Seiko NS-2250 User manual

Console server
NS-2250
Before using this console server, carefully read
this instruction manual so you can use the console
server correctly.
After reading this manual, store it in a safe place
so can be accessed easily when necessary.
Instruction Manual

U00135010100 2015 Oct
U00135010101 2016 JAN
© Seiko Solutions Inc., 2015
No copying.
The content of this manual may change without notice.
“SEIKO” is a registered trademark of Seiko Holdings Corporation.
Ethernet is a registered trademark of Fuji Xerox Co., Ltd.
Seiko Solutions Inc. is not responsible for damages caused by this manual or the use of products
described in this manual or the expenses necessary to compensate for such damages.
When you dispose of the NS-2250, observe the regulations of local goverment. For details, contact
your local goverment.
This equipment has been tested and found to comply with the limits for a Class A digital device,
pursuant to part 15 of the FCC Rules. These limits are designed to provide reasonable protection
against harmful interference when the equipment is operated in a commercial environment. This
equipment generates, uses, and can radiate radio frequency energy and, if not installed and used in
accordance with the instruction manual, may cause harmful interference to radio communications.
Operation of this equipment in a residential area is likely to cause harmful interference in which case
the user will be required to correct the interference at his own expense.

i
Introduction
Thank you for purchasing the SmartCS NS-2250 console server (hereinafter
referred to as the NS-2250).
This document is the instruction manual for the NS-2250. This manual
describes the specifications, operation methods, maintenance methods, and
other information of the NS-2250, for IT professionals who must remotely
configure/manage the network equipments with serial port.
As shown in the following table, the number of serial ports of the NS-2250
depends on the model you are using. The examples in this manual may
state that the serial port specification is 1-48. Change this value to 1-16 or
1-32 or 1-48 as appropriate for the model you are using.
Power
Model
Number of serial ports
AC power model
NS-2250-16
16 ports
NS-2250-32
32 ports
NS-2250-48
48 ports
For the installation and cable connections of the NS-2250, see the NS-2250
SmartCS console server installation manual (hereinafter referred to as the
Installation manual). For details about commands for the SmartCS, see the
NS-2250 Console server command reference (hereinafter referred to as the
Command Reference).
Before installing the NS-2250, read the following Safety precautions and
Handling precautions.

ii
Safety precautions
Before using the NS-2250, carefully read these safety precautions so you can use the
console server safely.
In this manual, the following symbols are used to call your attention to precautions so that
you can use the NS-2250 safely and prevent damage to equipment.
The following table shows the meaning of these symbols. Understand the content of the
table fully before reading this manual.
Warning
Ignoring the displayed contents and handling the console
server incorrectly may result in death or serious injury.
Caution
Ignoring the displayed contents and handling the console
server incorrectly may result in injury or physical damage.
Examples of symbols
This symbol indicates content that
requires attention (including danger and
warnings).
The display example on the left indicates a
warning or precaution.
This symbol indicates a prohibited action.
The display example on the left indicates that
disassembly is prohibited.
This symbol indicates a required action or
an instruction.
The display example on the left indicates
removal of the power plug from the outlet.

iii
Do not disassemble or modify the NS-2250.
Doing so can result in heat generation, fire, electric shock, or malfunction.
Do not remove the metal cover of the NS-2250.
There are no user-serviceable parts inside.
Doing so can result in heat generation, fire, electric shock, or malfunction.
Never use this console server in a location of extremely high humidity or a
location in which it may be exposed to water or other liquids.
Doing so can result in heat generation, fire, electric shock, or malfunction.
Never drop metal pieces or drip water or other liquids into the interior or gaps
of the NS-2250.
Doing so can result in heat generation, fire, electric shock, or malfunction.
Do not connect or disconnect the power cable or other cables with wet hands.
Doing so can result in electric shock.
Do not block the heat vents of the NS-2250.
Heat generation may cause fire, electric shock, or malfunction.
In the following situations, remove the power plug from the outlet.
Continuing to use the NS-2250 under such abnormal conditions may cause
an accident or fire.
◆When you are repairing the NS-2250 or dealing with errors
◆When you notice unusual odors, smoke, or unusual noises
◆
If metal pieces or water or other liquids enter the interior or gaps of the
NS-2250
◆If the NS-2250 has been dropped or the exterior surface of the NS-2250
has been damaged
Mechanical loading - Mounting of the equipment in the rack should be such
that a hazardous condition is not achieved due to uneven mechanical
loading. Personal injury or equipment damage might result if mishandled.
Warning

iv
Never perform the following actions.
These actions can cause fire, electric shock, accident, or malfunction.
◆Do not place objects on the NS-2250.
◆Do not apply impact to the NS-
2250 with blows or other similar
actions.
◆Do not place the NS-2250 in an unstable location.
◆Do not place objects on cables, twist cables, or pull cables strongly.
Do not install the NS-2250 in the following locations or conditions.
Doing so can result in malfunction.
◆Direct sunlight
◆Severe changes in temperature or humidity
◆Very dusty locations
◆Locations subject to vibrations
◆Near a heating-cooling combination appliance
Always perform the following actions.
Neglecting these actions can cause fire, electric shock, accident, or
malfunction.
◆Always use the NS-2250 at the specified power voltage.
The power voltage of the NS-2250 is displayed on the nameplate on
its bottom surface and near the AC inlet.
◆Potential difference may be generated between the NS-
2250 and
connected equipment depending on the installation environment.
When connecting a cable, do not touch the terminal of the connector
section. Doing so can result in electric shock.
◆
Use an outlet that is near the NS-2250 and can be easily accessed
Always ground the power cable.
Neglecting to ground the power cable can result in fire or electric shock.
In addition, follow the warnings and precautions indicated in each section.
Caution

v
Handling precautions
●Never perform the following actions.
They can result in malfunction of the NS-2250 or USB memory or corrupt the contents of
the USB memory.
・While the STATUS 4 light is on, do not remove the USB memory. If the USB memory
is removed during operation, the operation of the NS-2250 is not guaranteed.
・While the NS-2250 is running normally, do not cut the power of the NS-2250 by
switching off the power switch or pulling out the power cable, or press the RESET
switch.
Before you switch off the power, carry out the “shutdown” command to exit the system
software. Next, either confirm that the “MON>” prompt is displayed on the console or
wait for the STATUS 2 light on the front of the NS-2250 to switch on. Finally, switch off
the power.
・Do not touch the connector of the USB memory with your hand or metal directly.
●To press the RESET switch, use an item with a narrow tip, such as the tip of a ballpoint
pen.
Do not use a mechanical pencil. If the lead of a mechanical pencil breaks and falls inside
this console server, a malfunction may result.
●When you cut the power by switching off the POWER switch or removing the power cable
of the NS-2250, wait 10 seconds or more before supplying power by switching on the
POWER switch or inserting the power cable of the NS-2250.
If power is supplied too quickly, the NS-2250 may not reset normally.
When a redundant power is used, turn off both power.
●Clean the heat vents with a vacuum cleaner or similar device about once every two
months.
●If the exterior of the NS-2250 becomes soiled, soak a soft cloth in a neutral detergent
diluted with water, wring it well, and then wipe the exterior. Next, wipe with a dry cloth.
●This equipment is for indoor use and all the communication wirings are limited to inside of
the building.

vi
Third-party software licenses
Parts of the software of the NS-2250 use the following software. For details of the
licenses of the following software, see Appendix D, “Third-party software licenses”.
SysVinit
SysVinit-tools
bootlogd
busybox
dropbear
e2fsprogs
eglibc
ethtool
freeradius
ftp
kernel
libcap
libgcc
libpcap
linux
logrotate
net-snmp
net-snmp-libs
openssh
openssh-server
pam
pam_tacplus
procps
proftpd
rsyslog
strace
tcl
tclx
tcpdump
tcp_wrappers
telnet-server
udev
u-boot
xinetd
zlib

Table of contents-1
Table of contents
Chapter 1 Overview of the NS-2250 1-1
1.1 Features and main functions 1-2
1.1.1 Features 1-2
1.1.2 Main functions 1-7
1.2 Part names 1-9
1.2.1 Front of NS-2250 1-9
1.2.2 Rear of NS-2250 1-11
1.3 Interface specifications 1-13
Chapter 2 Functions 2-1
2.1 Port server functions 2-2
2.1.1 Overview of port server functions 2-2
2.1.2 Connect to a port server (Direct mode) 2-4
2.1.3 Connect to a port server (Select mode) 2-6
2.1.4 Port selection menu 2-8
2.1.5 Port server menu 2-13
2.1.6 Port user authentication 2-16
2.1.7 Other port server functions 2-19
2.2 Port log functions 2-20
2.2.1 Overview of the port log function 2-20
2.2.2 Port log save function 2-21
2.2.3 Time stamp function 2-22
2.2.4 Login stamp function 2-23
2.2.5 Port log display function 2-23
2.2.6 Port log sending function (syslog/NFS/FTP/mail) 2-25
2.3 Security functions 2-27
2.3.1 User management/authentication function 2-27
2.3.2 RADIUS authentication function/RADIUS accounting function 2-29
2.3.3 User group identification and access control of serial ports by
RADIUS 2-34
2.3.4 TACACS+ function 2-36
2.3.5 User group identification and access control of serial ports by
TACACS+ 2-41
2.3.6 Control access to servers 2-42
2.4 Operation management functions 2-43

Table of content-2
Chapter 3 Configuration procedures 3-1
3.1 Start, check, and stop the NS-2250 3-2
3.1.1 Insert an USB memory 3-2
3.1.2 Connect a device management terminal 3-4
3.1.3 Start the NS-2250 3-6
3.1.4 Check the NS-2250 3-7
3.1.5 Stop the NS-2250 3-9
3.2 Set up the NS-2250 3-10
3.2.1 Log in and log out 3-11
3.2.2 Use the CLI 3-13
3.2.3 Insert configuration commands 3-15
3.2.4 Save settings 3-16
3.2.5 Restart the NS-2250 3-18
Chapter 4 Settings 4-1
4.1 Configure the network 4-3
4.1.1 Change the host name or IP address of the NS-2250 4-3
4.1.2 Configure the static routing function 4-4
4.1.3 Configure the DNS client 4-5
4.2 Configure the CONSOLE port 4-6
4.3 Configure the serial ports 4-7
4.4 Configure the port server 4-9
4.4.1 Configure the connection modes (Direct mode/Select mode) 4-9
4.4.2 Show the port server menu 4-10
4.4.3 User authentication of the port server (port user authentication) 4-11
4.4.4 Access control of the port server (connection protocol and
connection mode) 4-11
4.4.5 Connect multiple sessions of the port server 4-11
4.4.6 Change the TCP port number of the port server (Direct mode) 4-12
4.4.7 Add a port user 4-13
4.4.8 Configure labeling of serial ports 4-14
4.4.9 Configure the automatic session disconnection function of the port
server 4-15
4.4.10 Configure other port server functions 4-15
4.5 Configure port logs 4-18
4.5.1 Enable and disable port log functions 4-18
4.5.2 Configure port log size 4-19
4.5.3 Configure time stamps 4-19
4.5.4 Configure login stamps 4-20
4.5.5 Configure email sending 4-21
4.5.6 Configure FTP sending 4-22
4.5.7 Configure syslog sending 4-23
4.5.8 Configure NFS sending 4-25
4.5.9 Check port log settings 4-26
4.6 Configure security settings 4-27

Table of content-3
4.6.1 Register and delete users 4-27
4.6.2 Configure user passwords 4-28
4.6.3 Configure the RADIUS authentication / accounting function 4-29
4.6.4 Configure the TACACS+ function 4-38
4.6.5Configure the telnet server 4-42
4.6.6 Configure the SSH server 4-42
4.6.7 Control access to servers 4-44
4.7 Configure operation management 4-45
4.7.1 Configure the SNTP client 4-45
4.7.2 Configure the SNMP agent 4-46
4.7.3 Configure the syslog client 4-49
4.7.4 Configure the temperature sensor 4-50
4.7.5 Configure the time zone 4-51
4.8 Setting examples 4-52
4.8.1 Basic settings 4-52
4.8.2 Configure the services 4-54
4.8.3 Configure port log transfer 4-57
4.8.4 Change the port log location and size 4-61
4.8.5 Disable the port log function and control display of the port server
menu 4-63
4.8.6 Port user authentication 4-64
4.8.7 SSH password (basic) authentication 4-66
4.8.8 SSH public key (public) authentication 4-69
4.8.9 Configure the port selection function (Select mode of the port server)
4-74
4.8.10 Configure the RADIUS authentication / accounting function (basic
settings) 4-76
4.8.11 Configure the RADIUS authentication client function/RADIUS
accounting client function (case 1: filter_id_head) 4-80
4.8.12 Configure the RADIUS authentication function/RADIUS accounting
function (case 2: access grouping function) 4-86
4.8.13 Configure the TACACS+ function (basic settings) 4-91
4.8.14 Configure the TACACS+ function (access grouping function) 4-96
4.8.15 LAN Redundant 4-102
Chapter 5 Management and maintenance 5-1
5.1 View information of the NS-2250 5-2
5.1.1 View hardware and software information 5-2
5.1.2 View a summary of the information of the NS-2250 5-3
5.2 Manage the configuration 5-5
5.2.1 View a list of startup files 5-5
5.2.2 View the content of startup files 5-7
5.2.3 Change the startup file to be imported at startup 5-8
5.2.4 Copy a startup file 5-9
5.2.5 Clear the content of a startup file 5-9
5.2.6 View the running configuration 5-10

Table of content-4
5.2.7 Transfer startup files via FTP server 5-11
5.2.8 Transfer startup files via FTP client 5-15
5.2.9 Transfer startup files via TFTP client 5-16
5.3 View console logs 5-17
5.4 Manage the NS-2250 via SNMP 5-18
5.5 Manage system software 5-19
5.5.1 Switch the system software to be started 5-19
5.5.2 Copy system software 5-21
5.5.3 Restore system software 5-21
5.5.4 Upgrade or downgrade system software 5-22
5.5.5 Replace system software 5-27
5.5.6 Save system software 5-32
5.6 Save and download port logs manually 5-36
5.7 Reset to default setting 5-39
Chapter 6 Troubleshooting 6-1
6.1 Overview of troubleshooting 6-2
6.2 NS-2250 hardware trouble 6-3
6.2.1 The power does not switch on 6-3
6.2.2 The STATUS lights are on or flashing 6-4
6.3 Communication trouble 6-5
6.3.1 Check console logs 6-5
6.3.2 Check settings 6-6
6.3.3 Network communication connection trouble 6-7
6.3.4 Serial communication connection trouble 6-10
6.3.5 Trouble with the RADIUS authentication / accounting function 6-14
6.3.6 Trouble with the TACACS+ function 6-20
6.4 Other trouble 6-24
6.4.1 The password of the device management user has been forgotten
6-24

Table of content-5
Appendix A User privileges A-1
A.1 User privileges list A-2
Appendix B Examples of attributes and RADIUS authentication /
accounting server settings B-1
B.1 RADIUS authentication client / accounting client function B-2
B.2 Attributes sent to the RADIUS authentication server B-3
B.3 Attributes of the RADIUS authentication server processed by the
NS-2250 B-4
B.4 Attributes sent to the RADIUS accounting server B-6
B.5 Examples of RADIUS authentication/accounting server settings B-7
B.5.1 Client registration B-7
B.5.2 User registration B-7
B.6 Accounting logs of the RADIUS accounting server B-11
Appendix C Rom-Monitor C-1
C.1 Rom-Monitor C-2
Appendix D Third-party software licenses D-1
D.1 Third-party software licenses D-2

1-1
Chapter 1
Overview of the NS-2250
Chapter 1 describes the main functions and part names of the NS-2250.
Read this chapter before starting work.
Chapter content
1.1 Features and main functions
1.1.1 Features
1.1.2 Main functions
1.2 Part names
1.2.1 Front of NS-2250
1.2.2 Rear of NS-2250
1.3 Interface specifications

1-2
1.1 Features and main functions
This chapter provides an overview of the features and main functions of the NS-2250. For
details of each function, see Chapter 2, “Functions”.
1.1.1 Features
The NS-2250 console server is equipped with up to 48 RS232-compliant RJ-45 (8-contact
modular connector) serial ports.
Device name Power Model Number of serial
ports
SmartCS AC power model
NS-2250-16
16 ports
NS-2250-32
32 ports
NS-2250-48
48 ports
This console server aggregates the console ports (serial ports for various settings, log
output, and so on) of routers, switches, and other network equipment and server
equipment (hereinafter referred to as monitored equipment) and offers a unified,
maintainable environment.
The NS-2250 can automatically save messages that monitored equipment have output,
send logs to syslog servers and NFS servers, transfer files to FTP servers, and send
e-mail.
To provide safe access to the NS-2250 and monitored equipment that has been connected
to the NS-2250, the NS-2250 is equipped with the SSHv2/SFTP encryption protocol and
public key authentication. Furthermore, to protect monitored equipment that has been
connected to the NS-2250 from unauthorized access, the NS-2250 is equipped with a
login authentication function for users that access serial ports and a function to limit serial
ports to which users can access.
Features of
the NS2250
Aggregate the console ports of monitored equipment
Save and transfer messages that monitored equipment output
Encrypt communication and prevent unauthorized access
Figure 1-1 Features of the NS-2250

1-3
(1) Aggregate the console ports of monitored equipment
The NS-2250 aggregates the console ports of multiple units of monitored equipment and
offers a unified, maintainable environment. Instead of connecting terminals to the console
ports of monitored equipment, by connecting to the NS-2250, you can access the console
ports of monitored equipment from a telnet/SSH client on the network.
Via the NS-2250, you can operate monitored equipment as if you are directly connected to
its serial port.
Monitored
equipment
Monitored
equipment
Telnet/SSH Client
login:
login:
Serial Cable
Monitored
equipment
CONSOLE
port
NS-2250
Figure 1-2 Aggregation of the console ports
If you use the NS-2250 to create a monitoring network as shown in Figure 1-3, you can
reliably access the console ports of monitored equipment that are connected to the
NS-2250, even when an operational network problem occurs. This can reduce
maintenance work greatly and minimize maintenance costs.
Monitored
equipment
Monitored
equipment
Serial Cable
CONSOLE port
WAN
Telnet/SSH Client
Router
Router
Operational
Network
Monitoring network Monitoring via the
operational network
Monitoring via the
console server
NS-2250
Figure 1-3 Remote monitoring via the NS-2250

1-4
Furthermore, the NS-2250 is equipped with a port selection function that allows you to
access monitored equipment easily by simply selecting a number from a menu displaying
a list of monitored equipment. By using this function, you can centrally control monitored
equipment.
Figure 1-4 Central control of monitored equipment
Furthermore, with the NS-2250, you can access monitored equipment on a single serial
port from multiple telnet/SSH clients at the same time. For example, you can operate the
same monitored equipment from 2 telnet/SSH clients or operate monitored equipment
from one telnet/SSH client, while at the same time monitoring from another telnet/SSH
client. You can use this function to operate more efficiently when multiple people are
managing and operating the same monitored equipment, such as in an environment to run
a read-out check before inputting a configuration command to monitored equipment.
Monitored
equipment
Telnet/SSH
client
(Operation terminal)
login:
Telnet/SSH
client
(monitoring only)
login:
Operation of monitored equipment
Monitoring of operation
NS-2250
Figure 1-5 Operation and monitoring of monitored equipment
Monitored
equipment
Monitored
equipment
Telnet/SSH client
telnet SmartCS
-------------------
1: Swicth-A
2: Server-X
-------------------
> 2
Serial cable
Monitored
equipment
CONSOLE
port
NS-2250

1-5
(2) Save, display, and send messages that monitored equipment have output
The NS-2250 saves and manages messages that monitored equipment have output as
port logs.
You can view saved port logs when accessing monitored equipment via the NS-2250 from
a telnet/SSH client.
You can also use the following methods to export port logs to external equipment.
Automatically save files to an NFS server
Automatically send files to an FTP server
Automatically send logs as mail data to a mail server
Automatically send messages to a syslog server
Download logs via external FTP/SFTP access
Manually send logs to an external TFTP server
By checking the port logs saved to the NS-2250 and the port logs sent to servers, you can
analyze trouble with monitored equipment even when the monitored equipment restarted
due to the trouble.
Monitored
equipment
SYSLOG/NFS server FTP server Mail server
Port logs
FTP/SFTP client
TFTP/FTP server
NS-2250
Automatic
transfer
Manual transfer
Log
Telnet/SSH
client
Automatic
transfer Automatic
transfer
Figure 1-6 Save, display, and send messages that monitored equipment have output

1-6
(3) Encrypt communication and prevent unauthorized access
To provide safe access to the NS-2250 and monitored equipment that has been connected
to the NS-2250, the NS-2250 is equipped with the SSHv2 (Secure Shell version 2)/SFTP
(Secure File Transfer Protocol) encryption protocol and public key authentication. Because
communication is concealed, you can use the NS-2250 with peace of mind from a security
perspective.
You can also specify the network addresses of clients that can access the internal
management services of the NS-2250 (telnet server, SSH server, etc.) and restrict access
to these services.
In addition to user authentication using passwords and public keys, you can enable
advanced security control by specifying the serial ports that the user can access.
Monitored
equipment
Monitored
equipment
User Access Port
suzuki 1,2,3
tanaka 1,5,6
sato 7
Telnet/SSH client
NS-2250
Figure 1-7 Access control of serial ports