Lantronix is a registered trademark of Lantronix, Inc. in the U.S. and certain other countries.
Lantronix Spider is a registered trademark, and SLB, SLC, SLP, vSLM, Spider and
DeviceInstaller are trademarks of Lantronix, Inc.
Patented: http://patents.lantronix.com
Windows and Internet Explorer are registered trademarks of Microsoft Corporation. Mozilla and
Firefox are registered trademarks of the Mozilla Foundation. Chrome is a trademark of Google,
Inc. All other trademarks and trade names are the property of their respective holders.
Open Source Software
Some applications are Open Source software licensed under the Berkeley Software Distribution
(BSD) license or the GNU General Public License (GPL) as published by the Free Software
Foundation (FSF). Lantronix grants you no right to receive source code to the Open Source
software; however, in some cases, rights and access to source code for certain Open Source
software may be available directly from Lantronix’ licensors. Upon request, Lantronix will identify
the Open Source components and the licenses that apply to them. Your use of each Open Source
component or software is subject to the terms of the applicable license. The GNU General Public
License is available at http://www.gnu.org/licenses/gpl.html
Open Source Software is distributed WITHOUT ANY WARRANTY, INCLUDING ANY IMPLIED
WARRANTY OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. See the
GPL and BSD for details.
Warranty
For details on the Lantronix warranty policy, please go to our Web site at
www.lantronix.com/support/warranty
; additional patents pending.
.
.
Contacts
Lantronix, Inc.
7535 Irvine Center Drive
Suite 100
Irvine, CA 92618, USA
Phone:949-453-3990
Fax:949-453-3995
Technical Support
Online: www.lantronix.com/support
Sales Offices
For a current list of our domestic and international sales offices, go to the Lantronix web site at
www.lantronix.com/about/contact
SLB™ Branch Office Manager User Guide2
.
Disclaimer & Revisions
All information contained herein is provided “AS IS.” Lantronix undertakes no obligation to
update the information in this publication. Lantronix does not make, and specifically disclaims,
all warranties of any kind (express, implied or otherwise) regarding title, non-infringement, fitness,
quality, accuracy, completeness, usefulness, suitability or performance of the information provided
herein. Lantronix shall have no liability whatsoever to any user for any damages, losses and
causes of action (whether in contract or in tort or otherwise) in connection with the user’s access or
usage of any of the information or content contained herein. The information and specifications contained in this document are subject to change without notice.
Operation of this equipment in a residential area is likely to cause interference, in which case the
user, at his or her own expense, will be required to take whatever measures may be required to
correct the interference.
Note:This equipment has been tested and found to comply with the limits for Class A
digital device pursuant to Part 15 of the FCC Rules. These limits are designed to provide
reasonable protection against harmful interference when the equipment is operated in a
commercial environment. This equipment generates, uses, and can radiate radio
frequency energy and, if not installed and used in accordance with this user guide, may
clause interference to radio communications. Operation of this equipment in a residential
area is likely to cause interference, in which case the user will be required to correct the
interference at his own expense.
The user is cautioned that changes and modifications made to the equipment without approval of
the manufacturer could void the user's authority to operate this equipment.
Changes or modifications to this device not explicitly approved by Lantronix will void the user's
authority to operate this device.
Revision History
DateRev.Comments
April 2013AInitial Release (6.0).
June 2014BAdded the new 200-240 VAC SLB model.
August 2014CUpdated for firmware release 6.1.
January 2015DUpdated technical specification information.
May 2016EUpdated safety information.
December 2016FUpdated to firmware revision 6.3.0.0, which includes:
June 2018GUpdated to firmware revision 6.5.0.0RC19.
October 2018HUpdated to firmware revision 6.6, which includes:
Removal of java from the WebSSH and WebTelnet application
Addition of transport security layer (TLS) 1.1 and 1.2
Upgrade of web SSL certificate to 2048 bits
Option to disable SSH DSA keys
Zero touch provisioning
Custom SSL certificate for the web
Compliance information updates
Sierra gateway LTE modem integration
SLB™ Branch Office Manager User Guide3
March 2019JUpdated to firmware revision 6.7.0.0RC12, which includes:
Support for custom Expect scripts that can be connected to the SLB CLI
or a device port
Web and SSH support for SHA2 and higher
ConsoleFlow access timeout settings
April 2019KUpdated to firmware revision 6.8.0.0RC8, which includes support for Tcl and
Python custom scripts.
SLB™ Branch Office Manager User Guide4
Table of Contents
Intellectual Property ________________________________________________________2
Open Source Software ______________________________________________________2
Warranty _________________________________________________________________2
Contacts _________________________________________________________________2
Disclaimer & Revisions ______________________________________________________3
Revision History ___________________________________________________________3
List of Figures ____________________________________________________________14
List of Tables _____________________________________________________________17
1: About this Guide 18
Purpose and Audience _____________________________________________________18
Summary of Chapters ______________________________________________________18
Additional Documentation ___________________________________________________19
2: Introduction 20
Features ________________________________________________________________20
Console Management __________________________________________________20
Power Management Outlets for Power Connectivity ___________________________ 20
Power Inlets __________________________________________________________20
Integration with Other Secure Lantronix Products _____________________________20
Internal Temperature Sensor _____________________________________________ 21
Designed for Branch Offices and Similar Environments _________________________ 21
Typical Equipment _____________________________________________________ 22
Types of Business _____________________________________________________22
Benefits ______________________________________________________________ 22
Models __________________________________________________________________23
System Features __________________________________________________________24
Access Control ________________________________________________________25
Power Outlet Control ___________________________________________________25
Device Port Buffer _____________________________________________________25
Configuration Options ___________________________________________________25
Application Example _______________________________________________________26
Hardware Features ________________________________________________________27
Serial Connections _____________________________________________________28
Connecting to the Internal Modem _________________________________________37
Power _______________________________________________________________37
AC Input _____________________________________________________________ 37
Connecting Devices to Power Outlets ______________________________________ 38
Typical Installations ________________________________________________________39
4: Quick Setup 41
Recommendations ________________________________________________________41
IP Address _______________________________________________________________41
Method #1 Using the Front Panel Display _______________________________________42
Front Panel LCD Display and Keypads _____________________________________ 42
Limiting Sysadmin User Access ___________________________________________45
Method #2 Quick Setup on the Web Page ______________________________________ 46
Date & Time Settings ___________________________________________________ 48
Administrator Settings __________________________________________________48
Method #3 Quick Setup on the Command Line Interface ___________________________49
Next Step _______________________________________________________________51
5: Web and Command Line Interfaces 52
Web Interface ____________________________________________________________52
Logging in ____________________________________________________________53
Logging Out __________________________________________________________ 54
SLB™ Branch Office Manager User Guide6
Web Page Help _______________________________________________________54
Command Line Interface ____________________________________________________54
Logging In ____________________________________________________________54
Logging Out __________________________________________________________ 55
System Logging and Other Services ___________________________________________84
SSH/Telnet/Logging _______________________________________________________85
System Logging _______________________________________________________85
Web SSH/Telnet Copy and Paste _________________________________________98
Secure Lantronix Network Commands ______________________________________98
Date and Time ____________________________________________________________99
Date and Time Commands ______________________________________________ 100
Web Server _____________________________________________________________100
Connection Methods ______________________________________________________110
Permissions _____________________________________________________________110
Device Status ___________________________________________________________111
Global Port Settings ______________________________________________________111
Telnet/SSH/TCP in Port Numbers ________________________________________ 112
Global Commands ____________________________________________________113
Device Ports - Settings ____________________________________________________113
Device Port Settings ___________________________________________________115
SLB™ Branch Office Manager User Guide8
IP Settings __________________________________________________________115
Data Settings ________________________________________________________ 116
Hardware Signal Triggers _______________________________________________117
Device Port - Sensorsoft Device __________________________________________ 122
Device Port Commands ________________________________________________ 123
Interacting with a Device Port _______________________________________________123
Device Ports - Logging ____________________________________________________124
Local Logging ________________________________________________________124
Example Scripts ______________________________________________________ 149
Sites __________________________________________________________________165
Site Commands ______________________________________________________ 167
Modem Dialing States _____________________________________________________ 167
IP Settings __________________________________________________________178
Manage Firmware and Configuration Files _____________________________________179
USB Commands ______________________________________________________179
10: Connections 180
Typical Setup Scenarios for the SLB _________________________________________180
Terminal Server ______________________________________________________ 180
Remote Access Server _________________________________________________181
Reverse Terminal Server _______________________________________________ 181
Multiport Device Server ________________________________________________182
Console Server _______________________________________________________182
Authentication Commands ______________________________________________188
Local and Remote User Settings ____________________________________________189
Adding, Editing or Deleting a User ________________________________________191
User Attributes & Permissions from LDAP Schema or RADIUS VSA _____________ 205
Kerberos _______________________________________________________________207
Telnet/SSH to a Remote Device _____________________________________________248
Dial-in (Text Mode) to a Remote Device _______________________________________ 250
Local Serial Connection to Network Device via Telnet ____________________________251
14: Command Reference 253
Introduction to Commands _________________________________________________253
This guide provides the information needed to install, configure, and use the Lantronix® SLB™
branch office manager. The SLB device is for IT professionals who must remotely and securely
configure and administer servers, routers, switches, telephone equipment, or other devices
equipped with a serial port for facilities that are typically remote branch offices or “distributed” IT
locations.
Summary of Chapters
The remaining chapters in this guide include:
Chapter Description
Chapter 2: IntroductionDescribes the SLB models, their main features, and the protocols they
support.
Chapter 3: InstallationProvides technical specifications; describes connection formats and power
supplies; provides instructions for installing the SLB unit in a rack.
Chapter 4: Quick SetupProvides instructions for getting your SLB device up and running and for
configuring required settings.
Chapter 5: Web and
Command Line Interfaces
Chapter 6: Basic Parameters Provides instructions for configuring network ports, firewall and routing
Chapter 7: ServicesProvides instructions for enabling and disabling system logging, SSH and
Chapter 8: Device PortsProvides instructions for configuring global device port settings, individual
Chapter 9: USB PortProvides instructions for using the USB port.
Describes the web and command line interfaces available for configuring
the SLB branch office manager.
The configuration chapters (6-12) provide detailed instructions for using the
web interface and include equivalent command line interface commands.
settings, and the date and time.
Telnet logins, SNMP, SMTP, and the date and time.
device port settings, and console port settings.
Chapter 10: ConnectionsProvides instructions for configuring connections and viewing, updating, or
disconnecting a connection.
Chapter 11: User
Authentication
Chapter 12: MaintenanceProvides instructions for upgrading firmware, viewing system logs and
Chapter 13: Application
Examples
Chapter 14: Command
Reference
Provides instructions for enabling or disabling methods that authenticate
users who attempt to log in via SSH, Telnet, or the console port. Provides
instructions for creating custom menus.
diagnostics, generating reports, and defining events. Includes information
about web pages and commands used to shut down and reboot the SLB
unit.
Shows how to set up and use the SLB branch office manager in three
different configurations.
Lists and describes all of the commands available on the SLB command line
interface
SLB™ Branch Office Manager User Guide18
Chapter (continued)Description
Appendix A: BootloaderLists and describes the commands available for the bootloader command
line interface.
Appendix B: Security
Considerations
Appendix C: Adapters and
Pinouts
Appendix D: Protocol
Glossary
Appendix E: Compliance
Information
Provides tips for enhancing SLB security.
Includes adapter pinout diagrams.
Lists the protocols supported by the SLB unit with brief descriptions.
Provides information about the SLB device’s compliance with industry
standards.
Additional Documentation
Visit the Lantronix Web site at www.lantronix.com/support/documentation for the latest
documentation and the following additional documentation.
DocumentDescription
SLB Branch Office Manager Quick StartDescribes the steps for getting the SLB unit up and running.
SLB Branch Office Manager Online Help
for the Command Line Reference
SLB Branch Office Manager Online Help
for the Web Interface
1: About this Guide
Provides online help for configuring the SLB device using
commands.
Provides online help for configuring the SLB unit using the
web page.
SLB™ Branch Office Manager User Guide19
2:Introduction
The SLB branch office manager enables IT system administrators to manage remote servers and
IT infrastructure equipment securely over the Internet. This innovative hybrid device combines the
capabilities of the award-winning secure console manager with an 8-port remote power
management solution into a compact, 1U rack-mountable appliance.
Features
Console Management
8 serial ports for console connectivity
Enables system administrators to remotely manage devices with serial console ports, e.g.,
Linux, Unix, and recent versions of Windows servers, routers, switches, telecom, and building
access equipment.
Provides data logging, monitoring, and secure access control via the Internet
Power Management Outlets for Power Connectivity
8 outlets for power connectivity
Provides ability to control power individually to all attached equipment
Provides on/off/reboot control
Per port power consumption monitoring
SLB882KIT-15P and SLB882KIT-20P outlets support NEMA 5-15P & 5-20P plugs
SLB8824KIT-AP and SLB8824KIT-EU outlets support C14 plugs
Ensures safe power distribution and reduces in-rush current overload
Power Inlets
SLB882KIT-xx Dual 100-120 VAC power inlets
SLB8824KIT-xx Dual 200-240 VAC power inlets
Provides automatic power switch-over when both primary and secondary power inlet sources
are used
Integration with Other Secure Lantronix Products
Can integrate seamlessly with the ConsoleFlow™ or vSLM™ management appliance
software for a complete end-to-end Out-of-Band (OOB) management solution.
SLB™ Branch Office Manager User Guide20
Internal Temperature Sensor
System administrators can be alerted if temperature goes out of range.
Figure 2-1 Branch to Enterprise Integration Concept
2: Introduction
Designed for Branch Offices and Similar Environments
Designed to meet the specific needs of the remote branch offices and environments alike, the SLB
branch office manager conserves rack space and reduces costs by enabling system
administrators at a main corporate facility to manage the IT equipment distributed among branch
offices simply and cost-effectively.
Branch offices are facilities that are typically remote or "distributed IT" locations, likely located offsite of corporate headquarters or large-scale enterprise facilities. These distributed facilities
typically do not have an on-site maintenance staff or IT System Administrator.
Typically, the branch office environment has some of the following characteristics:
Space is limited to 1U rack space or shelf mounted desktop unit
Closet-mounted or wall-attached rack
Limited air and power conditioning
Limited number of network devices and servers
No on-site maintenance staff
Ethernet or dial-up modem access is required
SLB™ Branch Office Manager User Guide21
2: Introduction
Typical Equipment
You can configure, administer, and manage IT equipment in a variety of ways, but most devices
have one method in common: an RS-232 serial port, sometimes called a console, auxiliary, or
management port. These ports are often accessed directly by connecting a terminal or laptop to
them, meaning that the user typically must be in the same physical location as the equipment.
Eliminating the need for a physical presence, the Lantronix SLB unit provides remote access to the
equipment from anywhere there is a network or modem connection.
The SLB branch office manager can access and administer many types of equipment, such as:
Servers: Unix, Linux, Windows Server 2003 or higher, and others
Other systems with serial interfaces: Heating/cooling systems, security/building access
systems, UPS, medial device.
Types of Business
The SLB unit is used in many types of environments, for example:
Banking and finance
Insurance companies
Healthcare
Retail Sales
Information Technology
Education and campus style facilities
Hospitality
Manufacturing Facilities
Base Station Control and Management
Benefits
The key benefits of using the SLB branch office manager:
Saves space: Compact design merges the functionality of two solutions into a 1U rack
solution, reducing required rack space and total cost of ownership.
Saves money: Enables remote management and troubleshooting without sending a technician
onsite, resulting in reduced travel costs and increased network uptime.
Saves time: Provides instant access and reduces response time, improving efficiency.
Simplifies access: Enables 24/7 access to your equipment securely and remotely after hours
and on weekends and holidays-without having to schedule visits or arrange for off-hour
access.
Protects assets: Provides the highest levels of encryption and security features
(authentication, authorization, and IP filters) to ensure that your IT infrastructure and data
assets are protected.
The SLB unit also provides features such as convenient text menu systems, break-safe operation,
port buffering (logging), remote authentication, and Secure Shell (SSH) access. Dial-up modem
support ensures access when the network is not available.
SLB™ Branch Office Manager User Guide22
Models
The SLB branch office manager has the following hardware components:
The 100-120 VAC SLB model is available in 100-120 VAC (50-60 Hz) NEMA 5-20R type
The 200-240 VAC SLB model is available in 200-240 VAC (50-60 Hz) IEC C13 type outlets.
Chassis: The SLB unit has a 1U tall, self-contained rack-mountable chassis.
Power Outlets: Eight outlets allow power management and control (on/off/reboot) of the
Serial Device Ports: Eight serial RS-232C (EIA-232) device ports are for remote console
2: Introduction
outlets. This model also includes a USB port.
This model also includes a USB port.
Note:This model is EU style with one switched hot line, not a US style with two hot
lines. It is intended for use on power systems where the 200-240VAC is provided
on a single hot line.
attached equipment using a simple web or command line interface.
management of the attached equipment. These match the RJ45 pin-outs of the console ports
of many popular devices found in a network environment, and where different can be
converted using Lantronix adapters. See the appendix, Appendix C: Adapters and Pinouts for
more information on serial adapters and pin-outs.
Ports and Modem: The SLB branch office manager has two 10/100 Ethernet ports (referred
to in this user guide as Eth1 and Eth2) in the back and a front panel serial console port (RJ45).
The SLB unit also includes a USB type A port in the front panel and an internal v.92 modem.
Table 2-2 SLB Models
ModelDescription
100-120 VAC SLBBranch Office Manager, 8 device ports, 8 power outlets (100-120 VAC, NEMA 5-
Secure shell (SSH) security; supports numerous other security protocols
Network File System (NFS) and Common Internet File System (CIFS) support for
configuration files
TCP, Telnet or SSH to a serial port by IP address per port or by IP address and TCP port
number
Configurable user rights for local and remotely authenticated users
Built-in internal modem
External USB modem and Flash Storage supported
Sun break-safe (no unintentional break ever sent to attached servers)
Simultaneous access on the same port-- "listen" and "direct" connect mode
Local access through a console port
Web administration (using most browsers)
Protocols Supported
The SLB branch office manager supports the TCP/IP network protocol as well as:
TCP, SSH, Telnet, PPP and NFS for connections in and out of, and CIFS for incoming
connections to the \\<hostname>\public\config directoryof the SLB unit
SMTP for mail transfer
DNS for text-to-IP address name resolution
SLB™ Branch Office Manager User Guide24
2: Introduction
SNMP with custom traps for remote monitoring and management
FTP and SFTP for file transfers and firmware upgrades
TFTP and HTTPS for firmware upgrades
DHCP and BOOTP for IP address assignment
HTTPS (SSL) for secure browser-based configuration
NTP for time synchronization
LDAP, NIS, RADIUS, CHAP, PAP, Kerberos, and TACACS+ for user authentication
IPsec for VPN access
For brief descriptions of these protocols, see Appendix D: Protocol Glossary.
Access Control
The system administrator controls access to attached servers or devices by assigning access
rights to up to 128 user profiles. Each user has an assigned ID, password, and access rights.
Other user profile access options may include externally configured authentication methods such
as RADIUS, TACACS+, NIS, and LDAP. Groups are supported in LDAP, RADIUS (via VSA), and
TACACS+ (using priv_lvl).
Power Outlet Control
With the SLB unit's built-in power management capability, system administrators can remotely
control the power (on/off/reboot) individually to all IT equipment in the branch office, ensure safe
power distribution, and reduce "in-rush" current overload. If SNMP traps are enabled, a trap
(alarm) is sent if the total current for all outlets exceeds a threshold.
Device Port Buffer
The SLB branch office manager supports real-time data logging for each device port. The port can
save the data log to a file, send an email notification of an issue, or take no action.
You can define the path for logged data on a port-by-port basis, configure file size and number of
files per port for each logging event, and configure the device log to send an email alert message
automatically to the appropriate parties indicating a particular error.
Configuration Options
You may use the backlit front-panel LCD display for initial setup and configuration and to view
current network, console, and date/time settings, and get power outlet status.
Both a web interface viewed through a standard browser and a command line interface (CLI) are
available for configuring the SLB settings and monitoring performance.
SLB™ Branch Office Manager User Guide25
Application Example
The figure below is an example deployment. An SLB unit is deployed in each branch office and an
(optional) vSLM management appliance at the main office. The branch offices are interconnected
(always on) by VPN routers overlaid on the Internet, and also interconnected (on demand) through
the analog phone system.
2: Introduction
The SLB unit provides remotely controlled and monitored AC power (orange), console
management (green), and traditional, wired telephone network (PSTN) access (yellow).
SLB™ Branch Office Manager User Guide26
Figure 2-5 Example Deployment
2: Introduction
A system administrator, upon losing IP connectivity to a server, takes the following steps:
1. Views the server's Ethernet interface state information provided by the SLB branch office
manager.
2. If the Ethernet interface is faulty, connects to the server's console port by means of the SLB
web page or CLI (optionally via the vSLM management appliance) and checks the server's
system parameters.
3. If the server is not responsive on the console port, commands the SLB to reboot the server's
power.
4. If the entire branch office loses IP connectivity, dial in to the SLB to perform the diagnostic
functions
Hardware Features
Caution:To avoid physical and electrical hazards, please read Safety Precautions
before installing the SLB unit.
The SLB hardware includes the following:
1U-tall (1.75 inch) rack-mountable appliance
SLB™ Branch Office Manager User Guide27
2: Introduction
Two 10Base-T/100Base-TX network ports
One front panel serial console port for VT100 terminal or PC with emulation
One USB Port
Front panel LCD display and keypad
One RJ-11 Internal Modem Port
256 KB-per-port buffer memory for serial device ports
Eight RS-232 serial device ports connected via Category 5 (RJ45) wiring
Note:Max input/output is rated at 80% of the circuit max, per typical electrical codes.
Dual IEC-60320/C20 inlets, 200-240 VAC, 50/60Hz
(20A Branch Circuit) 16A max input current
100-120 VAC SLB Model
200-240 VAC SLB Model
(8) NEMA 5-20R outlets, 100-120 VAC, 50/60Hz
16A max per outlet, 16A total for SLB
(8) IEC C13 outlets, 200-240 VAC, 50/60Hz
10A max per outlet, 16A total for SLB
(15.9A max total for China CCC)
Note:The outlet voltage equals the input voltage.
Convection cooled, silent operation, low power consumption
Note:For more detailed information, see Technical Specifications (on page 32).
Serial Connections
All devices attached to the device ports and the console port must support the RS-232C (EIA-232)
standard. Category 5 cabling with RJ45 connections is used for the device port connections and
for the console port. (For pinout information, see Adapters and Pinouts on page 338.)
Note:RJ45 to DB9/DB25 adapters are available from Lantronix.
Device ports and the console port support the following baud-rate options: 300, 600, 1200, 2400,
4800, 9600, 19200, 38400, 57600, 115200, and 230400 baud.
SLB™ Branch Office Manager User Guide28
2: Introduction
Figure 2-6 Device Port Connections
Figure 2-7 Console Port Connection
Network Connections
The SLB network interfaces are 10Base-T/100Base-TX connectors for use with a conventional
Ethernet network. Use standard RJ45-terminated Category 5 cables. Network parameters must be
configured before the SLB branch office manager can be accessed over the network.
Note:One possible use for the two Ethernet ports is to have one port on a private,
secure network and the other on a public, unsecured network.
Figure 2-8 Network Connection
USB Interface
The SLB unit has a USB port. Lantronix qualifies USB devices continuously.
Figure 2-9 USB Interface
SLB™ Branch Office Manager User Guide29
2: Introduction
Modem Interface
The SLB branch office manager has one v92 modem RJ11 interface to allow configuration and
control of the unit via dialing into the unit.
Caution:To reduce the risk of fire, use only No. 26 AWG or larger (e.g., 24 AWG)
UL Listed or CSA Certified Telecommunication Line Cord.
Attention: Pour réduire les risques d’incendie, utiliser uniquement des
conducteurs de télécommunications 26 AWG au de section supérleure.
Figure 2-10 Modem Interface
SLB™ Branch Office Manager User Guide30
Loading...
+ 314 hidden pages
You need points to download manuals.
1 point = 1 manual.
You can buy points or you can get point for every manual you upload.