WTI SRM User manual

WTI Part No. 14439
Rev. A
SRM
Secure Rack Modems
User's Guide

i
Warnings and Cautions:
Installation Instructions
Secure Racking
If Secure Racked units are installed in a closed or multi-unit rack assembly, they may
require further evaluation by Certification Agencies. The following items must be
considered.
1. The ambient within the rack may be greater than room ambient. Installation
should be such that the amount of air flow required for safe operation is not
compromised. The maximum temperature for the equipment in this environment is
60°C. Consideration should be given to the maximum rated ambient.
2. Installation should be such that a hazardous stability condition is not achieved due
to uneven loading.
Input Supply
1. Check nameplate ratings to assure there is no overloading of supply circuits that
could have an effect on overcurrent protection and supply wiring.
2. When installing -48 VDC rated equipment, it must be installed only per the
following conditions:
A. Connect the equipment to a 48 VDC supply source that is electrically isolated
from the alternating current source. The 48 VDC source is to be connected to
a 48 VDC SELV source.
B. Input wiring to terminal block must be routed and secured in such a manner
that it is protected from damage and stress. Do not route wiring past sharp
edges or moving parts.
C. A readily accessible disconnect device, with a 3 mm minimum contact gap,
shall be incorporated in the fixed wiring.
Grounding
Reliable earthing of this equipment must be maintained. Particular attention should
be given to supply connections when connecting to power strips, rather than direct
connections to the branch circuit.
No Serviceable Parts Inside; Authorized Service Personnel Only
Do not attempt to repair or service this device yourself. Internal components must be
serviced by authorized personnel only.
• ShockHazard-DoNotEnter
• LithiumBattery
CAUTION:Dangerofexplosionifbatteryisincorrectlyreplaced.Replace
onlywithsameorequivalenttyperecommendedbythemanufacturer.
Discardusedbatteriesaccordingtothemanufacturer'sinstructions.

ii
Warnings and Cautions
Disconnect Power
If any of the following events are noted, immediately disconnect the unit from the outlet
and contact qualified service personnel:
1. If the power cord becomes frayed or damaged.
2. If liquid has been spilled into the device or if the device has been exposed to rain
or water.
Disconnect Power Before Servicing
Before attempting to service or remove this unit, please make certain to disconnect the
power supply cable from the power source.
Modem Cables
CAUTION: To reduce the risk of fire, use only No. 26 AWG or larger (e.g., 24 AWG) UL
Listed or CSA Certified Telecommunication Line Cord.

iii
Agency Approvals
FCC Part 15 Regulation
This equipment has been tested and found to comply with the limits for a Class A digital
device, pursuant to part 15 of the FCC Rules. These limits are designed to provide
reasonable protection against harmful interference when the equipment is operated
in a commercial environment. This equipment generates, uses, and can radiate radio
frequency energy and, if not installed and used in accordance with the instruction
manual, may cause harmful interference to radio communications. Operation of this
equipment in a residential area is likely to cause harmful interference in which case the
user will be required to correct the interference at his own expense.
This device complies with part 15 of the FCC Rules. Operation is subject to the following
two conditions: (1) This device may not cause harmful interference, and (2) this device
must accept any interference received, including interference that may cause undesired
operation
WARNING: Changes or modifications to this unit not expressly approved by
the party responsible for compliance could void the user’s authority to operate
the equipment
EMC, Safety, and R&TTE Directive Compliance
The CE mark is affixed to this product to confirm compliance with the following
European Community Directives:
• CouncilDirective2004/108/ECof15December2004ontheapproximationof
thelawsofMemberStatesrelatingtoelectromagneticcompatibility;
 and
• CouncilDirective2006/95/ECof12December2006ontheharmonizationof
thelawsofMemberStatesrelatingtoelectricalequipmentdesignedforuse
withincertainvoltagelimits;
 and
• CouncilDirective1999/5/ECof9March1999onradioequipmentand
telecommunicationsterminalequipmentandthemutualrecognitionoftheir
conformity.
Industry Canada - EMI Information
This Class A digital apparatus complies with Canadian ICES-003.
Cet appareil numérique de la classe A est conforme à la norme NMB-003 du Canada.
This product meets the applicable Industry Canada technical specifications
The Ringer Equivalence Number is an indication of the maximum number of devices
allowed to be connected to a telephone interface. The termination on an interface may
consist of any combination of devices subject only to the requirement that the sum of
the RENs of all the devices does not exceed five.

iv
Table of Contents
1. Introduction.............................................................1-1
2. UnitDescription..........................................................2-1
2.1. FrontPanel...........................................................2-1
2.2. BackPanel...........................................................2-2
2.3. FrontPanelButtonFunctions.............................................2-3
3. GettingStarted..........................................................3-1
3.1. ApplyPowertotheSRM ................................................3-1
3.2. ConnectYourPCtotheSRM.............................................3-1
3.3. CommunicatingwiththeSRM............................................3-2
3.4. BasicModemCommands...............................................3-4
3.5. The WMU Enterprise Management Solution . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-5
4. HardwareInstallation.....................................................4-1
4.1. Connecting the Power Supply Cables. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-1
4.1.1. Connect the SRM to Your Power Supply . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-1
4.1.2. Installing the Power Supply Cable Keeper . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-1
4.1.3. DCPoweredUnits...............................................4-1
4.2. CableConnection......................................................4-2
4.2.1. Connecting the Network Cable. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-2
4.2.2. TheModemPort................................................4-2
4.2.3. TheSetUpPorts ................................................4-2
4.2.4. ThePhoneLinePort .............................................4-2
5. BasicOperation..........................................................5-1
5.1. Communicating with the SRM Unit via Network or Setup Port . . . . . . . . . . . . . . . . . . . 5-1
5.1.1. TheTextInterface ...............................................5-1
5.1.2. TheWebBrowserInterface........................................5-3
5.2. Configuring the SRM for Common Applications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-4
5.2.1. Dial-Up Access to a Device Connected to the SRM Modem Port . . . . . . . . . . 5-4
5.2.1.1. Alternate Configuration for Dial-Up Access to
Connected Device:. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-4
5.2.2. Network Accessible Shared Modem. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-5
5.2.2.1. Alternate Configuration for Network Accessible
ModemApplication ......................................5-5
5.2.3. Dial-Up Access to Outbound SSH/Telnet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-6
5.3. DialingCommands.....................................................5-6
5.4. ManualOperation......................................................5-6
5.5. LoggingOutofCommandMode..........................................5-6
6. ConfigurationOptions....................................................6-1
6.1. ConfigurationMenus ...................................................6-1
6.2. DefiningSystemParameters.............................................6-2
6.2.1. The Real Time Clock and Calendar . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-5
6.2.2. The Serial Port Invalid Access Lockout Feature . . . . . . . . . . . . . . . . . . . . . . . . 6-7
6.2.3. LogConfiguration..............................................6-10
6.2.3.1. The Audit Log and Alarm Log Configuration Options. . . . . . . . . . . 6-10
6.2.3.2. TheTemperatureLog....................................6-10
6.2.3.3. Reading, Downloading and Erasing Logs. . . . . . . . . . . . . . . . . . . . 6-11
6.2.4. CallbackSecurity...............................................6-12
6.2.5. ScriptingOptions...............................................6-13
6.3. UserAccounts .......................................................6-15
6.3.1. CommandAccessLevels........................................6-15
6.3.2. GrantingSerialPortAccess ......................................6-16

Table of Contents
v
6. ConfigurationOptions(continued)
6.4. ManagingUserAccounts...............................................6-17
6.4.1. ViewingUserAccounts..........................................6-17
6.4.2. AddingUserAccounts ..........................................6-17
6.4.3. ModifyingUserAccounts ........................................6-19
6.4.4. DeletingUserAccounts..........................................6-19
6.5. Modem and Serial Port Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-20
6.5.1. ModemModes ................................................6-20
6.5.2. The Serial Port Configuration Menus . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-20
6.5.2.1. Serial SetUp Port Parameters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-21
6.5.2.2. Serial Modem Port Parameters . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-21
6.5.2.3. Internal Modem Parameters. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-22
6.6. NetworkConfiguration.................................................6-26
6.6.1. NetworkPortParameters ........................................6-27
6.6.2. NetworkParameters............................................6-29
6.6.3. IPSecurity....................................................6-34
6.6.3.1. Adding IP Addresses to the Allow and Deny Lists . . . . . . . . . . . . . 6-35
6.6.3.2. Linux Operators and Wild Cards . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-36
6.6.3.3. IPSecurityExamples....................................6-36
6.6.4. StaticRoute...................................................6-37
6.6.5. DomainNameServer ...........................................6-37
6.6.6. SNMPAccessParameters .......................................6-38
6.6.7. SNMPTrapParameters..........................................6-40
6.6.8. LDAPParameters ..............................................6-41
6.6.8.1. AddingLDAPGroups....................................6-43
6.6.8.2 ViewingLDAPGroups...................................6-44
6.6.8.3. Modifying LDAP Groups . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-44
6.6.8.4. Deleting LDAP Groups. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-44
6.6.9. TACACSParameters............................................6-45
6.6.10. RADIUSParameters ............................................6-47
6.6.10.1. Dictionary Support for RADIUS . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-49
6.6.11. Email Messaging Parameters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-50
6.7. SaveUserSelectedParameters .........................................6-51
6.7.1. RestoreConfiguration...........................................6-51
7. AlarmConfiguration......................................................7-1
7.1. TheOverTemperatureAlarms............................................7-2
7.2. ThePing-No-AnswerAlarm ..............................................7-4
7.2.1. Ping-No-Answer Notification . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7-4
7.2.1.1. Defining Ping No Answer IP Addresses . . . . . . . . . . . . . . . . . . . . . . 7-4
7.2.1.2. Configuring the Ping No Answer Alarm. . . . . . . . . . . . . . . . . . . . . . . 7-6
7.3. The Serial Port Invalid Access Lockout Alarm . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7-8
7.4. ThePowerCycleAlarm ................................................7-10
7.5. TheNoDialtoneAlarm.................................................7-11
8. TheStatusScreens.......................................................8-1
8.1. ProductStatus ........................................................8-1
8.2. TheNetworkStatusScreen..............................................8-1
8.3. ThePortStatusScreen .................................................8-2
8.4. ThePortDiagnosticsScreen.............................................8-2
8.5. TheAlarmStatusScreen................................................8-2
8.6. ThePortParametersScreens ............................................8-3
8.7. TheEventLogs........................................................8-4
8.7.1. TheAuditLog ..................................................8-4
8.7.2. TheAlarmLog..................................................8-4
8.7.3. TheTemperatureLog ............................................8-4

Table of Contents
vi
9. Telnet&SSHFunctions...................................................9-1
9.1. NetworkPortNumbers..................................................9-1
9.2. SSHEncryption .......................................................9-1
9.3. Creating an Outbound Telnet Connection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9-2
9.4. Creating an Outbound SSH Connection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9-3
10.SyslogMessages.......................................................10-1
10.1. Configuration........................................................10-1
11.OperationviaSNMP.....................................................11-1
11.1. SRMSNMPAgent ....................................................11-1
11.2. SNMPv3 Authentication and Encryption . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11-1
11.3. ConfigurationviaSNMP................................................11-2
11.3.1. ViewingUsers.................................................11-3
11.3.2. AddingUsers..................................................11-3
11.3.3. ModifyingUsers................................................11-3
11.3.4. DeletingUsers.................................................11-3
11.4. ConfiguringSerialPorts................................................11-3
11.5. ViewingUnitStatusviaSNMP...........................................11-4
11.5.1. System Status - Ethernet Port Mac Addresses. . . . . . . . . . . . . . . . . . . . . . . . 11-4
11.5.2. UnitTemperatureStatus.........................................11-4
11.5.3. AlarmStatus ..................................................11-4
11.6. SendingTrapsviaSNMP...............................................11-5
12SettingUpSSL/TLSEncryption............................................12-1
12.1. Creating a Self Signed Certificate . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12-2
12.2. CreatingaSignedCertificate............................................12-3
12.3. Downloading the Server Private Key . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12-4
12.4. TLSMode...........................................................12-5
13.SavingandRestoringConfigurationParameters. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13-1
13.1. SendingParameterstoaFile............................................13-1
13.1.1. Downloading & Saving Parameters via Text Interface . . . . . . . . . . . . . . . . . . 13-1
13.1.2. Downloading & Saving Parameters via Web Browser Interface. . . . . . . . . . . 13-2
13.2. Restoring Downloaded Parameters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13-2
13.3. Restoring Recently Saved Parameters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13-3
14.UpgradingSRMFirmware.................................................14-1
14.1. WMU Enterprise Management Software (Recommended) . . . . . . . . . . . . . . . . . . . . . 14-1
14.2. The Upgrade Firmware Function (Alternate Method) . . . . . . . . . . . . . . . . . . . . . . . . . 14-1
15.CommandReferenceGuide...............................................15-1
15.1. CommandConventions................................................15-1
15.2. CommandSummary ..................................................15-2
15.3. CommandSet .......................................................15-3
15.3.1. DisplayCommands.............................................15-3
15.3.2. ControlCommands.............................................15-6
15.3.3. ConfigurationCommands........................................15-9
Appendices:
A. Specifications.........................................................Apx-1
B. InterfaceDescriptions...................................................Apx-2
C. CustomerService......................................................Apx-4

Table of Contents
vii
List of Figures
2.1. FrontPanel .............................................................2-1
2.2. BackPanel..............................................................2-2
4.1. Terminal Block Assembly (DC Units Only) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-1
12.1. Web Access Parameters (Text Interface Only). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12-1
B.1. RJ45SetUpPort(DTE)..................................................Apx-2
B.2. DB25ModemPort(DCE)................................................Apx-2
B.3. RJ45ModemPort(DCE).................................................Apx-2
B.4. RJ11PhoneLinePort...................................................Apx-3

1-1
1. Introduction
The SRM Secure Rack Modem is designed for applications that require secure, dial-up
access to remote, rack mounted network elements. In addition to password security
and a multi-level user directory, the SRM also supports SSHv2 encryption, IP address
filtering and HTTPS/SSL Secure web, plus popular authentication protocols such as
LDAP, Kerberos, TACACS+ and RADIUS.
In order to simplify the process of configuring and managing modem functions,
administrators can access the SRM via Ethernet Port, RJ45 Serial port or USB Mini
Port. A convenient logging function tracks user activity, alarms, rack temperatures and
other factors to provide administrators with an audit trail of events and environmental
conditions.
Security and Co-Location Features:
Secure Shell (SSHv2) encryption and address-specific IP security masks help to prevent
unauthorized access to command and configuration functions.
The SRM provides four different levels of security for user accounts: Administrator,
SuperUser, User and ViewOnly. The Administrator level provides complete access to
all serial port and switched plug functions, status displays and configuration menus.
The SuperUser level allows control of serial ports and plugs, but does not allow access
to configuration functions. The User level allows access to only a select group of
Administrator-defined serial ports and plugs. The ViewOnly level allows you to check
unit status, but does not allow control of serial ports or switched outlets or access to
configuration menus.
WTI Management Utility
SRM units include the WTI Enterprise Management Utility (WMU,) which allows you to
manage multiple WTI units via a single menu. For more information on the Enterprise
Management Utility, please refer to the WMU User’s Guide, which can be downloaded
from the WTI web site at: http://www.wti.com/t-product-manuals.aspx.

1-2
Introduction
Typographic Conventions
^(e.g. ^X) Indicates a control character. For example, the text
"^X" (Control X) indicates the [Ctrl] key and the [X]
key must be pressed simultaneously.
COURIER FONT Indicates characters typed on the keyboard.
For example, /RB or /ON 2.
[BoldFont] Text set in bold face and enclosed in square brackets,
indicates a specific key. For example, [Enter] or [Esc].
< > Indicates required keyboard entries:
For Example: /P <n>.
[ ] Indicates optional keyboard entries.
For Example: /P [n].