HAugust 2018Added certification in French. Added power and ground information for CM
48. Updated the template.
Trademarks and copyright
Digi, Digi International, and the Digi logo are trademarks or registered trademarks in the United States and other
countries worldwide. All other trademarks mentioned in this document are the property of their respective
owners.
Information in this document is subject to change without notice and does not represent a commitment on the
part of Digi International. Digi provides this document “as is,” without warranty of any kind, expressed or implied,
including, but not limited to, the implied warranties of fitness or merchantability for a particular purpose. Digi
may make improvements and/or changes in this manual or in the product(s) and/or the program(s) described in
this manual at any time.
Warranty
To view product warranties online, visit www.digi.com/howtobuy/terms.
Send comments
Documentation feedback: To provide feedback on this document, send your comments to
techcomm@digi.com.
Customer support
Digi Technical Support: Digi offers multiple technical support plans and service packages to help our customers
get the most out of their Digi product. For information on Technical Support plans and pricing, contact us at +1
This manual offers information on the Digi CM 4-port, 8-port, 16-port, 32-port, and 48-port models.
Feature overview
With the Digi CM unit, administrators can securely monitor and control servers,
routers, switches, and other network devices from anywhere on the corporate TCP/IP network, over
the Internet, or through dial-up modem connections, even when the server is unavailable through
the network.
The Digi CM unit employs SSHv2 encryption, to keep server access passwords safe from hackers,
and supports all popular SSH clients, as well as secure access from any Java-enabled browser. It is
the first console server to provide a secure graphical user interface for easy out-of-band
management of Microsoft Windows Server 2003 systems. It connects to serial console ports using
standard CAT5 cables, eliminating the hassles of custom cabling. In addition, the Digi CM unit offers
a PCMCIA card slot, for adding dialup modems or wireless network cards. Flash memory cards can
be used to save port logs and backup configuration files.
The Digi CM unit is available in 8-, 16-, 32- and 48-port models, in a 1U rackmount form factor.
Feature summary
CategoryFeature
Security
Authentication
• SSH v2 server and client
• SSL
• IP Filtering
• Central access to security parameters via the Security Profile including
network, port, and password securities.
• TACACS+
• RADIUSLDAP
• Custom PAM modules
• Kerberos
• User access per port
• Local user database
Digi CM User Guide10
OverviewFeature summary
CategoryFeature
Management
Data Capture
Port Access
• Command line
• WEB --HTTP/HTTPS
• SNMP
• Custom applications
• Port Triggers and Alerts
• Multi level menus
• Advanced Device Discovery Protocol (ADDP) for locating the device on the
network
• Integrated power management and control
•
• Local port logging
• External logging (syslog, NFS, PC card)
• Tel ne t/ SSH
• Reverse Telnet/SSH
• HTTP/HTTPS
•
PC Card Support
Other Features
• Port escape menu
• CompactFlash memory card
• Wireless LAN adapter (802.11b)
• Ethernet LAN adapter
• PSTN/CDMA modem card
• See http://cm.digi.com for more information.
• RealPort
• Solaris Ready
• Multiple users per port
• Remote ports
• Access lists per port
• Flash upgradeable
• SSH sessions simultaneously on all ports
• Secure Clustering - Single IP for multiple Digi CM devices
• IP addresses per port
• Find Me locator light (Digi CM 48-port)
Digi CM User Guide11
OverviewUser groups
User groups
The Digi CM unit comes with four built-in user groups pre-defined by roles or access levels. The
following table lists the four user groups, their access rights, and default user names. The Digi CM
unit supports access lists for user privileges. These lists can contain multiple users and define
specific port rights. If e.g. you have multiple people responsible for the Sun Servers in your company
and you want to give them identical access rights you can create a "Sun-admin" access list. Assign
this access list rights to every port that is attached to a Sun Server and add all the Sun
administrators to the "Sun-admin" Access List.
The Digi CM unit comes with two default users; root and system admin. The user names of the the
Digi CM unit are case sensitive.
User nameDefault password
rootdbps
adminadmin
Adding port administrators and users
The system administrator and root user can add port administrators and additional users easily
with the web interface by choosing System administration > User administration > Add user.
Access lists
Multiple users can be defined within Access lists with access privileges or restrictions to the ports.
See Add an Access List to the Digi CM Unit for more information.
Ways to configure the Digi CM
This section discusses the three ways to configure the Digi CM unit using the web interface,
configuration menu, or command line interface.
Digi CM User Guide12
OverviewWays to configure the Digi CM
Web interface
The web interface provides an easy way to configure the Digi CM unit. The root user and system
administrator can configure all features through the web. Port administrators can configure ports,
including port clustering, but cannot modify system settings. No other users can use the web
interface for configuration.
There are two ways to access the web interface.
▪ ADDP (Advanced Device Discovery Protocol)
This device discovery tool allows you to find, configure and launch your web configuration and
management interface. Find your device and double click it to access the web interface, or select
your device and click Configure network settings (on the left navigation bar).
▪ Directly entering the IP address
You can enter the IP address directly into the URL address bar of your browser. (Of course, the IP
address must already be set up)
Access the web interface from one of the previous methods. The following page is displayed after
login.
Configuration menu
The root user and system administrator have full access to the configuration menu from a Telnet or
SSH session or a serial connection through the console
port. Functionality is similar to the web interface, with the exception of custom menus, which can be
created only from the web interface. The configuration menu is presented to system administrators
automatically. Root users access the menu by entering the command configmenu. Port
administrators can access this menu but can modify serial port configuration only. No other users
can access this menu.
Digi CM User Guide13
OverviewWays of accessing the Digi CM ports: overview
Command line interface
The command line interface can be accessed from a Telnet or SSH session or from the console port.
The root user always has access to this interface. The system administrator can be granted readonly permission as well. No other users can access the command line interface.
Ways of accessing the Digi CM ports: overview
There are multiple ways to access the native serial ports on the Digi CM unit:
▪ Web Interface
▪ Port Access Menu
▪ Direct Port Access
▪ Custom Menus
▪ SNMP
Web interface access menu
The web interface menu provides easy and convenient access to ports. All users can access the
menu by entering the the Digi CM unit IP address or host name in a web browser’s URL window.
To access a port from the web interface, do the following:
1 Access the web interface.
2 Click Serial port > Connection.
Digi CM User Guide14
OverviewWeb interface access menu
The P (Power) column allows you to control power of the attached devices, if a Remote Power
Management unit is attached and you have appropriate rights.
The M (Manage) column offers web based management for Windows Server 2003, Remote Power
Management units or Rackable Systems Management Card.
The “# of User” column shows how many users are actually connected to the port and the username
of the read/write user.
1 If you are conducting a special task through the console port, like BIOS upgrade and should not
be interrupted, you can notify other users by entering a comment upon connect. This comment
is shown here.Select a port by clicking the icon in the C (Console) column.
A Java applet or Telnet window opens with a login prompt.
Digi CM User Guide15
OverviewPort Access Menu
Port Access Menu
The Port Access Menu provides access to ports. It is accessible to all users through the web interface,
Telnet and SSH sessions, and remote modem access.The information that follows shows you how to
access this menu.
Access typePermissionsProcedure
Web interfaceAny user can use this method.
1 Access the web interface
2 Choose Serial port > Connection > Port access menu
connection
3 Log in
TelnetAny user can use this method.
1 Telnet to the Digi CM unit specifying its IP address and
port 7000. (7000 is the default socket port for both
Telnet and SSH) Example:
telnet 192.168.15.7 7000
2 Log in
Command lineRootFrom the command line, issue the portaccessmenu
command. Example:
portaccessmenu
telnet http://digicm.digi.com
Here is a screenshot of the Port access menu.
Digi CM User Guide16
OverviewDirect port access
Direct port access
Connect directly to a properly configured port through a Telnet or SSH session. Configuration
requirements include setting the Host Mode to Console Server Mode and the Protocol to either
Telnet or SSH. Ports, by default are set to Console Server Mode and Telnet. Use the following
information to make a Telnet or SSH connection to a port:
TypeCommand syntaxExample: connection to port 3
Telnettelnet ip-addresstcp-port
where ip-address is the Digi CM unit’s IP
address and tcp-port is the Listening TCP port
for a port
SSHssh user-name@ip-addresstcp-port
where user-name is a user’s name,
ip-address is the Digi CM unit’s IP address and
tcp-port is the Listening TCP port for a port
NoteThe example assumes that the Listening TCP port is 7003, the default for port 3.
Custom menus
Custom menus are created by either root or the system administrator to limit your access to specific
ports. For more information, see Make custom menus.
telnet 192.168.15.7 7003
(7000 is the default socket port for both Telnet and
SSH)
ssh admin@ 192.168.15.7 -p 7003
(7000 is the default socket port for both Telnet and
SSH)
Port escape is the ability to escape from a port without disconnecting. Port escape is available in
main sessions as well as sniff sessions. Every connection method accommodates port escape. You
configure the escape sequence per port. Follow the procedure to configure the port escape
sequence.
1Serial Port > Configuration > Select the port number or All.
2 Host mode configuration > Port escape sequence - enter a letter for the Port escape sequence.
3 Click Save to flash and continue with other configurations or click Save & apply for the changes
to take effect.
Digi CM User Guide17
OverviewPort escape menu
To open a sniff session:
1 Click Serial port > Connection.
2 Select the port you want to access.
3 Log in with your user name and password.
4 Enter the letter of the port escape sequence.
Digi CM User Guide18
OverviewSNMP
Description of fields
The following table describes the fields and the operations for the port escape feature. You will only
see the fields allowed for your permissions.
Escape
Sequence
Ctrl+
mtake over main session (read/write)only presented to users with read/ write access
senter as a slave session (read only)only presented to users with read/ write access
bsend breaknot functional for sniff users
lshow last 100 lines of log buffermust enable logging for this option
ddisconnect a sniff sessiononly functional to admin
asend message to port user(s)not available to sniff users
rreboot device using power-switchonly if power management is available on this
Description of actionOccurrence
upon entering a session
upon entering a session
port
ppower device on/off(show only on or off) only if power
xclose current connection to portcloses the
NoteBy entering the port escape sequence twice, it is directly transmitted (once) to the
connected device. If the escape sequence is entered twice within 1/2 second, the menu will
not open.
SNMP
An SNMP MIB to configure the Digi CM unit is available to be downloaded from digi.com/support.
Save and apply changes
In the web interface, you can save and apply configuration changes in two ways. With the one-step
method, you choose Save & apply and changes are saved and applied (take effect) immediately.
With the two-step method, you choose Save to flash, which immediately saves changes but the
changes do not take effect until you choose Apply changes. The following topics describe how to do
each of these operations.
One step: save and apply changes
management is available on this port
To save and apply changes immediately, choose the Save & apply button.
Digi CM User Guide19
Overview.Locater light
Two-step: save to flash and then apply changes
To save multiple changes but apply changes once, do the following:
Choose the Save to flash button.
When you finish changing the configuration, choose the Apply changes link, which is located on the
left navigation menu; or the Save & apply button at the bottom of the page.
For more details about Automatic Device Recognition, refer to
Port 3 shows a real world example of a detected device.
Automatic Device Recognition also monitors each of the configured serial ports. This allows you to
receive an e-mail or SNMP trap if there is a change in the expected response from the device
connected to the serial port. If the device goes down or is disconnected for any reason, you are
notified
.Locater light
The Digi CM 48-port unit has a locater light on the front panel labeled Find Me. All other Digi CM units
flash the serial port lights to indicate where the device is found.
If you access the web interface, log in to the Digi CM unit, and scroll down the page, you will find
additional links.
Click Start device locating and a popup box will appear to confirm. Click okay and the Digi CM unit
Find Me light will blink (other Digi CM models blink all LEDs).
To turn off the locater light, click Stop device locating.
This section covers basic configuration topics. Included is information on assigning IP settings,
enabling secure access with the web interface, accessing the unit through SSH, and adding or
removing users.
NoteInitial setup is described in the Quick Start Guide included with the product packaging. A
copy of this document is also available online here.
Assigning IP settings from the console port
The following steps use the console port to assign IP settings.
NoteThe default IP address is 192.168.161.5.
1 Connect the console port on the rear panel of the Digi CM unit to a serial port on a workstation
using the Ethernet console cable and the appropriate console adapter packaged with the the
Digi CM unit. The arrow in the following graphic points to the console port.
2 Configure a terminal emulation program, such as HyperTerminal, using the
following settings:
• bps = 9600
• data bits = 8
• parity = none
• stop bits = 1
• flow control = none
3 Establish a connection to the console port and press Enter to get a command prompt.
4 At the login prompt, log in as admin. The default password for admin is admin.
The Configuration menu appears.
5 Enter the number for Network Configuration.
6 Enter the number for IP configuration.
7 Enter the appropriate parameters for the IP settings.
8 Press ESC when done to return to the main configuration menu.
Digi CM User Guide22
Getting startedConfigure for SSH
Enter the number to exit and apply changes.Changes are saved and applied immediately. There
is no need to reboot.
Configure for SSH
NoteThe the Digi CM unit supports Blowfish and 3DES encryption methods for SSH.
Options
The Port Access Menu and individual ports can be configured for SSH.
Configure the Port Access Menu for SSH
1 Access the web interface.
2 Log in as root, admin, or a member of the port administration group. The default password for
root is dbps, and the default password for admin is admin.
3 Under Serial port > Configuration > Port access menu configuration.
The Port access configuration menu appears.
4 Select SSH as the Port access menu protocol.
Digi CM User Guide23
Getting startedConfigure for SSH
NoteLog in on port access requires logging in twice (once for access to the port and once for port
access menu) when enabled. Disabled allows one log in directly to the port.
5 Click Save & apply.
Configure a Port for SSH
1 Access the web interface.
2 Log in as root, admin, or a member of the port administration group. The default password for
root is dbps, and the default password for admin is admin.
3 Under Serial port > Configuration.
4
5 Click Host mode configuration.
6 Specify SSH as the Protocol as shown in the following screenshot.
Digi CM User Guide24
Getting startedAdd, edit, and remove users
7 Click Save & apply.
Add, edit, and remove users
The root user and system administrator can add, remove, or edit users from the web interface.
Procedure
1 Access the web interface.
2 Log in as root or admin. The default password for root is dbps, and the default password for
admin is admin.
3 Under the System administration heading click Users administration.
Digi CM User Guide25
Getting startedAdd, edit, and remove users
4 Select Add, Edit, Remove.
• Add: Assign a user name, user group, password, and shell.
• Edit: Change user group, password, or their shell
• Remove: Remove a user from the system
5 Click Save & apply.
NoteThe root and admin users cannot be removed from the system.
For more information about configuring access rights for specific users see Configure user access
privileges.
About shell options
The shell program selection determines the interface you see when establishing a Telnet or SSH
session with the Digi CM unit.
User GroupShell Program Options
rootcommand line
system admincommand line, configuration menu, port access menu, custom menus
port adminconfiguration menu, port access menu, custom menus
This section includes information on adding and configuring PC cards for the Digi CM unit. PC card
devices that can be added to the the Digi CM unit include a serial modem, compact-flash card,
wireless LAN card, and a network LAN card.
Compatible PC cards
All compact-flash cards work with the Digi CM unit, but not all serial modem, wireless LAN, or regular
LAN cards do. To see a list of compatible cards that have been tested with the Digi CM unit, visit the
Digi support site at digi.com/products/consoleservers/digicm#productsupport.
Add a compact-flash card
A PC card slot is located on the front panel of the Digi CM unit. The arrow in the following graphic
indicates the PC card slot.
To install and configure the compact-flash card on the Digi CM unit, do the following.
1 Insert the card into the PC card slot.
2 Access the web interface.
3 Under the PC card heading click Configuration.
NoteAlways select the Stop card service button and Save & apply before removing the PC card.
4 Click Configure the detected card.
The following fields appear on the configuration page:
Digi CM User Guide28
Install and configure PC cardsAdd a network card
ATA/IDE Fixed Disk Card configuration
Total data size to be used - Enter the amount of memory you want to assign to the compact-
flash card for configuration files.
Delete all files in ATA/IDE Fixed Disk Card - Select the Delete button to clear the compact-flash
card of all files.
Format ATA/IDE Fixed Disk Card - The options are EXT2 or FAT formats. Select the format
option and then select the Format button.
5 Enter the appropriate parameters on the configuration page.
6 Click Save to flash or Save & apply.
Add a network card
To install and configure a network card on the Digi CM unit, do the following.
1 Insert the card into the PC slot.
2 Access the web interface.
3 Under the PC card heading, click Configuration.
NoteThe card is automatically discovered and a configuration menu is displayed.
4 Enter the appropriate parameters in the configuration menu.
Digi CM User Guide29
Install and configure PC cardsAdd a wireless LAN card
5 Click Save & apply.
NoteIf DHCP is active the IP address will appear after the configuration is saved and applied.
Add a wireless LAN card
To install and configure a wireless LAN card on the Digi CM unit, do the following.
1 Insert the card into the PC slot.
2 Access the web interface.
3 Under the PC card heading, click Configuration.
NoteThe card is automatically discovered and a configuration menu is displayed.
4 Click Configure the detected card.
5 Enter the appropriate parameters in the configuration menu.
WEP is the acronym for Wired Equivalent Privacy and is a security protocol for wireless LANs
using encryption to protect data transfers. If you are unsure of the settings for the wireless card,
see your network administrator.
SSID - Set Service Identifier and is the name of the wireless LAN network
Use WEP key - Enable or disable the WEP key
Digi CM User Guide30
Loading...
+ 160 hidden pages
You need points to download manuals.
1 point = 1 manual.
You can buy points or you can get point for every manual you upload.