Lightwave Communications SCS3230 User Manual

Lightwave Communications, Inc.
Revision A
SCS3230
SSH Option for Console Server 3200
System Administrator's Guide
NOTE: Use this Guide and the ConsoleServer 3200 Manual, PN 15.00.017 for any new installation
May 2002
ConsoleServer 3200 System Lightwave Communications
Copyright & Trademark
© 2002, Lightwave Commu nications, a Lantronix Company. All rights reserved. No part of the contents of this book may be transmitted or reproduced in any form or by any means without the written permission of Lantronix. Printed in the United States of America. Also electronically distributed via Adobe PDF file format.
Ethernet is a trademark of XEROX Corporation. UNIX is a registered trademark of The Open Group. Windows 95, Windows 98, Windows 2000, and Windows NT are trademarks of Microsoft Corp. Netscape is a trademark of Netscape Communications Corporation. Adobe Acrobat and PDF are trademarks of Adobe Corporation. Other trademarks and service marks are held by their respective owners.
Lightwave Communications, Inc. (LCI), A Lantronix Company
100 Washington Street Milford, CT 06460 USA
Phone (800) 871-9838 • (203) 878-9838 Fax: (203) 874-0157 Email: info@lightwavecom.com Internet: www.lightwavecom.com
Lantronix
15353 Barranca Parkway Irvine, CA 92618 USA
Phone: (949) 453-3990 Fax: (949) 453-3995 Internet: www.lantronix.com
Rev. A ii www.lightwavecom.com
A Lantronix Company SCS3230 System Administrator's Guide
Disclaimer & Revisions
Operation of this equipment in a residential area is likely to cause interference in which case the user, at his or her own expense, will be required to take whatever measures may be required to correct the interference.
Attention: This product has been designed to comply with the limits for a Class A
digital device pursuant to Part 15 of FCC Rules. These limits are designed to provide reasonable protection against such interference when operating in a commercial environment. This equipment generates, uses, and can radiate radio frequency energy, and if not installed and used in accordance with this guide, may cause harmful interference to radio communications.
Changes or modifications to this device not explicitly approved by Lantronix will void the user's authority to operate this device.
The information in this guide may change without notice. The manufacturer assumes no responsibility for any errors that may appear in this guide.
Date Rev. Part No. Comments
April
2002 A (Preliminary)
May
2002
A Incorporated Addendum info on root -level password, and binary
15.00.038 System Administrator's Guide for SCS3230, an optional enhancement to the ConsoleServer 3200 system.
update file location (pp.9, 25, 39).
15.00.038 iii May 2002
ConsoleServer 3200 System Lightwave Communications
Declaration of Conformity
(according to ISO/IEC Guide 22 and EN 45014)
Manufacturer’s Name & Address:
Lightwave Communications, a Lantronix Company 100 Washington Street, Milford, CT 06460 USA
Declares that the following product:
Product Name & Model: Lightwave Console Server 3200
Conforms to the following standards or other normative documents:
Safety:
EN60950: 1992+A1, A2, A3, A4, A11
Electromagnetic Emissions:
EN55022 Class A: 1998 (CISPR 22, Class A: 1993, A1: 1995, A2: 1996) EN1000-3-2/A14: 2000 EN10003-3: 1994
Electromagnetic Immunity:
EN55024: 1998 Information Technology Equipment-Immunity Characteristics:
EN61000-4-2: 1995 Electro-Static Discharge Test EN61000-4-3: 1996 Radiated Immunity Field Test EN61000-4-4: 1995 Electrical Fast Transient Test EN61000-4-5: 1995 Power Supply Surge Test EN61000-4-6: 1996 Conducted Immunity Test EN61000-4-8: 1993 Magnetic Field Test EN61000-4-11: 1994 Voltage Dips & Interrupts Test
Supplementary Information:
This Class A digital apparatus complies with Canadian ICES-003 (CSA) and has been verified as being compliant within the Class A limits of the FCC Radio Frequency Device Rules (FCC Title 47, Part 15, Subpart B CLASS A), measured to CISPR 22: 1993 limits and methods of measurement of Radio Disturbance Characteristics of Information Technology Equipment. This product also complies with the requirements of the Low Voltage Directive 72/23/EEC and the EMC Directive 89/336/EEC.
The Console Server 3200 carries the CE mark since it has been tested and found compliant with the following standards:
Safety: EN 60950 Emissions: EN 55022 Class A Immunity: EN 55024
Rev. A iv www.lightwavecom.com
A Lantronix Company SCS3230 System Administrator's Guide
Table of Contents
1: Product Description______________________________________________________9
1.1 Quick Start _____________________________________________________ 9
1.2 Upgrade Description _____________________________________________10
1.3 System Features ________________________________________________10
1.4 Hardware Features _______________________________________________ 11
1.5 3230 Network/Control Card________________________________________12
1.5.1 10/100 Port (Network) ______________________________________14
1.5.2 TERM Port (Console)_______________________________________15
1.6 Backup and Restore Commands _____________________________________15
2: System Overview________________________________________________________16
2.1 Connect Up to Thirty-two RS-232C Compatible Ports_____________________16
2.2 128K FIFO Audit Trail ___________________________________________16
2.3 Connections ___________________________________________________16
2.4 Security Passwords ______________________________________________17
2.5 Interface ______________________________________________________17
3: System Components _____________________________________________________18
3.1 3200 Chassis ___________________________________________________18
3.1.1 Power Supply Module ______________________________________18
3.1.2 3200 Switch Cards _________________________________________18
3.2 Device Cards ___________________________________________________ 19
3.3 Access Cards ___________________________________________________ 19
3.3.1 NETWORK / CONTROL Ca rd________________________________19
3.3.2 CHANNEL EXTENDER Cards _______________________________20
3.3.3 TERMINAL Cards _________________________________________ 20
3.3.4 3200 Network Cards ________________________________________ 20
3.3.5 3200 10/100 Network Cards __________________________________21
3.3.6 Modem Card _____________________________________________21
4: Installation Instructions __________________________________________________22
4.1 Items in a SCS3230 Kit ___________________________________________22
4.2 Move Database from your CS3200 to SCS3230__________________________23
4.2.1 Backup Procedure of your CS3200 System _______________________23
4.2.2 Restore Procedure _________________________________________23
4.2.3 To RESTORE from a 3200 to a 3230 ____________________________ 24
4.2.4 LCI Update ______________________________________________25
4.3 Connecting to the TERM Port ______________________________________26
5: Connecting Equipment to the SCS3230 _____________________________________27
5.1 Terminal Card __________________________________________________ 27
5.2 NETWORK / CONTROL Card _____________________________________28
5.3 Modem Card ___________________________________________________ 28
5.4 Device Card ___________________________________________________29
15.00.038 v May 2002
ConsoleServer 3200 System Lightwave Communications
6: SCS3230 Setup Script and System Administration ___________________________33
6.1 Power-up Sequence and Basic Use of the Administrator Functions ___________34
6.1.1 Logging In, Serial Connection_________________________________35
6.1.2 Logging In, Network Connection ______________________________35
6.1.3 Logging Out______________________________________________36
6.1.4 System Help (Command List) _________________________________37
6.1.5 Abbreviations_____________________________________________38
6.2 Sys Admin vs. root access _________________________________________39
6.3 Setup Script ____________________________________________________ 40
6.3.1 Hostname and IP Address____________________________________41
6.3.2 Timezone (Clock)__________________________________________44
6.3.3 Configure DNS ___________________________________________46
6.3.4 Hosts___________________________________________________48
6.3.5 Services_________________________________________________49
6.3.6 Syslog __________________________________________________50
6.3.7 SSH Logins ______________________________________________ 51
6.3.8 TELNET logins ___________________________________________52
6.3.9 NTP Daemon_____________________________________________52
6.3.10 Configure the Firewall _____________________________________53
6.3.11 Firewall Reject Method_____________________________________55
6.3.12 Ping Attempts ___________________________________________55
6.3.13 Confirm Changes _________________________________________57
6.3.14 SAVE Command _________________________________________58
7: Creating and Managing Users_____________________________________________59
7.1 Adding a User ID _______________________________________________59
7.2 Editing a User ID________________________________________________61
7.3 Listing User IDs ________________________________________________61
7.4 Deleting a User ID _______________________________________________ 63
7.5 Devices Command_____________________________________________63
7.6 Terminals Command___________________________________________65
7.7 Network Commands ____________________________________________65
7.8 Modem Command _______________________________________________66
7.9 Status Commands _______________________________________________67
7.9.1 CONNECTIONS Command ___________________________________ 67
7.9.2 LISTCARDS Command _____________________________________68
7.9.3 VERSION Command _______________________________________68
7.9.4 INFO Command __________________________________________69
7.9.5 POWERSTATUS Command ___________________________________ 70
7.9.6 LOG Command____________________________________________70
7.10 Sys Admin Session Management Commands ___________________________71
7.10.1 LINESPERPAGE Command_________________________________72
7.10.2 TIMEOUT Command ______________________________________72
7.11 Breaking User Connections ________________________________________72
7.11.1 BREAK Command ________________________________________73
7.11.2 FORCELOGOUT Command __________________________________ 73
7.11.3 TELNETTIMEOUT Command _______________________________74
7.11.4 MODEMTIMEOUT Command_________________________________74
Rev. A vi www.lightwavecom.com
A Lantronix Company SCS3230 System Administrator's Guide
8: User Access and Interface ________________________________________________75
8.1 Terminal Card __________________________________________________ 75
8.2 Network Card __________________________________________________75
8.3 Modem Card ___________________________________________________ 76
8.3.1 The Bye Command ________________________________________76
8.4 Overview of Commands ___________________________________________ 77
8.5 Logging In and Changing Passwords _________________________________79
8.6 Logging Out ___________________________________________________80
8.7 Checking Connections ____________________________________________80
8.8 Selecting a Device Port ___________________________________________81
8.9 Listening to a Server Session _______________________________________82 F2 PULL-DOWN MENU TO LISTEN TO A DEVICE PORT PART 2 ________83
8.10 Direct Mode ___________________________________________________84
8.10.1 Direct Mode Escape Sequence _______________________________84
8.11 Using the Buffer ________________________________________________85
9: The Break Generation Sequence___________________________________________88 10: Displaying System Information___________________________________________89 11: Front Panel Display Information:_________________________________________90 12: Appendix A – Command Abbreviations ___________________________________94 13: Appendix B – Hexadecimal ASCII Code ___________________________________96
15.00.038 vii May 2002
ConsoleServer 3200 System Lightwave Communications
For Your Notes
Rev. A viii www.lightwavecom.com
A Lantronix Company SCS3230 System Administrator's Guide
CONTROL
1: Product Description
The SCS3230 is a ConsoleServer 3200 (or CS3200) that has been upgraded for enhanced security and control capabilities, including SSH capabilities required for today's secure server environment, and network features such as LDAP and NIS. The upgrade is available as a kit, or the individual parts (cards, cables, etc.) can be ordered separately.
I
0
I
0
TERMINAL NETWORK SWITCHTERMINAL NETWORKMODEM
AA
BB
CC
DD
SWITCH
DEVICE DEVICE DEVICEDEVICEDEVICEDEVICE
CC CCC C
DEVICE
DEVICE
AAAAAA
DDDDDD
AAA
BBBBBBBB
CC
BDD
Fig. 1 Rear View of original Console Server 3200 - notice Control Card to far right
The SCS3230 upgrade replaces the CONTROL card of the 3200 with a new 10/100 BaseT NETWORK and CONTROL card which includes a Linux-based operating system, and also replaces the NETWORK and TERMINAL cards of the 3200 with CHANNEL EXTENDER cards.
1.1 Quick Start
Overview of Upgrading from a CS3200 to a SCS3230 (all covered in this manual):
1. Backup the Database of your existing CS3200 System.
2. Obtain the SCS3230 Kit, which includes the cards, cables and this manual.
3. Locate the firmware updates for the DEVICE cards; they are stored in the /lci/bin directory on the NETWORK/CONTROL card. You may also download the update files from the Lightwave FTP site. DEVICE cards MUST be updates to Version 4.03 firmware.
4. Remove the CS3200 from service.
5. Remove the CONTROL card, the TERMINAL card(s) and the Network or 10/100 card(s)
6. Install the 3230's NETWORK/CONTROL card in place of the CONTROL card.
7. Install the four CHANNEL EXTENDERS in place of the TERMINAL or NETWORK cards.
8. Connect the four cables for the CHANNEL EXTENDERS.
9. Turn the System On, and administer the system using the TERM port. Set up your IP network connection information to get that operating.
10. RESTORE your CS3200's database into the SCS3230 system.
The SCS3230 system should be fully operational at this point.
15.00.038 - 9 - May 2002
ConsoleServer 3200 System Lightwave Communications
1.2 Upgrade Description
The SCS3230 uses most of the same cards as the CS3200, and uses the CS3200 chassis. The SCS3230 is below. Notice the SCS3230's NETWORK/CONTROL card to the far right.
DEVICE
NETWORK/
CONTROL
10/100
T E R M
C H A N N E L
E X T E N D E R S
N E T
Caution! Replace with same type and rating fuse.
100-240V ~, 1A, 50/60 Hz
T 4A, 250 VAC
MODEM
CHANNEL
EXTEND ER
CHANNEL
CHANNEL
EXTENDER EXTENDER
TERMIN AL
A
B
C
D
SWITCH
SWITCH
DEVICE DEVICE DEVICEDEVIC EDEVICEDEVICE
A A AA A A
B B B B B B B B
C C CC C C
D D D D D D
DEVIC E
A A
C C
D D
Fig. 2 Rear View of SCS3230 - notice the NETWORK / CONTROL card in far right slot.
Also note that this diagram shows three (3) Channel Extenders and one Terminal card in slots B through E, and 8 DEVICE cards.
1.3 System Features
The SCS3230 system is a Linux-based Console Server offering secure IP network -based connections to up to 32 connect ed devices via EIA-232 protocol. Linux administrators will find familiar commands and should need little guidance on administering the SCS3230 to co -operate in their server installation.
System users will not encounter any differences in operation. The commands and functions of the SCS3230 are designed to minimize any conversion issues.
The SCS3230 offers the following important features (many of which are also found in the CS3200 product):
Hot-Swappable cards
Dual Redundant Power Supplies
10/100 IP Network Interface
Connect up to 32 RS-232 serial devices
ID / Password Security, configurable access rights
OpenSSH version 2 security
Open LDAP
NIS capable for remote database rights
No unintentional break will ever be sent to attached servers
Local access through TERM port (the 3230's Console port)
Field upgradeable Flash memory
User programming interface for simple administration and setup
Rev. A - 10 - www.lightwavecom.com
A Lantronix Company SCS3230 System Administrator's Guide
1.4 Hardware Features
3RU tall (5-1/4 inches) rack -mountable Server
One (1) 10/100 baseT Network Port for connection to your IP network
Up to 32 serial DEVICE ports, RS232, connected via Category 5 (RJ45) wiring
One (1) serial TERMINAL port, for VT100 console or PC with emulation
128KB-per-port Buffer Memory for DEVICE ports
Front Panel multi-line backlit LCD display and pushbutton controls
128MB FLASH Memory, 128MB RAM
* Redundant Power Inputs (chassis dependant)
Optional Analog Modem for dial up access (non-secure)
Power Options: Universal AC (100-240V) or -48VDC
* Some early CS3200 Chassis employ a single AC Power Input module. The Power Module is field-replaceable to provide redundant power capabilities, if required.
The SCS3230 is one of the most versatile network administration tools available today, allowing as many as 17 simultaneous users to access up to 32 connected devices via the RS-232C serial protocol. Pull -down menus help users navigate through all the functions of the SCS3230, creating an easy-to-use way to access system resources.
The SCS3230 consists of eight device card slots, two switch card slots, four access card slots, one modem slot and one Network/Control slot. The power supply slot contains two independent power supplies for redundant operation. The basic system consists of the power supply module, two switch cards, the Network / Control card, and in most cases, four Channel Extender Cards. The remaining card slots are populated according to the application requirements.
All system parameters are stored in non-volatile data flash memory. This data flash memory is organized such that there is always a complete copy of all data. Typical stored information includes the users’ identities, user passwords, port parameters (such as baud rate, device name, etc.) and other system information. The data flash memory allow for a maximum of 200 user profiles to be stored, along with the parameters for all cards. System parameters may be backed up and restored from a local serial connection.
An important feature of the SCS3230 is the ability to re-configure the system hardware and software without turning off the power. The system boards have circuitry that allows them to be 'hot swapped' so the system may be expanded at any time while in use.
System updates can be accomplished via software upload to the system. For most updates, the system need not be restarted or taken out of service. Some operations or updates (e.g., Network update) may require the network ports be restarted.
15.00.038 - 11 - May 2002
ConsoleServer 3200 System Lightwave Communications
FLASH
TERM
(Console) connector
,
Four
CHANNEL EXTENDER
NETWORK
10/100 BaseT
1.5 3230 Network/Control Card
The SCS3230 offers the following benefits and features over the conventional CS3200 product:
Linux-based Secure Console Server using OpenSSH v2
ID / Password Security, configurable access rights
One RS-232 Terminal port (for your local Console)
10/100 Network Port (TCP/IP) -- an option for the CS3200
RJ45, for RS232 terminal
ports - use four (4) CAT5 cables
to individual
Channel Extender cards
Memory
Device
IP network connection
The SCS3230 replaces the standard CONTROL card with the new combination NETWORK / CONTROL card, and fills the four Network / Terminal Card slots with "Channel Extender" cards.
The Channel Extenders are used by the new Network / Control card to extend the number of
Rev. A - 12 - www.lightwavecom.com
A Lantronix Company SCS3230 System Administrator's Guide
channels available to the 10/100 IP network connection. [The Channel Extender cards are the same as those used with the CS3200's 10/100 Network card.]
The NETWORK / CONTROL Card replaces the CONTROL card (far right slot) in 3200
The (4) Channel Extenders are used in place of the NETWORK or TERMINAL cards.
15.00.038 - 13 - May 2002
ConsoleServer 3200 System Lightwave Communications
Four (4) 24-inch long CAT5 cables (PN 200.1061; straight-through, fully pinned) are used between the Channel Extenders and the NETWORK / CONTROL card. One cable is used to connect each of the Channel Extenders in Slots B through E to the corresponding port (see below) on the new Network/Control Card.
DEVICE
NETWORK/
CONTROL
10/100
T E R M
C H A N N E L
E X T E N D E R S
N E T
Caution! Replace with same type and rating fuse.
100-240V ~, 1A, 50/60 Hz
T 4A, 250 VAC
MODEM
CHANNEL
EXTENDER
CHANNEL
CHANNEL
EXTENDER EXTENDER
TERMINAL
SWITCH
SWITCH
A
B
C
D
DEVICE DEVICE DEVICEDEVICEDEVICEDE VICE
A A AA A A
B B B B B B B B
C C CC C C
D D D D D D
DEVICE
A A
C C
D D
If a Terminal Card remains in the 3230 system, that Channel Extender port of the Network / Control Card is not used. Shown above, Network Slot E's Channel Extender position is "unused"; and this unnecessary cable would not be installed in that position.
1.5.1 10/100 Port (Network)
The 10/100 BaseT Network connection is accessible on the bottom RJ45 connector on the NETWORK / CONTROL card.
Rev. A - 14 - www.lightwavecom.com
A Lantronix Company SCS3230 System Administrator's Guide
1.5.2 TERM Port (Console)
A Terminal port, or Console (labeled TERM) is available at the top RJ45 connector on the NETWORK / CONTROL Card. This is an EIA -232-compliant terminal position, typically used for System Administration purposes.
The TERM port on the NETWORK/CONTROL card is fixed at 9600 baud, 8 data bits, No Parity, and one Stop bit (9600 / 8 / N / 1) and is a DCE device.The TERM port has a higher Terminal priority than the 10/100 Network Port on this card, and can be used for forced logout of abandoned or other undesirable connections.
1.6 Backup and Restore Commands
The SCS3230 system is fully compatible with the "Backup and Restore" capabilities of the CS3200, so transferring your user database from your existing CS3200 into the new SCS3200 hardware is supported.
15.00.038 - 15 - May 2002
ConsoleServer 3200 System Lightwave Communications
2: System Overview
For simplicity, we will discuss the features and capabilities of the SCS3230 as if it were a new and different system, not merely an upgrade to a ConsoleServer 3200. The SCS3230 is designed to operate as closely to the original ConsoleServer3200 as possible from a user's perspective, but still provide the capabilities needed for the secure server environment.
Existing 3200 customers maintain their investment and can offer enhanced security and control for their terminal server systems. Existing users will not require retraining since all commands and features of the SCS3230 option are the same as found in the CS3200. Even the upgrade process accepts the existing site database for rapid deployment of the SCS3230 equipment.
2.1 Connect Up to Thirty-two RS-232C Compatible Ports
The SCS3230 is plug-compatible with any RS-232C device , DTE or DCE. These include a variety of network servers, routers, or any other LAN/WAN computers on the network. Connections are made by routing the device signals through the switch cards to the appropriate user interface port.
2.2 128K FIFO Audit Trail
The SCS3230 stores the equivalent of approximately 200 screens worth of data (128K) per device port in a true FIFO buffer for each DEVICE port. This data may be viewed 'off-line' at any time by users accessing the device port buffer.
Should more than 128K of data be received in a buffer, the oldest data will be discarded, in the amount of the 'overflow'. By operating in this fashion, the most recent data is collected and the largest amount of data that can be saved will be maintained.
2.3 Connections
The system is capable of 17 simultaneous full-duplex connect ions to the connected devices. The administration functions may be accessed through a local serial connection or through a network connection. The NETWORK / CONTROL card (with a full complement of four Channel Extender cards) supports up to 16 users connections plus one connection to the administration functions. The NETWORK / CONTROL card also provides one TERM port (for a System Administrator's serial Console)
The TERMINAL cards (a 3200 access card) may be used for applications requiring additional local serial terminals. Each Terminal Card is installed in place of one of the Channel Extender
Rev. A - 16 - www.lightwavecom.com
A Lantronix Company SCS3230 System Administrator's Guide
cards. By reducing the number of Channel Extender ports, the maximum number of available connections for 10/100 network access is reduced by four sessions for each Terminal Card installed. Illustrations showing a mixture of Channel Extender cards and Terminal Cards are found on pages 11 and 16 of this Guide.
An optional MODEM connection is also available, however its connections are not 'secure' and its use is not recommended except in those instances when security will not be compromised by dial-in access using the modem. The SCS3230's modem connection is not subject to the Linux security controls of the other access ports.
2.4 Security Passwords
The System Administrator may define up to 200 user profiles. Each user is assigned a unique password by the system administrator. The system forces the user to change the password the first time the user attempts to connect to any servers. After the users have changed their passwords, the system will not prompt for a change. The users change their passwords at whatever interval they feel is necessary.
The operating system is subject to Linux security constraints, including sysadmin and root level security. Users cannot access the sysadmin layer or the root layer of the system.
2.5 Interface
Interfaces to the DEVICE and TERMINAL cards are all RS-232C compliant. These ports are configured through the TERM port on the NETWORK / CONTROL card using a local Console, or via network connection through your TCP/IP network. All system access is password protected.
Each DEVICE port and TERMINAL has settings for baud rate, stop bits, parity, number of data bits, flow control, and port type (i.e., DTE or DCE). The TERM port (for your Console) on the NETWORK / CONTROL card has a fixed data format of 9600 / 8/ N / 1, and DCE.
The NETWORK / CONTROL card connects over a network using TCP/IP on 10- or 100-baseT at 10/100 Mbits (auto-negotiating). The 10/100 port on this card is assigned an IP address, a subnet mask, a default gateway, and an optional secondary destination path by Conso le configuration using the TERM port on this card during the initial setup of the system.
The optional MODEM card connects directly to a conventional modular phone jack (RJ11) to interface with a telephone network. The sys admin may designate a modem initialization string, or may use the default modem initialization string, which allows auto-answering on one ring. The modem provides card-edge visual status indicators.
Note: For 'secure' installations, the Modem should not be used . Modem access is not encrypted and/or secure and could allow unauthorized access to system information. However,
if modem access is limited to internal administrative access, the modem may provide an additional means of system access in the event your network is down.
15.00.038 - 17 - May 2002
ConsoleServer 3200 System Lightwave Communications
3: System Components
Each SCS3230 consists of three major components: the 3200 system chassis, 3200 DEVICE cards, and 3200 access cards. The 'access cards' include the new 3230 NETWORK/CONTROL card, which is the heart of the SCS3230 product, and makes it operate a bit differently.
Note: The 3200's NETWORK card and 10/100 Network card are NOT supported by the SCS3230 NETWORK / CONTROL card. The NETWORK/CONTROL card incorporates its own 10/100 Network port.
3.1 3200 Chassis
The chassis contains a front-panel LCD for quick system information that is available at all times. Two front panel buttons allow display selection and paging through displays (see section 10.0 for more information).
The second major component of the chassis is the power supply module. This module contains two independent supplies, each capable of sustaining the system should one supply fail or lose its power input. The Power Supply module also incorporates the system fan. The AC power module has two front-panel switches (one for each supply) with replaceable fuses in their IEC­type connectors. The DC power module provides a single On/Off switch.
The third and last component of the chassis is the SWITCH card set. The switch cards connect the access cards to the device cards, with a maximum of 17 simultaneous connections using all available terminal, network, and modem ports.
3.1.1 Power Supply Module
The SCS3230 may be equipped with either an AC power module or a DC power module. The power module may be field-swapped (although is not hot-swappable) if the available power source requirements change.
The Power Module provides two discrete electrical inputs to the system. Either power input supports a fully-loaded chassis, and switching between power inputs is automatic if one source fails or is turned off.
3.1.2 3200 Switch Cards
Two 3200 SWITCH Cards are required, and are unchanged from the 3200 system.
Rev. A - 18 - www.lightwavecom.com
A Lantronix Company SCS3230 System Administrator's Guide
3.2 Device Cards
The Device cards are fully compatible with the SCS3230 application. The SCS3230 requires version 4.03 Build 01 (or higher) of the Device Card binary firmware. Firmware updates are
downloadable from the Lightwave FTP site (ftp://ftp.lightwavecom.com).
Note: DEVICE CARD firmware MUST be updated to 4.03 or higher
Each DEVICE card has four completely independent ports for attachment to servers or other devices with console ports. Eight device cards may be installed per system, for a maximum of 32 device ports. The device ports do not send an 'break' signal to the attached servers at any time unless specified by the user. There are no adjustments directly on the device cards. All parameters are set up through the system administrator port.
3.3 Access Cards
The card configuration is changed with the SCS3230, compared to CS3200.
3.3.1 NETWORK / CONTROL Card
The NETWORK / CONTROL card allows users to connect to the device cards from an SSH or telnet session over an IP
network, and remote access to the administration functions.
The NETWORK / CONTROL card replaces the CONTROL card from the CS3200, and is located in the far right slot of the system chassis. Only one card is required in an SCS3230.
The NETWORK / CONTROL card includes one TERM connector for a local Console; one 10/100 NET connector for a
TCP/IP network interface, and four CHANNEL EXTENDER ports. The
Channel Extender ports are connected by RJ45 cables to one to four CHANNEL EXTENDER cards, which are an extension of the NETWORK card's operation.
The NETWORK / CONTROL card supports up to sixteen simultaneous user telnet connections and one administrator connection to the same IP address. The network card must be connected to a network that uses TCP/IP.
15.00.038 - 19 - May 2002
ConsoleServer 3200 System Lightwave Communications
3.3.2 CHANNEL EXTENDER Cards
CHANNEL EXTENDER cards are used to extend the NETWORK functionality of the
NETWORK / CONTROL card, providing network access to the DEVICE ports in the system. The Channel Extenders provide additional circuits allowing more simultaneous network sessions, up to the system capacity of 16 device sessions. Channel Extenders are installed in slots B, C, D, and slot E, replacing the N ETWORK cards and the TERMINAL cards in a 3200 system.
The SCS3230 is normally configured with four CHANNEL EXTENDERS, but may have any combination of CHANNEL EXTENDER cards and TERMINAL cards, as required for your application.
Note: At least one Channe l Extender card is required if any DEVICE access is required using your IP Network.
CHANNEL EXTENDER cards connect to the NETWORK / CONTROL card using a short RJ45 cable. Each CHANNEL EXTENDER provides up to four (4) simultaneous sessions for DEVICE port access over the IP Network connection.
3.3.3 TERMINAL Cards
The TERMINAL card provides a point of connection for a conventional RS-232 terminal or a computer running a terminal emulation program. Users connected through a TERMINAL card may connect to any of the device cards in the system, provided that their user profile has access rights for the port. There are four ports per terminal card. Each port‘s parameters are set up independently from the other ports. All parameters are set up through the system
administrator port. There is no access to the administration functions through the terminal card. The SCS3230 may have up to 3 Terminal cards, depending on system requirements. In some
applications, the existing Terminal Card may be required for local serial connection to one of the Device Ports. The existing Terminal Card is compatible and may be used, however the use of each Terminal Card(s) reduces the number of simultaneous Network connections (by 4
sessions) that may be made over the new 10/100 N etwork port on the Network Control Card. The 3200 Terminal cards offer configurable port parameters (baud rate, DTE/DCE, etc.), unlike the fixed parameters of the TERM (Console) port on the NETWORK / CONTROL card.
The SCS3230 requires version 4.00 (or higher) of the Terminal Card binary firmware (fterm.bin). This is not specific to 3230, and has been available for some time. Firmware updates are downloadable from the Lightwave FTP site (ftp://ftp.lightwavecom.com).
3.3.4 3200 Network Cards
The earlier 3200 Network card (10baseT) is not supported by the 3230 Network / Control Card. It will not function if installed.
Rev. A - 20 - www.lightwavecom.com
A Lantronix Company SCS3230 System Administrator's Guide
3.3.5 3200 10/100 Network Cards
The earlier 3200 10/100 Network card is not supported by the 3230 Network / Control Card. It will not fun ction if installed.
3.3.6 Modem Card
The Modem Card is used primarily in the Console Server 3200 systems, however, it does not provide or support any of the "secure" features of the SCS3230 system. It is not secure in the sense that the modem circuitry is not subject to the encryption used for secure SSH transactions, a primary reason for updating to the SCS3230. For this reason, the use of the modem may be limited, or the modem may simply be disabled or removed, depending on your site's application.
The modem card allows non-secure dial-in access to the SCS3230 and the servers attached to its device ports. The modem card supports baud rates up to 38.4 kbps, and will auto-detect the actual connection speed. Only one user at a time may access through the modem card, and only one modem card may be installed per unit. The system administration functions may not be accessed from the modem card.
15.00.038 - 21 - May 2002
ConsoleServer 3200 System Lightwave Communications
4: Installation Instructions
Two options for your installation exist:
you are either UPGRADING a CS3200 system to be an SCS3230 system, or
you are installing a NEW SCS3230 system.
For simplicity, we will refer to a ConsoleServer 3200 system with the NETWORK/CONTROL card installed as a SCS3220 system. In either case above, you will use THIS GUIDE for administering the SCS3230 features and options, while referring to the ConsoleServer 3200 manual for a majority of the hardware installation instructions.
When you purchase a CS3200 chassis, you will get the CS3200 manual (PN 15.00.017).
When you purchase a SCS3230 NETWORK/CONTROL card, you will get the SCS3230
System Administrator's Guide (this manual, PN 15.00.038).
NOTE: The majority of this System Administrator's Guide is intended for the administration and setup of the system, when using the SCS3230 kit. The hardware of the ConsoleServer 3200 may have been previously installed and is being upgraded at this time, or the system may be installed as brand new installation.
Many hardware installation details are discussed in the ConsoleServer 3200 System Manual . Not all are repeated in this manual.
4.1 Items in a SCS3230 Kit
The SCS3230 'kit' includes all of the cards and cables required to upgrade a CS3200 to the SCS3230.
PN 500.000.0010 - 10/100 BT SECURE 3230 CARD KIT
includes:
- (1) 500.000.0014 -- 10/100 BT CNTL/NTWK Card
- (4) 500.000.0012 -- 3200 CHANNEL EXTENDER Card
- (4) 200.0161 -- CAT5 Cable, 24 inch long
This SCS3230 guide, PN 15.00.038 is included with each PN 500.000.0014 card.
Additional adapters and cables may also be included in the shipping container if ordered. Orders with a large number of cables and adapters are usually shipped in separate containers.
If you are updating a CS3200 system, you may want to save your existing database from the CS3200 and copy it into the SCS3230. To do so, you will use Backup to save the database, and then Restore to copy it into the SCS3230's memory.
Rev. A - 22 - www.lightwavecom.com
A Lantronix Company SCS3230 System Administrator's Guide
4.2 Move Database from your CS3200 to SCS3230
The SCS3230 is designed to work with the Backup and Restore options found in the CS3200 product. Y ou can transfer your database from the CS3200 to the SCS3230. To accomplish this, you must save the Backup the system database to a local PC, and then after upgrading the hardware, you can then upload the saved information.
If you do not use Backup and Restore, you will have to re-program the system with port and user information.
This section assumes some existing familiarity with the administration methods (logging in, using the TERM port, etc.) of the CS3200 system, much of which will be similar with the SCS3230 system.
4.2.1 Backup Procedure of your CS3200 System
Before shutting down the CS3200 System, you should backup the existing user database. This is a normal CS3200 operation, as described in the 3200 documentation.
1. Log in as the sys admin on Control card port A on the CS3200's CONTROL card.
2. Make sure that there are no users logged in to the ConsoleServer 3200. If there are any, have them log out or force them off the system using the FORCELOGOUT command.
3. In the communications program, begin the text file capture. Name the text file as something that will indicate that it is the ConsoleServer 3200 parameters backup file, not just a plain text file (i.e., 3200.bak and not 3200.txt).
4. Type the command BACKUP at the sys admin> prompt and press <ENTER>. Text will be outputted to the screen; this text is equivalent to the binary data stored in the ConsoleServer 3200's non-volatile memory. Wait several minutes while the ConsoleServer searches memory for all non-zero records (unused records are skipped in the backup).
5. After the sys admin> prompt returns, end the text file capture in the communications program.
6. Open the text file with a text editor (such as Window's Notepad text editor, or StarOffice, etc.).
7. Remove any text after but not including the line $BACKUP COMPLETE. DO NOT EDIT ANY OF THE TEXT ABOVE THIS LINE! It is not necessary to remove the text after $BACKUP COMPLETE, but it reduces the download time for the file during the RESTORE process.
4.2.2 Restore Procedure
After the SCS3230 sy stem is operational, you can transfer your CS3200 database into the system using the RESTORE option. After your database is saved in the SCS3230 system, you can backup and restore the SCS3230's user database using Backup and Restore.
1. Log in as the sys admin on TERM port on the NETWORK / CONTROL card.
2. Make sure that there are no users logged in to the SCS3230. If any users are currently logged on, have them log out or force them off the system by using the FORCELOGOUT command.
15.00.038 - 23 - May 2002
ConsoleServer 3200 System Lightwave Communications
3. At the sys admin> prompt, type RESTORE and press <ENTER>. The SCS3230 will prompt for confirmation to proceed with the parameter restore process. Type YES and press <ENTER> to proceed. The system will ask for a second confirmation to proceed. Type YES and <ENTER> to start the parameter restore process. After the second confirmation, there is no text echoed to the screen indicating that the restore process is proceeding.
4. Using the communications program, send the text file containing the backup records to the SCS3230. Be sure to use text mode when transferring the file. The file download should not take too much time; less than a minute is typical at 38.4K baud. After the download is complete, the SCS3230 will re-zero all unused records. If a problem is encountered during the text file transfer, the SCS3230 will abort the restore process and return to the sys admin> prompt.
5. Once all unused records have been re-zeroed, the SCS3230 will reboot. Allow the complete memory check to proceed; after it is done, log in as the sys admi n at the LCI3200> prompt.
6. The ConsoleServer is restored to its previous settings and is ready for use. Check that all user, terminal, device, and other parameters are correct and acceptable.
4.2.3 To RESTORE from a 3200 to a 3230
Use a terminal emulation software on a PC connected to the sysadmin port of a 3200. Ensure that software flow control (XON/XOFF) is turned on for the software.
1. Implement a capture to file.
2. type “backup”.
3. Wait until you see “$BACKUP COMPLETE”
4. edit the backup file and remove any information before the line which starts 0,… This is probably the first line. Also remove the couple of lines that say $BACKUP COMPLETE. After the backup there will be some extraneous information, this needs to be removed.
Copy the file to the 3230. This can be accomplished using pscp or scp Log in to the 3230 and establish yourself as root.
Cd to /lci/bin Step 1) Type ‘restore “file name” yes’ “file name” is the name of the file you just copied. The last yes is needed if you want to be told what passwords the system is inserting for this user. If you do not want to see the passwords, do not type anything.
Unless there is an issue, you will observe users being added to the system and any changes that take place to the user name or password. If you receive a message about record number being incorrect, the file is either corrupt from flow control or you have not edited out the extraneous information that is in the file from doing the backup.
If the service multidrop is running you will be asked to stop it and told how to do so ‘type “service multidrop stop”’. Goto step 1.
Rev. A - 24 - www.lightwavecom.com
A Lantronix Company SCS3230 System Administrator's Guide
4.2.4 LCI Update
There are four binary (.bin) files in the /lci/bin directory of the Network/Control card that may be needed to update existing 3200 cards for use with the new Network/Control card's firmware:
- fterm.bin
- rterm.bin
- fdevice.bin
- rdevice.bin
These files are stored on the Network/Control Card in the /lci/bin directory on the card. The files may also be downloaded from the Lightwave FTP site (ftp://ftp.lightwavecom.com). The
customer will use the lciupdate program to install these updates, however, they do not need to transfer the binary files from an external computer to the 3200 - they should just direct lciupdate to use the /lci/bin path.
It is not necessary to update the Device or Terminal cards before assembling the system, however, before the system is put into service, the cards should be updated.
To Update a Card or Cards
From the 3230 bash shell, type the following. [If you are in the sysadmin shell on a 3230, type ‘exit’ to get to the 3230 bash shell.]
Establish yourself as super user
Type ‘service multidrop stop’
Type ‘ps –ax’ and look for any processes that contain the title multdrop.
If any multidrop processes exist, type ‘killall multidrop’. Type ps-ax and again look for
any multidrop processes. If there are any, type ‘kill –9 “the number in the farthest left column on the same line as the process”’, do this for all multidrop processes.
Type lsmod and look for mdser. If mdser is not present type insmod mdser.
If you wish to change the card binary file (*.bin) stored on the SCS3230, copy the update
file (filename.bin) to the 3230 and place in the “/lci/bin” directory.
Type ‘/lci/bin/lci_update “[card letter][processor number]” file’. Where file is the name of the file you for the slot you are updating. For instance you would probably type
/lci/bin/lci_update b1 fterm.bin for terminal cards (the file name may be different and b could be b,c,d,e)
/lci/bin/lci_update h1 fdevice.bin for device cards (the file name may be different and h could be h,I,j,k,l,m,n,o)
The processor number is relevant to multiprocessor cards. You will be informed if it is anything other than one.
15.00.038 - 25 - May 2002
ConsoleServer 3200 System Lightwave Communications
4.3 Connecting to the TERM Port
The cable kit P/N 200.0135 contains the necessary adapters to interface the system TERM port on the NETWORK / CONTROL card to a laptop or a terminal. Using the adapters in the kit, follow the steps outlined below.
The communications settings for the system administrator port (TERM) are fixed at 9600 baud, one stop bit, no parity, eight data bits, and DCE (9600 8N1 DCE).
NOTE: The administration functions may also be reached via telnet. However, it is first necessary to configure the network ports through the direct serial connection.
1. Turn on power to the terminal or computer. If using a computer, start the desired communication program. The terminal or communications program used must be in VT100 emulation mode. Note that the VT100 functions keys are not always mapped to the terminal or computer function keys; consult the appropriate documentation for further information.
2. Ensure that the communications settings of your Terminal are correct.
3. Locate the serial port on the terminal or computer and determine what type of connector is used. The cable kit included with the SCS3230 contains each of the following: one RJ45 serial cable, an RJ45 to male DB9 adapter, an RJ45 to female DB9 adapter, an RJ45 to male DB25 adapter, and an RJ45 to female DB25 adapter. Select the appropriate adapter for the serial port on the terminal or computer.
4. Firmly seat the adapter in the serial port. Screw down the adapter to secure it to the serial port.
5. Insert one end of the serial cable into the adapter until a click is heard. I nsert the other end of the serial cable into TERM port of the NETWORK / CONTROL card, again until a click is heard.
6. Press <ENTER> on the keyboard. The login> (using Telnet) or login as: > (using SSH) prompt should appear. If not, check that the SCS3230 is connected to the appropriate power outlet, the power switch is on, the cards are firmly seated, and that all cable connections are secure. If "garbage" characters appear on the screen, check that the communications settings are correct.
7. The system administrator may now login to the system.
Rev. A - 26 - www.lightwavecom.com
A Lantronix Company SCS3230 System Administrator's Guide
5: Connecting Equipment to the SCS3230
When connecting devices to the SCS3230, be sure to use Lightwave Communications cables and adapters to ensure the proper transmission of data signals. If a device has an RJ45 serial port, use the manufacturer's cable included with the equipment to convert the RJ45 serial connector to a DB9 or DB25 connector, and then use a Lightwave Communications adapter to convert back to RJ45 to attach to the device port. Directly connecting the RJ45 port on the SCS3230 to the RJ45 port on a third­party device may not allow for the proper transmission of data signals.
SCS3230 serial port default settings Port Type Baud Rate Data Bits Parity Stop Bits Port Configuration
TERM 9600 (fixed) 8 None 1 DCE Terminal 38400 8 None 1 DCE Device 9600 8 None 1 DCE
5.1 Terminal Card
Terminal Card typical adapters and port configuration: System Type Adapter Part Number Port Configuration
Wyse 50 / 60 200.0066 DCE DEC VT330, PC (25pin) 200.0067 DCE PC (9pin) 200.0070 DCE
Materials:
SCS3230 terminal port
terminal or computer with RS-232 serial port
RJ45-terminated Cat 5 cable (standard LAN cable)
Lightwave adapter for terminal serial port
1. Attach the Lightwave adapter to the terminal or computer serial port.
2. Connect the Cat 5 cable to the adapter. Connect the other end to the SCS3230 terminal port.
3. Turn on the terminal or start the computer’s communication program. Make sure that the communication parameters of the terminal or computer match those of the terminal port.
15.00.038 - 27 - May 2002
ConsoleServer 3200 System Lightwave Communications
5.2 NETWORK / CONTROL Card
The network port of the NETWORK / CONTROL card runs at 10/100 Mbits, half-duplex, with auto-negotiation. The device used to connect the ConsoleServer to the network (i.e., a hub or sw itch) must support this configuration.
Materials:
SCS3230 network port
network point-of-connection (i.e., a switch or hub)
RJ45-terminated Cat 5 cable (standard LAN cable)
1. Configure the ConsoleServer network parameters to the desired values as outlined in section 6.5.
2. Configure the network point-of-connection. It must be manually set to 10 Mbits, half­duplex, with no auto -negotiation.
3. Connect the ConsoleServer network port to the network using a standard LAN cable.
4. Check the status lights at the network end of the connection. It should indicate a good link. Try reaching the IP address assigned to the ConsoleServer by using PING or TELNET. If there is a problem, check the network configuration on both ends.
5.3 Modem Card
Materials:
SCS3230 modem port
Analog telephone line (POTS)
RJ11 modular telephone cable
1. Locate the modular jack for the telephone line to be used. Select a telephone cable with sufficient length to reach between the jack and the ConsoleServer.
2. Connect one end of the telephone cable to the jack. Connect the other end to the ConsoleServer modem port.
3. Make sure the ConsoleServer is powered. Dial the telephone number of the line connected to the ConsoleServer. The modem should automatically answer. If not, check the telephone line and connections.
Rev. A - 28 - www.lightwavecom.com
A Lantronix Company SCS3230 System Administrator's Guide
5.4 Device Card
NOTE: DEVICE Cards MUST be updated to Version 4.03 (or higher) firmware for SCS3230
The SCS3230 is designed so that the default device port communications settings will match the communications settings of most Sun® server and workstation console ports (9600 baud, 8 data bits, no parity, one stop bit). Other equipment types (i.e., Cisco®) frequently use similar communications settings; check the manuals included with the equipment for the correct settings. The table below lists the default serial port communications settings for the SCS3230. Sections 6.3 and 6.4 outline the commands for changing the terminal and device port communications settings.
The following tables list the adapter part number and port configuration for some common equipment types that may be connected to the SCS3230. Note that in some cases, an additional cable or adapter is included with the equipment to convert a proprietary pinout to an EIA-standard pinout. Also, note that it is not possible to connect the RJ45 serial port of the ConsoleServer directly to the RJ45 serial port of any third-party equipment. Sun Netra servers, Cisco switches, and other similar devices require a special adapter or cable to connect to the ConsoleServer. The adapter or cable is usually provided by the manufacturer of the equipment (e.g., Sun), or may need to be created by the user. The adapters and cables from the equipment manufacturer are usually designed to interface directly to a terminal, so the ConsoleServer device port must be configured as DTE rather than its default value of DCE. Lightwave Communications has pre-made adapters and kits for some common equipment types; contact Lightwave for information regarding your specific application.
Note: Some adapters are also available in quantity packs, and may be shipped under a different part number. Quantity packs are "299.xxxx" compared to "200.xxxx".
Device Card typical adapters and 3200 port configuration:
System Type Adapter Part Number Port Configuration SUN 200.0066 DCE HP, SGI, PC (9pin) 200.0070 DCE PC (25pin) 200.0067 DCE Sun Netra t1/Cisco 200.0225 DCE
RJ45 to RJ45 Cables:
Part Number Length
200.0062 2m
200.0063 5m
200.0064 10m
200.0065 15m
15.00.038 - 29 - May 2002
ConsoleServer 3200 System Lightwave Communications
Standard DB9 or DB25 installation: Materials:
SCS3230 device port
device with RS-232-C serial console port
RJ45-terminated Cat 5 cable (standard LAN cable)
Lightwave adapter for serial console port
1. Attach the Lightwave adapter to the serial console port.
2. Connect the Cat 5 cable to the adapter. Connect the other end to the SCS3230 device port.
3. Check that the device port and serial console port communications parameters match, and synchronize them if they do not match.
Sun® Netra t1 installation: Materials:
1. Connect a Cat 5 cable to the console port of the Netra. Connect the other end to the end of the ConsoleServer/Netra adapter (P/N 200.0225) marked “to Netra”.
2. Connect another Cat 5 cable between the adapter end marked “ConsoleServer” and the ConsoleServer device port.
3. Check that the device port and serial console port communications parameters match, and synchronize them if they do not match.
Rev. A - 30 - www.lightwavecom.com
Loading...
+ 67 hidden pages