Lantronix® is a registered trademark and SLM™, vSLM™ and DeviceInstaller™ar
Lantronix, Inc.
Windows® and Internet Explorer® are registered trademarks of Microsoft Corporation. Mozilla®
and Firefox® are registered trademarks
Google. Opera™ is a trademark of Opera Software ASA. Tera Term is a registered trademark of
, Inc. All other trademarks and trade names are the property of their respective holders.
Vector
Open Source Software
Some applications are Open Source software licensed under the Berkeley Software Distribution
(BSD) license or the GNU General Public License (GPL) as published by the Free Software
Foundation (FSF). Redistribution or incorporation of BSD or GPL licensed software into hosts
other than this product must be done under their terms. A machine readable copy of the
corresponding portions of GPL licensed source code is available at the cost of distribution.
Such Open Source Software is distributed
IMPLIED WARRANTY OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE.
See the GPL and BSD for details.
A copy of the licenses is available from Lantronix. The
http://www.gnu.org/licenses/.
Warranty
For details on the Lantronix warranty policy, please go to our web site at
www.lantronix.com/support/warranty.
e trademarks of
of the Mozilla Foundation. Chrome™ is a trademark of
For a current list of our domestic and international sales offices, go to the Lantronix web site at:
www.lantronix.com/about/contact
SLM User Guide2
www.lantronix.com/support
Disclaimer
The information in this guide may change without notice. The manufacturer assumes no
responsibility for any errors that may appear in this guide.
Operation of this equipment in a residential area is
user, at his or her own expense, will be required to take whatever measures may be required to
correct the interference.
Note:Th
is equipment has been tested and found to comply with the limits for Class A
digital device pursuant to Part 15 of the FCC Rules. These limits are designed to provide
reasonable protection against harmful interference when the equipment is operated in a
commercial environment. This equipm e nt generates, uses, and can radiate radio
frequency energy and, if not installed and used in accordance with this User Guide, may
clause interference to radio communications. Operation of this equipment in a residential
area is likely to cause interference, in which case the user will be required to correct the
interference at his or her own expense.
The user is cautioned that changes and modifications mad
the manufacturer could void the user's authority to operate this equipment.
Changes or modifications to this device not explic
authority to operate this device.
The information in this guide may change with
responsibility for any errors that may appear in this guide.
Revision History
Date Rev. Comments
September 2005 AInitial Release
June 2006BUser Interface Enhancements:
likely to cause interference, in which case the
e to the equipment without approval of
itly approved by Lantronix will void the user's
out notice. The manufacturer assumes no
Improved usability (device/port search,
Management Detector for setup, updated webSSH applet, with increased scroll
buffer, cut-and-paste capabilities, and font size adjustments).
Simplified ‘end-device only’ view for users with a minimum of privileges.
improved UI, Secure Lantronix
July 2006CAdded capabilities:
December 2006DAdded capabilities:
SLM User Guide3
Expanded managed device (end-device) integration:
Integration of SLK and SLP to the device port level.
Device-type dependent processing and views.
Enable, disable, and prioritization of local user authentication; additional (2) polled
N
TP servers; additional two (2) NIS slave servers; auto-detection of SCSxx00
devices; assignment of managed groups to selected ports, and automatic system
backup increased up to 8 SLMs.
Modifications to GUI and command line interfaces.
IPv4 Filters; modem management; vi
administration; uploading passwords in bulk; additional search options; get/put
SSH keys; new triggers for events; device folder state management; session
termination; discovery protocol using multicast.
rtual managed devices for easier
Date Rev. Comments
April 2007EAdded capabilities:
Access SLM by mobile phone; discover USB modems; view session log files;
ch
ange SNMP settings for SLPs in bulk; connect directly to the port of an SLC or
SLB; apply power to multiple ports on an SLP; view port logs, make a web channel
connection to an SLC; update SLM and SLP firmware; read SLC information to the
SLM database; create banners for the CLI.
November 2007FAdded capabilities:
More Ethernet devices to manage (SLB, WiBox, UDS, Spider); IPsec
nagement (IKE Policies and VPN Connections); SecurID authentication; WiBox
Ma
and UDS firmware updates; enhanced SLM update feature; port access for SLC,
SLB, SLP and Spider); SLM proxy; additional trigger types for events; more file
types to manage.
April 2008GAdded capabilities:
Persistent connection, keep alive, TN3270, and call back.
April 2011HNew look and feel, add support for XPort, EDS, EDS-MD, Premier Wave, UDS
connections, individual keystroke loggins, improved Spider support, use FQDN in
place of IP, device locator, UDS port access, UDS applet add, SLC connection
management.
Firmware version 3.4
October 2012IUpdated to include the virtual SLM for firmware release 3.4b.
SLM User Guide4
Table of Contents
List of Figures ____________________________________________________________14
List of Tables _____________________________________________________________19
Benefits _________________________________________________________________27
IT Management Application _________________________________________________28
Firmware ________________________________________________________________29
Protocols Supported _______________________________________________________29
SLM Hardware ___________________________________________________________30
Product Information Label ___________________________________________________30
SLM-01 and SLM-02 Package Contents ________________________________________31
3: Quick Setup 32
Installing the SLM _________________________________________________________32
Connecting a Terminal to the Console Port __________________________________32
Connecting to a Network Port _____________________________________________33
Connecting to the Power Supply __________________________________________33
Monitoring the LEDs ____________________________________________________33
Required Information ___________________________________________________34
Using Detector ________________________________________________________34
Using Quick Setup on the Command Line Interface ____________________________37
Using the Web Interface _________________________________________________39
Web Interface ____________________________________________________________48
Logging in ____________________________________________________________48
Typical SLM Web Page _________________________________________________49
Notes _______________________________________________________________50
Web Page Help _______________________________________________________51
Logging Out of the Web Interface __________________________________________52
Command Line Interface (CLI) _______________________________________________52
Logging into the CLI ____________________________________________________52
Commands ___________________________________________________________53
Command Help ________________________________________________________54
Tips _________________________________________________________________54
Logging Out of the CLI __________________________________________________54
CLI Commands ___________________________________________________________55
Session Commands _______________________________________________________55
Step 1: Configure Network Settings ___________________________________________57
Step 2: Define Authentication Methods ________________________________________57
Step 3: Set Up User Account Groups a
Step 4: Auto-Detect Devices ________________________________________________58
Step 5: Associate Account Groups with Ether
Step 6: Manage Devices ___________________________________________________58
Step 7: Maintain the SLM ___________________________________________________58
nd Accounts ______________________________57
net and Managed Devices ______________58
7: Network and Modem Settings 60
IP Address and Other Required Information _____________________________________60
Using the Web Interface ____________________________________________________61
Network Port(s) ___________________________________________________________62
Internet Key Exchange (IKE) Policies _______________________________________78
Viewing a List of IKE Policies _____________________________________________78
Adding an IKE Policy: ___________________________________________________80
Updating or Deleting an IKE Policy ________________________________________82
VPN Connections _________________________________________________________83
Viewing a List of VPNs __________________________________________________83
Adding a VPN _________________________________________________________84
Updating or Deleting a VPN ______________________________________________85
Connecting a VPN _____________________________________________________86
Modem Management ______________________________________________________86
Viewing a List of Modems ________________________________________________86
Configuring a Modem ___________________________________________________87
Enabling or Disabling Dial-in Connections ___________________________________89
Viewing a List of Profiles ________________________________________________89
Adding a Profile _______________________________________________________90
Updating and Deleting a Profile ___________________________________________93
Discovering a USB Modem ______________________________________________93
Modem Commands ________________________________________________________94
Dial Account Commands ____________________________________________________95
8: User Management 99
User Authentication Methods ________________________________________________99
Account Group Types __________________________________________________117
Viewing Account Groups _______________________________________________118
Adding an Account Group ______________________________________________118
Updating or Deleting an Account Group ____________________________________119
Setting Password Requirements for User Accounts ___________________________119
Assigning Account Group Device Rights ___________________________________121
Viewing Currently Logged-In Accounts ________________________________________123
Account Group Commands _________________________________________________124
Accounts _______________________________________________________________125
Adding an Account to the Administrators Account Group _______________________127
Adding an Account to an Ethernet or Managed Device Account Group ____________129
Updating or Deleting an Account _________________________________________131
Account Commands ______________________________________________________132
Applying Power to SLP Ports on a Single Device _____________________________186
Viewing Port Logs _____________________________________________________187
Port Commands _________________________________________________________188
156
SLM User Guide8
Table of Contents
10: Managed Devices 190
Managed Device Groups __________________________________________________191
Viewing All Managed Devices ___________________________________________191
Viewing Managed Device Groups ________________________________________192
Adding a Managed Device Group ________________________________________193
Updating or Deleting a Managed Device Group ______________________________193
Configuring Polling Settings ________________________________________________
Managed Device Group Commands __________________________________________195
Connecting to a Managed Device ____________________________________________195
Creating Individual Managed Devices _________________________________________197
From a Port __________________________________________________________198
From a Ports List _____________________________________________________199
From an Ethernet Device _______________________________________________201
Fusing Managed Devices __________________________________________________202
Methods of Fusing ____________________________________________________202
Fusing a Port with an Existing Managed Device _____________________________202
Fusing an Ethernet Device with an Existing
Continuing the One-at-a-Time Fusion Process ______________________________204
Fusing Managed Devices on the Managed Device Group Page _________________204
Configuring a Modem Connection to a Managed Device _______________________206
Configuring a Managed Device ______________________________________________207
Updating or Deleting a Managed Device ___________________________________208
Managed Device Commands _______________________________________________208
Administrators, Ethernet Account Users and Menu Only Users __________________ 208
Searching for Ethernet Devices, Ports, Persistent Connections,
Managed Devices, and Users _______________________________________________214
Search for an Ethernet Device ___________________________________________215
Search for Ports ______________________________________________________217
Search for Persistent Connections ________________________________________219
Search for Managed Devices ____________________________________________219
Search for Users ______________________________________________________220
Using Wildcards ______________________________________________________222
Search Commands _______________________________________________________222
Connecting to Ethernet and Managed Devices __________________________________224
Managed Devices - Connection Methods ___________________________________225
Browsing to an Ethernet or Managed Device's Web Page _________________________225
Making a Secure Channel Connection to an SLC, SLM, or SLB _________________226
SLM User Guide9
Table of Contents
Making an SSH Connection to an Ethernet or Managed Device _________________227
Making a Web Channel Connection to an SLC ______________________________228
Setting up NFS _______________________________________________________278
Setting up CIFS ______________________________________________________279
Setting up Log Properties _______________________________________________281
Logging Commands ______________________________________________________283
12: Using SLM on a Mobile Browser 288
Requirements ___________________________________________________________288
Using the SLM Mobile Browser ______________________________________________288
Logging in to the SLM __________________________________________________288
Using Links to Select Options ____________________________________________289
Using the Keypad to Select Options _______________________________________289
Obtaining More Data __________________________________________________289
Logging Out _________________________________________________________290
Main Menu _____________________________________________________________291
Status Menu ____________________________________________________________292
System Information ____________________________________________________292
Security Practice _________________________________________________________360
Factors Affecting Security __________________________________________________360
Available Services and Port Numbers _________________________________________360
This guide provides the information needed to install, configure, and use the Secure Lantronix
Management Appliance (SLM) which includes the SLM-01, SLM-02 and the vSLM. The SLM
enables IT professionals to remotely and securely configure and administer multiple Lantronix and
non-Lantronix devices.
Chapter Summaries
The remaining chapters in this guide include:
Chapter Description
Chapter 2: IntroductionDescribes the SLM’s main features and the protocols it supports.
Chapter 3: Quick SetupProvides instructions for getting your unit up and running.
Chapter 4: Virtual SLM DeploymentDescribes the differences between the SLM-01 and SLM-02 and
Chapter 5: Web and Command Line
Interfaces
Chapter 6: Configuration and Operation
Overview
Chapter 7: Network and Modem Settings Provides instructions on enterin
Chapter 8: User ManagementProvides instructions for configuring user authentication methods
Chapter 9: Ethernet Device
Management
Chapter 10: Managed DevicesExplains how to add, update, and delete Managed Device
Describes connection formats and power supplies and how to
configure network, date, and time settings so you can use the
SLM on the network.
the virtual version of SLM (vSLM). Provides directions on how to
deploy vSLM.
Describes the web and command line interfaces available for
uring the unit.
config
Note: The configuration chapters (6-9) provide detailed
instructions for using the web interface and include command
line interface commands.
Outlines the process of setting up and using the SLM and
explains the responsibilities of administrators and other user
groups.
g network, date, and time
information.
and setting up user accounts and account groups.
Provides instructions for detecting devices on the network,
entering information about the devices and ports, granting read/
write permissions for devices and ports, and auto-saving an SLM
configuration to another SLM.
ups as well as how to create and "fuse" individual managed
Gro
devices. Provides information about connecting to and
configuring managed devices via the SLM.
SLM User Guide23
1: About This Guide
Chapter (continued)Description
Chapter 11: Operation and Maintenance Explains how the user can search for devices, access notes and
logs about the SLC and its ports, and open the SLC, SLP, SLK
and SLC interfaces using SSH, secure channel (SLC only), or a
browser.
Provides instructions for upgrading firmware, viewing system
logs and diagnostics, and generating reports. Includes
information about web pages and commands used to shut down
and reboot the SLM.
Chapter 12: Using SLM on a Mobile
Browser
Appendix A: Command ReferenceLists and describes all of the commands used on the SLM
Appendix B: Security ConsiderationsProvides tips for enhancing SLM security.
Appendix C: Safety InformationLists safety precautions for using the SLM.
Appendix D: Technical SpecificationsLists information about the SLM hardware.
Appendix E: ComplianceProvides information about the SLM's compliance with industry
Provides instructions for accessing and monitoring the SLM
g a mobile phone.
usin
command line interface.
standa
rds.
Additional Documentation
Visit the Lantronix website at www.lantronix.com/support/documentation for the latest
documentation and the following additional documentation.
Document Description
SLM Quick Start Describes the steps for getting the SLM up and running; provided
SLM Online Help for the Command
Line Interface
SLM Online Help for the Web Interface Provides online Help for configuri
Detector Online HelpProvides online Help for the utility that enables you to change an
in
printed form.
Provides online Help for configuring and operating the SLM using
commands.
ng and operating the SLM using
the web interface.
automatically assigned IP address to a static IP address quickly.
SLM User Guide24
Terminology
In this User Guide, we use the following terms:
Term Definition
Ethernet DeviceA Lantronix or non-Lantronix device that the SLM discovers on the network.
PortA connector (e.g., serial, power, or KVM) on a management device (e.g., SLC,
Managed DeviceA device (such as a Unix server) that has one or more of its connections (e.g.,
Managed Device GroupA group created to allow logical clustering of managed devices (e.g., devices
AccountIndividual users; must belong to an account group, from which they inherit
Account GroupA group of accounts (users) with the same privile
1: About This Guide
Ethernet devices include:
Secure Lantronix Management Devices: Members of the Secure Lantronix
Management IT family of products: the Secure Lantronix Console (SLC)
Server, Secure Lantronix Power (SLP) Manager, Secure Lantronix KVM
(SLK) Manager, WiBox, Secure Lantronix Branch (SLB) Office Manager, and
Spider. These devices enable you to remotely and securely access and
manage networking equipment.
Management Devices: L
networking equipment. The SCS05/20 is an example.
Lantronix Devices: Oth
devices so you can remotely control, monitor, diagnose, and troubleshoot your
equipment over a network or the Internet.
Other Devices: Non-Lantronix Ethernet devices.
SLP, SLK, SCS) that allows for control of another device.
serial, power, or KVM) exposed to allow control and configuration changes by
Managed Device Users. A managed device belongs to a Managed Device
Group.
f the same type or devices in the same physical location). A managed device
o
may not be created until at least one Managed Device Group has been
defined.
permissions.
account groups include:
Administrators Group: The sysadmin account, which has all privileges and
others with specified configuration privileges.
Note: T
using the sysadmin user name and those members of the Administrators
Group permitted to perform the task.
Ethernet Device Account Groups: Ha
devices and the managed devices connected to them.
Managed Device Account Groups: Have access to
specified Ethernet device ports.
Menu Only Account Groups: May
and use a limited menu of options.
hroughout this user guide, the term "administrator" means the person
antronix devices that enable you to manage
er Lantronix products that network-enable serial
ges. The four types of
ve access to specified Ethernet
devices attached to
only access the command line interface
SLM User Guide25
1: About This Guide
Figure 1-1 Rights of Ethernet Device Group and Managed Device Gr oup to Devices
SLM User Guide26
2:Introduction
The Secure Lantronix Management (SLM) Appliance is a member of the Lantronix Secure IT
Management family of products. There are three models of SLMs: the SLM-01 and SLM-02 which
include both the hardware and software and the vSLM, or the virtual, software-only version of the
SLM. Other products in the Lantronix Secure IT Management family include the Secure Lantronix
Console (SLC) Manager, Secure Lantronix Power (SLP) Manager, and Secure Lantronix KVM
(SLK). These products offer systems administrators and other IT professionals a variety of tools
for remotely and securely accessing and managing their networking equipment. You can even
access the system using a cell phone.
Note:The SLM-01, SLM-02
this user guide. For more information about the product family, see the Lantronix web site
at
The SLM manages Lantronix and non-Lantronix device
in a single, concise view through a web or a command line interface (CLI). A user can search the
web view for a desired device or device port (in the case of an SLC or SLK) and then connect to a
found device or port without using a separate interface. With an SLC, the user logs in only once, to
the SLM, and then any subsequent device logins are automatic. The SLM can also use LDAP,
RADIUS, NIS, Kerberos, TACACS+, and SSH public key to authenticate users connecting
remotely to the command line interface.
Note:Th
environment, the necessary protocols may not be available to provide the same level of
functionality.
Benefits
With the SLM, you can:
Consolidate management of IT infrastructure through a simple browser interface.
Maintain a secure, central point of access to all equipment with centralized console logging.
and vSLM will be generally referred to as SLM throughout
http://www.lantronix.com.
s. It "auto-detects" and then displays them
e SLM is designed to work in an exclusively Lantronix environment. In a mixed
Reduce equipment diagnosis and repair time while minimizing the cost of ownership and
administrative resources.
Maintain more network up time.
SLM User Guide27
IT Management Application
The following diagram shows how a user can perform management activities through the SLM.
2: Introduction
Figure 2-1 SLM Overview
Figure 2-2 vSLM Overview
SLM User Guide28
Firmware
The SLM firmware has the following features:
Access to up to 256 devices
User and events logging
Email notification of trap events, log file events, and Ethernet down
ID/Password security, configurable access rights
SSH and SSL security
External authentication through RADIUS, LDAP, NIS, Kerberos, and TACACS+
Shared authentication among SLMs and SLCs
SLC firmware version storage and updates
Local access through a console port
Web presentation of SLC and ports in a user-configured view
Web administration (using most browsers)
Direct SSH access to SLCs or SLC ports from the web view
2: Introduction
Auto-discovery of devices and other Lantronix and non-Lantronix Ethernet devices
Support for an internal PCI or external USB modem
SNMP MIB2
SNMP trap target
Mobile phone WAP browser access
Protocols Supported
In addition to supporting the TCP/IP network protocol, the SLM supports:
SSH for connections in and out of the SLM
SMTP for mail transfer
SNMP for remote monitoring and management
SFTP and FTP for file transfers and firmware upgrades
DHCP and BOOTP for IP address assignment
HTTPS (SSL) for secure browser-based configuration
NTP for time synchronization
LDAP, NIS, RADIUS, Kerberos, and TACACS+, SecurID, and SSH public key encryption for
remote user authentication
WAP for mobile phone access
For brief descriptions of these protocols, see Appendix F: Protocol Glossary.
SLM User Guide29
SLM Hardware
The hardware included with the SLM-01 and SLM-02 have the following features:
1U rack mountable
Two network ports for conventional Ethernet network; uses standard RJ45-terminated
Category 5 cables:
SLM-01: One 10/100Base-T and one 10/100/1000Base-T connection
SLM-02: Two 10/100/1000Base-T connections
DB9 RS-232 serial console port for VT100 terminal or PC with emulation
AC input voltage of 100 to 240 VAC with 50 or 60 Hz
Operating temperature range of 50°F to 95°F
PCI expansion slot
DB25F parallel port ( currently disabled) (SLM-02 only)
USB ports: SLM-01 has three; SLM-02 has four
2: Introduction
Note:Fo
r more detailed information, see the Appendix D: Technical Specifications.
The vSLM supports the following virtual hardware features:
Two network adapters
USB ports
Product Information Label
Figure 2-3 Front View of SLM
Figure 2-4 Back View of SLM
The product information label on the underside of the unit contains the following information about
each specific unit:
Part Number
Revision Number
Country of Manufacturer
SLM User Guide30
Loading...
+ 340 hidden pages
You need points to download manuals.
1 point = 1 manual.
You can buy points or you can get point for every manual you upload.