Lantronix SecureLinx User Manual Download Page 68

Page: 68 / 109

4: Advanced Operations

Enabling and Setting up SSH Support

Note:

A restart of the unit is required after setting or changing ANY SSH

configurations. See

Performing a warm boot

on page

for more information

Enabling or disabling SSH support

The Set SSH command is used to enable or disable SSH support.

To enable or disable SSH support:

1. At the command prompt, type

set ssh

, followed by

enabled

disabled

and

press

Enter

Changing the SSH server port

With SSH support enabled, the SSH server watches and responds to requests on the
default SSH port number 22. This port number may be changed using the Set SSH
Port command.

To change the SSH port:

1. At the command prompt, type

set ssh port

, followed by the port number and

press

Enter

Example

The following changes the SSH port number to 65535:

SLP: set ssh port 65535<Enter>

SSH Technical Specifications

Secure Shell (SSH) version 2

Asymmetric Cryptography:

Diffie-Hellman DSA/DSS 512-1024 (random) bits per NIST specification

Symmetric Cryptography:

AES256-CBC RIJNDAEL256-CBC

3DES-192-CBC

AES192-CBC RIJNDAEL192-CBC

BLOWFISH-128-CBC

AES128-CBC RIJNDAEL128-CBC ARCFOUR-128

Message Integrity:

HMAC-SHA1-160 HMAC-SHA1-96

HMAC-MD5-128 HMAC-MD5-96

Authentication:

Username/Password

Session Channel Break Extension (for RS-232 Break)

SecureLinx SLP Remote Power Manager

Summary of Contents for SecureLinx

Page 1: ...Part Number 900 371 Revision C January 2009 SecureLinxTM SLP Remote Power Manager User Guide ...

Page 2: ......

Page 3: ...device pursuant to Part 15 of the FCC Rules These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a commercial environment This equipment generates uses and can radiate radio frequency energy and if not installed and used in accordance with the instruction manual may cause harmful interference to radio communications Operation of ...

Page 4: ...includes but is not limited to neonatal oxygen analyzers nerve stimulators whether used for anesthesia pain relief or other purposes auto transfusion devices blood pumps defibrillators arrhythmia detectors and alarms pacemakers hemodialysis systems peritoneal dialysis systems neonatal ventilator incubators ventilators for adults or infants anesthesia ventilators infusion pumps and any other device...

Page 5: ..._______________________________________________________ 11 Vertical _______________________________________________________________ 11 Connecting to the Power Source _______________________________________ 12 Connecting Devices_________________________________________________ 12 Connecting to a local Personal Computer PC ____________________________ 12 Serial RS 232 port __________________________...

Page 6: ...ps ___________________________________________________________ 71 Configuring Traps _______________________________________________________ 73 LDAP ____________________________________________________________ 76 Logging __________________________________________________________ 93 5 Troubleshooting and Technical Support 98 Technical Support __________________________________________________ 98 A R...

Page 7: ...tus Traps ________________________________________ 72 Table 4 7 Outlet Status Traps_________________________________________ 72 Table 4 8 Load Traps _______________________________________________ 73 Table 4 9 SNMP Trap Command Summary ______________________________ 73 Table C 5 1 Vertical Installation ______________________________________ 101 Table C 5 2 Vertical Expansion Unit__________________...

Page 8: ...and a 10 100 Base T Ethernet port for Telnet Secure Shell SSH and web browser access Power Distribution Up to 16A 24A of AC power dependant on model can be distributed across up to sixteen attached devices See Models on page 101 for available models Remote Power Management Remote control of power outlets allows individual on off and reboot control of up to 16 devices or up to 32 devices with the a...

Page 9: ... can create up to 128 user accounts with individualized access to outlets and commands All accounts support username and password protection For configurations requiring multiple fully privileged users the administrator can grant administrative privileges to other user accounts in the system User Interfaces and LEDs Two types of user interfaces are available the web browser and the command line in...

Page 10: ... DTE serial port Outlet retention clips one per outlet 208 240V units only Power input retention bracket hardware Two removable T brackets with two 40mm screws Additional required Items Phillip screwdriver Screws washers and nuts to attach the SLP to your rack Power input cord purchased separately SLPY SLPX includes RJ12 link cable Equipment Overview The outlets are labeled 1 through 16 These numb...

Page 11: ...cation in accordance with the following installation and use instructions This equipment is designed to be installed on a dedicated circuit Dedicated circuit must have circuit breaker or fuse protection This product has been designed without a master circuit breaker or fuse to avoid becoming a single point of failure It is the customer s responsibility to provide adequate protection for the dedica...

Page 12: ...9 inlet to the enclosure 2 Assemble and attach the retention bracket to the enclosure as shown Figure 2 2 Retention Bracket Assembly Mounting Horizontal Rack 1 Select the appropriate bracket mounting points for proper mounting depth within the rack 2 Attach the brackets to these mounting points with two screws for each bracket 3 Install the enclosure into your rack using the slots in each bracket ...

Page 13: ...nto holes on the sides of the unit then insert the device s power cord and snap the clip over the cord Note Even distribution of attached devices is recommended across the available outlets to avoid exceeding the outlet quad or octet ratings limitations See Technical Specifications on page 101 more information Note The outlet retention clips on the 230V models are designed for use with Lantronix p...

Page 14: ...255 255 0 Gateway 192 168 1 1 The local PC network connection must be configured as Noted below Note Contact your system administrator for instructions in reconfiguring the network connection Reconfiguration of your network connection may require a restart to take effect IP address 192 168 1 x where x is 2 253 Subnet Mask 255 255 255 0 SecureLinx SLP Remote Power Manager 13 ...

Page 15: ...ated Only an administrative level user may perform operations such as creating removing user accounts and command privileges changing passwords and displaying outlet and user information An administrator may also view the status of and control power to all outlets The administrator may create additional user accounts and then grant these users the right to view the status of and control power to s...

Page 16: ...me or password the prompt will repeat again You are given three attempts to enter a valid username and password combination If all three fail the session ends and a protected page will be displayed Outlet Control The Outlet Control section offers access to the Individual and Group outlet control pages From the Individual and Group pages the user can review and manipulate power control functions fo...

Page 17: ...t user as well as the outlets for each group To select a group 1 Select the group name from the drop down menu and press Select The page will refresh to display all outlets associated to the selected group name To apply an action to a group Select the desired action from the drop down menu and press Apply Table 3 1 Outlet State Control State Field Values Outlet State Control State Description On O...

Page 18: ...umidity sensor s absolute and descriptive names The sensor page also displays temperature humidity sensor readings in degrees Celsius and percent relative humidity This page will refresh automatically every 10 seconds Configuration The Configuration section offers access to all unit configuration options including System Network Telnet SSH HTTP SSL Serial Port Outlets Groups Users FTP SNTP Syslog ...

Page 19: ...asswords Enabling or disabling the external reset button 1 Select Enabled or Disabled from the External Reset Button drop down menu and press Apply Setting the temperature scale Select Celsius or Fahrenheit from the Temperature Scale drop down menu and press Apply Creating a pre login banner 1 Click on the Login Banner link 2 On the subsequent Login Banner page enter a pre login banner and press A...

Page 20: ... this page an administrator may configure the IP address subnet mask and gateway address as well as view the link status speed and duplex value The following network defaults allow unit configuration out of the box through either Telnet SSH or web browser IP address 192 168 1 254 Subnet Mask 255 255 255 0 Gateway 192 168 1 1 The initial local PC network connection must be configured as noted below...

Page 21: ...ting credential information from the SSH client The client gathers credential information keyed in by the user and sends it back to the server The Keyboard Interactive method is controlled by the SSH server Individual enabling and disabling of the Password and Keyboard Interactive authentication methods are supported to allow an SSH client to be forced to use a specific method Although both method...

Page 22: ...e codes The MD5 digest method offers a higher level of security than the Basic method but at present is not supported by all browsers Note MD5 is known to be fully supported by Internet Explorer 5 0 Select Basic or MD5 from the Authentication drop down menu and press Apply Setting SSL access level SSL access may be configured as optional or required The default access level is set to optional Opti...

Page 23: ... 2 Enter the reboot interval in seconds in the Reboot Delay field and press Apply Editing the outlet descriptive name 1 Click on the Edit link in the Action column next to the outlet to be configured 2 On the subsequent Outlet Edit page enter the descriptive name Up to 24 alphanumeric and other typeable characters ASCII 33 to 126 decimal spaces and colon characters are not allowed are allowed Pres...

Page 24: ...racters are not allowed are allowed 2 Enter a password for the new user in the Password and Verify Password fields For security password characters are not displayed Press Apply Removing a user 1 Click on the Remove link in the Action column for the user to be removed and press Yes on the subsequent confirmation window Changing a user password 1 Click on the Edit link in the Action column for the ...

Page 25: ...iated user 2 On the subsequent User Edit page select Yes or No from the Environmental Monitoring drop down menu and press Apply Adding and Deleting outlet access 1 Click on the Outlets link in the Access column for the associated user 2 On the subsequent User Outlets page select or deselect outlets to be accessed by the user and press Apply Adding and Deleting group access 1 Click on the Groups li...

Page 26: ...nd upload it 1 Select Enabled or Disabled from the drop down menu and press Apply Setting the automatic update scheduled day 1 Select the desired day for the automatic update from the drop down menu and press Apply Setting the automatic update scheduled hour 1 Select the desired hour for the automatic update from the drop down menu and press Apply Enabling or disabling the FTP server The SLP featu...

Page 27: ...n only the Tower Status trap is generated Infeed and Outlet Status traps are suppressed until the Tower Status returns to Normal Enabling or disabling SNMP support 1 Select Enabled or Disabled from the drop down menu and press Apply Setting the community strings 1 Enter the community string in the appropriate field and press Apply Community strings may be 1 to 24 characters Setting the trap timer ...

Page 28: ... Environmental Monitor Traps link 2 On the subsequent page select or deselect the desired traps and press Apply Configuring the Temperature Humidity sensor traps 1 Click on the Sensor Traps link 2 On the subsequent page select or deselect the desired traps and press Apply 3 For Temp traps enter a minimum and maximum threshold value for the sensor in the appropriate field and press Apply The thresh...

Page 29: ... name FQDN in the Search Bind field and press Apply Setting the search bind password for Distinguished Name DN 1 Enter the Search Bind password in the Search Bind Password field and press Apply Setting the user search base Distinguished Name DN 1 Enter the User Search Base DN in the User Search Base DN field and press Apply Setting the user search filter 1 Enter the User Search Filter in the User ...

Page 30: ...roup 2 On the subsequent LDAP Group edit page select Yes or No from the Environmental Monitoring drop down menu and press Apply Adding and Deleting outlet access 1 Click on the Outlets link in the Action column for the associated LDAP Group 2 On the subsequent LDAP Group Outlets page select or deselect outlets to be accessed by the LDAP Group and press Apply Adding and Deleting outlet group access...

Page 31: ...lds Press Apply For security key characters are not displayed Configuring the TACACS privilege levels 1 Click on the TACACS Privilege Levels link at the bottom of the page Changing a TACACS Privilege Level s access privilege level 1 Click on the Edit link in the Action column for the associated TACACS Privilege Level 2 On the subsequent TACACS Privilege Level Edit page select Admin User On Only or...

Page 32: ...rmation and configuration requirements for Email support see Logging on page 93 Enabling or disabling Email support 1 Select Enabled or Disabled from the Email Notifications drop down menu and press Apply Setting the SMTP server address 1 Enter the IP address or hostname in the SMTP Host field and press Apply Changing the SMTP server port 1 Enter the port number in the SMTP Port field and press Ap...

Page 33: ...a continuously aging log For permanent off system log storage the Syslog protocol is supported For additional information and configuration requirements for the system log and Syslog support see Logging on page 93 Note The system log is viewable only by users with administrative privileges Reviewing the system log Click on the Previous 200 entries or Next 100 entries link to navigate through the l...

Page 34: ...ion It is not necessary to press Enter 2 At the Username and Password prompts enter a valid username and password And press Enter You are given three attempts to enter a valid username and password combination If all three fail the session ends When you enter a valid username and password the command prompt SLP appears If a location identifier was defined it will be displayed before the prompt See...

Page 35: ... outlets for a group name List Groups Lists all accessible groups for the current user Table 3 3 Administrative Command Summary Command Description Add Grouptouser Grants a user access to one or more groups Add Outlettogroup Adds an outlet to a group name Add Outlettouser Grants a user access to one or all outlets Add Portuser Grants a user access to one or all serial Pass Thru ports Create Group ...

Page 36: ...equirements Set Option Tempscale Sets the Environmental Monitor temperature scale Set Outlet Name Specifies a descriptive field for a device attached to an outlet Set Outlet PostOnDelay Sets the Post On delay for an outlet Set Outlet RebootDelay Sets the reboot delay for all outlets Set Outlet SeqInterval Sets the sequencing interval for all outlets Set Outlet Wakeup Sets the wakeup state for an o...

Page 37: ...for the current user appears Operations Commands Operations commands manage outlet states provide information about the unit s environment and control session operations Note Users must be granted access to affect any change in outlet state Turning outlets on The On command turns on one or more outlets When the command completes a display indicating all outlets affected and their current states wi...

Page 38: ...Enter The following command turns off all outlets SLP off all Enter Rebooting outlets The Reboot command reboots one or more outlets This operation turns the outlet s off delays for a period of 15 seconds and then turns the outlet s on When the command completes a display indicating all outlets affected and their current states will be displayed Note It is necessary to reissue the Status command t...

Page 39: ...e Outlet Control on page 15 To display on off status of one or more outlets 1 At the command prompt type status followed by an outlet name and press Enter or 2 Type status followed by a group name and press Enter or 3 Type status and press Enter Examples The following command displays the on off status of the outlet named FileServer_1 SLP status FileServer_1 Enter Outlet Outlet Outlet Control ID N...

Page 40: ...Name A1 DataServer_1 A2 WebServer_1 Displaying accessible groups The List Groups command displays accessible groups for the current user To display accessible groups 1 At the command prompt type list groups and press Enter Example The following command displays all accessible groups for the current user SLP list groups Enter Groups ServerGroup_1 RouterGroup_1 Displaying outlets assigned to a group...

Page 41: ...e infeed absolute and descriptive names and the Input Status and current Load reported to the unit by the infeed To display status of one or more infeeds 1 Type istat and press Enter or 2 Type iload and press Enter Examples The following command displays the infeed status SLP istat Input Input Input Input Feed ID Feed Name Status Load AA HQ_1_Infeed_A On 10 5 Amps Connecting to a serial device The...

Page 42: ...u type a password the characters are not displayed on the screen See Usernames and Passwords for more information To change a password 1 At the SLP prompt type password and press Enter 2 At the Enter Current Password prompt type the current password and press Enter 3 At the Enter New Password prompt type the new password and press Enter Passwords may contain 1 16 characters 4 At the Verify Passwor...

Page 43: ...e password Press Enter Example The following command creates the user account JaneDoe SLP create user JaneDoe Enter Password Enter Verify New Password Enter For security password characters are not displayed Removing a user account The Remove User command removes a user account Note You may remove the predefined user account Admn only if another user account has been granted administrative privile...

Page 44: ...ser ononly or viewonly optionally followed by a username and press Enter Examples The following command sets the user access level for JohnDoe to Admin SLP set user access admin johndoe Enter The following command sets the user access level for JaneDoe to User SLP set user access user janedoe Enter Granting and removing input load viewing privileges The Set User Envmon command grants or removes in...

Page 45: ...oe access to outlets A1 and Webserver_1 SLP add outlettouser a1 janedoe Enter SLP add outlettouser WebServer_1 janedoe Enter Deleting outlet access for a user The Delete OutletFromUser command removes a user s access to one or all outlets You cannot remove access to any outlet for an administrative level user To delete outlet access for a user 1 At the command prompt type delete outletfromuser opt...

Page 46: ...ting serial port access for a user The Delete PortFromUser command removes a user s access to the serial port You cannot remove access to the serial port for an administrative level user To delete serial port access for a user 2 At the SLP prompt type delete portfromuser console and username Press Enter Displaying user outlet and group access The List User command displays all accessible outlets a...

Page 47: ...re an outlet name as an alternative to using the outlet s absolute name To create an outlet name 1 At the SLP prompt type set outlet name followed by the absolute outlet name then a descriptive name of up to 24 alphanumeric and other typeable characters ASCII 33 to 126 decimal are allowed spaces are not allowed outlet names are not case sensitive Press Enter Example The following command adds the ...

Page 48: ...ing interval To set the Post On delay 2 At the SLP prompt type set outlet postondelay followed by a value from 0 to 900 in seconds and press Enter Example The following command sets the Post On delay for outlet a5 to 90 seconds SLP set outlet postondelay a5 90 Enter Displaying outlet information The Show Outlets command displays information about all outlets This information includes Sequencing an...

Page 49: ...y 15 seconds Group Administration Creating a group name The Create Group command creates a new group name To create a group name 3 At the command prompt type create group optionally followed by a descriptive name of up to 24 alphanumeric and other typeable characters ASCII 33 to 126 decimal spaces are not allowed group names are not case sensitive Press Enter Example The following command creates ...

Page 50: ...oup name ServerGroup_1 SLP add OutletToGroup Enter Outletname all Enter Groupname ServerGroup_1 Enter Deleting an outlet from a group The Delete OutletFromGroup command deletes an outlet from a group To delete more than one outlet but not all outlets you must use multiple Delete OutletToGroup commands To delete an outlet from a group 1 At the command prompt type delete outletfromgroup optionally f...

Page 51: ...the command prompt type set outlet wakeup followed by on or off and the outlet name Press Enter Example The following command sets the wakeup state for outlet a1 to off SLP set outlet wakeup off a1 Enter Displaying outlet information The Show Outlets command displays information about all outlets This information includes Descriptive outlet name if applicable Outlet wakeup state setting To display...

Page 52: ... name modem Rack1 Enter Setting the serial ports data rate The Set Port Dsrchk command enables or disables active signal checking for serial Pass Thru connections to devices attached to any of the available serial ports Valid data rates are 1200 2400 4800 9600 19200 38400 and 57600 115200 To set the serial port data rate 1 At the command prompt type set port speed all followed by the data rate and...

Page 53: ...t information 1 At the command prompt type show ports and press Enter Example The following command displays all serial port information SLP show ports Enter Serial Port Configuration ALL Ports Baud rate 38400 Connection Timeout 5 minutes Port ID Console Port name CONSOLE DSR Check ON Port ID Modem Port Name MODEM DSR Check ON Initializations ON Init String 2 AT Init String 2 AT E0 Q1 S0 1 S2 64 S...

Page 54: ...er typing set location deletes any previously specified text Examples The following command specifies Florida HQ as the descriptive location for the control screen and the login banner SLP set location Florida HQ Enter The following command deletes any previously specified location description SLP set location Enter In this case the control screen s Location field will be blank and no Welcome bann...

Page 55: ... lowercase letter one number and on special character To enable or disable strong passwords 1 At the command prompt type set option strong password followed by enabled or disabled and press Enter Enabling or disabling the external configuration reset button The Set Option Button command enables or disables the external configuration reset button This feature can enhance system security by protecti...

Page 56: ...LED Temperature Scale CELSIUS Creating a descriptive unit name The Set Unit Name command assigns a descriptive name to a unit This descriptive name is displayed when the Show Traps command is issued See Displaying trap configuration information on page 76 for more information on the Show Traps command To create a unit name 3 At the command prompt type set unit name followed by the absolute unit na...

Page 57: ...feed on the unit SLP set infeed name aa HQ_1_Infeed_A Enter Displaying Infeed information The Show Infeeds command displays information about all infeeds This information includes the absolute and descriptive infeed names To display unit information 1 At the command prompt type show infeeds and press Enter Example SLP show infeeds Enter Input Input Feed ID Feed Name AA HQ_1_Infeed_A Creating a des...

Page 58: ...pe version and press Enter Performing a warm boot The Restart command performs a warm boot of the unit Note System user outlet group port configuration or outlet states are NOT changed or reset with this command To perform a warm boot 1 At the command prompt type restart and press Enter TCP IP Administration Note A restart of the unit is required after setting or changing any TCP IP configurations...

Page 59: ...ay the unit uses to access external networks To set the gateway IP address 1 At the command prompt type set gateway followed by the gateway IP address and press Enter Example The following command sets the gateway IP address to 12 34 56 1 SLP set gateway 12 34 56 1 Enter Setting the DNS IP address The Set DNS command sets the TCP IP address of the Domain Name server DNS To set the DNS IP address 1...

Page 60: ... updates occur To set the automatic update hour 1 At the command prompt type set ftp autoupdate hour followed by an hour of the day and press Enter Examples The following command sets the automatic update hour to 12 AM SLP set ftp autoupdate hour 12am Enter The following command sets the automatic update hour to 3 PM SLP set ftp autoupdate hour 3pm Enter SNTP Administration SLP supports the use of...

Page 61: ...ing SNTP configuration information The Show SNTP command displays all SNTP configuration information To display SNTP configuration information 1 At the command prompt type show sntp and press Enter Example The following command displays the SNTP configuration information SLP show sntp Enter Date Time Local GMT Offset 12 2006 02 21 21 32 48 Primary Host 204 152 184 72 Secondary Host cuckoo nevada e...

Page 62: ... enable or disable HTTP support To enable or disable HTTP support 1 At the command prompt type set http followed by enabled or disabled and press Enter Changing the HTTP server port With HTTP support enabled the HTTP server watches and responds to requests on the default HTTP port number 80 This port number may be changed using the Set HTTP Port command To change the HTTP port 1 At the command pro...

Page 63: ...net socket 1 At the command prompt type set Telnet port followed by the port number and press Enter Example The following changes the Telnet port number to 7001 SLP set Telnet port 7001 Enter FTP Administration You may install new versions of firmware using File Transfer Protocol FTP This allows access to new firmware releases for firmware improvements and new feature additions The following comma...

Page 64: ...ord to OpenSesame SLP set ftp password OpenSesame Enter Setting the filename to be uploaded The FTP Filename command sets the filename of the firmware file to be uploaded To set the FTP filename 1 At the command prompt type set ftp filename followed by the firmware filename and press Enter Example The following command sets the FTP filename to snb_s50a bin SLP set ftp filename snb_s50a bin Enter S...

Page 65: ...ware file path and filename To display FTP configuration information 1 At the command prompt type show ftp and press Enter Example The following command displays the FTP configuration information SLP show ftp Enter FTP Configuration Host IP Address 12 34 56 99 Username guest Password OpenSesame Directory ftp slp Filename SLP_xxxx bin SecureLinx SLP Remote Power Manager 64 ...

Page 66: ... credential The product s SSL Certificate enables the client to verify the unit s authenticity and to communicate with the unit securely via an encrypted session protecting confidential information from interception and hacking Table 4 1 SSL Command Summary Command Description Set SSL Enables disables SSL support Set SSL access Sets SSL access as optional or required Enabling and Setting up SSL Su...

Page 67: ...d a remote user over insecure network SSH provides an encrypted terminal session with strong authentication of both the server and client using public key cryptography and is typically used as a replacement for unencrypted Telnet In addition to enabling secure network terminal sessions to the unit for configuration and power management the SSH session may be used for secure Pass Thru connections t...

Page 68: ...er 22 This port number may be changed using the Set SSH Port command To change the SSH port 1 At the command prompt type set ssh port followed by the port number and press Enter Example The following changes the SSH port number to 65535 SLP set ssh port 65535 Enter SSH Technical Specifications Secure Shell SSH version 2 Asymmetric Cryptography Diffie Hellman DSA DSS 512 1024 random bits per NIST s...

Page 69: ... Show snmp Displays all SNMP configuration information Enabling and Setting up SNMP Support SNMP support must be enabled and configured for access to private enterprise MIB extensions for remote power control and for generation of all SNMP traps Enabling disabling SNMP support The SNMP command is used to enable or disable SNMP support To enable SNMP support 1 At the command prompt type set snmp fo...

Page 70: ...ter Example The following sets the timer period to 180 seconds SLP set traptime 180 Enter Setting the Get Set community strings Two SNMP community strings provide varying levels of access to objects defined in the private enterprise MIB extensions Community strings may be 1 to 24 characters Setcomm The Setcomm string provides read write access to private enterprise MIB objects The default Setcomm ...

Page 71: ...cation object To set the SysLocation object 1 At the command prompt type snmp syslocation followed by the object location and press Enter Setting the SNMP SysContact The Set SNMP SysContact command is used to set the SNMP MIB II SysContact object To set the SysContact object 1 At the command prompt type snmp syscontact followed by the object contact and press Enter Setting the Trap community strin...

Page 72: ... 4 4 Trap Summary Name Level s Description Status T I O Operational status change Change O Control status change Load I Input load out of limit All traps include the Location of the unit as defined with the Set Location command See Creating a pre login banner The Set Banner command specifies text that appears prior to the login authentication This feature allows administrators to configure a messa...

Page 73: ... Table 4 7 Outlet Status Traps Status Error Description On Outlet is on Off Outlet is off OnWait Outlet Status in transition OffWait Outlet Status in transition OnError x Outlet should be off but current is sensed at the outlet OffError x Outlet should be on but no current is sensed at the outlet OffFuse x Outlet should be on but a blown fuse has been detected NoComm x Communication to the outlet ...

Page 74: ...n to the infeed Configuring Traps Table 4 9 SNMP Trap Command Summary Command Description Set Trap Unit Status Enables or disables the Unit Status trap Set Trap Infeed Status Enables or disables the Infeed Status trap off Set Trap Infeed Load Enables or disables the Infeed Load trap Set Trap Infeed HighThresh Sets the Infeed Load trap high limit Set Trap Outlet Change Enables or disables the Outle...

Page 75: ...eed load all followed by on or off and press Enter Examples The following command enables the Load trap using the unit s absolute name SLP set trap infeed load aa on Enter The following command disables the Load trap SLP set trap infeed load all off Enter Note Enabling lower hierarchical traps automatically enables traps of higher hierarchical value i e enabling an Infeed Load trap automatically e...

Page 76: ...sable a Change trap 4 At the command prompt type set trap outlet change followed by the outlet name and on or off Press Enter or 5 Type set trap outlet change all followed by on or off and press Enter SecureLinx SLP Remote Power Manager 75 ...

Page 77: ...t trap configuration Outlet Outlet Change Status ID Name Trap Trap AA1 DataServer_1 OFF ON AA2 WebServer_1 OFF ON AA3 FileServer_1 OFF ON AA4 OFF ON AA5 OFF ON AA6 OFF ON AA7 OFF ON AA8 OFF ON More Y es N o y LDAP The SLP family of product supports Lightweight Directory Access Protocol LDAP version 3 This support enables authentication with LDAP servers user accounts do not need to be individually...

Page 78: ...ount password for binds Set LDAP GroupAttr Specifies the user class distinguished name DN or names of groups a user is a member of Set LDAP GroupType Specifies the data type for the Set LDAP GroupAttr command Set LDAP UseTLS Enables disables LDAP over TLS SSL support Set LDAP UserBaseDN Sets the base distinguished name DN for the username search at login Show LDAP Displays LDAP configurations Set ...

Page 79: ... configuration requirements 1 Define at least on LDAP group 2 Assign users to the LDAP group SLP configuration requirements 1 Enable LDAP support 2 Define the IP address and domain component of at least one Directory Services server 3 Set the LDAP bind request method being utilized by the Directory Services server 4 Define the IP address of at least on DNS server 5 Test DNS server configuration us...

Page 80: ... disabling LDAP over TLS SSL support The Set LDAP UseTLS command is used to enable or disable LDAP over TLS SSL support To enable or disable LDAP over TLS SSL support 1 At the command prompt type ldap usetls followed by yes or no and press Enter Example The following command sets the LDAP port server number to 8888 SLP set ldap port 8888 Enter Note If LDAP over TLS SSL is enabled MD5 binding is di...

Page 81: ...AD to cn guest cn Users dc lantronix dc com SLP set ldap binddn Enter Enter Search Bind DN Max characters 124 cn guest cn Users dc lantronix dc com Setting the search bind Distinguished Name DN password The Set LDAP BindPW command is used to set the password for the user account specified in the Search Bind DN Maximum password size is 20 characters To set the search bind DN 2 At the command prompt...

Page 82: ...c lantronixlantronix dc com SLP set ldap userbasedn Enter Enter User Search Base DN Max characters 100 cn Users dc lantronix dc com Enter Setting the authentication order The Set Authorder command sets the authentication order for remote authentication sessions The SLP supports two methods for authentication order Remote Local and Remote Only The Remote Local method first attempts authentication w...

Page 83: ... displays the LDAP configuration information SLP show ldap LDAP Configuration LDAP Enabled Host 1 98 76 54 32 Host 2 ldap lantronix com Port 8888 TLS SSL Yes Bind Type MD5 Auth Order Remote Local Search Bind DN cd guest cn Users dc lantronix dc com Password OpenSesame User Search Base DN cn Users dc lantronix com Filter samaccountname s Group Membership Attribute memberof Value Type DN Setting the...

Page 84: ...98 76 54 32 bytes 64 pseq 3 triptime 0 Reply from 98 76 54 32 bytes 64 pseq 4 triptime 0 Configuring LDAP Groups Creating an LDAP group The Create LDAPGroup command creates an LDAP group To create an LDAP group 1 At the command prompt type create ldapgroup optionally followed by a group name Press Enter Example The following command creates the LDAP group PowerUser SLP create ldapgroup PowerUser E...

Page 85: ...an LDAP group To grant or remove input status viewing privileges for an LDAP group 1 At the command prompt type set ldapgroup envmon followed by on or off optionally followed by a group name and press Enter Example The following command grants input status viewing privileges to the LDAP group PowerUser SLP set ldapgroup envmon on poweruser Enter Displaying the LDAP access privilege levels The List...

Page 86: ... outlet name and a group name Press Enter or type delete outlettoldap all followed by a group name and press Enter Adding outlet group access to an LDAP group The Add GroupToLDAP command grants an LDAP group s access to an outlet group To grant access for more than one outlet group you must use multiple Add GroupToLDAP commands To grant outlet group access to an LDAP group 3 At the command prompt ...

Page 87: ...r Enter Username PowerUser Outlet Outlet ID Name A1 DataServer_1 A2 WebServer_1 Groups ServerGroup_1 ServerGroup_2 More Y es N o Y Ports Port Port ID Name Console Console TACACS The SLP family of products supports the Terminal Access Controller Access Control System TACACS protocol This enables authentication and authorization with a central TACACS server user accounts do not need to be individual...

Page 88: ...ut and environmental monitoring status List TacPrivs Displays access levels for all TACACS accounts List TacPriv Displays all accessible outlet groups ports for a TACACS account Enabling and Setting up TACACS Support There are a few configuration requirements for properly enabling and setting up TACACS support Below is an overview of the minimum requirements 1 Enable TACACS support 2 Define the IP...

Page 89: ...ACS Key Enter Verify TACACS Key Enter For security key characters are not displayed Note A key size of zero results in no encryption being applied which may not be supported by the TACACS server and is not recommended for a production environment Changing the TACACS port With TACACS support enabled the SLP sends TACACS requests to the default TACACS port number 49 This port number may be changed u...

Page 90: ...ation At the SLP prompt type show tacacs and press Enter Example The following command displays the TACACS configuration information SLP show tacacs Enter TACACS Configuration TACACS Enabled Host 1 98 76 54 32 Host 2 tacacs lantronix com Port 50 TACACS Key Set Auth Order Remote Local Configuring TACACS Privilege Levels Setting TACACS account access level privileges The Set TacPriv Access command s...

Page 91: ...cPrivs command displays all TACACS accounts with their access privilege levels To display TACACS account access privilege levels At the SLP prompt type list tacprivs and press Enter Example The following command displays all TACACS account with their access privilege level SLP list tacprivs Enter TACACS Access Environmental Account Name Level Monitoring TACAdmin Admin Allowed PowerUser User Allowe...

Page 92: ...ds To grant outlet group access to a TACACS account At the SLP prompt type add grouptotacacs optionally followed by an outlet group name and a TACACS account number Press Enter Examples The following commands grants to a TACACS account number 5 access to the outlet groups ServerGroup_1 and ServerGroup_2 SLP add grouptotacacs servergroup_1 5 Enter SLP add grouptotacacs servergroup_2 5 Enter Deletin...

Page 93: ...ACS account access At the SLP prompt type list tacpriv optionally followed by a TACACS account Press Enter Example The following command displays information about the TACACS account 1 SLP list tacpriv 1 Enter TACACS Privilege Level 1 Outlet Outlet ID Name A1 DataServer_1 A2 WebServer_1 Groups ServerGroup_1 ServerGroup_2 More Y es N o Y Ports Port ID Port Name Console Console Members of the TACACS...

Page 94: ...ily of products supports logging of system events both internally and externally An internal log of more than 4000 events is automatically maintained and is reviewable by administrative users For permanent long term log storage SLP supports the Syslog protocol And for immediate notification SLP supports Email notifications Log entries include a sequential entry number a date time stamp and an even...

Page 95: ... 38 29 SLP set syslog hostip1 56 47 38 29 Enter Changing the Syslog server port With Syslog support enabled the Syslog server watches and responds to requests on the default Syslog port number 514 This port number may be changed using the Set Syslog Port command To change the Syslog port At the SLP prompt type set syslog port followed by the port number and press Enter Example The following change...

Page 96: ...s or disables Email notification support To enable or disable Email notification support At the SLP prompt type set email followed by enabled or disabled and press Enter Setting the SMTP server address The Set Email Host command sets the IP address or hostname of the SMTP server To set the SMTP server address At the SLP prompt type set email smtp host followed by the SMTP server s IP address or ho...

Page 97: ...email address Press Enter Examples The following command sets the primary to email address to DayAdmin lantronix com SLP set email primaryto DayAdmin lantronix com Enter The following command sets the secondary to email address to NiteAdmin lantronix com SLP set email secondaryto NiteAdmin lantronix com Enter Enabling or disabling event notification types The Set Email Event Set Email Auth Set Ema...

Page 98: ...d displays the Email configuration information SLP show email Email Configuration Email Notifications Enabled SMTP Host email lantronix com SMTP Port 5555 From Address Rack14CDU1 lantronix com Primary Send To Address DayAdmin lantronix com Secondary Send To Address NiteAdmin lantronix com Include EVENT Messages Enabled Include AUTH Messages Disabled Include POWER Messages Disabled Include CONFIG M...

Page 99: ...ding holidays Contact Technical Support in Europe Middle East and Africa Phone 49 0 89 31787 817 E mail eu_techsupp lantronix com Firmware downloads FAQs and the most up to date documentation are available at www lantronix com support When you report a problem please provide the following information Your name and your company name address and phone number Lantronix model number Lantronix serial n...

Page 100: ...P IP and Telnet Web configurations Reconfiguring the TCP IP and Telnet web settings will be required To reset to factory defaults from the web browser interface 1 On the Restart page in the Tools section of the web browser interface select Restart and reset to factory defaults from the drop down menu and press Apply To reset to factory defaults from the command line 1 At the command prompt type re...

Page 101: ...terface 1 On the Restart page in the Tools section of the web browser interface select Restart and upload firmware via FTP from the drop down menu and press Apply 2 Upon issuing this command the unit will restart and upload the firmware file specified with the FTP Filename command from the previously configured FTP Host See FTP Administration on page 62 for more information To initiate an FTP uplo...

Page 102: ...ble C 5 3 Horizontal Rack Installation Model Voltage Inlet Outlets SLPH0811E 02 100 120V 50 60Hz IEC 60320 C20 8 NEMA 5 20R SLPH0812E 02 208 230V 50 60Hz IEC 60320 C20 8 IEC 60320 C13 SLPH0814G 02 208 230V 50 60Hz NEMA L6 30P 30A locking 8 IEC 60320 C13 Table C 5 4 Horizontal Rack Expansion Unit Model Voltage Inlet Outlets SLPX0811E 02 100 120V 50 60Hz IEC 60320 C20 8 NEMA 5 20R SLPX0812E 02 208 2...

Page 103: ...ical Specifications SLPX08x2E 02 SLPV16x2E 02 SLPY16x2E 02 50 60 Hz SLPH0814G 02 SLPV1614G 02 208 230V 50 60 Hz 24 12 24 1 Current ratings are in amperes Expansion model SecureLinx SLP Remote Power Manager 102 ...

Page 104: ...s connector may be used for direct local access or from other serial devices such as a terminal server An RJ45 serial rollover cable is provided for connection to an RJ45 DTE serial port Table C 5 7 RS 232 Port Pin 6 7 54321 8 DTE Signal Name Input Output 1 Request to Send RTS Output 2 Data Terminal Ready DTR Output 3 Transmit Data TD Output 4 Signal Ground 5 Signal Ground 6 Receive Data RD Input ...

Page 105: ... Link Yellow lower Network Link is operational On continuously indicates that an Ethernet connection is made Network Activity on when network traffic detected off when no network traffic detected Network Activity Green upper Diagnostics flashes three times in even duration during power up or reset indicating a successful startup Outlet LED Indicators Units are equipped with a status LED for each p...

Page 106: ...both temperature and humidity and plugs into either T H1 or T H2 Lantronix Part Number Description SLPM1TH10 01 Probe Temperature and Humidity 10 Ft cable Table C 5 10 Temperature Humidity Probe Technical Specifications Category Description Temperature Operating 40 120 C At normal operating range 0 50 C accuracy is 1 degree Relative humidity Non condensing 0 95 relative humidity At normal operatin...

Page 107: ...nx SLP Remote Power Manager Conforms to the following standards or other normative documents USA and Canada FCC Class A Part 15 cTUVus US Canada to UL 60950 2003 and CAN CSA 22 2 No 60950 1 03 European Union TUVGS mark EN60950 1 2001 Manufacturer s Contact Director of Quality Assurance Lantronix 15353 Barranca Parkway Irvine CA 92618 USA Tel 949 453 3990 Fax 949 453 3995 SecureLinx SLP Remote Powe...

Page 108: ...terial Authorization RMA will be issued Following receipt of an RMA number the customer shall return the product to Lantronix freight prepaid Upon verification of warranty Lantronix will at its option repair or replace the product and return it to the customer freight prepaid If the product is not under warranty the customer may have Lantronix repair the unit on a fee basis or return it No service...

Page 109: ...arranties of merchantability or fitness for a particular purpose other than those specifically set out above or by any existing contract between the parties Any such contract states the entire obligation of Lantronix The contents of this document shall not become part of or modify any prior or existing agreement commitment or relationship For details on the Lantronix warranty replacement policy go...

Search results

Summary of Contents for SecureLinx

Reviews:

Related manuals for SecureLinx

Brands by name

Popular brands

Lantronix SecureLinx, User Manual

Search results

Summary of Contents for SecureLinx

Reviews:

Related manuals for SecureLinx

Brands by name

Popular brands