For the Lantronix Family of Secure Console Servers
Part Number 900-235
Revision D December 2003
The information in this guide may change without notice. The manufacturer assumes no responsibility for
any errors which may appear in this guide.
Copyright 2003, Lantronix. All rights reserved. No part of the contents of this book may be transmitted or
reproduced in any form or by any means without the written permission of Lantronix. Printed in the United
States of America.
The revision date for this manual is December 2003.
Part Number: 900-235
Revision D
WARNING
This equipment has been tested and found to comply with the limits for a Class A digital device pursuant to
Part 15 of FCC Rules. These limits are designed to provide reasonable protection against such interference
when operating in a commercial environment. This equipment generates, uses, and can radiate radio
frequency energy, and if not installed and used in accordance with this guide, may cause harmful
interference to radio communications.
Operation of this equipment in a residential area is likely to cause interference in which case the user, at his
or her own expense, will be required to take whatever measures may be required to correct the interference.
Changes or modifications to this device not explicitly approved by Lantronix will void the user's authority
to operate this device.
The Lantronix SCS family of Secure Console Servers provides secure communication for remote users to
access local network resources. Our Servers enable IT professionals to configure and administer servers,
routers, switches, telephone equipment, or any device with a serial port.
In addition to remote networking capabilities, the SCS includes traditional terminal server functionality
such as security features and modem control. The security features include dialback, passwords, database
authentication, and menu mode. The SCS also allows automatic modem configuration and control.
This reference manual provides instructions for advanced configuration as well as the complete command
set for all products in the SCS family. Many of these features can also be setup using EZWebCon and the
web browser interface, and are noted as such.
Before reading this manual, follow the installation procedure described in your Installation Guide. Basic
configuration for your SCS is also described in your Installation Guide.
1.1 What Is New
This manual now includes instructions for the SCS100 and SCS400, the newest members of the Lantronix
family of Secure Console Servers, in addition to instructions for the SCS200, SCS1600, and SCS3200.
1.2 How To Use This Manual
The rest of this reference manual is divided as follows:
Chapter 2, Getting Started, provides information on system passwords, rebooting, and basic time and
date setup.
Chapter 3, Console Server Features, discusses the console server features of the SCS.
Chapter 4, Basic Remote Networking, contains instructions on configuring LAN to LAN and remote
node networking.
Chapter 5, Additional Remote Networking, describes how to optimize your remote networking
connection and introduces basic security concepts.
Chapter 6, IP, configures the Internet Protocol (IP) for your SCS.
Chapter 7, PPP, contains conceptual information about the Point-to-Point Protocol (PPP).
Chapter 8, Ports, describes how to configure the SCS’s serial ports.
Chapter 9, Modems, explains how to configure modems that are attached to the serial ports or, for
certain SCS models, installed in the PC card slot.
Chapter 10, Modem Sharing, describes how to configure the attached modems if they are to be shared.
1-1
IntroductionHow To Use This Manual
Chapter 11, Security, offers a comprehensive description of all security features.
Chapter 12, Command Reference, is divided into sections for Navigation/Help, IP/Network, Port,
Modem, Service, Server, Site, and Security commands.
Appendix A, Environment Strings, discusses the environment strings that can be used with several of
the commands described in Chapter 12.
Appendix B, Show 802.11 Errors, defines the error bits that appear in the Show 80211 screen.
Appendix C, covers the SNMP features supported by the SCS.
Appendix D, Sup ported RADIUS Attributes, lists and explains the RADIUS attributes currently
supported by the SCS.
1-2
2: Getting Started
This chapter covers basic configuration that should get you started using the SCS. Topics include methods
for setting up the SCS and ongoing maintenance issues such as restoring factory default settings. You can
perform almost all of these configurations using EZWebCon (the recommended method for initial
configuration), the web browser interface (recommended for further configurations), or by issuing
commands at the command line (Local> prompt).
This chapter assumes that you have completed the following steps, which are described in your Installation Guide:
The SCS is running operational code (i.e. the unit has successfully booted).
The SCS is connected to an Ethernet.
The SCS has been assigned an IP address.
2.1 Configuration Methods
EZWebCon is the recommended method for initial configuration. However, the web browser interface and
the command line offer options for advanced configuration.
2.1.1 EZWebCon
The EZWebCon utility is the easiest way to initially configure the unit. EZWebCon guides you through
configuration using a graphical interface.
Figure 2-1: The EZWebCon Utility
EZWebCon is included on the CD-ROM that is shipped with each SCS unit. Instructions are listed in the
Read Me file, also located on the CD-ROM. For assistance once EZWebCon is running, refer to the
EZWebCon online help.
2.1.2 Web Browser Interface
The web browser interface allows you to log into and configure your SCS using a standard web browser.
To connect to your SCS using the web browser interface, do one of the following:
2-1
Getting StartedConfiguration Methods
From EZWebCon, select your device and choose Manage from the Actions menu.
OR
Type your SCS’s IP address or resolvable text name into your web browser’s URL/Location field.
Figure 2-2: The Web Browser Interface
Once you have connected and entered the login password (see Login Password on page 2-7), you can
configure important settings, view statistics, and update other Server information. Many of the
configurations discussed in this manual can be set using these web pages.
The on-board web browser can be disabled. See Set/Define Protocol HTTP on page 12-114 for more
information.
2.1.3 Command Line
To configure the SCS without EZWebCon or the web browser interface, you must enter configuration
commands at the command line. These commands should be entered when a port is in character mode,
which is when the Local> prompt is displayed.
To display the Local> prompt, do one of the following:
Connect a terminal to the serial console port and press the Return key until the prompt is displayed.
Note:The default serial port parameters are 9600 baud, 8 data bits, 1 stop bit, no
parity, and XON/XOFF flow control.
Establish a Telnet, SSH, or Rlogin connection to the SCS from a TCP/IP host. See Establishing
Sessions on page 6-8 for more information.
In EZWebCon, select Telnet To Device from the Actions menu.
2-2
Getting StartedConfiguration Methods
2.1.3.1 Entering Commands
In examples throughout the manual, SCS commands and keywords are displayed in upper case for clarity.
They may be entered in upper, lower, or mixed case. When entering a string, such as a username or
filename, enclose the string in quotes; this will retain the case entered. If a string is not enclosed in
quotes, it will be changed automatically to all uppercase characters.
The Command Reference chapter (Chapter 12) displays the syntax of each command, including any
restrictions, known errors, and references to related commands. Optional parameters are enclosed in
brackets []. Required parameters are enclosed in curly braces {}; one and only one of those parameters must
be used. User-supplied parameters, such as a particular port number or host name, are shown in italics.
The SCS command completion feature will complete partially-typed commands for you. This feature can
save time and reduce errors if you’re entering a number of commands. To use command completion, type
part of a command, then press the space bar. The SCS will automatically “type” the remainder of the
command. If the partially-entered command is ambiguous (or if you are entering an optional string), the SCS
will be unable to finish the command and the terminal will beep.
Note:Command completion is disabled by default. To enable command completion,
refer to Set/Define Ports Command Completion on page 12-65.
All keys used for entering and editing commands are listed in Table 2-1.
Table 2-1: Command Editing Keys
KeyPurpose
ReturnExecutes the current command line
DeleteDeletes the current character before the cursor
Ctrl-AToggles insert mode (insert or overstrike).
Overstri ke is on by default.
Ctrl-DLogs out of the server
Ctrl-EMoves the cu rsor to the end of the line
Ctrl-H or Bac kspaceMoves the cu rsor to the beginning of the line
Ctrl-RRedisplays the current command
Ctrl-UDeletes the entire current line
Ctrl-ZLogs out of the server
Left ArrowMoves the cursor left
Right ArrowMoves the cursor right
Up Arrow or Ctrl-PRecalls the previous command
Down Arrow or Ctrl-NRecalls the next command
!textRecalls the last command starting with text
!!Recalls the last command
2.1.3.2 Command Types
The following types of commands appear frequently throughout this manual. There are subtle differences
between each group of commands.
2-3
Getting StartedConfiguration Methods
The Set and Define commands make configuration changes to your SCS.
SetMakes an immediate (but not permanent) change; the change will be lost when
the SCS is rebooted. To make the change permanent, you must also enter the
Save command (discussed on page 12-189).
DefineMakes a permanent change, but the change doesn’t take effect until the SCS is
rebooted.
Define Port and Define SLIP settings take effect after the current user logs out.
Define Site takes effect when a site is started. Define Server, Define Telnet
Host, and Define Service settings take effect when the SCS is rebooted.
The Show, Monitor, and List commands display information about the SCS.
ShowDisplays the current settings. Current settings include those made using the Set
command but not yet defined or saved as permanent changes.
MonitorDisplays current operating characteristics, which are updated every three
seconds until a key is pressed. Monitor commands may only be used by the
privileged user.
ListDisplays settings that will take effect the next time the SCS is rebooted.
Clear and Purge alter previously configured SCS settings.
ClearRemoves a configured setting immediately, but does not make a permanent
change.
PurgeRemoves a configured setting permanently, but does not take effect until the
unit is rebooted.
Note:Purge Port will take effect as soon as the port is logged out, and Purge Site will
take effect when a site starts.
2.1.3.3 Restricted Commands
Some commands require privileged (superuser) status. To obtain privileged status, you must enter the
privileged password. See Privileged Password on page 2-8 for instructions on entering and editing the
privileged password.
By default, the SCS prompt changes from Local> to Local>> to reflect privileged user status.
2.1.3.4 Abbreviating Commands
When configuring the Server via the command line, you only need to enter as many characters as are needed
to distinguish the keywords from one another. For example, the following two commands are equivalent:
Local>> DEFINE PORT 2 BROADCAST ENABLED AUTOCONNECT ENABLED PARITY EVEN SPEED 4800
Local>> DEF PO 2 BRO EN AUTOC EN PAR E SP 4800
Figure 2-3: Abbreviating a Command
2-4
Getting StartedRebooting
An abbreviation must be unique to the desired command. For example, if autoconnect was abbreviated as
auto, that auto could denote autobaud, autostart, or autoconnect. Be sure that any abbreviations are
unambiguous, such as autoc in the example above.
2.2 Rebooting
There are four ways to reboot the SCS:
From within EZWebCon, select Reboot from the Actions menu.
From the Server section of the web browser interface, check the Reboot Server checkbox. Then, click
the Update Server Settings button at the bottom of the page.
At the Local> prompt, issue the Initialize Server command.
Cycle power to the unit.
When the SCS is rebooted, any changes made using Set commands will be lost. To ensure that the changes
will be saved, use Define commands, or use the Save command after the Set command.
Before rebooting the SCS, log out any current user sessions (if possible). Disconnecting sessions may
prevent connection problems after the SCS is rebooted. If possible, warn users that the SCS will be going
offline by sending a Broadcast message.
2.2.1 Sending a Broadcast Message
Broadcast messages are sent to local users, but not remote networking users. Broadcasts can be sent to all
Server ports with the following command.
Figure 2-4: Broadcast Command
Local>> BROADCAST ALL "Server shutdown in 5 minutes."
2.2.2 Restoring Factory Defaults
Restoring factory default settings will erase all changes made since the SCS was shipped; the unit will
function as if it just came out of the box. To restore factory defaults, enter the Initialize Server Factory
command at the Local> prompt.
To perform a TFTP boot after restoring the factory defaults, you must enter the SCS IP and loadhost
information. (If a BOOTP server will provide this information, this step is not required.) Refer to your User Guide for instructions.
2-5
Getting StartedRebooting
When initialized, the SCS sets local authentication in the first precedence slot. For more information on
authentication and precedence, see Database Configuration on page 11-9.
2.2.3 Reloading Operational Software
The SCS stores its software in Flash ROM. The software controls the initialization process, the operation of
the SCS, and the processing of commands. The contents of Flash ROM can be updated by downloading a
new version of the operational software.
For instructions on reloading Flash ROM, refer to your Installation Guide.
2.2.4 Editing Boot Parameters
If the information that the SCS uses at boot time changes, you will need to change the SCS boot parameters.
Boot parameters include the following:
Loadhost (TCP/IP). The loadhost is the host from which the SCS operational software is downloaded
at boot time.
Backup loadhost (optional). Software is downloaded from a backup loadhost when the primary
loadhost is unavailable.
Software filename
RARP (may be enabled or disabled)
BOOTP (may be enabled or disabled)
Boot parameters are edited using Set/Define Server commands such as Set/Define Server Loadhost. All
available server commands are listed in Server Commands on page 12-111. Use the Define commands if
you want any changes to be saved after reboot.
Figure 2-5: Ed i ting the Loadhos t Address
Local>> DEFINE SERVER LOADHOST 192.0.1.8
2-6
Getting StartedSystem Passwords
2.3 System Passwords
The SCS has both a login password and a privileged password. These passwords have default settings which
should be changed as soon as possible. The following sections discuss each password in more detail.
2.3.1 Login Password
When you open the web browser interface for an SCS, you are prompted for the login username and
password. To control this setting, use the Server Login Password Required checkbox on the Server page.
Figure 2-6: Web Browser Au t h entication
When a serial port has the login password enabled, users must enter the correct password to access that
port’s Local> prompt. The default login username is login, and the default login password is access.
To change the login password, use the Set /Define Server Login Password command.
Figure 2-7: Defining the Login Password
Local>> DEFINE SERVER LOGIN PASSWORD badger
Note:The login password is case-insensitive, so it does not need to be enclosed in
quotes.
To enable the use of the login password on a particular port, use the following command:
Figure 2-8: Enabling the Login Pas s word
Local>> DEFINE PORT 3 PASSWORD ENABLED
Note:To enable the password on virtual ports, which are used for incoming
connections, use the Set/Define Server Incoming command.
Login passwords are also discussed in Character Mode Logins on page 11-1.
2-7
Getting StartedSystem Passwords
2.3.2 Privileged Password
Changing any server, site, or port setting requires privileged user status. Use the default username, root, and
the default privileged password, system.
When you click on a link in the left navigation column of the SCS web browser interface, you are prompted
for the privileged username and password. Once you enter the password, you can access all of the
configuration pages.
Figure 2-9: Root-Level Authentication
If you are at the command line, become the privileged user by entering the following command.
Figure 2-10: Set Privileged Command
Local> SET PRIVILEGED
Password> system (not echoed)
Local>>
Note:The complete command syntax for Set Privileged is available on page 12-92.
2-8
Getting StartedBasic Configuration
To change the privileged password, use the Set/Define Server Privileged Password command ( dis c us s ed
on page 12-123). Figure 2-11 displays an example of this command.
Figure 2-11 : Changing the Privileged Password
Local> SET PRIVILEGED
Password> system (not echoed)
Local>> DEFINE SERVER PRIVILEGED PASSWORD hippo
Note:The privileged password is case-insensitive, so it does not need to be enclosed in
quotes.
2.4 Basic Configuration
The following sections discuss features that will identify and personalize each SCS.
2.4.1 Changing the Server Name
Each SCS is initially configured with a server name in the form of SCS_xxxxxx, where xxxxxx represents
the last three segments of its hardware address. However, you can give the Server a custom name of up to
16 alphanumeric characters using the following command.
Figure 2-12 : Changing the Server Name
Local>> DEFINE SERVER NAME "CommServer"
Note:The server name must be enclosed in quotes to preserve case.
2.4.2 Changing the Local Prompt
The prompt each user receives (usually a Local_xx> prompt, where xx is the port number) is configurable
in a variety of ways. For a basic prompt, enter a string similar to the following.
Figure 2-13: Configuring the Server P rompt
Local> SET SERVER PROMPT "Server> "
Server>
For a customized prompt, optional key combinations can be added to the prompt string. See Set/Define Server Prompt on page 12-123 for more information. Placing a space after the end of the prompt is
recommended to improve readability.
Figure 2-14 displays a few examples of commands used to change prompts. In the examples, the first
command line results in the prompt used in the second command line, and so on.
Figure 2-14: Prompt Exampl es
Local> SET SERVER PROMPT "Port %n: "
Port 5: SET SERVER PROMPT "%D:%s: "
SCS:LabServ: SET SERVER PROMPT "%p%s_%n%P%% "
Port_5[NoSession]_5>%
2-9
Getting StartedBasic Configuration
2.4.3 Changing the Login Prompts
When a user logs into the SCS, he is prompted for a username, and sometimes a login password. By default,
the prompts are Username> and Password>. The prompts can be changed to be more like UNIX prompts
(login: and Password:) with the following command.
Figure 2-15: Enabling th e Alternate Lo gi n P rompt
Local> SET SERVER ALTPROMPT ENABLED
2.4.4 Setting the Date and Time
The SCS can calculate and save the local time, coordinated Universal Time (UTC, also known as Greenwich
Mean Time or GMT), standard and Daylight Savings timezones, and the corresponding number of hours
difference between UTC and the set timezone.
2.4.4.1 Setting the Clock
Use the Set/Define Server Clock command at the Local> prompt. Time should be entered in hh:mm:ss
“military format” as shown in the example below.
Figure 2-16: Setting the Cl ock
Local>> SET SERVER CLOCK 14:15:00 12/01/2000
2.4.4.2 Setting the Timezone
The SCS is configured to recognize a number of timezones. To display these timezones, use the Show
Timezone command at the Local> prompt. Set the timezone by using the Set/Define Server Timezone
command at the Local> prompt.
Figure 2-17: Setting the Timezon e
Local> DEFINE SERVER TIMEZONE AMERICA/PACIFIC
2-10
Getting StartedBasic Configuration
If your timezone is not listed, you will need to set it manually. Use the following information to set the
timezone:
A three-letter timezone abbreviation; for example, PST
The number of hours offset from UTC (Greenwich Mean Time); for example, -9:00
The time, day, and amount of any time changes (for example, daylight savings time information)
Note:Specifying time change information is optional.
Figure 2-18 shows an example of how to set the timezone.
Figure 2-18: Manual Ti m ezone Config uration
Local>> DEFINE SERVER TIMEZONE EST -3:00 EST 1 Mar Sun>=1 3:00 Oct lastSun 2:00
The first EST specifies that Eastern Standard Time will be used as the reference point. The second value of
-3:00 indicates that this timezone is 3 hours behind Eastern Standard Time. The third and fourth values, EST
and 1, specify that when a time change occurs the time will move forward one hour. The time change will
occur in March, denoted by Mar. The date that the time change will occur will be the Sunday (Sun) greater
than or equal to 1 (>=1), in other words, the first Sunday in the month. The 3:00 specifies that the time
change will occur at 3 o’clock.
The final three values of the command string represent the day and time when the time will revert to the
original time, in other words, when the time change will be reversed. The Oct and lastSun indicate that the
time will revert on the last Sunday in October. The time change will occur at 2:00.
2.4.4.3 Designating a Timeserver
The SCS regularly verifies and updates its setting with the designated timeserver. A timeserver is a host
which provides time of day information for nodes on a network. The SCS can communicate with either
Daytime or Network Timeserver Protocol (NTP) servers. For NTP, the SCS can periodically broadcast a
message asking for time information and wait for an NTP timeserver to reply (the Broadcast parameter),
periodically query a specific NTP timeserver (the IP ipaddress parameter), or just listen for NTP broadcasts
on the network (the Passive parameter).
To specify a timeserver, use the Set/Define IP Timeserver command.
Figure 2- 19: Defining Timeservers
Local>> DEFINE IP TIMESERVER DAYTIME 193.0.1.50
Local>> DEFINE IP TIMESERVER NTP PASSIVE
2.4.5 802.11 Configuration
This section applies only to the SCS200. Topics discussed in this section assume that you understand IEEE
802.11 wireless Ethernet concepts and architectures. If you do not, please refer to the IEEE 802.11 standard
or the documentation that came with your PC card or Access Point (AP).
Note:The SCS does not support PC card hot-swapping. Any time you insert a PC card
into an SCS PC card slot, you must reboot the SCS.
2-11
Getting StartedBasic Configuration
The following parameters should be configured only if you are using the SCS for 802.11 wireless Ethernet
networking and plan to use a wireless LAN PC card in one of the PC card slots. Users in countries other
than the United States must set the Region appropriately before using 802.11.
Not all configuration options will be available on all 802.11 cards. If you try to enter an option that is not
supported by your card, you will receive an Error message.
Any time you enable or disable 802.11 networking, you must reboot the SCS before the change takes effect.
Any other changes you request with the Set/Define 80211 commands will not take place until you have
entered the Set 80211 Reset command. You can enter the Show IP Counters command to see the current
802.11 settings.
To use the web browser interface to configure 802.11 settings, select the 802.11 link under the Advanced
Settings section.
2.4.5.1 802.11 Terms
The following acronyms are used in this section:
APAccess Point, a device that relays communications between one or more
wireless devices and possibly other devices on a network. APs are usually
connected to a physical network.
Note:If you are using an AP and WEP is not enabled, set the AP to accept Open System
Authentication. If WEP is enabled, set the AP to Shared Key Authentication. For
more information about WEP, see the definition below.
2-12
Getting StartedBasic Configuration
BSSBasic Service Set (or Cell), a group of wireless devices that speak directly with
each other. A BSS may consist of at most one AP.
Figure 2-20: Simple Wireless Network BSS
AP
BSS
ESSExtended Service Set, a network consisting of one or more BSSs that share the
same ESSID. An ESS can contain multiple APs.
IBSSIndependent Basic Service Set, a BSS with no APs. Devices work in an ad-hoc
networking mode.
WEPWireless Equivalent Privacy, a form of encryption for wireless
communication.
2.4.5.2 Enabling 802.11 Networking
The SCS has 802.11 networking enabled by default. This allows the SCS to check for a compatible wireless
networking card at startup. If a compatible card is present, the SCS will use the wireless network and ignore
any wired Ethernet settings. If no compatible PC card is present, the SCS will use the 10/100BASE-T
Ethernet interface.
If you want the SCS to only look for a wired Ethernet connection, you must disable 802.11.
Figure 2-21: Disablin g 802.11
Local>> DEFINE 80211 DISABLED
Note:You must reboot the SCS after enabling or disabling 802.11 networking.
2.4.5.3 802.11 Region
When using 802.11 networking, you must make sure the SCS is configured for the correct regulatory
region. Configuring this option incorrectly may cause the SCS to broadcast on frequencies that are illegal
in your area. The factory default setting is correct for the United States; users in other countries should
change it to a value appropriate for their area before attempting 802.11 operation.
2-13
Getting StartedBasic Configuration
Other region settings are listed in Set/Define 80211 Region on page 12-30. In the following example, IC
sets the region to Canada.
Figure 2-22: Setting the 802.11 Region
Local>> DEFINE 80211 REGION IC
Local>> SET 80211 RESET
2.4.5.4 MAC Address
A MAC address is a unique identifier that distinguishes different devices on the 802.11 network. It is the
same as the unit’s hardware address. The SCS can be configured to use either the PC card’s MAC address
or its own internal MAC address (the default) with the Set/Define 80211 MAC Address command. For
seamless operation when switching between wired and wireless networking, use the SCS’s MAC address.
Figure 2-23: Configurin g the MAC Addre ss
Local>> DEFINE 80211 MACADDRESS CARD
Local>> SET 80211 RESET
or
Local>> DEFINE 80211 MACADDRESS SCS
Local>> SET 80211 RESET
2.4.5.5 Extended Service Set ID (ESSID)
Whenever there is more than one ESS in a wireless LAN architecture, each device needs to be told which
ESS it belongs to. The ESSID ensures that devices communicate with the right AP.
To tell the SCS which ESS it belongs to, enter the Set/Define 80211 ESSID command. The exact string you
enter will be determined by the settings of the AP with which you want the SCS to communicate.
Figure 2- 24: Configuring the ESS ID
Local>> SET 80211 ESSID “floor3”
Local>> SET 80211 RESET
Setting the ESSID to none (Set/Define 80211 ESSID None) allows the SCS to associate with any AP within
range.
2.4.5.6 Network Mode
There are two types of 802.11 networks: ad-hoc and infrastructure. In an ad-hoc network, devices
communicate directly with one another on a peer-to-peer basis. In an infrastructure network (the default),
several devices communicate with one or more APs. The APs may or may not be connected to a physical
Ethernet network. You must tell your SCS which type of network is present with the Set/Define 80211 Network Mode command.
Figure 2-25: Configuring the Network M ode
Local>> DEFINE 80211 NETWORKMODE ADHOC
Local>> SET 80211 RESET
or
Local>> DEFINE 80211 NETWORKMODE INFRASTRUCTURE
Local>> SET 80211 RESET
The network mode setting relates to the channel setting, explained next.
2-14
Loading...
+ 394 hidden pages
You need points to download manuals.
1 point = 1 manual.
You can buy points or you can get point for every manual you upload.