Tripp Lite B092-016 User manual

1
Tripp Lite World Headquarters
1111 W. 35th Street, Chicago, IL 60609 USA
www.tripplite.com/support
Owner’s Manual
WARRANTY
REGISTRATION:
register online today for a
chance to win a FREE Tripp Lite
product—www.tripplite.com/warranty
Console Server Management Switch
Models:
B096-016 / B096-048
Console Server with PowerAlert
Model:
B092-016
Console Server
Models:
B095-004-1E / B095-003-1E-M / B094-008-2E-M-F
Copyright © 2012 Tripp Lite. All rights reserved. All trademarks are the property of their respective owners.

Please take care to follow the safety precautions below when installing and operating the Console Server:
• Donotremovethemetalcovers.Therearenooperator-serviceablecomponentsinside.Openingor
removing the cover may expose you to dangerous voltage which may cause fire or electric shock. Refer all
service to Tripp Lite qualified personnel
• Toavoidelectricshockthepowercordprotectivegroundingconductormustbeconnectedthroughtoground
• Alwayspullontheplug,notthecable,whendisconnectingthepowercordfromthesocket
• DonotconnectordisconnecttheConsoleServerduringanelectricalstorm
• AlsoitisrecommendedyouuseasurgesuppressororUPStoprotecttheequipmentfromtransients
FCC Information, Class A
Thisdevicecomplieswithpart15oftheFCCRules.Operationissubjecttothefollowingtwoconditions:(1)Thisdevicemay
notcauseharmfulinterference,and(2)thisdevicemustacceptanyinterferencereceived,includinginterferencethatmay
cause undesired operation.
Note: This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to part 15 of
the FCC Rules. These limits are designed to provide reasonable protection against harmful interference when the equipment
is operated in a commercial environment. This equipment generates, uses, and can radiate radio frequency energy and, if
not installed and used in accordance with the instruction manual, may cause harmful interference to radio communications.
Operation of this equipment in a residential area is likely to cause harmful interference in which case the user will be required
to correct the interference at his own expense. The user must use shielded cables and connectors with this equipment. Any
changes or modifications to this equipment not expressly approved by Tripp Lite could void the user’s authority to operate this
equipment.
RoHS
This product is RoHS compliant.
User Notice
Allinformation,documentationandspecicationscontainedinthismanualaresubjecttochangewithoutpriornoticationby
themanufacturer.Themanufacturermakesnorepresentationsorwarranties,eitherexpressedorimplied,withrespecttothe
contents hereof and specifically disclaims any warranties as to merchantability or fitness for any particular purpose. Any of the
manufacturer's software described in this manual is sold or licensed `as is'. Should the programs prove defective following
theirpurchase,thebuyer(andnotthemanufacturer,itsdistributor,oritsdealer),assumestheentirecostofallnecessary
servicing,repairandanyincidentalorconsequentialdamagesresultingfromanydefectinthesoftware.
The manufacturer of this system is not responsible for any radio and/or TV interference caused by unauthorized modifications
to this device. It is the responsibility of the user to correct such interference. The manufacturer is not responsible for any
damage incurred in the operation of this system if the correct operational voltage setting was not selected prior to operation.

3
Introduction 10
Installation 14
2.1 Models 14
2.1.1 Kitcomponents:B096-048andB096-016ConsoleServerManagementSwitch 14
2.1.2 Kitcomponents:B092-016ConsoleServerwithPowerAlert 15
2.1.3 Kitcomponents:B095-004-1EandB095-003-1E-MConsoleServer 15
2.1.4 Kitcomponents:B094-008-2E-M-FConsoleServer 16
2.2 Power Connection 17
2.2.1 Power: Console Server Management Switch 17
2.2.2 Power: Console Server with PowerAlert 17
2.2.3 Power: Console Server 17
2.3 Network Connection 17
2.4 Serial Port Connection 18
2.5 USB Port Connection 18
2.6 Rackmount Console / KVM Connection (B092-016 only) 18
System Configuration 19
3.1 Management Console Connection 19
3.1.1 Connected computer set up 19
3.1.2 Browser connection 20
3.1.3 InitialB092-016connection 21
3.2 Administrator Password 22
3.2.1 Set up new administrator 22
3.3 Network IP Address 23
3.3.1 IPv6conguration 24
3.3.2 DynamicDNS(DDNS)conguration 25
3.4 System Service Access 26
3.5 Communications Software 29
3.5.1 SDTConnector 29
3.5.2 PuTTY 29
3.5.3 SSHTerm 30
3.6 Management Network Configuration 31
3.6.1 EnabletheManagementLAN 31
3.6.2 ConguretheDHCPserver 32
3.6.3 SelectFailoverorbroadbandOOB 33
3.6.4 Bridgingthenetworkports 34
3.6.5 WirelessLAN 34
3.6.6 Static routes 35
Table of Contents

4
Serial Port, Host, Device & User Configuration 36
4.1 Configuring Serial Ports 36
4.1.1 CommonSettings 37
4.1.2 ConsoleServerMode 38
4.1.3 SDTMode 41
4.1.4 Device(RPC,UPS,EMD)Mode 42
4.1.5 TerminalServerMode 42
4.1.6 SerialBridgingMode 43
4.1.8 Syslog 43
4.2 Add/ Edit Users 44
4.3 Authentication 46
4.4 Network Hosts 46
4.5 Trusted Networks 47
4.6 Serial Port Cascading 48
4.6.1 AutomaticallygenerateanduploadSSHkeys 48
4.6.2 ManuallygenerateanduploadSSHkeys 49
4.6.3 Conguretheslavesandtheirserialports 50
4.6.4 Managingtheslaves 50
4.7 Serial Port Redirection 51
4.7.1 InstallVirtualPortclient 51
4.7.2 ConguretheVirtualPortclient 52
4.7.3 Toremoveaconguredport 54
4.7.4 Conguretheremoteserialdeviceconnection 54
4.8 Managed Devices 55
4.9 IPsec VPN 56
4.9.1 EnabletheVPNgateway 56
4.10 OpenVPN 58
4.10.1 EnabletheOpenVPN 59
4.10.2 CongureasServerorClient 60
4.10.3 WindowsOpenVPNClientandServersetup 62
4.11 PPTP VPN 65
4.11.1 EnablethePPTPVPNserver 66
4.11.2 AddaPPTPuser 67
4.11.3 SetuparemotePPTPclient 68
Firewall, Failover & OoB 69
5.1 OoB Dial-In Access 69
5.1.1 Conguredial-inPPP 70
5.1.2 UsingSDTConnectorclientfordial-in 71
5.1.3 SetupWindowsXP/2003/Vista/7clientfordial-in 71
5.1.4 SetupearlierWindowsclientsfordial-in 72
5.1.5 SetupLinuxclientsfordial-in 72
5.2 OoB Broadband Access 73
5.3 Broadband Ethernet Failover 73
5.4 Dial-Out Failover 74
5.4.1 Always-ondial-out 74
5.4.2 Dial-OutFallover 75
5.5 Firewall & Forwarding 76
5.5.1 Configuring network forwarding and IP masquerading 76
5.5.2 Conguringclientdevices 78
5.5.3 Port Forwarding 79
5.5.4 PortRules 80
Table of Contents

5
SSH Tunnels & SDT Connector 82
6.1 Configuring for SDT Tunneling to Hosts 83
6.2 SDT Connector Configuration 84
6.2.1 SDTConnectorclientinstallation 84
6.2.2 ConguringanewgatewayintheSDTConnectorclient 85
6.2.3 Auto-congureSDTConnectorclientwiththeuser’saccessprivileges 86
6.2.4 MakeanSDTconnectionthroughthegatewaytoahost 87
6.2.5 ManuallyaddinghoststotheSDTConnectorgateway 88
6.2.6 Manuallyaddingnewservicestothenewhosts 89
6.2.7 Adding a client program to be started for the new service 91
6.2.8 Dial-inconguration 92
6.3 SDT Connector to Management Console 93
6.4 SDT Connector - Telnet or SSH Serial Device Connection 94
6.5 SDT Connector OoB Connection 95
6.6 Importing (and Exporting) Preferences 96
6.7 SDT Connector Public Key Authentication 97
6.8 Setting up SDT for Remote Desktop Access 98
6.8.1 EnableRemoteDesktoponthetargetWindowscomputertobeaccessed 98
6.8.2 ConguretheRemoteDesktopConnectionclient 99
6.9 SDT SHH Tunnel for VNC 102
6.9.1 InstallandconguretheVNCServeronthecomputertobeaccessed 102
6.9.2 Install,congureandconnecttheVNCViewer 103
6.10 SDT IP Connection to Hosts 105
6.10.1 EstablishaPPPconnectionbetweenthehostCOMportandConsoleServer 105
6.10.2 SetupSDTSerialPortsonConsoleServer 108
6.10.3 SetupSDTConnectortoSSHportforwardovertheConsoleServerSerialPort 108
6.11 SSH Tunneling using other SSH clients (e.g. PuTTY) 109
Alerts, Automated Response and Logging 112
7.1 Set Up Auto-Response and Configure Check Conditions 112
7.1.1 Email alerts 113
7.1.2 AlarmsandDigitalInputs 114
7.1.3 UPS/PowerSupply 114
7.1.4 UPSStatus 114
7.1.5 Serial Login/Logout 115
7.1.6 ICMP Ping 115
7.1.7 CellularData 115
7.1.8 CustomCheck 116
7.1.9 SMS Command 116
7.2 Trigger and Resolve Actions 117
7.2.1 Send Email on Trigger 117
7.2.2 Send SMS on Trigger 117
7.2.3 Perform RPC Action on Trigger 117
7.2.4 RunCustomScriptonTrigger 118
7.2.5 SendSNMPTraponTrigger 118
7.2.6 SendNagiosEventonTrigger 118
7.2.7 ResolveActions 118
7.2.8 SendEmailalertsonResolution 119
7.2.9 Send SMS Alerts on Resolution 119
7.2.10 SendSNMPTrapalertsonResolution 120
7.2.11 SendNagiosEventalertsonResolution 120
Table of Contents

6
7.3 Remote Log Storage 121
7.4 Serial Port Logging 121
7.5 Network TCP or UDP Port Logging 122
7.6 Auto-Response Event logging 122
7.7 Power Device Logging 122
Power and Environmental Monitoring 123
8.1 Remote Power Control (RPC) 123
8.1.1 RPCconnection 123
8.1.2 RPCalerts 125
8.1.3 RPCstatus 125
8.1.4 Userpowermanagement 126
8.2 Uninterruptible Power Supply Control (UPS) 127
8.2.1 ManagedUPSconnections 127
8.2.2 CongureUPSpoweringtheConsoleServer 129
8.2.3 ConguringpoweredcomputerstomonitoraManagedUPS 130
8.2.4 UPSalerts 131
8.2.5 UPSstatus 131
8.2.6 OverviewofNetworkUPSTools(NUT) 132
8.3 Environmental Monitoring 133
8.3.1 ConnectingtheEMD 134
8.3.2 Environmentalalerts 135
8.3.3 Environmentalstatus 135
Authentication 136
9.1 Authentication Configuration 136
9.1.1 Local authentication 136
9.1.2 TACACS authentication 137
9.1.3 RADIUSauthentication 138
9.1.4 LDAPauthentication 139
9.1.5 RADIUS/TACACSuserconguration 139
9.1.6 Groupsupportwithremoteauthentication 140
9.1.7 RemotegroupswithRADIUSauthentication 140
9.1.8 RemotegroupswithLDAPauthentication 141
9.1.9 Idletimeout 143
9.1.10 Kerberosauthentication 143
9.1.11 Authenticationtesting 143
9.2 PAM (Pluggable Authentication Modules) 144
9.3 Secure Management Console Access 145
9.4 SSL Certificate 146
Table of Contents

7
Nagios Integration 148
10.1 Nagios Overview 148
10.2 Central management and setting up SDT for Nagios 149
10.2.1 SetupcentralNagiosserver 149
10.2.2 Set up distributed Console Servers 150
10.3 Configuring Nagios distributed monitoring 152
10.3.1 EnableNagiosontheConsoleServer 153
10.3.2 EnableNRPEmonitoring 153
10.3.3 EnableNSCAmonitoring 154
10.3.4 CongureselectedSerialPortsforNagiosmonitoring 155
10.3.5 CongureselectedNetworkHostsforNagiosmonitoring 156
10.3.6 ConguretheupstreamNagiosmonitoringhost 157
10.4 Advanced Distributed Monitoring Configuration 158
10.4.1 SampleNagiosconguration 158
10.4.2 BasicNagiosplug-ins 161
10.4.3 Additionalplug-ins 161
System Management 163
11.1 System Administration and Reset 163
11.2 Upgrade Firmware 164
11.3 Configure Date and Time 165
11.4 Configuration Backup 166
11.5 Delayed Configuration Commit 167
11.6 FIPS Mode 168
Status Reports 169
12.1 Port Access and Active Users 169
12.2 Statistics 169
12.3 Support Reports 170
12.4 Syslog 170
12.5 Dashboard 171
12.5.1 ConguringtheDashboard 171
12.5.2 CreatingcustomwidgetsfortheDashboard 173
Management 174
13.1 Device Management 174
13.2 Port and Host Log Management 174
13.3 Terminal Connection 174
13.3.1 WebTerminal 174
13.3.1.1 Web Terminal to Command Line 175
13.3.1.2 WebTerminaltoSerialDevice 175
13.3.2 SDTConnectoraccess 176
13.4 Power Management 176
13.5 Remote Console Access (B092-016 only) 177
Table of Contents

8
Configuration from the Command Line 178
14.1 Accessing config from the command line 178
14.1.1 SerialPortconguration 180
14.1.2 AddingandremovingUsers 183
14.1.3 AddingandremovinguserGroups 184
14.1.4 Authentication 185
14.1.5 NetworkHosts 186
14.1.6 TrustedNetworks 187
14.1.7 CascadedPorts 187
14.1.8 UPSConnections 188
14.1.9 RPCConnections 189
14.1.10 Environmental 190
14.1.11 ManagedDevices 190
14.1.12 PortLog 191
14.1.13 Alerts 192
14.1.14 SMTP&SMS 194
14.1.15 SNMP 195
14.1.16 Administration 195
14.1.17 IPsettings 195
14.1.18 Date&Timesettings 196
14.1.19 Dial-insettings 196
14.1.20 DHCPserver 197
14.1.21 Services 198
14.1.22 NAGIOS 198
14.2 General Linux command usage 199
Advanced Configuration 201
15.1 Custom Scripting 201
15.1.1 Custom script to run when booting 201
15.1.2 Running custom scripts when alerts are triggered 202
15.1.3 Examplescript-Powercyclingonpatternmatch 203
15.1.4 Examplescript-Multipleemailnoticationsoneachalert 203
15.1.5 DeletingcongurationvaluesfromtheCLI 204
15.1.6 Power cycle any device upon a ping request failure 207
15.1.7 Runningcustomscriptswhenaconguratorisinvoked 208
15.1.8 Backing-upthecongurationandrestoringusingalocalUSBstick 208
15.1.9 Backing-upthecongurationoff-box 209
15.2 Advanced Portmanager 210
15.2.1 Portmanager commands 210
15.2.2 External Scripts and Alerts 211
15.3 Raw Access to Serial Ports 212
15.3.1 Access to serial ports 212
15.3.2 Accessing the console/modem port 212
15.4 IP- Filtering 213
15.5 SNMP Status Reporting and Traps 214
15.5.1 RetrievingstatusinformationusingSNMP 214
15.5.2 Checkrewallrules 214
15.5.3 EnableSNMPservice 214
15.5.4 /etc/cong/snmpd.conf 217
15.5.5 AddingmultipleremoteSNMPmanagers 218
Table of Contents

9
15.6 Secure Shell (SSH) Public Key Authentication 219
15.6.1 SSHOverview 219
15.6.2 GeneratingPublicKeys(Linux) 219
15.6.3 InstallingtheSSHPublic/PrivateKeys(Clustering) 220
15.6.4 InstallingSSHPublicKeyAuthentication(Linux) 220
15.6.5 Generatingpublic/privatekeysforSSH(Windows) 222
15.6.6 Fingerprinting 223
15.6.7 SSHtunneledserialbridging 224
15.6.8 SDTConnectorPublicKeyAuthentication 226
15.7 Secure Sockets Layer (SSL) Support 227
15.8 HTTPS 227
15.8.1 Generatinganencryptionkey 227
15.8.2 Generatingaself-signedcerticatewithOpenSSL 227
15.8.3 Installingthekeyandcerticate 228
15.8.4 LaunchingtheHTTPSServer 228
15.9 Power Strip Control 229
15.9.1 PowerMan 229
15.9.2 pmpower 230
15.9.3 Adding new RPC devices 230
15.10 IPMItool 232
15.11 Scripts for Managing Slaves 234
15.12 SMS Server Tools 235
15.13 Multicast 235
Thin Client (B092-016) 236
16.1 Local Client Service Connections 236
16.1.1 Connect: Serial Terminal 237
16.1.2 Connect:Browser 238
16.1.3 Connect:VNC 239
16.1.4 Connect:SSH 240
16.1.5 Connect:IPMI 241
16.1.6 Connect:RemoteDesktop(RDP) 242
16.1.7 Connect:CitrixICA 243
16.1.8 Connect:PowerAlert 243
16.2 Advanced Control Panel 244
16.2.1 System:Terminal 244
16.2.2 System:Shutdown/Reboot 244
16.2.3 System:Logout 244
16.2.4 Custom 244
16.2.5 Status 244
16.2.6 Logs 244
16.3 Remote Control 245
Appendix A: Hardware Specification 246
Appendix B: Serial Port Connectivity 247
Appendix C: End User License Agreements 249
Appendix D: Service and Warranty 256
Table of Contents

10
ThisUserManualisprovidedtohelpyougetthemostfromyourB096-016/B096-048ConsoleServerManagementSwitch,
B092-016ConsoleServerwithPowerAlertorB095-004-1E/B095-003-1E-M/B094-008-2E-M-FConsoleServerproduct.
These products are referred to generically in this manual as Console Servers.
Oncecongured,youwillbeabletouseyourConsoleServertosecurelymonitor,accessandcontrolthecomputers,
networkingdevices,telecommunicationsequipment,powersuppliesandoperatingenvironmentinyourdatacenter,branch
ofceorcommunicationsroom.Thismanualguidesyouinmanagingthisinfrastructurelocally(attheracksideoracrossyour
operationsormanagementLANorthroughthelocalserialconsoleport),andremotely(acrosstheInternet,privatenetworkor
viadialup).
Manual Organization
This manual contains the following chapters:
1. Introduction An overview of the features of the Console Server and information on this manual
2.Installation DetailsphysicalinstallationoftheConsoleServerandtheinterconnectionofcontrolled
devices
3.SystemConguration DescribestheinitialinstallationandcongurationusingtheManagementConsoleofthe
Console Server on the network and the services that will be supported
4.SerialandNetwork Coversconguringserialportsandconnectednetworkhosts,andsettingupUsersand
Groups
5.FailoverandOoBdial-in Describessettingupthehigh-availabilityaccessfeaturesoftheConsoleServer
6.SecureTunneling(SDT) CoverssecureremoteaccessusingSSHandconguringforRDP,VNC,HTTP,HTTPS,etc.
access to network and serially connected devices
7.AlertsandLogging Explainsthesettingupoflocalandremoteevent/datalogsandtriggeringSNMPandemail
alerts
8.Power&Environment ManagementofUSB,serialandnetworkattachedPowerDistributionunitsandUPSunits
 includingNetworkUPSTool(NUT)operationandIPMIpowercontrol.EMDenvironmental
sensor configuration
9. Authentication All access to the Console Server requires usernames and passwords which are locally or
externally authenticated
10.NagiosIntegration SettingNagioscentralmanagementwithSDTextensionsandconguringtheConsoleServer
 asadistributedNagiosserver
11. System Management Covers access to and configuration of services to be run on the Console Server
12.StatusReports Viewthestatusandlogsofserialandnetworkconnecteddevices(ports,hosts,powerand
 environment)
13.Management IncludesportcontrolsandreportsthatcanaccessedbyUsers
14.BasicConguration Commandlineinstallationandcongurationusingthecongcommand
15. Advanced Config More advanced command line configuration activities where you will need to use Linux
commands
16.ThinClient Congurationanduseofthethinclientandotherapplications(includingPowerAlert)
 embeddedintheConsoleServerwithPowerAlert(B092-016)product
Chapter 1: Introduction