Opengear IM4000 User manual

_____________________________________________________________________
Opengear IM4000 and CM4000 User Manual Page 1 of 216
USER MANUAL
IM4200 Infrastructure Manager
and
CM4000 Console Server
User Manual
Rev: 2.1
June 23, 2007

_____________________________________________________________________
Opengear IM4000 and CM4000 User Manual Page 2 of 216
INDEX
INTRODUCTION 7
This Manual 7
Manual Organization 7
Types of users 8
Management Console 9
Manual Conventions 0
INSTALLATION
2. Models
2.1.1 IM4216-2, IM4216-25 or IM4248-2 Kit Components 12
2.1.2 CM4116 or CM4148 Kit Components 12
2.1.3 CM4008 Kit Components 13
2.1.4 CM4001 Kit Components 14
2.2 Power connection 4
2.1.1 IM4216-2, IM4216-25 and IM4248-2 Power 14
2.2.2 CM4116 or CM4148 Power 15
2.2.3 CM4008 Power 15
2.2.4 CM4001 Power 16
2.2.5 CM4116-48V and CM4148-48V Power 16
2.3 Network connection 7
2.4 Serial Port connection 8
SYSTEM CONFIGURATION 9
3. Management Console connection 9
3.2 Change the default Password 23
3.3 Set the gateway’s network IP address 24
3.4 System Services selection 27
3.5 Communications Software 29
S TConnector 30
PuTTY 31
SSHTerm 32
3.6 Set the IP address of other IM42xx network ports (IM4200 only) 32
SERIAL PORT AND NETWORK HOST 35
4. Configuring Serial Ports 36
4.1.1 Common Settings 37
4.1.2 Console Server Mode 38

_____________________________________________________________________
Opengear IM4000 and CM4000 User Manual Page 3 of 216
4.1.3 S T Mode 42
4.1.4 Power Strip Mode 42
4.1.5 Terminal Server Mode 43
4.1.6 Serial Bridging Mode 44
4.1.7 Syslog 45
4.2 Add / Edit Users 46
4.3 Authentication 48
4.4 Network Hosts 50
4.5 Trusted Networks 5
4.6 Serial Port Redirection Client 53
FAILOVER AND OoB DIAL-IN 54
5. OoB Dial-In access 54
5.1.1 Configure ial-In PPP 55
5.1.2 Set up Windows XP/ 2003 client 58
5.1.3 Set up earlier Windows clients 59
5.1.4 Set up Linux clients 59
5.1.5 Using S TConnector client 60
5.2 OoB broadband access (IM4200 only) 60
5.3 Broadband Ethernet Failover (IM4200 only) 6
5.4 Dial-Out Failover (IM4200 only) 62
SECURE TUNNELING 65
6. Configuring the IM/CM4000 gateway for SDT Tunneling access to network attached hosts 67
6.2 Establish SDT SSH connection between Client PC and IM/CM4000 gateway 68
6.2.1 etermine the gateway IP address 69
6.2.2 ial in configuration 70
6.2.3 Choosing an SSH client 71
6.2.4 Create the SSH tunnel using S TConnector client 71
6.2.5 Create the SSH tunnel using PuTTY client 73
6.3 Setting up SDT for Remote Desktop access 79
6.3.1 Enable Remote esktop on the target Windows computer to be accessed 79
6.3.2 Configure the Remote esktop Connection client 82
6.4 SDT Secure Tunnel for VNC 87
6.4.1 Install and configure the VNC Server on the computer to be accessed 87
6.4.2 Install, configure and connect the VNC Viewer 90
6.5 Using SDTConnector to browser access the gateway Management Console 93
6.6 Using SDTConnector to Telnet or SSH connect to devices that are serially attached to the gateway 95
6.7 Using SDT to IP connect to hosts that are serially attached to the gateway 98

_____________________________________________________________________
Opengear IM4000 and CM4000 User Manual Page 4 of 216
6.7.1 Establish a PPP connection from the computer’s COM port to IM/CM4000 98
6.7.2 Set up S T Serial Ports on IM/CM4000 104
ALERTS AND LOGGING 06
7. SMTP and SNMP Settings 06
7.2 Remote Log Storage 08
7.3 Serial Port Logging 08
7.4 Network TCP or UDP Port Logging (IM4200 only) 09
7.5 Configure Port Alerts 0
POWER CONTROL 3
8. Configuring Serial Port Power Strips 3
8.2 Configuring IPMI Power Management 5
8.2 Configuring browser controlled Power Strips 6
8.3 Controlling Power 7
AUTHENTICATION 8
9. Remote Authentication Configuration 8
9.2 PAM (Pluggable Authentication Modules) 20
9.3 Secure Management Console Access 2
NAGIOS INTEGRATION 23
0. Nagios overview 24
0.2 Configuring Nagios 24
0.3 Advanced Configuration 28
0.4 Usage scenarios 33
IM/CM4000 SYSTEM MANAGEMENT 37
. System Administration and Reset 37
.2 Upgrade Firmware 38
.3 Configure Date and Time 40
STATUS REPORTS 42
2. Port Access and Active Users 42
2.2 Statistics 43
2.3 Support Reports 43
2.4 Syslog 44
MANAGEMENT 46
3. Device Management 46
3.2 Port Log Management 47
3.3 Serial Port Terminal Management 47
BASIC CONFIGURATION - LINUX COMMANDS 49
4. The Linux Command line 5

_____________________________________________________________________
Opengear IM4000 and CM4000 User Manual Page 5 of 216
4.2 Administration Configuration 52
System Settings 152
Authentication Configuration 153
4.3 Date and Time Configuration 53
4.4 Network Configuration 54
IP Configuration 154
ial-in Configuration 155
Services Configuration 156
4.5 Serial Port Configuration 57
Serial Port Settings 157
Supported Protocol Configuration 158
Users 158
Trusted Networks 159
4.6 Event Logging Configuration 60
Remote Serial Port Log Storage 160
Alert Configuration 160
4.7 SDT Host Configuration 6
S T host TCP Ports 161
ADVANCED CONFIGURATION 63
5. Advanced Portmanager 64
5.2 External Scripts and Alerts 66
5.3 Raw Access to Serial Ports 68
5.4 IP- Filtering 69
5.5 Modifying SNMP Configuration 7
5.6 Secure Shell (SSH) Support 7
Configuring SSH Public Key Authentication (Linux) 172
Generating non-interactive public/private keys for SSH (Windows) 174
SSH tunneled serial bridging 176
S TConnector Public Key Authentication 179
5.7 Secure Sockets Layer (SSL) Support 80
5.8 HTTPS 8
5.9 Power Strip Control 83
5. 0 IPMItool 86

_____________________________________________________________________
Opengear IM4000 and CM4000 User Manual Page 6 of 216
APPENDIX
A. Linux Commands
B. Hardware Specification
C. Safety and Certifications
D. Connectivity and Serial I/O
E. Hardware Test
F. Terminology
G. End User License Agreement
H. Service and Warranty

_____________________________________________________________________
Opengear IM4000 and CM4000 User Manual Page 7 of 216
Chapter 1 Introduct on
INTRODUCTION
Th s Manual
This Users Manual walks you through installing an configuring your Infrastructure
Management gateway (IM4248, IM4216-2) or Console Server gateway (CM4001,
CM4008, CM4116, CM4116-48V, CM4148, CM4148-48V - V2.2 firmware an later).
These are referre to generically in the manual as IM/CM4000 or gateway.
Once configure , you will be able to use your IM/CM4000 to securely control your
computers, as well as the firewalls, networke evices an power strips in your ata
center; an securely manage these systems in remote sites. This manual gui es you in
managing this infrastructure locally (across your LAN or through the local console port),
an remotely (across the Internet, private network or via ial up).
Manual Organ zat on
This manual contains the following chapters:
1. Intro uction An overview the features IM/CM4000 gateway an information on
this manual
2. Installation Physical installation of the gateway an the interconnecting of
controlle evices
3. System Configuration Describes the initial installation an configuration using the
Management Console. Covers configuration of the gateway on the
network an the services that will be supporte
4. Serial & Network Covers configuring serial ports an connecte network hosts, an
setting up User access
5. Failover an OoB ial-in Describes setting up the high availability access features of the
gateway

_____________________________________________________________________
Opengear IM4000 and CM4000 User Manual Page 8 of 216
6. Secure Tunneling (SDT) Covers secure remote access using SSH an configuring for
RDP, VNC, HTTP, HTTPS etc access to network an serially
connecte evices
7. Alerts an Logging Explains the setting up of local an remote event/ ata logs an
triggering SNMP an email alerts
8. Power Control Local an
remote power control of serial an network
attache power strips an UPS supplies, an IPMI power
control of servers
9. Authentication All access to the gateway requires usernames an passwor s
which are locally or externally authenticate
10. Nagios Integration Configuring the gateway as a istribute Nagios server
11. System Management Covers access to an configuration of services to be run on the
gateway
12. Status Reports View the status an logs
13. Management Inclu es port controls an reports that can accesse by Users
14 Basic Configuration Comman line installation an configuration using the config
comman
15. A vance Config More a vance comman line configuration activities, where you
will nee to use Linux comman s
The latest up ate of this manual can be foun online at
www.opengear.com/ ownloa .html
Types of users
The IM/CM4000 gateway supports two classes of users:
I. Firstly there are those users who will be authorize to configure an control the
gateway; an to access an control all the connecte evices. These a ministrative
users are referre to generically as the Administrator. The A ministrator can access
an control the gateway using the config utility, the Linux comman line or the
browser base Management Console. By efault the A ministrator has access to all
services an ports to control all the serial connecte evices an network connecte
evices (hosts). The A ministrator also sets up Users an specifies the limits of their
access an control authority

_____________________________________________________________________
Opengear IM4000 and CM4000 User Manual Page 9 of 216
II. Those users who are authorize to perform specifie controls on specific connecte
evices are referre to as Users. These Users (when authorize ) can access serial
or network connecte evices; an control these evices using the specifie services
(e.g. Telnet, HHTPS, RDP, IPMI, Serial over LAN, Power Control). An authorize
User can also use the Management Console to access configure evices an
review port logs.
In this manual, when the term user (lower case) is use , it is referring to both the above
classes of users. This ocument also uses the term remote users to escribe users
who are not on the same LAN segment as the gateway. These remote users may be
Users, who are on the roa connecting over the public Internet, or it may be an
A ministrator at another office connecting over the enterprise VPN. Also the remote
users may be in the same room or the same office but connecte on a separate VLAN
to the gateway.
Management Console
The IM/CM4000 Management Console runs in a browser an provi es a view of the
gateway an all the connecte equipment. A ministrators can use the Management
Console, either locally or from a remote location, to configure the gateway, the Users
an the ports an connecte hosts.
An authorize User can then use the Management Console to access an control
configure evices, review port logs, use the in-built java terminal to access serially
attache console an control power to connecte evices.
The Management Console is accesse through the IP Network or through a mo em/
ISDN connection.
The IM/CM4000 runs an embe e Linux operating system, an experience Linux an
UNIX users may prefer to un ertake configuration at the comman line. You can get

_____________________________________________________________________
Opengear IM4000 and CM4000 User Manual Page 10 of 216
comman line access by connecting through a terminal emulator or communications
program to the console serial port; by ssh or telnet connecting through the LAN; or
through an SSH tunneling to the gateway.
Manual Convent ons
This manual uses ifferent fonts an typefaces to show specific actions:
 Text presente with an arrow hea in ent in icates an action you shoul take as
part of the proce ure.
Bold text in icates text that you type, or the name of a screen object (e.g. a menu
or button) on the Management Console.
Italic text is also use to in icate a text comman to be entere at the comman line
level.
WARNING
Text presented like this highlights important issues.
It is essential you read and take head of these arnings.
Note
Text presente like this in icates issues to take note of.