Digi LTS 16 MEI W, LTS 8, LTS 16 MEI 2AC, LTS 32, LTS 32 MEI W User Manual

...
ConnectPort® LTS
User’s Guide
ConnectPort LTS 8, ConnectPort LTS 8 MEI,
ConnectPort LTS 8 W, ConnectPort LTS 8 MEI W,
ConnectPort LTS 16 W, ConnectPort LTS 16 MEI W,
ConnectPort LTS 16 MEI 2AC
ConnectPort LTS 32 W, ConnectPort LTS 32 MEI W
90001001_D
2
© Digi International Inc.2012. All Rights Reserved. Digi, Digi International, the Digi logo, ConnectPort, XBee, and RealPort are trademarks or registered trademarks of Digi International, Inc. in the United States and other countries worldwide. All other trademarks are the property of their respective owners. Information in this document is subject to change without notice and does not represent a commitment on the part of Digi International. Digi provides this document ―as is,‖ without warranty of any kind, either expressed or implied, including, but not limited to, the implied warranties of fitness or merchantability for a particular purpose. Digi may make improvements and/or changes in this manual or in the product(s) and/or the program(s) described in this manual at any time. This product could include technical inaccuracies or typographical errors. Changes are periodically made to the information herein; these changes may be incorporated in new editions of the publication. Notice to Users This equipment is for indoor use and all the communication wiring should be limited to inside of the building.
3
Contents
Contents ............................................................................................................................................... 3
1. About this guide .......................................................................................................................... 7
Purpose ........................................................................................................................................ 7
Audience ...................................................................................................................................... 7
Scope ........................................................................................................................................... 7
Where to find more information .................................................................................................. 7
General release documentation ............................................................................................ 7
Additional product information on www.digi.com .............................................................. 8
Digi contact information .............................................................................................................. 8
2. Introduction ................................................................................................................................. 9
Important Safety Information ...................................................................................................... 9
The ConnectPort LTS Family .................................................................................................... 10
Features...................................................................................................................................... 10
User interfaces ................................................................................................................... 10
Quick reference for configuring features ........................................................................... 11
Hardware and network interface features .......................................................................... 15
Configurable network services .......................................................................................... 15
IP protocol support ............................................................................................................. 16
IP address assignment alternatives ..................................................................................... 21
Alarms ................................................................................................................................ 23
Modem emulation .............................................................................................................. 23
Security features ................................................................................................................ 24
Configuration management ................................................................................................ 25
Supported connections and data paths ....................................................................................... 26
Network services ................................................................................................................ 26
Network/serial clients ........................................................................................................ 28
Configuration capabilities and interfaces .................................................................................. 30
Configuration capabilities .................................................................................................. 30
Configuration interfaces .................................................................................................... 30
Digi Device Discovery utility ............................................................................................ 31
4
The Web interface .............................................................................................................. 33
Command-line interface..................................................................................................... 34
Simple Network Management Protocol (SNMP) .............................................................. 35
LCD panel .......................................................................................................................... 36
Monitoring capabilities and interfaces....................................................................................... 37
LCD panel .......................................................................................................................... 38
Administration tasks .................................................................................................................. 38
3. Configuration ............................................................................................................................. 39
Alternate methods for assigning an IP address .......................................................................... 39
Configure an IP address using DHCP ................................................................................ 39
Configure an IP address using Auto-IP .............................................................................. 39
Configure an IP address from the command-line interface................................................ 40
Test the IP address configuration ....................................................................................... 40
Configuration through the web interface ................................................................................... 41
Open the web interface ...................................................................................................... 41
Organization of the web interface ...................................................................................... 45
Change the IP address from the web interface, as needed ................................................. 49
Network configuration settings .......................................................................................... 50
Serial port settings ............................................................................................................. 61
Alarms ................................................................................................................................ 75
System settings .................................................................................................................. 77
User settings ....................................................................................................................... 81
Peripheral ........................................................................................................................... 86
Applications ....................................................................................................................... 90
PPP configuration .............................................................................................................. 93
Configuration through the command line ................................................................................ 101
Access the command line................................................................................................. 101
Verify device support of commands ................................................................................ 102
Configuration through Simple Network Management Protocol (SNMP) ............................... 105
4. Monitoring and management ................................................................................................... 106
Monitoring capabilities in the web interface ........................................................................... 106
Display system information ............................................................................................. 106
Manage connections and services .................................................................................... 116
5
Monitoring capabilities from the command line ..................................................................... 117
Commands for displaying device information and statistics ........................................... 117
Commands for managing connections and sessions ........................................................ 120
Monitoring Capabilities from SNMP ...................................................................................... 121
5 Administration tasks ................................................................................................................ 122
Administration from the web interface .................................................................................... 122
File management .............................................................................................................. 123
Administration from the command-line interface ................................................................... 130
6 LCD interface: configuration, monitoring, and diagnostics .................................................... 131
Basic keypad operation and LCD display ............................................................................... 131
Keys ................................................................................................................................. 131
Keypad operations ........................................................................................................... 132
Configuration using the LCD interface ................................................................................... 133
Change IP settings ............................................................................................................ 133
Change the hostname ....................................................................................................... 136
Change the DNS configuration ........................................................................................ 138
Monitoring using the LCD interface ....................................................................................... 139
Diagnostics using the LCD interface ....................................................................................... 139
Miscellaneous functions in LCD interface .............................................................................. 140
Factory Reset ................................................................................................................... 140
LED Settings .................................................................................................................... 141
7 Disaster recovery ..................................................................................................................... 142
Restore Digi ConnectPort LTS to Factory Default Settings .................................................... 142
8 Hardware specifications .......................................................................................................... 144
9 Regulatory Information and Certifications .............................................................................. 145
FCC certifications and regulatory information (USA only) .................................................... 145
FCC Part 15 Class B ........................................................................................................ 145
Radio Frequency Interface (RFI) (FCC 15.105) .............................................................. 145
Labeling Requirements (FCC 15.19) ............................................................................... 145
Modifications (FCC 15.21) .............................................................................................. 146
Declaration of Conformity....................................................................................................... 146
Industry Canada (IC) certifications ......................................................................................... 146
China regulatory information .................................................................................................. 147
6
Safety statements ..................................................................................................................... 148
5.10 Ignition of Flammable Atmospheres ................................................................... 148
Potentially Hazardous Atmospheres ................................................................................ 148
Safety in Aircraft .............................................................................................................. 148
Safety in Hospitals ........................................................................................................... 148
Pacemakers ...................................................................................................................... 148
Persons with Pacemakers: ................................................................................................ 148
Rack-mountable: .............................................................................................................. 149
Lithium Battery ................................................................................................................ 150
Modem ............................................................................................................................. 150
Cabling ............................................................................................................................. 150
7
1. About this guide
Purpose
This guide describes and shows how to configure, monitor, and administer ConnectPort LTS products.
Audience
This guide is intended for those responsible for setting up ConnectPort LTS products. It assumes some familiarity with networking concepts and protocols.
Scope
This guide focuses on configuration, monitoring, and administration of ConnectPort LTS products. It does not cover hardware details beyond a certain level, application development, or customization.
Where to find more information
In addition to this guide, find additional product and feature information in these documents:
General release documentation
These documents are of interest to end users:
Online help and tutorials in the web interface for the product Digi Connect Hardware Reference Manuals Quick Start Guides RealPort® Installation Guide  Digi Connect Family Customization and Integration Guide Release Notes Cabling Guides Python developer Wiki
8
Additional product information on www.digi.com
In addition to the previous documents, product information is available on the Digi website, www.digi.com, including:
Support Forums Knowledge Base Data sheets/product briefs Application/solution guides
Digi contact information
For more information about Digi products, or for customer service and technical support, contact Digi International.
To Contact Digi International by:
Use:
Mail
Digi International 11001 Bren Road East Minnetonka, MN 55343 U.S.A.
World Wide Web:
http://www.digi.com/support/
email
http://www.digi.com/support/
Telephone (U.S.)
(952) 912-3444 or (877) 912-3444
Telephone (other locations)
+1 (952) 912-3444 or (877) 912-3444
9
2. Introduction
This chapter introduces ConnectPort LTS products, types of supported connections and data paths, and the interface options available for configuration, monitoring, and administration tasks.
Important Safety Information
To avoid contact with electrical current:
Never install electrical wiring during an electrical storm. Never install an Ethernet connection in wet locations unless that connector is specifically
designed for wet locations.
Use caution when installing or modifying Ethernet lines. Use a screwdriver and other tools with insulated handles. Wear safety glasses or goggles. Do not place Ethernet wiring or connections in any conduit, outlet or junction box containing
electrical wiring.
Installation of inside wire may bring you close to electrical wire, conduit, terminals and other
electrical facilities. Extreme caution must be used to avoid electrical shock from such facilities. Avoid contact with all such facilities.
Ethernet wiring must be at least 6 feet from bare power wiring or lightning rods and associated
wires, and at least 6 inches from other wire (antenna wires, doorbell wires, wires from transformers to neon signs), steam or hot water pipes, and heating ducts.
Do not place an Ethernet connection where it would allow a person to use an Ethernet device
while in a bathtub, shower, swimming pool, or similar hazardous location.
Protectors and grounding wire placed by the service provider must not be connected to,
removed, or modified by the customer.
Do not touch no insulated Ethernet wiring if lightning is likely! External Wiring: Any external communications wiring installed needs to be constructed to all
relevant electrical codes. In the United States this is the National Electrical Code Article 800. Contact a licensed electrician for details.
10
The ConnectPort LTS Family
ConnectPort LTS (Linux Terminal Server) products provide serial over Ethernet connectivity for applications today and into the future. They support IPv4 and IPv6 Ethernet protocols. The ConnectPort LTS MEI product is the same size as the ConnectPort LTS (RS-232 only version) and is the fastest multi-port device with a Multiple Electrical Interface (MEI) in the industry.
Features
This is an overview of key product features. Firmware features are covered in more detail in the next three chapters. For hardware specifications, see
http://www.digi.com/products/serialservers/connectportlts#specs. See also Chapter 6, "Regulatory
Information and certifications.‖
User interfaces
There are several user interfaces for configuration and monitoring, including:
A web-based interface. A command-line interface. Simple Network Management Protocol (SNMP). An LCD Panel.
For additional details on these user interfaces, see "Configuration interfaces" and "Monitoring interfaces.‖ Some user interfaces can be customized.
11
Quick reference for configuring features
This guide primarily focuses on configuration, monitoring, and administration tasks from the web interface. This table provides a quick reference for configuring features and performing device tasks, and where to find the features and settings in the web interface and this guide. Some features are configurable from the command line interface only. In those cases, the commands that configure the feature are noted. The command descriptions are in the ConnectPort LTS Command Reference.
Feature/task
Path to feature in the web interface
Administration/Configuration management:
File management: uploading and downloading files, such as applet files, and custom splash screens.
Administration > File Management
See also the Digi Connect Family Customization and Integration Guide for information on uploading and
downloading files used to customize a the product’s look­and-feel.
Python program file management.
Administration > File Management
Backup/restore configuration settings
Administration > Backup/Restore Note: TFTP or BOOTP required if backing up from the
command line.
Update firmware
Administration > Update Firmware
Reset configuration to factory defaults
Administration > Factory Default Settings
System information, including device identifiers and statistics
Administration > System Information
Reboot the device
Administration > Reboot
Alarms
Configuration > Alarms
Autoconnection: automatically connect a user to a server or network device
Configuration > Serial Ports > port > Profile Settings > TCP Sockets >
Automatically establish TCP connections
Connection management:
Manage serial port connections
Management > Serial Ports
Manage active PPP connections
Management > Connections > Active PPP Connections
Manage active system connections
Management > Connections > Active System Connections
Domain Name System (DNS) Client
Configuration > Network > DNS > Primary DNS and Secondary DNS
Ethernet settings
Configuration > Network > Advanced Network Settings
12
Feature/task
Path to feature in the web interface
Help on configuring features
Help button on each page.
Host name for a device
Configuration > Network > Advanced Network Settings > Host Name
IP address settings:
Using static IP addresses
Configuration > Network > IP Settings
Using DHCP
Configuration > Network > IP Settings
IPv6 Settings
Configuration > Network > IP Settings
Source Based Routing
Configuration > Network > IP Settings
Using Auto IP
Configuration > Network > Advanced Settings
Advanced network services settings:
Web settings
Configuration > Network > Network Services Settings > Advanced Network Service Settings
SMTP settings
Configuration > Network > Network Services Settings > Advanced Network Service Settings
NFS settings
Configuration > Network > Network Services Settings > Advanced Network Service Settings
Samba settings
Configuration > Network > Network Services Settings > Advanced Network Service Settings
Syslog settings
Configuration > Network > Network Services Settings > Advanced Network Service Settings
Modem emulation
Configuration > Serial Ports > Port Profile Settings > Modem Emulation
Multiple Electrical Interface (MEI)
Configuration > Serial Ports > Basic Serial Settings -> MEI Type
Port logging: enabling port buffering and displaying contents of a port buffer
To enable port logging: Configuration > Serial Ports > Advanced Serial Settings
To display the contents of a port buffer: Management > Serial Ports > Port Logs
Port profiles: sets of preconfigured serial­port settings for a particular connection and use scenario
Configuration > Serial Ports > Port Profile Settings
13
Python support: loading and running custom programs authored in the Python programming language.
Configurable from command line only. See the set python command in the Connect Family Command Reference.
RealPort (COM port redirection) configuration
Configuration > Serial Ports > port > Port Profile Settings > RealPort
See also the RealPort Installation Guide.
Reverting configuration settings
Administration > Factory Default Settings
Security/access control features:
Control access to inbound ports
Configuration > Serial Ports > port > Port Profile Settings > TCP Sockets or UDP Sockets or Custom port profile
Secure Shell Server (SSH)
Network > Network Service Settings -> Basic Network Services Settings > Enable Secure Shell Server (SSH)
Establish/change user name for a user
Configuration > Users > select a user to change, or select Add New User for a new user
Issue a new/changed password to a user
Configuration > Users > select a user to change or select Add New User for a new user
Set permissions associated with various services and commands
Configuration > Users > select a user to change or add
Set authentication method for port access
Configuration > Serial Ports > port > Authentication Settings
Serial port configuration:
Basic serial port settings
Configuration > Serial Ports > Basic Serial Settings
Advanced serial port settings
Configuration > Serial Ports > Advanced Serial Settings
Port profiles: associate a serial port with a set of preconfigured port settings for a specific use
Configuration > Serial Ports > Port Profile Settings
RTS Toggle
Configuration > Serial Ports > Advanced Serial Settings
Port Sharing: allow a serial port to be shared by multiple software applications
Configuration > Serial Ports > Port > Port Profile Settings > TCP Server Settings (if TCP Sockets profile is set) or Network Services (if Custom profile is set) Note: Not available for RealPort.
14
Simple Network Management Protocol (SNMP):
Configure SNMP through the web interface
Configuration > System > Simple Network Management Protocol (SNMP) Settings
Enable/disable SNMP service
Network > Network Service Settings -> Basic Network Services Settings
Enable/disable SNMP alarm traps
Configuration > Alarms > alarm > Send SNMP trap to following destination when alarm occurs
Use SNMP as primary configuration interface
Basic network and serial settings configurable through standard and Digi-specific Management Information Blocks (MIBs). More advanced settings are also possible through SNMP.
System information: assign system- identifying information to a device
Configuration > System > Device Identity Settings
Authentication configuration for Web and CLI access
Configuration > System > Authentication Settings
Statistics
Administration > System Information
Status information
Management > Serial Ports, Connections, Network Services
Peripheral settings:
SD Memory
Peripheral > SD Memory
USB
Peripheral > USB
Modem
Peripheral > Modem
LCD
Peripheral > LCD
XBee
Peripheral > XBee
Application settings:
PPP
Application > PPP
Python
Application->Python
RealPort
Application->RealPort
15
Hardware and network interface features
For detailed hardware specifications and network interface information, go to:
http://www.digi.com/products/serialservers/connectportlts#specs.
See also the data sheet for your Digi product.
Configurable network services
Access to network services can be enabled and disabled. This means that a device’s use of network services can be restricted to those strictly needed by the device. To improve device security, non-secure services, such as Telnet, can be disabled. Network services that can be enabled or disabled include: Advanced Digi Discovery Protocol (ADDP): can enable or disable ADDP, but cannot change
its network port number.
RealPort Encrypted RealPort HTTP/HTTPS Line Printer Daemon (LPD) Remote Login (rlogin) Remote Shell (rsh) Simple Network Management Protocol (SNMP) Telnet Secure Shell Server (SSH)
In the web interface, access to network services is enabled and disabled on the Network Services page of Network Configuration. For more information, see Basic Network Services Settingson page 53. In the command-line interface, network services are enabled and disabled through the set service command. See the ConnectPort LTS Command Reference for the set service command description.
16
IP protocol support
All ConnectPort LTS products include a robust on-board TCP/IP stack with a built-in web server. Supported protocols include, unless otherwise noted:
Transmission Control Protocol (TCP) User Datagram Protocol (UDP) Dynamic Host Configuration Protocol (DHCP) Simple Network Management Protocol (SNMP) Secure Sockets Layer (SSL)/Transport Layer Security (TLS) Telnet Com Port Control Option (Telnet).See "Serial data communication over TCP and UDP"
for additional information.
Remote Login (rlogin) Line Printer Daemon (LPD) HyperText Transfer Protocol (HTTP)/HyperText Transfer Protocol over Secure Socket Layer
(HTTPS)
Simple Mail Transfer Protocol (SMTP) Internet Control Message Protocol (ICMP) Internet Group Management Protocol (IGMP) Address Resolution Protocol (ARP) Advanced Digi Discovery Protocol (ADDP)
17
Following is an overview of some of the services provided by these protocols.
Serial data communication over TCP and UDP
ConnectPort LTS products support serial data communication over TCP and UDP. Key features include: Serial data communication over TCP, also known as autoconnect and tcpserial can
automatically perform the following functions:
– Establish bidirectional TCP connections, known as autoconnections, between the serial device
and a server or other network device. Autoconnections can be made based on data and or serial hardware signals.
Control forwarding characteristics based on patterns Allow incoming raw, Telnet, and SSL/TLS (secure-socket) connections
Serial data communication over UDP, also known as udpserial, can automatically perform the
following functions:
– Digi Connect products can automatically send serial data to one or more devices or systems
on the network using UDP sockets. Options for sending data include whether specific data is on the serial line, a specific time period has elapsed, or after the specified number of bytes has been received on the serial port.
Control forwarding characteristics based on patterns. Support incoming datagrams from multiple destinations. Support outgoing datagrams sent to multiple destinations.
TCP/UDP forwarding characteristics. Extended communication control on TCP/UDP data paths.
Timeout Hangup User-configurable Socket ID string (text string identifier on autoconnect only)
Dynamic Host Configuration Protocol (DHCP)
Dynamic Host Configuration Protocol (DHCP) can be used to automatically assign IP addresses, deliver TCP/IP stack configuration parameters such as the subnet mask and default router, and provide other configuration information. For further details, see "Alternate methods for assigning an IP address.‖ on page 39.
18
Auto-IP
Auto-IP is a protocol that will automatically assign an IP address from a reserved pool of standard Auto-IP addresses to the computer on which it is installed. ConnectPort LTS is set to obtain its IP address automatically from a DHCP server. But if the DHCP server is unavailable or nonexistent, Auto-IP will assign the device an IP address. For further details, see "IP address assignment alternatives.‖
Simple Network Management Protocol (SNMP)
Simple Network Management Protocol (SNMP) is a protocol for managing and monitoring network devices. SNMP architecture enables a network administrator to manage nodes--servers, workstations, routers, switches, hubs, etc.--on an IP network; manage network performance, find and solve network problems, and plan for network growth. ConnectPort LTS products support SNMP Versions 1, 2, and 3. For more information on SNMP as a device-management interface, see "Simple Network Management Protocol (SNMP).‖
Supported RFCs and MIBs
ConnectPort LTS products support these SNMP-related Request for Comments (RFCs) and Management Information Bases (MIBs):
RFC 1213 - Management Information Base (MIB) II RFC 1215 - Generic Traps (coldStart, linkUp, authenticationFailure, Login only) RFC 1316 - Character MIB RFC 1317 - RS-232 MIB DIGI-DEVICE-INFO.mib - A Digi enterprise MIB for displaying device information. DIGI-SERIAL-ALARM-TRAPS.mib - A Digi enterprise MIB for sending alarms as SNMP
traps.
DIGI-CONNECPORT-LTS.mib - A Digi enterprise MIB for configuring ConnectPort LTS.
Supported SNMP traps
SNMP traps can be enabled or disabled. Supported SNMP traps include:
Authentication failure Login Cold start Link up Alarms can be issued in the form of SNMP traps
19
Secure Sockets Layer (SSL)/Transport Layer Security (TLS)
Secure Sockets Layer (SSL)/Transport Layer Security (TLS) are used to provide authentication and encryption for ConnectPort LTS products. For more information, see Security features.
Telnet
ConnectPort LTS products support the following types of Telnet connections:
Telnet Client Telnet Server Reverse Telnet, often used for console management or device management Telnet Autoconnect
For more information on these connections, see "Supported connections and data paths.‖ Access to Telnet network services can be enabled or disabled.
Remote Login (rlogin)
Users can perform logins to remote systems (rlogin). Access to rlogin service can be enabled or disabled.
Line Printer Daemon (LPD)
The Line Printer Daemon (LPD) allows network printing over a serial port. Each serial port has a dedicated LPD server that is independently configurable. Access to LPD service can be enabled or disabled.
HyperText Transfer Protocol (HTTP) HyperText Transfer Protocol over Secure Socket Layer (HTTPS)
ConnectPort LTS products provide web pages for configuration that can be secured by requiring a user login.
Internet Control Message Protocol (ICMP)
ICMP statistics can be displayed, including the number of messages received, bad messages received, and destination unreachable messages received.
20
Point-to-Point Protocol (PPP)
The Point-to-Point Protocol (PPP) transports multi-protocol packets over point-to-point links. PPP encapsulates the data packet, allows the server to inform the dial-up client of its IP address (or client to request the IP address), authenticates the exchange, negotiates multiple protocols, and reassembles the data packet for network communication.
Advanced Digi Discovery Protocol (ADDP)
The Advanced Digi Discovery Protocol (ADDP) runs on any operating system capable of sending multicast IP packets on a network. ADDP allows the system to identify all ADDP-enabled ConnectPort LTS products attached to a network by sending out a multicast packet. The ConnectPort LTS products respond to the multicast packet and identify themselves to the client sending the multicast. ADDP needs to communicate with the TCP/IP stack using UDP. The TCP/IP stack should be able to receive multicast packets and transmit datagrams on a network. Not all Digi devices support ADDP. Access to ADDP service can be enabled or disabled, but the network port number for ADDP cannot be changed from its default.
Secure Shell (SSH)
ConnectPort LTS units support the following types of Secure Shell (SSH) connections: Reverse SSH and SSH Autoconnect. Limited use of SSH via SSH client is available from the Linux command line/bash shell. For more information on these connections, see "Supported connections and data paths.‖ Access to Secure Shell network services can be enabled or disabled.
21
IP address assignment alternatives
There are several ways to assign an IP address to a ConnectPort LTS product: Static IP: Assign a specific IP address to a device, through the Digi Device Discovery Utility,
the web interface, LCD, Digi Device Discovery tool, or the command-line interface.
Using Dynamic Host Configuration Protocol (DHCP). Dynamic Host Configuration Protocol
(DHCP) is an Internet protocol for automating the configuration of computers that use TCP/IP. DHCP can be used to automatically assign IP addresses, to deliver TCP/IP stack configuration parameters such as the subnet mask and default router, and to provide other configuration information. All ConnectPort LTS products have a DHCP server enabled by default.
Auto Private IP Addressing (APIPA), also known as Auto-IP: A standard protocol that will
automatically assign an IP address from a reserved pool of standard Auto-IP addresses to the computer on which it is installed. The device is set to obtain its IP address automatically from a DHCP server. But if the DHCP server is unavailable or nonexistent, Auto-IP will assign the device an IP address. If DHCP is enabled or responds later ADDP is used, both will override the Auto-IP address previously assigned.
Using the Digi Device Discovery Utility, a Digi utility available on the Digi website. This
utility searches for and displays Digi devices and allows you to display and change configuration settings for a device from its web or command-line interfaces. Clicking Configure network settings in the utility allows you to configure network settings, including the IP address.
Using the LCD panel. ConnectPort LTS products have an LCD panel which can be used to
perform basic configuration tasks, including setting the IP address, as well as monitoring and diagnostics tasks. See ―LCD interface: configuration, monitoring, and diagnostics‖ on page 131.
Access via the ―console‖ port. ConnectPort LTS products have a specific port for configuring
device settings, labeled ―console‖ port. This port allows for a login, with serial settings of 9600
baud, 8 data bits, and 1 stop bit. The standard serial ports do not provide a login by default, and do not provide access to configuration settings. Only the ―console‖ port allows access to configuration settings.
22
RealPort software
ConnectPort LTS products use the patented RealPort COM/TTY port redirection for Microsoft Windows, UNIX, and Linux environments. RealPort software provides a virtual connection to serial devices, no matter where they reside on the network. The software is installed directly on the host PC and allows applications to talk to devices across a network as though the devices were directly attached to the host. Actually, the devices are connected to a Digi device somewhere on the network. RealPort is unique among COM port re-directors because it is the only implementation that allows multiple connections to multiple ports over a single TCP/IP connection. Other implementations require a separate TCP/IP connection for each serial port. Unique features also include full hardware and software flow control, as well as tunable latency and throughput. Access to RealPort services can be enabled or disabled.
Encrypted RealPort
ConnectPort LTS products also support RealPort software with encryption. Encrypted RealPort offers a secure Ethernet connection between the COM or TTY port and a device server or terminal server. Encryption prevents internal and external snooping of data across the network by encapsulating the TCP/IP packets in a Secure Sockets Layer (SSL) connection and encrypting the data using Advanced Encryption Standard (AES), one of the latest, most efficient security algorithms. Access to Encrypted RealPort services can be enabled or disabled. Digi RealPort with encryption driver has earned Microsoft Windows Hardware Quality Lab (WHQL) certification. Drivers are available for a wide range of operating systems, including Microsoft Windows Server 2003, Windows XP, Windows 2000, Windows 7, Windows Server 2008, Windows ME; SCO Open Server ; Linux ; AIX ; Sun Solaris SPARC ; Intel ; and HP-UX . It is ideal for financial, retail/point-of-sale, government or any application requiring enhanced security to protect sensitive information.
23
Alarms
ConnectPort LTS products can be configured to issue alarms, in the form of email message or SNMP traps, when certain device events occur. These events include certain data patterns being detected in the data stream. Receiving alarms about these conditions provides the advantage of notifications being issued when events occur, rather than having to monitor the device on an ongoing basis to determine whether these events have occurred. For more information on configuring alarms, see "Alarms.‖
Modem emulation
ConnectPort LTS products include a configuration profile that allows the device to emulate a modem. Modem emulation sends and receives modem responses to a serial device over TCP/IP (including Ethernet) instead of Public Switched Telephone Network (PSTN). The modem emulation profile allows maintaining a current software application but using it over the less expensive Ethernet network. In addition, Telnet processing can be enabled or disabled on the incoming and outgoing modem-emulation connections.
24
Security features
Security-related features in ConnectPort LTS products include: Secure access and authentication:
One password, one permission level. Can issue passwords to device users. Can selectively enable and disable network services such as ADDP, RealPort, Encrypted
RealPort, HTTP/HTTPS, LPD, Remote Login, Remote Shell, SNMP, Telnet and Secure Shell (SSH).
Can control access to inbound ports. Secure sites for configuration: HTML pages for configuration have appropriate security. User and user group access permissions, which control user access to various features and
the level of control they have over them (view settings or change settings).
Encryption:
– Strong Secure Sockets Layer (SSL) V3.0/ Transport Layer Security (TLS) V1.0-based
encryption: DES (58-bit), 3DES (168-bit), AES (128-/156-bit.
– Strong Secure Sockets Layer (SSL) V3.0/ Transport Layer Security (TLS) V1.0-based
encryption: DES (64-bit), 3DES (192-bit), AES (128-/192-/256-bit).
– Encrypted RealPort offers encryption for the Ethernet connection between the COM/TTY
port and the ConnectPort LTS product.
SNMP security:
– Authorization: Changing public and private community names is recommended to prevent
unauthorized access to the device. (SNMPv1/v2c)
SNMPv3 support for enhanced security through SNMP. SNMP set commands can be disabled to make use of SNMP read-only.
25
Configuration management
Once a ConnectPort LTS product is configured and running, configuration-management tasks need to be periodically performed, such as:
Upgrading firmware Copying configurations to and from a remote host Software and factory resets Rebooting the device Memory management File management
For more information on these configuration-management tasks, see Chapter 4, "Administration tasks.‖
26
Supported connections and data paths
ConnectPort LTS products allow for several kinds of connections and paths for data flow between the ConnectPort LTS product and other entities. These connections can be grouped into two main categories:
Network services, in which a remote entity initiates a connection to a ConnectPort LTS product. Network/serial clients, in which a ConnectPort LTS product initiates a network connection or
opens a serial port for communication. This discussion of connections and data paths may be helpful in understanding the effects of enabling certain features and choosing certain settings when configuring Digi products.
Network services
A network service connection is one in which a remote entity initiates a connection to a ConnectPort LTS product. There are several categories of network services:
Network services associated with specific serial ports Network services associated with serial ports in general Network services associated with the command-line interface (CLI)
Network services associated with specific serial ports
Reverse Telnet: A telnet connection is made to a ConnectPort LTS product, in which data is
passed transparently between the telnet connection and a named serial port. Reverse raw socket: A raw TCP socket connection is made to a ConnectPort LTS product, in
which data is passed transparently between the socket and a named serial port. Reverse TLS socket: An encrypted raw TCP socket is made to a ConnectPort LTS product, in
which data is passed transparently to and from a named serial port. LPD: A TCP connection is made to a named serial port, in which the ConnectPort LTS product
interprets the LPD protocol and sends a print job out of the serial port. Modem emulation, also known as Pseudo-modem (pmodem): A TCP connection is made to a
named serial port, and the connection will be ―interpreted‖ as an incoming call to the pseudo-
modem.
Console Mgmt: Allows a TCP connection. Modem: The Modem Profile allows for attaching modem devices to the serial port to establish
or receive connections from other systems and modems.
27
Reverse SSH: An SSH connection is made to a ConnectPort LTS product, in which data is
passed transparently between the SSH connection and a named serial port.
Network services associated with serial ports in general
RealPort: A single TCP connection manages (potentially) multiple serial ports. Modem emulation, also known as pseudo-modem (pool): A TCP connection to the ―pool‖ port
is interpreted as an incoming call to an available pseudo-modem in the ―pool‖ of available port
numbers. rsh: ConnectPort LTS products support a limited implementation of the Remote shell (rsh)
protocol, in that a single service listens to connections and allows a command to be executed.
Only one class of commands is allowed: a single integer that specifies which serial port to
connect to. Otherwise, the resulting connection is somewhat similar to a reverse telnet or
reverse socket connection.
Network services associated with the command-line interface
Telnet or SSH: A user can Telnet or SSH directly to a ConnectPort LTS product command-line
interface. rlogin: A user can perform a remote login (rlogin) to a ConnectPort LTS product command-line
interface.
28
Network/serial clients
A network/serial client connection is one in which a ConnectPort LTS product initiates a network connection or opens a serial port for communication. There are several categories of network/serial client connections:
Autoconnect behavior client connections Command-line interface (CLI)-based clients Modem emulation (pseudo-modem) client connections
Autoconnect behavior client connections
In client connections that involve autoconnect behaviors, a ConnectPort LTS product initiates a network connection based on timing, serial activity, or serial modem signals. Autoconnect-related client connections include: Raw TCP connection: The ConnectPort LTS product initiates a raw TCP socket connection to a
remote entity. Telnet connection: The ConnectPort LTS product initiates a TCP connection using the Telnet
protocol to a remote entity. SSH connection: The ConnectPort LTS product initiates a TCP connection using the SSH
protocol to a remote entity. Raw TLS encrypted connection: The ConnectPort LTS product initiates an encrypted raw TCP
socket connection to a remote entity. Rlogin connection: The ConnectPort LTS product initiates a TCP connection using the rlogin
protocol to a remote entity.
29
Command-line interface (CLI)-based client connections
Command-line interface based client connections are available for use once a user has established a session with the ConnectPort LTS product CLI. CLI-based client connections include:
telnet: A connection is made to a remote entity using the Telnet protocol. bash: The ―bash‖ command provides access to the Linux bash shell. rlogin: A connection is made to a remote entity using the Rlogin protocol. connect: Begin communicating with a local serial port.
Modem emulation (pseudo-modem) client connections
When a port is in the modem-emulation or pseudo-modem mode, it can initiate network connections based on AT command strings received on the serial port. The AT commands for modem emulation are documented in the ConnectPort LTS Command Reference.
30
Configuration capabilities and interfaces
This is an overview of the configuration capabilities and interfaces for ConnectPort LTS products; Chapter 2, "Configuration," covers them in more detail.
Configuration capabilities
Device configuration involves setting values and enabling features for such areas as: Network configuration: Specifying the device IP address and IP settings, network-service
settings, and advanced network settings.
Serial port configuration: Specifying the serial port characteristics for the device. Alarms: Defining whether alarms should be issued, the conditions that trigger alarms, and how
the alarms should be delivered. Users configuration: Configuring security features, such as whether password authentication is
required for device users. System configuration: Specifying system-identifying information, such as a device description,
contact person, and physical location.
Configuration interfaces
Several interfaces are available for configuring ConnectPort LTS products, including: The Digi Device Discovery Utility, which locates Digi devices on a network, and allows
opening the web interface for the devices. A web-based interface embedded with the product, providing device configuration profiles for
quick serial-port configuration and other settings.
A command-line interface (CLI). Simple Network Management Protocol (SNMP). LCD Panel
Loading...
+ 120 hidden pages