Lantronix SecureLinx SLC48, SecureLinx SLC8, SecureLinx SLC16, SecureLinx SLC32 User Manual

SecureLinxTM Console Manager (SLC)
User Guide
Part No. 900-449
Rev. B August 2006
Copyright & Trademark
© 2004, 2005, 2006 Lantronix. All rights reserved. No part of the contents of this book may be transmitted or reproduced in any form or by any means without the written permission of Lantronix. Printed in the United States of America.
Ethernet is a trademark of XEROX Corporation. UNIX is a registered trademark of The Open Group. Windows 95, Windows 98, Windows 2000, Windows 2003, and Windows NT are trademarks of Microsoft Corporation. Netscape is a trademark of Netscape Communications Corporation.
LINUX GPL Compliance
Certain portions of source code for the software supporting the SLC family are licensed under the GNU General Public License (GPL) as published by the Free Software Foundation and may be redistributed and modified under the terms of the GNU GPL. A machine readable copy of the corresponding portions of GPL licensed source code is available at the cost of distribution.
Such source code is distributed WITHOUT ANY WARRANTY, INCLUDING ANY IMPLIED WARRANTY OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.
A copy of the GNU General Public License is available on the Lantronix Web Site at
http://www.lantronix.com/ or by visiting http://www.gnu.org/copyleft/gpl.html . You can
also obtain it by writing to the Free Software Foundation, Inc. 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA.
Contacts
Lantronix Corporate Headquarters
15353 Barranca Parkway Irvine, CA 92618, USA Phone: 949-453-3990 Fax: 949-453-3995
Technical Support Online: www.lantronix.com/support
Sales Offices For a current list of our domestic and international sales offices, go to the Lantronix web site at www.lantronix.com
SecureLinx SLC User Guide 2
Disclaimer & Revisions
Operation of this equipment in a residential area is likely to cause interference, in which case the user, at his or her own expense, will be required to take whatever measures may be required to correct the interference.
Note: This equipment has been tested and found to comply with the limits for
Class A digital device pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a commercial environment. This equipment generates, uses, and can radiate radio frequency energy and, if not installed and used in accordance with this User Guide, may clause interference to radio communications. Operation of this equipment in a residential area is likel y to cause interference, in which case the user will be required to correct the interference at his own expense.
The user is cautioned that changes and modifications made to the equipment without approval of the manufacturer could void the user’s authority to operate this equipment.
Changes or modifications to this device not explicitly approved by Lantronix will void the user's authority to operate this device.
The information in this guide may change without notice. The manufacturer assumes no responsibility for any errors that may appear in this guide.
Date Rev. Comments
6/06 A 8/06 B
Initial Release Added event configuration, local/remote user authentication
precedence, firmware update via HTTPS, complex passwords, and port permissions for remote users.
SecureLinx SLC User Guide 3
Table of Contents
Copyright & Trademark _______________________________________________________ 2 LINUX GPL Compliance ______________________________________________________2 Contacts___________________________________________________________________ 2 Disclaimer & Revisions _______________________________________________________3
1: About This Guide 9
Purpose and Audience___________________________________________________ 9 Chapter Summaries_____________________________________________________ 9 Additional Documentation _______________________________________________ 11
2: Overview 12
SLC Models __________________________________________________________ 13 System Features ______________________________________________________ 14
Protocols Supported_________________________________________________________ 15 Access Control_____________________________________________________________ 15 Device Port Buffer __________________________________________________________ 15 Configuration Options _______________________________________________________ 15
Hardware Features ____________________________________________________ 16
Serial Connections__________________________________________________________ 16 Network Connections________________________________________________________ 17 PC Card Interface___________________________________________________________ 17
3: Installation 18
What’s in the Box______________________________________________________ 18
Product Information Label ____________________________________________________ 19
Technical Specifications ________________________________________________ 19 Physical Installation ____________________________________________________ 20
Connecting to a Device Port __________________________________________________ 20 Connecting to a Network Port _________________________________________________ 21 Connecting a Terminal_______________________________________________________ 21 Power____________________________________________________________________ 22
4: Quick Setup 23
IP Address ___________________________________________________________ 23 Method #1 Using the Front Panel Display ___________________________________ 24
Before You Begin___________________________________________________________ 24 Front Panel LCD Display and Pushbuttons _______________________________________ 24 Navigating ________________________________________________________________ 25 Entering the Settings ________________________________________________________25 Restoring Factory Defaults____________________________________________________ 27
Method #2 Quick Setup on the Web Page___________________________________ 27 Method #3 Quick Setup on the Command Line Interface _______________________ 30 Next Step____________________________________________________________ 32
5: Web and Command Line Interfaces 33
Web Interface_________________________________________________________ 33
Logging in_________________________________________________________________ 35 Logging off ________________________________________________________________ 35
SecureLinx SLC User Guide 4
Web Page Help ____________________________________________________________ 36
Command Line Interface ________________________________________________ 36
Logging in_________________________________________________________________ 36 Logging out________________________________________________________________ 36 Command Syntax___________________________________________________________ 37 Command Line Help_________________________________________________________ 38 Tips______________________________________________________________________ 38 General CLI Commands _____________________________________________________ 39
6: Basic Parameters 40
Requirements_________________________________________________________ 40 Network Port(s) _______________________________________________________ 41
Ethernet Counters __________________________________________________________ 44 Network Commands_________________________________________________________ 44
Firewall______________________________________________________________ 45 Firewall Commands____________________________________________________ 47 Routing______________________________________________________________ 47
Equivalent Routing Commands ________________________________________________ 49
Date and Time ________________________________________________________ 49
Date and Time Commands ___________________________________________________ 51
7: Services 52
System Logging and Other Services _______________________________________ 52
Equivalent Services Commands _______________________________________________ 56
NFS and SMB/CIFS____________________________________________________ 57
NFS and SMB/CIFS Commands _______________________________________________ 59
8: Device Ports 61
Connection Methods ___________________________________________________ 61 Permissions __________________________________________________________ 62 Global Port Settings____________________________________________________ 62
Global Commands __________________________________________________________ 64
Device Ports – Settings _________________________________________________ 64
Port Counters______________________________________________________________ 69 Device Port Commands ______________________________________________________ 70
Device Ports – SLP ____________________________________________________ 72
Device Port - SLP Commands _________________________________________________ 73
Interacting with a Device Port ____________________________________________ 73 Device Ports – Logging _________________________________________________ 74
Local Logging______________________________________________________________ 74 NFS File Logging ___________________________________________________________ 75 PC Card Logging ___________________________________________________________ 75 Email/SNMP Notification _____________________________________________________ 75 Logging Commands_________________________________________________________ 79
Console Port _________________________________________________________ 80
Console Port Commands_____________________________________________________ 81
9: Connections 82
Typical Setup Scenarios for the SLC_______________________________________ 83
SecureLinx SLC User Guide 5
Terminal Server ____________________________________________________________ 83 Remote Access Server_______________________________________________________ 83 Reverse Terminal Server _____________________________________________________ 84 Multiport Device Server ______________________________________________________84 Console Server_____________________________________________________________ 85
Connection Configuration _______________________________________________ 86
Connection Commands ______________________________________________________ 88
10: User Authentication 91
Authentication Commands____________________________________________________ 93
Setting up Local Users__________________________________________________ 94
Local Users Commands______________________________________________________ 97
User Permissions______________________________________________________ 98
Local User Rights Commands ________________________________________________ 100
Remote User Permissions______________________________________________ 100
Remote User Commands____________________________________________________ 103
NIS________________________________________________________________ 104
NIS Commands ___________________________________________________________106
LDAP ______________________________________________________________ 107
LDAP Commands__________________________________________________________ 110
RADIUS ____________________________________________________________ 111
RADIUS Commands _______________________________________________________ 113
Kerberos ___________________________________________________________ 114
Kerberos Commands _______________________________________________________ 117
TACACS+ __________________________________________________________ 118
TACACS+ Commands ______________________________________________________ 120
SSH Keys___________________________________________________________ 121
Imported Keys ____________________________________________________________ 121 Exported Keys ____________________________________________________________121 SSH Commands___________________________________________________________ 124
Custom User Menus __________________________________________________ 125
Custom User Menu Commands_______________________________________________ 125 Example _________________________________________________________________ 127
11: PC Card 130
PC Card Commands _______________________________________________________ 136
12: Maintenance and Operation 139
SLC Maintenance ____________________________________________________ 139
Administrative Commands ___________________________________________________ 143
System Logs ________________________________________________________ 145
System Log Command______________________________________________________ 147
Audit Log ___________________________________________________________ 147 Diagnostics _________________________________________________________ 148
Diagnostic Commands______________________________________________________ 151
Status/Reports_______________________________________________________ 153
Status Commands _________________________________________________________ 155
Events _____________________________________________________________ 156
Events Commands_________________________________________________________ 157
SecureLinx SLC User Guide 6
SLC Network ________________________________________________________ 158
Equivalent SLC Network Command____________________________________________ 160
13: Application Examples 162
Telnet/SSH to a Remote Device _________________________________________ 163 Dial-in (Text Mode) to a Remote Device ___________________________________ 164 Local Serial Connection to Network Device via Telnet ________________________ 166
14: Command Reference 168
Introduction to Commands______________________________________________ 168
Command Syntax__________________________________________________________ 168 Command Line Help________________________________________________________ 169 Tips_____________________________________________________________________ 169
Administrative Commands______________________________________________ 170 Audit Log Commands _________________________________________________ 174 Authentication Commands______________________________________________ 174
Kerberos Commands _______________________________________________________ 175 LDAP Commands__________________________________________________________ 176 Local Users Commands_____________________________________________________ 177 NIS Commands ___________________________________________________________178 RADIUS Commands _______________________________________________________ 179 TACACS+ Commands ______________________________________________________ 180 User Permissions Commands ________________________________________________ 180
CLI Commands ______________________________________________________ 182 Connection Commands ________________________________________________ 184 Console Port Commands_______________________________________________ 186 Custom User Menu Commands__________________________________________ 187 Date and Time Commands _____________________________________________ 188 Device Port Commands________________________________________________ 189 Diagnostic Commands_________________________________________________ 192 End Device Commands________________________________________________ 193 Events Commands____________________________________________________ 194 Firewall Commands___________________________________________________ 195 Logging Commands___________________________________________________ 195 Network Commands __________________________________________________ 196 NFS and SMB/CIFS Commands _________________________________________ 198 PC Card Commands __________________________________________________ 200
PC Card Storage Commands ________________________________________________ 200 PC Card Modem Commands_________________________________________________ 200
Routing Commands___________________________________________________ 202 Services Commands __________________________________________________ 202 SLC Network Commands ______________________________________________ 203 SSH Key Commands__________________________________________________ 204 Status Commands ____________________________________________________ 205 System Log Commands________________________________________________ 207
A: Security Considerations 208
Security Practice _____________________________________________________ 208
SecureLinx SLC User Guide 7
Figures
Factors Affecting Security ______________________________________________ 208
B: Safety Information 209
Safety Precautions_________________________________________________________ 209
C: Adapters and Pinouts 211 D: Protocol Glossary 217 E: Compliance Information 220 F: Warranty 222
Figure 2-1. SLC - 48 Device Ports, 2 Network Ports, 1 Console Port, Dual DC Powered......14
Figure 2-2. Device Port Connections ......................................................................................16
Figure 2-3. Console Port Connection......................................................................................17
Figure 2-4. Network Connection..............................................................................................17
Figure 2-5. PC Card Interface .................................................................................................17
Figure 3-1. CAT 5 Cable Connection......................................................................................21
Figure 3-2. AC Power Input and Power Switch (SLCxxxx2N).................................................22
Figure 3-3. DC Power Inputs and Power Switch (SLCxxx24T)...............................................22
Figure 4-1. Front Panel LCD Display and Five Pushbuttons (Enter, Up, Down, Left, Right).24
Figure 4-2. Beginning of Quick Setup Script...........................................................................30
Figure 4-3. Completed Quick Setup........................................................................................32
Figure 5-1. Web Page Layout..................................................................................................34
Figure 13-1. SLC Console Manager Configuration...............................................................162
Figure 13-2. Remote User Connected to a SUN Server via the SLC...................................163
Tables
Table 2-1. SLC Models............................................................................................................13
Table 3-1. SLC Technical Specifications.................................................................................19
Table 4-1. Methods of Assigning an IP Address.....................................................................23
Table 4-2. Front Panel Setup Options with Associated Parameters.......................................25
Table 5-1. Actions and Category Options ...............................................................................37
Table 10-1. User Group Rights...............................................................................................98
Table 14-1. Actions and Category Options ...........................................................................168
SecureLinx SLC User Guide 8
11:: AAbboouutt TThhiiss GGuuiiddee
Purpose and Audience
This guide provides the information needed to install, configure, and use the product s in the Lantronix SecureLinx must remotely and securely configure and administer servers, routers, switches, telephone equipment, or other devices equipped with a serial port.
Chapter Summaries
The remaining chapters in this guide include:
Chapter Summary
2: Overview
3: Installation
4: Quick Setup
5: Web and Command Line Interfaces
TM
Console Manager (SLC) family. It is for IT professionals who
Describes the SLC models, their main features, and the protocols they support.
Provides technical specifications; describes connection formats and power supplies; provides instructions for installing the unit in a rack.
Provides instructions for getting your unit up and running and for configuring required settings.
Describes the web and command line interfaces available for configuring the unit.
Note: The configuration chapters (6-12) provide
detailed instructions for using the web interface and include equivalent command line interface commands.
5: Web and Command Line Interfaces
7: Services
SecureLinx SLC User Guide 9
Provides instructions for configuring network ports, firewall and routing settings, and the date and time.
Provides instructions for enabling and disabling system logging, SSH and Telnet logins, SNMP, and SMTP.
1: About This Guide
Chapter Summary
8: Device Ports
9: Connections
10: User Authentication
11: PC Card
12: Maintenance and Operation
13: Application Examples
14: Command Reference
A: Security Considerations
Provides instructions for configuring global device port settings, individual device port settings, and console port settings.
Provides instructions for configuring connections and viewing, updating, or disconnecting a connection.
Provides instructions for enabling or disabling methods that authenticate users who attempt to log in via SSH, Telnet, or the console port. Provides instructions for creating custom menus.
Provides instructions for entering modem settings for PC Cards and mounting and unmounting a Compact Flash-to-PC Card Adapter used as a storage device.
Provides instructions for upgrading firmware, viewing system logs and diagnostics, generating reports, and defining events. Includes information about web pages and commands used to shut down and reboot the SLC.
Shows how to set up and use the SLC in three different configurations.
Lists and describes all of the commands available on the SLC command line interface
Provides tips for enhancing SLC security.
B: Safety Precautions C: Adapters and Pinouts D: Protocol Glossary
E: Compliance Information
F: Warranty
Lists safety precautions for using the SLC. Includes adapter pinout diagrams. Lists the protocols supported by the SLC with brief
descriptions. Provides information about the SLC’s compliance with
industry standards.
SecureLinx SLC User Guide 10
1: About This Guide
Additional Documentation
The following information is available on the product CD, the Lantronix web site (www.lantronix.com), or the product itself:
SLC Quick Start Describes the steps for getting the SLC up and running;
provided on the CD and in printed form.
SLC Online Help for the Command Line Interface
SLC Online Help for the Web Interface
Detector™ Online Help Provides online help for assigning a static IP address to the
Provides online help for configuring the SLC using commands.
Provides online help for configuring the SLC using the web page.
SLC using the Detector™ tool on the product CD.
SecureLinx SLC User Guide 11
22:: OOvveerrvviieeww
SecureLinx SLC Console Managers are members of the Lantronix SecureLinx IT Management family of products. These products offer systems administrators and other IT professionals a variety of tools to securely access and manage their resources. Lantronix has been an innovator in this market with terminal servers and secure console servers, as well as other remote access devices. The SLC Console Managers build on that foundation and offer new features and capabilities.
IT equipment can be configured, administered, and managed in a variety of ways, but most devices have one method in common: an RS-232 serial port, sometimes called a console, auxiliary, or management port. These ports are often accessed directly by connecting a terminal or laptop to them, meaning that the administrator must be in the same physical location as the equipment. SLC Console Managers give the administrator a way to access them remotely from anywhere there is a network or modem connection.
Many types of equipment can be accessed and administered using Console Managers, including:
Servers: Unix, Linux, Windows 2003, and others. Networking equipment: routers, switches, storage networking. Telecom: PBX, voice switches. Other systems with serial interfaces: heating/cooling systems,
security/building access systems, UPS, medial devices.
The key benefits of using Console Managers:
Saves money: Enables remote management and troubleshooting without
sending a technician onsite. Reduces travel costs and downtime co sts.
Saves time: Provides instant access and reduces response time, improvin g
efficiency.
Simplifies access: Enables you to access equipment securely and remotely
after hours and on weekends and holidays—without having to schedule visits or arrange for off-hour access.
Protects assets: Security features provide encryption, authentication,
authorization, and firewall features to protect your IT infrastructure while providing flexible remote access.
SLC console servers provide features such as convenient text menu systems, break-safe operation, port buffering (logging), remote authentication, and Secure Shell (SSH) access. Dial-up modem support ensures access when the network is not available.
SecureLinx SLC User Guide 12
SLC Models
These SLC models offer a compact solution for remote and local management of up to 48 devices (e.g., servers, routers, and switches) with RS-232C (now EIA-232) compatible serial consoles in a 1U-tall rack space.
All models have two Ethernet ports, referred to in this User Guide as Eth1 and Eth2.
Note: One possible use for the two Ethernet ports is to have one port on a
private, secure network and the other on a public, unsecured network.
This User Guide covers the following products:
Part Number Model and Description
2: Overview
Table 2-1. SLC Models
SLC00812N-02 SLC01612N-02 SLC03212N-02 SLC04812N-02
SLC00822N-02 SLC01622N-02 SLC03222N-02 SLC04822N-02
SLC00824T-02 SLC01624T-02 SLC03224T-02
SLC8: 8 port, Single AC Supply Secure Console Manager SLC16: 16 Port, Single AC Supply Secure Console Manager SLC32: 32 Port, Single AC Supply Secure Console Manager SLC48: 48 Port, Single AC Supply Secure Console Manager
SLC8: 8 Port, Dual AC Supply Secure Console Manager SLC16: 16 Port, Dual AC Supply Secure Console Manager SLC32: 32 Port, Dual AC Supply Secure Console Manager SLC48: 48 Port, Dual AC Supply Secure Console Manager
SLC8: 8 Port, Dual DC Supply Secure Console Manager SLC16: 16 Port, Dual DC Supply Secure Console Manager SLC32: 32 Port, Dual DC Supply Secure Console Manager
SLC04824T-02
The products differ only in the number of device ports provided and in AC or DC power availability. Some models have dual entry redundant power supplies for mission critical applications. They are available in AC or DC powered versions. The following figure depicts the SLC48; the other models are similar.
SecureLinx SLC User Guide 13
SLC48: 48 Port, Dual DC Supply Secure Console Manager
Figure 2-1. SLC - 48 Device Ports, 2 Network Ports, 1 Console Port, Dual DC Powered
2: Overview
Two-Line LCD Display
Two 10/100 Network Ports
System Features
Front Panel Pushbuttons
RS-232 Device Ports (1-48) On/Off Switch Dual DC Power Input
1U Tall, Self-Contained Rack-Mountable Chassis
Two PC Card Slots
Console Port (RS-232)
The SLC has the following capabilities:
Connects up to 48 RS-232 serial consoles 10Base-T/100Base-TX Ethernet network compatibility Buffer logging to file Email and SNMP notification ID/Password security, configurable access rights Secure shell (SSH) security; supports numerous other security protocols Network File System (NFS) and Common Internet File System (CIFS) support Telnet or SSH to a serial port by IP address per port or by IP address and TCP
port number
Configurable user rights for local and remotely authenticated users Supports an internal PC Card modem or an external modem No unintentional break ever sent to attached servers (Solaris Ready) Simultaneous access on the same port - "listen" and "direct" connect mode Local access through a console port Web administration (using most browsers)
SecureLinx SLC User Guide 14
Protocols Supported
The SLC supports the TCP/IP network protocol as well as:
SSH, Telnet, PPP, NFS, and CIFS for connections in and out of the SLC SMTP for mail transfer. DNS for text-to-IP address name resolution SNMP for remote monitoring and management FTP and SFTP for file transfers and firmware upgrades TFTP for firmware upgrades DHCP and BOOTP for IP address assignment HTTPS (SSL) for secure browser-based configuration NTP for time synchronization LDAP, NIS, RADIUS, CHAP, PAP, Kerberos, and TACACS+ for user
authentication
For brief descriptions of these protocols, see D: Protocol Glossary.
2: Overview
Access Control
The system administrator controls access to attached servers or devices by assigning access rights to up to 128 user profiles. Each user has an assigned ID, password, and access rights. Other user profile access options may include externally configured authentication methods such as NIS and LDAP.
Device Port Buffer
The SLC supports real-time data logging for each device port. The port can save the data log to a file, send an email notification of an issue, or take no action.
You can define the path for logged data on a port-by-port basis, configure file size and number of files per port for each logging event, and configure the device log to send an email alert message automatically to the appropriate parties indicating a particular error.
Configuration Options
You may use the backlit front-panel LCD display for initial setup and later to view and configure current network, console, and date/time settings.
Both a web interface viewed through a standard browser and a command line interface (CLI) are available for configuring the SLC settings and monitoring performance.
SecureLinx SLC User Guide 15
Hardware Features
The SLC hardware includes the following:
1U-tall (1.75 inches) rack-mountable secure console server Two 10Base-T/100Base-TX network ports Up to 48 RS-232 serial device ports connected via Category 5 (RJ45) wiring One serial console port for VT100 terminal or PC with emulation Two PC Card slots 256 Kbytes-per-port buffer memory for device ports LCD display and keypad on the front Universal AC power input (100-240V, 50/60 Hz); options include single input,
single supply or dual input, redundant supplies
-48 VDC power input, dual input, redundant power supplies Convection cooled, silent operation, low power consumption
Note: For more detailed information, see Technical Specifications on page 19.
2: Overview
All physical connections use industry-standard cabling and connectors. The network and serial ports are on the rear panel of the SLC, and the console port is on the front. Required cables and adapters for certain servers, switche s, and oth er products are available from Lantronix (see www.lantronix.com).
Serial Connections
All devices attached to the device ports and the console port must support the RS-232C (EIA-232) standard. Category 5 cabling with RJ45 connections is used for the device port connections and for the console port. (For pinout information, see C: Adapters and
Pinouts.)
Note: RJ45 to DB9/DB25 adapters are available from Lantronix.
Device ports and the console port support eight baud-rate options: 300, 600, 1200, 2400, 4800, 9600, 19200, 38400, 57600, and 115200 baud.
Figure 2-2. Device Port Connections
SecureLinx SLC User Guide 16
2: Overview
Figure 2-3. Console Port Connection
Network Connections
The SLC network interfaces are 10Base-T/100Base-TX connectors for use with a conventional Ethernet network. Use standard RJ45-terminated Category 5 cables. Network parameters must be configured before the SLC can be accessed over the network.
Figure 2-4. Network Connection
PC Card Interface
The SLC has two PC Card slots. Lantronix qualifies cards continuously and publishes a list of qualified cards on the Lantronix web site.
Figure 2-5. PC Card Interface
SecureLinx SLC User Guide 17
33:: IInnssttaallllaattiioonn
This chapter provides a high-level procedure for installing the SLC followed by more detailed information about the SLC connections and power supplies.
Caution: To avoid physical and electrical hazards, please be sure to read
B: Safety Information before installing the SLC.
What’s in the Box
In addition to the SLC, the box contains the following items:
Part # Component Description
Adapters:
200.2066A
200.2067A
200.2069A
200.2070A Adapter: DB9F (DCE) to RJ45, HP9000, SGI Origin, IBM RS6000, and
200.2225
Note: An optional adapter for external modems is also available from Lantronix: 200.2073
Adapter: DB25M (DCE) to RJ45, external modems.
Adapter: DB25M (DCE), Sun w/DB25 female Adapter: DB25F (DCE) to RJ45, Sun w/DB25 male and some HP9000’s Adapter: DB9M (DCE) to RJ45, SGI Onyx
PC-based Linux servers Adapter: RJ45 to RJ45 rolled, Cisco, and Sun Netra
Cables:
200.0063 500-153
Power Cords: 500-041
083-011 For dual DC models: one accessory kit, containing DC plug connectors and
Documentation: CD Case Quick Start Guide and CD_ROM containing the SecureLinx Console Manager
Cable: RJ45 to RJ45, 6.6 ft (2 m) Cable: Loopback
For single AC models: one AC power cord For dual AC models: two AC power cords
instructions
User Guide
Verify and inspect the contents of the SLC package using the enclosed packing slip or the table above. If any item is missing or damaged, contact your place of purchase immediately.
SecureLinx SLC User Guide 18
Product Information Label
The product information label on the underside of the unit contains the following information about each specific unit:
Part Number Serial Number Bar Code Serial Number and Date Code Regulatory Certifications and Statements
Technical Specifications
Table 3-1. SLC Technical Specifications
3: Installation
Serial Interface (Device)
Serial Interface (Console)
Network Interface Power Supply Universal AC power input: 100-240 VAC, 50 or 60 Hz
Power Consumption Dimensions Weight Temperature
Relative Humidity
Heat Flow Rate 68 BTU per hour
RJ45-type 8-conductor connector (DTE) Speed software selectable (300 to 115,200 baud)
RJ45-type 8-pin connector (DTE) Speed software selectable (300 to 115,200 baud)
10Base-T/100Base-TX RJ45 Ethernet
IEC-type regional cord set included
DC power input :
-24 to -60 VDC Less than 20 watts 1U, 1.75 in x 17.25 in x 12 in 10 lbs or less, depending on the options Operating: 0 to 50 °C (32 to 122 °F), 30 to 90 %RH, non-condensing
Storage: -20 to 70 °C (-4 to 158 °F), 10 to 90 %RH, non-condensing Operating: 10% to 90% non-condensing; 40% to 60% recommended
Storage: 10% to 90% non-condensing
You can install the SLC either in an EIA-standard 19-inch rack (1U tall) or as desktop unit. The SLC uses convection cooling to dissipate excess heat.
SecureLinx SLC User Guide 19
Physical Installation
To install the unit in a rack:
1. Place the unit in a 19-inch rack.
Warning: Be careful not to block the air vents on the sides of the unit. If
you mount the SLC in an enclosed rack, we recommended that the rack have a ventilation fan to provide adequate airflow through the unit.
2. Connect the serial device(s) to the SLC device ports. See Connecting to a Device
Port on page 20.
3. Install any PC Cards you intend to use. If you install a modem card, connect to the phone line. See 11: PC Card.
4. You have the following options: a) To configure the SLC using the network, or to monitor serial devices on the
network, connect at least one SLC network port to a network. See Connecting
to a Network Port on page 21.
b) To configure the SLC using a dumb terminal or a computer with terminal
emulation, connect the terminal or PC to the SLC console port. See
Connecting a Terminal on page 21.
3: Installation
5. Connect the power cord, and apply power. See Power on page 22.
6. Wait approximately a minute and a half for the boot process to complete.
When the boot process ends, the SLC host name and the clock appear on the LCD display.
Now you are ready to configure the network settings as described in 4: Quick Setup.
Connecting to a Device Port
You can connect any device that has a serial console port to a device port on the SLC for remote administration. The console port must support the RS-232C interface.
Note: Many servers must either have the serial port enabled as a console or the
keyboard and mouse detached. Consult the server hardware and/or software documentation for more information.
To connect to a device port:
1. Connect one end of the Cat 5 cable to the device port.
2. Connect the other end of the Cat 5 cable to a Lantronix serial console adapter.
Note: To connect a device port to a Lantronix SLP, use the rolled serial cable p rovided
with the unit, a 200.2225 adapter and Cat 5 cabling, or the ADP010104 adapter that eliminates the need for an additional Cat5 patch cable between the adapter and the connected equipment. See C: Adapters and Pinouts for more information about Lantronix adapters.
3. Connect the adapter to the serial console of the serial device.
SecureLinx SLC User Guide 20
3: Installation
Figure 3-1. CAT 5 Cable Connection
Connecting to a Network Port
The SLC’s network ports (10Base-T/100Base-TX) allow remote access to the attached devices and the system administrative functions. Use a standard RJ45-terminated Category 5 cable to connect to the network port.
Note: One possible use for the two Ethernet ports is to have one port on a
private, secure network, and the other on an unsecured network.
Connecting a Terminal
The console port is for local access to the SLC and the attached devices. You may attach a dumb terminal or a computer with terminal emulation to the console port. The SLC console port uses RS-232C protocol and supports VT100 em ulation. The default baud rate is 9600.
To connect the console port to a terminal or computer with terminal emulation, Lantronix offers optional adapters that provide a connection between an RJ45 jack and a DB9 or DB25 connector. The console port is configured as DTE. For more information, see C: Adapters and Pinouts and our web site at www.lantronix.com/support. and click
Cable/Adapter Lookup on the Support menu.
.
To connect a terminal:
1. Attach the Lantronix adapter to your terminal (use PN 200.2066A adapter) or your PC's serial port (use PN 200.2070A adapter).
2. Connect the Cat 5 cable to the adapter, and connect the other end to the SLC console port.
3. Turn on the terminal or start your computer’s communication program (e.g., HyperTerminal for Windows).
4. Once the SLC is running, press Enter to establish connection. You should see the model name and a login prompt on your terminal. You are connected.
SecureLinx SLC User Guide 21
3: Installation
Power
The SLC consumes less than 20W of electrical power.
AC Input
The SLC has a universal auto-switching AC power supply. The power supply accepts AC input voltage between 100 and 240 VAC with a frequency of 50 or 60 Hz. Rear-mounted IEC-type AC power connector(s) are provided for universal AC power input (North American cord provided).
The SLC0xx12N models have a single supply/input, while the SLC0xx22N models have dual inputs and dual supplies. The power connector also houses a repla ce able protective fuse (fast-blow 4.0A, maximum 250V AC) and the on/off switch. In addition, we provide the SLC0xx22N with a “Y” cord. (See SLC Models on page 13.)
Figure 3-2. AC Power Input and Power Switch (SLCxxxx2N)
Note: The SLC48 with dual AC does not have an on/off switch.
DC Input
The DC version of the SLC accepts standard –48 VDC power. The SLC0xx24T models accept two DC power inputs for supply redundancy. Lantronix provides the DC power connections using industry standard Wago connectors. One set of connectors is included with the SLC. You can order additional connectors (part number 721-103/031-0 00) from the Wago catalog:
http://www.wagocatalog.com/okv3/index.asp?lid=1&cid=1&str_from_home=first
Figure 3-3. DC Power Inputs and Power Switch (SLCxxx24T)
SecureLinx SLC User Guide 22
44:: QQuuiicckk SSeettuupp
This chapter helps get the IP network port up and running quickly, so you can administer the SLC using your network. To set up the network connections quickly, we suggest you do one of the following:
Use the front panel LCD display and pushbuttons. Complete the Quick Setup web page on the web interface. SSH to the command line interface and follow the Quick Setup script on the
command line interface.
Connect to the console port and follow the Quick Setup script on the command
line interface.
Note: The first time you power up the SLC, Eth1 tries to obtain its IP
address via DHCP. If you have connected Eth1 to the network, and Eth1 is able to acquire an IP address, you can view this IP address on the LCD or by running the Detector tool on the product CD. If Eth1 cannot acquire an IP address, you cannot use Telnet, SSH, or the web interface to run Quick Setup.
IP Address
Your SLC must have a unique IP address on your network. The system administrator generally provides the IP address and corresponding subnet mask and gateway. The IP address must be within a valid range, unique to your network, and in the same subnet as your PC.
You have the following options for assigning an IP address to your unit.
Table 4-1. Methods of Assigning an IP Address
Method Description
DHCP
BOOTP Detector
A DHCP server automatically assigns the IP address and network settings. The SLC is DHCP-enabled by default.
With the Eth1 network port connected to the network, and the SLC powered up, Eth1 acquires an IP address, viewable on the LCD.
At this point, you can Telnet into the SLC, or use the web interface.
Similar to DHCP but for smaller networks. A Windows-based application on the product CD for viewing a
DHCP-provided IP address or for assigning a static IP address to the SLC. You can use Detector only if you have not already assigned a static IP address by another method. For more information, see Detector’s online help.
SecureLinx SLC User Guide 23
Method Description
Front panel LCD display and pushbuttons
You manually assign the IP address and other basic network, console, and date/time settings. If desired, you can restore the factory defaults.
4: Quick Setup
Serial port login to command line interface
You assign an IP address and configure the SLC using a terminal or a PC running a terminal emulation program to the unit’s serial console port connection.
Method #1 Using the Front Panel Display
Before You Begin
Make sure you know:
An IP address that will be unique and valid on your network (unless automatically
assigned)
Subnet mask (unless automatically assigned) Gateway DNS settings Date, time, and time zone Console port settings: baud rate, data bits, stop bits, parity, and flow control
Make sure the SLC is plugged in to power and turned on.
Front Panel LCD Display and Pushbuttons
With the SLC powered up, you can use the front panel display and pushbuttons to set up the basic parameters.
Figure 4-1. Front Panel LCD Display and Five Pushbuttons
(Enter, Up, Down, Left, Right)
The front panel display initially shows the host name and the date and time. Using the five pushbuttons, you can change the network, console port, and date/time settings and view the firmware release version. If desired, you can restore the factory defaults.
Note: Have your information handy as the display times out without accepting
any unsaved changes if you take more than 30 seconds betwee n entries.
SecureLinx SLC User Guide 24
4: Quick Setup
Any changes made to the network, console port, and date/time settings take effect immediately.
Navigating
The front panel has one Enter button (in the center) and four arrow buttons (up, left, right, and down). Press the arrow buttons to navigate from one option to another, or to
increment or decrement a numerical entry of the selected option. Use the Enter button to select an option to change or to save your settings.
Action Button
To move to the next option (e.g., from Network Settings to Console Settings)
right arrow
up/down arrow
To return to the previous option
To enter edit mode
Within edit mode, to increase or decrease a numerical entry
Within edit mode, to move the cursor right or left
To exit edit mode
To scroll up or down the list of parameters within an option (e.g., from IP Address to Mask)
Table 4-2. Front Panel Setup Options with Associated Parameters
Normal Network
Settings
right/left arrow
Console Settings
Date / Time Settings
Eth1 IP Address Time Zone Eth1 Subnet Mask Date/Time Gateway DNS1 DNS2 DNS3
Baud Rate Data Bits Stop Bits Parity Flow Control
left arrow
Enter (center button)
up and down arrows
right or left arrows
Enter
up and down arrows
Release
Firmware version and date code (display only)
Restore Factory Defaults
Entering the Settings
To enter setup information:
1. From the normal display (host name, date and time), press the right arrow button to display Network Settings. The IP address for Eth1 displays.
SecureLinx SLC User Guide 25
4: Quick Setup
Note: If you have connected Eth1 to the network, and Eth1 is able to acquire
an IP address through DHCP, this IP address displays, followed by the letter [D]. Otherwise, the IP address displays as all zeros (000.000.000.000).
2. Press the Enter button on the keypad to enter edit mode. A cursor displays below one character of the existing IP address setting.
3. To enter values:
Use the left or right arrow to move the cursor to the left or to the right position. Use the up or down arrow to increment or decrement the numerical value.
4. When you have the IP address as you want it, press Enter to exit edit mode, and then press the down arrow button. The Subnet Mask parameter displays.
Note: You must edit the IP address and the Subnet Mask together for a valid
IP address combination.
5. To save your entries for one or more parameters in the group, press the right arrow button. The Save Settings? Yes/No prompt displays.
Note: If the prompt does not display, make sure you are no longer in edit
mode.
6. Use the left/right arrow buttons to select Yes, and press the Enter button.
7. Press the right arrow button to move to the next option, Console Settings.
8. Repeat steps 2-7 for each setting.
9. Press the right arrow button to move to the next option, Date/Time Settings, and click Enter to edit the time zone.
a) To enter a US time zone, use the up/down arrow buttons to scroll through the
US time zones, and then press Enter to select the correct one.
b) To enter a time zone outside the US, press the left arrow button to move up to
the top level of time zones. Press the up/down arrow button to scroll through the top level.
A time zone with a trailing slash (such as Africa/) has sub-time zones. Use the
right arrow button to select the Africa time zones, and then the up/down arrows to scroll through them.
Press Enter to select the correct time zone. To move back to the top-level time zone at any time, press the left arrow.
10. To save your entries, press the right arrow button. The Save Settings? Yes/No prompt displays.
Note: If the prompt does not display, make sure you are no longer in edit
mode.
11. Use the left/right arrow buttons to select Yes, and press the Enter button.
12. To review the saved settings, press the up or down arrows to step through the current settings.
When you are done, the front panel returns to the clock display. The network port resets to the new settings, and you can connect to your IP network for further administration. You should be able to Telnet or SSH to the SLC through your network connection, or access the web interface through a web browser.
SecureLinx SLC User Guide 26
Restoring Factory Defaults
To use the LCD display to restore factory default settings:
1. Press the right arrow button to move to the last option, Release.
2. Use the down arrow to move to the Restore Factory Defaults option. A prompt for the 6-digit Restore Factory Defaults password displays.
3. Press Enter to enter edit mode.
4. Using the left and right arrows to move between digits and the up and down arrows to change digits, enter the password (the default password is 999999).
Note: The Restore Factory Defaults password is only for the LCD. You can change
it at the command line interface using the admin keypad password command.
5. Press Enter to exit edit mode. If the password is valid, a Save Settings? Yes/No prompt displays.
6. To initiate the process for restoring factory defaults, select Yes. When the process is complete, the SLC reboots.
Method #2 Quick Setup on the Web Page
4: Quick Setup
After the unit has an IP address, you can use the Quick Setup web page to configure the remaining network settings. This page displays the first time you log into the SLC only. Otherwise, the SLC Home Page displays. (For information about the web interface, see
Web Interface on page 33.)
To complete the Quick Setup page:
1. Open a web browser (Netscape Navigator 6.x and above or Internet Explorer 5.5. and above, with JavaScript enabled).
2. In the URL field, type https:// followed by the IP address of your SLC.
3. Log in using sysadmin as the user name and PASS as the password. The first time you log in to the SLC, the Quick Setup page automatically displays. Otherwise, the Home page displays.
Note: To open the Quick Setup page at another time, click Quick Setup on the main
menu on the left.
SecureLinx SLC User Guide 27
4: Quick Setup
4. To accept the defaults, select the Accept default Quick Setup settings checkbox in the top portion of the page and click Apply at the bottom of the page. Otherwise, continue with step 5.
Note: Once you click Apply on the Quick Setup page , you can continue
using the web interface to configure the SLC further.
5. Enter the following:
Network Settings
Obtain from DHCP
Obtain from BOOTP
Specify
IP Address (if
specifying)
Acquires IP address, subnet mask, and gateway from the DHCP server. (The DHCP server may not provide the gateway, depending on its setup.) By default, both Eth1 and Eth2 are enabled. If you select DHCP, skip to Default Gateway.
Lets a network node request configuration information from a BOOTP "server" node. If you select this option, skip to Default Gateway.
Lets you manually assign a static IP address, generally provided by the system administrator.
Enter an IP address that will be unique and valid on your network. There is no default.
Enter all IP addresses in dot-quad notation. Do not use leading zeros in the fields for dot-quad numbers less than
100. For example, if your IP address is 172.19.201.28, do not enter 028 for the last segment.
Note: Currently, the SLC does not support configurations
with the same IP subnet on multiple interfaces (Ethernet or PPP).
SecureLinx SLC User Guide 28
4: Quick Setup
Subnet Mask
Default Gateway
Hostname The default host name is slc. There is a 64-character limit
Domain
If specifying an IP address, enter the subnet mask specifying the network segment on which the SLC resides. There is no default.
The IP address of the router for this network. There is no default.
(contiguous characters, no spaces).
Note: The host name becomes the prompt in the
command line interface.
If desired, specify a domain name (for example, support.lantronix.com).
Date & Time Settings
Change Date/Time
Date
Time
Time Zone
Select the checkbox to manually enter the date and time at the SLC’s location.
From the drop-down lists, select the current month, day, and year.
From the drop-down lists, select the current hour and minute.
From the drop-down list, select the appropriate time zone.
Administrator Settings
Sysadmin Password/ Retype Password
6. To save your entries, click Apply.
To change the password (e.g., from the default) enter a password of up to 64 characters.
SecureLinx SLC User Guide 29
4: Quick Setup
Method #3 Quick Setup on the Command Line Interface
If the SLC does not have an IP address, you can connect a dumb terminal or a PC running a terminal emulation program (VT100) to access the command line interface. (See Connecting a Terminal on page 21.) If the unit has an IP address, you can use SSH or Telnet to connect to the SLC.
Note: By default, Telnet is disabled and SSH is enabled. To enable Telnet, use the
Services web page (see 7: Services), a serial terminal connection, or an SSH connection.
To complete the command line interface Quick Setup script:
1. Do one of the following:
With a serial terminal connection, power up, and when the command line
displays, press Enter.
With a network connection, use an SSH program or Telnet program (if Telnet has
been enabled) to connect to xx.xx.xx.xx (the IP address in dot quad notation), and press Enter. You should be at the login prompt.
2. Enter sysadmin as the user name and press Enter.
3. Enter PASS as the password and press Enter. The first time you log in, the Quick Setup script runs automatically. Normally, the command prompt displays.
Figure 4-2. Beginning of Quick Setup Script
Welcome to the SecureLinx Console Manager
Model Number: SLC48
Quick Setup will now step you through configuring a few basic settings.
The current settings are shown in brackets ('[]').
You can accept the current setting for each question by pressing <return>.
4. Enter the following information at the prompts:
Note: To accept a default or to skip an entry that is not required, press
Enter.
Configure Eth1
Select one of the following: <1> obtain IP Address from DHCP: The unit will acquire
the IP address and gateway from the DHCP server. (The DHCP server may or may not provide the gateway, depending on its setup.) This is the default setting.
<2> obtain IP Address from BOOTP: Permits a network node to request configuration information from a BOOTP "server" node.
<3> static IP Address: Allows you to assign a static IP address manually. The IP address is generally provided by the system administrator.
SecureLinx SLC User Guide 30
Loading...
+ 192 hidden pages