Belkin OmniView F1DP116S User manual

OmniView®Serial
Console Server
User Manual
F1DP116S

Table of Contents
Table of Contents
Product Overview................................................................................................. 1
Introduction .................................................................................................... 1
Package Contents.......................................................................................... 1
Console Server Features................................................................................ 2
Equipment Requirements............................................................................... 3
System Requirements .................................................................................... 3
Unit Display Diagrams.................................................................................... 4
LED Indicators, Button, and Connectors ....................................................... 5
Specifications................................................................................................. 6
Local Installation................................................................................................. 7
Desktop or Rack-Mounting............................................................................ 8
Connecting the Target Devices to the Console Server .................................. 9
Network Configuration ...................................................................................... 10
Web-Browser Interface ................................................................................ 10
Assigning IP from the Console Port--VT-100 (Console, Telnet, SSH) .......... 13
Web-Browser Management Interface .......................................................... 16
Network Settings............................................................................................... 18
IP Configuration ........................................................................................... 18
IP Filtering .................................................................................................... 19
Web-Server Configuration............................................................................ 21
Local......................................................................................................... 21
RADIUS and Local ................................................................................... 21
Dynamic DNS............................................................................................... 22
RADIUS ........................................................................................................ 23
RADIUS-Server Configuration...................................................................... 24
HTTPS/SSL .................................................................................................. 24
Serial Ports ....................................................................................................... 25
Configuration................................................................................................ 25
Port Authentication ................................................................................. 25
Port Enable/Disable ................................................................................ 26
Port Title.................................................................................................. 26
Operation Modes .................................................................................... 27
Console-Server Mode ....................................................................... 27
Terminal-Server Mode ....................................................................... 28
Dial-In Modem Mode......................................................................... 29
Serial-Port Parameters ........................................................................... 29
Port Logging ........................................................................................... 30
Break Function........................................................................................ 31
Connection................................................................................................... 31
Telnet Java Applet................................................................................... 32
Serial-to-Serial Function .............................................................................. 34
System Status and Log ...................................................................................... 37
System Status .............................................................................................. 37
System Logging ........................................................................................... 37
System Administration ...................................................................................... 39
User Administration...................................................................................... 39
Add User................................................................................................. 39
Remove User .......................................................................................... 40
Edit the Access Control List (ACL).......................................................... 41
Change Password................................................................................... 42
Date and Time (NTP) ................................................................................... 42
Firmware Upgrade........................................................................................ 43
Upgrade from the Web Interface ............................................................ 43
SSL Certificate ............................................................................................. 44
Secure HTTP Certificate ......................................................................... 45
Reset to Factory-Default Settings................................................................ 49
Reboot.......................................................................................................... 49
Technical Data ................................................................................................... 50
Default Settings............................................................................................ 50
Appendix A: Adapters ........................................................................................ 51
Appendix B: Ethernet Pin-Outs (RJ45) .............................................................. 54
Standard Ethernet Cable RJ45 Pin-Out ....................................................... 54
Appendix C: Well-Known TCP/UDP Port Numbers ............................................ 55
Appendix D: Protocol Glossary........................................................................... 56
Appendix E: Creating CA Files ........................................................................... 58
Information........................................................................................................ 60

1
1
2
3
4
5
6
7
8
section
Product Overview
Introduction
Thank you for purchasing the Belkin OmniView Serial Console Server (Console
Server). This device provides administrators secure monitoring and control
of servers, routers, switches, and other serial devices from anywhere on
the corporate TCP/IP network, over the Internet, or through dial-up modem
connections, even when the server is unavailable through the network.
The Console Server provides the following:
• Data-pathsecuritybymeansofSSHorWeb/SSL
• Asecure,encryptedwebinterfaceoverSSL(HTTPS)
• SSHv2encryption,tokeepserveraccesspasswordssafefromhackers
• SupportforallpopularSSHclients
• SecureaccessfromanyJava-enabledbrowser
• Connectionstoserial-consoleportsusingstandardCAT5cables,
eliminating the hassles of custom cabling
Package Contents
1 x OmniView Serial Console Server
1 x AC Power Cord
5 x Serial-to-RJ45 Adapter Kit (5 pcs)
1 x Local Console Port Serial Adapter
1 x 6 ft. RJ45-RJ45 CAT5 Cable
1 x Quick-Start Guide
1 x User Manual CD
1 x Rack-Mount Brackets and Screws
1 x Footpad Set

2
Product Overview
3
1
2
3
4
5
6
7
8
section
Product Overview
Console Server Features
• In-bandandout-of-bandmanagement
Console port management solutions offer remote, reliable, and secure
access to serial-console ports through in-band networks and out-of-band
connectivity options, such as serial terminal access and dial-up modem.
• Managenetworkdevices/serverscentrally,remotely,andsecurely
Reliable console-port management solutions allow you to encrypt sensitive
data using proven protocols such as SSH/v2, SSL.
• Diversedevicesmanagement
Simple ASCII or VT-100 terminal emulation is not sufficient to manage these
wide-ranging device types. Today’s data centers contain a broad mix of
UNIX®, Linux®, RISC, mainframe, and Windows®servers, as well as other
serially managed devices such as router, gateway, firewall, PBX, UPS, SAN,
and NAS devices, and intelligent power strips.
• Proactivemonitoringandwarningtoassistsystemdiagnosis
Applications, and even operating systems, send messages to the system
console. These messages contain error and panic information that often
precedes a system crash. Unlike terminal servers, console-port servers buffer
these messages in real time and allow administrators to page through and
search this data at a later time; they also spontaneously send an email to alert
IT administrator of the critical event.
• Remoteandsecurepowercontroller
Via serial port, this device acts as control master for controlling power strips.
It can control multiple power strips (up to 15).
• Providesserial-to-serialfunction
This allows the device to incorporate with a terminal converter to provide VGA
and keyboard ports locally, or connect the VGA/keyboard ports to a KVM
switch to consolidate the administration.
• Accessportlistsforusers
Thanks to the Access Control List (ACL) of user account administration, all
users except admin accounts, are authorized a set of serial ports. Users
can access and make configuration changes to those authorized serial ports
assigned by an admin account.
Equipment Requirements
• UniversalConnectivityKit(included)
• RJ45-RJ45CAT5Cable(included)
System Requirements
Web browser
Browser
Operating System Microsoft Internet Explorer
version 6.0 SP1 and later
Firefox version 2.0
and later
Windows 2000 SP2 Yes Yes
Windows Server 2003 Yes Yes
Windows XP Yes Yes
Windows Vista Yes Yes
Red Hat Linux 3 and 4 No Yes
Sun Solaris 9 and 10 No Yes
Novell SUSE Linux 9 and 10 No Yes
Fedora Core 4 and 5 No Yes
Mac OS X 10.4+ No Yes
Java Plug-In
The Console Server’s web interface requires installing JRE (Java Runtime
Environment) v6.0 and above. You can get the latest Java software from the
website: http://www.java.com/en/download/manual.jsp.

4
Product Overview
5
1
2
3
4
5
6
7
8
section
Product Overview
Unit Display Diagrams
Front/RearPanel
Fig. 1 Front View
Fig.2RearView
LED Indicators, Button, and Connectors
LED Indication
Power Red–power indication
ON: power is applied
Link
EthernetLink/Act/10/100Mbps:
Orange–10BaseT Ethernet connection established
Green–100BaseT Ethernet connection established
Blinking: when data in activity
ON: when no data in activity and link connected
Ready Green – blinking per second when system is ready
PortActivity
(one LED
per port)
Blue– traffic activity
ON: in use (successful port log-in)
Blinking: traffic activity on the serial port
• RESETbutton: Quickly press and release the button to reboot the
Console Server. Press and hold the “Reset” button for more than five
seconds to set the unit to its default configuration settings.
• ETHERNETRJ45 connector: Ethernet interface
• CONSOLERJ45 connector: RS232 local console interface
• Other RJ45 connectors: serial ports
Ready
LED
Power
LED
Link
LED
Reset
button
IEC
power
LAN
port
Localconsole
port
Port LEDs
Deviceports

6
Product Overview
7
section
Local Installation
Feature Specification
General
LEDs
Power (red)
Ready (green, normally blinking),
Link/Act/10/100Mbps (Ethernet orange: 10Mbps, green: 100Mbps)
Activity (blue for each serial port)
Push button for reset, or restore to default
RTC (real-time clock)
SerialInterface
16-port (F1DP116S)
Serial-port mode (RS232)
Serial connector (RJ45)
Baud rate (300 to 115200)
Flow control (None, RTS/CTS, Xon/Xoff)
LANInterface
RJ45 connector
IEEE 802.3 - 10/100BaseT
Auto-detecting, full/half-duplex selectable
PortFunction
OperationModes
Console server
Terminal server
Dial-in modem
Serial-to-serial (on port 16 only)
Protocols
TCP, UDP, IP, ARP, ICMP, HTTP/HTTPS, Telnet, DHCP/BOOTP, PPP,
SMTP, DNS, NTP
Dynamic DNS
ProtocolRelative
Function
TCP inactivity time (TCP keep-alive time)
Serial inactivity time
Port monitoring
Security
Password access
IP filtering
SSHv2
HTTPS/SSL
Authentication
Local user database
PAP/CHAP (for modem dial-in)
RADIUS
Management
Local console (menu or command line)
SSH, telnet
Web pages (HTTP/HTTPS)
Firmware upgrade via web interface
Port buffering and logging
Full-featured system status display
Powerand
Environment
AC Input (100 ~ 240VAC, 50 ~ 60Hz)
Operating Temperature: -10° to 80° C
Storage Temperature: -20° to 85° C
Humidity: 0–90% non-condensing
Certications CE, FCC
UL
Mechanical 1U 19˝ rack-mount
Dimensions (cm): 43.2 x 18.0 x 4.2
Specifications
Note:Specifications are subject to change without notice.
WheretoplacetheConsoleServer:
The enclosure of the Console Server is designed for stand-alone or rack-mount
configuration. The Console Server can be mounted to a standard 19-inch server
rack using the included rack-mount brackets and screws.
ConsiderthefollowingwhendecidingwheretoplacetheConsoleServer:
•thelocationofyourtargetdevicesinrelationtoyourconsole
•thelengthsofthecablesyouusetoconnectyourdevicestotheconsole
•thepowersource-Connectonlytothepowersourcespeciedonthe
unit. When multiple electrical components are installed in a rack, ensure
that the total component power ratings do not exceed circuit capabilities.
Cable-LengthRequirements(forCAT5)
Serial binary data signals (RS232) transmit best up to distances of 50 feet (15m).
Beyond that length, the probability of signal degradation increases. For this
reason, Belkin recommends that the length of the CAT5 UTP cable between the
Console Server and the connected servers does not exceed 50 feet (15m).
CablesandAdapters
Belkin highly recommends you use Belkin Category 5e, FastCAT5e, or Category
6 Patch Cables for your Console Server to help ensure the signal integrity.
BelkinUTPPatchCables:
A3L791-XX-YYY (CAT5e)
A3L850-XX-YYY (FastCAT™ 5e)
A3L980-XX-YYY (CAT6)
Refer to Appendix B on page 54 for pin-out guide.
BelkinSerialAdapter:
F1D120 (RJ45F – DB9F DTE)
F1D121 (RJ45F – DB25F DTE)
F1D122 (RJ45F – DB25M DCE)
F1D123 (RJ45F – DB25M DTE)
F1D124 (RJ45F – RJ45M CISCO)
F1D120-8PK (8-pack of F1D120)
F1D124-8PK (8-pack of F1D124)
Refer to Appendix A on page 51 for detailed drawings of each
Serial Adapter.
1
2
3
4
5
6
7
8

8
Local Installation
9
section
Local Installation
Desktop or Rack-Mounting
The Console Server can be placed on desktops or rack-mounted on
19-inch/1U racks.
Note: Before you begin, locate the MAC address and serial number on the back
of the Console Server. You may need these numbers later in the installation
process, so it is highly recommended that you record these numbers below
before mounting the Console Server to your rack.
MACAddress SerialNumber
The Console Server includes adjustable mounting brackets ideal for installation
in 19-inch racks. The mounting brackets feature three adjustment positions that
allow you to set the Console Server’s face flush with the ends of the rails, or to
extend the Console Server past the front of the rails. Please follow these simple
steps to achieve the desired adjustment.
Rack-Mounting
1. Determine how far you would like the Console Server to protrude from
the rack. Select a bracket-hole scheme.
2. Attach the bracket to the side of the Console Server using the Phillips
screws provided. (Refer to diagram below.)
3. Mount the Console Server to the rack rails and secure with screws.
(Refer to diagram below.)
Your Console Server is now mounted securely to the rack and you are ready to
connect your target devices.
Connecting the Target Devices to the Console Server
1. Power down the target device(s) that will be connected to your
Console Server.
2. Connect the Ethernet cable to the port labeled LAN.
3. Locate the included power cord and plug the appropriate end into the
power socket on the rear of the Console Server. Plug the other end into
an appropriate AC wall outlet.
Note: Allow about 100 seconds for the Console Server to complete the
boot-up process.
4. Choose an available numbered port on the rear of your Console Server.
Plug one end of a UTP patch cable (4-pair, up to 15 meters) into the
selected port, and plug the other end into the target device. You may
need to add the appropriate adapter to interface with your target device.
Please refer to Appendix A on page 51 in this manual for more details.
5. Repeat this procedure for all target devices. (Refer to diagram below.)
Controlling host Devices to be controlled
Modem
OR
CAT5 cable
(straight)
CAT5 cable CAT5 cable
(straight) CAT5 cable (straight)
Controlling host
Local console
port adapter
DB9F
RJ45-to-DB9M
adapter
Ethernet
port
Fig.3CablingConnectionSetup—This diagram depicts sample cable
connections for different interfaces.
1
2
3
4
5
6
7
8

10
Network Configuration
11
section
Network Configuration
Before you can connect to a target device, you will need to configure the network
settings. The Console Server offers two methods of setting the network: via
web-browser interface or through the local console port.
The Console Server offers support for both Dynamic Host Configuration Protocol
(DHCP) and static IP addressing. Belkin recommends that an IP address be
reserved for the Console Server and that it remains static while connected to
the network.
Web-Browser Interface
The web interface provides an easy way to configure the Console Server. The
administrator can configure all features through the Web.
InitialSettings
The following section provides instructions for setting the IP address for the
OmniView Serial Console Server.
Step1IdentifyingtheIPAddress
Once your Console Server has been connected to your network and is powered
up, a Dynamic Host Configuration Protocol (DHCP) server on your network will
automatically assign the Console Server an IP address, gateway address, and
subnet mask.
To identify the IP address on your network, use the MAC address located on
the back of the Console Server. If no DHCP server is found on your network, the
Console Server will boot with the following static IP address: 192.168.2.156.
If you want to connect more than one Console Server to the same network and
there is no DHCP server available, connect each Console Server to your network
one at a time, and change the static IP address of each unit before connecting
the next unit.
Note:IfaDHCPserverlaterbecomesavailableonyournetwork,the
ConsoleServerwilltakeanewIPaddressfromtheDHCPserver.Tokeep
theoriginalstaticIPaddress,youwillneedtodisableDHCP(seepage18).
Step2LoggingintotheWebInterface
After you identified the IP address of your device, open your web browser. A list
of supported browsers can be found on page 3.
Type in the Console Server’s IP address in the browser’s address field, using this
format: http://XXX.XXX.XXX.XXX (example: http://76.255.43.173). The login page
will appear (see next page). Bookmark the page for easy reference.
Note:HTTPScanbeusedforcommunicationoveranencryptedsecure
socketlayer(SSL).When first connecting to the Console Server’s HTTPS
configuration page, two browser security warnings may appear. Click “Yes” on
both warnings.
LoginPage
Type in the following default user name and password (case-sensitive):
UserName Password
admin admin
There are two levels of access privileges:
UserName DefaultPassword AccessPrivileges
admin admin Full access
(user define) (user define) Only can access “Serial Port”
and “System Status”
The administrator can add or remove a user easily via the web pages of
system administration.
1
2
3
4
5
6
7
8

12
Network Configuration
13
section
Network Configuration
Click Login . The web interface will open at the “Connect” page (see below).
Main-ConnectPage
Step3NetworkConguration
Click on “Network” to open the Network-Configuration page (see below).
Network-CongurationPage
Here you can assign a static IP and other network settings.
Click on “Save & Reboot” to store any network-configuration settings.
Note:If the user leaves the web browser idle for more than 30minutes, the login
session will time-out and terminate the session.
Assigning IP from the Console Port—VT-100
(Console, Telnet, SSH)
The Console Server also offers a user-friendly, menu-driven command-line
interface. You can simply connect a VT-100 terminal to the local console port to
access the Console Server. This is useful when you do not know the network
settings of the Console Server, and cannot access it. Through the local console
port, you can view or change the settings (IP address, subnet mask, etc.).
1. Connect the console port on the rear panel to a serial port on a PC host
using the CAT5 cable and the local console port RJ45/DB9F adapter,
included with the Belkin Console Server.
2. Configure a terminal emulation program, such as HyperTerminal, using
the following parameters:
 • Baudrate=115200
 • Databits=8
 • Stopbits=1
 • Parity=none
 • Flowcontrol=none
Note:User names and passwords are the same as the ones set through the web
interface. The defaults are “admin/admin”.
1
2
3
4
5
6
7
8

14
Network Configuration
15
section
Network Configuration
The following figure depicts the structure of the interface.
TheMenuLayout
Network>IPCong
The page to the left shows the IP configuration items.
1. For IPmode— You can press the SPACE bar to select Static
mode or DHCP mode.
2. For IPAddress,SubnetMask,DefaultGateway,PrimaryDNS,and
SecondaryDNS— You can change these network settings.
3. After changing the settings and the final enter, the Console Server will
prompt you to confirm YES or NO. If YES, the Console Server will reboot
and save the settings into the flash memory.
Network>CurrentIP
To show the current network settings.
Network>IPFilter
To enable/disable IP filter function.
System>Reboot
To reboot the Console Server.
System>ResettoDefault
To reset configuration to factory-default settings.
Note: Only the admin user has the privilege to perform this function.
System>Status
To show the system status.
S-to-S>SelectSerial-to-SerialPort
To enable serial port-to-serial port connection through port 16. Refer to the
“Serial-to-Serial Function” section on page 34 for more details.
1
2
3
4
5
6
7
8
Tier2menu
Tier1menu Productname Softwareversion
Congurationinput
Navigationinput
Tier3menu

16
Network Configuration
17
section
Network Configuration
Note:
Only the admin user has the privilege to log in to VT-100. All the other users are
not authorized to make configuration with VT-100.
Web-Browser Management Interface
The Console Server supports both HTTP and HTTPS (HTTP over SSL) protocols.
Users must authenticate themselves by logging in to the system with a correct
user name and password.
To access the Console Server’s web-management pages, enter the unit’s IP
address or resolvable host name into the web browser’s URL/location field. This
will direct you to the login screen.
The figure on the next page shows the home page of the web-management
interface. A menu bar displays along the top of the page. The submenu will
display along the left side of the page, and will allow you to modify parameter
settings for the top-menu item selected.
Where available, the page will allow users to apply or cancel their actions. To
apply all changes, select “Apply” and the new values will be applied to the
configuration. If you do not want to save the new values, simply click “Cancel”
and all changes made will be removed and the previous values restored.
1
2
3
4
5
6
7
8

18
Network Settings
19
section
Network Settings
You can configure the network IP settings via VT-100 or web interface. This
section describes configuration through the web interface.
IP Configuration
The Console Server requires a valid IP address to operate within the user’s
network environment. If the IP address is not readily available, contact the
system administrator to obtain a valid IP address for the Console Server.
There are two types of IP assignments you can choose from:
• StaticIP
• DHCP(DynamicHostCongurationProtocol)
The unit ships with DHCP set to default. If no DHCP server is found on your
network, the Console Server will boot with the following static IP address:
192.168.2.156.
The new IP configuration setting can be saved by clicking “Save & Reboot”.
IP Filtering
The IP filtering function keeps unauthorized hosts from accessing the Console
Server by specifying rules.
The IP address/mask specifies the host range by entering the base host IP
address followed by “/” and the subnet mask (“/” is a required separator between
the IP address and the subnet mask). The host IP addresses are filtered based on
the rule defined.
The table below provides examples of IP address/mask settings.
Speciedhostrange BasehostIPaddress Subnetmask
Any host 0.0.0.0 0.0.0.0
192.168.2.120 192.168.2.120 255.255.255.255
192.168.2.1 ~ 192.168.2.254 192.168.2.0 255.255.255.0
192.168.0.1 ~ 192.168.255.254 192.168.0.0 255.255.0.0
192.168.2.1 ~ 192.168.1.126 192.168.2.0 255.255.255.128
192.168.2.129 ~ 192.168.2.254 192.168.2.128 255.255.255.128
The “Port” is a port or port range of the Console Server to which hosts try
to access.
ChainRule
The chain rule determines whether the access from the hosts is allowed or not. It
can be one of two values:
• ACCEPT: access allowed
• DROP:access not allowed
When the Console Server receives a TCP packet, it will process the packet with
the chain rule depicted below. The process order is important—the packet will
enter the chain rule 1 first. If it meets the rule, then it will take action; otherwise, it
will go on to chain rule 2.
1
2
3
4
5
6
7
8

20
Network Settings
21
section
Network Settings
Fig.4ChainRuleofIPFilter
You can add a new IP filtering rule by setting the properties at the next available
add line. Once the rule is entered, click “Add” to save the action. You can remove
a rule by clicking “Remove”.
In the example above, the rules applied in the following order:
#1.Those hosts belonging to subnet 192.168.2.x are allowed to access the
Console Server (through http port 80).
#2.All hosts are not allowed to access the Console Server
(through http port 80).
After these rules are applied, only the hosts that belong to the subnet 192.168.2.x
can access the Console Server (through http port 80).
In addition to the IP filter chain rule mentioned above, the web interface also
provides a convenient way to enable/disable telnet (port 23) or the web-
configuration port (port 80/443). These services are mainly for the Console-Server
configuration. Clicking “Enable/Disable” in the “Action” field will help to add/
modify the chain rule quickly without the hassle of manually editing the rule.
Note:
In order to get a better text alignment, a VT-100-awared telnet client is preferred
to align the text output. PuTTY is one of the recommended telnet clients that
offer better UI text alignment. It can be downloaded from
http://www.chiark.greenend.org.uk/~sgtatham/putty/download.html.
Web-Server Configuration
The Console Server’s web server supports both HTTP and HTTPS (HTTP over
SSL) services simultaneously.
You can select the user-authentication method for the web login. The Console
Server currently provides authentication methods of Local and RADIUS.
Local
The Console Server by default points to the local database for the web-server
login user authentication.
RADIUSandLocal
The Console Server refers to the RADIUS server for user-account authentication
first. If the user account is not found or the RADIUS server is down, the Console
Server looks up its own local database to find the user account. The unit will
not permit a user to log in if neither a RADIUS or local database account is
found. The RADIUS server setting is user-configurable via the RADIUS server
configuration page. Refer to page 24.
1
2
3
4
5
6
7
8

22
Network Settings
23
section
Network Settings
Dynamic DNS
If a user connects the Console Server to a DSL line or uses a DHCP configuration
to get a dynamic IP address from the network, the IP address might change. This
can make it difficult to know if an IP address has changed, or what the new IP
address is.
Belkin Serial
Console Server
Router/NAT
DDNS
Ethernet
Server
Administrator
Network
Fig.5DynamicDNS
The Dynamic DNS service is provided by various ISPs and organizations to
deal with the above issue. By using a Dynamic DNS service, you can access
the Console Server through the host name registered in the Dynamic DNS
server regardless of any IP address change. By default, the Console Server only
supports the Dynamic DNS service offered at Dynamic DNS Network Services,
LLC (www.dyndns.org).
To use the Dynamic DNS service provided by Dynamic DNS Network Services,
you must set up an account in their Members’ NIC (Network Information
Center - http://members.dyndns.org). You may then add a new Dynamic DNS
host link after logging in to their Dynamic DNS Network Services Members NIC.
After enabling the Dynamic DNS service in the Dynamic DNS Configuration
menu, you must enter the registered domain name, user name, and password.
After applying the configuration change, you will be able to access the Console
Server by using only the domain name. The DNS (Domain Name Systems) is the
Internet service that translates domain names into IP addresses.
Note:
The domain-name field requires a Qualified Domain Name (FQDN) instead of
just a registered host name.
RADIUS
Authentication is the process of identifying an individual, usually based on a
user name and password. The Console Server supports various authentication
options, such as “Local” and “RADIUS”, to authenticate the users who access
the serial port. When the authentication is set to “Local”, the unit will use its own
user list to authenticate a user. If configured otherwise, the Console Server will
request authentication from the external authentication servers (i.e., RADIUS).
The figure below shows conceptually the user authentication process when using
an external authentication server.
User Host RADIUS Server
F1DP116S
1) Users log in to port 1 with
user ID and password
5) Access the device
attached to port 1
▲▲
4) Allow users access
to port 1
▲
2) Query the user—request user
authentication to the
authentication server
▲
▲
3) Response from the
authentication server
(accept or reject)
Fig.6RADIUS
1
2
3
4
5
6
7
8

24
Network Settings
25
section
Serial Ports
RADIUS-Server Configuration
Note:
In order to make RADIUS service effective, a RADIUS server must be
installed prior use.
HTTPS/SSL
The Console Server supports both HTTP and HTTPS (HTTP over SSL) services
simultaneously. You can enable or disable security function of each port
individually.
HTTPS provides a secure, encrypted web interface over SSL (secure
sockets layer).
The following steps should be used for HTTPS protocol:
1. Change the URL from “http://xxx.xxx.xxx/” to “https://xxx.xxx.xxx/”.
2. After the connection is established, your browser will display a
“Lock” icon.
Double-click on the lock symbol to display detailed certificate information.
Configuration
Under the “Serial” menu heading, click “Configuration” to show the port
summary list.
Note that if the “Serial Port” is disabled, the “Serial port configuration” panel will
display the port in a dark gray font. An enabled serial port will be displayed in a
white bold font.
PortAuthentication
Authentication is the process of identifying an individual, usually based on a
user name and password. The Console Server supports various authentication
options, such as “Local” and “RADIUS”, to authenticate the users who access
the serial port. Refer to page 23.
When the authentication is set to “Local”, the Console Server will use its own
user list to authenticate a user. If configured for RADIUS, the unit will request
authentication from the external authentication servers (i.e., RADIUS). The figure
below conceptually illustrates the user-authentication process when using an
external authentication server.
1
2
3
4
5
6
7
8

26
Serial Ports
27
section
Serial Ports
PortEnable/Disable
Each serial port can be individually enabled or disabled. A disabled serial port
cannot be accessed by a user. Users can reset the serial port to default settings
by clicking the “Set to default” button.
Port Title
Users can enter descriptive information for each port based on the device
attached to it.
We can use the shortcut, “--Jump to--”, in the upper-right corner to select and
configure a different port.
OperationModes
The Console Server unit provides four types of operation modes. These are
described below.
Note:
• Thelastport(e.g.,port16)canalsobeusedas“ExternalESP(Entry
Serial Port)” in “Serial-to-Serial” operation mode. Refer to the
“Serial-to-Serial Function” section for details.
Console-ServerMode
Configuring a serial port as a console server creates a TCP socket on the unit
that listens to a telnet or SSH client connection. When you connect to the TCP
socket, you have access to the device attached to the serial port as if the device
were connected directly to the network. Data streams can be sent back and
forth between the device and the telnet/SSH client program. RawTCP is also
supported with the console-server mode.
1
2
3
4
5
6
7
8

28
Serial Ports
29
section
Serial Ports
The following parameters are configurable in console-server mode:
ListeningTCPPortNumber
You can also access a serial port through the IP address of the Console
Server and the listening TCP port number of the serial port.
If the IP address of the Console Server and the serial port are assigned as
192.168.123.100 and the listening TCP port number is 4001, the user can
connect to the port as follows:
telnet 192.168.123.100 4001
Protocol
Select “Telnet”, “SSH”, or “Raw TCP” as the protocol. If users are using
a telnet client program, select “Telnet”. If users are using an SSH client
program, select “SSH”. When “Raw TCP” is selected, direct TCP socket
communication is available between the Console Server and the remote host.
InactivityTime-Out
Enable this feature to avoid a client holding on to a TCP connection when
there has been no activity on a serial port for a long period of time. If
“Inactivity timeout” is enabled, and there is no data activity between
the Console Server and the telnet/SSH client for the specified inactivity
time-out interval (i.e., no data activity through the serial port), the existing
TCP session will automatically be closed. If you want to maintain the
connection indefinitely, configure the inactivity time-out period to “0”.
TCPKeep-Alive(NoCongurationRequired)
In order to avoid TCP-connection lockup, the Console Server will continue to
check the connection status between the telnet/SSH client and the Console
Server by periodically sending “keep alive” packets. If the telnet/SSH client
does not answer the packets, the system will assume that the connection is
down. The Console Server will then close the existing telnet/SSH connection,
regardless of the inactivity setting. This will prevent the TCP connection
from locking when an application is improperly closed or the network link is
interrupted.
Terminal-ServerMode
In terminal-server mode, the Console Server’s serial port is configured to
wait for data from the device connected to the port. If data is detected,
the Console Server will initiate a TCP session as a telnet or SSH client to a
predefined server. The server must be defined by users before the port can
be configured for a telnet or SSH client. This mode can be used to access
servers on the network from a serial terminal. RawTCP is also supported with
the terminal-server mode.
In order to terminate a telnet/SSH/RawTCP session in terminal-server mode,
you may use these three control-key sequences (Ctrl-Z / Ctrl-X / Ctrl-C).
Dial-inModemMode
In this mode, the Console Server assumes an external modem is attached
to the serial port and waits for a dial-in connection from a remote site. When
a user dials in using a terminal application, the Console Server will accept
the connection and display the appropriate prompt or menu for the user that
logged in.
Serial-to-SerialMode
Please refer to the “Serial-to-Serial Function” section on page 34 for details
for this mode.
Serial-PortParameters
To connect the serial device to the Console Server’s serial port, the serial-port
parameters of the Console Server should match exactly to the requirements
of the attached serial device.
1
2
3
4
5
6
7
8

30
Serial Ports
31
section
Serial Ports
Port Logging
While in console-server mode, the data received from the tracking serial port
will be buffered in the unit’s memory.
The “Port logging” feature is valid and visible only if the operation mode of the
serial port is configured to console-server mode.
If the “Port logging” option is enabled, the user can let the Console Server
search a defined keyword from the port-logging data and send an email to an
administrator by “Port event handling” configurations. Each reaction can be
configured individually upon each keyword. Reaction can be delivered
through an email.
Click “Port event handling”.
The memory buffer size for logging data is 192K per port. If the log data
grows larger than the memory size, the new data will overwrite the old data.
BreakFunction
In console-server mode, the Console Server is capable of sending a “break”
signal to a connected serial device. A break is sometimes used to reset a
communications line or change the operating mode of communications
hardware, such as a MODEM. Some target devices, such as a Sun™ Solaris™
server, require a null character (break) to generate an “OK” prompt. The effect of
“sending a break through serial port” is equivalent to issuing a “STOP-A” from a
Sun keyboard. In order to send a break to a serial device, configure it to “Console
Server” mode and use “Telnet” or “RawTCP” as the protocol. Click the “Apply”
button to send a break signal to the designated serial port and then to the
attached computer or server.
Connection
The Console Server provides web-based access to a target serial device without
requiring a separate telnet client program. This is done through a Java applet.
A Java applet is used to provide the text-based user interface to access the serial
port. This Java applet supports only telnet in console-server mode. The user
cannot access the serial port via the Web when the host mode of the port is set
to a RawTCP connection. The user is asked to enter the user ID and password to
access the port. Once authenticated, the user now has access to the serial port.
1
2
3
4
5
6
7
8

32
Serial Ports
33
section
Serial Ports
Use the hyperlink located at the bottom of the Connect Page to test your Java
compatibility. Or use the link below to download the latest Java version.
Make sure that you enable your browser’s Java support option and also check
your Java Runtime Environment version (known as JRE version). You will need
version 1.6.0 or above if you also need secure HTTP service (HTTPS).
Note:
• Inordertorunthisfunction,thesystemrequiresinstallingJREversion6.0
and above. You can get the Java software from the website
http://www.java.com/en/download/.
TelnetJavaApplet
1. Select the telnet protocol under “Serial > Configuration >
Operation mode”.
Select “Connect” from the top menu and click on the terminal icon on
the left. The terminal-emulation application will pop up in a new window and
prompt you to log in. If you see a blank window, check your system for
Java-version compatibility.
2. Enter the user name and password to log in, so you can start to
use it as if you were running a telnet client program (e.g., Telnet DOS
program, PuTTY).
Note: The active serial port’s name will appear on the window bar. A
connection-status indicator will also appear on the lower-right side of
the window.
1
2
3
4
5
6
7
8

34
Serial Ports
35
section
Serial Ports
Serial-to-Serial Function
The serial-to-serial function allows you to use a simple terminal device (video
display and keyboard) to access and control any device connected to the
Console Server on ports 1 through 15. You may also use an external terminal
converter, like the Belkin F1D084E, to connect your Console Server to a KVM
switch and consolidate the control.
Installation
To install, connect your terminal device to port 16 of the Console Server. This will
allow you to access a serial device connected to ports 1 through 15 only.
EnableandCongureSerial-to-Serial
To configure the serial-to-serial function:
1. Enter VT-100 console mode (see the “Assigning IP from the Console
Port—VT-100 (Console, Telnet, SSH)” section for details) to display the
window screen below.
2. Go to the tier 2 menu item [S-to-S] “Serial-to-Serial port operation”, and hit
the SPACE bar to select “ENABLE”. Confirm the change to auto-reboot
the system.
3. Now disconnect from the local console and start a new terminal session by
connecting to port 16.
4. After the reboot (will take about a minute), the screen on the next page will
appear. Configure each configuration setting. Type in the value for “Inactivity
timeout” and press the SPACE bar to select the setting for the other items.
Note:
• Inordertoshowthefollowingserial-to-serialcongurationscreen,you
need to enable the serial-to-serial function. The default baud rate is fixed
as 9600 8N1 (not reconfigurable) in order to get the best compatibility with
third-party terminal monitor devices.
5. Choose the port number to which you wish to connect and the screen below
will appear.
6. Type in the user name and password. The data-channel connection between
port 16 and the selected serial port will be built, so the administrator can
control the serial device or server.
7. Press the “Cntl” and “C” keys to get out of the serial-to-serial function and
return to the main console screen.
1
2
3
4
5
6
7
8