another outlet can be turned on.

To view status, lock, unlock, rename or cycle power outlets:

1. Go to Applications - IPDU Power Mgmt. - Outlets Manager. The Outlets Manager
form appears.

2. To switch an outlet on or off, click its adjacent light bulb icon.

3. To lock or unlock an outlet, click its adjacent padlock icon.

4. To cycle power to an outlet, click the adjacent Cycle button.

Table 6.4: Expert - Outlets Manager Icons Description

Button Purpose

Yellow bulbs indicate an outlet is switched ON. Gray bulbs indicate an outlet is
switched OFF.

An opened padlock indicates that an outlet is unlocked. A closed padlock indicates that
an outlet is locked.

An orange Cycle button is active next to each outlet that is on.

Chapter 6: Applications 61

5. To change the outlet’s name or the power up interval, click the adjacent Edit button. The Edit
Outlet dialog box appears.

a. To change the name assigned to the outlet, enter a new name in the Outlet Name field.
b. To change the time between when this outlet is turned on and another can be turned on,

change the default 0.50 number of seconds in the Power Up Interval field.

NOTE: An outlet name cannot be changed for outlets previously associated to any serial port, which is
configured under Ports - Physical Ports - [select Serial Port number] - [Modify Selected Ports] - Power
Management tab - [v] Enable Power Management on this port - Outlet number(s)

6. Click OK.

7. Click the Save Outlets State button.

8. Click apply changes.

View IPDUs info

Selecting Applications - IPDU Power Mgmt. - View IPDUs Info tab, the form in the following
figure appears.

Figure 6.4: IPDU Power Mgmt. - View IPDUs Info

Figure 6.4 shows the information displayed when two eight-outlet PM8 15A IPDUs are cascaded
through Serial Port 1. The IPDU is configured for syslogging, an alarm buzzer and over current
protection. The configuration is done through the IPDU Power Mgmt configuration form.

62 Cyclades ACS Advanced Console Server Installation, Administration and User Guide

The following table describes the information viewable on the View IPDUs Info form. The
information shown in the table appears for each serial port configured for power management.

You can view the following information about each IPDU configured through a serial port.

Table 6.5: Expert - View IPDUs General Information

Form Heading Description Example

Name Either a default name or administrator-configured

name appears.

IPDU

Number of units The number of IPDUs connected to the port. The

first IPDU is referred to as the master. Any other
IPDUs daisy-chained off the first IPDU are
referred to as slaves.

Two IPDUs daisy-chained
through the Serial Port 1

Number of outlets Total number of outlets on all connected IPDUs. Sixteen for two Model PM8

15A IPDUs daisy-chained
through Serial Port 1

Buzzer Whether a buzzer has been configured to sound

when a specified alarm threshold has reached.

ON when the buzzer
is configured

Syslog Whether syslogging has been configured for

messages from this IPDU.

ON when syslogging
is configured

Over Current Protection Whether over current protection is enabled. Over

Current Protection prevents outlets from being
turned on if the current on the IPDU exceeds the
specified threshold.

OFF when over current
protection is not enabled

Table 6.6: Expert - View IPDUs Unit Information

Form Heading Description Example

Model IPDU model number PM8 15A
Software Version IPDU firmware version 1.5.0
Alarm Threshold Number of amperes that trigger an alarm or syslog

message when it is reached

15.0A

Current Current level on the IPDU 0.0A
Maximum Detected Maximum current detected 0.4A
Clear Max Detected Current Button to reset the maximum detected current value.
Temperature Temperature on the IPDU (displayed if equipped with a

temperature sensor.)

N/A

Chapter 6: Applications 63

To view and reset IPDU information:

1. Go to Applications - IPDU Power Mgmt. -View IPDUs Info. The View IPDUs Info
form appears.

2. To clear the stored values for the maximum detected current, select the Clear Max Detected
Current button.

3. To clear the stored values for the maximum detected temperature, click the Clear Max
Detected Temperature button.

Users Manager form

On the Users Manager form under Applications - IPDU Power Mgmt., you can assign users
to outlets.

The following figure shows the form with two users listed for a dual IPDU power management
appliance. The IPDU is connected to serial port 1, which is configured for power management.

Figure 6.5: IPDU Power Mgmt- Users Manager

If more than one serial port is configured for power management, multiple user lists appear, one for
each IPDU power management port.

Clicking Add displays the following dialog box where you can specify one or more comma­separated user names and one or more outlets.

Maximum Detected Maximum temperature detected on the IPDU (displayed if

equipped with a temperature sensor.)

N/A

Clear Max Detected Temperature Button to reset the maximum detected temperature value.

Table 6.6: Expert - View IPDUs Unit Information (Continued)

Form Heading Description Example

64 Cyclades ACS Advanced Console Server Installation, Administration and User Guide

Figure 6.6: Expert - IPDU Power Mgmt. - Users Manager - Add User

When added, the user name is added to the list on the Users Manager form, as shown in the
following figure.

Figure 6.7: Example of Adding IPDU Users

To configure users to manage power outlets on IPDUs:

1. Go to IPDU Power Mgmt. - Users Manager. The Users Manager form appears.

2. To disable a user’s ability to manage power, select the user name from the Users Information
list and then click Delete.

3. To edit a user, select the user name from the Users Information list and then click Edit. The
Add/Edit User x Outlets dialog box appears.

4. To add a new user, click Add. The Add/Edit User x Outlets dialog box appears.

5. In the Add/Edit User x Ou tlets di alog box, perform the following steps as needed.
a. Enter the user name in the User field.
b. Enter or modify the numbers of the outlets to which the user is assigned in the Outlets

field. Use a comma to separate outlet numbers and use a hyphen to indicate a range of
outlets (for example: 1, 3, 4, 6-8).

6. Click OK. The Users Information list displays the changes.

7. Click apply changes.

Configuration

On the Configuration form under Applications - IPDU Power Mgmt., you can specify
the following:

• An alias for the IPDU

• A threshold current between 1 and xx amperes. (The maximum current depends on the
Cyclades IPDU model. Refer to View IPDUs info to determine your IPDU model.

• Any of the following actions to occur if the threshold current is exceeded on the IPDU.

Chapter 6: Applications 65

• Over-current protection. If enabled, the outlets on the IPDU cannot be turned on when the

current on the IPDU exceeds the selected threshold.

• Syslog messages are generated

• Buzzer sounds if the current exceeds the defined threshold

The Configuration form shows an entry for each serial port that has an IPDU connected and is
configured for power management. The first connected IPDU is called the master, the second and
subsequently-connected IPDUs are called Slaves. On the form Master Unit refers to the first or only
connected IPDU. When IPDUs are daisy-chained, the form displays additional lines to allow you to
specify separate alarm thresholds for Slave IPDU(s).

The following figure shows the Configuration form when two IPDUs are connected to Serial port 1
configured for power management.

Figure 6.8: Expert - Applications - IPDU Power Mgmt. - Configuration

NOTE: The number of amps shown in the Master Unit (and Slave units if available) pull-down menu varies

according to the model of the connected IPDU. Figure 6.8 shows number 15 for two 15 amp IPDUs as a master
and a Slave.

To specify names, alarms, syslogging and over current protection for IPDUs:

Perform this procedure if you wish to specify an alias or configure a threshold current to trigger
alarms, syslogging or over-current protection for an IPDU.

1. Go to IPDU Power Mgmt. - Configuration.

2. The Configuration form displays entries for all ports configured for power management.
Perform the following steps for each IPDU.

a. Assign a name to the IPDU in the Name field, if desired.
b. For each IPDU, click the appropriate checkboxes to enable or disable Over Current

Protection, to generate Syslog files and sounding a Buzzer. All of the selected actions
occur if a defined threshold is exceeded on the IPDU.

c. If enabling over-current protection, a buzzer or alarm notification, select an Alarm

Threshold from the pull-down menu.

3. Click apply changes.

66 Cyclades ACS Advanced Console Server Installation, Administration and User Guide

Software Upgrade form [for the IPDU]

On the Software Upgrade form under Applications - IPDU Power Mgmt., you can upgrade the
software on Cyclades IPDU power management appliances.

The following figure shows the Software Upgrade form listing the current software version on the
IPDU connected to Serial Port 1.

Figure 6.9: Expert - Applications - IPDU Power Mgmt. - Software Upgrade

An entry for each serial port configured for power management and information about each
directly-connected IPDU is displayed. The primary connected IPDU is referred to as the master and
any daisy-chained IPDUs are called Slaves. The form displays the version number of the software
currently installed on each IPDU.

To upgrade Cyclades IPDU software using this form, you first must download a more-recent
version of the Cyclades IPDU software into the console server’s /tmp directory with the filename
pmfirmware. Clicking the Refresh button checks for a more-recent version of the PM firmware in
the /tmp/pmfirmware file. If the /tmp/pmfirmware file is present and the software version it
contains is more recent than the installed version, information about the new version is displayed
and an Update button appears on the form.

To download Cyclades IPDU software:

Use this procedure to download software from the Cyclades website.

1. Point your browser to http:/ /www.cyclades.com/support/downloads.php to open the
Downloads page.

NOTE: Your web server must be in the same subnet as the console server to obtain the latest version of
Cyclades IPDU software.

2. Locate and click on Cyclades PM Intelligent Power Distribution Unit and then compare the
driver’s displayed version number to the version shown in the Applications - IPDU Power
Mgmt. - Software Upgrade form.

3. Under the Firmware section, find the firmware version th at fits your req uirements.

4. Click the Firmware link associated with the appropriate version.

Chapter 6: Applications 67

5. After the download completes, copy the file to the /tmp folder with the name pmfirmware.

To upgrade software on a Cyclades PM IPDU:

Perform this procedure to upgrade the software on a Cyclades IPDU.

1. Go to Power Mgmt. - Software Upgrade. The Software Upgrade form is display e d.

2. Click the Refresh button. If a /tmp/pmfirmware exists containing a more recent version of the
PM firmware than the one currently installed, an Update button is displayed.

3. Click Update.

4. Click apply changes.

IPDU Multi-Outlet Ctrl

Selecting Applications - IPDU Multi-Outlet Ctrl will display the following form used for managing
power on a group of outlets that provide power to a multi-power supply server or device connected
to a serial port.

Figure 6.10: Expert - Applications - IPDU Multi-Outlet Ctrl

Whether the power supplies are connected to the same PM or not, all outlets that are configured to
the same serial port can be treated as a group and controlled simultaneously usi ng thi s form.

If there is no IPDU configured, the screen in Figure 6.11 is displayed. For the configuration
procedure, see To configure a serial port for IPDU or IPMI power management: on page 72.

Figure 6.11: Expert - Applications - Multi-Outlet Ctrl [not configured]

Prerequisites for multi-outlet control

To control groups of outlets from the IPDU Multi-Outlet Control page, the following prerequisites
must be met.

68 Cyclades ACS Advanced Console Server Installation, Administration and User Guide

• An IPDU must be plugged into one of the serial ports and that serial port must be configured
for power management.

• A device connected to a serial port must be plugged into at least two outlets on the IPDU.

• The IPDU and the outlet numbers to which the device is connected must be configured on the
serial port.

Power management icons

In the first line of each group, the icons as well as the Cycle button operate over the entire group.
The light bulb and lock icons next to the individual outlets are used to display the status of each
outlet but cannot be used to control the individual outlets.

Figure 6.12: Expert - Applications - Multi-Outlet Control Icons

The icons in the first line of each group are described in the following table.

NOTE: The Cycle button operates only if all outlets of a group are turned ON.

Table 6.7: Expert - IPDU Multi-Outlet Ctrl Form Icons

Button Purpose

A grey light bulb icon indicates that the group is off.
A yellow light bulb indicates that the group is on.
Clicking the light bulb icon once changes the power status of all of the
outlets in the group.

A grey and open lock icon indicates that the outlets are unlocked and
can be powered on or off.
A full-color, closed lock icon indicates that the outlet is locked and
cannot be turned on or off.
Clicking the lock icon once changes the lock status of all of the icons in
the group.

Turn power briefly off and then on again

Chapter 6: Applications 69

To power on or power off a group of outlets in the same power state:

Use these instructions if all of the outlets in a group are turned either off or on.

1. Go to Applications - IPDU Multi-Outlet Ctrl.

2. To power on the group of outlets in off state, click the grey light bulb adjacent to the
group name.

3. To power off the group of outlets shown as on, click the yellow light bulb adjacent to the
group name.

To power on or power off a group of outlets in different power states:

Use these instructions if not all of the outlets in a group are turned either off or on.

1. Go to Applications - IPDU Multi-Outlet Ctrl.

2. To power on the group, click the yellow light bulb adjacent to the group name to turn all of the
outlets in that group on.

3. To power off the group, perform the following steps:
a. Click the yellow light bulb icon adjacent to the group name once to turn all of the

outlets off.

b. To turn all of the outlets on, click the grey light bulb icon adjacent to the group name.

To lock or unlock a group of outlets in the same power state:

Use these instructions if all of the outlets in a group are either locked or unlocked.

1. Go to Applications - IPDU Multi-Outlet Ctrl.

2. To lock the group of outlets, click the open padlock icon adjacent to the group name.

3. To unlock the group of outlets, click the closed padlock icon adjacent to the group name.

To lock or unlock a group of outlets in different lock states:

Use these instructions if not all of the outlets in a group are locked or unlocked.

1. Go to Applications - IPDU Multi-Outlet Ctrl.

2. To lock the group of outlets, perform the following steps:
a. Click the open padlock icon adjacent to the group name once to unlock all of the outlets.

All of the outlets are in the same state (open padlock).

b. To lock all of the outlets, click the open padlock icon adjacent to the group name.

3. To unlock the group of outlets, click the closed padlock icon adjacent to the group name.

To turn the power of a group of outlets off and on again:

This procedure works only with groups of outlets that are all turned on.

1. Go to Applications - IPDU Multi-Outlet Ctrl.

2. Make sure that all of the outlets are turned on.

70 Cyclades ACS Advanced Console Server Installation, Administration and User Guide

3. See T o power on or power off a group of outlets in the same power state: on page 69, if needed.

4. Click the Cycle button adjacent to the group name.

IPMI Power Management

Intelligent Platform Management Interface (IPMI) refers to the monitoring and control functions
that are built into the platform hardware and primarily is used for monitoring a server’s hardware
such as temperature, voltage and errors.

On the IPMI Power Mgmt. form under Applications, you can enable and perform power
management of devices that have IPMI controllers. If no IPMI devices have been added, only the
Add button appears.

When an Add button or Edit button is pressed, a form appears for adding or editing a device.

Figure 6.13: Expert - IPMI Power Mgmt. Add and Edit IPMI Device Dialog Boxes

After you fill out the fields or make changes and save the changes, the device is added to the IPMI
Devices list or the configuration for the device is changed. The following figure shows an entr y for
an IPMI server.

Figure 6.14: Expert - IPMI Power Mgmt. Device Entry Example

Chapter 6: Applications 71

Once an IP address for a device is added to the list of IPMI devices on this form, any user
authorized for power management can turn power on and off and cycle power for the IPMI device
through the Web Manager. Also, users authorized to connect to serial ports can perform IPMI
power management on a serially-connected device while connected.

To configure power management of IPMI devices the following console server information must
be obtained.

The information is updated in the /etc/portSlave/pSlave.conf and /etc/IPMIServer.conf files.
The admin or user in the admin group can add, edit or delete an IPMI device in an IPMI devices

list. The user with power management privileges can manage power on listed IPMI devices.
The following table describes the icons available from the IPMI Power Mgmt. form.

Table 6.8: Expert - IPMI Information

Field Name Description

Device Alias Optional
IP Address IP address of the device on the network
Authentication type None, Straight Password, MD5, MD2
Access Level (User/Operator/Administrator) Default is User
Username Default is NULL use.
Password Password for administering the remote device

Table 6.9: Expert - IPMI Power Mgmt. Form Icons

Button Purpose

A yellow light bulb indicates the current state of the device. Clicking the
light bulb icon toggles the state of the device.

When the status is unknown, a question mark appears instead of the
light bulb. A question mark indicates either of the following conditions:

• The device was added or deleted and the changes were not saved.

• The device did not answer IPMI requests.
Turn power briefly off and then on again

Add and configure a new IPMI device.

Select an IPMI device to review or change its configuration.

Delete an IPMI device.

72 Cyclades ACS Advanced Console Server Installation, Administration and User Guide

To delete, add or edit an IPMI device to enable or disable IPMI power management:

1. Go to Applications- IPMI Power Mgmt. The IPMI Power Management form appears.

2. To delete a previously added IPMI device, click the Delete button on the line with the
device’s name.

3. To add a device, click the Add button and perform the following steps.
a. Enter an alias for the device in the Alias: field, if desired.
b. Enter the IP address of the IPMI device in the IP Address field.
c. Choose an authentication type, if desired, from the Authentication Type pull-down menu.
d. Choose a user permission type from the Access Level pull-down menu. The default

is User.
e. Enter a Username.
f. Enter a password for administering the remote device in the Password field and go to

Step 5.

4. To edit the configuration for a device, click the Edit button on the line with the device’s name
and make the desired changes on the Edit dialog box.

5. Click OK.

6. Click apply changes.

To manage power on an IPMI device:

1. Go to Applications - IPMI Power Mgmt. Entries for all previously-defined IPMI devices
appear on the form.

2. To toggle the state of a device, click the adjacent light bulb icon.

3. To briefly turn the power off then on again, click the Cycle button.

To configure a serial port for IPDU or IPMI power management:

1. Go to Ports - Physical Ports.

2. To select a port or ports to modify, click the appropriate Modify Ports button and then the
Power Management tab.

3. To enable Power Management of a device connected to the current port and plugged into a
connected IPDU, click Enable Power Management on this port. The follow ing form appears.

Chapter 6: Applications 73

Figure 6.15: Expert - Serial Port - Power Management - Enable Power Management

4. Click the Add button The Add Outlet dialog box appears.

5. Enter the outlet number(s) separated by comma into which the device is conn ected.

6. Click OK. The power management port and the specified outlet numbers display on the
PowerMgmt Port list.

7. Enter the power management hotkey in the Power Management Key field. Enter a caret (

^) for

the escape key, as in

^p. The caret stands for the Ctrl key.

To configure a user for IPDU power management while connected to a serial port:

The following procedure allows a user to perform power management for a device while connected
to the device through one of the console server’s serial ports.

1. To allow everyone with access permissions for this port to perform power management on this
port, click the Allow All Users radio button.

2. To restrict power management on this port to a restricted list of users authorized to access this
port, click the Allow Users/Groups radio button.

Figure 6.16: Expert - Serial Port - Power Management - User Permissions

3. Enter a valid user name or group name in the New User/Group field and click Add.

4. Click Done.

5. Click apply changes.

74 Cyclades ACS Advanced Console Server Installation, Administration and User Guide

To enable IPMI power management of an IPMI device connected to the currently
selected port:

1. Check the checkbox next to Enable IPMI on th is port . The IPMI key and IPM I Server fields
are displayed.

Figure 6.17: Expert - Serial Port - Power Management - Enable IPMI

2. Enter an IPMI hotkey. A user of the device connected to this serial port can use this hotkey to
bring up the IPMI power management screen while connected to the port. Enter the key
combination in the IPMI key field with

^, as in ^I. The caret (^) stands for the Ctrl key.

NOTE: The default IPMI hotkey is ^I.

The hexadecimal code for the

Ctrl-I

is the same as the keyboard’s

Tab

key.

You can choose to change the default IPMI hotkey .

3. Select the name of the previously-added IPMI device from the IPMI Server pull-down men u.

4. Click Done.

5. Click apply changes.

Terminal Profile menu

On the Terminal Profile Menu under Applications, you can define a terminal command menu. This
menu is used if a terminal is connected to one of the serial ports and is configured as a local
terminal. A server terminal configured as a local terminal launches a session directly on the console
server with access to the Linux commands on the console server unless you configure a menu here.

The following figure shows an empty menu.

Figure 6.18: Expert - Applications - Terminal Profile Menu

Chapter 6: Applications 75

The menu can contain any command recognized by the Linux operating system on the console
server. The most common use of this feature is to create multiple menu options for launching SSH
sessions on remote hosts.

When you click Add, the Add Option dialog box appears.
For example, you can create a menu called SSH to Servers with options that launch SSH

connections to several servers, as shown in the following example.

Figure 6.19: Expert - Terminal Profile Menu Example

The command menu appears when the terminal is powered on.

To create a menu for a local server terminal:

1. Go to Applications - Terminal Profile Menu. The Terminal Profile menu displays.

2. Enter a title for the menu in the Menu title field.

3. To edit an existing menu option, select the Action Name from the table and then click Edit.

4. To add a new menu option, click Add. The Add Option dialog box displays.
a. Enter a title for the menu option in the Title field.
b. Enter an action or command to be executed when the user clicks the menu option in the

Action/Command field.

5. Click OK.

6. Click apply changes.

76 Cyclades ACS Advanced Console Server Installation, Administration and User Guide

77

CHAPTER

7

Network Menu and Forms

This chapter describes the Network menu and related forms. The following table provides a
description of the left menu panel.

Table 7.1: Expert - Network Menu Descriptions

Menu Selection Use This Menu to:

Host Settings on page 78 Configure the network parameters such as Host Name, IP addresses,

DNS services, Gateway and Bonding.

Syslog on page 81 Configure how the console server will handle its syslog messages. The

console server generates syslog messages related to users
connecting to ports, login failures and other information that can be
used for audit and control purposes.

PCMCIA Management on page 82 Configure the optional PCMCIA cards. The console server supports

several PCMCIA cards including modem, ISDN, GSM, CDMA, wireless
LAN, Ethernet LAN, CompactFlash and IDE drives for data buffer
storage. For the list of supported cards point your browser to and follow
the links to Products - Cyclades ACS Advanced Console Servers - PC

Cards List.

VPN Connections on page 91 Configure one or more VPN connections to other systems or console

server attached devices.

SNMP on page 95 Configure SNMP with community names, OID and user names. This

section and the dialog boxes guide you to configure the
required parameters.

Firewall Configuration on page 99 Configure static IP tables and how packets should be filtered.
Host Table on page 108 View information about the local network environment.

View table of

hosts; create, edit and delete hosts.

Static Routes on page 108 Manually add routes. Static routes are a very quick and effective way to

route data from one subnet to different subnets.

78 Cyclades ACS Advanced Console Server Installation, Administration and Users Guide

Host Settings

When you select Network - Host Settings the following form appears.

Figure 7.1: Expert - Network - Host Settings [DHCP Enabled]

If the DHCP is not enabled, then other options appear on the form as shown in the following figure.

Figure 7.2: Expert - Network - Host Settings [DHCP disabled]

Chapter 7: Network Menu and Forms 79

The following table provides a brief definition of the Host Settings form fields.

NOTE: If you have set IP Filtering rules before bonding is activated, the interface reference in the firewall
configuration will be

eth0. You need to change the interface to bond0 in order to reference the

bonded interface.

Table 7.2: Network Host Setting Field Defintions

Field name Field Definition

Host Name The fully qualified domain name identifying the specific host server on

the network.

Console Banner A text string designed to a ppear on the console upon logging into and

exiting from a port as a way to verify or identify the particular

port connection.
Primary IP IP address of the console server unit.
Secondary IP The secondary IP address of the console server unit. By configuring a

second IP address, the unit will be available for more than one network.
Network Mask The 32-bit number used to group IP addresses together or to indicate the

range of IP addresses for a subnet.
Secondary Network Mask Optional.
MTU Maximum Transmission Unit used by the TCP protocol.
DNS Server Address of the Domain Name Server.
Secondary DNS Server Address of the backup Domain Name Server.
Domain Name The name that identifies the domain, for example, domainname.com.
Gateway IP The IP address to the gateway on the subnet.
Bonding Enables redundancy for the Ethernet de vices using the standard Ethernet

interface as the primary mode of access and a PCMCIA card as a

secondary mode of access.

If bonding is enabled, the following values should be set.

Miimon

:

The interval in which the active interface is checked to see if it is still

communicating (in milliseconds).

Updelay

:

The time that the system will wait to make the primary interface active after

it has been detected as up (in milliseconds).

80 Cyclades ACS Advanced Console Server Installation, Administration and Users Guide

To configure host settings [Expert]:

1. Go to Network - Host Settings. The Host Settings form appears. By default, the DHCP is
enabled. To disable DHCP, click the checkbox to remove the check mark. Additional
fields appear.

2. Enter the name assigned to the IP address of the console server in the Host Name field.

3. Enter a console banner in the Console Banner field. The console banner appears on the console
upon logging into and exiting from a port as a way to verify or identify the particular
port connection.

4. Under Ethernet Port, complete or edit the following fields, as necessary.
a. Enter the IP address of the console server in the Primary IP field.
b. Enter the netmask in the Network Mask field.
c. If the console server has a second Ethernet card in a PCMCIA slot, enter the console

server’s second IP address in the Secondary IP field.
d. Specify the network mask of the secondary IP in the Secondary Network Mask field.
e. Specify the desired maximum transmission unit in the Maximum Transmission Unit field.

5. Under DNS Service specify or change the following information, if desired.
a. Enter the address of the domain name server in the Primary DNS Server field.
b. If there is a backup DNS server, enter the address of the secondary DNS in the Primary

DNS Server field.
c. Enter the domain in the Domain Name field.
d. Enter the IP address of the gateway in the Gateway IP field.

6. If you are done go to step 8. If you are enabling Bonding continue to step 7.

7. To activate Bonding place a checkmark in the Enabled field. Miimon and Updelay
fields appear.

a. Enter a positive integer in the Miimon field. This value represents the interval in which the

active interface is checked to see if it is still communicating, measured in milliseconds.

b. Enter a positive integer in the Updelay field. This value represents the time that the system

will wait to make the primary interface active after it has been detected as up, measured
in milliseconds.

8. Click apply changes.

Chapter 7: Network Menu and Forms 81

Syslog

When Network - Syslog is selected, the form shown in the following figure appears.

Figure 7.3: Expert - Network - Syslog

You can use the Syslog form to configure how the console server handles system logged messages.
The Syslog form allows you to perform the following:

• Specify one or more syslog servers to receive syslog messages related to ports.

• Specify rules for filtering messages.

The top field on the form CAS Ports Facility is used to tell console server where to send
syslog messages.

You can specify a facility number for the messages from serial ports. Obtain the facility numbers
from the syslog server’s administrator.

You can send the syslog messages:

82 Cyclades ACS Advanced Console Server Installation, Administration and Users Guide

• To the console port for logging the messages even if no user is logged in

• To all sessions where the root user is logged in

• To one or more syslog servers.

You can add or remove syslog servers.
The bottom part of the form has filtering rules for specifying which types of messages are

forwarded based on the following criteria:

• Severity level: Emergency, Alert, Critical, Error, Warning, Notice, Info, Debug.

• Category CAS log; Data Buffering log; Web log or System lo g.

To configure syslogging for serial ports and specify message filtering:

1. Go to Network - Syslog in Expert mode. Th e Syslog form appears.

2. Select a facility number for messages generated by serial ports by selecting the number from
the CAS Ports Facility pull-down menu.

3. Select a destination for the syslog messages by clicking the checkbox next to one or all of the
options: Console, Root User or Server.

4. Add a syslog server to the Syslog Servers list, by ent ering its IP address in the New Syslog
Server field and clicking the Add-- button.

5. Configure the message filtering as per your requirements.

6. Click apply changes.

PCMCIA Management

When Network - PCMCIA Management is selected the following form appears.

Figure 7.4: Expert - Network - PCMCIA Management

You can use the PCMCIA management form to configure the following types of PCMCIA cards:

• 10/100 Base-T Ethernet

• 802.11b Wireless LAN

• V.90 Modem

Chapter 7: Network Menu and Forms 83

•ISDN

•GSM

•CDMA

• CompactFlash

• IDE Hard Disk

NOTE: You can insert a card a t any time and the corresponding driver should load automatically. Before
removing a card, however, you must use the Web Manager to eject the card and stop the system from using the
card. If you install an IDE PCMCIA card in a slot, it automatically mounts and no configuration is necessary
through this form.

NOTE: The console server supports GPRS and 1xRTT PCMCIA cards through a Generic Dial-Out application.
For Configuration details refer to the Cyclades ACS Advanced Console Server Command Reference Guide.

For a list of the supported PCMCIA cards, refer to Cyclades ACS advanced console server web site
at http://www.cyclades.com and follow the links to Products - Cyclades ACS Advanced Console
Servers - PC Cards List.

To configure a PCMCIA card:

1. Go to Network - PCMCIA Management. The PCMCIA Management form appears.

2. Insert the card into the PCMCIA slot on the front of the consol e server and Click the Insert
button for the slot in which you installed the PCMCIA card.

3. Click OK in the dialog box that displays.

NOTE: You can insert a card a t any time and the corresponding driver should load automatically. Before
removing a card, you must use the Web Manager to eject the card and stop the system from using the card. If
you install an IDE PCMCIA card in a slot it automatically mounts and no configuration is necessary through
this form.

The card information appears under the Card Type column as shown in the following figure.

Figure 7.5: PCMCIA Card Type by Slot

4. Click the Configure button.

5. The Slot dialog box appears.

84 Cyclades ACS Advanced Console Server Installation, Administration and Users Guide

6. Select the desired PCMCIA card type from the pull-down menu.

7. Follow the steps that correspond to the type of the PCMCIA card you have installed.

Configuring a modem PCMCIA card

You can use the PCMCIA Management form under Network to enable a remote user to call into the
console server through an installed modem PCMCIA card. When you select Modem from the pull­down menu, the dialog box for the corresponding card slot appears.

NOTE: For all supported PCMCIA cards that include a checkbox for Authentication One Time Passwords
Required, a full description of the One Time Password (OTP) feature can be found in the Cyclades ACS

Advanced Console Server Command Reference Guide.

The following table provides a brief description of the fields available in the Modem dialog box.

If you click the PPP checkbox, additional fields for a local and remote IP address and a Call Back
checkbox appear.

If you enable Call Back, the Phone Number field appears on the Slot dialog box.

To configure a modem PCMCIA card:

1. Install the m odem card and select Modem from the pull-down menu on the PCMCIA
Management form.

2. To enable PPP, perform the following steps:
a. Check the PPP checkbox.
b. The Local IP and the Remote IP fields and the Call Back checkbox appear on the Slot

dialog box.

c. Enter an IP address in the Local IP field, if desired.

Table 7.3: Modem Dialog Box Fields

Field Name Definition

[PCMCIA Card] Pull-down menu to select the type of PCMCIA card you are using.
PPP Checkbox to enable point-to-point protocol.
Local IP The local IP address of the PCMCIA card.
Remote IP The remote IP address of the PCMCIA card.
Call Back Checkbox to enable the callback security feature.
Phone Number The phone number that the console server uses to call back.
Authentication One Time

Password Required

Checkbox if OTP is required for authentication by way of the PCMCIA modem.