manualshive.com logo in svg

Avocent Cyclades ACS 5000 SERIES, Command Reference Manual

Share
Download
Avocent Cyclades ACS 5000 SERIES Command Reference Manual Download Page 1

590-814-501B

CYCLADES

® 

ACS 5000

Command Reference Guide

For Technical Support:
www.avocent.com/support

Summary of Contents for Cyclades ACS 5000 SERIES

Page 1: ...CYCLADES ACS 5000 Command Reference Guide ...

Page 2: ...e problem at his or her own expense Notice about FCC Compliance for All Cyclades ACS 5000 Advanced Console Server Models To comply with FCC standards the Cyclades ACS 5000 advanced console server requires the use of a shielded CAT 5 cable for all interface ports Notice that this cable is not supplied with either of the products and must be provided by the customer Canadian DOC Notice The Cyclades ...

Page 3: ...he Avocent logo The Power of Being There DSView and Cyclades are registered trademarks of Avocent Corporation or its affiliates in the U S and other countries All other marks are the property of their respective owners 2010 Avocent Corporation All rights reserved 590 814 501B ...

Page 4: ...ulated dangerous voltage within the product s enclosure that may be of sufficient magnitude to constitute a risk of electric shock to persons Power On This symbol indicates the principal on off switch is in the on position Power Off This symbol indicates the principal on off switch is in the off position Protective Grounding Terminal This symbol indicates a terminal which must be connected to eart...

Page 5: ...ork Configuration 9 Network Settings 9 IPv4 and IPv6 addressing 10 IPv4 Addressing 11 IPv6 addressing 11 IPv4 and IPv6 common parameters 13 Host settings 14 Security Profiles 15 Enable serial ports 16 VPN Configuration 17 SNMP 18 Hosts 20 TCP keepalive 20 Firewall Configuration IP Filtering 20 Structure of the iptables 21 Match extensions 25 Multiport extension 27 Target extensions 27 Static Route...

Page 6: ...n serial ports 43 One Time Password OTP Authentication 47 OTP authentication configuration tasks 47 Shadow Passwords 50 Digital Certificates 50 Certificate for HTTP security 50 User configured digital certificate 51 X 509 certificate on SSH 52 Chapter 4 Accessing Connected Devices 55 Connection Profiles and Protocols 55 Serial ports general parameters 56 Accessing serial ports using ts_menu 58 Con...

Page 7: ...93 Restoreconf utility 94 Crond 95 Clustering Using Ethernet Interface 97 Chapter 6 Power Management 99 Power Management Protocol 99 IPDU Configuration and Management 100 Power management utility 100 IPDU identification 100 pmMenu 102 pmCommand 106 IPDU password 108 IPDU Firmware Upgrade 108 SNMP Proxy 109 Appendices 111 Appendix A Additional Features and Applications 111 Appendix B Upgrades and T...

Page 8: ...vi Cyclades ACS 5000 Advanced Console Server Command Reference Guide ...

Page 9: ...commands require parameters that are user defined For example network configuration tasks include network hostsetting and hostname commands nested in the following format cli config network hostsettings hostname parameter Commands used to configure or change a set of parameters cli config security adduser username john password john12 admin yes shell bin sh Commands may also specify a function or ...

Page 10: ... that provides access to the console server shell prompt NOTE An administrator may enforce the Linux shell to execute the CLI utility when the user logs into the console server bin CLI A user with root access may invoke the Linux shell from the CLI interface An admin or a regular user who is configured with CLI as the default shell may not access the Linux shell Admin A Linux admin user has access...

Page 11: ...n a shell script For example bin CLI may be invoked at the top of a shell script if the script contains only CLI commands Any type of shell may be used to run CLI commands along with other commands For example Create a script that calls bin CLI to configure a hostname in batch mode bin CLI config network hostsettings hostname FremontACS config savetoflash wq Run a CLI command from the same script ...

Page 12: ...d characters then pressing the Tab key again displays them all For example cli i Tab info cli a Tab Tab administration applications Pressing the Tab key after the first level command displays the commands one level down in the hierarchy For example cli config Tab Interactive CLI is invoked and commands and parameters are entered in the Linux shell CLI is active until the quit command is issued For...

Page 13: ...zipped backup copy of the files in a backup directory for possible later retrieval config discardchanges Restores the backed up configuration files overwriting any configuration changes made since the last time the savetoflash option was executed Table 1 3 Cursor Movement Keys Keyboard Keys Description Ctrl a Move to the start of the current line Ctrl e Move to the end of the line Ctrl b Move back...

Page 14: ... k Clear the text from the cursor to the end of the line Ctrl u Clear backward from the cursor to the beginning of the current line Ctrl w Delete the word behind point Esc d Clear from the cursor to the end of the current word or if between words to the end of the next word Esc Tab Displays the current parameter of the command entered You may edit the value For example To display the current value...

Page 15: ...he applicable information or parameter is displayed Table 1 7 CLI Command Arguments Argument Description q Suppress the output of error messages from CLI t time Timeout in minutes default is 10 minutes T Disable the idle time out Same as t 0 s batch mode only Save changes to flash This is the same as savetoflash command r batch mode only Activate changes This is the same as runconfig command f fil...

Page 16: ...8 Cyclades ACS 5000 Advanced Console Server Command Reference Guide ...

Page 17: ...nal emulation application log in to the console port as root The default password is avocent NOTE It is strongly recommended to change the default password to a new password before configuring the console server for secure access 2 To change a password run the following command root CAS root passwd New password 3 Launch the configuration wizard by entering the wiz command root CAS root wiz 4 The s...

Page 18: ... the CLI through a network connection instead of the through a console port you risk losing network access and control of the console server when you change the IP mode or the IP address Be sure to keep track of the new IP address before activating the new configuration so you can reconnect By default IPv4 and IPv6 network addressing will be enabled The console server allows the following network ...

Page 19: ... prompt enter the following cli config network hostsettings Follow the parameters in Table 2 1 for the rest of the configuration IPv6 addressing Services not supported in IPv6 IPv6 does not support the following services NIS authentication NFS data logging Table 2 1 IPv4 Specific Configurations IPv4 Specific Level 1 IPv4 Specific Level 2 Description primipaddress nnn nnn nnn nnn The primary IP add...

Page 20: ... set IPv6 specific configurations From the cli prompt enter the following cli config network hostsetings ipv6 Follow the parameters in Table 2 2 for the rest of the configuration Table 2 2 IPv6 Specific Configurations IPv6 Specific Level 1 IPv6 Specific Level 2 Description dhcp6 Selects the options for the information that will be retrieved from the DHCPv6 server none No further data will be retri...

Page 21: ... your system resides enter the following cli config network hostsettings domain domain_name To configure the gateway enter the following cli config network stroutes add default gateway gateway_IP_address ipv6method Selects the way IPV6 addresses will be configured or obtained stateless_only IPv6 local address will be dynamically obtained from an IPv6 Router in the local network this method is to b...

Page 22: ...ettings parameter value 2 Activate and save your configuration Table 2 3 Host Settings Parameters and Values Parameter Level1 Parameter Level2 Value Description banner console banner Banner for the user shell bonding miimon updelay number number Redundancy for the ethernet interface The interval in which the active interface is checked to see if it is still communicating in milliseconds The time t...

Page 23: ... or IPv6 primipaddress nnn nnn nnn nnn Primary IP address IPv4 specific secipaddress nnn nnn nnn nnn Secondary IP address IPv4 specific primsubnetmask nnn nnn nnn nnn Primary subnet mask IPv4 specific secsubnetmask nnn nnn nnn nnn Secondary subnet mask IPv4 specific Table 2 3 Host Settings Parameters and Values Continued Parameter Level1 Parameter Level2 Value Description Table 2 4 Security Profil...

Page 24: ...rial ports cli config physicalports range list 1 32 enable yes Table 2 5 Custom Security Profile Parameters Parameter Level1 Parameter Level2 Parameter Level3 Value ftp yes no icmp yes no ipsec yes no ports auth2 bidirect raw2sport ssh2sport telnet2sport yes no yes no yes no yes no yes no rpc yes no snmp yes no ssh root_access ssh_x509 sshd_port sshv1 sshv2 CA_file hostkey authorizedkeys yes no pa...

Page 25: ...n authmethod rsapubkey sharesecret Authentication method used Either RSA Public Key or Shared Secret authprotocol ah esp Authentication protocol used Either Encapsulating Security Payload ESP or Authentication Header AH bootaction add ignore start The boot action configured for the host leftid rightid hostname xyz com This is the hostname that a local system and a remote system use for IPSec negot...

Page 26: ...work snmp v1 v2 parameter value leftsubnet rightsubnet n n n n n The netmask of the subnetwork where the host resides NOTE Use CIDR notation The IP number followed by a slash and the number of one bits in the binary notation of the netmask For example 192 168 0 0 24 indicates an IP address where the first 24 bits are used as the network address This is the same as 255 255 255 0 secret string Pre s...

Page 27: ... configure SNMP v3 example 1 The following command configures SNMP v3 with the following parameters username john password john1234 OID 1 permission ro read only NOTE The SNMP v3 password may be a maximum of 30 characters Table 2 8 SNMP v3 Parameters Parameter Value Description syscontact string The email address of the console server administrator syslocation string The physical location of the c...

Page 28: ...uration IP Filtering IP filtering consists of blocking the passage of IP packets based on rules defined in the characteristics of the packets such as the contents of the IP header the input output interface or the protocol This feature is used mainly in firewall applications which filter the packets that could crack the network system or generate unnecessary traffic Network Address Translation NAT...

Page 29: ... routed through the box OUTPUT For locally generated packets For the nat table IPv4 only PREROUTING For altering packets as soon as they come in OUTPUT For altering locally generated packets as soon as they come in POSTROUTING For altering packets as they are about to go out Rule Each chain has a sequence of rules These rules contain How the packet should appear in order to match the rule Some inf...

Page 30: ... Command Only one command may be specified on the command line unless otherwise specified in Table 2 9 Table 2 9 iptables Commands Options Command Description A append Append one or more rules to the end of the selected chain When the source and or destination names resolve to more than one address a rule is added for each possible address combination D delete Delete one or more rules from the sel...

Page 31: ...non user defined chains may have policies and neither built in nor user defined chains may be policy targets E rename chain Rename the user specified chain to the user supplied name This is cosmetic and has no effect on the structure of the table h help Help Gives a very brief description of the command syntax Table 2 10 iptables Rules Specifications Parameter Description p protocol protocol The p...

Page 32: ...face name ends in a plus then any interface which begins with this name matches If this option is omitted the string plus is assumed which matches with any interface name o out interface name Optional name of an interface via which a packet is going to be sent for packets entering the FORWARD and OUTPUT chains When the argument is used before the interface name the sense is inverted If the interfa...

Page 33: ...line numbers to the beginning of each rule corresponding to that rule s position in the chain Table 2 10 iptables Rules Specifications Continued Parameter Description Table 2 11 TCP Extensions TCP extension Description source port port port Source port or port range specification This may either be a service name or a port number Inclusive range may also be specified using the format port port If ...

Page 34: ...outgoing TCP connections are unaffected It is equivalent to tcp flags SYN RST ACK SYN If the flag precedes the syn the sense of the option is inverted tcp option number Match if TCP option is set Table 2 12 UDP Extensions UDP extension Description source port port port Source port or port range specification See the description of the source port option of the TCP extension for details destination...

Page 35: ... target is only valid in the INPUT FORWARD and OUTPUT chains and Table 2 14 Multiport Extensions Multiport extension Description source port port port Match if the source port is one of the given ports destination port port port Match if the destination port is one of the given ports port port port Match if the both the source and destination port are equal to each other and to one of the given po...

Page 36: ... or icmp host prohibited which return the appropriate ICMP error message port unreachable is the default The option echo reply is also allowed it may only be used for rules which specify an ICMP ping packet and generates a ping reply Finally the option tcp reset may be used on rules which only match the TCP protocol This causes a TCP RST packet to be sent back This is mainly useful for blocking id...

Page 37: ... defined chains which are only called from those chains It alters the destination IP address to send the packet to the machine itself locally generated packets are mapped to the 127 0 0 1 address It supports one option Table 2 18 DNAT Target DNAT target Description to destination ipaddr ipaddr port port This may specify a single new destination IP address an inclusive range of IP addresses and opt...

Page 38: ...nformation Static routes are a quick and effective way to route data from one subnet to another The static routing table may be viewed using either of the following commands root CAS root route root CAS root netstat rn Routes may be added at the Linux shell prompt using the following command route add del net host target netmask nt_msk gw gt_way interf Table 2 21 Routing Table Parameters Parameter...

Page 39: ... is to be used Table 2 22 Static Routes Parameters and Values Parameter Value Description default none Used when there is no matching routing table gateway IPv4 nnn nnn nnn nnn or IPv6 IPv6_address up to eight sets of four hexadecimal characters separated by colons xxxx xxxx xxxx xxxx Gateway IP address host IPv4 nnn nnn nnn nnn or IPv6 IPv6_address up to eight sets of four hexadecimal characters ...

Page 40: ...32 Cyclades ACS 5000 Advanced Console Server Command Reference Guide ...

Page 41: ...administrator with the user management Authentication may be performed locally or with a remote server such as RADIUS TACACS LDAP NIS or Kerberos Should the negotiation process with the authentication server fail an authentication security fallback mechanism is also employed In such situations the console server follows an alternate defined rule when the authentication server is down or does not a...

Page 42: ...Local authentication is performed if Kerberos fails or if the Kerberos server is down LDAP Ldap Ldap Local LdapDownLocal Authentication is performed using an LDAP server Local authentication is performed if LDAP fails or if the LDAP server is down Local Local Local Nis Local Radius Local TacacsPlus Authentication performed locally NIS Radius or TACACS authentication is used if the local authentica...

Page 43: ...ted Table 3 2 Authentication Servers Parameters Authentication Server Parameter Value Kerberos krbdomain krbserver domain name n n n n LDAP ldapbasedomain ldapserver ldapbasedomain n n n n NIS nisdomain nisserver domain name n n n n Radius radiusacctsvr1 radiusacctsvr2 radiusauthsvr1 radiusauthsvr2 radiusretries radiussecret radiussvctype radiustimeout n n n n n n n n n n n n n n n n number radius...

Page 44: ...r no admin privileges named john with the password john1234 security adduser username john admin no password john1234 Table 3 3 User Access Parameters Parameter Level1 Parameter Level2 Value Description addgroup groupname usernames group name list of user names separated by commas Add group and user members to manage access to connected servers delgroup groupname groupname Delete group adduser adm...

Page 45: ...the NIS domain name set domainname NIS domain name Show or set the system s NIS YP domain name for example domainname avocent mycompany nis 2 Edit the etc yp conf file Configure the NIS server For example if the NIS server has the IP address 192 168 160 110 add the following line to the file Table 3 4 NIS Client Requirements File Command Description etc yp conf This file contains the configuration...

Page 46: ...commenting the line that performs a ypbind upon startup nsswitch conf To use NIS to authenticate users change the lines in etc nsswitch conf that reference passwd shadow and group The etc nsswitch conf file has the following format database service actions service Table 3 5 nsswitch conf Parameters Parameter Description database available aliases ethers group hosts netgroup network passwd protocol...

Page 47: ...e preventing eavesdropping or replay attacks It provides detection of modification and prevention of unauthorized reading Kerberos server authentication with tickets support The console server has support to interact on a kerberized network On a kerberized network the Kerberos database contains principals and keys for users keys are derived from passwords The Kerberos database also contains keys f...

Page 48: ...pport is properly configured with the following parameters Principal john Host acs48 cyclades com To configure the console server for SSH 1 Configure and start an NTP server Configuration must be synchronized with an NTP server To configure an NTP server see To configure an NTP server on page 85 2 Configure authentication type and protocol in the etc portslave pslave conf file with the following p...

Page 49: ... SERVICES klogin stream tcp nowait root usr sbin tcpd usr local sbin klogind ki telnet stream tcp nowait root usr sbin tcpd usr local sbin telnetd 2 Restart the inetd service daemon sh restart NET 3 Save the configuration saveconf To test the configuration 1 The client must have a kerberized SSH In addition configure the following parameters in the etc ssh ssh_config file GSSAPIAuthentication yes ...

Page 50: ...meters all authtype kerberos all protocol socket_ssh or socket_server or socket_server_ssh To use the Telnet protocol to access the serial ports set the all protocol parameter to socket_server To use both Telnet and SSH to access the unit set the all protocol parameter to socket_server_ssh 3 Edit the etc krb5 conf file vi etc krb5 conf All changes required in this file are related to the network d...

Page 51: ...urity checking After each user is successfully authenticated through the standard login procedure the console server uses TACACS to authorize user access to specific serial ports By default the raccess parameter is disabled When enabled users are denied access unless they have the proper authorization which must be set on the TACACS server itself To configure TACACS authorization on serial ports 1...

Page 52: ...bution 2 Edit the parameters as per the following example Refer to Table 3 7 for descriptions user tomj name Tom Jones service raccess port1 LAB2 ttyS2 port2 192 168 0 1 ttyS1 port3 CAS ttyS1 port4 172 32 20 10 ttyS6 port5 LAB1 ttyS7 port6 Knuth ttyS16 Table 3 7 Parameters for Specifying User Authorization on a TACACS Server Parameter Description user username Defines the username as specified on ...

Page 53: ...s the location of the TACACS accounting server which may be used to track how long users are connected after being authorized by the authentication server Its use is optional If this parameter is not used accounting is not performed If the same server is used for authentication and accounting both parameters must be filled with the same address A second TACACS accounting server may be configured w...

Page 54: ...gured with the parameter radiusauthsvr2 radiusacctsvr1 n n n n This address indicates the location of the Radius accounting server which may be used to track how long users are connected after being authorized by the authentication server Its use is optional If this parameter is not used accounting cannot be performed If the same server is used for authentication and accounting both parameters mus...

Page 55: ...assword for OTP authentication type OPIE one time passwords in everything software on the Cyclades ACS 5000 console server supports OTP authentication to access the serial ports OPIE software on the console server supports the OTP authentication method and the OTP Local fallback option for serial ports The OTP authentication method is supported for dial ins through external modem See http www free...

Page 56: ...bled 5 The OTP database is mounted once you enable OTP Proceed to the following section to register users and generate OTP passwords To register users for OTP The following procedures should be performed for each user who requires OTP authentication The following example demonstrates how to add and register a new user to the console server 1 Log in locally through the console server port as root o...

Page 57: ...example 499 KV6178 is the OPIE key and the password is COMB YANK BARD SLOT AS USER opiepasswd c peter Adding peter Only use this method from the console NEVER from remote If you are using telnet xterm or a dial in type C now or exit with no password Then run opiepasswd without the c parameter Using MD5 to compute responses Enter new secret pass phrase peters passphrase Again new secret pass phrase...

Page 58: ...CK CUT NEWS AMY 498 ALGA DEAD PUN FLUB LYRA LEN 2 Give the OTP username secret pass phrase and the OTP passwords generated in this procedure to the user Shadow Passwords The console server has support for shadow passwords which enhances the security of the system authentication files Shadow Passwords are enabled by default Digital Certificates Certificate for HTTP security The following procedure ...

Page 59: ...e the configuration in Flash saveconf 5 Reboot the console server for the certificate to take effect User configured digital certificate The console server generates its own self signed SSL certificate for HTTPs using OpenSSL It is highly recommended that you use the openssl tool to generate a self signed certificate and replace the console server s generated certificate Table 3 11 Required Inform...

Page 60: ... on SSH The OpenSSH software included with the console server has support for X 509 certificates The administrator must activate and configure SSH to use X 509 vi etc req_key req default_bits 1024 distinguished_name cyclades prompt no x509_extensions x509v3 cyclades C US ST CA L Fremont O Cyclades Corporation OU R D CN www cyclades com emailAddress support cyclades com x509v3 subjectKeyIdentifier ...

Page 61: ...ficate for SSH may also be configured by executing the following script at the command prompt ssh_act_x509 To connect to the console server and serial ports using an SSH X 509 certificate 1 Configure an X 509 certificate for SSH 2 Configure the client you need to access with an X 509 certificate 3 Copy the certificate files to the console server To verify that the file was copied run the following...

Page 62: ...54 Cyclades ACS 5000 Advanced Console Server Command Reference Guide ...

Page 63: ... serial port is connected to the console port of a server Terminal Server TS Telnet SSHv1 SSHv2 Local Terminal Raw Socket Configure when a terminal is connected to the console port of a server Bidirectional Telnet Telnet CAS Telnet TS Supports both CAS profile Telnet connection and TS profile menu shell Both connection protocols are supported on one port however connections can not be opened simul...

Page 64: ... To configure number of bits per character dcdstate disregard regard To enable or disable Data Carrier Detect DCD flow hard none soft To set the flow control parity even none odd To configure parity pmsessions none ssh ssh_telent telnet To select a connection method to PM IPDU through the serial port in order to execute PM commands protocol bidirectionaltelnet consoleraw consolessh consoletelnet c...

Page 65: ...ch you are connecting idletimeout number To configure idle time out which is the maximum time in seconds that a session may be idle before the user is logged off portip n n n n To configure an IP alias to the serial port sttyoptions stty options To set terminal options tcpkeepalive number To configure poll interval in milliseconds ms Specifies the time interval between the periodic polling to chec...

Page 66: ...out specifying arguments Calling ts_menu with command line arguments Using CLI to call ts_menu Calling ts_menu without specific parameters To access the serial port configured for Telnet or SSH enter ts_menu at the shell prompt The server s aliases or serial ports are displayed as options to start a connection Table 4 4 Telnet Session Configuration Parameters Parameter Description hostname Worksta...

Page 67: ...ad only mode s Invokes ts_menu in a way that all ports including slave are presented in a single list sorted in alphabetical order auth For backward compatibility This option makes the new ts_menu implementation behave as the old one so that authentication is performed again to access each port console port If issued produces a direct connection to that port If you have no access rights to the por...

Page 68: ...cify a different character connect to your unit and use the e option For example to set Ctrl as the escape character type telnet e 192 168 160 10 ssh e user1 192 168 160 10 To exit from an entire Telnet session type the escape character For a SSH session type the escape character plus dot NOTE To close an SSH session the escape character followed by a dot must be entered at the beginning of a line...

Page 69: ... or a local database Figure 4 1 displays an example of a CAS environment and descriptions follow in Table 4 9 This configuration example has local authentication and serially connected workstations Table 4 8 ts_menu Configuration Parameters Parameter Value Description consolename consolename Name of the serial port to which you need to connect list To display a list of the available serial ports r...

Page 70: ...l authentication data buffering and remote access Descriptions follow in Table 4 10 Table 4 9 Example of CAS Configuration with Local Authentication Descriptions Item Description Item Description 1 Servers on Serial Ports 6 Ethernet Hub or Switch 2 Cyclades ACS 5000 Console Server 7 Ethernet Router 3 Power Cable 8 Local User 4 Ethernet CAT 5 Cable 9 User 5 Local Network Server 1 2 3 4 5 6 7 8 9 In...

Page 71: ... database adduser username Table 4 10 Example of CAS Configuration with Local and Remote Authentication Descriptions Item Description Item Description 1 Servers on Serial Ports 6 Ethernet Hub or Switch 2 Cyclades ACS 5000 Console Server 7 Remote Data Server 3 Power Cable 8 Ethernet Router 4 Ethernet CAT 5 Cable 9 Local User 5 TACACS Server 10 User 1 2 3 4 5 6 7 8 9 10 Internet ...

Page 72: ...m the console try to Telnet to the server connected to the port 1 of the console server using the following command telnet ip address TCP port 7 A Telnet session should open on the server connected to Port 1 8 To activate and save the changes run the following commands runconf saveconf Terminal Server TS profile The console server provides features for out of band management through the configurat...

Page 73: ...password on the server 3 From the console ping the server to make sure it is reachable Table 4 11 Example of TS Configuration Profile Descriptions Item Description Item Description 1 Terminals on Serial Port dumb terminal or workstation running terminal application 5 Ethernet Hub or Switch 2 Cyclades ACS 5000 Console Server 6 Ethernet Router 3 Power Cable 7 Remote Servers 4 Ethernet CAT 5 Cable 1 ...

Page 74: ...or PPP protocol 2 Create a new user on the authentication server 3 From the console ping the authentication server to make sure it is reachable 4 Confirm modem settings The console server is set for communication at 57600 bps 8N1 The modems should be programmed to operate at the same speed and the same flow control on the DTE interface 5 Make sure the server is configured to route console data to ...

Page 75: ... Table 4 12 Example of Dial in Access Profile Descriptions Item Description Item Description 1 Dial up Management Station 5 Ethernet CAT 5 Cable 2 Modem 6 Ethernet Hub or Switch 3 Cyclades ACS 5000 Console Server 7 Ethernet Router 4 Power Cable 8 Remote Servers 1 2 3 4 5 6 7 8 Internet ...

Page 76: ...68 Cyclades ACS 5000 Advanced Console Server Command Reference Guide ...

Page 77: ...d averages for the past one five and fifteen minutes The following entries are displayed for each user excluding the CAS users Login name The tty name The remote host Login time Idle time JCPU time It is the time used by all processes attached to the tty PCPU time It is the time used by the current process named in the what field The command line of the user s current process The header of w_cas d...

Page 78: ... restart service_id where service_id may be any choice of EVTGEN NIS RPC DB NET LOG SSH NTP SNMP IPSEC PMD LP WEB LOGPIPE ADSAP2 The daemon sh may be executed in two ways 1 Without parameters in the command line It checks the configuration files of the service and restart or stop it if needed 2 It performs the requested action stop restart in the list of services given in the command line regardle...

Page 79: ...q n The number of seconds between two MARKS lines log_fifo_size n The number of lines fitting to the output queue chain_hostname yes no or long_hostname yes no Enable disable the chained hostname format use_time_recvd yes no Use the time a message is received instead of the one specified in the message use_dns yes no Enable or disable DNS usage syslog ng blocks on DNS queries so enabling DNS may l...

Page 80: ...roup name perm mask are equal global options keep alive yes no Selects whether to keep connections opened when syslog ng is restarted May be used only with unix_stream Default yes max connections n Limits the number of simultaneously opened connections May be used only with unix_stream Default 10 tcp options and udp options These drivers let you receive messages from the network and as the name of...

Page 81: ...n Builds a boolean expression using internal functions The following are examples of how to define filters To filter by facility filter f_facilty facility facility name Examples filter f_daemon facility daemon filter f_kern facility kern filter f_debug not facility auth authpriv news mail Table 5 4 Filters Parameters Syslog ng Configuration Option Description facility facility code Selects message...

Page 82: ... match your string Example to filter alarm message with the string kernel panic filter f_kpanic facility local 0 conf DB_facility and level info and match ALARM and match kernel panic To eliminate SSHD debug messages filter f_sshd_debug not program sshd or not level debug To filter the syslog_buffering filter f_syslog_buf facility local 0 conf DB_facility and level notice To define actions destina...

Page 83: ...e driver source driver hostname MSG or MESSAGE The message received FULLDATE The date of the message was sent Available options log_fifo_size number The number of entries in the output file sync_freq number The file is synced when this number of messages has been written to it owner name group name perm mask Equals global options template string Syslog ng writes the string in the file You may use ...

Page 84: ...cc address b name name Reply to address r name name From address f name Subject s text Message m text message SMTP server h IP address or name Port used default 25 p port Table 5 7 Message Mount Parameters Parameter Description FULLDATE The complete date when the message was sent FACILITY The facility of the message PRIORITY or LEVEL The priority of the message PROGRAM The message was sent by this...

Page 85: ...ms server p port sms default 6701 server IP address or name The following example sends a page to phone number 123 Pager server at 10 0 0 1 with the message carrying the current date the hostname of the console server and the message received from the source Sending an snmptrap destination ident pipe dev cyc_alarm template snmptrap pars where ident uniquely identify the destination The parameters ...

Page 86: ...ilters and actions use the following statement An action is an incoming message from one of the listed sources A match for each of the filters is sent to the listed destination log source S1 source S2 filter F1 filter F2 destination D1 destination D2 where Sx Identifies the defined sources Fx Identifies the defined filters Dx Identifies the defined actions or destinations Examples of connecting so...

Page 87: ...essages to the remote syslogd 10 0 0 1 1 In etc portslave pslave conf file configure the syslog buffering parameters 2 Add the following lines to etc syslog ng syslog ng conf file To configure Syslog ng with multiple remote syslog servers 1 Configure syslog facility number to receive messages The remote syslog server filters receive messages according to this parameter cli config network syslog fa...

Page 88: ...og Messages The console server may generate an alert when a serial console cable is removed from the console server or when the serially attached server is turned off Also when a modem is connected this feature may detect if the modem is still turned on and active The DCD signal is monitored and a syslog message is generated when the state of the signal changes The syslog message may be handled by...

Page 89: ...n cli config administration notifications parameter value Table 5 8 System Notifications Parameters Parameter Level1 Parameter Level2 Value Description addemail add Email from to subject body smtpserver smtpport cancel trigger string Sends a message to the configured email address if the defined string appears addpager add Pager number smsport smsserver smsusername text cancel trigger string strin...

Page 90: ...figure the email notification parameters and SMTP server and port id add Email body Testing configuration add Email from ACSConsoleServer add Email to someone yourdomain com add Email smtpserver 200 200 200 2 addsnmptrap add Snmptrap body community oid server cancel trapnum trigger string string string string string 0 6 authfailure coldstar egpneighborloss enterprisespecific linkdown linkup warmst...

Page 91: ...ht Saving To adjust the date and time use the date command Timezone is configured using the CLI utility or web manager see the ACS 5000 Installation Administation User Guide for using the web manager to set time date and timezone information NOTE Setting the system timezone creates a new file called etc localtime which erases etc TIMEZONE Daylight Saving Time DST When the DST parameter is set to o...

Page 92: ... London ChicagoOffice or Sydney or may be a numerical value The abbreviated name for the zonelabel For example PST for Pacific Standard Time GMT Offset This is the number of hours either ahead or behind Greenwich Mean Time GMT in hours For example PST the offset is 8 00 hours Daylight Saving Time DST Set to on for custom daylight saving time settings to be active The abbreviated name used to descr...

Page 93: ...onfig cli config savetoflash Network Time Protocol NTP The ntpclient is a Network Time Protocol client for UNIX and Linux based systems In order for the console server to work as an NTP client the IP address of the NTP server must be configured To configure an NTP server 1 Execute the following command to configure the NTP server IP address cli config administration ntp NTP server IP address 2 Act...

Page 94: ...our option If you select 1 Initiate a regular session the serial port is shared with the users that were previously connected You are able to read and write to the serial port If you select 2 Initiate a sniff session you may read everything that is sent or received through the serial port according to the parameter all sniff_mode or sN sniff_mode If you select 3 Send messages to another user the c...

Page 95: ...on page 71 for the syslog ng configuration file The data buffering parameters are configured in file all data_buffering Conf nfs_data_buffering is a remote network file system where data buffering is written to instead of the default directory var run DB When commented it indicates local data buffering The directory tree to which the file is written must be NFS mounted and the local path should po...

Page 96: ...r format lin data transmission between the remote device and the serial port ceases once the 4k bytes Rx buffer in the kernel is reached Then if a session is established to the serial port the data in the buffer is shown all dont_show_DBmenu or sxx dont_show_DBmenu must be 2 cleared and data transmission is resumed Linear buffering is impossible if flow control is set to none Default is cir To con...

Page 97: ... the menu shell to users who require access using the options provided by the menush_cfg utility showmenu file fileanderase no noerase yes Control the DB menu options syslogserver n n n n Defines the IP address of the Syslog server syslogsize record length in bytes 40 255 Maximum size of syslog data buffer message syslogfacility local0 local7 Defines the facility number for messages generated by t...

Page 98: ...lowing parameters in etc portslave pslave conf for the ports that use this menu shell s x protocol telnet conf telnet bin menush s x authtype none Where x is the port number being configured 2 If authentication is required to gain access to the menu the user s default shell must be modified to run the bin menush In etc passwd the shell should be changed as per the following example user FrE6QU 505...

Page 99: ...Chapter 5 Administration 91 Where x is the port number being configured 4 Activate and save the configuration changes runconf saveconf ...

Page 100: ... banner appearance when a connection is made to a server The banner appearance may be port specific or a unified banner for all ports To configure the terminal appearance 1 Enter the following command to configure a banner for one or multiple serial ports cli config physicalports all range other banner login banner NOTE A banner string with spaces must be enclosed by double quotes string1 string2 ...

Page 101: ...tilities and configuration files that are to be used with the sudo command by users from the admin group NOTE The sudoers file is not saved to Flash automatically If you make changes to this file and wish to save the changes follow the standard procedure to save the config_files file For an admin group user to be allowed to execute commands from the shell prompt the sudo command must be used Comma...

Page 102: ...e from flash restoreconf Restore from factory default restoreconf factory_default Restore from local file restoreconf local FILE Restore from FTP server restoreconf ftp FILE FTP_SERVER USER PASSWORD Restore from TFTP server restoreconf tftp FILE TFTP_SERVER Table 5 14 Saveconf Utility and Storage Device Parameters Media Description none Save the configuration to internal Flash local File Save the ...

Page 103: ...le cannot be changed and it must point only to one file Source file Holds information about frequency of cron jobs and the files that should be executed It may have any name since it is pointed out by the etc crontab_files Script files These are the script files that are scheduled and are pointed by the source file explained previously The following parameters are created in the etc crontab_files ...

Page 104: ...he etc crontab_files file must follow the following structure PATH usr bin bin SHELL bin sh HOME 0 59 etc tst_cron sh This file is called etc tst_cron src It can have any name but it follows structure showed previously The fourth line of the example file follows this structure minutes hours month day month week day and command It is possible to specify different tasks to run on different dates and...

Page 105: ...ical network Figure 5 1 displays an example of clustering with one master and two slaves descriptions follow in Table 5 16 Figure 5 1 An Example on Using the Clustering Feature Table 5 16 Example of Using the Clustering Feature Descriptions Item Description Item Description 1 Cyclades ACS 5000 Console Server Master Ethernet LAN IP 20 20 20 1 Secondary IP 209 81 55 110 5 Servers on Serial Ports TCP...

Page 106: ...ion IP Address 20 20 20 10 4 Servers on Serial Ports TCP Port Address Range 7001 7016 8 Remote Management Workstation Table 5 17 Clustering Configuration Parameters Parameter Value Description numports list Set the total number of ports of the slave unit firstlocalportnum number 17 1024 This parameter act as the numbering continuation in the slave If the master unit has 16 ports the first port of ...

Page 107: ... and Smart CDUs PTXL and PTXM models must be handled through the DSView 3 software The DSView 3 server enables the Server Technology Switched and Smart CDUs PTXL and PTXM models licensing feature for the selected serial ports in the console server The console server may have multiple IPDUs connected to appropriately configured serial ports Devices may be plugged into outlets on the IPDUs and conne...

Page 108: ... user permission to access an IPDU appliance enable pmusers all or list of users separated by commas 7 Define the hotkey used to open the IPDU menu The format is Ctrl plus a character The default is i enable pmkey i 8 Activate and save your configuration cli config runconfig cli config savetoflash IPDU Configuration and Management Power management utility The power management utility may be used t...

Page 109: ...DU appliances connected to the console server or it may generate an error message Make sure to add the IPDU ID to a pmCommand IPDU appliances may also be referenced by the location of the IPDU In this case the location should be preceded with an exclamation For example to display the maximum detected current on the third IPDU connected to serial port 2 enter the following command at the pmCommand ...

Page 110: ...enu To manage IPDU appliances through pmMenu 1 Enter pmMenu at the shell prompt to open the power management menu Table 6 1 provides explanation for each menu item 2 Select an option from the menu 3 Follow the command instructions for the selected option Table 6 1 pmMenu and pmCommand Commands Menu Item Command Syntax Description Exit exit Exit pmMenu and return to the command prompt Help help Dis...

Page 111: ... outlet entry outlet name Define a name or an alias for an outlet Current current reset IPDU ID element Display the amount of current that is running through the IPDU or reset the maximum detected current in a single or all IPDU appliances The element can be bank name A B C XY phase name X Y Z outlet number 1 2 Temperature temperature reset IPDU ID Display temperature on an IPDU if the IPDU unit i...

Page 112: ...guration saved in Flash Save save IPDU ID Save the current configuration in Flash Alarm Threshold Avocent PM PDU and Cyclades IPDU alarm IPDU ID threshold element Set an alarm notification when the current exceeds the selected threshold The element can be bank name A B C XY phase name X Y Z outlet number 1 2 IPDU ID id current IPDU ID new IPDU ID Display the current IPDU name or assign a new name ...

Page 113: ...rrent of one element Set command requires element argument The element can be pdu bank name A B C XY phase name X Y Z outlet number 1 2 Power Off Delay Avocent PM PDU poweroffdelay outlet list delay Set the time delay in seconds for turning off outlets Power Info powerinfo reset IPDU ID element Display or clear the maximum minimum average power consumption of a defined element or all elements if o...

Page 114: ...nfigured hotkey The default is p a If you have permission to access the server outlet s the IPDU appliance menu appears Table 6 2 describe the commands available through the menu b If you do not have permission to access an outlet the following message appears Voltage Info voltageinfo reset IPDU ID element Display or clear the maximum minimum average recorded voltage for the defined element or all...

Page 115: ...cle command turns off the outlet for a few seconds and turns it back on Type 5 to select Cycle To manage other outlets Perform the following procedures if you need to access other outlets 1 Type 8 to select Status to view the outlets you are authorized to manage 2 Type 10 to select Other and select the outlet you want to manage You should have authorization to the manage the outlets entered Table ...

Page 116: ... pm8 5 At the pm prompt change the IPDU appliance password and save the new password pm passwd new password pm save 6 Press Ctrl to quit the Telnet session 7 Invoke the CLI utility and change the connection protocol to power management cli config physicalports port number general protocol pm 8 Repeat steps 1 7 for each Cyclades IPDU appliance 9 Configure and synchronize the new password in the IPD...

Page 117: ...e starting the firmware upgrade process 4 Execute the pmfwupgrade application from the shell prompt Table 6 3 describe the parameters pmfwupgrade options all s serial device name IPDU id filename SNMP Proxy The SNMP proxy for power management feature allows the console server to proxy SNMP requests to the IPDU This allows SNMP clients to query and control the remote IPDU using standard set and get...

Page 118: ...s that may be executed on each outlet are ON OFF CYCLE and LOCK NOTE The console server proxies all SNMP requests to the IPDU Therefore there is a small delay if an outlet cycling is requested by the snmpset command To successfully cycle an outlet a four second or higher time out must be specified To run this command for more than one outlet or for units configured as daisy chain this time should ...

Page 119: ...MS service Syntax bootcfg ems EDIT OFF ON s server u domain user p password baud baud_rate port communications_port id line_number Table A 1 EMS Configuration Parameters and Switches Parameter and Switches Description EDIT Allows changes to port and baud rate settings by changing the redirect COMx setting in the bootloader section The value of COMx is set to the value of the port OFF Disables outp...

Page 120: ...ystems section of the Boot ini file to which the operating system load options are added The first line after the operating systems section header is 1 p password Specifies the password of the user account that is specified in u port communications_port Specifies the COM port to be used for redirection Do not use if remotely administered output is being disabled BIOSSET get BIOS settings to determ...

Page 121: ...g Windows Server 2003 Datacenter Edition Windows Server 2003 Embedded Windows Server 2003 Enterprise Edition Windows Server 2003 os service pack Is an alphanumeric string that identifies the most up to date service pack installed If none installed the string is None os version Is the numeric identification of the Windows version currently running processor architecture Is either x86 or IA64 design...

Page 122: ...be confused with those provided through the guid tag description Is the user friendly name of the active channel For the GUI Mode Setup tool they are Debug Log Setup tracing log Error Log Setup errors log Action Log Setup actions log For the Windows Server they are SAC Special Administration Console CMD Command Prompt guid Is a hexadecimal GUID that identifies a specific instance of a channel Duri...

Page 123: ...Setup channels VT UTF8 for the SAC and CMD channels channel switch name SAC name description Special Administration Console description type VT UTF8 type guid 1aee4cc0 cff3 11d6 9a3d 806e6f6e6963 guid application type 63d02270 8aa4 11d5 bccf 806d6172696f application type channel switch channel switch name Cmd0001 name description Command Prompt description type VT UTF8 type guid 970438d1 12bb 11d7...

Page 124: ...e available to filter the xml messages Table A 4 BP Tags Description Element Description INSTANCE CLASSNAME Is the type of break point Currently there is only one type emitted such as Blue Screen which indicates the system was halted prematurely It is represented by the CLASSNAME BLUESCREEN value machine info Described previously PROPERTY NAME Provides additional details such as error code of the ...

Page 125: ...ot Macros Macro Description Value to replace macro INSTANCE CLASSNAME Reason for the break point Currently there is only one type BLUESCREEN BLUESCREEN PROPERTY NAME Additional details about break point STOPCODE VALUE Additional details about break point 0xE2 name Machine name MY_WIN_SERVER guid GUID that uniquely identifies this server If no such value is available all 0 s GUID string is used 4c4...

Page 126: ... architecture Processor architecture It may be either x86 or IA64 x86 os version Windows version 5 2 os build number Numeric string that identifies a successive Windows Build 3763 os product Which Windows Server product It may be Windows Server 2003 Datacenter Edition Windows Server 2003 Embedded Windows Server 2003 Enterprise Edition or Windows Server 2003 Windows Server 2003 os service pack Alph...

Page 127: ...that may be sent to the server destination win2003mail pipe dev cyc_alarm template sendmail t administrator cyclades com f acs s Server name crashed m Break Point INSTANCE CLASSNAME PROPERTY NAME VALUE Server name OS os product Build os build number Version os version Service Pack os service pack Processor processor architecture Server GUID guid ACS port tty h mail cyclades com Table A 7 Server Co...

Page 128: ...be used to control power to the serially connected servers through the IPMI protocol i ip subnet gateway Set network interface number IP address subnet and gateway id Display the server identification information k pid Kill the given process l pid Lower the priority of a process to the lowest possible lock Lock access to Command Prompt channels You must provide valid logon credentials to unlock a ...

Page 129: ...mand line N A v Increase verbose output level This option may be specified multiple times to increase the level of debug output N A V Display version information N A I interface Selects IPMI interface to use open imb lan lanplus H address Remote server address may be IP address or hostname This option is required for the LAN interface connection N A U username Remote username Default is NULL L pri...

Page 130: ...Master Write Read command and print response lan Configure LAN Channels chassis Get chassis status and set power state event Send pre defined events to MC mc Management Controller status and global enables sdr Print Sensor Data Repository entries and readings sensor Print detailed sensor information fru Print built in FRU and scan SDR for FRU locators sel Print System Event Log SEL pef Configure P...

Page 131: ... password password Assign a password to access the device privilege admin operator user Assign a user access level serverip n n n n IP address of the device username name Username to access the device key character The hotkey used to access the IPMI NOTE The default IPMI hotkey is I where stands for the Ctrl key on the keyboard The hexadecimal code for the Ctrl I default IPMI hotkey is the same as...

Page 132: ..._ras process Example 4 Enable the printer daemon file etc lpd sh and change the option ENABLE to YES 5 Allow clients to use the service Edit the file etc hosts lpd and include the host names that have permission to use the console server printers NOTE The lpd needs to translate the IP address of the request message to the host name check your resolv conf file 6 Restart the processes by executing t...

Page 133: ...for all serial ports belonging to a pool You may access the serial ports from a pool with the same commands you use to access a specific serial port You need to use pool_ipno pool_alias or pool_socket_port instead of ipno alias or socket_port with an SSH or Telnet command When a connection request arrives using one of pool_ipno pool_alias or pool_socket_port the console server looks for the first ...

Page 134: ...cation s2 pool_socket_port 3000 TCP port for the pool s2 ipno 10 0 0 2 IP address for specific allocation s2 pool_ipno 10 1 0 1 IP address for the pool s2 alias serial 2 alias for specific allocation s2 pool_alias pool 1 alias for the pool Serial port pool pool 2 s3 tty ttyS3 s3 protocol socket_ssh s3 socket_port 7003 TCP port for specific allocation s3 pool_socket_port 4000 TCP port for the pool ...

Page 135: ...eived The console server doesn t change the termination method transferring the same sequence to the file The name of the temporary file used to write these records is cycXXXXX YYMMDD hhmmss tmp where XXXXX is the hostname or alias YYMMDD is the year month day hhmmss is the hour min sec This name helps the user archive and browse their directory as the file may be chronologically listed not based ...

Page 136: ...l to hardware for the serial port all flow hard in the pslave conf file the application monitors the available disk space and if it is less than 100 Kb the serial interface deactivates RTS signal on the RS 232 RTS is reactivated once the disk free space is greater than 120 Kb Billing wizard This feature improves the billing application by using a script and automating the upload of the billing rec...

Page 137: ...ode ftp or scp ftp Local Directory var run DB Remote server IP 192 168 1 101 Remote directory var billing User billing Password billing Upload Interval in minutes NOTE Instead of running the u option the etc billing_up conf may be configured manually to change the parameters If the parameters remain unchanged the default parameters are uploaded NOTE If the scp transfer mode is selected and there i...

Page 138: ...tp user admin ftp Password adminpw ftp cd tftpboot ftp bin ftp get zImage nnn zImage ftp quit NOTE The destination filename in the mnt flash directory must be zImage Example hostname server directory tftpboot username admin password adminpw firmware filename on that server zImage nnn NOTE Due to space limitations the new zImage file may not be downloaded with a different name then renamed The cons...

Page 139: ...g on the console server to skip an alternate boot code console server boots using its original boot code 4 During the self test press Esc after the Ethernet test Testing Ethernet 5 When the Watch Dog Timer prompt appears press Enter Watchdog timer A ctive or I nactive I 6 Choose the option Network Boot when asked Firmware boot from F lash or N etwork N 7 Select the TFTP option instead of BootP The...

Page 140: ...iles contains a list of files that are affected by saveconf and restoreconf commands At the command prompt issue the command cat etc config_files to see the list of files that are available in the Flash and are loaded into the Ramdisk at the boot time NOTE If any of the files listed in etc config_files are modified the console server administrator must execute the command saveconf before rebooting...

Page 141: ... blink consistently one second on one second off If this is not the case an error has been detected during the boot The blink pattern may be interpreted via the following table Current configuration MAC address assigned to Ethernet 00 60 2e 00 16 b9 IP address assigned to Ethernet interface 192 168 160 10 Watchdog timer A ctive or I nactive A Firmware boot from F lash or N etwork F Boot type B oot...

Page 142: ...tate DT flashes when there is data transmitted to or received from the LAN It is hardware controlled LK keeps steady if the LAN is active The green LED is Data Transaction activity and the yellow LED is LinK state 100 If 100BT is detected the LED lights on If 10BT is detected it turns off Console connector CP CPU activity It flashes at roughly 1 second intervals P1 Power supply 1 ON P2 Power suppl...

Page 143: ...arameter Value Description boottype bootp both tftp To set the network boot type bootunit network To set from where the unit boots consolespeed 115200 19200 38400 4800 57600 9600 To configure the console speed ethernetip ethernetip ethernetmode Assign a temporary IP address to the Ethernet interface ethernetmode 100F 100H 10F 10H auto To set an Ethernet mode filename filename Add a filename of the...

Page 144: ...figuration file located at home configuration backupconfig loadfrom serverip 192 168 0 1 pathname home configuration username john password john1234 Table B 3 CLI Session Management Parameters Parameter Value Description Kill Serial Port Number 1 1024 To cancel a connection to the serial port n LIst Lists the current sessions Table B 4 Backup Configuration Parameters Parameter Level1 Parameter Lev...

Page 145: ...athname path checksum yes no As an example the following parameters are used to show the command usage FTP Server 192 168 100 111 Path images zImage User john Password john1234 cli administration upgradefw ftpsite 192 168 100 111 username john password john1234 filepathname images zImage checksum no 2 Activate and save your configuration 3 Close the CLI session and reboot the console server cli qu...

Page 146: ...etc Contains configuration files specific to the operating system lib Contains shared libraries proc Contains process information mnt Contains information about mounted disks opt Location where packages that are not supplied with the operating system are stored tmp Location where temporary files are stored usr Contains most of the operating system files Table C 2 File Manipulation Commands Command...

Page 147: ...s always in a directory The default initial directory is the user s home directory home username ls options directory_name Lists the files and directories within directory_name Some useful options are l for more detailed output and a which shows hidden system files cd directory_name Changes the directory to the one specified cat file_name Prints the contents of file_name to the screen one dot Repr...

Page 148: ... navigate within an open file Press the Esc key Editing mode To edit text See Table D 2 and Table D 3 for a list of editing commands Line mode To open save and do other file manipulations From the command mode type colon Table D 2 vi Navigation Commands Command Description h Moves the cursor to the left left arrow j Moves the cursor to the next line down arrow k Moves the cursor to the previous li...

Page 149: ...by typing colon and one of the following commands Table D 4 vi Line Mode Commands Command Description w Saves the file w is for write wq Saves and closes the file q is for quit q Closes the file without saving w file Saves the file with the name file e file Opens the file named file ...

Page 150: ...ssue should develop follow the steps below for the fastest possible service To resolve an issue 1 Check the pertinent section of this manual to see if the issue can be resolved by following the procedures outlined 2 Visit www avocent com support and use one of the following resources Search the knowledge base or use the online service request or Select Technical Support Contacts to find the Avocen...

Page 151: ......

Page 152: ...590 814 501B For Technical Support www avocent com support ...

Reviews:

No comments

Brands by name

Popular brands

Load more brands