Page 1
Installation, Administration, and User’s
Cyclades Corporation
3541 Gateway Boulevard
Fremont, CA 94538 USA
1.888.CYCLADES (292.5233)
1.510.771.6100
1.510.771.6200 (fax)
http://www.cyclades.com
AlterPath™ ACS
Guide
Software Version 2.6.0
Release Date: November 2005
Part Number: PAC0379
Page 2
© 2005 Cyclades Corporation, all rights reserved
Information in this document is subject to change without notice.
The following are registered or registration-pending trademarks of Cyclades Corporation in
the United States and other countries: Cyclades and AlterPath.
All trademarks, trade names, logos and service marks referenced herein, even when not
specifically marked as such, belong to their respective companies and are not to be considered
unprotected by law.
Page 3
Contents
Before You Begin ......................................................1
Audience .............................................................................................. 1
Document Organization ....................................................................... 2
Related Documents .............................................................................. 4
Typographic and Other Conventions ................................................... 4
Additional Resources ........................................................................... 5
Cyclades Technical Support ............................................................. 5
Cyclades Technical Training ............................................................ 5
Cyclades firmware Upgrades ........................................................... 5
Chapter 1: Introduction.............................................7
Overview .............................................................................................. 8
Product Models and Configurations ..................................................... 8
Connectors on the AlterPath ACS ...................................................... 10
Accessing ACS and Connected Devices ............................................ 10
Web Manager ..................................................................................... 11
Prerequisites for Using the Web Manager ......................................... 11
Types of Users .................................................................................... 12
Security .............................................................................................. 12
Authentication .................................................................................... 14
VPN .................................................................................................... 16
Packet Filtering on ACS ..................................................................... 16
Structure of IP Filtering .................................................................. 16
Chain ........................................................................................... 17
Page 4
Contents
Rule ............................................................................................. 17
Add Rule and Edit Rule Options .................................................... 18
SNMP ................................................................................................. 23
Notifications, Alarms, and Data Buffering ........................................ 24
Syslog Servers ................................................................................ 24
Prerequisites for Logging to Syslog Servers ............................... 24
Administering Users of Connected Devices ...................................... 25
Planning Access to Connected Devices ......................................... 25
Configuring Access to Connected Devices .................................... 25
ACS and Power Management ............................................................ 26
Configuring Power Management ................................................... 27
Configuring Ports for Power Management by Authorized Users 28
Configuring Ports for Power Management Using the CLI ......... 28
Options for Managing Power ......................................................... 28
Power Management Through the Web Manager ........................ 28
Power Management from the ACS Command Line ................... 29
Chapter 2: Installation and Configuration.............31
Shipping Box Contents ...................................................................... 32
Important Pre-installation Requirements ........................................... 38
Java Plug-In Requirement for Serial Port Access .......................... 38
Basic Installation Procedures ............................................................. 39
Mounting the ACS .......................................................................... 40
Making an Ethernet Connection ..................................................... 41
Connecting Servers and Other Devices to ACS ............................. 41
Making a Direct Connection to Configure the Network Parameters.
......................................................................................................... 42
Powering on the ACS and the Connected Devices ........................ 43
Configuring the Network Parameters ............................................. 43
Performing Basic Network Configuration Using the wiz Command
...................................................................................................... 44
Selecting A Security Profile Using the Web Manager ............... 48
Adding Users and Configuring Ports Using the Web Manager ..... 49
Enabling Ports and Assigning Users. .......................................... 49
Other Methods of Accessing the Web Manager ................................ 49
iv
Page 5
Installing PCMCIA Cards .................................................................. 51
Connecting AlterPath PM IPDUs ...................................................... 52
Chapter 3: Web Manager for Regular Users..........55
Using the Web Manager ..................................................................... 55
Features of Regular User Forms ........................................................ 57
Connect .............................................................................................. 58
Connect to ACS .............................................................................. 59
Connect to Serial Ports ................................................................... 60
Port Access Requirements ..........................................................60
Connection Protocols for Serial Ports ............................................60
TCP Port Numbers for Serial Ports ............................................. 61
IPDU Power Mgmt. ........................................................................... 62
Outlets Manager ............................................................................. 63
View IPDUs Info ............................................................................ 65
IPDU Multi-Outlet Ctrl ...................................................................... 66
Security .............................................................................................. 69
Chapter 4: Web Manager for Administrators ........71
Cyclades Web Manager .....................................................................72
Prerequisites for Using the Web Manager ...................................... 72
Common Tasks for ACS Administrators ........................................... 73
Common Features of Administrator Forms ....................................... 74
Buttons and ACS Information ........................................................ 74
Logging Into the Web Manager ......................................................... 76
Overview of Administrative Modes ................................................... 79
Wizard Mode .................................................................................. 80
Expert Mode ................................................................................... 80
Chapter 5: Configuring ACS in Wizard Mode........83
Step 1: Security Profile ................................................................... 83
Pre-defined Security Profiles ...................................................... 83
Default Security Profile .............................................................. 84
AlterPath ACS Installation, Administration, and User’s Guide v
Page 6
Contents
Custom Security Profile .............................................................. 84
Serial Port Settings and Security Profiles ................................... 87
Step 2: Network Settings ................................................................ 91
Step 3: Port Profile ......................................................................... 94
Step 4: Access ................................................................................. 97
Step 5: Data Buffering .................................................................. 102
Step 6: System Log ....................................................................... 107
Chapter 6: Configuring the ACS in Expert Mode 111
Overview of Menus and Forms ........................................................ 111
Mapping of the Expert Mode Menus and Forms ............................. 113
Description of Forms in Expert Mode ............................................. 114
Chapter 7: Applications Menu & Forms...............121
Applications ..................................................................................... 122
Connect ......................................................................................... 122
IPDU Power Mgmt. ...................................................................... 126
Outlets Manager ........................................................................ 127
View IPDUs Info ......................................................................130
Users Manager .......................................................................... 133
Configuration ............................................................................ 135
Software Upgrade [for the AlterPath PM] ................................ 137
IPDU Multi-Outlet Ctrl ................................................................ 139
Prerequisites for Multi-Outlet Control ...................................... 141
Power Management Icons ......................................................... 141
IPMI Power Management ............................................................. 145
Terminal Profile Menu ................................................................. 152
Chapter 8: Network Menu & Forms......................157
Network ............................................................................................ 158
Host Settings ................................................................................. 158
Syslog ........................................................................................... 164
PCMCIA Management ................................................................. 165
vi
Page 7
Configuring a Modem PCMCIA Card ...................................... 168
Configuring an ISDN PCMCIA Card ....................................... 171
Configuring a GSM PCMCIA Card ......................................... 173
Configuring an Ethernet PCMCIA Card ................................... 176
Configuring a PCMCIA Compact Flash Card or a PCMCIA Hard
Disk Drive ................................................................................. 177
Configuring a Wireless LAN PCMCIA Card ........................... 178
Configuring a CDMA PCMCIA Card ...................................... 180
Ejecting a PCMCIA Card .........................................................183
VPN Connections ......................................................................... 183
SNMP ........................................................................................... 188
Services ......................................................................................... 193
Firewall Configuration ................................................................. 194
Host Table .................................................................................... 210
Static Routes ................................................................................. 211
Chapter 9: Security Menu & Forms......................217
Users and Groups ......................................................................... 218
Adding a User ........................................................................... 219
Adding a Group ......................................................................... 220
Active Ports Sessions ................................................................... 222
Authentication .............................................................................. 224
Configuring Authentication for ACS Logins ............................ 225
Configuring Authentication Servers for Logins to ACS
and Connected Devices ............................................................. 226
Group Authorization on TACACS+ ......................................... 230
Security Profiles ........................................................................... 236
Pre-defined Security Profiles ................................................... 237
Default Security Profile ............................................................ 237
Custom Security Profile ............................................................ 237
Serial Port Settings and Security Profiles ................................. 240
Security Certificates ..................................................................... 246
Certificate for HTTP Security ................................................... 246
User Configured Digital Certificate .......................................... 246
X.509 Certificate on SSH ......................................................... 246
AlterPath ACS Installation, Administration, and User’s Guide vii
Page 8
Contents
Chapter 10: Ports Menu & Forms.........................247
Physical Ports ............................................................................... 249
General ...................................................................................... 251
Connection Profiles ................................................................... 252
Console Access Server (CAS) Profile Connection Protocols ... 253
Terminal Server (TS) Profile Connection Protocols ................. 253
Bidirectional Telnet Protocol .................................................... 255
Modem and Power Management Connection Protocols ........... 256
Access ....................................................................................... 269
Authentication Methods and Fallback Mechanism ................... 271
Data Buffering .......................................................................... 274
Multi User ................................................................................. 279
Power Management .................................................................. 282
Other ......................................................................................... 287
Virtual Ports .................................................................................. 292
Ports Status ................................................................................... 298
Ports Statistics .............................................................................. 299
viii
Chapter 11: Administration Menu & Forms.........301
System Information ...................................................................... 302
Notifications ................................................................................. 305
Email Notifications Entry ......................................................... 307
Pager Notifications Entry .......................................................... 310
SNMP Trap Notifications Entry ............................................... 312
Serial Ports Alarm Notification ................................................ 314
Time/Date ..................................................................................... 315
Setting Time and Date with NTP .............................................. 316
Boot Configuration ....................................................................... 317
Backup Configuration .................................................................. 320
Upgrade Firmware ........................................................................ 323
Reboot ........................................................................................... 326
Online Help .................................................................................. 327
Appendix A: Technical Specifications.................329
Page 9
Appendix B: Safety, Regulatory, and Compliance In-
formation ................................................................331
Safety Guidelines for Rack-Mounting the ACS ............................... 331
Safety Precautions for Operating the AlterPath ACS ...................... 332
NEBS Certification .......................................................................... 334
Working inside the AlterPath ACS .................................................. 334
Replacing the Battery ....................................................................... 335
FCC Warning Statement .................................................................. 335
Notice About FCC Compliance for all AlterPath ACS Models ...... 336
Canadian DOC Notice ...................................................................... 336
Aviso de Precaución S-Mark Argentina .......................................... 336
Trabajar dentro del AlterPath ACS .................................................. 337
Batería .............................................................................................. 338
Glossary .................................................................339
Index .......................................................................357
AlterPath ACS Installation, Administration, and User’s Guide ix
Page 10
Contents
x
Page 11
Figures
Figure 1-1: ACS Front with PCMCIA Card Slots........................... 8
Figure 1-2: ACS Back with Connectors .......................................... 8
Figure 1-3: AlterPath ACS family of advanced console servers..... 9
Figure 1-4: ACS Connectors.......................................................... 10
Figure 1-5: IPDU Integration With ACS....................................... 27
Figure 2-1: ACS Setup Example.................................................... 32
Figure 2-2: Security Advisory Console Message .......................... 45
Figure 2-3: Front Panel PCMCIA Card Slots................................ 51
Figure 2-4: PCMCIA Eject Button in Web Manager..................... 52
Figure 2-5: AlterPath PMs Connected to the ACS........................ 52
Figure 3-1: Regular User > Web Manager Login form ................. 56
Figure 3-2: Regular User Form...................................................... 57
Figure 3-3: Regular User > Connect Form .................................... 58
Figure 3-4: Java Applet.................................................................. 59
Figure 3-5: Regular User > IPDU Power Mgmt. Forms................ 62
Figure 3-6: Regular User > Outlets Manager (no permissions)..... 63
Figure 3-7: Regular User > Outlets Manager (with permissions).. 63
Figure 3-8: Regular User > View IPDUs Info ............................... 65
Figure 3-9: Regular User > IPDU Multi-Outlet (no permissions). 67
Figure 3-10: Regular User > IPDU Multi-Outlet (with permissions).
..................................................................................... 68
Page 12
Figures
Figure 4-1: Administrator > Web Manager Buttons...................... 74
Figure 4-2: Administrator > Web Manager Login Form ...............77
Figure 4-3: Administrator > Multi Administrator Login Message 78
Figure 4-4: Administrator > Security Advisory Message.............. 79
Figure 4-5: Example of Web Manager Form in Wizard Mode...... 80
Figure 4-6: Example of Web Manager Form in Expert Mode....... 81
Figure 5-1: Administrator > Physical Ports Factory Settings........ 87
Figure 5-2: Security and Serial Ports Configuration Alert ............ 87
Figure 5-3: Security Advisory Dialog Box.................................... 88
Figure 5-4: Wizard > Step 1: Security Profile Form...................... 89
Figure 5-5: Custom Security Profile Dialog Box .......................... 90
Figure 5-6: Wizard > Step 2: Network Settings - DHCP disabled.92
Figure 5-7: Wizard > Step 2: Network Settings - DHCP enabled. 93
Figure 5-8: Wizard > Step 3: Port Profile...................................... 94
Figure 5-9: Wizard > Step 4:Access.............................................. 98
xii
Figure 5-10: Wizard > Step 4: Access Add User Dialog Box......... 99
Figure 5-11: Wizard > Step 4: Change Password Dialog Box.......100
Figure 5-12: Wizard > Step 5: Data Buffering [Inactive].............. 102
Figure 5-13: Wizard > Step 5: Data Buffering [Local].................. 103
Figure 5-14: Wizard > Step 5: Data Buffering [Remote]............... 104
Figure 5-15: Wizard > Step 6: System Log ................................... 108
Figure 6-1: Expert Mode Screen Elements.................................. 112
Figure 7-1: Expert > Applications Menu Options ....................... 122
Figure 7-2: Expert > Applications > Connect Form.................... 123
Figure 7-3: Expert > SSH session Java Applet............................ 124
Figure 7-4: Expert > Serial Port Java Applet............................... 125
Figure 7-5: Expert > IPDU Power Mgmt. Tab Options............... 126
Figure 7-6: Expert > Applications > IPDU Power Mgmt. > Outlets
Manager..................................................................... 128
Figure 7-7: Expert > Outlets Manager Icons ............................... 129
Page 13
Figure 7-8: Expert > Edit Outlets Dialog Box............................. 129
Figure 7-9: IPDU Power Mgmt. > View IPDUs Info .................. 130
Figure 7-10: IPDU Power Mgmt> Users Manager........................ 133
Figure 7-11: Expert > IPDU Power Mgmt. > Users Manager > Add
User........................................................................... 133
Figure 7-12: Expert > Applications > IPDU Power Mgmt. >
Configuration ............................................................ 136
Figure 7-13: Expert > Applications > IPDU Power Mgmt. > Software
Upgrade..................................................................... 137
Figure 7-14: Expert > Applications > IPDU Multi-Outlet Ctrl .....140
Figure 7-15: Expert > Applications > Multi-Outlet Ctrl [not
configured]................................................................ 141
Figure 7-16: Expert > Applications > Multi-Outlet Control Icons 142
Figure 7-17: Expert > Applications > IPMI Power Mgmt............. 145
Figure 7-18: Expert > IPMI Power Mgmt. “Add/Edit IPMI Device”
Dialog Boxes............................................................. 146
Figure 7-19: Expert > IPMI Power Mgmt. Device Entry Example146
Figure 7-20: Expert > Serial Port > Power Management > Enable
Power Management................................................... 150
Figure 7-21: Expert > Power Management Add Outlet Dialog Box ...
................................................................................... 150
Figure 7-22: Expert > Serial Port > Power Management > User
Permissions ............................................................... 151
Figure 7-23: Expert > Serial Port > Power Management > Enable
IPMI .......................................................................... 152
Figure 7-24: Expert > Applications > Terminal Profile Menu ...... 153
Figure 7-25: Expert >Terminal Profile Menu “Add Option” Dialog
Box............................................................................ 153
Figure 7-26: Expert > Terminal Profile Menu Example................ 154
AlterPath ACS Installation, Administration, and User’s Guide xiii
Page 14
Figures
Figure 8-1: Expert > Network > Host Settings [DHCP Enabled] 159
Figure 8-2: Expert > Network > Host Settings [DHCP Disabled]160
Figure 8-3: Expert > Network > Syslog....................................... 164
Figure 8-4: Expert > Network > PCMCIA Management ............166
Figure 8-5: Expert > PCMCIA Modem Card Configuration Dialog
Box............................................................................ 169
Figure 8-6: Expert > PCMCIA Modem Card Configuration Dialog
Box - PPP.................................................................. 170
Figure 8-7: Expert > Modem PCMCIA Card Configuration Dialog
Box - Call Back......................................................... 170
Figure 8-8: Expert > ISDN PCMCIA Card Configuration Dialog
Box............................................................................ 172
Figure 8-9: Expert > GSM PCMCIA Card Configuration Dialog Box
................................................................................... 174
Figure 8-10: Expert > GSM PCMCIA Card Configuration Dialog ....
xiv
Box - Call Back......................................................... 174
Figure 8-11: Expert > Ethernet PCMCIA Card Configuration Dialog
Box............................................................................ 176
Figure 8-12: Expert > PCMCIA Compact Flash/Hard Disk
Configuration Dialog Box....................................... 177
Figure 8-13: Expert > PCMCIA Wireless LAN Card Configuration
Dialog Box................................................................ 179
Figure 8-14: Expert > PCMCIA CDMA Card Configuration Dialog
Box............................................................................ 181
Figure 8-15: Expert > Network > VPN Connections..................... 184
Figure 8-16: Expert > VPN “New/Modify Connection” Dialog Box..
................................................................................... 185
Figure 8-17: Expert > Network > SNMP....................................... 189
Figure 8-18: Expert > “New/Mod SNMP v1 v2 Configuration” Dialog
Box............................................................................ 191
Page 15
Figure 8-19: Expert > “New/Mod SNMP v3 Configuration” Dialog
Box............................................................................ 191
Figure 8-20: Expert > Network > Services.................................... 193
Figure 8-21: Expert > Network > Firewall Configuration............. 195
Figure 8-22: Expert > Firewall Configuration “Edit Chain” Dialog
Box............................................................................ 196
Figure 8-23: Firewall Configuration “User-defined Chain” Message.
................................................................................... 196
Figure 8-24: Firewall Configuration “Delete Default Chain” Message
................................................................................... 197
Figure 8-25: Expert > Firewall Configuration “Add Chain” Dialog
Box............................................................................ 197
Figure 8-26: Firewall Configuration “Edit Rules for chain_name”
Form.......................................................................... 198
Figure 8-27: Firewall Configuration “Edit Rules for chain_name”
Buttons ...................................................................... 198
Figure 8-28: Expert > Firewall Configuration “Add Rule” and “Edit
Rule” Dialog Boxes .................................................. 199
Figure 8-29: Firewall Configuration “Add Rule” and “Edit Rule” ....
Target Menu Options................................................. 200
Figure 8-30: Firewall Configuration “Add Rule” and “Edit Rule”
Source and Destination IP and Mask Fields ............. 200
Figure 8-31: Firewall Configuration “Add Rule” and “Edit Rule”
Protocol Menu Options............................................. 201
Figure 8-32: Firewall Configuration “Add Rule” and “Edit Rule”
Numeric Protocol Fields ........................................... 201
Figure 8-33: Firewall Configuration “Add Rule” and “Edit Rule” ....
TCP Protocol Fields and Menu Options ................... 201
Figure 8-34: Firewall Configuration “Add Rule” and “Edit Rule”
AlterPath ACS Installation, Administration, and User’s Guide xv
Page 16
Figures
UDP Protocol Fields ................................................. 202
Figure 8-35: Firewall Configuration “Add Rule” and “Edit Rule”
ICMP Type Menu Options........................................ 204
Figure 8-36: Firewall Configuration Input and Output Interface Fields
and Fragments Menu Options................................... 205
Figure 8-37: Firewall Configuration “Add Rule” and “Edit Rule”
LOG Target Fields..................................................... 206
Figure 8-38: Firewall Configuration “Add Rule” and “Edit Rule”
REJECT Target Menu Options ................................ 207
Figure 8-39: Expert > Network > Host Tables.............................. 211
Figure 8-40: Expert > Network > Static Routes ........................... 212
Figure 8-41: Expert > Static Routes “Add” and “Edit” Dialog Boxes
- Default Route......................................................... 212
Figure 8-42: Expert > Static Routes “Add” and “Edit” Dialog Boxes
- Network Route........................................................ 213
xvi
Figure 8-43: Expert > Static Routes “Add” and “Edit” Dialog Boxes
- Host Route .............................................................. 214
Figure 9-1: Expert > Security > Users and Groups Form............ 218
Figure 9-2: Expert > Security > Users and Groups > “Add User”
Dialog Box................................................................ 219
Figure 9-3: Expert > Security > Users and Groups > “Add Group”
Dialog Box................................................................ 220
Figure 9-4: Expert > Security > Active Ports Sessions................ 223
Figure 9-5: Expert > Security > Authentication .......................... 225
Figure 9-6: Expert > Security > Authentication > AuthType Form...
................................................................................... 226
Figure 9-7: Expert > Security > Authentication > Radius........... 228
Figure 9-8: Expert > Security > Authentication > TACACS+ .... 229
Figure 9-9: Expert > Security > Authentication > LDAP............ 232
Figure 9-10: Expert > Administration > Time/Date..................... 234
Page 17
Figure 9-11: Expert > Security > Authentication > Kerberos........ 235
Figure 9-12: Expert > Security > Authentication > NIS................ 236
Figure 9-13: Expert > Security > Security Profile........................ 236
Figure 9-14: Expert > Physical Ports Default Factory Settings.... 240
Figure 9-15: Security Profile and Serial Ports Configuration Alert240
Figure 9-16: Serial Ports Protocol Incompatibility Dialog Box .... 241
Figure 9-17: Security Advisory Dialog Box................................. 242
Figure 9-18: Wizard > Step 1: Security Profile Form.................... 243
Figure 9-19: Custom Security Profile Dialog Box ....................... 244
Figure 10-1: Expert > Ports........................................................... 248
Figure 10-2: Expert > Ports > Physical Ports................................ 249
Figure 10-3: Expert > Ports > Physical Ports > “Modify Ports ”
Tab Options............................................................... 250
Figure 10-4: Expert > Ports > Physical Ports > General Form..... 252
Figure 10-5: Expert > Ports > Physical Ports > Console Connection
Active Tabs................................................................ 257
Figure 10-6: Expert > Ports > Physical Ports > Console Connection.
................................................................................... 257
Figure 10-7: Connection Protocols > Console............................... 258
Figure 10-8: Expert > Ports > Physical Ports > Bidirectional Telnet
Active Tabs................................................................ 258
Figure 10-9: Expert > Ports > Physical Ports > Bidirectional Telnet
Connection ................................................................ 259
Figure 10-10: Connection Protocols > Bidirectional Telnet........... 259
Figure 10-11: Expert > Ports > Physical Ports > T erminal Server Active
Tabs ........................................................................... 260
Figure 10-12: Expert > Ports > Physical Ports > Terminal Server
Connection ................................................................ 261
Figure 10-13: Connection Protocols > Terminal Server.................. 261
AlterPath ACS Installation, Administration, and User’s Guide xvii
Page 18
Figures
Figure 10-14: Expert > Ports > Physical Ports > Modem Connection
Active Tabs................................................................ 262
Figure 10-15: Expert > Ports > Physical Ports > Modem Connection .
................................................................................... 263
Figure 10-16: Connection Protocols > Modem .............................. 263
Figure 10-17: Expert > Ports > Physical Ports > Power Management
Active Tabs................................................................ 264
Figure 10-18: Expert > Ports > Physical Ports > Power Management
Connection ................................................................ 265
Figure 10-19: Connection Protocols > Power Management........... 265
Figure 10-20: Access > Authentication Types................................ 266
Figure 10-21: Expert > Ports > Physical Ports > Serial Port Settings ..
................................................................................... 268
Figure 10-22: Expert > Ports > Physical Ports > Access Form....... 269
Figure 10-23: Expert > Ports > Physical Ports > Data Buffering.... 275
xviii
Figure 10-24: Expert > Ports > Physical Ports > Data Buffering... 276
Figure 10-25: Expert > Port > Physical Ports >Multi User ............. 279
Figure 10-26: Expert > Ports > Physical Ports > Power Management..
................................................................................... 282
Figure 10-27: Expert > Ports > Physical Ports > Power Management.
................................................................................... 283
Figure 10-28: Expert > Ports > Physical Ports > Power Management >
Add Outlets Dialog Box............................................ 285
Figure 10-29: Expert > Ports > Physical Ports > Power
Management>Allow All Users ................................. 287
Figure 10-30: Expert > Ports > Physical Ports >Power Management
>Allow Users/Groups ............................................... 287
Figure 10-31: Expert > Ports > Physical Ports > Other Form..........288
Figure 10-32: Expert > Ports > Virtual Ports.................................. 292
Figure 10-33: Expert > Ports > Virtual Ports > New/Modify Port
Page 19
Dialog Box................................................................ 293
Figure 10-34: Expert > Applications > Connect > Serial pull-down ...
menu.......................................................................... 295
Figure 10-35: Expert > Ports > Virtual Ports > New/Modify Port
Dialog Box................................................................ 296
Figure 10-36: Expert > Ports > Virtual Ports > New/Modify > Port
Names Dialog box..................................................... 297
Figure 10-37: Expert > Ports > Ports Status (Read-Only).............. 298
Figure 10-38: Expert > Ports > Port Statistics (Read-Only)........... 299
Figure 11-1: Expert > Administration > System Information ...... 303
Figure 11-2: Expert > Administration > Notifications ................. 306
Figure 11-3: Expert > Administration > Notifications > Email > Add/
Edit Dialog box......................................................... 308
Figure 11-4: Expert > Administration > Notifications > Pager > Add/
Edit Dialog box......................................................... 310
Figure 11-5: Expert > Administration > Notifications > SNMP Trap
> Add/Edit Dialog box.............................................. 313
Figure 11-6: Expert > Administration > Time/Date..................... 315
Figure 11-7: Expert > Administration > ... Time/Date > NTP Enable
................................................................................... 316
Figure 11-8: Expert > Administration > Boot Configuration....... 317
Figure 11-9: Expert > Administration > Backup Config.............. 320
Figure 11-10: Expert > Administration > Backup Config > Storage
Device ....................................................................... 322
Figure 11-11: Expert > Administration > Upgrade Firmware........ 324
Figure 11-12: Expert > Administration > Reboot........................... 326
Figure 11-13: Expert > Administration > Online Help.................... 327
AlterPath ACS Installation, Administration, and User’s Guide xix
Page 20
Figures
xx
Page 21
Tables
Table v-1: Typographic Conventions................................................ 4
Table v-2: Other Terms and Conventions......................................... 5
Table 1-1: Model Numbers and Configuration Options................... 8
Table 1-2: Enabled services to access the ACS under each security
Table 1-3: Enabled services to access the serial ports under each
Table 1-4: Enabled protocols for each profile shown with a check
Table 1-5: ACS Supported Authentication Methods...................... 14
Table 1-6: Filter Options for Packet Filtering Rules....................... 18
Table 1-7: TCP Protocol Packet Filtering Options......................... 19
Table 1-8: UDP Protocol Packet Filtering Options ........................ 20
Table 1-9: LOG Target Action Options.......................................... 22
Table 1-10: Tasks for Configuring Access to Connected Devices ... 26
Table 1-11: Tasks for Configuring Power Management................... 27
Table 1-12: Power Management Options in the Web Manager........ 29
Table 2-1: Shipping Box Contents for ACS4 - ACS48 ................. 32
Table 2-2: Shipping Box Contents for ACS1 ................................. 35
Table 2-3: ACS Basic Installation Tasks ........................................ 39
Table 2-4: Tasks Related to Connecting AlterPath PMs................. 53
Table 3-1: Common Screen Information ........................................ 57
Table 3-2: Java Applet Buttons...................................................... 59
Table 3-3: Serial Ports Connection Protocols................................. 61
profile. ........................................................................... 13
profile. ........................................................................... 13
mark............................................................................... 14
Page 22
Tables
Table 3-4: Regular User > Outlet Management Buttons ................64
Table 3-5: Regular User > Information on the V iew IPDUs Info Form
....................................................................................... 65
Table 3-6: Regular User > IPDU Multi-Outlet Ctrl. Form Icons.... 68
Table 3-7: Regular User > Password Management Form............... 69
Table 4-1: Administrator > Common Administrative Tasks .......... 73
Table 4-2: Administrator > Web Manager Buttons......................... 74
Table 4-3: Administrator > Options for Trying, Saving, and Restoring
Configuration Changes.................................................. 75
Table 4-4: Administrator > Logout Button and Other Information in
the Upper Right ............................................................. 76
Table 4-5: Administrator > ACS Configuration and Expert Menus
Chapters......................................................................... 81
Table 5-1: Wizard > Enabled services to access the ACS under each
security profile............................................................... 85
Table 5-2: Wizard > Enabled services to access the serial ports under
each security profile. ..................................................... 85
Table 5-3: Wizard > Enabled protocols for each security profile
shown with a check mark. ............................................. 86
Table 5-4: Wizard > Serial Port Profile Parameters and Usage...... 95
Table 5-5: Wizard > Add User Dialog: Field Names and Definitions
....................................................................................... 99
Table 5-6: Wizard > Data Buffering Field Names and Definitions....
..................................................................................... 104
Table 5-7: Wizard > Differences Between Remote and Local
Buffering...................................................................... 105
Table 5-8: ACS Configuration and Expert Menus Chapters ........109
Table 6-1: Expert Mode Menu and Forms.................................... 113
Table 6-2: Expert > Applications.................................................. 114
Table 6-3: Expert > Network........................................................ 115
Table 6-4: Expert > Security......................................................... 116
Table 6-6: Administration............................................................. 117
Table 6-5: Expert > Ports.............................................................. 117
Table 7-1: Expert > Applications Menu ....................................... 121
xxii
Page 23
Table 7-2: Expert > Outlets Manager Icons Description.............. 128
Table 7-3: Expert > View IPDUs General Information................ 131
Table 7-4: Expert > View IPDUs Unit Information...................... 132
Table 7-5: Expert > IPDU Multi-Outlet Ctrl form icons.............. 142
Table 7-6: Expert > IPMI Information.......................................... 147
Table 7-7: Expert > IPMI Power Mgmt. Form Icons ................... 147
Table 8-1: Expert > Network Menu ............................................. 157
Table 8-2: Expert > Host Settings Form Fields ............................160
Table 8-3: Expert > Form Fields for a Modem Card.................... 169
Table 8-4: Expert > Form Fields for an ISDN Card..................... 172
Table 8-5: Expert > Form Fields For a GSM Card....................... 175
Table 8-6: Expert > Form Fields for an Ethernet Card................. 176
Table 8-7: Expert > Form Fields for a Compact Flash/Hard Disk 178
Table 8-8: Expert > Form Fields for a Wireless LAN Card. ........179
Table 8-9: Expert > Form Fields for a CDMA Card..................... 181
Table 8-10: Expert > Field and Menu Options for Configuring a VPN
Connection................................................................... 186
Table 8-11: Expert > Fields and Menu Options for SNMP
Configuration............................................................... 190
Table 8-12: Expert > Tasks for Configuring SNMP....................... 193
Table 8-13: Expert > When Services Must be Enabled.................. 194
Table 8-14: Expert > TCP Options Fields ...................................... 202
Table 8-15: Expert > UDP Options Fields...................................... 202
Table 8-16: Expert > Firewall Configuration Input and Output
Interface, and Fragments Fields Definitions. .............. 205
Table 8-17: Expert > Target LOG Options Selection Fields........... 206
Table 8-18: Expert > Reject Options Sections............................... 207
Table 8-19: Expert > Fields and Menus for Configuring Static Routes
..................................................................................... 214
Table 9-1: Expert > Security Menu............................................... 217
Table 9-2: Expert > Add User Dialog Field Names and Definitions..
..................................................................................... 219
Table 9-3: Expert > Active Ports Sessions Information. .............. 223
Table 9-4: Tasks for Setting up Authentication Servers. ..............227
AlterPath ACS Installation, Administration, and User’s Guide xxiii
Page 24
Tables
Table 9-5: Expert > Enabled services to access the ACS under each
security profile............................................................. 238
Table 9-6: Expert > Enabled services to access the serial ports under
each security profile. ................................................... 238
Table 9-7: Expert > Enabled protocols for each security profile
shown with a check mark. ........................................... 239
Table 9-8: Configuring ACS in Expert Model.............................. 245
Table 10-1: Expert > Ports Menu.................................................... 247
Table 10-2: Expert > Console Connection Protocols...................... 253
Table 10-3: Expert > Terminal Server (TS) Connected Protocols.. 254
Table 10-4: Expert > Protocols for Serial Ports Connected to
Modems or IPDUs....................................................... 256
Table 10-5: Expert > Access Form Fields ...................................... 270
Table 10-6: Expert > Authentication Methods ............................... 272
Table 10-7: Expert > Procedures to Configure an Authentication
Server........................................................................... 274
Table 10-8: Expert > Data Buffering Form Fields.......................... 276
Table 10-9: Expert > Multi User Form Fields ................................280
Table 10-10:Expert > Options on the “Allow Multiple Sessions” Menu
..................................................................................... 280
Table 10-11: Expert > Power Management Form Fields................. 283
Table 10-12:Expert > Ports > Physical Ports > Other Form Fields. 288
Table 10-13:Expert > New/Modify Port Dialog Box Fields............ 294
Table 10-14:Expert > Port Status Read-Only Form......................... 298
Table 10-15:Expert > Ports>Port Status Read-Only Form.............. 299
Table 11-1: Expert > Administration Menu.................................... 301
Table 11-2: System Information ..................................................... 304
Table 11-3: Expert > Notifications Form Fields............................. 306
Table 11-4: Expert > Email Notifications Dialog Box Fields ........ 308
Table 11-5: Expert > Pager Notifications Dialog Box.................... 311
Table 11-6: Expert > SNMP Trap Notifications Dialog Box .........313
Table 11-7: Expert > Boot Configuration Form Fields................... 318
Table 11-8: Expert > Backup Config Type FTP Form Fields and
Buttons......................................................................... 321
xxiv
Page 25
Table 11-9: Expert > Backup Config Type Storage Device Form.. 322
Table 11-10:Expert > Upgrade Firmware Form Fields ................... 324
AlterPath ACS Installation, Administration, and User’s Guide xxv
Page 26
Tables
xxvi
Page 27
Procedures
T
To check Java Plug-in Support in the Browser..........................................38
T
To Install JRE Version 1.4.2 or later and Register the Plug-in..................39
T
To rack-mount ACS, perform the following steps: ...................................40
T
To Connect Devices to Serial Ports...........................................................41
T
To Connect to the Console Port........................................................ ..... ....42
T
To Power on the ACS................................................................................43
T
To Turn Power On Connected Devices.....................................................43
T
To Log Into ACS Through the Console.....................................................44
T
To Use the wiz Command to Configure Network Parameters ..................45
T
To Select a Security Profile .......................................................................48
T
To Use a Dynamic IP Address to Access the Web Manager.....................50
T
To Use the Default IP Address to Access the Web Manager....................50
T
To Install a PCMCIA Card........................................................................51
T
To Remove a PCMCIA Card.....................................................................51
T
To Configure a PCMCIA Card..................................................................52
T
To Daisy-Chain AlterPath PMs to the ACS ..............................................53
T
Logging in to the Web Manager...............................................................56
T
To Use Telnet to Connect to a Device Through a Serial Port ...................61
T
To Close a Telnet Session..........................................................................61
T
To Use SSH to Connect to a Device Through a Serial Port......................62
T
To Close an SSH Session...........................................................................62
T
To Change Your Password ........................................................................69
T
To Log Into the Web Manager...................................................................76
T
To Select or Configure a Security Profile..................................................88
Page 28
Procedures
T
To configure the Network Settings............................................................93
T
To Set Parameters for All Serial Ports.......................................................96
T
To Add a User..........................................................................................100
T
To Delete a User ......................................................................................101
T
To Change a Password ............................................................................. 101
T
To Configure Data Buffering...................................................................106
T
To Add a Syslog Server...........................................................................108
T
To Delete a Syslog Server........................................................................109
T
To Connect to the ACS............................................................................125
T
To Connect to a Device Through a Serial Port........................................126
T
To View Status, Lock, Unlock, Rename, or Cycle Power Outlets..........129
T
To View and Reset IPDU Information ....................................................132
T
To Configure Users to Manage Power Outlets on IPDUs.......................134
T
To Specify IPDU Names, Alarms, Syslogging........................................136
T
To Download AlterPath PM Software From Cyclades............................138
T
To Upgrade Software on an AlterPath PM..............................................139
T
To Power On or Power Off a Group of Outlets in the Same Power State143
T
To Power On or Power Off a Group of Outlets in Different Power State143
T
To Lock or Unlock a Group of Outlets in the Same Power State............144
T
To Lock or Unlock a Group of Outlets in Different Lock States ............144
T
To Turn the Power of a Group of Outlets Off and On Again..................144
T
To Enable or Disable IPMI Power Management.....................................148
T
To Manage Power on an IPMI Device ....................................................149
T
To Configure a Serial Port for IPDU or IPMI Power Management........149
T
To Configure a User for IPDU Power Management ........................ .......151
T
To enable IPMI Power Management of an IPMI device.........................152
T
To Create a Menu for a Local Computer Terminal .................................154
T
To Configure Host Settings [Expert].......................................................162
T
To Configure Syslogging for Serial Ports and Message Filtering ......165
T
To Configure a PCMCIA Card................................................................166
T
To Configure a Modem PCMCIA Card...................................................171
T
To Configure an ISDN PCMCIA Card...................................................172
T
To Configure a GSM PCMCIA Card ......................................................175
T
To Configure an Ethernet PCMCIA Card ...............................................177
xxviii
Page 29
T
To Configure a Compact Flash or Hard Disk Drive PCMCIA................178
T
To Configure a Wireless LAN PCMCIA Card........................................180
T
To Configure a CDMA PCMCIA Card...................................................182
T
To Eject a PCMCIA Card From the Card Slot........................................183
T
To Configure VPN...................................................................................187
T
To Configure SNMP................................................................................191
T
To Configure Network Services .............................................................194
T
To Add a Chain........................................................................................208
T
To Edit a Chain........................................................................................208
T
To Add a Rule..........................................................................................210
T
To Edit a Rule..........................................................................................210
T
To Define the ACS’s IP Address and Hostname.....................................211
T
To Configure Static Routes [Expert] .......................................................215
T
To Add a User..........................................................................................220
T
To Delete a User or Group .......................................................................221
T
To Change a User’s Password .................................................................221
T
To Add a Group.......................................................................................221
T
To Modify a Group..................................................................................222
T
To View, Kill, or Refresh Active User Sessions .....................................224
T
To Configure the ACS Login Authentication Method ............................226
T
To Configure a RADIUS Authentication Server.....................................228
T
To Configure a TACACS+ Authentication Server..................................229
T
To Configure an LDAP Authentication Server .......................................231
T
To Configure a Kerberos Authentication Server.....................................233
T
To Configure a NIS Authentication Server .............................................235
T
To Select or Configure a Security Profile................................................241
T
To Select One or More Serial Ports.........................................................250
T
To Enable or Disable Serial Ports............................................................251
T
To Configure a Serial Port Connection Protocol for a Console Connection.
T
..................................................................................................................256
T
To Configure a Serial Port Connection Protocol for a Bidirectional Telnet..
T
..................................................................................................................258
T
To Configure a Serial Port Connection Protocol for a Terminal Server..260
AlterPath ACS Installation, Administration, and User’s Guide xxix
Page 30
Procedures
T
To Configure a Serial Port Connection Protocol for an External Modem.....
T
..................................................................................................................262
T
To Configure a Power Management Protocol for an IPDU.....................264
T
To Associate an Alias to a Serial Port .....................................................267
T
To Configure Serial Port Settings to Match the connected devices.........267
T
To Configure User Access to Serial Ports ...............................................271
T
To Configure a Serial Port Login Authentication Method ......................273
T
To Configure Data Buffering for Serial Ports..........................................277
T
To Configure Multiple Sessions and Port Sniffing for One or More Serial
Ports .........................................................................................................281
T
To Configure a Serial Port for IPDU or IPMI Power Management........285
T
To Configure a User for IPDU Power Management While Connected To a
Serial Port.................................................................................................286
T
To Configure TCP Port Number, STTY Options, Break Interval, and the
Login Banner for a Serial Port Connected to a Console..........................290
T
To Configure Terminal Server Connection Options................................291
T
To Cluster ACS Units or Modify Cluster Configuration.........................295
T
To Assign Names to Slave ports in the Cluster .......................................297
T
To View System Information...................................................................305
T
To Choose a Method for Sending Notifications for Serial Port
Data Buffering Events..............................................................................307
T
To Configure a Trigger for Email Notification for Serial Ports ..............309
T
To Configure a Trigger for Pager Notification for Serial Ports............... 311
T
To Configure a Trigger for SNMP Trap Notification for Serial Ports .... 314
T
To Configure a Trigger for Serial Port Alarm Notification.....................314
T
To Manually Set the Time and Date........................................................316
T
To Configure Time and Date Using an NTP Server................................316
T
To Configure ACS Boot ..........................................................................319
T
To Back Up or Restore the Configuration Files using an FTP Server.....322
T
To Back Up or Restore the Configuration Files using a Storage Device 323
T
To Upgrade the ACS’s firmware.............................................................325
T
To Reboot the ACS..................................................................................326
T
To Configure the Online Help Path.........................................................328
xxx
Page 31
Before You Begin
This installation, administration, and user’s guide provides background
information and procedures for installing, configuring, and administering the
Cyclades™ AlterPath ACS and for accessing connected servers and other
connected devices.
Audience
This manual is intended for installers and system administrators of the ACS
and for users who may be authorized to connect to devices, to manage power
through the ACS, and to monitor the ACS’s temperature.
This document describes configuration, administration, and use of the ACS
only . It do es not describe how to set up and administer other external services
or servers that the ACS may access for authentication, system logging, IPMI
control, SNMP notifications, data logging, file sharing, or other purposes.
This document assumes that users who are authorized to connect to servers
and other devices through the ACS already know how to use the connected
devices.
Page 32
Before You Begin
Document Organization
The document contains the following chapters:
1: Introduction An overview of the features of the AlterPath ACS
and necessary prerequisite information for
understanding the rest of the information in this
guide.
2: Installation and Configuration
A list of tasks for installing and configuring the
AlterPath ACS and connecting devices, with pointers
to the needed background information and
procedures.
3: Web Manager for Regular Users
Describes how authorized users use the Web
Manager to access devices that are connected to ports
on the ACS.
4: Web Manager for Administrators
Explains how the ACS administrator uses the Web
Manager to add and delete users, define port access,
and perform other common administration tasks.
5: Configuring ACS in Wizard Mode
Describes the 6-step procedure to configure the
AlterPath ACS in Wizard mode. Select ing a S ecurity
Profile, configure network settings, configure serial
ports and access, and configure settings such as data
buffering and system logging.
6: Configuring the ACS in Expert Mode
Provides an introduction to the Expert mode.
Describes the forms in each section, and provides a
mapping to each form with a link to the desired
section.
7: Applications Menu & Forms
2
Page 33
Provides an overview of each form associated with
the “Applications” menu, describes the functionality
of the individual elements in each form, and provides
step-by-step configuration procedures.
8: Network Menu & Forms
Provides an overview of each form associated with
the “Network” menu, describes the functionality of
the individual elements in each form, and provides
step-by-step configuration procedures.
9: Security Menu & Forms
Provides an overview of each form associated with
the “Security” menu, describes the functionality of
the individual elements in each form, and provides
step-by-step configuration procedures.
10: Ports Menu & Forms
Provides an overview of each form associated with
the “Ports” menu, describes the functionality of the
individual elements in each form, and provides stepby-step configuration procedures.
Document Organization
11: Administration Menu & Forms
Provides an overview of each form associated with
the “Administration” menu, describes the
functionality of the individual elements in each form,
and provides step-by-step configuration procedures.
Appendices Appendix A provides hardware specifications, and
Appendix B details safety information.
Index Provides a way to look up terms. In the online
version of this manual, clicking the terms in the index
brings you to where they are used in the manual.
AlterPath ACS Installation, Administration, and User’s Guide 3
Page 34
Before You Begin
Related Documents
The following document for the Cyclades AlterPath ACS is shipped with the
product.
•AlterPath ACS Quick Start Guide (hard-copy)
The following documents for Cyclades AlterPath products mentioned in this
guide are on the Documentation CD shipped with the product and they are
also available at: http://www.cyclades.com/docs
•AlterPath ACS Command Reference Guide
• AlterPath PM User Guide
Updated versions of this document will be posted on the downloads section of
the Cyclades website in the “AlterPath ACS” section when Cyclades releases
new versions of the software.
A hard-copy version of this document can be ordered under part number
PAC0379 through your Cyclades sales representative.
under their products’ names.
Typographic and Other Conventions
The following table describes the typographic conventions used in Cyclades
manuals.
Table v-1: Typographic Conventions
Typeface Meaning Example
Links
Emphasis Titles, emphasized or new words or
Filename or
Command
User type What you type in an example,
4
Hypertext links or URLs Go to:
http://www.cyclades.com
See the AlterPath ACS
terms
Names of commands, files, and
directories; onscreen computer
output.
compared to what the computer
displays
Quick Start.
Edit the pslave.conf
file.
[root] ifconfig
eth0
Page 35
The following table describes other terms and conventions.
Table v-2: Other Terms and Conventions
Term or Convention Meaning Examples
Additional Resources
Hot keys • When hot keys are shown
with a plus (+) between
two or three keys means
that they must be pressed
at the same time.
Navigation shortcuts Shortcuts use the “greater
than” symbol (>) to
indicate how to navigate to
Web Manager forms.
Additional Resources
The following sections describe Cyclades offerings, including technical
training and firmware upgrades.
Cyclades Technical Support
Cyclades offers free technical support. Check the Cyclades website at: http://
www.cyclades.com/support/technical_support.php for contact information
about the Cyclades regional support centers.
Cyclades Technical Training
• Pressing Ctrl+p
brings up the IPMI
power management.
Go to Port > Physical
Ports> Modify Selected
Ports > Power
Management
Cyclades offers a suite of technical courses to increase your knowledge of the
AlterPath ACS.
T o learn more about Cyclades Technical T raining Center and offerings, please
visit our website at www.cyclades.com/training
send an email to training@cyclades.com
, call us at 1-888-292-5233, or
.
Cyclades firmware Upgrades
Cyclades offers periodic firmware upgrades for the AlterPath ACS. These
upgrades are available free of charge to current Cyclades customers. Visit
AlterPath ACS Installation, Administration, and User’s Guide 5
Page 36
Before You Begin
http://www.cyclades.com/support/downloads.php to download the latest
firmware.
See “Upgrade Firmware” on page 323 for instructions on how to upgrade the
firmware on your AlterPath ACS.
6
Page 37
Introduction
This chapter introduces the AlterPath ACS family of advanced console
servers, provides an overview of its features, and briefly describes the features
for understanding the information and procedures in the rest of this manual.
Overview Page 8
AlterPath ACS Models and Configurations Page 8
Connectors on the AlterPath ACS Page 10
Methods of Accessing ACS and Connected Devices Page 10
Web Manager Page 11
Prerequisites for Using the Web Manager Page 11
Types of Users Page 12
Security Features Page 12
Authentication Page 14
VPN Page 16
Packet Filtering Page 16
SNMP Page 23
Notifications, Alarms, and Data Buffering Page 24
Page 38
Introduction
Administering Users of Connected Devices Page 25
Power Management Page 26
Overview
The AlterPath ACS family of advanced console servers is a 1U device that
serves as a single access point for using and administering servers and other
devices. The following figure shows the front of the ACS with its two
PCMCIA card slots.
Figure 1-1: ACS Front with PCMCIA Card Slots
The following figure shows the back of an ACS16 with its Serial, Ethernet,
and Console ports.
Figure 1-2: ACS Back with Connectors
Product Models and Configurations
There are two models of the AlterPath ACS based on the number of power
supplies, and five models based on the number of serial ports. In addition
there are -48VDC single or dual power supply models available, which are
used in certain countries and industries.
The following table shows the available configurations. See Appendix A for
hardware specifications.
Table 1-1: Model Numbers and Configuration Options
Model Number Serial Ports Single Power Supply
Part Number
AlterPath ACS4
8
4 ATP0170 ATP0180
Dual Power Supply
Part Number
Page 39
Table 1-1: Model Numbers and Configuration Options
Model Number Serial Ports Single Power Supply
Part Number
AlterPath ACS8
AlterPath
8 ATP0120 ATP0130
16 ATP0010 ATP0050
ACS16
AlterPath
32 ATP0100 ATP0150
ACS32
AlterPath
48 ATP0190 ATP0200
ACS48
The following figure illustrates the AlterPath ACS family of advanced
console servers.
Dual Power Supply
Part Number
Figure 1-3: AlterPath ACS family of advanced console servers
AlterPath ACS Installation, Administration, and User’s Guide 9
Page 40
Introduction
Connectors on the AlterPath ACS
The following figure depicts the connectors on the back of an ACS8.
Power Supplies
Serial Ports
Figure 1-4: ACS Connectors
The number of serial ports and power supplies depends on the model, see
table 1-1 for model numbers and configurations options.
Ethernet Port
Console Port
Accessing ACS and Connected Devices
You can access ACS and the connected servers or devices locally or remotely
using any of the following methods.
• Using the Web Manager through LAN/WAN IP networks.
• Using a modem, ISDN, GSM, or CDMA optional PCMCIA card.
• Using the Web Manager you can login and launch a console session such
as T elnet or SSH to connect to the console of devices that are connected to
the ACS’s serial ports.
• By connecting a computer running a terminal emulation program, an ACS
administrator can log into the ACS box and enter commands in the ACS
shell or use the Command Line Interface (CLI) tool.
Note: Only one user logged in as “root” or “admin” can have an active CLI or Web
Manager session. A second user who connects through the CLI or the Web
Manager as the “root” or “admin” has a choice to abort the session or close the
other user’s session.
10
Page 41
Note: If there are cron jobs running through automated scripts, a “root” or “admin”
user login can cause the automated cron jobs to fail. Make sure that the users
with administrative privileges are aware of this.
Web Manager
ACS administrators perform most tasks through the Web Manager either
locally or from a remote location. The Web Manager runs in a browser and
provides a real-time view of all the equipment that is connected to the ACS.
The ACS administrator can use the Web Manager to configure users and
ports. An authorized user can access connected devices through the Web
Manager to troubleshoot, maintain, recycle power, and reboot connected
devices.
Access to the Web Manager is through one of the following ways:
• Through the IP Network.
• Through a dial-in or callback connection with one of the following:
• An optional external modem connected to one of the serial ports.
• A modem on an optional PCMCIA modem card.
• An optional CDMA, GSM, or ISDN card.
Prerequisites for Using the Web Manager
The prerequisites described in this section must be complete before anyone
can access the Web Manager. If you have questions about any of the following
prerequisites, contact your system or network administrator.
• Basic network parameters must be defined on the ACS so the Web
Manager can be launched over the network.
See “Performing Basic Network Configuration Using the wiz Command”
on page 44.
• The IP address of the ACS must be known.
When DHCP is enabled, a leased IP address is assigned to ACS. The
leased IP address may change every time ACS reboots. Therefore, an
additional step needs to be taken to find out the dynamically-assigned IP
AlterPath ACS Installation, Administration, and User’s Guide 11
Page 42
Introduction
address before the Web Manager can be accessed through the browser.
Following are three ways to find out the dynamically-assigned IP address:
• Make an inquiry to the DHCP server on the subnet that the ACS
resides, using the MAC address (The MAC address is labeled at the
bottom of the ACS).
• Connect to ACS remotely using Telnet or SSH and use the
ifconfig command.
• Connect directly to the ACS and use the ifconfig command
through a terminal emulator application.
• A user account must be defined on the Web Manager.
By default, the “admin” has an account on the Web Manager. An
administrator can add regular user accounts to grant access to the
connected servers or devices using the Web Manager.
Types of Users
ACS supports the following user account types:
• The “root” user who can manage the ACS and its connected devices. The
“root” user performs the initial network configuration. Access privileges
are full read/write and management.
Note: It is strongly recommended to change the default password “tslinux” before
Security
12
setting up the ACS for secure access to the connected servers or devices.
• Users who can be part of an “Admin” group with administrative
privileges. This may be a regular user who can perform the same tasks as
an administrator.
• Regular users who can access the connected devices through the serial
ports they are authorized for. Regular users have limited access to the W eb
Manager features.
The AlterPath ACS includes a set of security profiles that consists of
predefined parameters to control access to ACS and its serial ports. This
feature provides more control over th e services that are active at any one time.
Page 43
As an additional security measure, all serial ports are disabled by default,
which allows the administrator to enable and assign individual ports to users.
The following table shows the available security profiles and the active
services under each profile. See “Security Profiles” on page 236 for detailed
information and procedures.
Table 1-2: Enabled services to access the ACS under each security profile.
Access to ACS Secure Moderate Open
Default
1
Custom
Telnet
SSHv1
SSHv2
33 33
Allow SSH root access
HTTP
HTTPS
33 33
HTTP redirection to HTTPS
1-The Default security profile parameters is the same as Moderate profile.
333
333
333
33
3
Table 1-3: Enabled services to access the serial ports under each profile.
Access to Serial Ports Secure Moderate Open
Console (Telnet)
Console (SSH)
Console (Raw)
33 33
333
333
Default
1
User Configurable
Custom
Serial Port Authentication
Bidirect (Dynamic Mode
3
333
User Configurable
Support)
1-The Default security profile parameters is the same as Moderate profile.
AlterPath ACS Installation, Administration, and User’s Guide 13
Page 44
Introduction
Table 1-4: Enabled protocols for each profile shown with a check mark.
Other Services Secure Moderate Open
Default
1
Custom
SNMP
RPC
ICMP
FTP
IPSec
1-The Default security profile parameters is the same as Moderate profile.
333
Authentication
ACS supports a number of authentication methods that can help the
administrator with the user management. Authentication can be performed
locally or with a remote server, such as RADIUS, TACACS+, LDAP, or
Kerberos. An authentication security fallback mechanism is also employed,
should the negotiation process with the authentication server fails. In such
situations, the ACS follows an alternate defined rule when authentication
server is down or does not authenticate the user.
The following table lists the supported authentication methods.
Table 1-5: ACS Supported Authentication Methods
3
3
User Configurable
14
Authentication Type Definition
None
Kerberos
Kerberos/Local
KerberosDownLocal
No authentication.
Authentication is performed using a Kerberos
server.
Kerberos authentication is tried first, switching
to Local if unsuccessful.
Local authentication is performed only when
the Kerberos server is down.
Page 45
Authentication Type Definition
LDAP
LDAP/Local
LDAPDownLocal
Local
Local/Radius
Local/TACACS+
Local/NIS
NIS
NIS/Local
Authentication is performed against an LDAP
database using an LDAP server.
LDAP authentication is tried first, switching to
Local if unsuccessful.
Local authentication is performed only when
the LDAP server is down.
Authentication is performed locally. For
example using the /etc/passwd file.
Authentication is performed locally first,
switching to Radius if unsuccessful.
Authentication is performed locally first,
switching to TACACS+ if unsuccessful.
Authentication is performed locally first,
switching to NIS if unsuccessful.
NIS authentication is performed.
NIS authentication is tried first, switching to
Local if unsuccessful.
NISDownLocal
Local authentication is performed only when
the NIS server is down.
Radius
Authentication is performed using a Radius
authentication server.
Radius/Local
Radius authentication is tried first, switching to
Local if unsuccessful.
RadiusDownLocal
Local authentication is performed only when
the Radius server is down.
TACACS+
Authentication is performed using a
TACACS+ authentication server.
AlterPath ACS Installation, Administration, and User’s Guide 15
Page 46
Introduction
Authentication Type Definition
VPN
TACACS+/Local
TACACS+DownLocal
The ACS administrator can set up VPN connections to establish an encrypted
communications between the ACS and a host on a remote network. The
encryption creates a security tunnel for a dedicated communications.
You can use the VPN features on ACS to crea te the following types of
connections:
• A secure tunnel between ACS and a gateway at a remote location so every
machine on the subnet at th e remote location has a secure connection with
ACS.
• Create a secure tunnel between ACS and a single remote host
To set up a security gateway, you can install IPSec on any machine that does
networking over IP, including routers, firewall machines, application servers,
and end-user machines.
The ESP and AH authentication protocols are supported. RSA Public Keys
and Shared Secret are also supported.
TACACS+ authentication is tried first,
switching to Local if unsuccessful.
Local authentication is tried only when the
TACACS+ server is down.
For detailed information and procedures to configure a VPN connection, see
“VPN Connections” on page 183.
Packet Filtering on ACS
The ACS administrator can configure the box to filter packets like a firewall.
IP filtering is controlled by chains and rules.
Structure of IP Filtering
The Firewall Configuration form in the Web Manager is structured on two
levels:
16
Page 47
• The view table of the “Firewall Configuration” form which contains a list
of chains.
• The chains which contain the rules that control filtering.
Chain
A chain is a named profile that includes one or more rules that define the
following:
• A set of characteristics to look for in a packet
• What to do with any packet that has all the defined characteristics
The ACS filter table contains a number of built-in chains. The ACS
administrator can define additional chains and can edit the built-in chains. The
built-in chains are referenced according to the type of packet they handle as
shown in the following list:
• INPUT - For incoming packets.
• FORWARD - For packets being routed through ACS.
• OUTPUT - For outgoing packets.
As defined in the rules for the default chains, all input and output packets, and
packets being forwarded are accepted.
Rule
Each chain can have one or more rules that define the following:
• The packet characteristics being filtered.
The packet is checked for characteristics defined in the rule. For example,
a specific IP header, input and output interfaces, TCP flags and protocol.
• What to do when the packet matches the rule.
The packet can be handled according to a specified target policy such as
accepted, dropped, returned, logged, or rejected.
When a packet is filtered, its characteristics are compared against the rules
one-by-one. All defined characteristics must match. If no rules are found then
the default action for that chain is applied.
AlterPath ACS Installation, Administration, and User’s Guide 17
Page 48
Introduction
Administrators can do the following to specify packet filtering:
• Add a new chain and specify rules for that chain
• Add new rules to existing chains
• Edit a built-in chain or delete the built-in chain rules
Add Rule and Edit Rule Options
When you add or edit a rule you can define any of the options described in the
following table.
Table 1-6: Filter Options for Packet Filtering Rules
Filter Options Description
Source IP and Mask
Destination IP and Mask
Protocol
Input Interface
Output Interface
Fragments
If you specify a source IP, incoming packets are filtered for
the specified IP address. If you specify a destination IP,
outgoing packets are filtered for the specified IP address.
If you fill in a source or destination mask, incoming or
outgoing packets are filtered for IP addresses from the
subnetwork in the specified netmask.
You can select a protocol for filtering from one of the
following options:
•ALL
• Numeric Protocol Options
• TCP Protocol Options
• UDP Protocol Options
• ICMP Protocol Options
The input interface (ethN) used by the incoming packet.
The output interface (ethN) used by the outgoing packet.
The types of packets to be filtered:
• All packets
• 2nd, 3rd... fragmented packets
18
• Non-fragmented and 1st fragmented packets
Page 49
You can flag any of the above elements with inverted so that the target action
is performed on packets that do not match any of the criteria specified in that
line. For example, if you select DROP as the target action, specify “Inverted”
for a source IP address, and do not specify any other criteria in the rule, any
packets arriving from any other source IP address than the one specified are
dropped.
Numeric Protocol Options
If you select Numeric as the protocol when specifying a rule, you need to
specify the desired number.
TCP Protocol Options
If you select TCP as the protocol when specifying a rule, you can define the
following options.
Table 1-7: TCP Protocol Packet Filtering Options
Field/Menu Option Definition
Source Port
- OR -
Destination Port
TCP Flags
You can specify a source or destination port number for filtering in
the “Source Port” or “Destination Port” field. You can also specify
a range so that TCP packets are filtered for any port number within
the range.
Specifying any of the flags: “SYN” (synchronize), “ACK”
(acknowledge), “FIN” (finish), “RST” (reset), “URG” (urgent),
“PSH” (push), and one of the “Any,” “Set,” or “Unset” conditions,
filters TCP packets for the specified flag and the selected
condition.
AlterPath ACS Installation, Administration, and User’s Guide 19
Page 50
Introduction
UDP Protocol Options
When you select UDP as a protocol when specifying a rule, you can select the
UDP options defined in the following table.
Table 1-8: UDP Protocol Packet Filtering Options
Field Definition
Source Port
- OR -
Destination Port
ICMP Protocol Options
When you select ICMP as a protocol when specifying a rule, you can select
the following ICMP options.
•all
• echo-reply
• destination-unreachable
• network-unreachable
• host-unreachable
• protocol-unreachable
• port-unreachable
• fragmentation-needed
• source-route-failed
• network-unknown
• host-unknown
• network-prohibited
• host-prohibited
• TOS-network-unreachable
• TOS-host-unreachable
• communication-prohibited
• host-precedence violation
Specify a source or destination port number for filtering in the
“Source Port” or “Destination Port” field.
You can specify a source or destination port number for filtering in
the “Source Port” field. You can also specify a seco nd number so
that UDP packets are filtered for any port number within the range.
20
Page 51
• precedence-cutoff
• source-quench
•redirect
• network-redirect
• host-redirect
• TOS-network-redirect
• TOS-host-redirect
• echo-request
• router-advertisement
• router-solicitation
• time-exceeded
• ttl-zero-during-transit
• ttl-zero-during-reassembly
• parameter-problem
• ip-header-bad
• required-option-missing
• timestamp-request
• timestamp-reply
• address-mask-request
• address-mask-reply
Target Actions
The “T arget” is the action to be performed on an IP packet that matches all the
criteria specified in a rule. The target actions are:
• ACCEPT
•DROP
• RETURN
•LOG
•REJECT
AlterPath ACS Installation, Administration, and User’s Guide 21
Page 52
Introduction
If the “LOG” and “REJECT” targets are selected, additional options are
available.
The following table describes the options for the “LOG” Target.
Table 1-9: LOG Target Action Options
Options Definition
Log Level
emerg
alert
crit
err
warning
notice
info
debug
Log Prefix
TCP Sequence
TCP Options
IP Options
The prefix to use in the log entry.
Includes the TCP sequence in the log.
Includes TCP options in the log.
Includes IP options in the log.
The following list shows the options for the REJECT Target:
• icmp-net-unreachable
• icmp-host-unreachable
• icmp-port-unreachable
• icmp-proto-unreachable
• icmp-net-prohibited
• icmp-host-prohibited
• echo-reply
• tcp-reset
22
Page 53
SNMP
Firewall Configuration Procedures
The following table has links to the procedures for defining packet filtering
using the Web Manager.
To Add a Chain Page 208
To Edit a Chain Page 208
To Add a Rule Page 210
To Edit a Rule Page 210
The ACS administrator can activate Simple Network Management Protocol
(SNMP) agent that resides on the ACS so that the SNMP agent sends
notifications about significant events or traps to an SNMP management
application. The ACS SNMP agent supports SNMP v1/v2 and v3.
The following table shows the tasks related to administering SNMP on the
ACS and provides links to where they are documented.
To Configure SNMP See “To Configure SNMP”
on page 191.
To Activate the SNMP Service. See “Services” on page 193
To configure one or more serial ports
to send SNMP traps.
AlterPath ACS Installation, Administration, and User’s Guide 23
See “SNMP Trap
Notifications Entry” on page
312
Page 54
Introduction
Notifications, Alarms, and Data Buffering
The ACS administrator can setup logging, notifications, and alarms to alert
administrators about problems. System generated messages on ACS and the
connected servers or devices can be sent to syslog servers for handling. The
administrator can also configure data buffering to store data from
communication on serial ports for monitoring.
Data from communication with serial-connected consoles can be stored:
• Locally in the ACS’s flash memory, or
• Remotely either on an NFS server or a syslog server.
Syslog Servers
Messages about the ACS and connected servers or devices can be sent to a
central logging servers, called syslog servers. Console data from devices
connected to serial ports can be stored in data buffer files on syslog servers.
By default logging and data buffering are not done.
Prerequisites for Logging to Syslog Servers
24
Before configuring syslogging, the ACS administrator must ensure that syslog
server is pre-configured with a public IP address, and it is accessible from
ACS. The ACS administrator must be able to obtain the following information
from the syslog server’s administrator.
• The IP address of the syslog server
• The facility number for messages coming from the ACS.
Facility numbers are used on the syslog server for handling messages
generated by multiple devices.
Facility Numbers for Syslog Messages
Each syslog server has seven local facility numbers available for its
administrator to assign to different devices or groups of devices at different
locations. The available facility numbers are Local0 through Local7.
An Example of Using Facility Numbers
The syslog system administrator sets up a server called “syslogger” to handle
log messages from two ACS boxes. One ACS is located in São Paulo, Brazil,
Page 55
and the other in Fremont, California. The syslog server’s administrator wants
to aggregate messages from the São Paulo ACS into the
to aggregate messages from Fremont ACS into the
On “syslogger” the system administrator has configured the system logging
utility to write messages from the
saopaulo-config
var/log/fremont-config
syslog server using the Web Manager, according to this example, you would
select the facility number Local2 from the “Facility Number” pull-down menu
on the Syslog form.
file and the messages from the local2 facility to the /
local1 facility to the /var/log/
file. If you were in Fremont and identifying the
local1 facility, and
local2 facility.
Administering Users of Connected Devices
This sections provides a list of task that an ACS administrator can perform to
enable access to connected devices.
Planning Access to Connected Devices
The ACS administrator needs to perform specific tasks to setup and configure
user access to the connected servers, IPDUs, or other devices. An advanced
planning can minimize issues that may arise during software configuration.
Some of the planning steps includes the following:
• Create a list of servers or devices to connect to the serial ports.
• Create a list of users with the type of access each user requires.
• Create a matrix of users and required access to each connected server or
device.
• Create meaningful aliases to assign to port numbers.
• List all devices that need to be connected to IPDUs and the users who
need to access them.
Configuring Access to Connected Devices
During hardware installation of ACS, the installer connects the servers,
devices, and any IPDUs to the serial ports.
AlterPath ACS Installation, Administration, and User’s Guide 25
Page 56
Introduction
During software configuration, the ACS administrator performs the common
tasks listed in the following table.
Table 1-10: Tasks for Configuring Access to Connected Devices
Task Where documented
Configure a serial port connection protocol
for a console connection
Configure user access to serial ports. Page 271
Configure a serial port for IPDU or IPMI
power management
Configure a user for IPDU power
management
Page 256
Page 285
Page 286
ACS and Power Management
ACS enables users who have power management permissions to power off,
power on, and reboot devices. The ACS offers the following power
management options:
• Remote power management of servers that have IPMI controllers. The
ACS's implementation of the Intelligent Platform Management Interface
(IPMI) protocol lets authorized users manage power for servers that have
embedded IPMI controllers. IPMI servers do not need to be connected to
the ACS because their IPMI controllers respond to out-of-band IPMI
commands. Authorized users can also perform IPMI power management
of serially-connected devices. The ACS uses IPMI V1.5.
• Remote power management of devices that are plugged into an IPDU that
is connected to ACS
• The intelligent power distribution unit (IPDU) can be an AlterPath PM
connected to any serial port. Up to 128 IPDU outlets can be daisychained.
• The diagram below shows a typical setup of the ACS and an AlterPath
PM unit.
26
Page 57
Figure 1-5: IPDU Integration With ACS
Configuring Power Management
Administrators commonly perform power management through the Web
Manager, to assign power management permissions to users, configure IPMI
devices, and configure ports for power management.
The following table list the tasks for power management and where they are
described.
Table 1-11: Tasks for Configuring Power Management
Task Where Documented
Configure users to manage power on IPDUs “To Configure a User for IPDU Power
Management While Connected To a Serial
Port” on page 286
Identify servers for IPMI power
management
Configure ports for power management by
authorized users
AlterPath ACS Installation, Administration, and User’s Guide 27
“T o Delete, Add, or Edit an IPMI Device to
Enable or Disable IPMI Power
Management” on page 148
“To Configure a Serial Port for IPDU or
IPMI Power Management” on page 285.
Page 58
Introduction
Configuring Ports for Power Management by Authorized Users
Administrators of connected devices who have power management
permissions can do power management while connected by using a “hot key”
that brings up a power management screen.
For IPMI power management the default hot key is Ctrl+p. For IPDU power
management the default hot key is Ctrl+Shift+I.
Configuring Ports for Power Management Using the CLI
ACS administrators can use the CLI command with the config ipmi
options to manage power on IPMI devices while logged into the ACS with
administrative rights. The ipmitool command is documented in the
AlterPath ACS Installation, Administration, and User’s Guide.
Options for Managing Power
The sections listed below describe the different ways that the authorized users
can perform power management through ACS.
• From forms in the Web Manager
• From a power management screen while logged into a device
• From the command line while logged into ACS
An authorized user with administrative privileges can perform IPDU and
IPMI power management. A Regular User with permissions to the connected
devices can perform IPDU power management.
28
Power Management Through the Web Manager
Users with power management permissions can perform power management
through the Web Manager. The Web Manager menu includes the two power
Page 59
management options listed in the following table, with links to where each is
documented.
Table 1-12: Power Management Options in the Web Manager
Form Name Where Documented
IPDU Power Mgmt • “IPDU Power Mgmt.” on page 126
• “To View Status, Lock, Unlock, Rename, or Cycle
Power Outlets” on page 129
IPMI Power Mgmt • “IPMI Power Management” on page 145
• “To Delete, Add, or Edit an IPMI Device to Enable or
Disable IPMI Power Management” on page 148
• “To Manage Power on an IPMI Device” on page 149
Power Management from the ACS Command Line
ACS administrators can use the ipmitool command to manage power on
IPMI devices while logged into the ACS with administrative rights. The
ipmitool command is documented in the AlterPath ACS Command
Reference Guide.
AlterPath ACS Installation, Administration, and User’s Guide 29
Page 60
Introduction
30
Page 61
Chapter 2
Inst allation and Configuration
This chapter covers the topics listed in the following table.
Shipping Box Contents Page 32
Important Pre-Installation Requirements Page 38
Basic Installation Procedures Page 39
Other Methods of Accessing the Web Manager Page 49
Installing PCMCIA Cards Page 51
Connecting AlterPath PM IPDUs Page 52
The following figure illustrates an example of an ACS configured with
connected devices.
Page 62
Installation and Configuration
Figure 2-1: ACS Setup Example
Shipping Box Contents
The shipping box contains the ACS along with the items shown in Table 2-1
and Table 2-2 for ACS4 through ACS48, and ACS1 respectively. The entry
for each part provides an illustration, its part number, description, and
purpose. You can use checkboxes to check off each item, and you can use the
part numbers from this table to reorder any of the parts.
The list is numbered for internal cross-referencing among descriptions within
this table.
Table 2-1: Shipping Box Contents for ACS4 - ACS48
R Item P/N Description Purpose
1.
32
PAC0266 Documentation CD PDF copies of this guide and
all other Cyclades product
documents.
Page 63
Shipping Box Contents
R Item P/N Description Purpose
2.
3.
PAC0199 AlterPath ACS
QuickStart Guide
Basic installation guide in
printed format. Written for
users experienced in
installing Cyclades products.
Power cable.
• One cable is
included with the
AC single power
supply products.
• Two cables are
included with the
AC dual power
supply products.
• No cables are
included with the
DC single or dual
power supply
products.
CAB0010 NEMA5--15P. Flat
To connect the ACS to a
power source. The
destination country is used to
determine which type of cord
is shipped based on the
country’s standard power
outlet. The prongs of
available cords are shown in
the following rows. T alk with
a Cyclades sales
representative if the power
cable you need is not listed in
this table or if you have
special requirements.
United States and Canada
blades with round
grounding pin.
CAB0037 Schuko. Round pin
Continental Europe
attachment plug.
AlterPath ACS Installation, Administration, and User’s Guide 33
Page 64
Installation and Configuration
R Item P/N Description Purpose
4.
5.
CAB0055 Oblique flat blades
with ground.
CAB0056/
CAB0104
Rectangular blade
plug.
CAB0278 Flat blades with
round grounding
pin.
ADB0017 RJ45 to DB25F
crossover adapter
ADB0025 RJ45 to DB25M
crossover adapter
Australia and New Zealand
UK and Ireland
Japan
To connect the console port
to a computer that has a DB-
25 male connector.
To connect the console port
to a computer that has a DB-
25 female connector.
34
6.
ADB0036 RJ45 to DB9F
crossover adapter
To connect the console port
to a computer that has a DB-9
connector.
Page 65
Shipping Box Contents
R Item P/N Description Purpose
7.
8.
9.
10.
ADB0039 Sun/Netra
crossover adapter
To connect the console port
to a Sun Netra server, or other
devices with the same pinout
configuration.
CAB0018 RJ45 to RJ45 7ft.
CAT5 cable
Use for the following:
• To connect a device or an
IPDU to a serial port.
• T o connect an Ethernet po rt
to the LAN.
• To connect a terminal to a
console port.
CAB0025 RJ45 to DB25M
straight-thru cable
Use for modems and other
DCE devices.
CON0071 DB25F Loopback Use to test and diagnose
serial ports.
11.
HAR0220 2 - Mounting
brackets with
8-screws (2
spares)
Use to mount the ACS to a
rack or cabinet. To mount on
a wall, order the brackets
under part number:
HAR0220.
Table 2-2: Shipping Box Contents for ACS1
R Item P/N Description Purpose
AlterPath ACS Installation, Administration, and User’s Guide 35
Page 66
Installation and Configuration
1.
2.
3.
4.
5.
PAC0266 Documentation CD PDF copies of this guide and
all other Cyclades product
documents.
PAC0199 AlterPath ACS
QuickStart Guide
Basic installation guide in
printed format. Written for
users experienced in
installing Cyclades products.
ADB0036 RJ45 to DB9F
crossover adapter
To connect the console port
to a computer that has a DB-9
connector.
CON0071 DB25F Loopback Use to test and diagnose
serial ports.
CON0095 3.5mm Block Plug Use to establish RS-485
connection.
36
6.
7.
CON0093 DB9F to DB25M
adapter
PAC0111 Bumpon Protect
Pads
Use to convert serial port
connectors.
Adhesive pads to protect and
stabilize ACS1.
Page 67
Shipping Box Contents
8.
9.
10.
CAB0018 RJ45 to RJ45 7ft.
CAT5 cable
CAB0042 DB9F to DB25F
crossover cable
POW0021 Power Supply
+5V/2.5A
Use for the following:
• To connect a device or an
IPDU to a serial port.
• T o connect an Ethernet po rt
to the LAN.
• To connect a terminal to a
console port.
To connect the RS-232 serial
port to a computer that has a
DB-25 male connector.
Power supply for ACS1.
11.
CAB0052 Power Cable
United States and Canada
6ft. 2-Pin
CAB0053 Schuko. Round pin Continental Europe
CAB0074 Oblique flat blades Australia and New Zealand
CAB0075 Rectangular blades UK and Ireland
AlterPath ACS Installation, Administration, and User’s Guide 37
Page 68
Installation and Configuration
Important Pre-installation Requirements
Before installing and configuring ACS, ensure that you have the following:
• Root Access on your local UNIX machine in order to use the serial ports.
• An appropriate Terminal application for your operating system.
• IP address, DNS, Network Mask, and Gateway addresses of your server
or terminal, the ACS, and the machine that ACS is connected to.
• A web browser that supports the ACS Web Manager, such as Netscape,
Internet Explorer 6.0, Firefox, or Mozilla.
• Java 2 Runtime Environment (JRE) version 1.4.2 or later. J2RE can be
downloaded from http://java.com
Java Plug-In Requirement for Serial Port Access
The JRE version 1.4.2 or later must be installed for a user to be able to access
a serial port using the Java applet viewing window. After you download and
install J2RE version 1.4.2 or later, check your browser configuration to see if
the Java plug-in is configured with your browser.
.
38
T To check Java Plug-in Support in the Browser
1. To check Internet Explorer on Windows, do the following steps.
a. Go to Tools > Internet Options > Advanced
b. Scroll down and look for a section on Java.
c. There should be a check box that says “Use Java 2 v1.4.2...." As
shown in the following figure.
d. If an option similar to the above figure does not appear, it means that
JRE is not installed on your system. Or, if the option appears, but the
checkbox is not enabled, this means your browser is not activated to
use the Java plug-in that came with JRE.
2. To check Netscape or Mozilla on Windows, do the following steps.
a. Go to Edit > Preferences >Advanced.
b. Check the “Enable Java” checkbox.
Page 69
Basic Installation Procedures
c. To see what version of the Java plug-in is registered, do the following
steps.
i. Go to Help > About Plug-ins.
ii. Scroll to the Java Plug-in section.
iii. Check whether the registered Java plug-in is the same as the
version you installed.
T To Install JRE Version 1.4.2 or later and Register the Plug-in
1. Make sure that JRE 1.4.2 or later is installed on the computer.
If needed, download the JRE from http://java.com.
automatically checks your configuration and installs the latest version of
JRE if one is not available.
2. If JRE is already installed on your system and you just want to activate
your browser, do the following steps.
a. Go to your system's Control Panel > Java Plug-in > Browser
b. Enable the browser(s) for Java Plug-in.
c. Test your browser(s) to see if the correct Java Plug-in is being used.
The web site
Basic Installation Procedures
The following table lists the basic installation tasks in the order in which they
should be performed and shows the page numbers where the tasks are
described in more detail.
Table 2-3: ACS Basic Installation Tasks
Task Where Documented
Mount the ACS “Mounting the ACS” on page 40
Make an Ethernet connection “Making an Ethernet Connection” on page 41
Connect servers and other devices to be
managed through the ACS
AlterPath ACS Installation, Administration, and User’s Guide 39
“Connecting Servers and Other Devices to
ACS” on page 41
Page 70
Installation and Configuration
Task Where Documented
Make a direct (terminal) connection to
prepare ACS for basic network
configuration
Power on the ACS and the connected
devices
Perform basic network configuration “Performing Basic Network Configuration
Select a security profile using the web
manager
“Making a Direct Connection to Configure the
Network Parameters.” on page 42
“Powering on the ACS and the Connected
Devices” on page 43
Using the wiz Command” on page 44
“Selecting A Security Profile Using the Web
Manager” on page 48
Mounting the ACS
You can mount the ACS on a wall, rack, or cabinet, or place it on a desktop or
other flat surface. Two brackets are supplied with six hex screws for attaching
the brackets to ACS for mounting. See item 14 in the shipping content section.
• If you are not mounting the ACS, place the unit on a desk or table.
• If you are rack-mounting the ACS, obtain a hex screwdriver and
appropriate nuts and bolts before starting the following procedure.
T To rack-mount ACS, perform the following steps:
40
1. Install the brackets on to the front or back edges of the box using a screw
driver and the screws provided with the mounting kit.
brackets
2. Mount the ACS box in a secure position.
Page 71
Basic Installation Procedures
Note: To ensure safety refer to Appendix B "Safety, Regulatory, and Compliance
Information".
Making an Ethernet Connection
Connect a CAT-5 patch cable from the ACS port labeled 10/100Base-T to an
Ethernet hub or switch.
Connecting Servers and Other Devices to ACS
The following sections describes the recommended preparation for
connecting servers or devices to ACS.
• Make sure the configuration on servers or devices to be connected are
completed.
• Work with the administrator of the servers or devices to ensure all the
following prerequisites are met:
• All devices are installed and fully configured.
• User accounts exist for the users who need access to the server or
device.
• If a device is to use remote authentication, make sure that the
authentication servers are installed and fully configured
• Y ou have obtained from the server’s administrator the information (IP
address and other method-specific information), which you need to
configure the authentication server on the ACS.
T To Connect Devices to Serial Ports
Using patch cables with RJ-45 connectors and DB-9 console adapters
assemble crossover cables to connect the ACS serial ports to the device’s
console port.
Note: For AlterPath ACS16 and AlterPath ACS32 models with single or dual DC
power supplies, make sure you use shielded cables when connecting devices
to the serial ports. Shielded cables are required to comply with NEBS Level 3
certification on these models.
AlterPath ACS Installation, Administration, and User’s Guide 41
Page 72
Installation and Configuration
Making a Direct Connection to Configure the Network Parameters.
Perform the following steps to connect a terminal or a computer to the console
port of the ACS.
On a PC, ensure that HyperT erminal or another terminal emulation program is
installed on the Windows operating system. On a computer running a UNIXbased operating system, such as Solaris or Linux, make sure that a compatible
terminal emulator such as Kermit or Minicom is installed.
T To Connect to the Console Port
You can use a CAT-5 straight-through cable with RJ-45 connectors and the
appropriate adapter provided in the product box to assemble a console cable.
All adapters have an RJ-45 connector on one end and either a DB25 or DB9
male or female connector on the other end.
1. Connect the RJ-45 end of the cable to the port labeled “Console” on the
ACS.
2. Connect the adapter end of the cable to the console port of your server or
device.
42
3. Install and launch your serial communication software on a terminal or a
computer. For example, if you are using a PC, use HyperTerminal to
perform the initial configuration of the ACS directly through your PC’s
COM port.
4. Open HyperTerminal. Start > All Programs > Accessories >
Communications > HyperTerminal
5. Start a New Connection session, select an available COM port, and enter
the following console parameters.
• Bits per second: 9600 bps
• Data bits: 8 bits
• Parity: None
• Stop bit: 1
• Flow control: None
Page 73
Basic Installation Procedures
Powering on the ACS and the Connected Devices
Do the following procedures in the order shown to avoid problems with
components on connected devices.
T To Power on the ACS
1. Make sure the ACS’s power switch is off.
2. Plug in the power cable.
3. Turn the ACS’s power switch(es) on.
Note: If your ACS model is equipped with dual power sup plies, make sure you turn
both power switches on. After system initialization, a beep sound may warn if
one of the power supplies is off.
T To Turn Power On Connected Devices
• Turn on the power switches of the connected devices only after you have
completed the physical connection to ACS.
Configuring the Network Parameters
In preparation to make ACS available on the network, collect the following
information from your system administrator and proceed with the network
configuration procedure.
• Hostname
• An IP address for ACS
• Domain name
AlterPath ACS Installation, Administration, and User’s Guide 43
Page 74
Installation and Configuration
• DNS IP address
• Gateway IP address
• Network mask
• NTP server’s IP address (if you are using a time/date server)
Performing Basic Network Configuration Using the wiz Command
The following procedure assumes that a hardware connection is made
between the ACS’s console port and the COM port of a computer.
T To Log Into ACS Through the Console
From your terminal emulation application, log into the console port as
root.
ACS login: root
Password: tslinux
Warning: For security reasons, it is strongly recommended that you change the default
password “tslinux” as soon as possible. To change the default password, enter
the “passwd” command at the prompt, and enter a new password when
prompted.
Note: The following Security Advisory appears the first time ACS is accessed, or
after a reset to factory default parameters.
If you are upgrading the
firmware on ACS, the previously configured security parameters are
retained in the flash memory and the below message does not appear.
44
Page 75
Basic Installation Procedures
Figure 2-2: Security Advisory Console Message
Important - Security Advisory!
Console Management provides critical access to management
features of attached equipment. Please take the required precautions
to understand the potential impacts this device may have to your
SECURITY policies.
From factory, this device is configured as follows:
• Single password for ROOT;
• All serial port DISABLED;
• DHCP, Telnet, SSHv1 & SSHv2, and HTTP & HTTPS enabled.
Cyclades STRONGLY recommends:
1. To change the ROOT password before setting up the box for
secure access to the ACS equipment.
2. That you SELECT A SECURITY PROFILE to complete the
INITIAL SETUP. Security is dependent on Policy and is
Configurable to fit in environments with varying levels of Security.
Cyclades provides three pre-set Security Levels: SECURED,
MODERATE and OPEN, and in addition, the ability to set a
CUSTOM Security Profile.
3. Do not leave the equipment idle WITHOUT selecting a
SECURITY PROFILE.
4. To ENABLE Serial Ports and CONFIGURE them using Web UI
or CLI. Refer to the Quick Start Guide or the User's Guide for
Security Profile selection details and Serial Port configuration.
T To Use the wiz Command to Configure Network Parameters
1. Launch the Configuration Wizard by entering the wiz command.
[root@CAS root]# wiz
As shown in the sample screen below, the system brings up the
configuration wizard banner and begins running the wizard.
AlterPath ACS Installation, Administration, and User’s Guide 45
Page 76
Installation and Configuration
2. At the prompt, enter n to change the defaults.
46
Set to defaults (y/n)[n]: n
3. Press Enter to accept the default hostname, oth erwise enter your own
hostname.
Hostname [CAS]: fremont_branch_ACS
4. Press Enter to keep DHCP enabled, or enter “n” to specify a static IP
address for ACS. By default, ACS uses the IP address provided by the
DHCP server. If your network does not use DHCP, then ACS will default
to 192.168.160.10.
Do you want to use DHCP to automatically
assign an IP for your system? (y/n)[y] :
5. To change the default static IP address, see your network administrator to
obtain a valid IP address.
System IP[192.168.160.10]: ACS_IP_address
Page 77
Basic Installation Procedures
6. Enter the domain name.
Domain name[cyclades.com]: domain_name
7. Enter the IP address for the Primary DNS (domain name) server.
Primary DNS Server[192.168.44.21] :
DNS_server_IP_address
8. Enter the IP address for the gateway.
Gateway IP[eth0] : gateway_IP_address
9. Enter the netmask for the subnetwork.
Network Mask[#] : netmask
The network configuration parameters appear.
10. Enter y after the prompts shown in the following screen example.
Are all these parameters correct? (y/n)[n]: y
Do you want to activate your configurations
now? (y/n)[y]: y
Do you want to save your configuration to
Flash? (y/n)[n]: y
11. To confirm the configuration, enter the ifconfig command.
12. After the initial configuration proceed to the Web Manager to select a
security profile as described in the following section.
Note: To use the Web Manager, ask your system administrator for the ACS’s IP
address. ACS may be set up with a static IP address at your site. By default,
ACS uses the IP address provided by the DHCP server. If your network does
not use DHCP, then ACS defaults to 192.168.160.10.
AlterPath ACS Installation, Administration, and User’s Guide 47
Page 78
Installation and Configuration
Selecting A Security Profile Using the Web Manager
After the initial configuration, connect to the W e b Manager by entering the IP
address of the ACS in a supported browser.
Note: Once you login to the Web Manager, a Security Profile must be selected in
order to further configure ACS using the Web Manager. For this reason your
browser redirects to Wizard > Step1: Security Profiles.
T To Select a Security Profile
Select a pre-defined Security Profile, or define a Custom profile for specific
services. The profiles are:
• Secured: Disables all protocols except SSHv2, HTTPS, and SSH to
Serial Ports.
• Moderate: Enables SSHv1, SSHv2, HTTP, HTTPS, Telnet, SSH and
Raw connections to Serial Ports, ICMP, and HTTP redirection to
HTTPS.
• Open: Enables all services, Telnet, SSHv1, SSHv2, HTTP, HTTPS,
SNMP, RPC, ICMP and Telnet, SSH and Raw connections to Serial
Ports.
• Default: Sets the profile to the same configuration as Moderate
profile.
• Custom: Allows custom configuration of individual protocols and
services.
For detailed information on Security Profiles see “Security Profiles” on page
236.
48
The administrator can perform the following tasks using the Web Manager.
• Administer ACS and its connected devices.
• Configure user and group permissions.
• Access the serial ports and the connected devices.
Page 79
Other Methods of Accessing the Web Manager
Adding Users and Configuring Ports Using the Web Manager
Enabling Ports and Assigning Users.
Note: From the factory, ACS is configured with all serial ports disabled.
• The administrator can add users, enable or disable the serial ports, and
select and assign specific users to individual ports. For detailed
information on managing users and ports see Appendix 9 "Security Menu
& Forms" and Appendix 10 "Ports Menu & Forms".
For additional configuration and administration options, and other important
related information, see the chapters in the ACS user manual that are listed in
the following table.
Topic Where Documented
Installation and Configuration Process. Appendix 2 "Installation and
Configuration"
For Regular Users - How to use the Web
Manager to access servers and connected
devices.
Web Manager in Wizard Mode. Appendix 5 "Configuring ACS in
We b Manager in Expert Mode. Appendix 6 "Configuring the ACS in
Appendix 3 "Web Manager for Regular
Users"
Wizard Mode"
Expert Mode"
Other Methods of Accessing the Web Manager
You can access the Web Manager using one of the following methods.
AlterPath ACS Installation, Administration, and User’s Guide 49
Page 80
Installation and Configuration
Note: The following methods require additional setup and configuration, which
could be specific to your site’s network configuration.
• Using DHCP
• Using the default IP address
T To Use a Dynamic IP Address to Access the
Web Manager
This procedure assumes that DHCP is enabled, and that you are able to obtain
the dynamic IP address that is currently assigned to ACS.
1. Mount the AlterPath ACS.
2. Connect computers and other devices to be managed through the ACS.
3. Power on the ACS and connected devices.
4. Obtain the ACS’s current IP address.
5. Enter the ACS’s IP address in the browser’s Address window.
50
6. Login to the ACS and finish configuring users and other settings using the
Web Manager.
T To Use the Default IP Address to Access the Web
Manager
The default IP address for the ACS is 192.168.160.10. This procedure
assumes that you are able to temporarily change the IP address of a computer
that is on the same subnet as the ACS.
1. On a computer that resides on the same subnet as the ACS, change the
network portion of the IP address of that computer to 192.168.160.
For example, you could change the computer’s IP address to
192.168.160.44. For the host portion of the IP address, you can use
any number except 10, 0, or 255.
2. Bring up a browser on the computer whose address you changed, enter the
ACS’s default IP address, http://192.168.160.10 to bring up the
Web Manager, and log in.
Page 81
Installing PCMCIA Cards
Installing PCMCIA Cards
The front panel of the ACS has two PCMCIA card slots as shown in the
following figure. You can insert and configure one card in each of the slots.
Figure 2-3: Front Panel PCMCIA Card Slots
To see a list of supported PCMCIA cards go to http://www.cyclades.com/
products/3/alterpath_acs, or www.cyclades.com > Products > IT
Infrastructure Management > AlterPath ACS > Click here for a list of
supported PCMCIA cards.
T To Install a PCMCIA Card
1. Insert the PCMCIA card into slot 1 or slot 2.
2. Use the Web Manager to configure the PCMCIA card.
Note: A hard disk PCMCIA card is automatically mounted once it is inserted, and it
needs no configuration.
T To Remove a PCMCIA Card
Caution: Always use the Web Manager to eject a PCMCIA card. Any other method
may cause a kernel panic.
1. Eject the card by using the Eject button on the Web Manager’s PCMCIA
Management form, Expert > Network > PCMCIA Management > Eject
AlterPath ACS Installation, Administration, and User’s Guide 51
Page 82
Installation and Configuration
Figure 2-4: PCMCIA Eject Button in Web Manager
2. Physically remove the card from the slot.
T To Configure a PCMCIA Card
See Chapter 8, “To Configure a PCMCIA Card”, and the sections related to
the type of card you need to configure.
Connecting AlterPath PM IPDUs
You can connect AlterPath Power Management (PM) intelligent power
distribution units (IPDUs) to the serial ports on the ACS using an RJ-45 to RJ45 UTP cable. AlterPath PM includes two RS-232 outlets for serial
management and daisy-chaining. Any combination o f Alter PM models up to
128 outlets can be daisy-chained into a single virtual power distribution unit.
52
The following figure shows an ACS and two AlterPath PM8 IPDUs daisychained. One PM is connected to a serial port on ACS configured for power
management, and a second PM is daisy-chained from the first PM.
Figure 2-5: AlterPath PMs Connected to the ACS
Page 83
Connecting AlterPath PM IPDUs
The following table lists the related tasks on connecting IPDU units and
managing power.
Table 2-4: Tasks Related to Connecting AlterPath PMs
Task Where Documented
Configure serial ports for power
management protocol.
How the administrators perform IPDU power
management using the Web Manager
How the regular users manager power outlets
using the Web Manager
Connect the AlterPath PM to the ACS unit,
and daisy-chain multiple PM units.
Configure users for IPDU power
management
Configure servers for IPMI power
management while connected.
T To Daisy-Chain AlterPath PMs to the ACS
This procedure assumes that you have one AlterPath PM connected to a serial
port on the ACS.
1. Connect one end of a UTP cable with RJ-45 connectors to the “OUT” port
of the AlterPath PM that is connected to the serial port on ACS.
“To Configure a Serial Port for IPDU or
IPMI Power Management” on page 285
“IPDU Power Mgmt.” on page 126
“To Close an SSH Session” on page 62
“T o Daisy-Chain AlterPath PMs to the ACS”
on page 53
“To Configure Users to Manage Power
Outlets on IPDUs” on page 134
“To Delete, Add, or Edit an IPMI Device to
Enable or Disable IPMI Power
Management” on page 148
2. Connect the other end of the cable to the “IN” port of the next AlterPath
PM.
3. Repeat Steps 1 and 2 until you have connected the desired number of
AlterPath PMs.
AlterPath ACS Installation, Administration, and User’s Guide 53
Page 84
Installation and Configuration
54
Page 85
Chapter 3
Web Manager for Regular Users
This chapter describes the requirements and the procedures for “Regular
Users” to use the W eb Manager. Regular users are those who have configured
accounts on the ACS with limited access rights.
Regular users can perform the following tasks using the Web Manager.
• Access computers and devices that are connected to the serial ports on the
ACS.
• Perform IPDU power management.
• Change their current password.
This chapter contains the following sections.
Using the Web Manager
Features of Regular User Forms
Connect Form Page 58
IPDU Power Management
IPDU Multi-Outlet Control Page 66
Security Page 69
Using the Web Manager
ACS users perform most tasks through the Cyclades Web Manager. The Web
Manager runs in a browser and provides a real-time view of all the equipment
that is connected to the ACS.
Page 55
Page 57
Page 62
Page 86
Web Manager for Regular Users
The ACS administrator can use the Web Manager to configure users and
ports. An authorized user can access connected devices through the Web
Manager to troubleshoot, maintain, recycle power, and reboot connected
devices.
T Logging in to the Web Manager
1. Connect your web browser to ACS by typing in the Console Access
Server’s IP address (e.g., https://10.10.10.10) provided to you by your
system administrator in your internet browser.
Note: Refer to Chapter 2, “ for the requirements to start with the Web Manager.
Press Enter.
The system brings up the ACS Web Manager Login form.
2. Type in your username and password as provided to you by your system
administrator.
56
Figure 3-1: Regular User > Web Manager Login form
Page 87
Features of Regular User Forms
Features of Regular User Forms
The following figure shows features of the Web Manager when regular users
log in.
Form area
Menu
Logout button and ACS information area
Figure 3-2: Regular User Form
The form in the middle changes according to which menu option is selected.
The following table illustrates the functions that are common to all the forms.
Table 3-1: Common Screen Information
Form Area Purpose
Click this button to log out.
AlterPath ACS Installation, Administration, and User’s Guide 57
Page 88
Web Manager for Regular Users
Table 3-1: Common Screen Information (Continued)
Form Area Purpose
Displays the hostname and IP address assigned during initial
configuration, and the model number of the ACS.
Brings up the online help.
Connect
When you select the “Connect” option, the following form appears.
58
Figure 3-3: Regular User > Connect Form
You can use this form to connect to the ACS console, or to one of the serial
ports as described in the following sections.
• “Connect to ACS” on page 59
• “Connect to Serial Ports” on page 60
Permission to access a port or perform power management is granted by the
ACS administrator when your user account is created. Contact your
administrator to gain authorization to access the serial port that the server or
devices is connected to.
Page 89
Connect
Connect to ACS
When you click the “Connect to ACS” radio button on the “Connect” form, a
Java applet viewer appears running an SSH session on the ACS. The
following figure shows the Java applet when you connect to th e ACS. Note in
the “Connected to” message in the below figure at the top of the screen the IP
address of the ACS followed by the session type, in this case “ssh”.
Figure 3-4: Java Applet
The following table describes the available buttons in the Java applet:
Table 3-2: Java Applet Buttons
Button Purpose
To send a break to the terminal
AlterPath ACS Installation, Administration, and User’s Guide 59
Page 90
Web Manager for Regular Users
Table 3-2: (Continued)Java Applet Buttons
Button Purpose
To disconnect from the Java applet
Select the left icon to reconnect to the server or device;
or select the right icon to end the session and
disconnect from the Java applet.
Connect to Serial Ports
The list of serial ports includes the port names or administrator-defined aliases
only for ports you have permission to access. If the list is empty or does not
include a port you need to access, contact the ACS system administrator.
Port Access Requirements
When you connect to a serial port to access a server or another device, access
rights to the specific serial port on ACS is required. Y our system administrator
can help with authorization to specific ACS ports that your server or device is
connected to.
60
Note: If an authentication server is setup in your network, an authentication method
and the related parameters should be setup to allow access to the connected
devices. Consult your system administrator for configuring the authentication
method.
When you select a port from the Serial pull-down list and click the Connect
button, a Java applet viewer appears. A “Connected to” message in a gray area
at the top of the screen shows the IP address of the ACS followed by the TCP
port number. See an example of the Java applet in Figure 3-4
Connection Protocols for Serial Ports
You can access a server or a devic e connected to a serial port by using the
connection protocol specified for the port. There are a number of connection
protocols for the serial ports, which your system administrator can setup
Page 91
Connect
depending on your requirements. The following table shows the protocols
the ACS administrator can choose for the serial ports.
Table 3-3: Serial Ports Connection Protocols
Connection Type Protocol
Console Access Server (CAS) T elnet, SSH, Telnet&SSH, Raw
Terminal Server (TS) Telnet, SSHv1, SSHv2, Local Terminal,
Raw Socket
Dial-up PPP-No Auth., PPP, SLIP, CSLIP
Other Power Management, Bi-directional
Telnet
TCP Port Numbers for Serial Ports
The TCP port numbers by default start at 7001 for serial port 1 and increments
up to the number of serial ports that your ACS unit has. For example, an ACS
with 8 serial ports have TCP ports 7001 through 7008. The ACS administ rator
may change the default port numbers, so if you use the defaults and they fail,
check with the administrator to find which port numbers to use.
T To Use Telnet to Connect to a Device Through a Serial Port
For this procedure, you need the hostname of the ACS or its IP address and
the TCP port number for the serial port to which the device is connected.
• To use Telnet in a shell, enter the following command:
telnet hostname | IP_address TCP_port_number
T To Close a Telnet Session
Enter the Telnet hotkey defined for the client. The default is “Ctrl ]” and “q”
to quit.
AlterPath ACS Installation, Administration, and User’s Guide 61
Page 92
Web Manager for Regular Users
T
To Use SSH to Connect to a Device Through a Serial Port
For this procedure, you need the username configured to access the serial port,
the TCP port number, and the hostname of the ACS or its IP address.
•To use ssh in a shell, enter the following command:
ssh -l username:TCP_port_number ACS_IP_address
T To Close an SSH Session
Enter the hotkey defined for the SSH client followed by a dot “.”. The default
is “~.”
Note: Make sure you enter the escape character followed by a “.” at the beginning of
a line to close the SSH session.
IPDU Power Mgmt.
IPDU or “Intelligent Power Distribution Units” management allows you to
manage the power outlets on the AlterPath PM products. When you select the
“IPDU Power Mgmt.” option, if you have permission to manage outlets on an
AlterPath PM, two tabs appear at the top of the form, as shown in the
following figure, “Outlets Manager” and “View IPDUs Info”.
62
Figure 3-5: Regular User > IPDU Power Mgmt. Forms
You can access the forms under IPDU Power Mgmt. menu to manage outlets,
or view IPDUs information:
Page 93
IPDU Power Mgmt.
Outlets Manager
When you go to IPDU Power Mgmt.>Outlets Manager tab, the message
shown in the following figure appears if,
1- You do not have permission to manage power on any of the AlterPath PM
outlets or,
2- ACS cannot detect an AlterPath PM that has been configured for power
management.
Contact the ACS administrator for help, if you see this message.
Figure 3-6: Regular User > Outlets Manager (no permissions)
The following form appears if you have permission to manage power on one
or more outlets of the AlterPath PM.
Figure 3-7: Regular User > Outlets Manager (with permissions)
AlterPath ACS Installation, Administration, and User’s Guide 63
Page 94
Web Manager for Regular Users
The form shows separate entries for each serial port configured for power
management, a name for the configured serial port if one is defined by the
administrator, and the number of IPDUs connected. The matrix displays a line
item for each outlet you are authorized to manage.
The authorized user can do the following for any listed outlet:
• Edit the outlet name.
Enter a name to identify the server or device plugged into the outlet.
• Edit the power up interval.
The power up interval is the time interval (in seconds) that the system
waits between turning on the currently-selected outlet and the next outlet.
The default is set at 30 seconds.
• Cycle - Turn power briefly off and on again.
• Turn the power On/Off to the outlet.
• Lock or unlock the outlet to prevent accidental changes to the power state.
The following table describe the corresponding buttons to do the above
operations:
64
Button Purpose
Opens a dialog box to
Edit an Outlet name, and the
Power Up Interval.
Turn power briefly off and then on again.
Turn power On/Off.
Lock or unlock the outlet.
Table 3-4: Regular User > Outlet Management Buttons
Page 95
IPDU Power Mgmt.
View IPDUs Info
When you go to IPDU Power Mgmt.>View IPDUs Info, the form appears as
shown in the following figure.
Figure 3-8: Regular User > View IPDUs Info
The following information is displayed for each port that is configured for
power management.
Table 3-5: Regular User > Information on the View IPDUs Info Form
Description Example
Name
Number of
Units
Syslog
Buzzer
Number of
Outlets
AlterPath ACS Installation, Administration, and User’s Guide 65
Either a default name or administrator-configured
name.
The number of IPDUs connected to the port. The first
IPDU is referred to as the master. Any other IPDUs
daisy-chained off the first IPDU are referred to as
slaves.
Whether syslogging has been configured for messages
from this IPDU.
Whether a buzzer has been configured to sound when
a specified alarm threshold is exceeded.
Total number of outlets on all connected IPDUs. 8
PM
1
ON
ON
Page 96
Web Manager for Regular Users
Table 3-5: Regular User > Information on the View IPDUs Info Form
Description Example
Over Current
Protection
Model
Software Version
Alarm Threshold
Current
Maximum
Detected
Temperature
Whether over current protection is enabled (to prevent
outlets from being turned on if the current on the
IPDU exceeds the specified threshold).
Description Example
AlterPath PM model number PM8 15A
PM firmware version 1.5.0
Number of amperes that triggers an alarm or syslog
message if it is reached
Current level on the IPDU 0.0A
Maximum current detected 0.4A
Use this button to refresh the currently displayed
maximum detected temperature.
Temperature on the AlterPath PM (Available only on
selected models that have temperature sensors)
OFF
15.0A
Maximum
Detected
Maximum temperature detected (Available only on
selected models that have temperature sensors)
Use this button to refresh the currently displayed
maximum detected current.
IPDU Multi-Outlet Ctrl
Selecting IPDU Multi-Outlet Control form allows you to view and manage
the power on a group of outlets that provide power to a multi power supply
server or device connected to a serial port. Whether the outlets that the multi
66
Page 97
IPDU Multi-Outlet Ctrl
power supply device is connected to are on the same PM or not, the outlets
can be grouped together and managed simultaneously from this form.
When you select IPDU Multi-Outlet Ctrl form, the following figure appears
if,
1. There is no multi-outlet device defined.
2. Po wer Management is not enabled for the serial port the device is
connected to.
3. ACS cannot detect an AlterPath PM that has been configured for power
management.
Contact the ACS administrator for help, if you see this message.
Figure 3-9: Regular User > IPDU Multi-Outlet (no permissions)
The following form appears if you have permission to view and control the
outlets that a multi power supply server or device is connected to.
AlterPath ACS Installation, Administration, and User’s Guide 67
Page 98
Web Manager for Regular Users
Figure 3-10: Regular User > IPDU Multi-Outlet (with permissions)
Notice in the above figure that the first line of each group, the light bulb, the
lock icon, and the Cycle button operate over the entire group. The light bulb
and lock icons next to the individual outlets are used to display the status of
each outlet but cannot be used to control the individual outlets.
The following table describes the icons in the first line of each group.
Table 3-6: Regular User > IPDU Multi-Outlet Ctrl. Form Icons
Button Purpose
A grey light bulb icon indicates that the group is off.
A yellow light bulb indicates that the group is on.
Clicking the light bulb icon changes the power status of
all of the outlets in the group.
A grey and open lock icon indicates that the outlets are
unlocked and can be powered on or off.
A full-color and closed lock icon indicates that the
outlet is locked and cannot be turned on or off.
Clicking the lock icon changes the lock status of all of
the icons in the group.
Turn power briefly off and on again
Note: Only one outlet needs to be powered on or unlocked in order for the entire
group to be considered on or unlocked respectively. In this case, it takes two
clicks to turn the power off or to lock the entire group instead of the one click,
when all of the outlets are in the same state. The first click turns the other
outlets on or unlocks them so that all the outlets are in the same state; the
second click turns all of the outlets off or locks them.
68
The Cycle button operates only if all outlets of a group are turned on.
Note: The “PU (Power Up) interval" parameter configured for each outlet plays an
important role in the power up sequence of multi-outlet devices. The next
Page 99
Security
outlet in the group turns on only after the power up interval specified for the
current outlet has elapsed. This parameter can be configured through the
IPDU Power Mgmt. form. See “To Close an SSH Session” on page 62.
Security
When you select the “Security” menu option, the following form appears.
.
Table 3-7: Regular User > Password Management Form
T To Change Your Password
1. Select the “Security” option from the menu panel.
The “Security” form appears.
2. Enter your current password in the “Current Password” field.
3. Enter the new password in the “New Password” and the “Repeat New
Password” fields.
4. Click OK.
5. Log out and log in using your new password to verify your password
change.
AlterPath ACS Installation, Administration, and User’s Guide 69
Page 100
Web Manager for Regular Users
70
Loading...