Ethernet is a trademark of XEROX Corporation. UNIX is a registered trademark of
The Open Group. Windows 95, Windows 98, Windows 2000, and Windows NT are
trademarks of Microsoft Corp. Netscape is a trademark of Netscape Communications
Corporation.
Contacts
Lantronix Corporate Headquarters
15353 Barranca Parkway
Irvine, CA 92618, USA
Phone: 949-453-3990
Fax: 949-450-7249
Technical Support
Online:
Sales Offices
For a current list of our domestic and international sales offices, go to the Lantronix
web site at
www.lantronix.com/support
www.lantronix.com/about/contact.
Disclaimer & Revisions
Note:
This product has been designed to comply with the limits for a Class B digital
device pursuant to Part 15 of FCC and EN55022:1998 Rules when properly enclosed
and grounded. These limits are designed to provide reasonable protection against
radio interference in a residential installation. This equipment generates, uses, and
can radiate radio frequency energy, and if not installed and used in accordance with
this guide, may cause interference to radio communications.
The information in this guide may change without notice. The manufacturer assumes
no responsibility for any errors that may appear in this guide.
For the latest revision of this product document, please check our online
documentation at
Figure 12-8. XML: Import Configuration from External File................................................................120
Figure 12-9. XML: Import from Filesystem .........................................................................................121
Figure 12-10. XML: Import Line(s) from Single Line Settings on the Filesystem...............................123
XPort Pro™ User Guide 9
11.. UUssiinngg TThhiiss GGuuiiddee
Purpose and Audience
This guide provides the information needed to configure, use, and update the XPort
Pro™. It is intended for software developers and system integrators who are
embedding the XPort Pro in their designs.
Note: This guide occasionally refers to the XPort Pro as just the XPort.
Summary of Chapters
The remaining chapters in this guide include:
Chapter Description
2: Introduction
3: Using DeviceInstaller
Main features of the product and the protocols
it supports. Includes technical specifications.
Instructions for viewing the current
configuration using DeviceInstaller.
4: Configuration Using Web
Manager
5: Network Settings
6: Line, Tunnel, Terminal, and
Host Settings
7: Configurable Pin Manager
8: Services Settings
9: Security Settings
10: VIP Settings
Instructions for accessing Web Manager and
using it to configure settings for the XPort Pro.
Instructions for using the web interface to
configure Ethernet settings.
Instructions for using the web interface to
configure line, tunnel, terminal, and host
settings.
Information about the Configurable Pin
Manager (CPM) and how to set the
configurable pins to work with a device.
Instructions for using the web interface to
configure settings for DNS, SNMP, FTP, and
other services.
Instructions for using the web interface to
configure SSH and SSL security settings.
Instructions for configuring a Virtual IP.
XPort Pro™ User Guide 10
1 Using This Guide
Chapter Description
11: Maintenance and
Diagnostics Settings
12: Advanced Settings
13: Point to Point Protocol
(PPP)
14: Tunneling
15: VIP
16: Security in Detail
17: Branding the XPort Pro
18: Updating Firmware
Instructions for using the web interface to
maintain the XPort Pro, view statistics, files,
and logs, and diagnose problems.
Instructions for using the web interface to
configure email, CLI, and XML settings.
Description of PPP on the XPort Pro.
Information about tunneling features available
on the serial lines.
Information about Virtual IP (VIP) features
available on the XPort Pro.
Description and configuration of SSH and SSL
security settings.
Instructions for customizing the XPort Pro.
Instructions for obtaining the latest firmware
and updating the XPort Pro.
A: Technical Support
B: Binary to Hexadecimal
Conversions
C: Compliance
D: Warranty
Instructions for contacting Lantronix Technical
Support.
Instructions for converting binary values to
hexadecimals.
Lantronix compliance information.
Lantronix warranty statement.
XPort Pro™ User Guide 11
Additional Documentation
The following documents are available on the product CD or the Lantronix Web site
(
www.lantronix.com):
Document Description
1 Using This Guide
XPort Pro Integration Guide
XPort Pro Command
Reference
XPort Universal Demo
Board Quick Start
XPort Universal Demo
Board User Guide
DeviceInstaller Online Help
Com Port Redirector Quick
Start and Online Help
Secure Com Port Redirector
User Guide
Information about the XPort Pro hardware,
testing the XPort Pro using the demonstration
board, and integrating the XPort Pro into your
product.
Instructions for accessing Command Mode (the
command line interface) using a Telnet
connection or through the serial port. Detailed
information about the commands. Also provides
details for XML configuration and status.
Instructions for getting the XPort Pro
demonstration board up and running.
Provides information needed to use the XPort
on the demo board.
Instructions for using the Lantronix Windowsbased utility to locate the XPort Pro and to view
its current settings.
Instructions for using the Lantronix Windowsbased utility to create virtual com ports.
Instructions for using the Lantronix Windowsbased utility to create secure virtual com ports.
XPort Pro™ User Guide 12
22.. IInnttrroodduuccttiioonn
The XPort Pro embedded Ethernet Device Server is a complete network-enabling
solution in a 13.50 (0.531) X 16.25 (0.640) X 33.90 (1.335) package. This miniature
device server empowers original equipment manufacturers (OEMs) to go to market
quickly and easily with Ethernet networking and web page serving capabilities built
into their products. [DIMS = mm (in.)]
Key Features
Power Supply: Regulated 3.3V input required. There is a step-down converter to
1.5 volts for the processor core. All voltages have LC filtering to minimize noises
and emissions.
Controller: A Lantronix DSTni-FX 32-bit microprocessor, running at 166 MHz
internal bus and 83 MHz external bus.
Memory: 16 MB Flash and 8 MB SDRAM. Please contact your sales
representative if you need larger memory sizes.
Ethernet: 10/100 Mbps Ethernet transceiver
Serial Ports: One full, RS232-supporting high-speed serial port with all hardware
handshaking signals. Baud rate is software selectable (300 bps to 921600 bps).
Note: The standard baud rate of 460800 bps is not supported.
Configurable IO Pins (CPs): Up to three pins are configurable as general purpose
I/Os if no DTR or DCD is used on serial ports. Not 5V tolerant.
Interface Signals: 3.3V-level interface signals.
Temperature Range: Operates over an extended temperature range of -40°C to
+85°C.
Applications
The XPort Pro device server connects serial devices such as those listed below to
Ethernet networks using the IP protocol family.
ATM machines
CNC controllers
Data collection devices
XPort Pro™ User Guide 13
Universal Power Supply (UPS) management unit
Telecommunications equipment
Data display devices
Security alarms and access control devices
Handheld instruments
Modems
Time/attendance clocks and terminals
Protocol Support
The XPort Pro device server contains a full-featured TCP/IP stack. Supported
protocols include:
HTTP(S), SSH, SSL/TLS, SNMP, SMTP, RSS, PPP and Syslog for network
communications and management.
2 Introduction
TCP, UDP, TCP/AES, UDP/AES, Telnet, SSH and SSL/TLS for tunneling to the
serial port.
TFTP, FTP, and HTTP for firmware upgrades and uploading files.
Evolution OS™
XPort Pro incorporates The Lantronix Evolution OS™. Key features of the Evolution
OS™ include:
Built-in Web server for configuration and troubleshooting from Web-based
browsers
CLI configurability
SNMP management
XML data transport and configurability
Really Simple Syndication (RSS) information feeds
Enterprise-grade security with SSL and SSH
Comprehensive troubleshooting tools
XPort Pro™ User Guide 14
Additional Features
Modem Emulation
In modem emulation mode, the XPort Pro can replace dial-up modems. The unit
accepts modem AT commands on the serial port, and then establishes a network
connection to the end device, leveraging network connections and bandwidth to
eliminate dedicated modems and phone lines.
Web-Based Configuration and Troubleshooting
Built upon Internet-based standards, the XPort Pro enables you to configure,
manage, and troubleshoot through a browser-based interface accessible anytime
from anywhere. All configuration and troubleshooting options are launched from a
web interface. You can access all functions via a Web browser, for remote access.
As a result, you decrease downtime (using the troubleshooting tools) and implement
configuration changes (using the configuration tools).
Command-Line Interface (CLI)
2 Introduction
Making the edge-to-enterprise vision a reality, the XPort Pro with the Evolution OS™
uses industry-standard tools for configuration, communication, and control. For
example, the Evolution OS™ uses a Command Line Interface (CLI) whose syntax is
very similar to that used by data center equipment such as routers and hubs.
VIP Access
Virtual IP Access is the Lantronix technology that solves the access-through-firewall
problem. With VIP Access, the XPort Pro can act as a ManageLinx DSC and provide
direct access to your equipment behind a firewall.
SNMP Management
The XPort Pro supports full SNMP management, making it ideal for applications
where device management and monitoring are critical. These features allow networks
with SNMP capabilities to correctly diagnose and monitor XPort Pro.
XML-Based Architecture and Device Control
XML is a fundamental building block for the future growth of M2M networks. The
XPort Pro supports XML-based configuration setup records that make device
configuration transparent to users and administrators. The XML is easily editable with
a standard text or XML editor.
Really Simple Syndication (RSS)
The XPort Pro supports Really Simple Syndication (RSS), a rapidly emerging
technology for streaming and managing on-line content. RSS feeds all the
configuration changes that occur on the device. An RSS aggregator then reads
(polls) the feed. More powerful than simple email alerts, RSS uses XML as an
underlying Web page transport and adds intelligence to the networked device, while
not taxing already overloaded email systems.
XPort Pro™ User Guide 15
2 Introduction
Enterprise-Grade Security
Evolution OS™ provides the XPort Pro the highest level of networking security
possible. This ‘data center grade’ protection ensures that each device on the M2M
network carries the same level of security as traditional IT networking equipment in
the corporate data center.
By protecting the privacy of serial data transmitted across public networks, users can
maintain their existing investment in serial technology, while taking advantage of the
highest data-protection levels possible.
SSH and SSL can:
Verify the data received came from the proper source
Validate that the data transferred from the source over the network has not
changed when it arrives at its destination (shared secret and hashing)
Encrypt data to protect it from prying eyes and nefarious individuals
Provide the ability to run popular M2M protocols over a secure SSH or SSL
connection
In addition to keeping data safe and accessible, the XPort Pro has robust defenses to
hostile Internet attacks such as denial of service (DoS), which can be used to take
down the network. Moreover, the XPort Pro cannot be used to bring down other
devices on the network.
You can use the XPort Pro with the Lantronix Secure Com Port Redirector (SCPR) to
encrypt COM port-based communications between PCs and virtually any electronic
device. SCPR is a Windows application that creates a secure communications path
over a network between the computer and serial-based devices that are traditionally
controlled via a COM port. With SCPR installed at each computer, computers that
were formerly “hard-wired” by serial cabling for security purposes or to accommodate
applications that only understood serial data can instead communicate over an
Ethernet network or the Internet.
Terminal Server/Device Management
Remote offices can have routers, PBXs, servers and other networking equipment that
require remote management from the corporate facility. The XPort Pro easily
attaches to the serial ports on a server, Private Branch Exchange (PBX), or other
networking equipment to deliver central, remote monitoring and management
capability.
Troubleshooting Capabilities
The XPort Pro offers a comprehensive diagnostic toolset that lets you troubleshoot
problems quickly and easily. Available from the Web Manager, CLI, and XML
interfaces, the diagnostic tools let you:
View critical hardware, memory, MIB-II, buffer pool, and IP socket information.
Perform ping and traceroute operations.
Conduct forward or backup DNS lookup operations.
XPort Pro™ User Guide 16
View all processes currently running on the XPort Pro, including CPU utilization
and total stack space available.
Configuration Methods
After installation, the XPort Pro requires configuration. For the unit to operate
correctly on a network, it must have a unique IP address on the network. There are
four basic methods for logging into the XPort Pro and assigning IP addresses and
other configurable settings:
DeviceInstaller: Configure the IP address and related settings and view current
settings on the XPort Pro using a Graphical User Interface (GUI) on a PC attached to
a network. (See page 19.)
Web Manager: Through a web browser, configure the XPort Pro settings using the
Lantronix Web Manager. (See page 22.)
Command Mode: There are two methods for accessing Command Mode(CLI):
making a Telnet connection or connecting a terminal (or a PC running a terminal
emulation program) to the unit’s serial port. (See the XPort Pro Command Reference
Guide for instructions and available commands.)
2 Introduction
XML: The XPort Pro supports XML-based configuration and setup records that make
device configuration transparent to users and administrators. XML is easily editable
with a standard text or XML editor. (See the XPort Pro Command Reference Guide
for instructions and commands.)
Addresses and Port Numbers
Hardware Address
The hardware address is also referred to as the Ethernet address or MAC address.
The first three bytes of the Ethernet address are fixed and read 00-20-4A, identifying
the unit as a Lantronix product. The fourth, fifth, and sixth bytes are unique numbers
assigned to each unit.
Figure 2-1. Sample Hardware Address
00-20-4A-14-01-18
or
00:20:4A:14:01:18
IP Address
Every device connected to an IP network must have a unique IP address. This
address references the specific unit.
XPort Pro™ User Guide 17
2 Introduction
Port Numbers
Every TCP connection and every UDP datagram is defined by a destination and
source IP address, and a destination and source port number. For example, a Telnet
server commonly uses port number 23.
The following is a list of the default server port numbers running on the XPort Pro:
TCP Port 22: SSH Server (Command Mode configuration)
TCP Port 23: Telnet Server (Command Mode configuration)
TCP Port 80: HTTP (Web Manager configuration)
TCP Port 443: HTTPS (Web Manager configuration)
UDP Port 161: SNMP
TCP Port 21: FTP
UDP Port 69: TFTP
UDP Port 30718: LDP (Lantronix Discovery Protocol) port
TCP/UDP Port 10001: Tunnel 1
Product Information Label
The product information label on the unit contains the following information about the
specific unit:
Bar code
Product ID (name)
Product Revision
Part number
Hardware Address (MAC Address)
Figure 2-2. Product Label
XPort Pro™ User Guide 18
33.. UUssiinngg DDeevviicceeIInnssttaalllleerr
This chapter covers the steps for locating a XPort Pro unit and viewing its properties
and device details.
Note: For instructions on using DeviceInstaller to configure the IP address and
related settings or for more advanced features, see the Device Installer online Help.
Note: Auto IP generates a random IP address in the range of 169.254.0.1 to
169.254.255.254 if no BOOTP or DHCP server is found.
Accessing XPort Pro using DeviceInstaller
Make note of the MAC address. It is needed to locate the XPort Pro using
Note:
DeviceInstaller.
Follow the instructions on the product CD to install and run DeviceInstaller.
2. When DeviceInstaller starts, it will perform a network device search. To perform
another search, click the “Search” button.
3. Expand the XPort folder by clicking the + symbol next to the XPort folder icon.
The list of available Lantronix XPort Pro devices appears.
4. Select the XPort Pro unit by expanding its entry and clicking on its hardware
(MAC) address to view its configuration.
5. On the right page, click the DeviceDetails tab. The current XPort Pro
configuration appears. This is only a subset of the full configuration; the full
configuration may be accessed via Web Manager, CLI, or XML.
XPort Pro™ User Guide 19
Device Details Summary
Note: The settings are Display Only in this table unless otherwise noted.
Current Settings Description
Name Name identifying the XPort Pro.
Group Configurable field. Enter a group to categorize
Comments Configurable field. Enter comments for the XPort
Device Family Shows the XPort Pro device family type as
3 Using DeviceInstaller
the XPort Pro. Double-click the field, type in the
value, and press Enter to complete. This group
name is local to this PC and is not visible on
other PCs or laptops using DeviceInstaller.
Pro. Double-click the field, type in the value, and
press Enter to complete. This description or
comment is local to this PC and is not visible on
other PCs or laptops using DeviceInstaller.
“XPort”.
Type Shows the device type as “XPort Pro”.
ID Shows the XPort Pro ID embedded within the
unit.
Hardware Address Shows the XPort Pro hardware (MAC) address.
Firmware Version Shows the firmware currently installed on the
XPort Pro.
Extended Firmware
Version
Online Status Shows the XPort Pro status as Online, Offline,
IP Address Shows the XPort Pro current IP address. To
Provides additional information on the firmware
version.
Unreachable (the XPort Pro is on a different
subnet), or Busy (the XPort Pro is currently
performing a task).
change the IP address, click the Assign IP button
on the DeviceInstaller menu bar.
XPort Pro™ User Guide 20
3 Using DeviceInstaller
Current Settings Description
IP Address was Obtained Appears “Dynamically” if the XPort Pro
automatically received an IP address (e.g., from
DHCP). Appears “Statically” if the IP address
was configured manually.
If the IP address was assigned dynamically, the
following fields appear:
Obtain via DHCP with values of True or False.
Obtain via BOOTP with values of True or False.
Subnet Mask Shows the subnet mask specifying the network
segment on which the XPort Pro resides.
Gateway Shows the IP address of the router of this
network.
There is no default.
Number of Ports Shows the number of serial ports on this XPort
Pro.
Supports Configurable Pins Shows True, indicating configurable pins are
available on the XPort Pro.
Supports Email Triggers Shows True, indicating email triggers are
available on the XPort Pro.
Telnet Enabled Indicates whether Telnet is enabled on this XPort
Pro.
Telnet Port Shows the XPort Pro port for Telnet sessions.
Web Enabled Indicates whether Web Manager access is
enabled on this XPort Pro.
Web Port Shows the XPort Pro port for Web Manager
configuration.
Firmware Upgradeable Shows True, indicating the XPort Pro firmware is
This chapter describes how to configure the XPort Pro using Web Manager, the
Lantronix browser-based configuration tool. The unit’s configuration is stored in
nonvolatile memory and is retained without power. All changes take effect
immediately, unless otherwise noted.
Accessing Web Manager through a Web Browser
Note: You can also access the Web Manager by selecting the Web Configuration tab
on the DeviceInstaller window.
To access Web Manager:
1. Open a standard web browser (such as Netscape Navigator 6.x and above,
Internet Explorer 5.5. and above, Mozilla Suite, Mozilla Firefox, or Opera).
2. Enter the IP address of the XPort Pro in the address bar.
Note: The IP address may have been assigned manually using DeviceInstaller or
the serial port (see the XPort Pro Quick Start) or automatically by DHCP.
3. Enter your user name and password.
Note: The factory-default user name is “admin” and the factory-default password
is “PASS”.
The Web Manager home page appears.
Note: The XPort Pro Status page (the home page) shows the overall XPort Pro
configuration and product information.
XPort Pro™ User Guide 22
4 Configuration Using Web Manager
Figure 4-1. Web Manager Home Page
XPort Pro™ User Guide 23
Footer
Configuration and/or
Web Manager Page Components
Figure 4-2 shows the areas of a typical Web Manager page.
Figure 4-2. Components of the Web Manager Page
Header
Items to configure
Links to subpages
Menu Bar
4 Configuration Using Web Manager
Status Area
The menu bar always appears at the left side of the page, regardless of the page
shown. The menu bar lists the names of the pages available in the Web Manager. To
bring up a page, click it in the menu bar.
The main area of the page has from one to three sections:
At the very top, many pages, such as the one in the example above, enable you
to link to sub pages. On some pages, you must also select the item you are
configuring, such as a line or a tunnel.
Information and Help Area
XPort Pro™ User Guide 24
In the middle section of many pages, you can select or enter new configuration
settings. After you change settings, click Submit to apply the change. Some
settings require you to reboot the XPort Pro before the settings take effect. Those
settings are identified in the appropriate sections in this chapter.
Note: Some pages show information such as statistics in this area rather than allow
you to enter settings.
Below the middle section of most pages shows the current configuration. In some
cases, you can take an action such as resetting or clearing a configurable.
The information or help area shows information or instructions associated with
the page.
The footer appears at the bottom of the page. It contains copyright information
and a link to the Lantronix home page.
Navigating the Web Manager
The Web Manager provides an intuitive point-and-click interface. A menu bar at the
left side of each page provides links you can click to navigate from one page to
another. Some pages are read-only, while others let you change configuration
settings.
4 Configuration Using Web Manager
Note: There may be times when you must reboot the XPort Pro for the new
configuration settings to take effect. The chapters that follow indicate when a change
requires a reboot.
Summary of Web Manager Pages
Web Manager
Page
Status
CLI
CPM
Diagnostics Lets you perform various diagnostic procedures. 99
DNS
Email
Filesystem
FTP
Host
Description
Shows product information and network, line, and
tunneling settings.
Shows Command Line Interface (CLI) statistics and lets
you change the current CLI configuration settings.
Shows information about the Configurable Pins Manager
(CPM) and how to set the configurable pins and pin
groups to work with a device.
Shows the current configuration of the DNS subsystem
and the DNS cache.
Shows email statistics and lets you clear the email log,
configure email settings, and send an email.
Shows file system statistics and lets you browse the file
system to view a file, create a file or directory, upload files
using HTTP, copy a file, move a file, or perform TFTP
actions.
Shows statistics and lets you change the current
configuration for the File Transfer Protocol (FTP) server.
Lets you view and change settings for a host on the
network.
See
Page
27
113
55
61
110
90
65
54
XPort Pro™ User Guide 25
4 Configuration Using Web Manager
Web Manager
Page
HTTP
IP Address
Filter
Line
LPD
Network
PPP
Protocol
Stack
Query Port Lets you change configuration settings for the query port. 98
RSS
SNMP
SSH
SSL
Syslog
System
Terminal Lets you change current settings for a terminal. 51
TFTP
Tunnel
VIP
XML
Description
Shows HyperText Transfer Protocol (HTTP) statistics and
lets you change the current configuration and
authentication settings.
Lets you specify all the IP addresses and subnets that are
allowed to send data to this device.
Shows statistics and lets you change the current
configuration and Command mode settings of a serial
line.
Shows LPD (Line Printer Daemon) Queue statistics and
lets you configure the LPD and print a test page.
Shows status and lets you configure the network
interface.
Lets you configure a network link using Point-to-Point
Protocol (PPP) over a serial line.
Lets you perform lower level network stack-specific
activities.
Lets you change current Really Simple Syndication (RSS)
settings.
Lets you change the current Simple Network
Management Protocol (SNMP) configuration settings.
Lets you change the configuration settings for SSH server
host keys, SSH server authorized users, SSH client
known hosts, and SSH client users.
Lets you upload an existing certificate or create a new
self-signed certificate.
Lets you specify the severity of events to log and the
server and ports to which the syslog should be sent.
Lets you reboot the XPort Pro, restore factory defaults,
upload new firmware, and change the XPort Pro long and
short names.
Shows statistics and lets you change the current
configuration for the Trivial File Transfer Protocol (TFTP)
server.
Lets you change the current configuration settings for a
tunnel.
Lets you configure Virtual IP addresses to be used in
Tunnel Accept Mode and Tunnel Connect Mode.
Lets you export XML configuration and status records,
and import XML configuration records.
See
Page
68
97
33
74
28
61
94
73
63
77
83
67
108
66
37
87
115
XPort Pro™ User Guide 26
Device Status Page
The Device Status page is the first page that appears when you log into the Web
Manager. It also appears when you click the Status link in the menu bar. This readonly page shows XPort Pro product information, network settings, line settings, and
tunneling settings.
4 Configuration Using Web Manager
Figure 4-3. Device Status
XPort Pro™ User Guide 27
55.. NNeettwwoorrkk SSeettttiinnggss
The Network Settings pages show the status of Ethernet link and let you configure it
on the device.
Network Settings
Network 1 (eth0) Interface Status
This page shows the status of the Ethernet network interface.
To view the network interface status:
1. Click Network on the menu.
2. Then click Network 1, Interface, and Status at the top of the page. The Network
1 (eth0) Interface Status page appears.
Figure 5-1. Network 1 (eth0) Interface Status
XPort Pro™ User Guide 28
5 Network Settings
Network 1 (eth0) Interface Configuration
This page shows the configuration settings for the Ethernet connection and lets you
change these settings.
To view and configure network interface settings:
1. Click Network 1,Interface, and Configuration at the top of the page. The
Network 1 (eth0) Interface Configuration page appears.
BOOTP Client Select On or Off. At boot up the XPort Pro will
DHCP Client Select On or Off. At boot up the XPort Pro will
IP Address
Description
attempt to obtain an IP address from a BOOTP
server.
Notes: Overrides the configured IP address, network
mask, gateway, hostname, and domain.
When DHCP is On, the system automatically uses
DHCP, regardless of whether BOOTP Client is On.
attempt to lease an IP address from a DHCP server
and maintain the lease at regular intervals.
Note: Overrides BOOTP, the configured IP address,
network mask, gateway, hostname, and domain.
Enter the XPort Pro static IP address.
You may enter it alone, in CIDR format, or with an
explicit mask.
The IP address consists of four octets separated by a
period and is used if BOOTP and DHCP are both set
to Off. Changing this value requires you to reboot the
XPort Pro.
Note: When DHCP is enabled, the XPort Pro tries to
obtain an IP address from DHCP. If it cannot, the
XPort Pro uses an Auto IP address in the range of
169.254.xxx.xxx.
Default Gateway
Hostname
Domain
DHCP Client ID
Primary DNS
XPort Pro™ User Guide 30
Enter the IP address of the router for this network. Or,
clear the field (appears as <None>). This address is
only used for static IP address configuration.
Enter the XPort Pro hostname. It must begin with a
letter, continue with a sequence of letters, numbers,
and/or hyphens, and end with a letter or number.
Enter the XPort Pro's domain name.
Enter the ID if the DHCP server uses a DHCP ID. The
DHCP server’s lease table shows IP addresses and
MAC addresses for devices. The lease table shows
the Client ID, in hexadecimal notation, instead of the
XPort Pro MAC address.
IP address of the primary name server. This entry is
required if you choose to configure DNS (Domain
Name Server) servers.
5 Network Settings
Network 1
Interface
Configuration
Page Settings
Secondary DNS
3. To save changes, click Submit. Some Changes to the following settings require
a reboot for the changes to take effect:
Note: If DHCP or BOOTP fails, AutoIP intervenes and assigns an address. In this
case, the static IP (if configured) is ignored.
Network 1 Ethernet Link
This page shows the current negotiated Ethernet settings and lets you change the
speed and duplex settings.
To view and configure the Ethernet link:
1. Click Network on the menu bar. Then click Network 1 and Link at the top of the
page. The Network 1 (eth0) Ethernet Link page appears. From another Network
page, click Network 1 and Link at the top of the page.
XPort Pro™ User Guide 31
5 Network Settings
Figure 5-3. Network 1 Ethernet Link
The Status table shows the current negotiated settings. The Configuration table
shows the current range of allowed settings.
2. Enter or modify the following settings:
Network 1-Ethernet
Description
Link Page Settings
Speed Select the Ethernet link speed. (Default is Auto.)
Duplex Select the Ethernet link duplex mode. (Default is Auto.)
3. Click Submit. The changes take effect immediately.
The Line Settings pages display the status and statistics for each of the serial lines
(ports).
for the serial lines.
Note: The following section describes the steps to view and configure Line 1
settings; these steps also apply to Line 2 menu options.
Line 1 Statistics
This read-only page shows the status and statistics for the serial line selected at the
top of this page.
They also let you change the character format and Command Mode settings
Select Line on the menu bar. The Line 1 Statistics page appears.
Figure 6-1. Line 1 Statistics
XPort Pro™ User Guide 33
6 Line, Tunnel, Terminal, and Host Settings
Line 1 Configuration
This page shows the configuration settings for the serial line selected at the top of the
page and lets you change the settings for that serial line.
To configure Line 1:
1. Click Line 1 and Configuration at the top of the page. The Line 1 Configuration
page appears.
Figure 6-2. Line 1 Configuration
2. Enter or modify the following settings:
Line Configuration
Page Settings
Name
Interface
State
XPort Pro™ User Guide 34
Description
Enter a name for the line. The default Name is blank.
Select the interface type from the drop-down menu. The
default is RS232.
Indicates whether the current line is enabled. To change the
status, select Enabled or Disabled from the drop-down
menu.
6 Line, Tunnel, Terminal, and Host Settings
Line Configuration
Page Settings
Protocol
Baud Rate
Parity
Data Bits
Stop Bits
Flow Control
Xon Char
Description
Select the protocol from the drop-down menu. The default is
Tunnel.
Select the baud rate from the drop-down menu. The default
is 9600.
Select the parity from the drop-down menu. The default is
None.
Select the number of data bits from the drop-down menu.
The default is 8.
Select the number of stop bits from the drop-down menu.
The default is 1.
Select the flow control from the drop-down menu. The
default is None.
Specify the character to use to start the flow of data when
Flow Control is set to Software. Prefix a decimal character
with \ or a hexadecimal character with 0x, or provide a single
printable character. The default Xon char is 0x11.
Xoff Char
Gap Timer The driver forwards received serial bytes after the Gap
Threshold
3. Click Submit.
Specify the character to use to stop the flow of data when
Flow Control is set to Software. Prefix a decimal character
with \ or a hexadecimal character with 0x, or provide a single
printable character. The default Xoff char is 0x13.
Timer delay from the last character received. By default, the
delay is four character periods at the current baud rate
(minimum 1 ms).
The driver will also forward received characters after
Threshold bytes have been received.
Line 1 Command Mode
Setting Command Mode enables the CLI on the serial line.
To configure Line 1 Command Mode:
1. Click Line 1 and Command Mode at the top of the page. The Line 1 Command
Mode page appears.
XPort Pro™ User Guide 35
6 Line, Tunnel, Terminal, and Host Settings
Figure 6-3. Line 1 Command Mode
2. Enter or modify the following settings:
Line –
Description
Command Mode
Page Settings
Mode
Select the method of enabling Command Mode or choose to
disable Command Mode.
Always = immediately enables Command Mode for the serial
line.
Use Serial String = enables Command Mode when the serial
string is read on the serial line during boot time.
Use CP Group = enables Command Mode based on the
status of a CP Group. When the value matches the current
value of the group, Command Mode is enabled on the serial
line.
Use both Serial String and CP Group = the serial string and
XPort Pro™ User Guide 36
6 Line, Tunnel, Terminal, and Host Settings
Line –
Command Mode
Page Settings
Wait Time
Serial String
Echo Serial
String
Description
the value of the CP group must be matched to enable
Command Mode.
Disabled = turns off Command Mode.
Enter the wait time for the serial string during boot-up in
milliseconds.
Enter the serial string characters. Select a string type.
Text = string of bytes that must be read on the Serial Line
during boot time to enable Command Mode. It may contain a
time element in x milliseconds, in the format {x}, to specify a
required delay.
Binary = string of characters representing byte values where
each hexadecimal byte value starts with \0x and each
decimal byte value starts with \.
Select Yes to enable echoing of the serial string at boot-up.
CP Group
Signon
Message
3. In the CurrentConfiguration table, clear currently stored settings as necessary.
4. Click Submit.
Tunnel Settings
The Tunnel pages allow you to view current statistics and configure serial settings,
Connect Mode, Accept Mode, Disconnect Mode, Packing Mode, start and stop
characters, modem emulation, and AES keys.
Note: The following section describes the steps to view and configure Tunnel 1
settings; these steps also apply to Tunnel 2 menu options.
Enter the name and decimal value of the CP group.
Enter the boot-up signon message. Select a string type.
Text = string of bytes sent on the serial line during boot time.
Binary = one or more byte values separated by commas.
Each byte value may be decimal or hexadecimal. Start
hexadecimal values with 0x.
Note: This string will be output on the serial port at boot,
regardless of whether command mode is enabled or not.
XPort Pro™ User Guide 37
6 Line, Tunnel, Terminal, and Host Settings
Tunnel 1 – Statistics
Click Tunnel on the menu bar. The Statistics page for Tunnel 1 appears.
Figure 6-4. Tunnel 1
Serial Settings
This page shows the settings for the tunnel selected at the top of the page and lets
you change the settings.
To configure serial settings:
1. Click Tunnel 1 and Serial Settings at the top of the page. The Tunnel 1 Serial
Settings page appears.
XPort Pro™ User Guide 38
6 Line, Tunnel, Terminal, and Host Settings
Figure 6-5. Tunnel 1 Serial Settings
2. View or modify the following settings:
Tunnel Serial
Description
Settings Page
Settings
Line Settings
Current serial settings for the line.
(display only)
Protocol
(display only)
Buffer Size
The protocol being used on the line. In this case,
Tunnel.
Enter the buffer size used for the tunneling of serial
data received. Requires reboot to take effect.
DTR
Select when to assert DTR.
TruPort = asserted whenever either a connect or an
accept mode tunnel connection is active with the Telnet
Protocol RFC2217 saying that the remote DSR is
asserted.
Asserted while connected = asserted whenever
either a connect or an accept mode tunnel connection
is active.
Continuously asserted = asserted regardless of the
status of a tunnel connection.
3. Click Submit.
XPort Pro™ User Guide 39
6 Line, Tunnel, Terminal, and Host Settings
Packing Mode
When in Packing Mode, data is not transferred one byte at a time. Instead, data is
queued and sent in segments.
To configure the tunnel Packing Mode:
1. Select Tunnel 1 and Packing Mode at the top of the page. The Tunnel 1
Packing Mode page appears. Depending on the Mode selection, different
configurable parameters are presented to the user. The following figures show
the display for each of the three packing modes.
Mode Select Disable to disable Packing Mode completely.
Select Timeout to send data after the specified time
has elapsed. Select Send Character to send the
queued data when the send character is received.
Threshold
(Appears for both
Send the queued data when the number of queued
bytes reaches the threshold.
Timeout and Send
Character Modes)
Timeout
(Appears for
Timeout Mode)
Send Character
(Appears for Send
Enter a time, in milliseconds, for the XPort Pro to
send the queued data after the first character was
received.
Enter the send character. Upon receiving this
character, the XPort Pro sends out the queued data.
Character Mode)
Trailing Character
(Appears for Send
Enter the trailing character. This character is sent
immediately following the send character.
Character Mode)
3. Click Submit.
XPort Pro™ User Guide 41
6 Line, Tunnel, Terminal, and Host Settings
Accept Mode
In Accept Mode, the XPort Pro listens (waits) for incoming connections.
To configure the tunnel’s Accept Mode:
1. Click Tunnel 1 and Accept Mode at the top of the page. The Tunnel 1 Accept
Mode page appears.
Figure 6-9. Tunnel 1 Accept Mode
2. Enter or modify the following settings:
Tunnel -
Accept Mode
Page Settings
Mode
XPort Pro™ User Guide 42
Description
Select the method used to start a tunnel in Accept mode.
Choices are:
Disabled = do not accept an incoming connection.
Always = accept an incoming connection. (default)
Any Character = start waiting for an incoming connection
when any character is read on the serial line.
Start Character = start waiting for an incoming connection
when the start character for the selected tunnel is read on the
serial line.
6 Line, Tunnel, Terminal, and Host Settings
Tunnel -
Accept Mode
Page Settings
Local Port
Protocol
TCP Keep
Alive
Flush Serial
Data
Description
Modem Control Asserted = start waiting for an incoming
connection as long as the Modem Control pin (DSR) is
asserted on the serial line until a connection is made.
Modem Emulation = start waiting for an incoming connection
when triggered by modem emulation AT commands. Connect
mode must also be set to Modem Emulation.
Enter the port number for use as the local port. The defaults
are port 10001 for Tunnel 1 and port 10002 for Tunnel 2.
Select the protocol type for use with Accept Mode. The default
protocol is TCP. If you select TCP AES you will need to
configure the AES keys.
Enter the time, in seconds, the XPort Pro waits during a silent
connection before checking if the currently connected network
device is still on the network. If the unit then gets no response
after 8 attempts, it drops that connection.
Select Enabled to flush the serial data buffer on a new
connection.
Block Serial
Data
Block Network
Data
Password
Email on
Connect
Email on
Disconnect
CP Output
Select On to block, or not tunnel, serial data transmitted to the
XPort Pro.
Select On to block, or not tunnel, network data transmitted to
the XPort Pro.
Enter a password that clients must send to the XPort Pro
within 30 seconds from opening a network connection to
enable data transmission.
The password can have up to 31 characters and must contain
only alphanumeric characters and punctuation. When set, the
password sent to the XPort Pro must be terminated with one of
the following: (a) 0x0A (LF), (b) 0x00, (c) 0x0D 0x0A (CR LF),
or (d) 0x0D 0x00.
Select whether the XPort Pro sends an email when a
connection is made. Select None if you do not want to send an
email. Otherwise, select the Email profile to use for sending.
Select whether the XPort Pro sends an email when a
connection is closed. Select None if you do not want to send
an email. Otherwise, select the Email profile to use for
sending.
Identifies a CP or CP Group whose value should change when
a connection is established and dropped.
3. Click Submit.
XPort Pro™ User Guide 43
6 Line, Tunnel, Terminal, and Host Settings
Connect Mode
Connect mode defines how the unit makes an outgoing connection.
To configure Tunnel 1 Connect Mode:
1. Select Tunnel 1 and Connect Mode at the top of the page. The Tunnel 1
Connect Mode page appears.
Figure 6-10. Tunnel 1 Connect Mode
XPort Pro™ User Guide 44
6 Line, Tunnel, Terminal, and Host Settings
2. Enter or modify the following settings:
Tunnel –
Connect Mode
Page Settings
Mode
Local Port
Description
Select the method to be used to attempt a connection to
a remote host or device. Choices are:
Always = a connection is attempted until one is made. If
the connection gets disconnected, the XPort Pro retries
until it makes a connection. (default)
Disable = an outgoing connection is never attempted.
Any Character = a connection is attempted when any
character is read on the serial line.
Start Character = a connection is attempted when the
start character for the selected tunnel is read on the
serial line.
Modem Control Asserted = a connection is attempted
as long as the Modem Control pin (DSR) is asserted,
until a connection is made.
Modem Emulation = a connection is attempted when
triggered by modem emulation AT commands.
Enter the port for use as the local port. A random port is
selected by default. Once you have configured a
number, click the Random link in the Current
Configuration to switch back to random.
Host Click <None> in the Host field to configure the Host
parameters.
VIP = Enabling the VIP directs the tunnel to connect to a
remote Lantronix Virtual IP identified by the VIP Name.
Default is Disabled.
VIP Name = Displays configured VIP name, used only if
VIP is enabled.
Address = Displays configured IP address or DNS address, used only if VIP is disabled.
Port = Displays configured Port.
Protocol = Select the protocol type for use with Connect
Mode. The default protocol is TCP. If you select TCP
AES you will need to configure the AES keys.
SSH Username = Displays configured username, used
only if SSH protocol is selected.
TCP Keep Alive = Default is 45000 milliseconds.
AES Encrypt/Decrypt Key = Displays presence of key,
used only if protocol with AES is selected.
Reconnect Timer
Enter the reconnect time in milliseconds. The XPort Pro
attempts to reconnect after this amount of time after
failing a connection or exiting an existing connection.
XPort Pro™ User Guide 45
6 Line, Tunnel, Terminal, and Host Settings
Tunnel –
Connect Mode
Page Settings
Flush Serial Data
Block Serial Data
Block Network
Data
Email on
Connect
Email on
Disconnect
CP Output
Description
Select whether to flush the serial line when a connection
is made. Choices are:
Enabled = flush the serial line when a connection is
made.
Disabled = do not flush the serial line. (default)
Select On to block (not tunnel) serial data transmitted to
the XPort Pro.
Select On to block (not tunnel) network data transmitted
to the XPort Pro.
Select whether the XPort Pro sends an email when a
connection is made. Select None if you do not want to
send an email. Otherwise, select the Email profile to use.
Select whether the XPort Pro sends an email when a
connection is closed. Select None if you do not want to
send an email. Otherwise, select the Email profile to use.
Identifies a CP or CP Group whose value should change
when a connection is established and when it is
dropped.
3. Click Submit.
Host 1 is configured. A second host appears underneath Host 1 since the XPort Pro
supports configuration of up to sixteen hosts.
Connecting Multiple Hosts
If more than one Host is configured, a Host Mode option appears. Host Mode
controls how multiple hosts will be used in Connect Mode.
The following selections are available:
Sequential – When it is time for the tunnel to connect it will start with Host 1 and
attempt each host in sequence until a connection is accomplished. Default
selection.
Simultaneous – When it is time for the tunnel to connect it will connect to all of
the hosts that accept a connection.
Configuring Additional Hosts
The Host fields contain the information necessary to connect to the specified host.
To configure Host 2:
1. Click <None> in the Host 2 field. Host 2 expands.
XPort Pro™ User Guide 46
6 Line, Tunnel, Terminal, and Host Settings
2. Enter IP address in the Address field.
3. Click Submit.
Note: Repeat these steps to configure any subsequent hosts up to sixteen.
Figure 6-11. Host 2 Expanded
Host IP Promotion
The XPort Pro allows Host IP promotion of individual hosts in the overall sequence.
To promote a specific Host:
1. Click the arrow icon in the desired Host field, for example Host 2.
2. The selected Host exchanges its place with the Host above it.
XPort Pro™ User Guide 47
6 Line, Tunnel, Terminal, and Host Settings
Figure 6-12. Host 1, Host 2 Exchanged
Disconnect Mode
Disconnect Mode is disabled by default. When enabled, Disconnect Mode runs in the
background of an active connection to determine when a disconnection is required.
To configure the tunnel Disconnect Mode:
1. Click Tunnel 1 and Disconnect Mode at the top of the page. The Tunnel 1
Disconnect Mode page appears.
XPort Pro™ User Guide 48
6 Line, Tunnel, Terminal, and Host Settings
Figure 6-13. Tunnel 1 Disconnect Mode
2. Enter or modify the following settings:
Tunnel – Disconnect
Mode Page Settings
Stop Character
Modem Control Select Enabled to disconnect when the modem control
Timeout
Flush Serial Data Select Enabled to flush the serial data buffer on a
3. Click Submit.
Description
Enter the stop character in ASCII, hexadecimal, or
decimal notation. Select <None> to disable.
pin is not asserted on the serial line.
Enter a time, in milliseconds, for the XPort Pro to
disconnect on a timeout. The value 0 (zero) disables the
idle timeout.
disconnection.
Modem Emulation
A tunnel in Connect Mode can be initiated using modem commands incoming from
the Serial Line. This page enables you to configure the modem emulation settings
when you select Modem Emulation as the Tunnel 1 or Tunnel 2 Connect Mode type.
To configure modem emulation:
1. Select Tunnel 1 and then Modem Emulation at the top of the page. The
Tunnel 1 Modem Emulation page appears.
XPort Pro™ User Guide 49
6 Line, Tunnel, Terminal, and Host Settings
Figure 6-14. Tunnel 1 Modem Emulation
2. Enter or modify the following settings:
Tunnel- Modem
Description
Emulation Page
Settings
Echo Pluses Select On to echo +++ when entering modem
Command Mode.
Echo Commands Select On to echo the modem commands to the
console.
Verbose Response Select On to send modem response codes out on the
serial line.
Response Type Select the type of response code: Text or Numeric.
Error Unknown
Commands
Select whether an ERROR or OK response is sent in
reply to unrecognized AT commands. Choices are:
Enabled = ERROR is returned for unrecognized AT
commands.
Disabled = OK is returned for unrecognized AT
commands. Default is Disabled.
Incoming Connection
Select whether Incoming Connection requests will be
disabled, answered automatically, or answered
manually. Default is Disabled.
XPort Pro™ User Guide 50
6 Line, Tunnel, Terminal, and Host Settings
Connect String
Enter the connect string. This modem initialization string
prepares the modem for communications. It is a
customized string sent with the “CONNECT” modem
response code.
Display Remote IP
3. Click Submit.
Terminal Settings
This page shows configuration settings for attaching a terminal on a serial line or the
network and lets you change them as necessary.
Line Terminal Configuration
To configure a line to support an attached terminal:
1. Click Terminal on the menu and then select the line that is connected to the
terminal you want to configure. The default is Line 1. Configuration is
automatically selected. The Terminal on Line 1 Configuration page appears.
Selects whether the incoming RING sent on the Serial
Line is followed by the IP address of the caller. Default
is Disabled.
Figure 6-15. Terminal on Line 1 Configuration
2. Enter or modify the following settings:
XPort Pro™ User Guide 51
6 Line, Tunnel, Terminal, and Host Settings
Terminal on Line
Configuration Page
Settings
Terminal Type
Login Connect
Menu
Exit Connect Menu
Send Break
Break Duration
Description
Enter text to describe the type of terminal. The text will
be sent to a host via IAC.
Note: IAC means, “interpret as command.” It is a way
to send commands over the network such as send
break or start echoing.
Select the interface to display when the user logs in.
Choices are:
Enabled = shows the Login Connect Menu.
Disabled = shows the CLI
Select whether to display a choice for the user to exit
the Login Connect Menu and reach the CLI. Choices
are:
Enabled = a choice allows the user to exit to the CLI.
Disabled = there is no exit to the CLI.
Enter a Send Break control character, e.g., <control>
Y, or blank to disable.
When the Send Break control character is received
from the network on its way to the serial line, it is not
sent to the line; instead, the line output is forced to be
inactive (the break condition).
Enter how long the break should last in milliseconds.
Echo
3. To save changes, click Submit.
Applies only to Connect Mode Telnet connections, not
to Accept Mode. Only disable Echo if your terminal
echoes, in which case you will see double of each
character typed.
Network Terminal Configuration
To configure menu features applicable to CLI access via the network:
1. Click Terminal on the menu and then click Network at the top of the page.
Configuration is automatically selected. The Terminal on Network Configuration
page appears.
XPort Pro™ User Guide 52
6 Line, Tunnel, Terminal, and Host Settings
Figure 6-16. Terminal on Network Configuration
2. Enter or modify the following settings:
Terminal on Line
Description
Configuration Page
Settings
Terminal Type
Enter text to describe the type of terminal. The text will
be sent to a host via IAC.
Note: IAC means, “interpret as command.” It is a way
to send commands over the network such as send
break or start echoing.
Login Connect Menu
Select the interface to display when the user logs in.
Choices are:
Enabled = shows the Login Connect Menu.
Disabled = shows the CLI
Exit Connect Menu
Select whether to display a choice for the user to exit
the Login Connect Menu and reach the CLI. Choices
are:
Enabled = a choice allows the user to exit to the CLI.
Disabled = there is no exit to the CLI.
Echo
Applies only to Connect Mode Telnet connections, not
to Accept Mode. Only disable Echo if your terminal
echoes, in which case you will see double of each
character typed.
3. To save changes, click Submit.
XPort Pro™ User Guide 53
6 Line, Tunnel, Terminal, and Host Settings
Host Configuration
This page shows current settings for a remote host and lets you change these
settings.
1. Click Host on the menu and then click the desired host at the top of the page.
Configuration is automatically selected. (Host 1 is the default.) Host Configuration
page appears.
Figure 6-17. Host Configuration
2. Enter or modify the following settings:
Host Page
Host Page
Settings
Name
Protocol
SSH
Username
Remote
Address
Description
Enter a name for the host. This name appears on the Login
Connect Menu. To leave a host out of the menu, leave this field
blank.
Select the protocol to use to connect to the host. Choices are:
Telnet
SSH
Note: SSH keys must be loaded or created on the SSH page for
the SSH protocol to work.
Appears if you selected SSH as the protocol. Enter a username to
select a pre-configured Username/Password/Key (configured on
the SSH: Client Users page), or leave it blank to be prompted for
a username and password at connect time.
Enter an IP address for the host to which the XPort will connect.
Remote
Port
3. To save changes, click Submit.
XPort Pro™ User Guide 54
Enter the port on the host to which the XPort will connect.
The Configurable Pin Manager is responsible for assignment and control of the
configurable pins (CPs) available on the XPort Pro. There are three configurable pins
on the XPort Pro.
You can configure the CPs by making them part of a group. A CP Group may consist
of one or more CPs This increases flexibility when incorporating the XPort Pro into
another system.
CPM: Configurable Pins
Each CP is associated with an external hardware pin. CPs can trigger an outside
events, like sending an email message or starting Command Mode on a serial Line.
To configure the XPort Pro CPs:
1. Click CPM on the menu bar and then CPs at the top of the page. The CPM: CPs
page appears.
Figure 7-1. CPM: CPs
XPort Pro™ User Guide 55
7 Configurable Pin Manager
The Current Configuration table shows the current settings for each CP.
Current Configuration
CPM – CPs
Page Current
Configuration
CP
Pin #
Configured As Shows the CP configuration. A CP configured as Input is set
Value
Groups
Active In Group
2. To display the CP status of a specific pin, click the CP number in the Current
Configuration table. The CP Status table shows the information about the CP.
CPM – CPs Page CP
Status
Description
Indicates the configurable pin number.
Indicates the hardware pin number associated with the CP.
to read input. A CP configured as Output drives data out of
the XPort Pro.
Indicates the current status of the CP:
1 = asserted.
0 = de-asserted.
Inv = the CP is inverted.
Indicates the number of groups in which the CP is a member.
A CP can be a member of several groups. However, it may
only be active in one group. This field shows the group in
which the CP is active.
Description
Name
State
Type
Value
Bit
Level A “+” symbol indicates the CP is asserted (the voltage is
I/O
Logic An “I” indicates the CP is inverted.
Binary
CP#
Groups
Note: To modify a CP, all groups in which it is a member must be disabled.
Shows the CP number.
Shows the current enable state of the CP.
Indicates whether the CP is set for input or output.
Shows the last bit in the CP current value.
Visual display of the 32 bit placeholders for a CP.
high). A “-“indicates the CP voltage is low.
Indicates the current status of the pin:
I = input
O = output
<blank> = unassigned
Shows the assertion value of the corresponding bit.
Shows the CP number.
Lists the groups in which the CP is a member.
XPort Pro™ User Guide 56
7 Configurable Pin Manager
To change a CP output value:
1. Select the CP from the drop-down list.
2. Enter the CP value.
3. Click Submit.
To change a CP configuration:
1. Select the CP from the drop-down list.
2. Select the CP configuration from the drop-down list.
3. (If necessary) Select the Assert Low checkbox.
4. Click Submit.
Note: These changes to a CP are not saved in FLASH. Instead, these CP settings
are used when the CP is added to a CP Group. When the CP Group is saved, its CP
settings are saved with it. Thus, a particular CP may be defined as “Input” in one
group but as “Output” in another. Only one group containing any particular CP may
be enabled at once.
XPort Pro™ User Guide 57
7 Configurable Pin Manager
CPM: Groups
The CP Groups page allows for the management of CP groups. Groups can be
created or deleted. CPs can be added to or removed from groups. A group, based on
its state, can trigger outside events (such as sending email messages). Only an
enabled group can be a trigger.
To configure the XPort Pro CP groups:
1. Click CPM on the menu bar and then Groups at the top of the page. The CPM:
Groups page appears.
Figure 7-2. CPM: Groups
XPort Pro™ User Guide 58
7 Configurable Pin Manager
2. The Current Configuration table shows the current settings for each CP group.
Current Configuration
CPM – Groups Page
Current
Configuration
Group Name
State
CP Info
To display the status of a specific group
Click the CP group name in the Current Configuration table.
Description
Shows the CP group’s name.
Indicates whether the group is enabled or disabled.
Provides CP group information.
Group Status
CPM – Groups Page
Group Status
Name
State
Value
Bit
Level A “+” symbol indicates the CP’s bit position is asserted
Description
Shows the CP Group name.
Current enable state of the CP group.
Shows the CP group’s current value.
Visual display of the 7 bit placeholders for a CP.
(the voltage is high). A “-“ indicates the CP voltage is
low.
I/O
Logic An “I” indicates the CP output is inverted.
Binary
CP#
To create a CP group:
1. Enter a group name in the Create Group field.
2. Click Submit.
Indicates the current status of the pin:
I = input
O = output
<blank> = unassigned
Shows the assertion value of the corresponding bit.
X = group is disabled or bit is unassigned in group
Shows the configurable pin number and its bit position
in the CP group.
XPort Pro™ User Guide 59
7 Configurable Pin Manager
To delete a CP group:
1. Select the CP group from the Delete Group drop-down list.
2. Click Submit.
To enable or disable a CP group:
1. Select the CP group from the Set drop-down list.
2. Select the state (Enabled or Disabled) from the drop-down list.
3. Click Submit.
To set a CP group’s value:
1. Select the CP group from the Set drop-down list.
2. Enter the CP group’s value in the value field.
3. Click Submit.
To add a CP to a CP group:
1. Select the CP from the Add drop-down list.
2. Select the CP group from the drop-down list.
3. Select the CP bit location from the bit drop-down list.
4. Click Submit.
To delete a CP from a CP group:
1. Select the CP from the Remove drop-down list.
2. Select the CP group from the drop-down list.
3. Click Submit.
XPort Pro™ User Guide 60
88.. SSeerrvviicceess SSeettttiinnggss
DNS Configuration
This page shows the active run-time settings for the domain name system (DNS)
protocol. The primary and secondary DNS addresses come from the active interface.
The static addresses from the Network Interface Configuration page may be
overridden by DHCP or BOOTP.
The DNS page also shows any contents in the DNS cache. When a DNS name is
resolved using a forward lookup, the results are stored in the DNS cache temporarily.
The XPort Pro consults this cache when performing forward lookups. Each item in
the cache eventually times out and is removed automatically after a certain period, or
you can delete it manually.
To view the XPort Pro DNS configuration:
Click DNS on the menu bar. The DNS page appears.
Figure 8-1. DNS Settings
PPP Configuration
Point-to-Point Protocol (PPP) establishes a direct connection between two nodes. It
defines a method for data link connectivity between devices using physical layers
(such as serial lines). For more information about PPP, see
Protocol PPP
The XPort Pro supports two types of PPP authentication: Password Authentication
Protocol (PAP) and Challenge Handshake Authentication Protocol (CHAP). Both of
these authentication methods require the configuration of a username and password.
XPort Pro™ User Guide 61
.
13 Point to Point
8 Services Settings
The XPort Pro also supports authentication scheme of “None” when no
authentication is required during link negotiation.
Note: The following section describes the steps to configure PPP 1 (PPP on serial
line 1); these steps also apply to PPP on other lines.
Note: Since the XPort Pro does not support NAPT (Network Address and Port
Translation), static routing table entries must be added to both the serial-side and
network-side devices (both of which are external to the XPort Pro).
To configure the XPort Pro PPP configuration:
1. Click PPP on the menu bar and Line1 at the top of the page. The PPP on Line 1
– Configuration page appears.
Figure 8-2. PPP Configuration Settings
2. Enter or modify the following settings:
PPP Configuration Page
Description
Settings
Local IP Address
Enter the IP address assigned to the XPort Pro’s
PPP interface.
XPort Pro™ User Guide 62
8 Services Settings
PPP Configuration Page
Settings
Peer IP Address
Authentication Mode
3. Click Submit.
SNMP Configuration
This page is used to configure the Simple Network Management Protocol (SNMP)
agent. Using this page, you can configure the SNMP service to send a trap when it
receives a request for information that contains an incorrect community name and
does not match an accepted system name for the service.
Description
Enter the IP address assigned to the peer (when
requested during negotiation).
Choose the authentication mode:
None = no authentication is required.
PAP = Password Authentication Protocol.
CHAP = Challenge Handshake Authentication
Protocol.
To configure SNMP:
1. Click SNMP on the menu bar. The SNMP page opens and shows the current
SNMP configuration.
XPort Pro™ User Guide 63
8 Services Settings
Figure 8-3. SNMP Configuration
2. Enter or modify the following settings:
SNMP Page Settings Description
SNMP Agent
Read Community
Write Community
System Contact
System Name
System Description
System Location
Select On to enable SNMP.
Enter the SNMP read-only community string.
Enter the SNMP read/write community string.
Enter the name of the system contact.
Enter the system name.
Enter the system description.
Enter the system location.
XPort Pro™ User Guide 64
8 Services Settings
Traps Enabled
Primary Trap Dest IP
Secondary Trap Dest IP
3. Click Submit.
4. In the CurrentConfiguration table, delete and clear currently stored settings as
necessary.
FTP Configuration
This page shows the current File Transfer Protocol (FTP) configuration and
connection status and various statistics about the FTP server.
To configure FTP:
1. Click FTP on the menu bar. The FTP page opens to display the current
configuration.
Select On to enable the transmission of the SNMP
cold start trap messages. This trap is generated
during system boot.
Enter the primary SNMP trap host.
Enter the secondary SNMP trap host.
Figure 8-4. FTP Configuration
2. Enter or modify the following settings:
FTP Page Settings Description
State Select Enabled to enable the FTP server.
Admin Username
Admin Password
XPort Pro™ User Guide 65
Enter the username to use when logging in via FTP.
Enter the password to use when logging in via FTP.
3. Click Submit.
Click [Reset] to reset the adjacent FTP Password.
TFTP Configuration
This page shows the status and various statistics about the Trivial File Transfer
Protocol (TFTP) server.
To configure TFTP:
1. Click TFTP on the menu bar. The TFTP page opens to display the current
configuration.
8 Services Settings
Figure 8-5. TFTP Configuration
2. Enter or modify the following settings:
TFTP Page Settings Description
State Select Enabled to enable the TFTP server.
Allow TFTP File
Creation
Allow Firmware
Update
3. Click Submit.
XPort Pro™ User Guide 66
Select whether to allow the creation of new files stored
on the TFTP server.
Specifies whether or not the TFTP Server is allowed to
accept a firmware update for the device. An attempt to
update firmware is recognized based on the name of
the file.
Note: TFTP has no way to authenticate the client so
the device is open to malicious update.
Syslog Configuration
The Syslog page shows the current configuration, status, and statistics of the syslog.
Here you can configure the syslog destination and the severity of the events to log.
Note: The system log is always saved to local storage, but it is not retained through
reboots. Saving the system log to a server that supports remote logging services
(see RFC 3164) allows the administrator to save the complete system log history.
The default port is 514.
1. Click Syslog on the menu bar. The Syslog page opens to display the current
configuration.
8 Services Settings
Figure 8-6. Syslog
2. Enter or modify the following settings:
Syslog Page
Settings
State
Host
Local Port
Remote Port
Severity Log
Level
Description
Select to enable or disable the syslog.
Enter the IP address of the remote server to which system logs
are sent for storage.
Enter the number of the local port on the XPort Pro from which
system logs are sent.
Enter the number of the port on the remote server that supports
logging services. The default is 514.
From the drop-down box, select the minimum level of system
message the XPort Pro should log. This setting applies to all
syslog facilities. The drop-down list is in descending order of
severity (e.g., Emergency is more severe than Alert.)
XPort Pro™ User Guide 67
HTTP Configuration
Hypertext Transfer Protocol (HTTP) is the transport protocol for communicating
hypertext documents on the Internet. HTTP defines how messages are formatted and
transmitted. It also defines the actions web servers and browsers should take in
response to different commands. This page has three links at the top for viewing
statistics and for viewing and changing configuration and authentication settings.
HTTP Statistics
Note: The HTTP log is a scrolling log, with the last Max Log Entries cached and
viewable. You can change the maximum number of entries that can be viewed on the
HTTP Configuration Page.
To view HTTP statistics:
This page shows various statistics about the Hypertext Transfer Protocol (HTTP)
server.
8 Services Settings
Click HTTP on the menu bar and then Statistics at the top of the page. The
HTTP Statistics page appears.
Figure 8-7. HTTP Statistics
XPort Pro™ User Guide 68
8 Services Settings
Change HTTP Configuration
On this page you can change HTTP configuration settings.
To configure HTTP:
1. Click HTTP on the menu bar and then Configuration at the top of the page. The
HTTP Configuration page opens.
Figure 8-8. HTTP Configuration
2. Enter or modify the following settings:
XPort Pro™ User Guide 69
8 Services Settings
HTTP
Configuration
Page Settings
HTTP Server Select On to enable the HTTP server.
HTTP Port Enter the port for the HTTP server to use. The default is 80.
HTTPS Port
HTTPS
Protocols
Max Timeout
Description
Enter the port for the HTTPS server to use. The default is
443. The HTTP server only listens on the HTTPSPort when
an SSL certificate is configured.
Select to enable or disable the following protocols:
SSL3 = Secure Sockets Layer version 3
TLS1.0 = Transport Layer Security version 1.0. TLS 1.0 is the
successor of SSL3 as defined by the IETF.
TLS1.1 = Transport Layer Security version 1.1
The protocols are enabled by default.
A server certificate and associated private key need to be
installed in the SSL configuration section to use HTTPS.
Enter the maximum time for the HTTP server to wait when
receiving a request. This prevents Denial-of-Service (DoS)
attacks. The default is 10 seconds.
Max Bytes
Logging Select On to enable HTTP server logging.
Max Log
Entries
Log Format
Enter the maximum number of bytes the HTTP server
accepts when receiving a request. The default is 40 kB (this
prevents DoS attacks).
Sets the maximum number of HTTP server log entries. Only
the last MaxLogEntries are cached and viewable.
Set the log format string for the HTTP server. Follow these
Log Format rules:
%a - remote IP address (could be a proxy)
%b - bytes sent excluding headers
%B - bytes sent excluding headers (0 = '-')
%h - remote host (same as '%a')
%{h}i - header contents from request (h = header string)
%m - request method
%p - ephemeral local port value used for request
%q - query string (prepend with '?' or empty '-')
%t - timestamp HH:MM:SS (same as Apache
'%(%H:%M:%S)t' or '%(%T)t')
%u - remote user (could be bogus for 401 status)
%U - URL path info
%r - first line of request (same as '%m %U%q <version>')
XPort Pro™ User Guide 70
8 Services Settings
HTTP
Configuration
Page Settings
3. Click Submit.
Description
%s - return status
HTTP Authentication
HTTP Authentication enables you to require usernames and passwords to access
specific web pages or directories on the XPort Pro's built-in web server.
To configure HTTP authentication settings:
1. Click HTTP on the menu bar and then Authentication at the top of the page.
The HTTP Authentication page opens.
Figure 8-9. HTTP Authentication
2. Enter or modify the following settings:
XPort Pro™ User Guide 71
8 Services Settings
HTTP Authentication
Settings
URI
Realm
Auth Type
Description
Enter the Uniform Resource Identifier (URI).
Note: The URI must begin with ‘/’ to refer to the
filesystem.
Enter the domain, or realm, used for HTTP. Required
with the URI field.
Select the authentication type:
None = no authentication is necessary.
Basic = encodes passwords using Base64.
Digest = encodes passwords using MD5.
SSL = the page can only be accessed over SSL (no
password is required).
SSL/Basic = the page is accessible only over SSL
and encodes passwords using Base64.
SSL/Digest = the page is accessible only over SSL
and encodes passwords using MD5.
Username Enter the Username used to access the URI.
Password Enter the Password for the Username.
3. Click Submit.
4. In the Current Configuration table, delete and clear currently stored settings as
necessary.
Note:
More than one Username per URI is permitted. Click Submit and enter the next
Username as necessary.
The URI, realm, username, and password are user-specified, free-form fields.
The URI must match the directory created on the XPort file system.
XPort Pro™ User Guide 72
RSS Settings
Really Simple Syndication (RSS) (sometimes referred to as Rich Site Summary) is a
method of feeding online content to Web users. Instead of actively searching for
XPort Pro configuration changes, RSS feeds permit viewing only relevant and new
information regarding changes made to the XPort Pro via an RSS publisher. The
RSS feeds may also be stored to the file system cfg_log.txt file.
To configure RSS settings:
1. Click RSS on the menu bar. The RSS page opens and shows the current RSS
configuration.
8 Services Settings
Figure 8-10. RSS
2. Enter or modify the following settings:
RSS Page
Settings
RSS Feed Select On to enable RSS feeds to an RSS publisher.
Persistent Select On to enable the RSS feed to be written to a file
Max Entries Sets the maximum number of log entries. Only the last Max
XPort Pro™ User Guide 73
Description
(cfg_log.txt) and to be available across reboots.
Entries are cached and viewable.
3. Click Submit.
4. In the CurrentStatus table, view and clear stored settings as necessary.
LPD Settings
In addition to its other functions, the XPort Pro acts as a print server if a printer is
connected to one of its serial ports.
Clicking the LPD (Line Printer Daemon) link in the menu bar, shows a LPD page.
This page has three links at the top for viewing print queue statistics, changing print
queue configuration, and printing a test page.
Because the LPD lines operate independently, you can specify different configuration
settings for each.
LPD Statistics Page
This read-only page shows various statistics about the LPD server.
To view LPD statistics:
8 Services Settings
Click LPD on the menu bar and then select the line and Statistics at the top
of the page. The LPD page shows LPD statistics.
Figure 8-11. LPD Statistics
XPort Pro™ User Guide 74
8 Services Settings
LPD Configuration Page
Here you can change LPD configuration settings.
To configure LPD settings:
1. Click LPD on the menu bar, select the LPD line and click Configuration. The
LPD Configuration page appears.
Figure 8-12. LPD Configuration
2. Enter or modify the following settings:
LPD
Configuration
Page Settings
Banner Select Enabled to print the banner even if the print job does
XPort Pro™ User Guide 75
Description
not specify to do so. Selected by default.
8 Services Settings
LPD
Configuration
Page Settings
Binary Select Enabled for the XPort Pro to pass the entire file to the
Start of Job Select Enabled to print a "start of job" string before sending
End of Job Select Enabled to send an "end of job" string.
Formfeed Select Enabled to force the printer to advance to the next
Convert
Newlines
SOJ String If Start of Job (above) is enabled, enter the string to be sent
Description
printer unchanged. Otherwise, the XPort Pro passes only
valid ASCII and valid control characters to the printer. Valid
control characters include the tab, linefeed, formfeed,
backspace, and newline characters. All others are stripped.
Disabled by default.
the print data.
page at the end of each print job.
Select Enabled to convert single newlines and carriage
returns to DOS-style line endings.
to the printer at the beginning of a print job. The limit is 100
characters.
Indicate whether the string is in text or binary format.
EOJ String If End of Job (above) is enabled, enter the string to send at
the end of a print job. The limit is 100 characters. Indicate
whether the string is in text or binary format.
Queue Name
To change the name of the print queue, enter a new name.
The name cannot have white space in it and is limited to 31
characters. The default is LPDQueueX (for line number X)
XPort Pro™ User Guide 76
99.. SSeeccuurriittyy SSeettttiinnggss
SSH Settings
Secure Shell (SSH) is a protocol used to access a remote computer over an
encrypted channel. It is a protocol for managing the security of data transmission
over the Internet. It provides encryption, authentication, and message integrity
services. This page has four links at the top for viewing and changing SSH server
host keys, SSH server authorized keys, SSH client known hosts, and SSH client
users.
Note: For more information, see 16 Security in Detail
SSH Server Host Keys
To configure the SSH server host keys:
1. Click SSH on the menu bar. The SSH Server Host Keys page appears.
Figure 9-1. SSH Server: Host Keys
XPort Pro™ User Guide 77
9 Security Settings
2. Enter or modify the following settings:
SSH Server:
Host Keys
Page Settings
Upload Keys
Private Key
Public Key
Key Type
Create New
Keys
Key Type
Bit Size
Description
Enter the path and name of the existing private key you want
to upload or use the Browse button to select the key. Be sure
the private key will not be compromised in transit. This
implies the data is uploaded over some kind of secure private
network.
Enter the path and name of the existing public key you want
to upload or use the Browse button to select the key.
Select a key type to use:
RSA = use this key with SSH1 and SSH2 protocols.
DSA = use this key with the SSH2 protocol.
Select a key type to use for the new key:
RSA = use this key with the SSH1 and SSH2 protocols.
DSA = use this key with the SSH2 protocol.
Select a bit length for the new key:
512
768
1024
Using a larger bit size takes more time to generate the key.
Approximate times are:
10 seconds for a 512 bit RSA Key
15 seconds for a 768 bit RSA Key
1 minute for a 1024 bit RSA key
30 seconds for a 512 bit DSA key
1 minute for a 768 bit DSA key
2 minutes for a 1024 bit DSA key
Some SSH clients require RSA host keys to be at least 1024
bits long.
3. Click Submit.
XPort Pro™ User Guide 78
9 Security Settings
SSH Server Authorized Users
On this page you can change SSH server settings for Authorized Users.
SSH Server Authorized Users are accounts on the XPort that can be used to log into
the XPort Pro using SSH. For instance, these accounts can be used to SSH into the
CLI or open an SSH connection to a device port. Every account must have a
password.
The user's public keys are optional and only necessary if public key authentication is
required. Using public key authentication allows a connection to be made without the
password being asked.
Under Current Configuration, User has a Delete User link, and Public RSA Key
and Public DSA Key have View Key and Delete Key links. If you click a Delete link,
a message asks whether you are sure you want to delete this information. Click OK
to proceed or Cancel to cancel the operation.
To configure the SSH server for authorized users:
1. Click SSH on the menu bar and then Server Authorized Users at the top of the
page. The SSH Server: Authorized Users page appears.
Figure 9-2. SSH Server: Authorized Users
XPort Pro™ User Guide 79
9 Security Settings
2. Enter or modify the following settings:
SSH Server:
Authorized Users
Page Settings
Username
Password
Public RSA Key
Public DSA Key
3. Click Submit.
Description
Enter the name of the user authorized to access the SSH
server.
Enter the password associated with the username.
Enter the path and name of the existing public RSA key
you want to use with this user or use the Browse button
to select the key. If authentication is successful with the
key, no password is required.
Enter the path and name of the existing public DSA key
you want to use with this user or use the Browse button
to select the key. If authentication is successful with the
key, no password is required.
SSH Client Known Hosts
On this page you can change SSH client settings for known hosts.
Note: You do not have to complete the fields on this page for communication to
occur. However, completing them adds another layer of security that protects against
Man-In-The-Middle (MITM) attacks.
To configure the SSH client for known hosts:
1. Click SSH on the menu bar and then Client Known Hosts at the top of the page.
The SSH Client: Known Hosts page appears.
Figure 9-3. SSH Client: Known Hosts
2. Enter or modify the following settings:
XPort Pro™ User Guide 80
9 Security Settings
SSH Client:
Known Hosts
Page Settings
Server
Public RSA Key
Public DSA Key
Note: These settings are not required for communication. They protect against Man-
In-The-Middle (MITM) attacks.
3. Click Submit.
In the CurrentConfiguration table, delete currently stored settings as
necessary.
Description
Enter the name or IP address of a known host. If you enter
a server name, the name should match the name of the
server used as the Remote Address in Connect mode
tunneling.
Enter the path and name of the existing public RSA key you
want to use with this known host or use the Browse button
to select the key.
Enter the path and name of the existing public DSA key you
want to use with this known host or use the Browse button
to select the key.
SSH Client User Configuration
On this page you can change SSH client settings for users.
SSH client known users are used by all applications that play the role of an SSH
client, specifically tunneling in Connect Mode. At the very least, a password or key
pair must be configured for a user. The keys for public key authentication can be
created elsewhere and uploaded to the device or automatically generated on the
device. If uploading existing keys, be sure the private key will not be compromised in
transit. This implies the data is uploaded over some kind of secure private network.
Note: If you are providing a key by uploading a file, make sure that the key is not
password protected.
To configure the SSH client users:
1. Click SSH on the menu bar and then SSH Client Users at the top of the page.
The SSH Client: Users page appears.
XPort Pro™ User Guide 81
9 Security Settings
Figure 9-4. SSH Client: Users
2. Enter or modify the following settings:
SSH Client:
Description
Users Page
Settings
Username
Enter the name that the XPort Pro uses to connect to a SSH
server.
Password
Remote
Command
Enter the password associated with the username.
Enter the command that can be executed remotely. Default is
shell, which tells the SSH server to execute a remote shell
upon connection. This command can be changed to anything
the remote host can perform.
Private Key
Enter the name of the existing private key you want to use
with this SSH client user. You can either enter the path and
name of the key, or use the Browse button to select the key.
Public Key
Enter the path and name of the existing public key you want
to use with this SSH client user or use the Browse button to
select the key.
Key Type
Select the key type to be used. Choices are:
RSA = use this key with the SSH1 and SSH2 protocols.
DSA = use this key with the SSH2 protocol.
XPort Pro™ User Guide 82
9 Security Settings
SSH Client:
Users Page
Settings
Create New
Keys
Username
Description
Enter the name of the user associated with the new key.
Key Type
Bit Size
3. Click Submit.
In the CurrentConfiguration table, delete currently stored settings as
necessary.
Select the key type to be used for the new key. Choices are:
RSA = use this key with the SSH1 and SSH2 protocols.
DSA = use this key with the SSH2 protocol.
Select the bit length of the new key:
512
768
1024
Using a larger Bit Size takes more time to generate the key.
Approximate times are:
10 seconds for a 512 bit RSA Key
15 seconds for a 768 bit RSA Key
1 minute for a 1024 bit RSA key
30 seconds for a 512 bit DSA key
1 minute for a 768 bit DSA key
2 minutes for a 1024 bit DSA key
Some SSH clients require RSA host keys to be at least 1024
bits long.
SSL Settings
Secure Sockets Layer (SSL) is a protocol for managing the security of data
transmission over the Internet. It provides encryption, authentication, and message
integrity services. SSL is widely used for secure communication to a web server.
Certificate/Private key combinations can be obtained from an external Certificate
Authority (CA) and downloaded into the unit. Self-signed certificates with associated
private key can be generated by the device server itself.
For more information regarding Certificates and how to obtain them see Obtaining a
Certificate and Private Key on page 138.
To configure the XPort Pro SSL settings:
1. Click SSL from the main menu. The SSL page appears.
XPort Pro™ User Guide 83
9 Security Settings
Figure 9-5. SSL
2. Enter or modify the following settings:
SSL Page
Description
Settings
Upload
Certificate
New Certificate
This certificate identifies the XPort Pro to peers. It is used
for HTTPS and SSL Tunneling.
Enter the path and name of the certificate you want to
upload, or use the Browse button to select the certificate.
RSA or DSA certificates with 512 to 1024 bit public keys
are allowed.
The format of the file must be PEM. The file must start
with “-----BEGIN CERTIFICATE-----“ and end with “----END CERTIFICATE-----“. Some Certificate Authorities
XPort Pro™ User Guide 84
9 Security Settings
SSL Page
Settings
Description
add comments before and/or after these lines. Those
need to be deleted before upload.
New Private Key
Upload Authority
Certificate
Authority
Enter the path and name of the private key you want to
upload, or use the Browse button to select the private
key. The key needs to belong to the certificate entered
above.
The format of the file must be PEM. The file must start
with “-----BEGIN RSA PRIVATE KEY-----” and end with “-
----END RSA PRIVATE KEY-----”. Read DSA instead of
RSA in case of a DSA key. Some Certificate Authorities
add comments before and/or after these lines. Those
need to be deleted before upload.
One or more authority certificates are needed to verify a
peer's identity. It is used for SSL Tunneling. These
certificates do not require a private key.
Enter the path and name of the certificate you want to
upload, or use the Browse button to select the certificate.
RSA or DSA certificates with 512 to 1024 bit public keys
are allowed.
The format of the file must be PEM. The file must start
with “-----BEGIN CERTIFICATE-----” and end with “----END CERTIFICATE-----”. Some Certificate Authorities
add comments before and/or after these lines. Those
need to be deleted before upload.
Create New SelfSigned
Certificate
Country (2 Letter
Code)
State/Province
Locality (City)
Organization
Enter the 2-letter country code to be assigned to the new
self-signed certificate.
Examples: US for United States and CA for Canada
Enter the state or province to be assigned to the new
self-signed certificate.
Enter the city or locality to be assigned to the new self-
signed certificate.
Enter the organization to be associated with the new self-
signed certificate.
Example: If your company is called Widgets, and you are
setting up a web server for the Sales department, enter
Widgets for the organization.
XPort Pro™ User Guide 85
9 Security Settings
SSL Page
Settings
Description
Organization
Unit
Common Name
Expires
Key length
Enter the organizational unit to be associated with the
new self-signed certificate.
Example: If your company is setting up a web server for
the Sales department, enter Sales for your organizational
unit.
Enter the same name that the user will enter when
requesting your web site.
Example: If a user enters
http://www.widgets.abccompany.com to access your web
site, the Common Name would be
www.widgets.abccompany.com.
Enter the expiration date, in mm/dd/yyyy format, for the
new self-signed certificate.
Example: An expiration date of May 9, 2010 is entered
as 05/09/2010.
Select the bit size of the new self-signed certificate.
Choices are:
512 bits
768 bits
1024 bits
The larger the bit size, the longer it takes to generate the
key. Approximate times are:
10 seconds for a 512-bit RSA key
30 seconds for a 768-bit RSA key
1 minute for a 1024-bit RSA key
30 seconds for a 512-bit DSA key
2 minutes for a 768-bit DSA key
6 minute for a 1024-bit DSA key
Type
Select the type of key:
RSA = Public-Key Cryptography algorithm based on
large prime numbers, invented by Rivest Shamir and
Adleman. Used for encryption and signing.
DSA = Digital Signature Algorithm also based on large
prime numbers, but can only be used for signing.
Developed by the US government to avoid the patents on
RSA.
XPort Pro™ User Guide 86
1100.. VVIIPP SSeettttiinnggss
The VIP pages allow you to view current VIP statistics and configuration.
Virtual IP (VIP) Statistics
To view the XPort Pro VIP Statistics:
1. Click VIP from the main menu. The VIP Statistics page appears.
Figure 10-1. VIP Statistics Page
2. Enter or modify the following settings:
XPort Pro™ User Guide 87
10 VIP Settings
Line - Configuration
Page Settings
DSM IP Address
Local DNA ID
Tunnel User
Tunnel Port List
Current Tunnel Port
Conduit Status
Conduit Uptime
Time of Last
Replication
Config Name
Description
Address of the Device Services Manager (DSM) from
the bootstrap file.
Identity of this device from the bootstrap file.
User name of this device from the bootstrap file.
DSM listening ports from the bootstrap file.
DSM port currently used by the conduit.
Indicates the status of the secure communications
channel to the ManageLinx DSM.
Amount of time the XPort has had conduit
established.
Time and date when configuration information was
last received from a ManageLinx DSM.
The name used by the ManageLinx DSM to identifies
the XPort Pro.
Network Interfaces
Virtual IP (VIP) Configuration
To configure the XPort Pro VIP settings:
1. Click VIPConfiguration from the main menu. The VIP Configuration page
displays.
VIPs that can be used in Connect Mode VIP tunnels.
XPort Pro™ User Guide 88
10 VIP Settings
Figure 10-2. VIP Configuration Page
2. To allow VIP addresses to be used in Tunnel Accept Mode and Tunnel Connect
Mode, click Enabled. Default is Disabled.
The XPort Pro uses a flash file system to store files. Use the Filesystem option to
view current file diagnostics or modify files.
File System Statistics
This page shows various statistics and current usage information of the flash file
system.
Figure 11-1. File system Statistics
XPort Pro™ User Guide 90
11 Maintenance and Diagnostics Settings
To view file system statistics, compact, or format the XPort Pro file system:
1. Back up all files as necessary.
2. Click Filesystem on the menu bar. The File system page opens and shows the
current file system statistics and usage.
3. To compact the files, click Compact.
CAUTION: In the next step, all files and configuration settings on the file
system are destroyed upon formatting. Back up all files as necessary. Upon
formatting, the current configuration is retained.
4. To reformat the file system, click Format.
File System Browser
To browse the XPort Pro file system:
1. Click Filesystem on the menu bar and then Browse at the top of the page. The
File system Browser page opens and shows the current file system configuration.
XPort Pro™ User Guide 91
11 Maintenance and Diagnostics Settings
Figure 11-2. File system Browser
2. Click a filename to view the contents.
3. Click the X next to a filename to delete the file or directory. You can only delete a
directory if it is empty.
4. Enter or modify the following settings:
Note: Changes apply to the current directory view. To make changes within other
folders, click the folder or directory and then enter the parameters in the settings
listed below.
XPort Pro™ User Guide 92
11 Maintenance and Diagnostics Settings
File system Browser
Page Settings
Create
Description
File
Directory
Upload File
Copy File
Source
Destination
Move
Source
Destination
TFTP
Action
Mode
Local File
Remote File
Host
Port
Enter the name of the file you want to create, and
then click Create.
Enter the name of the directory you want to create,
and then click Create.
Enter the path and name of the file you want to
upload by means of HTTP(S) or use the Browse
button to select the file, and then click Upload.
Enter the location where the file you want to copy
resides.
Enter the location where you want the file copied.
After you specify a source and destination, click
Copy to copy the file.
Enter the location where the file you want to move
resides.
Enter the location where you want the file moved.
After you specify a source and destination, click
Move to move the file.
Select the action that is to be performed via TFTP:
Get = a “get” command will be executed to store a
file locally.
Put = a “put” command will be executed to send a
file to a remote location.
Select a TFTP mode to use. Choices are:
ASCII
Binary
Enter the name of the local file on which the
specified “get” or “put” action is to be performed.
Enter the name of the file at the remote location that
is to be stored locally (“get’) or externally (“put”).
Enter the IP address or name of the host involved in
this operation.
Enter the number of the port involved in TFTP
operations.
Click Transfer to perform the TFTP transfer.
XPort Pro™ User Guide 93
Protocol Stack Configuration
To configure the XPort Pro network stack protocols:
1. Click Protocol Stack on the menu bar. The Protocol page appears with links to
the TCP, IP, ICMP, and ARP protocols.
2. Click on one of the protocol names to see the details of the settings for that
protocol.
TCP Settings
Figure 11-3. TCP Protocol Page
11 Maintenance and Diagnostics Settings
On the TCP page, you may modify the following settings:
Send RSTs:
TCP contains six control bits, with one or more defined in each packet. RST is one of
the control bits. The RST bit is responsible for telling the receiving TCP stack to end
a connection immediately.
Select Enabled to enable the sending of the RST flag.
CAUTION: Setting this flag may pose a security risk.
Select Disabled to disable the sending of the RST flag.
Ack Limit:
XPort Pro™ User Guide 94
11 Maintenance and Diagnostics Settings
The Ack Limit specifies how many packets must be received before an ACK is
forced. If there is a large amount of data to acknowledge, an ACK will be forced
before this.
If the sender TCP implementation waits for an ACK before sending more data even
though the window is open, setting Ack Limit to "1" packet will improve performance
by forcing immediate acknowledgements.
Send Data:
The Send Data selection governs when data may be sent into the network. The
Standard implementation waits for an ACK before sending a packet less than the
maximum length. Select Expedited to send data whenever the window allows it.
Click Submit after changing the desired settings.
IP Settings
Figure 11-4. IP Protocol Page
1. On the IP Protocol page, enter the number of hops a transmitted multicast packet
may make before it is terminated, as a Multicast Time to Live limit.
2. Click Submit after changing the value.
XPort Pro™ User Guide 95
11 Maintenance and Diagnostics Settings
ICMP Settings
Figure 11-5. ICMP Protocol Page
1. On the ICMP Protocol page, choose Enabled or Disabled.
2. Click Submit after changing the selection.
ARP Settings
Figure 11-6. ARP Protocol Page
1. On the ARP Protocol page, enter the time, in hours, minutes and seconds, for the
ARP timeout. This is the maximum duration an address remains in the cache.
2. Click Submit after changing the desired fields.
Note: Both the IP and MAC addresses are required for the ARP cache.
3. Enter the IP address to add to the ARP cache.
XPort Pro™ User Guide 96
4. Enter the MAC address to add to the ARP cache.
5. Click Add after supplying both fields.
Under Current State, select Remove All to remove all entries in the ARP
cache, or select Remove to remove a specific entry from the ARP cache.
IP Address Filter
The IP address filter specifies the hosts and subnets permitted to communicate with
the XPort Pro.
Note: If using DHCP/BOOTP, ensure the DHCP/BOOTP server is in this list.
To configure the IP address filter:
1. Click IP Address Filter on the menu bar. The IP Address Filter page opens to
display the current configuration.
11 Maintenance and Diagnostics Settings
Figure 11-7. IP Address Filter Configuration
2. Enter or modify the following settings:
IP Address Filter
Page Settings
IP Address
XPort Pro™ User Guide 97
Description
Enter the IP address to add to the IP filter table.
11 Maintenance and Diagnostics Settings
3. In the Current State table, click Remove to delete settings as necessary.
4. Click Submit.
Query Port
The query port (0x77FE) is used for the automatic discovery of the device by the
DeviceInstaller utility. Only 0x77FE discover messages from DeviceInstaller are
supported. For more information on DeviceInstaller, see
on page 19
To configure the query port server:
1. Click Query Port on the menu bar. The Query Port page opens to display the
Network Mask
current configuration.
Figure 11-8. Query Port Configuration
Enter the IP address’ network mask in dotted notation.
Using DeviceInstaller
2. Select On to enable the query port server.
3. Click Submit.
XPort Pro™ User Guide 98
Diagnostics
The XPort Pro has several tools for diagnostics and statistics. The options at the top
of the page allow for the configuration or viewing of MIB2 statistics, IP socket
information, ping, traceroute, DNS lookup, memory, buffer pools, processes, and
hardware.
Hardware
This read-only page shows the current hardware configuration.
To display the XPort Pro hardware diagnostics:
11 Maintenance and Diagnostics Settings
Click Diagnostics on the menu bar. The Diagnostics: Hardware page opens
and shows the current hardware configuration.
Figure 11-9. Diagnostics: Hardware
XPort Pro™ User Guide 99
11 Maintenance and Diagnostics Settings
MIB-II Statistics
The MIB-II Network Statistics page shows the various SNMP-served Management
Information Bases (MIBs) available on the XPort Pro.
To view XPort Pro MIB-II statistics:
1. Click Diagnostics on the menu bar and then MIB-II at the top of the page menu.
The MIB-II Network Statistics page opens.
Figure 11-10. MIB-II Network Statistics
2. Click any of the available links to open the corresponding table and statistics. For
more information, refer to the following Requests for Comments (RFCs):
RFC 1213
RFC 2011
RFC 2012
RFC 2013
RFC 2096
Original MIB-II definitions.
Updated definitions for IP and ICMP.
Updated definitions for TCP.
Updated definitions for UDP.
Definitions for IP forwarding.
XPort Pro™ User Guide 100
Loading...
+ hidden pages
You need points to download manuals.
1 point = 1 manual.
You can buy points or you can get point for every manual you upload.