Black Box LES1516A User manual

USER MANUAL
24/7 TECHNICAL SUPPORT AT 1.877.877.2269 OR VISIT BLACKBOX.COM
PWR
OK
BACK
H/B SER NET WIFI
WIFI (MAIN) WIFI (AUX)
SD CARD USB PORTS V.92 MODEM CONSOLE ERASE
LES SERIES
CONSOLE
SERVERS
LES1500, LES1600, LES1700 SERIES

2
NEED HELP?
LEAVE THE TECH TO US
LIVE 24/7
TECHNICAL
SUPPORT
1.877.877.2269
1. 8 7 7. 8 7 7. 2 2 6 9 BLACKBOX.COM
TABLE OF CONTENTS
REVISION HISTORY ........................................................................................................................................................................ 12
SAFETY PRECAUTIONS.................................................................................................................................................................. 13
ABOUT THIS MANUAL ................................................................................................................................................................... 14
Products Covered.........................................................................................................................................................................................14
Who Should Read this Manual?...................................................................................................................................................................14
Manual Organization....................................................................................................................................................................................14
Types of Users ..............................................................................................................................................................................................15
Management Console..................................................................................................................................................................................15
Where to Find Additional Information.........................................................................................................................................................16
1. SPECIFICATIONS ........................................................................................................................................................................ 17
1.1 LES1500 Series .......................................................................................................................................................................................17
1.2 LES1600 Series.......................................................................................................................................................................................19
1.3 LES1700 Series.......................................................................................................................................................................................21
2. OVERVIEW.................................................................................................................................................................................... 23
2.1 Available Models Comparison Charts ..................................................................................................................................................23
2.2 What’s Included......................................................................................................................................................................................24
2.2.1 LES1500 Series (LES1516A, LES1532A, LES1548A)................................................................................................................................24
2.2.2 LES1600 Series ................................................................................................................................................................................................24
2.2.3 LES1700 Series ................................................................................................................................................................................................24
2.3 Hardware Description............................................................................................................................................................................25
2.3.1 LES1500 Series.................................................................................................................................................................................................25
2.3.2 LES1600 Series ................................................................................................................................................................................................26
2.3.3 LES1700 Series ................................................................................................................................................................................................27
3. INSTALLATION ............................................................................................................................................................................ 28
3.1 Power Connection ..................................................................................................................................................................................28
3.1.1 LES1700, LES1516A, LES1532A, LES1548A Models................................................................................................................................28
3.1.2 LES1600 Models...............................................................................................................................................................................................28
3.2 Network Connection ..............................................................................................................................................................................28
3.3 Serial Port Connection...........................................................................................................................................................................29
3.3.1 Cisco Rolled RJ-45 Pinout..............................................................................................................................................................................30
3.3.2 Cisco RJ-45 Pinout..........................................................................................................................................................................................30
3.4 USB Port Connection .............................................................................................................................................................................31
3.5 Fitting Cellular SIM and Antennas ........................................................................................................................................................31
3.5.1 LES1604A-V, -T, -R Models .............................................................................................................................................................................31
3.5.2 LES1700 Models ..............................................................................................................................................................................................32

3
1. 8 7 7. 8 7 7. 2 2 6 9 BLACKBOX.COM
NEED HELP?
LEAVE THE TECH TO US
LIVE 24/7
TECHNICAL
SUPPORT
1.877.877.2269
TABLE OF CONTENTS
4. SYSTEM CONFIGURATION ........................................................................................................................................................ 33
4.1 Management Console Connection .......................................................................................................................................................33
4.1.1 Connected Computer Setup...........................................................................................................................................................................33
4.1.2 Browser Connection ........................................................................................................................................................................................35
4.2 Administrator Setup...............................................................................................................................................................................36
4.2.1 Change Default Root System Password .....................................................................................................................................................36
4.2.2 Set Up a New Administrator ..........................................................................................................................................................................37
4.2.3 Name the System ............................................................................................................................................................................................37
4.3 Network Configuration ..........................................................................................................................................................................38
4.3.1 IPv6 Configuration ...........................................................................................................................................................................................39
4.3.2 Dynamic DNS (DDNS) Configuration...........................................................................................................................................................40
4.4 Services and Service Access................................................................................................................................................................41
Brute Force Protection ..............................................................................................................................................................................................45
4.5 Communications Software ...................................................................................................................................................................45
4.5.1 SDT Connector..................................................................................................................................................................................................46
4.5 .2 PuT T Y .................................................................................................................................................................................................................47
4.5.3 SSHTerm............................................................................................................................................................................................................47
4.6 Management Network Configuration...................................................................................................................................................48
4.6.1 Enable the Management LAN........................................................................................................................................................................48
4.6.2 Configure the DHCP Server ...........................................................................................................................................................................51
4.6.3 Select Failover or Broadband OOP...............................................................................................................................................................52
4.6.4 Aggregating the Network Ports ....................................................................................................................................................................53
4.6.5 Wi-Fi Wireless LAN..........................................................................................................................................................................................54
4.6.6 Static Routes.....................................................................................................................................................................................................56
4.7 Configuration Over DHCP (ZTP) ...........................................................................................................................................................57
4.7.1 Ensuring the Console Server is Unconfigured............................................................................................................................................57
4.7.2 Example ISC DHCP (dhcpd) Server Configuration....................................................................................................................................58
4.7.3 Setup When the LAN is Untrusted ................................................................................................................................................................58
4.7.4 Prepare a USB Drive and Create the X.509 Certificate and Private Key................................................................................................59
4.7.5 What an Unconfigured Console Server Does on First Boot ....................................................................................................................59
4.7.6 Using What an Unconfigured Console Server Does on First Boot to Update Firmware ...................................................................60
4.7.7 The URLs in DHCP OFFER, Option 43, Sub-Option 1................................................................................................................................61
4.7.8 Importing the Configuration File ...................................................................................................................................................................61
4.7.9 Running a Restore or Update in Secure Recovery Mode..........................................................................................................................62
5. SERIAL PORT, HOST, DEVICE AND USER CONFIGURATION................................................................................................... 63
5.1 Configure Serial Ports............................................................................................................................................................................64
5.1.1 Common Settings.............................................................................................................................................................................................65
5.1.2 Console Server Mode ......................................................................................................................................................................................66
5.1.3 SDT Mode...........................................................................................................................................................................................................71
5.1.4 Device (RPC, UPS, EMD) Mode......................................................................................................................................................................72
5.1.5 Terminal Server Mode .....................................................................................................................................................................................72
5.1.6 Serial Bridging Mode........................................................................................................................................................................................72
5.1.7 S yslog..................................................................................................................................................................................................................74

41. 8 7 7. 8 7 7. 2 2 6 9 BLACKBOX.COM
NEED HELP?
LEAVE THE TECH TO US
LIVE 24/7
TECHNICAL
SUPPORT
1.877.877.2269
TABLE OF CONTENTS
5.1.8 NMEA Streaming..............................................................................................................................................................................................74
5.1.9 USB Ports ...........................................................................................................................................................................................................75
5.1.10 Link Layer Discovery Protocol (LLDP) ........................................................................................................................................................76
5.2 Add and Edit Users.................................................................................................................................................................................77
5.2.1 Set Up New Groups..........................................................................................................................................................................................78
5.2.2 Set Up New Users............................................................................................................................................................................................78
5.3 Authentication ........................................................................................................................................................................................79
5.4 Network Hosts........................................................................................................................................................................................79
5.5 Trusted Networks...................................................................................................................................................................................80
5.6 Serial Port Cascading ............................................................................................................................................................................82
5.6.1 Automatically Generate and Upload SSH Keys..........................................................................................................................................82
5.6.2 Manually Generate and Upload SSH Keys..................................................................................................................................................83
5.6.3 Configure the Slaves and their Serial Ports................................................................................................................................................84
5.6.4 Managing the Slaves .......................................................................................................................................................................................85
5.7 Serial Port Re-direction (PortShare).....................................................................................................................................................86
5.8 Managed Devices...................................................................................................................................................................................86
5.9 IPsec VPN ...............................................................................................................................................................................................88
Enable the VPN Gateway..........................................................................................................................................................................................88
5.10 Open VPN..............................................................................................................................................................................................90
5.10.1 Enable the OpenVPN......................................................................................................................................................................................90
5.10.2 Configure as Server or Client.......................................................................................................................................................................92
5.10.3 Windows OpenVPN Client and Server Setup ...........................................................................................................................................93
5.11 PPTP VPN .............................................................................................................................................................................................97
5.11.1 Enable the PPTP VPN Server .......................................................................................................................................................................98
5.11.2 Add a PPTP User ............................................................................................................................................................................................99
5.11.3 Set Up a Remote PPTP Client ......................................................................................................................................................................99
5.12 Call Home............................................................................................................................................................................................100
5.12.1 Set Up Call Home Candidate......................................................................................................................................................................100
5.12.2 Accept Call Home Candidates as Managed Consoles.........................................................................................................................102
5.12.3 Calling Home to a Generic Central SSH Server .....................................................................................................................................103
5.13 IP Passthrough ...................................................................................................................................................................................103
5.13.1 Downstream Router Map............................................................................................................................................................................103
5.13.2 IP Passthrough Pre-requisite Pre-configuration Steps........................................................................................................................104
5.13.3 IP Passthrough Certification......................................................................................................................................................................104
5.13.4 Service Intercepts ........................................................................................................................................................................................105
5.13.5 IP Passthrough Status ................................................................................................................................................................................105
5.13.6 Caveats...........................................................................................................................................................................................................105
6. FIREWALL, FAILOVER AND OOB ACCESS............................................................................................................................... 106
6.1 Dial-up Modem Connection.................................................................................................................................................................106
6.2 OOB Dial-in Access ..............................................................................................................................................................................106
6.2.1 Configure Dial-in PPP ....................................................................................................................................................................................107
6.2.2 Using SDT Connector Client ........................................................................................................................................................................108

5
1. 8 7 7. 8 7 7. 2 2 6 9 BLACKBOX.COM
NEED HELP?
LEAVE THE TECH TO US
LIVE 24/7
TECHNICAL
SUPPORT
1.877.877.2269
TABLE OF CONTENTS
6.2.3 Set Up Windows XP or Later Client............................................................................................................................................................108
6.2.4 Set Up Earlier Windows Clients...................................................................................................................................................................109
6.2.5 Set Up Linux Clients.......................................................................................................................................................................................109
6.3 Dial-out Access ....................................................................................................................................................................................109
6.3.1 Always-on Dial-out.........................................................................................................................................................................................109
6.3.2 Failover Dial-out .............................................................................................................................................................................................111
6.4 OOB Broadband Ethernet Access....................................................................................................................................................... 113
6.5 Broadband Ethernet Failover............................................................................................................................................................... 114
6.6 Cellular Modem Connection................................................................................................................................................................116
6.6.1 Connecting to a GSM HSUPA/UMTS Carrier Network ..........................................................................................................................116
6.6.2 Connecting to a CDMA EV-DO Carrier Network......................................................................................................................................119
6.6.3 Connecting to a 4G LTE Carrier Network..................................................................................................................................................121
6.6.4 Verifying the Cellular Connection ...............................................................................................................................................................122
6.6.5 Cellular Modem Watchdog ..........................................................................................................................................................................124
6.6.6 Dual SIM Failover ...........................................................................................................................................................................................124
6.6.7 Multi-carrier Cellular Support ......................................................................................................................................................................125
6.7 Cellular Operation.................................................................................................................................................................................126
6.7.1 OOB Access Setup..........................................................................................................................................................................................127
6.7.2 Cellular Failover...............................................................................................................................................................................................128
6.7.3 Cellular Routing...............................................................................................................................................................................................129
6.7.4 Cellular CSD Dial-in ........................................................................................................................................................................................129
6.8 Firewalls and Forwarding ....................................................................................................................................................................130
6.8.1 Configuring Network Forwarding and IP Masquerading .......................................................................................................................131
6.8.2 Configuring Client Devices...........................................................................................................................................................................132
6.8.3 Port and Protocol Forwarding.....................................................................................................................................................................134
6.8.4 Firewall Rules..................................................................................................................................................................................................135
6.8.5 Packet State Matching in Firewall Rules ...................................................................................................................................................137
7. SSH TUNNELS AND SDT CONNECTOR ................................................................................................................................... 139
7.1 Configuring for SSH Tunneling to Hosts.............................................................................................................................................140
7.2 SDT Connector Client Configuration ..................................................................................................................................................141
7.2.1 SDT Connector Client Installation ...............................................................................................................................................................141
7.2.2 Configuring a New Gateway in the SDT Connector Client.....................................................................................................................142
7.2.3 Auto-configure SDT Connector Client with the User’s Access Privileges..........................................................................................143
7.2.4 Make an SDT Connection through the Gateway to a Host ................................................................................................................... 144
7.2.5 Manually Add a Host the the SDT Connector Gateway..........................................................................................................................145
7.2.6 Manually Add New Services to the New Hosts........................................................................................................................................146
7.2.7 Add a Client Program to be Started for the New Service.......................................................................................................................148
7.2.8 Dial-in Configuration......................................................................................................................................................................................149
7.3 SDT Connector to Management Console...........................................................................................................................................149
7.4 SDT Connector: Telnet or SSH Connect to Serially-Attached Devices............................................................................................151
7.5 Using SDT Connector for Out-of-Band Connection to the Gateway.................................................................................................152
7.6 Importing and Exporting Preferences ................................................................................................................................................153
7.7 SDT Connector Public Key Authentication.........................................................................................................................................153

61. 8 7 7. 8 7 7. 2 2 6 9 BLACKBOX.COM
NEED HELP?
LEAVE THE TECH TO US
LIVE 24/7
TECHNICAL
SUPPORT
1.877.877.2269
TABLE OF CONTENTS
7.8 Setting Up SDT for Remote Desktop Access .....................................................................................................................................154
7.8.1 Enable Remote Desktop on the Target Windows Computer to be Accessed....................................................................................154
7.8.2 Configure the Remote Desktop Connection Client .................................................................................................................................156
7.9 SDT SSH Tunnel for VNC......................................................................................................................................................................157
7.9.1 Install and Configure the VNC Server on the Computer to be Accessed............................................................................................157
7.9.2 Install, Configure and Connect the VNC Viewer.......................................................................................................................................158
7.10 Using SDT to IP Connect to Hosts that are Serially Attached to the Gateway ..............................................................................160
7.10.1 Establish a PPP Connection between the Host COM Port and the Console Server ......................................................................160
7.10.2 Set Up SDT Serial Ports on the Console Server.....................................................................................................................................162
7.10.3 Set Up SDT Connector to SSH Port Forward over the Console Server Serial Port ........................................................................163
7.11 SSH Tunneling Using Other SSH Clients (for example, PuTTY)......................................................................................................164
7.12 VNC Security .......................................................................................................................................................................................165
8. ALERTS, AUTO-RESPONSE AND LOGGING............................................................................................................................ 166
8.1 Configure Auto-Response ...................................................................................................................................................................166
8.2 Check Conditions.................................................................................................................................................................................168
8.2.1 Environmental.................................................................................................................................................................................................168
8.2.2 Alarms and Digital Inputs.............................................................................................................................................................................169
8.2.3 UPS and Power Supply .................................................................................................................................................................................169
8.2.4 UPS Status ......................................................................................................................................................................................................170
8.2.5 Serial Login, Signal or Pattern .....................................................................................................................................................................170
8.2.6 USB Console Status ......................................................................................................................................................................................171
8.2.7 ICMP Ping ........................................................................................................................................................................................................172
8.2.8 Cellular Data....................................................................................................................................................................................................172
8.2.9 Custom Check ................................................................................................................................................................................................172
8.2.10 CLI Session Event ........................................................................................................................................................................................174
8.2.11 SMS Command ............................................................................................................................................................................................174
8.2.12 Login and Logout Check.............................................................................................................................................................................175
8.2.13 Network Interface Event .............................................................................................................................................................................175
8.2.14 Route Data Usage Check............................................................................................................................................................................176
8.3 Trigger Actions .....................................................................................................................................................................................176
8.3.1 Send email .......................................................................................................................................................................................................177
8.3.2 Send SMS ........................................................................................................................................................................................................177
8.3.3 Perform RPC Action ......................................................................................................................................................................................178
8.3.4 Run Custom Script.........................................................................................................................................................................................178
8.3.5 Send SNMP Trap............................................................................................................................................................................................178
8.3.6 Send Nagios Event.........................................................................................................................................................................................178
8.3.7 Perform Interface Action..............................................................................................................................................................................179
8.4 Resolve Actions....................................................................................................................................................................................179
8.5 Configure SMTP, SMS, SNMP and Nagios Service for Alert Notifications.....................................................................................179
8.5.1 Send email Alerts ...........................................................................................................................................................................................179
8.5.2 Send SMS Alerts ............................................................................................................................................................................................180
8.5.3 Send SNMP Trap Alerts................................................................................................................................................................................182
8.5.4 Send Nagios Event Alerts.............................................................................................................................................................................184

7
1. 8 7 7. 8 7 7. 2 2 6 9 BLACKBOX.COM
NEED HELP?
LEAVE THE TECH TO US
LIVE 24/7
TECHNICAL
SUPPORT
1.877.877.2269
TABLE OF CONTENTS
8.6 Logging .................................................................................................................................................................................................184
8.6.1 Log Storage .....................................................................................................................................................................................................184
8.6.2 Serial Port Logging ........................................................................................................................................................................................185
8.6.3 Network TCP and UDP Port Logging.........................................................................................................................................................186
8.6.4 Auto-Response Event Logging....................................................................................................................................................................186
8.6.5 Power Device Logging...................................................................................................................................................................................186
9. POWER, ENVIRONMENT AND DIGITAL I/O............................................................................................................................. 188
9.1 Remote Power Control (RPC) ..............................................................................................................................................................188
9.1.1 RPC Connection..............................................................................................................................................................................................188
9.1.2 RPC Access Privileges and Alerts...............................................................................................................................................................192
9.1.3 User Power Management .............................................................................................................................................................................192
9.1.4 RPC Status.......................................................................................................................................................................................................193
9.2 Uninterruptible Power Supply (UPS) Control .....................................................................................................................................194
9.2.1 Managed UPS Connections .........................................................................................................................................................................194
9.2.2 Remote UPS Management ..........................................................................................................................................................................198
9.2.3 Controlling UPS-Powered Computers...................................................................................................................................................... 200
9.2.4 UPS Alerts....................................................................................................................................................................................................... 200
9.2.5 UPS Status...................................................................................................................................................................................................... 201
9.2.6 Overview of Nework UPS Tools (NUT) ..................................................................................................................................................... 202
9.3 Digital I/O Ports ................................................................................................................................................................................... 203
9.3.1 Digital I/O Output Configuration................................................................................................................................................................. 203
9.3.2 Digital I/O Input Configuration.................................................................................................................................................................... 204
9.3.3 High-Voltage Outputs................................................................................................................................................................................... 204
9.3.4 DIP SNMP Status .......................................................................................................................................................................................... 204
10. AUTHENTICATION .................................................................................................................................................................. 206
10.1 Authentication Configuration........................................................................................................................................................... 206
10.1.1 Local Authentication ................................................................................................................................................................................... 207
10.1.2 TACACS Authentication ............................................................................................................................................................................. 207
10.1.3 RADIUS Authentication .............................................................................................................................................................................. 208
10.1.4 LDAP Authentication................................................................................................................................................................................... 209
10.1.5 RADIUS and TACACS User Configuration...............................................................................................................................................211
10.1.6 Group Support with Remote Authentication...........................................................................................................................................212
10.1.7 Remote Groups with RADIUS Authentication.........................................................................................................................................213
10.1.8 Remote Groups with LDAP Authentication.............................................................................................................................................214
10.1.9 Remote Groups with TACACS+ Authentication .....................................................................................................................................216
10.1.10 Idle Timeout .................................................................................................................................................................................................216
10.1.11 Kerberos Authentication............................................................................................................................................................................217
10.1.12 Authentication Testing...............................................................................................................................................................................217
10.2 Pluggable Authentication Modules ..................................................................................................................................................218
10.3 SSL Certificate....................................................................................................................................................................................219

81. 8 7 7. 8 7 7. 2 2 6 9 BLACKBOX.COM
NEED HELP?
LEAVE THE TECH TO US
LIVE 24/7
TECHNICAL
SUPPORT
1.877.877.2269
TABLE OF CONTENTS
11. NAGIOS INTEGRATION ........................................................................................................................................................... 221
11.1 Nagios Overview ................................................................................................................................................................................ 221
11.2 Configuring Nagios Distributed Monitoring.................................................................................................................................... 221
11.2.1 Enable Nagios on the Console Server..................................................................................................................................................... 222
11.2.2 Enable NRPE Monitoring ........................................................................................................................................................................... 222
11.2.3 Enable NSCA Monitoring........................................................................................................................................................................... 223
11.2.4 Configure Selected Serial Ports for Nagios Monitoring...................................................................................................................... 224
11.2.5 Configure Seleced Network Ports for Nagios Monitoring.................................................................................................................. 225
11.2.6 Configure the Upstream Nagios Monitoring Host ............................................................................................................................... 226
11.3 Advanced Distributed Monitoring Configuration............................................................................................................................ 226
11.3.1 Sample Nagios Configuration................................................................................................................................................................... 226
11.3.2 Basic Nagios Plug-ins ................................................................................................................................................................................ 230
11.3.3 Additional Plug-ins...................................................................................................................................................................................... 231
11.3.4 Number of Supported Devices................................................................................................................................................................. 232
11.3.5 Distributed Monitoring Usage Scenarios ............................................................................................................................................... 233
12. SYSTEM MANAGEMENT ........................................................................................................................................................ 235
12.1 System Administration and Reset ................................................................................................................................................... 235
12.2 Firmware Upgrades........................................................................................................................................................................... 236
12.3 Date and Time Configuration........................................................................................................................................................... 237
12.4 Backup Configuration....................................................................................................................................................................... 238
12.5 Delayed Configuration Commit........................................................................................................................................................ 240
12.6 FIPS Mode...........................................................................................................................................................................................242
13. STATUS REPORTS ................................................................................................................................................................... 244
13.1 Port Access and Active Users .......................................................................................................................................................... 244
13.2 Statistics ............................................................................................................................................................................................ 245
13.3 Support Reports................................................................................................................................................................................ 246
13.4 Syslog................................................................................................................................................................................................. 246
13.5 Dashboard...........................................................................................................................................................................................247
13.5.1 Configuring the Dashboard........................................................................................................................................................................247
13.5.2 Creating Custom Widgets for the Dashboard....................................................................................................................................... 248
14. MANAGEMENT........................................................................................................................................................................ 249
14.1 Device Management ..........................................................................................................................................................................249
14.2 Port and Host Logs ........................................................................................................................................................................... 250
14.3 Terminal Connection......................................................................................................................................................................... 250
14.3.1 Web Terminal ............................................................................................................................................................................................... 250
14.3.2 SDT Connector Access...............................................................................................................................................................................252
14.4 Power Management.......................................................................................................................................................................... 253

9
1. 8 7 7. 8 7 7. 2 2 6 9 BLACKBOX.COM
NEED HELP?
LEAVE THE TECH TO US
LIVE 24/7
TECHNICAL
SUPPORT
1.877.877.2269
TABLE OF CONTENTS
15. CONFIGURATION FROM THE COMMAND LINE ................................................................................................................... 254
15.1 Accessing Configuration from the Command Line........................................................................................................................ 254
15.1.1 Serial Port Configuration............................................................................................................................................................................ 256
15.1.2 Adding and Removing Users..................................................................................................................................................................... 259
15.1.3 Adding and Removing User Groups ........................................................................................................................................................ 260
15.1.4 Authentication ...............................................................................................................................................................................................261
15.1.5 Network Hosts ..............................................................................................................................................................................................262
15.1.6 Trusted Networks ........................................................................................................................................................................................ 264
15.1.7 Cascaded Ports ........................................................................................................................................................................................... 265
15.1.8 UPS Connections......................................................................................................................................................................................... 265
15.1.9 RPC Connections......................................................................................................................................................................................... 268
15.1.10 Managed Devices ...................................................................................................................................................................................... 269
15.1.11 Port Log ....................................................................................................................................................................................................... 269
15.1.12 Aler ts .............................................................................................................................................................................................................270
15.1.13 SMTP and SMS .......................................................................................................................................................................................... 272
15.1.14 SNMP ........................................................................................................................................................................................................... 273
15.1.15 Administration .............................................................................................................................................................................................274
15.1.16 IP Settings ....................................................................................................................................................................................................274
15.1.17 Date and Time Settings.............................................................................................................................................................................275
15.1.18 Dial-in Settings ........................................................................................................................................................................................... 277
15.1.19 DHCP Server............................................................................................................................................................................................... 278
15.1.20 Services....................................................................................................................................................................................................... 279
15.1.21 Nagios.......................................................................................................................................................................................................... 281
16. ADVANCED CONFIGURATION................................................................................................................................................ 283
16.1 Custom Scripting............................................................................................................................................................................... 283
16.1.1 Custom Script to Run when Booting........................................................................................................................................................ 283
16.1.2 Running Custom Scripts when Alerts are Triggered............................................................................................................................ 284
16.1.3 Example Script: Power Cycling on Pattern Match................................................................................................................................ 285
16.1.4 Example Script: Mulitple email Notifications on Each Alert............................................................................................................... 285
16.1.5 Deleting Configuration Values from the CLI .......................................................................................................................................... 286
16.1.6 Power Cycle Any Device Upon a Ping Request Failure........................................................................................................................ 289
16.1.7 Running Custom Scripts When a Configurator is Invoked.................................................................................................................. 290
16.1.8 Backing Up the Configuration and Restoring Using a Local USB Stick ........................................................................................... 291
16.1.9 Backing Up the Configuration Off-Box.................................................................................................................................................... 292
16.2 Advanced PortManager.................................................................................................................................................................... 293
16.2.1 PortManager Commands ......................................................................................................................................................................... 293
16.2.2 External Scripts and Alerts ....................................................................................................................................................................... 297
16.3 Raw Access to Serial Ports .............................................................................................................................................................. 298
16.3.1 Access to Serial Ports ................................................................................................................................................................................ 298
16.3.2 Accessing the Console Modem Port...................................................................................................................................................... 298
16.4 IP Filtering......................................................................................................................................................................................... 299
16.5 SNMP Status Reporting.................................................................................................................................................................... 299
16.5.1 Retrieving Status Information Using SNMP .......................................................................................................................................... 299

10 1. 8 7 7. 8 7 7. 2 2 6 9 BLACKBOX.COM
NEED HELP?
LEAVE THE TECH TO US
LIVE 24/7
TECHNICAL
SUPPORT
1.877.877.2269
TABLE OF CONTENTS
16.5.2 Check Firewall Rules .................................................................................................................................................................................. 300
16.5.3 Enable SNMP Service ................................................................................................................................................................................ 300
16.5.4 Adding Multiple Remote SNMP Managers............................................................................................................................................ 303
16.6 Secure Shell (SSH) Public Key Authentication ............................................................................................................................... 304
16.6.1 SSH Overview .............................................................................................................................................................................................. 304
16.6.2 Generating Public Keys (Linux) ................................................................................................................................................................ 305
16.6.3 Installing the SSH Public and Private Keys (Clustering) ..................................................................................................................... 306
16.6.4 Installing SSH Public Key Authentication (Linux)................................................................................................................................. 306
16.6.5 Generating Public and Private Keys for SSH (Windows) .................................................................................................................... 307
16.6.6 Fingerprinting............................................................................................................................................................................................... 308
16.6.7 SSH Tunneled Serial Bridging................................................................................................................................................................... 309
16.6.8 SDT Connector Public Key Authentication .............................................................................................................................................312
16.7 Secure Sockets Layer (SSL) Support................................................................................................................................................312
16.8 HTTPS .................................................................................................................................................................................................313
16.8.1 Generating an Encryption Key ...................................................................................................................................................................313
16.8.2 Generating a Self-Signed Certificate with OpenSSL ............................................................................................................................313
16.8.3 Installing the Key and Certificate..............................................................................................................................................................313
16.8.4 Launching the HTTPS Server....................................................................................................................................................................314
16.9 Power Strip Control ............................................................................................................................................................................314
16.9.1 The PowerMan Tool.....................................................................................................................................................................................314
16.9.2 The Pmpower Tool.......................................................................................................................................................................................316
16.9.3 Adding New RPC Devices...........................................................................................................................................................................317
16.10 IPMtool ..............................................................................................................................................................................................318
16.11 Custom Development Kit (CDK)..................................................................................................................................................... 321
16.12 Scripts for Managing Slaves........................................................................................................................................................... 321
16.13 SMS Server Tools ............................................................................................................................................................................ 322
16.14 Multicast........................................................................................................................................................................................... 322
16.15 Bulk Provisioning ............................................................................................................................................................................. 323
16.16 Zero Touch Provisioning ................................................................................................................................................................. 323
16.16.1 Preparation ................................................................................................................................................................................................. 323
16.16.2 Example ISC DHCP Server Configuration............................................................................................................................................ 324
16.16.3 Setup for an Untrusted LAN.................................................................................................................................................................... 324
16.16.4 How it Works.............................................................................................................................................................................................. 324
16.17 Internal Storage ............................................................................................................................................................................... 326
16.17.1 File System Location of FTP and TFTP Directory .............................................................................................................................. 326
16.17.2 File System Location of Portmanager Logs ........................................................................................................................................ 326
16.17.3 Configuring FTP and TFTP Directory.................................................................................................................................................... 327
16.17.4 Mounting a Preferred USB Disk by Label.............................................................................................................................................. 327
APPENDIX A: COMMANDS AND SOURCE CODE........................................................................................................................ 328
A.1 Commands .......................................................................................................................................................................................... 328
A.2 Source Code........................................................................................................................................................................................ 334

11
1. 8 7 7. 8 7 7. 2 2 6 9 BLACKBOX.COM
NEED HELP?
LEAVE THE TECH TO US
LIVE 24/7
TECHNICAL
SUPPORT
1.877.877.2269
TABLE OF CONTENTS
APPENDIX B: REGULATORY INFORMATION .............................................................................................................................. 336
B.1 FCC Statement .................................................................................................................................................................................... 336
B.2 NOM Statement .................................................................................................................................................................................. 337
APPENDIX C: CONNECTIVITY, TCP PORTS AND SERIAL I/O................................................................................................... 338
C.1 Serial Port Pinouts .............................................................................................................................................................................. 338
C.2 Local Console Port ............................................................................................................................................................................. 339
C.3 RS-232 Standard Pinouts................................................................................................................................................................... 339
C.4 Console Server Connector Wiring ..................................................................................................................................................... 340
C.5 TCP and UDP Port Numbers.............................................................................................................................................................. 340
APPENDIX D. GLOSSARY ............................................................................................................................................................. 342
APPENDIX E: DISCLAIMER/TRADEMARKS................................................................................................................................ 345
E.1 Disclaimer ............................................................................................................................................................................................ 345
E.2 Trademarks Used in this Manual ....................................................................................................................................................... 345

12 1. 8 7 7. 8 7 7. 2 2 6 9 BLACKBOX.COM
NEED HELP?
LEAVE THE TECH TO US
LIVE 24/7
TECHNICAL
SUPPORT
1.877.877.2269
REVISION HISTORY
RELEASE: V6.38
REVISION HISTORY

13
CHAPTER 1: HEADLINE
1. 8 7 7. 8 7 7. 2 2 6 9 BLACKBOX.COM
NEED HELP?
LEAVE THE TECH TO US
LIVE 24/7
TECHNICAL
SUPPORT
1.877.877.2269
SAFETY PRECAUTIONS
SAFETY PRECAUTIONS
Follow the safety precautions below when installing and operating the console server:
Do not remove the metal covers. There are no operator-serviceable components inside. Opening or removing the cover may expose you to
dangerous voltage that may cause fire or electric shock. Refer all service to Black Box-qualified personnel.
To avoid electric shock, the power cord protective grounding conductor must be connected through to ground.
Always pull on the plug, not the cable, when disconnecting the power cord from the socket.
Do not connect or disconnect the console server during an electrical storm.
We recommend that you use a surge suppressor or UPS to protect the equipment from transients.
Proper back-up systems and necessary safety devices should be used to protect against injury, death or property damage due to system
failure. Such protection is the responsibility of the user.
This console server device is not approved for use as a life-support or medical system.
Any changes or modifications made to this console server device without the explicit approval and consent of Black Box will void Black
Box of any liability or responsibility of injury or loss caused by any malfunction.
This equipment is for indoor use only. All the console’s communication wirings are limited to use inside of a building.

14
CHAPTER 1: HEADLINE
1. 8 7 7. 8 7 7. 2 2 6 9 BLACKBOX.COM
NEED HELP?
LEAVE THE TECH TO US
LIVE 24/7
TECHNICAL
SUPPORT
1.877.877.2269
ABOUT THIS MANUAL
PRODUCTS COVERED
The Black Box User Manual describes the features and capabilities of the following Black Box product products, and provides
instructions to best take advantage of them:
LES1500 Series Console Servers: LES1516A, LES1532A, LES1548A
LES1600 Series Console Servers: LES1604A, LES1604A-V, LES1604A-T, LES1604A-R, LES1608A
LES1700 Series Console Servers: LES1708A, LES1716A, LES1732A, LES1748A
Each of these products is referred to generically in this manual as a console server.
Where appropriate, product groups may be referred to as console servers, gateways or by specific product line name or product
group (for example the LES1500 family).
WHO SHOULD READ THIS USER MANUAL?
You should read this manual if you are responsible for evaluating, installing, operating, or managing a Black Box appliance. This
manual assumes you are familiar with the internal network of your organization, and are familiar with the Internet, IP networks,
HTTP, FTP and basic security operations.
MANUAL ORGANIZATION
The Black Box User Manual is structured as follows:
Safety Precautions
1. Specifications: Technical specifications for the console servers.
2. Overview: An overview of the console server’s features and information regarding this manual.
3. Installation: Physical installation of the console server and the interconnecting of managed devices.
4. System configuration: Initial installation and configuration of the console server and the supported services.
5. Serial port, host, device and user configuration: Configuring serial ports and connected network hosts, and setting up users.
6. Firewall, failover, and OOB access: Set up the firewall and the high availability access features of the console server.
7. SSH tunnels and SDT connector: Secure remote access using SSH and configure for RDP, VNC, HTTP, HTTPS and access to
network- and serially-connected devices.
8. Alerts, auto-response and logging: Set up local and remote event and data logs. Configure auto-responses to trigger events.
9. Power, environment and digital I/O: Manage USB, serial and network attached power strips and UPS supplies. Also EMD
environmental sensor configuration.
10. Authentication: Access to the console server requires authenticated usernames and passwords.
11. Nagios Integration: Set Nagios central management. Configure console server as a distributed Nagios server.
12. System Management: Access to and configuration of services to be run on the console server.
13. Status reports: The dashboard summary and detailed status and logs of serial and network connected devices
(ports, hosts, power and environment).
14. Management: Port controls and user-accessible reports.
15. Configuration from the command line: Command-line installation and configuration using the config command.
16. Advanced Configuration: Advanced command-line configuration activities using Linux commands.

15
1. 8 7 7. 8 7 7. 2 2 6 9 BLACKBOX.COM
NEED HELP?
LEAVE THE TECH TO US
LIVE 24/7
TECHNICAL
SUPPORT
1.877.877.2269
ABOUT THIS MANUAL
17. Appendixes: Command definitions, specifications, certifications, terminology definitions, licenses, service and warranty details.
The most recent version of this manual is always at www.blackbox.com.
TYPES OF USERS
The console server supports two classes of users:
1. First, there are administrative users, who have unlimited configuration and management privileges over the console server and
all the connected devices.
Administrative users are set up as members of the admin user group. Users in this class are referred to in this manual as
Administrators. An Administrator can access and control the console server using the config utility, the Linux command line or the
browser-based Management Console. By default, the Administrator has access to all services and ports to control all the serial
connected devices and network connected devices (hosts).
2. The second class of users embraces those who have been set up by an Administrator with specific limits of their access and
control authority. These users are set up as members of one of the pre-configured user groups (pptpd, dialin, ftp, pmshell or users)
or another user group an Administrator has added.
They are only authorized to perform specified controls on specific connected devices and are referred to as Users. These Users
(when authorized) can access serial or network connected devices and control these devices using the specified services (eg
Telnet, HHTPS, RDP, IPMI, Serial-over-LAN, Power Control).
An authorized User also has a limited view the Management Console and can only access authorized configured devices and
review port logs.
In this manual, when the term user (lower case) is used, it is referring to both classes of users above. This document also uses the
term remote users to describe users who are not on the same LAN segment as the console server.
These remote users may be users who are on the road connecting to managed devices over the public Internet. They may be an
Administrator in another office connecting to the console server itself over the enterprise VPN. Or the remote user may be in the
same room or the same office but connected on a separate VLAN to the console server.
MANAGEMENT CONSOLE
The features of your console server are configured and monitored using the Black Box Management Console. When you first
browse to the Management Console, you can use the menu displayed on the left side to configure the console server. Once you
have completed the initial configuration, you can continue to use the Management Console. It runs in a browser and provides a view
of the console server and all the connected devices.
Administrators can use the Management Console, either locally or from a remote location, to configure and manage the console
server, users, ports, hosts, power devices and associated logs and alerts.
Users can also use the Management Console, but have limited menu access to control select devices, review their logs, access
them using the Web terminal, or control power to them.
The console server runs an embedded Linux operating system, and experienced Linux and UNIX users may prefer to undertake
configuration at the command line.
You can gain command line access by cellular, dial-in, or by directly connecting to the console server’s serial console port (aka the
console server’s modem port). The shell can also be accessed via ssh or Telnet over a LAN or by connecting with PPTP, IPsec or
OpenVPN.

16 1. 8 7 7. 8 7 7. 2 2 6 9 BLACKBOX.COM
NEED HELP?
LEAVE THE TECH TO US
LIVE 24/7
TECHNICAL
SUPPORT
1.877.877.2269
ABOUT THIS MANUAL
WHERE TO FIND ADDITIONAL INFORMATION
The Quick Start Guide that came with your console server.

17
1. 8 7 7. 8 7 7. 2 2 6 9 BLACKBOX.COM
NEED HELP?
LEAVE THE TECH TO US
LIVE 24/7
TECHNICAL
SUPPORT
1.877.877.2269
CHAPTER 1: SPECIFICATIONS
SPECIFICATIONS: LES1500 SERIES CONSOLE SERVERS
Console Specifications
Console Ports LES1516A: (16) RJ-45 RS-232 serial ports with Cisco pinouts;
LES1532A: (32) RJ-45 RS-232 serial ports with Cisco pinouts;
LES1548A: (48) RJ-45 RS-232 serial ports with Cisco pinouts
Interface
Ethernet Ports (2) 10-/100-/1000-Mbps Ethernet RJ-45 ports
Console Port (1) DB9 RS-232 console port
Serial Ports Software-selectable, 50 to 230,400 bps
USB (2) USB 2.0 ports for increased storage
Remote Access Dual Ethernet, aggregation and redundancy, remote access automatic network failover, easy browser
UI IPv6
Console Management Built-in web terminal, SSH direct to consoles, optional console keystroke logging, alert on cable
disconnects, text pattern match and more, inline power control, multiple concurrent sessions
Power Requirements
Power Supply LES1508A: External AC/DC power supply;
LES1516A, LES1532A, LES1548A: Single AC power supply
Power Consumption Less than 30 W
Physical
Dimensions 1.75"H x 17"W x 6.9"D (4.5 x 43.2 x 4.5 cm)
Weight 9 lb. (4 kg)
Form Factor 1 RU
Memory and CPU
CPU Marvell 88F6W11
Memory 32 MB Flash
Internal Storage 4 GB
Environmental
Operating Temperature 41 to 122° F (5 to 40° C)
Storage Temperature -20 to +140° F (-30 to +60° C)
Humidity 5 to 90%
Security, Encryption and
Authentication
SSH;
FIPS-140-2 compliant;
Open SSL Module;
Strong ciphers—AES encryption;
IPsec;
AAA, TACACS+, RADIUS, Active Directory, OpenLDAP, Kerberos, with local fallback;
Two factor authentication via remote AAA;
Configurable stateful firewall;
OpenVPN

18 1. 8 7 7. 8 7 7. 2 2 6 9 BLACKBOX.COM
NEED HELP?
LEAVE THE TECH TO US
LIVE 24/7
TECHNICAL
SUPPORT
1.877.877.2269
CHAPTER 1: SPECIFICATIONS
SPECIFICATIONS (CONTINUED): LES1500 SERIES CONSOLE SERVERS
Automation and Scalability ZTP, Virtual Central Management System (VCMS);
RESTful API, programmable and extensible;
Auto-Response, SNMP, LLDP, NTP
Certifications
Emissions FCC Part 15 Subpart B Class A;
ICES-003 Issue 4 February 2004;
AS/NZS CISPR 22: 2004 Class A;
EN 55022 Emissions Class A (2009) A1 (2010);
EN 61000-3-2 Harmonics Current Emissions (2014);
EN 61000-3-3 Voltage Fluctuation and Flicker (2013)
Immunity EN 55024 ITE Immunity (2010);
IEC 61000-4-2 (2008);
IEC 61000-4-3 (2006) A1 (2007) A2 (2010);
IEC 61000-4-4 (2012);
IEC 61000-4-5 (2014);
IEC 61000-4-6 (2013);
IEC 61000-4-8 (2009);
IEC 61000-4-11 (2004)
Other Agency Approvals CE, UL 1950, TUV, C-Tick, RoHS compliant, Security features to support NERC CIP standards,
FIPS 140-2 validated module Certificate #2473, CCC
MTBF 150,000 hours

19
1. 8 7 7. 8 7 7. 2 2 6 9 BLACKBOX.COM
NEED HELP?
LEAVE THE TECH TO US
LIVE 24/7
TECHNICAL
SUPPORT
1.877.877.2269
CHAPTER 1: SPECIFICATIONS
SPECIFICATIONS: LES1600 CONSOLE SERVERS
Console Specifications
Console Ports LES1604A, LES1604A-V, LES1604A-T, LES1604A-R: (4) RJ-45 RS-232 Cisco straight pinout console ports;
LES1608A: (8) RJ-45 RS-232 Cisco straight pinout console ports
Interface
Ethernet Ports (2) 10-/100-/1000-Mbps Ethernet RJ-45 ports
Serial Ports Cisco straight 50 to 230,400 bps
USB Ports (4) USB 2.0 console ports
Remote Access All LES1600 models: Dual Ethernet, aggregation and redundancy, Automatic Network Failover,
Easy browser UI, IPv6;
LES1604A-V, -LES1604A-T, LES1604A-R: 4G Cellular
I/O Ports (2) TTL level digital I/O ports (DIO), 5 VDC max. @ 20 mA (supports external water/smoke/motion dry
contact sensors);
(2) high-voltage digital outputs (HVDO), 5–30 VDC @100 mA (drives relays, alarms, etc.)
Console Management Built-in web terminal, SSH direct to consoles, optional console keystroke logging, alert on cable
disconnects, inline power control, multiple concurrent sessions
Power Requirements
Power Adapter 110–240 VAC to 12 VDC external power adapter
Power Consumption Less than 11.5 W
Physical
Dimensions 5.1"H x 4.8"W x 1.4"D (13 x 12 x 3.5 cm)
Form Factor Compact
Memory and CPU
CPU 800 MHz Armada 370 ARMv7 SoC (Marvell 88F6W11)
Memory 256 MB DDR3 SDRAM;
32 MB Embedded NOR Flash
Internal Storage 4 GB NAND Flash
Environmental
Operating Temperature -13 to +140° F (-25 to +60° C)
Storage Temperature -40 to +167° F (-40 to +75° C)
Humidity 5 to 90%
Security, Encryption
and Authentication
SSH;
FIPS-140-2 compliant Open SSL Module;
Strong ciphers—AES encryption;
Cisco-compatible IPsec;
AAA—TACACS+, RADIUS, Active Directory/OpenLDAP, Kerberos, with local fallback;
Two factor authentication via remote AAA;
Configurable stateful firewall;
OpenVPN

20 1. 8 7 7. 8 7 7. 2 2 6 9 BLACKBOX.COM
NEED HELP?
LEAVE THE TECH TO US
LIVE 24/7
TECHNICAL
SUPPORT
1.877.877.2269
CHAPTER 1: SPECIFICATIONS
SPECIFICATIONS: LES1600 CONSOLE SERVERS (CONTINUED)
Automation and Scalability ZTP, Virtual Central Management System (VCMS);
RESTful API, programmable and extensible;
Auto-Response, SNMP, LLDP, NTP
Certifications
Emissions FCC Part 15 Subpart B:2015;
EN55022:2010;
CISPR 22:2008;
ICES-003 Issue 5 (2014);
AS/NZS CISPR 22: 2009+ A1:2010;
EN 61000-3-2:2006/A2:2009;
EN 61000-3-3:2008
Immunity EN 55024:2010
CISPR 24:2010;
EN 61000-4-2:2009;
EN 61000-4-3:2006+A2:2010;
EN 61000-4-4:2004+A1:2010;
EN 61000-4-5:2006;
EN 61000-4-6:2009;
EN 61000-4-8:2010;
EN 61000-4-11:2004
Other Agency Approvals CE, UL 1950, TUV, C-Tick, RoHS compliant, Security features to support NERC CIP standards,
FIPS 140-2 validated module Certificate #2473, CCC