Vertiv Avocent ACS800 Installer/User Manual Download Page 35

Page: 35 / 100

PARAMETER

VALUE

Incoming Interface

internal

Source Address

local_lan

Outgoing Interface

forti2acs

Destination Address

ipsec_vpn_range

Schedule

always

Service

ALL

Action

Firewall / Network Options

NAT

Use Outgoing Interface Address

Enabled

Security Profiles

Antivirus, Web Filter, Application Control, SSL Inspection

All OFF

Traffic Shaping

Shared Shaper, Reverse Shaper, Per-IP Shaper

All OFF

Logging Options

Log Allowed Traffic

Security Events

Enabled

Comments

Enable this policy

Enabled

Table 3.8 Firewall Policy 2 Configuration

From the

Policy &

Objects

tab, click

Policy - IPv4

to create Firewall Policy 3 with the following settings, then

click

OK.

PARAMETER

VALUE

Incoming Interface

any

Source Address

all

Outgoing Interface

any

Destination Address

all

Action

DENY

Logging Options

Log Violation Traffic

OFF

Table 3.9 Firewall Policy 3 Configuration

Creating a tunnel on the console server

To create a tunnel on the console server:

From the sidebar of the

Expert

tab, click

Network - IPSec(VPN)

, then click

Add

3 Accessing the Console System via the Web UI

Summary of Contents for Avocent ACS800

Page 1: ...Avocent ACS800 8000 Advanced Console Server Installer User Guide ...

Page 2: ...bility and disclaims all liability for damages resulting from use of this information or for any errors or omissions Refer to other local practices or building codes as applicable for the correct methods tools and materials to be used in performing procedures not specifically described in this document The products covered by this instruction manual are manufactured and or sold by Vertiv This docu...

Page 3: ...tatus 6 2 Getting Started 7 2 1 Installation 7 2 2 Turning On the Console System 7 2 2 1 AC power 7 2 2 2 DC power 7 2 3 Configuring a Console System 8 2 3 1 Using Telnet or SSH 9 3 Accessing the Console System via the Web UI 11 3 1 Wizard Mode 11 3 2 Web User Interface Overview for Administrators 13 3 3 Expert Mode 14 3 3 1 Access 14 3 3 2 System Tools 15 3 3 3 System 18 3 3 4 Network 22 3 3 5 IP...

Page 4: ...vering a Console System Password 77 Appendix E SSH Setup Allowing RSA Keypair Authentication Instead of a Username Password 78 Appendix F Port Information for Communication with the DSView Software 80 Appendix G Accessing a Console System with a DSView Software Installation via Dial up 81 Appendix H Internal Modem 83 Appendix I Regulatory Information Concerning the Analog Modem Installed in This P...

Page 5: ...nstalled or you can use an external modem connected to either a serial or USB port 1 1 Features and Benefits 1 1 1 Access options Secure access is available through the following local analog console port and remote digital IP and dial up options LAN WAN IP network connection Dial up to a factory configured internal modem optional or a modem connected to one of the serial or USB ports Target devic...

Page 6: ...user groups on page 51 1 1 5 Security Security profiles determine which network services are enabled on the console server Administrators can either allow all users to access enabled ports or allow the configuration of group and user authorizations to restrict access You can also select a security profile which defines which services FTP TFTP ICMP IPSec and Telnet are enabled and SSH and HTTP HTTP...

Page 7: ...are Messages about the console server and connected servers or devices can also be sent to syslog servers 1 1 11 Power management The console server enables users who are authorized for power management to turn power on turn power off and reset devices plugged into a connected power distribution unit PDU The power devices can be connected to any serial port Authorized users can also monitor and co...

Page 8: ...he console server 7 Console port and two USB ports on the rear of the console server for additional USB devices 8 LAN ports The ports on the left are for copper interface connections The ports on the right are for fiber interface connections You may connect to either or both network ports for redundancy however only one LAN1 and one LAN2 port may be used at the same time If both LAN1 or LAN2 ports...

Page 9: ...ades and Cisco pin outs 2 LEDs The STATUS LEDis green when the console server is fully booted up and initialized The P1 and P2 LEDs indicate an active power supply P1 is green when Power Supply 1 is on P2 is green when Power Supply 2 is on Table 1 2 Multi Protocol Ports and LED Descriptions Figure 1 3 Typical ACS800 Advanced Console System Configuration 1 Introduction 5 ...

Page 10: ...ply Table 1 3 Typical ACS800 Advanced Console System Descriptions 1 2 1 Serial port LED status Each serial port has two LEDs that illuminate either green or yellow Green LEDs indicate the status for physical connection with a serial port remote connectivity when applicable and data transfer Yellow LEDs indicate whether a serial port is being monitored along with the alert level emergency alert or ...

Page 11: ...power 1 Make sure the console server is turned off 2 Plug the power cable into the console server and into a power source 3 Turn the console server on 4 Turn on the power switches of the connected devices 2 2 2 DC power DC power is connected to a DC powered console server by way of three wires Return RTN Ground GND and 48 VDC For redundancy there are two sets of wires that can be connected to two ...

Page 12: ...s to the DC power source and turn on the DC power source 9 Turn on the console server 10 Turn on the power switches of the connected devices 2 3 Configuring a Console System A console server may be configured at the appliance level through the command line interface accessed through the CONSOLE or Ethernet port All terminal commands are accessed through a terminal or PC running terminal emulation ...

Page 13: ... IP port alias for example 100 0 0 100 and the hostname of the console server or its IP address To use a Telnet client enter the information in the dialog boxes of the client or To use Telnet in a shell enter the following command telnet hostname IP address login username portname device name TCP Port Alias or telnet hostname IP address TCP Port Alias login username or telnet IP Port Alias login u...

Page 14: ... username TCP_Port_Alias hostname IP_address or ssh l username IP_Port_Alias To close an SSH session At the beginning of a line enter the hotkey defined for the SSH client followed by a period The default is or enter the text session hotkey for the CLI prompt and then enter exit Vertiv Avocent ACS800 8000 Advanced Console Server Installer User Guide 10 ...

Page 15: ...are see the Avocent ACS800 8000 Advanced Console Server Command Reference Guide or the Avocent DSView 4 5 Management Software Installer User Guide 3 1 Wizard Mode The Wizard mode is designed to simplify the setup and configuration process by guiding an administrator through the configuration steps An administrator can configure all ports in the CAS Profile and set the Security Profile Network and ...

Page 16: ...Pluggable Device Detection is enabled To disable this subset of pluggable devices clear the Enable Pluggable Storage Devices box Pluggable devices also include the 1 Wire Sensor port which is enabled by default To disable the 1 Wire Sensor port uncheck the Enable 1 Wire Support box 4 Under the Bootp Configuration Retrieval heading uncheck the box es to disable Bootp configuration retrieval and or ...

Page 17: ...ect the Users link in the content area 2 Click a username admin or root and enter the new password in the Password and Confirm Password fields or 3 Click Add to add a user Enter the new username and password in the appropriate fields 4 Optional To force the user to change the default password select the User must change password at next login checkbox 5 Assign the user to one or more groups 6 Opti...

Page 18: ... bar of the web UI when an administrator is in Expert mode 3 3 1 Access All the devices connected to the console server can be viewed from the Access icon To view and connect to devices using the web UI 1 Select Access in the side navigation bar The content area displays the name of the console server and a list of names or aliases for all installed and configured devices the user is authorized to...

Page 19: ...selected in step 2 a Click the radio button next to Remote Server then use the drop down menu to select the protocol of the server where you saved the file b Enter the IP address for the server where the firmware is saved in the appropriate field c Enter the username and password for the server in the appropriate fields d Enter the file directory where the firmware is saved and the filename for th...

Page 20: ...enu to select the protocol of the server where the configuration file is saved b Enter the IP address of the server where the file is saved in the appropriate field c Enter the username and password for the server in the appropriate fields d Enter the path and filename for the configuration file or Restore from a local file by clicking the Local radio button and entering the filename or Restore th...

Page 21: ...server s web UI click System Tools and then click Configuration Integrity 2 Click the Verify Running Configuration radio button 3 Leave the MD5 field blank to verify the running configuration or Enter an MD5 checksum string to verify a known configuration 4 Click Execute HTTPS certificate You can generate a new self signed certificate or download a signed certificate to the appliance from an FTP s...

Page 22: ...es Enabled services FTP TFTP ICMP IPSec SNMP and Telnet SSH and HTTP HTTPS access Enable or disable Bootp Configuration retrieval Bootp interface and enable or disable Live Configuration Retrieval The administrator can select either a preconfigured Security Profile or create a custom profile All the services and the SSH and HTTP HTTPS configuration options that are enabled and disabled for each Se...

Page 23: ...configuration of HTTPD SSHD ADSAP2d and SNMPD files and test the integrity of the FIPS Object Module Once the reboot is complete the console server will accept SSH and HTTPS connections using only FIPS approved ciphers When FIPS is enabled the following restrictions apply For SSH sessions Triple DES CBS and AES 128 192 256 are the only encryption ciphers that will be accepted HMAC SHA1 and HMAC SH...

Page 24: ... time zone 1 Click System Date And Time Time Zone 2 Select Predefined 3 Select the required time zone from the drop down menu and click Save To define custom time zone settings 1 Click System Date And Time Time Zone 2 Select Define Time Zone 3 Enter the Time Zone Name and Standard Time Acronym of your choice 4 Enter the GMT Offset 5 Select Enable daylight savings time if needed 6 Select or enter t...

Page 25: ...n the Login Banner field and click Save Serial viewer By default the console server uses a basic HTML5 serial viewer It also supports a more robust Java based serial viewer An administrator can configure which serial viewer is used for the serial ports and console server NOTE The HTML5 serial viewer supports a maximum of 10 sessions per port with a limit of 48 total sessions To configure the seria...

Page 26: ...e software crashes 4 Using the drop down menu select the console port speed and click Save Information Click System Information to view the console server s identity versions power and CPU information Usage Click System Usage to view memory and Flash usage 3 3 4 Network Click Network to view and configure the Hostname DNS IPv6 Bonding IPv4 and IPv6 static routes Hosts Firewall IPSec VPN and SNMP n...

Page 27: ...used when the primary interface is not available An administrator can also select one of four triggers that enable the failover Primary Interface Down Unreachable Primary Default Gateway Unreachable DSView Unreachable IP Address If the IPSec tunnel has been configured see IPSec VPN on page 26 an administrator can configure the IPSec tunnel to be established over the secondary interface when it is ...

Page 28: ...ination IP Mask Gateway Interface and Metric values shown 2 Click Add 3 Select Default to configure the default route or Select Host IP Or Network to enter custom settings for Destination IP Mask Enter the required Destination IP Mask Bits with the syntax destination IP CIDR in the Destination IP Mask Bits field 4 Enter the IP address of the gateway in the Gateway field 5 Enter the interface name ...

Page 29: ...ption from the Reject with pull down menu the packet is dropped and a reply packet of the selected type is sent Protocol options Different fields are activated for each option in the Protocol pull down menu If Numeric is selected from the Protocol menu enter a Protocol Number in the text field If TCP is selected from the Protocol menu a TCP Options Section is activated for entering source and dest...

Page 30: ...s a secure communication between the console server and a remote network by utilizing a gateway and creating a secure connection between the console server and the gateway The IPSec protocol is used to construct the secure tunnel and provides encryption and authentication services at the IP level of the protocol stack With a console server located on a separate network behind a router it establish...

Page 31: ...ate that was generated from the easy rsa server 2 From the User Device tab click PKI and create a new user named user1 with a CA named CA_Cert_1 Then create a user group named user_group1 and put user1 in that group 3 From the VPN tab click IPSec Tunnels and create a new custom VPN tunnel with the following configuration then click OK 3 Accessing the Console System via the Web UI 27 ...

Page 32: ...e Certificate Name server IKEVersion 2 Peer Options Accept Types Peer Certificate Group Peer Certificate Group user_group1 Phase 1 Proposal Encryption AES128 Authentication SHA1 Diffie Hellman Group 14 Key Lifetime Seconds 86400 Local ID C country S state L city O organization Edit Phase 2 Name name Comments comments Local Address Subnet 0 0 0 0 0 0 0 0 Remote Address Subnet 0 0 0 0 0 0 0 0 Phase ...

Page 33: ... IP Range 10 77 20 100 10 77 20 110 Interface Any Showin Address List Enabled Comments The IP address given to VPN clients that are connecting Table 3 5 VPN Range Configuration 5 From the Policy Objects tab click Objects Addresses to create a Local LAN range with the following settings then click OK PARAMETER VALUE Name local_lan Type IP Netmask Subnet IP Range 192 168 1 0 255 255 255 0 Interface ...

Page 34: ...ivirus Web Filter Application Control SSL Inspection All OFF Traffic Shaping Shared Shaper Reverse Shaper Per IP Shaper All OFF Logging Options Log Allowed Traffic ON Security Events Enabled Comments Comments Enable this policy Enabled Table 3 7 Firewall Policy 1 Configuration 7 From the Policy Objects tab click Policy IPv4 to create Firewall Policy 2 with the following settings then click OK Vert...

Page 35: ... Security Events Enabled Comments Comments Enable this policy Enabled Table 3 8 Firewall Policy 2 Configuration 8 From the Policy Objects tab click Policy IPv4 to create Firewall Policy 3 with the following settings then click OK PARAMETER VALUE Incoming Interface any Source Address all Outgoing Interface any Destination Address all Action DENY Logging Options Log Violation Traffic OFF Table 3 9 F...

Page 36: ...nd select the PKCS12 file To enable IPSec on the console server 1 From the sidebar of the Expert tab click System Security Security Profile 2 Click the Custom radio button under Security Profile 3 Check the Enable IPSec box then click Save NOTE After the Save button is clicked the VPN connection starts automatically if the Boot Action is Start The information is saved and the VPN starts or restart...

Page 37: ...s about to expire Keying Tries Specifies howmany attempts a positive integer or forever should be made to negotiate a connection or a replacement for one before giving up The default is 3 Rekey Margin Specifies howlong before connection expiry or keying channel expiry should attempts to negotiate a replacement begin DPDDelay Specifies the period time interval with which R_U_THEREmessages INFORMATI...

Page 38: ...rnal modem The console server s serial ports may work in several different roles depending on the profile configured for a port Serial ports On the Serial Ports table you can specify the connection profile CAS Dial In Power Dial Out or Socket Client based on the type of connected device and you can clone the port reset to factory defaults enable disable ports or open a serial session The table dis...

Page 39: ...ge 41 m Use the drop down menus to enable or disable log in out multisession notification and informational message notification 5 Click Next or click the Data Buffering link and use the drop down menus to enable and configure data buffering 6 Click Next or click the Alerts link a Click Enable Alerts to enable detection of alerts b Click Add to add an alert string In the Alerts String field enter ...

Page 40: ...8 Click Save Vertiv Avocent ACS800 8000 Advanced Console Server Installer User Guide 36 ...

Page 41: ...ion Default Local Text Session Hot Key Hotkey to suspend the target session and go to the CLI prompt Not available for Raw Default Ctrl Z Note The default escape character for ts_menu is Ctrl X Power Session Hot Key Hotkey to suspend the target session and display Power Management Menu to control the outlets merged to the target Not available for Raw Default Ctrl P Note The default escape characte...

Page 42: ... When the type is set to local specifies where on the local system the data buffering files are stored Options are the built in memory mmcblk0 or connected USB storage and SDcard storage locations Default mmcblk0 Time Stamp When enabled adds the time stamp to the data buffering line for a Local or NFS database Default Disabled Log in out Message Includes special notification for logins and logouts...

Page 43: ...col Available authentications CHAP SRP SHA1 and TLS The configuration of the secrets for CHAP should be done while editing the file etc ppp chap secrets The configuration of the secrets for SRP SHA1 should be done while editing the file etc ppp srp secrets Note EAP authentication is only available with Windows XP operating systems Default None CHAP Configure the CHAP interval CHAP max challenge an...

Page 44: ...ePDUG3 PDUs Geist Geist PDUfamily Enable Speed Auto Detection When enabled detects the speed of the port Default Disabled Polling Rate The interval in seconds to update information from the PDU Default 20 For Avocent Cyclades PDUs Power Cycle Interval The interval in seconds between Off and On actions for the power cycle command Default 15 Syslog When enabled the PDUwill send syslog messages to th...

Page 45: ...dent on the access rights of the user If a user does not have rights to an option that option is not displayed For example Options 0 2 and 5 from the following table are displayed for a user who only has permission to open read only sessions NUMBER OPTION DESCRIPTION 0 Quit Closes the client session 1 Initiate a regular session Opens a read write session 2 Initiate a sniff session Opens a read onl...

Page 46: ...ss fails NOTE The auto discovery process starts when there is variation in the DCD signal from OFF to ON disconnect connect the target s cable turn off on the target and when the configuration of the serial port goes from disabled to enabled and there is a target connected in the port The probe strings will be used to stimulate the server such as r a single carriage return The match strings are re...

Page 47: ...ession access right does not have any effect when using a pool of CAS ports When all ports in the pool are taken the connection to the pool is denied NOTE All ports in the pool must share the same CAS protocol The protocol is validated during the connection to the serial port If the protocol does not match the connection will be denied To configure a pool of CAS ports 1 Click Ports Pool of Ports 2...

Page 48: ... Interface The interface used by the IPv6 Alias Default Eth0 Table 3 15 Pool of CAS Ports Parameters RESTful client The console server supports a programmable RESTful client interface After configuration of RESTful URLs the console server performs from within a serial session menu selected GET and POST operations to pre programmed HTTP HTTPS URLs for server resources on the network NOTE URL option...

Page 49: ...ty Profile then under Serial Devices click the RESTful Menu checkbox and click Save or If port access is controlled by authorization assigned to users groups from the side navigation bar of the Expert tab click Users Authorization Groups a Click the group for which you want to enable the RESTful client b From the side navigation bar click Access Rights Serial c Click the port for which you want to...

Page 50: ...le server through the modem and select a condition for which logging in is allowed perform the following steps a To allow callback connections only select Callback b To allow any connection select Enable 3 To enable OTP authentication select Enable from the OTP Login Authentication menu 4 To enable and select a condition for PPP connections perform the following steps a To allow PPP callback conne...

Page 51: ...ection and click Save 7 Copy the certificates and keys to the etc ppp cert file They must be named server crt the ACS 800 8000 certificate ca crt the Certificate Authority s certificate and server key the ACS 800 8000 asymmetric key Dial out profile To configure the Dial out profile for a serial port with a connected modem 1 Select Ports Serial Ports 2 Click the checkbox for a serial port with a c...

Page 52: ... settings 4 Configure the Socket Client Settings remote server address TCP port and event trigger and click Save PARAMETER DESCRIPTION RJ 45 Pin Out Defines the serial port pinout Status Defines the status of the serial port as either enabled or disabled Default Disabled Speed Defines the speed as 1200 2400 4800 9600 19200 38400 57600 115200 or 230400 Default 9600 Parity Defines the parity as Even...

Page 53: ...ce configuration Storage devices are automatically mounted and configured once detected by the console server unless storage device support is disabled Ethernet cards modems and USB console devices must be configured NOTE Configuration of wireless devices takes effect only after the device is ejected and re inserted To configure a pluggable device 1 From the side navigation bar click Pluggable Dev...

Page 54: ...the first time you access any port After that the port will not require password authentication if Single Sign on Authentication is enabled To set authentication for the console server 1 Click Authentication Appliance Authentication 2 Select the desired authentication server from the Authentication Type drop down menu 3 Select Enable fallback to Local type for root user in appliance console port w...

Page 55: ...ribute to specify the authorization group checkbox enter the authorization group name for up to 15 User Levels 9 Click Save To configure an LDAP S AD authentication server 1 Select Authentication Authentication Servers LDAP S AD 2 Enter the IP address of the server 3 Enter the Base 4 At the Secure drop down menu select Off On or Start_TLS 5 Enter the Database User Name 6 Enter your Database Passwo...

Page 56: ...ion The factory default password for admin is avocent The admin user is a member of the admin group and can configure the console server and ports as well as user and group authorizations root Has the same administrative permissions as the admin user but also has unlimited privileges from the shell The factory default password for root is linux The root user is a member of the admin and shell logi...

Page 57: ...ssued to the user prior to expiration Entering 0 will cause the warning to be issued on the expiration day To disable the warning leave this field empty 7 Enter the desired Account Expiration date YYYY MM DD 8 Click Save To configure password rules 1 Click Users Local Accounts Password Rules 2 If password complexity is desired recommended make sure Check Password Complexity is selected 3 If passwo...

Page 58: ... Members screen listing all members belonging to the admin group default members are admin and root users NOTE When any Group Name is selected both the content area and side navigation bar change The side navigation bar will display specific menu options for Members and Access Rights which include Serial Power and Appliance rights 3 In the side navigation bar click Access Rights Serial or Access R...

Page 59: ...ing in By default the root user belongs to this group This is not a protected group and can be deleted Managing user groups Administrators and members of the admin group can create custom user groups that contain any users To create a custom user group 1 Click Users Authorization Groups The Groups screen is displayed and contains a list of the three default user groups and any additional custom us...

Page 60: ...s the login profile used will be the first enabled login profile based on alphabetical order of the group COMMAND DESCRIPTION p Displays TCP port i Displays local IPv4 assigned to the serial port i6 Displays local IPv6 assigned to the serial port u name Username to be used in the target session e char Escape character used to close the target session Default value Ctrl X l Sorted lists ports and e...

Page 61: ...he Remove button 6 You can specify a custom PDU ID in the field at bottom and assign it a custom PDU ID NOTE The custom PDU ID is for assigning user group authorization to manage PDUs that have not yet been connected to the console server 7 Click Save To assign outlet access for a new custom user group NOTE Assigning outlet access to user groups allows group members to turn outlets on or off and e...

Page 62: ...llowing this syntax group_name Group1 Group2 GroupN For example In the console server configure a new authorization group TACACS_1 and configure the access rights for this group In the TACACS server configure the user regina with the following attribute raccess group_name TACACS_1 Then configure the user special with the following attribute raccess group_name admin During the authentication phase ...

Page 63: ...ccesses a target via the DSView software s serial viewer To configure the map of DSView software access rights to console server access rights 1 Click Users Authorization DSView Access Rights 2 Select the desired access rights and click Save 3 3 11 Event notifications The console server will generate notifications for a variety of events You can configure the console server to direct or store thos...

Page 64: ...e fields 7 Under the Email heading enter the Server Port and Destination Email information in the appropriate fields 8 Under the DSView heading enter the IP address of the DSView server where event notifications will be sent in the DSView server field Enter the syslog server port number for the DSView server the SSH information and the buffer warning information in the appropiate fields 9 Click Sa...

Page 65: ...iting purposes To configure appliance logging 1 Click Enable appliance session data logging 2 Select the destination for appliance session data logs from the pull down menu Choices are Local NFS Syslog and DSView a If using local as the destination use the drop down menu to select the local destination Destination mmcblk0 is the built in flash storage SD card if present and enabled is mmcblk1 USB ...

Page 66: ...anagement PDUs To manage a PDU 1 Select Power Management PDUs 2 Select the checkbox next to the PDU you want to manage 3 Click On Off Cycle Reboot PDU Reset HW Overcurrent Protection or Factory Defaults if desired A confirmation appears Click OK NOTE The power controls On Off and Cycle will be applied to all outlets of the PDU 4 To change the PDU ID click Rename and enter the name in the New PDU I...

Page 67: ...Outlets 3 Click on an outlet number to change its settings Click Save then click Close or Check two or more boxes next to the outlets for which you want to change settings Click Edit to change the settings for the outlets you selected Click Save 4 Click PDU to view and configure PDU settings Click Save when finished 5 Click Phases or Banks a Click on the name of a phase or bank to change its setti...

Page 68: ... name in the Group Name field 5 Click Save To view and change outlet group information 1 Select Power Management Outlet Groups 2 Click the name of the outlet group you want to view or manage 3 To add outlets click Add to add a new outlet to the group Fill the fields and click Save to return to the Outlet Group Details table 4 To delete outlets check one or more boxes next to the outlet s you want ...

Page 69: ...e maximum and minimum temperatures Appendices on page 69 To configure the temperature sensors 1 Click Sensors Appliance Internal to open the Internal page displaying both the CPU and Board temperature sensors 2 In the Maximum Temperature field for either the CPU or Board temperature sensor enter the temperature in degrees Celsius that if exceeded will generate an event notification 3 In the Maximu...

Page 70: ...ion when the humidity crosses a user defined threshold The thresholds for Low Warning Low Critical High Warning or High Critical must be set to allow event generation Additionally the alarm state must be set to Enabled to generate an alert Differential pressure SN DP This sensor type can generate an event notification when the differential pressure crosses a user defined threshold The thresholds f...

Page 71: ...e Active Sessions screen appears and lists all open sessions to the console server by the user s workstation IP 2 Select the checkbox next to the session you want to kill then click the Kill button After a few seconds the Active Session screen will redisplay the open sessions minus the one you killed 3 3 15 Monitoring When you click Monitoring a variety of network and console port information is a...

Page 72: ...column to launch a terminal session with that device Power Management PDUs Outlet Groups Click PDUs to turn on turn off cycle reboot reset the HW overcurrent protection return to factory defaults or rename PDUs connected to the console server Click Outlet Groups to manage groups of outlets on connected PDUs Click UPS to monitor and control connected UPS devices Change Password Change your own pass...

Page 73: ... contact closure sensors Power Information Power Supply Internal 100 240 VAC 50 60 HzOptional Dual entry redundant power supplies 48 VDC option available Power Consumption Nominal voltage 120 VAC Typical 0 17A 20W Maximum 0 25A 30W Nominal voltage 230 VAC Typical 0 1 A 23 W Maximum 0 15A 35W Nominal voltage 48 VDC 20 tolerance Typical 0 5 A Ambient Atmospheric Condition Ratings Operating Temperatu...

Page 74: ...e sensors Digital output connectors providing four output signals Power Information Power Supply Internal 100 240 VAC 50 60 Hz Power Consumption Nominal voltage 120 VAC Typical 80 5mA 3 5W Maximum 306mA 17W Nominal voltage 240VAC Typical 60mA 3 75W Maximum 191mA 17W Ambient Atmospheric Condition Ratings Operating Temperature 4 F to 158 F 20 C to 70 C Storage Temperature 4 F to 158 F 20 C to 70 C H...

Page 75: ... file will be referenced by the setup file that will be created for zero touch provisioning For information on creating and saving a configuration file see Configuration files on page 15 NOTE Parameters in the configuration file will apply to all console servers receiving the file If you do not want a parameter to apply to all console servers for example a host name make sure you comment it out by...

Page 76: ...er In most cases the credentials will be required The username is plain text however the password must be encrypted CONFIG_SERVER_ PASSWORD CONFIG_SERVER_ PROTOCOL The protocol of the server used to host the configuration file Supported protocols include ftp stfp scp and wget Table B 1 Setup File Descriptions Password encryption An encrypted hash of a password should be created for the FIRMWARE_SE...

Page 77: ...nfigure Options 66 and 67 1 Using the Windows Server Manager or DHCP tools snap in Microsoft Management Console MMC open your DHCP server console 2 In the left panel of the DHCP server window click IPv4 3 Right click on Server Options and click Configure Options to configure a global scope or Right click on Scope Options and click Configure Options to configure a single scope 4 Click on Option 066...

Page 78: ...lick New Reservation 4 Enter a name for the reservation the IP address to be assigned to the console server the MAC address for the console server and a description in the appropriate fields NOTE The console server s MAC address can be found on the bottom of console server 5 Under Supported types use the radio button to select either Both or DHCP only 6 Click Add The reserved IP address will be di...

Page 79: ...stem security security_profile to navigate to the security profile level 3 Type set bootp_enabled yes and press enter 4 Type set bootp_interface eth0 and press enter 5 Type set enable_live_configuration_retrieval_ any_time_dhcp_renews yes and press enter 6 Type commit to save the configuration 7 Type cd monitoring zero touch_log to navigate to the zero touch log level 8 Type clear_log Type Yes whe...

Page 80: ...ve it 2 Transfer the saved file to a DHCP server 3 Configure the DHCP server to transfer the configuration file to the console server To reconfigure a console server with bootp 1 Click System Security Security Profile Under the Bootp Configuration Retrieval heading ensure Enabled box is checked 2 Uncheck the Enable Live Configuration box The saved configuration is retrieved and applied on the next...

Page 81: ...nsole server off then on again 3 Press the Spacebar to access the uboot prompt 4 Type hw_boot single and press Enter 5 The console server will boot into single user mode Type passwd and press Enter 6 Enter the new password and confirm 7 Type reboot and let the console server boot normally Vertiv Avocent ACS800 8000 Advanced Console Server Installer User Guide 77 ...

Page 82: ... in to the console server via SSH as the user acsadmin the new user 7 Use the four following commands to install the public key for the acsadmin account on the console server mkdir p ssh touch ssh authorized_keys chmod 600 ssh authorized_keys ssh username linuxclientsystem cat ssh acsadmin id_rsa pub ssh authorized_keys For example for the ssh command ssh adminuser 10 207 24 28 cat ssh acsadmin id...

Page 83: ...Vertiv Avocent ACS800 8000 Advanced Console Server Installer User Guide 79 This page intentionally left blank ...

Page 84: ...Console Server can accept connections from the DSView management software TCP port 3502 https TCP port 3871 adsap2 UDP port 3211 aidp TCP port 22 sshd The following ports in the DSView software can accept connections from the console server TCP port 4122 default SSH server TCP port 4514 default data logging or Syslog server 80 ...

Page 85: ...eived from the serial viewer would route through the DSView server via Ethernet In an error state the DSView server would detect that the normal path to the console server was interrupted and would dial out to the console server pass authentication and establish a PPP connection Packets that would normally pass via Ethernet would instead be routed via PPP Because of the speed differences between E...

Page 86: ...ct the modem 14 Select DSView Settings Dial up and click Push Configuration NOTE The following step is only required if CHAP was selected in the PPP Auth Protocol field in the DSView software Settings Dial up window 15 Log in to the CLI of the console server and access the Linux shell Edit the etc ppp chap secrets and add a line in the format where the first column should have the PPP user and the...

Page 87: ...ating system The modem will automatically accept and process AT commands at most standard DTE Data Terminal Equipment speeds and parity settings For each command issued the modem will respond with a result code to inform you of the modem s status The format of a basic AT command and result code is as follows AT Command CR OK AT Attention Command any valid command CR Carriage Return or Enter key OK...

Page 88: ...ng an outside line through a PBX ATD Return to the command mode after processing the command ATE0 Disables the command echo ATE1 Enables the command echo default ATH0 Hang up ATH1 Forces the modem off hook ATI0 Reports product code ATI2 Reports OK for software compatibility ATI3 Reports the firmware version of the modem Example CX810801 V90 ATL0 Sets the speaker volume off ATL1 Sets the speaker vo...

Page 89: ...ial tone is not detected NO CARRIER will be reported ATX4 Enables monitoring of busy tones Sends all messages default ATZ0 Soft reset AT C0 DCDremains on at all times AT C1 DCDfollows the state of the carrier default AT D0 Ignores DTR AT D1 Enters the escape mode when ON to OFF transition is detected on DTR AT D2 Hangs up assumes command state and disables auto answer upon detecting ON to OFF tran...

Page 90: ...pts six sub parameters MS carrier automode min_tx_rate max_tx_rate min_rx_rate max_rx_rate CR To read the current settings enter AT MS CR MODULATION CARRIER DESCRIPTION Bell 103 B103 300 Bell 212 B212 1200 V 21 V21 300 V 22 V22 1200 V 22 bis V22 2400 or 1200 V 23 V23C 1200rx 75tx or 75rx 1200tx V 32 V32 9600 or 4800 V 32 bis V32B 14400 12000 9600 7200 or 4800 V 34 V34 33600 31200 28800 26400 19200...

Page 91: ...er S3 0 127 ASCII 13 Command terminator CR S4 0 127 ASCII 10 Line feed character S5 0 127 ASCII 8 Backspace character S6 2 255 Seconds 2 Wait time for dial tone detection S7 1 255 Seconds 50 Wait time for carrier S8 0 255 Seconds 2 Pause time for coma in dial string S10 1 255 1sec 14 Loss of carrier to hang up delay S11 50 255 01sec 85 DTMF tone duration S12 0 127 1 50 sec 50 Escape code guard tim...

Page 92: ...nd Ring pins If the current exceeds 150 mA the modem will display the DIGITAL LINE DETECTED result code and then go back on hook The modem will continue to display this result code until normal current is detected on the Tip and Ring pins during an off hook condition The DLG feature will protect the modem in case it is accidentally connected to a Digital Telephone Line H 6 Sleep mode operation The...

Page 93: ...w configured to operate in Japan AT GCI CR Meaning Display current country code GCI 00 Meaning Japan is the current country selected OK To view which countries are available in the modems firmware enter AT GCI CR The modem will display all of the possible two digit country codes available COUNTRY CODE COUNTRY CODE COUNTRY CODE Australia 09 Hong Kong 50 Poland 8A Austria 0A India 53 Portugal 8B Bel...

Page 94: ...OMMAND PARAMETER DESCRIPTION VCID NA Display current VCIDsetting 0 2 VCID 0 Disable caller IDreporting default VCID 1 Enable caller IDwith formatted presentation to the DTE VCID 2 Enable caller IDwith unformatted presentation to the DTE VRID 0 Displays the formatted caller IDof the last received call VRID 1 Displays the unformatted caller IDof the last received call Table H 8 Caller ID Information...

Page 95: ...ures or lack restrictions that may cause the modem to become noncompliant U S A 47 CFR Part 68 Telecom 1 This equipment complies with Part 68 of the 47 CFR rules and the requirements adopted by the ACTA Administrative Council for Terminal Attachments Located on this equipment is a label that contains among other information the registration number and Ringer Equivalence Number REN for this equipme...

Page 96: ...usiness Unit 4991 Corporate Drive Huntsville AL 35805 USA 1 888 793 8763 I 4 Thailand Approval for MT5692SMI This telecom device conforms to NTC1 requirements 1NTC is the National Telecommunications Commission Thailand s telecommunications regulator เครื องโทรคมนาคมและอุ ปกรณ นี มี ความสอดคล องตามข อก าหนดของ กทช I 5 New Zealand Telecom Warning Notice 1 The grant of a Telepermit for any item of te...

Page 97: ...it requirements are dependent on the equipment PC associated with this device The associated equipment shall be set to operate within the following limits for compliance with Telecom s Specifications For repeat calls to the same number There shall be no more than 10 call attempts to the same number within any 30 minute period for any single manual call initiation and The equipment shall go on hook...

Page 98: ...Vertiv Avocent ACS800 8000 Advanced Console Server Installer User Guide 94 This page intentionally left blank ...

Page 99: ...Vertiv Avocent ACS800 8000 Advanced Console Server Installer User Guide ...

Page 100: ... names and logos referred to are trade names trademarks or registered trademarks of their respective owners While every precaution has been taken to ensure accuracy and completeness herein Vertiv Co assumes no responsibility and disclaims all liability for damages resulting from use of this information or for any errors or omissions Specifications are subject to change without notice 590 1536 501C...

Search results

Summary of Contents for Avocent ACS800

Reviews:

Related manuals for Avocent ACS800

Brands by name

Popular brands

Vertiv Avocent ACS800, Installer/User Manual

Search results

Summary of Contents for Avocent ACS800

Reviews:

Related manuals for Avocent ACS800

Brands by name

Popular brands