ZPE Nodegrid Bold SR User Manual Download Page 161

Page: 161 / 227

RSA Keys

How to Configure IPSec Host to Host Tunnel with RSA Keys
How to Configure IPSec Host to Site tunnel with RSA Keys
How to Configure IPSec Site to Site Tunnel with RSA Keys

Certificates

How to Configure IPSec Host to Host Tunnel with Certificate
How to Configure IPSec Host to Site Tunnel with Certificate
How to Configure IPSec Site to Site Tunnel with Certificate

Distribute and exchange configuration files and Keys as required to all nodes

Test the connection

For more detailed instruction on how t use IPSec with the Nodegrid solution, visit our

Knowledge Base

Summary of Contents for Nodegrid Bold SR

Page 1: ......

Page 2: ...User Guide Nodegrid Serial Console Nodegrid Services Router Nodegrid Bold SR Nodegrid Manager...

Page 3: ...a is likely to cause harmful interference in which case the user will be required to correct the interference at his her own expense Canadian Notification This Class A digital apparatus complies with...

Page 4: ...Services Router Rack Mounting Network Connection Connecting Power Cord s Connecting Target Devices Connecting Serial Target Devices Connecting IP Target Devices Connecting to a Nodegrid Connection via...

Page 5: ...re Serial Devices CLI Service Processor Devices Add Service Processor Devices WebUI Add Service Processor Devices CLI Devices with SSH Add Devices with SSH WebUI Add Devices with SSH CLI Console Serve...

Page 6: ...scovery of Virtual Machines Auto Discovery of Virtual Machines WebUI Auto Discovery of Virtual Machines CLI Auto Discovery of DHCP Clients Auto Discovery of DHCP Clients Web UI Auto Discovery of DHCP...

Page 7: ...t Login logo image Login Banner Utilization Rate Console Port Power Supplies Network Boot PXE Date and Time Logging Custom Fields Dial Up System Maintenance Shutdown and Reboot Software Upgrade Factor...

Page 8: ...rts Backplane Ports VPN SSL VPN SSL VPN Client SSL VPN SERVER IPSEC VPN Authentication Methods Pre shared Keys RSA Keys X 509 Certificates Connection Scenarios Host to Host Host to Site Site to Site H...

Page 9: ...d Settings Enable Cloud Automatic Enrollment License Pool Peer Management Auditing Settings Data Logging Events Destinations File Syslog SNMP Trap Email Notification Monitoring Customizing a Monitorin...

Page 10: ...mit a Support Ticket Updates and Patches Configuring Virtual Serial Port vSPC on VM Servers DC Power Fundamentals Case of 48VDC supply Case of 48VDC supply AC Power Serial Port Pinout Safety Quick Ins...

Page 11: ......

Page 12: ...Introduction The Nodegrid 4 0 User manual covers the Nodegrid Platform version 4 0 and the supporting units like the Nodegrid Serial Console Series Nodegrid Services Router and the Nodegrid Bold SR...

Page 13: ...rid Serial Console S Series NODEGRID SERIAL CONSOLE S Series is made to fit any modern and legacy mixed environment With auto sensing ports you can use the S Series Console Servers within any environm...

Page 14: ...e Dual AC 100 240 VAC 50 60 Hz Dual DC 40 63 VDC Power consumption 45 W typical Physical Front Rear mounting brackets Size L x W x H 443 x 312 x 43 mm 17 4 x 12 3 x 1 7 in 1U Weight 4 9 kg 10 8 lb dep...

Page 15: ...odegrid Serial Console R Series NODEGRID SERIAL CONSOLE R Series is made to fit into major hardware environments like Cisco Arista Dell Palo Alto Networks and Juniper R Series Serial Consoles are perf...

Page 16: ...n Type A connector 1 HDMI Power Single Dual AC 100 240 VAC 50 60 Hz Dual DC 40 63 VDC Power consumption 45 W on 96 ports Physical Front Rear mounting brackets Size L x W x H 443 x 312 x 43 mm 17 4 x 1...

Page 17: ...onsole MGMT Interface USB USB 3 0 Nodegrid Serial Console T Series NODEGRID SERIAL CONSOLE T Series is made to fit into environments still utilizing legacy devices and can be a direct replacement of t...

Page 18: ...n Type A connector 1 HDMI Power Single Dual AC 100 240 VAC 50 60 Hz Dual DC 40 63 VDC Power consumption 45 W on 96 ports Physical Front Rear mounting brackets Size L x W x H 443 x 312 x 43 mm 17 4 x 1...

Page 19: ...ions and network function virtualization NFV capabilities Nodegrid Services Router NODEGRID SERVICES ROUTER is a modular open platform appliance designed for software defined networking SDN out of ban...

Page 20: ...USB 2 0 1 HDMI Power Single Dual AC 100 240 VAC 50 60 Hz Dual DC 36 75 VDC Power Consumption 90W typical Physical Front Rear mounting brackets Size L x W x H 438 x 332 x 43mm 17 2 x 13 1 x 1 7 in 1U...

Page 21: ...USB USB 3 0 RST Reset button 10s system reset 10s configuration factory reset and system reset Port Description Slot 4 Slot for Module depending on the Model Slot 5 Slot for Module depending on the M...

Page 22: ...Serial RJ45 Serial Rolled port max 230 400 bps 16 Port USB USB 2 0 interfaces Type A M 2 Cellular Antenna For upto 2x 4G LTE modems M 2 SATA For upto 2x mSATA storage modules Storage For 2 5 SATA HDD...

Page 23: ...which can be divided into 2 Storage cards or in one M 2 SATA card The Secure Isolated Mode allows for the managment of the cards as if they would be located in a normal Slot but the network traffic is...

Page 24: ...ype A 1 Wi Fi optional 2 Cellular Slots with Dual SIM Optional 1 VGA port Power 12 VDC via external 100 240 VAC 50 60 Hz adapter 12 VDC via external 48 VDC adapter Power consumption 25 W typical Physi...

Page 25: ...RST Reset button 10s system reset 10s configuration factory reset and system reset Port Description PWR IN Power Socket for external Power Supply Monitor VGA Interface ETH0 Network Interface WAN USB 2...

Page 26: ...4 GB RAM min 32 GB HDD Interfaces min 1 Gigabit Ethernet interface Supported Hypervisors VMWare ESX Linux KVM Oracle Virtualbox Linux OS Nodegrid Manager provides you with a unified solution to contr...

Page 27: ...e unit in the box for quick instructions on how to start your box What s in the Box Each unit is shipped with multiple accessories The below table lists the content of the box Installation of Modules...

Page 28: ...unused slot needs to be covered with a blanking panel Note The Nodegrid Services Router supports a maximum of 2 SATA drives which can be divided into 2 Storage cards or in one M 2 SATA card The Secur...

Page 29: ...d Services Router NSR xxxx xxx Active Back Front air in Nodegrid Bold Services Router BSR xx xxxx Passive N A Install the rack mounting brackets with provided screws 5 for each bracket to the Nodegrid...

Page 30: ...E On the Nodegrid Services Router with PoE support the 2nd power supply is used to provide power for the PoE feature and can not be used to provide redundancy for a power outage After all the power su...

Page 31: ...if you have any questions on connecting your serial device to the unit please contact ZPE Systems Technical Support for assistance Connecting IP Target Devices Note To avoid EMC issues use good quali...

Page 32: ...fault IP address of 192 168 160 10 The unit can be accessed using a browser on https DHCP ASSIGNED IP or on https 192 168 160 10 alternatively can the unit be accessed with an ssh client Connection vi...

Page 33: ...ation Nodegrid Manager software is installed from an ISO file The installation procedure is a three stage process Creating a virtual machine Booting from the ISO file CD in order to install the softwa...

Page 34: ...our Nodegrid Manager virtual machine and select as Guest OS family Linux and Guest OS version Other Linux 64 Bit then click Next Select the data storage volume on which you wish to create for the new...

Page 35: ...PU 2 Memory 4GB hard disk 32GB SCSI Controller LSI Logic Parallel network adapters 2 of type E1000 click Next Note the values are minimum settings and should be adjusted as needed Click Finish to comp...

Page 36: ...D icon and select the location of Nodegrid Manager ISO file in your system Reboot the virtual machine by clicking on CTL ALT INSERT in the console area The virtual machine console server software will...

Page 37: ...al machine and automatically reboot the system in order to start Nodegrid Manager Click ENTER to boot the image or wait for the image to boot automatically After booting the image your new copy of Nod...

Page 38: ...ot and the default password is root The root user has SHELL access to the Linux OS but not to the Web Interface By default Nodegrid Platform is set up with DHCP IP configuration enabled Note The Nodeg...

Page 39: ...on the Nodegrid Platform and appropriate settings are available in the same menus Define Static IP Address Web UI Navigate to Network Connections Click on the Interface which should be configured Prov...

Page 40: ...P_ADDRESS ipv4_bitmask BITMASK ipv4_gateway GATEWAY admin Nodegrid ETH0 commit admin Nodegrid cd settings network_connections ETH0 admin Nodegrid ETH0 set ipv4_mode static admin Nodegrid ETH0 set ipv4...

Page 41: ...llow the same steps for other interfaces as required ipv4_gateway 10 0 0 1 ipv4_dns_server ipv4_dns_search ipv6_mode address_auto_configuration ipv6_dns_server ipv6_dns_search admin Nodegrid ETH0 comm...

Page 42: ...administrators to administrate the Nodegrid Cloud feature Security The Security menu provide configuration options which controls user access and general security of the Nodegrid platform Auditing Th...

Page 43: ...latform for example Firmware updates backups and restores and licenses settings The folder provides access to the system security auditing and managed devices settings and configuration options CLI Th...

Page 44: ...wed with the show command before they get saved and activated with the commit command That changes are not active yet and require to be saved is indicated in the CLI by a sign in front of the command...

Page 45: ...tion Changes made to the configuration of the Nodegrid platform through the Shell can have a negative impact on the general workings of the platform API The Nodegrid platform provides a RESTful API wh...

Page 46: ...ed devices as well as review their current device status and search for target devices The displayed target devices will be determent by the user s permissions as well as by the current state of Nodeg...

Page 47: ...a power on on the target devices through a connected Rack PDU or IPMI device The Reset option will perform a power cycle on the target devices through a connected Rack PDU or IPMI device The Power St...

Page 48: ...se connect target name Example Note Only console sessions or sessions which provide a text based interface can be started from the CLI After a connection is established the user use the Escape sequenc...

Page 49: ...mode a Eca changes the current session to read write mode f Ecf forces the current session to read write mode z Ecz disconnect a specific connected user session Ec print this message Power Control opt...

Page 50: ...ch have been associated with a device by an administrator The device information can be displayed in the Access view for a specific device by clicking on a target name in the Web UI or by navigating t...

Page 51: ...e The Table view is the only view which is available on the CLI Table View The table view allows for easy access to all target device and their device sessions It provides a table view which outlines...

Page 52: ...like Nodegrid name city name data center name row and rack and others The View section offers filters based on location and device types More advanced search options are available through the Search...

Page 53: ...ws you to see the current status of your devices on a global map to get a complete overview of all targets and Nodegrid units in a Cloud The Map View allows displaying precise location details down to...

Page 54: ...mation and target devices they require Device Search The Device Search is available on all Device views and provides an easy method to search and filter the Target devices in each view The Device Sear...

Page 55: ...ows limit of the Search String to a specific Field Name The Search filed supports the following keywords Note The keywords AND OR and NOT are case sensitive and or not will be identified as search str...

Page 56: ...sults 4 results page 1 of 1 admin nodegrid search show name status action IPMI RPDU Device_Console_SSH Device_Console_Serial admin nodegrid access search PDU IPMI search PDU IPMI results 4 results pag...

Page 57: ...h and supports the same keywords The Search is available from all screens and allows easy access to all target devices and target sessions admin nodegrid search search PDU AND NOT IPMI search PDU AND...

Page 58: ...have their status changed to unlicensed While their information will be retained in the system the unlicensed devices will not show up in the access page preventing the user from connecting to them On...

Page 59: ...Devices menu The menu offers the options to enable disable configure and reset devices connected to physical ports add delete and configure devices connected through a network connection rename exist...

Page 60: ...gacy and Cisco and connection speed Configure Serial Devices WebUI Navigate to Managed Devices Devices Click on the port or select the port and click on Edit Multiple Ports can be selected Confirm the...

Page 61: ...possiable values are None default Odd or Even flow_control possiable values are None defualt Software Hardware data_bits possiable values are 5 6 7 8 default stop_bits possiable values are 1 rs 232_s...

Page 62: ...devices show name ttyS2 type local_serial address_location coordinates web_url launch_url_via_html5 yes baud_rate 9600 parity None flow_control None data_bits 8 stop_bits 1 rs 232_signal_for_device_st...

Page 63: ...the system For the purpose of this example provide the following information Enter the name of the server you want to add Enter the IP address of the service processor Make sure the IP address is reac...

Page 64: ...id cd settings devices admin nodegrid devices add admin nodegrid devices set name IPMI admin nodegrid devices set type ipmi_2 0 admin nodegrid devices set ip_address 192 168 10 11 admin nodegrid devic...

Page 65: ...s time See Device Settings for more details Add Devices with SSH CLI Navigate to settings devices use the add command to create a new device use the set command to define the following settings name t...

Page 66: ...nabled ports will be added to the platform The Nodegrid supports the following features for these devices Console Session Data Logging Custom Commands Web Sessions Power Control through Rack PDU Add C...

Page 67: ...select a type that matches the console server Possible values are console_server_acs console_server_acs6000 console_server_lantronix console_server_opengear console_s erver_digicp_ Enter username and...

Page 68: ...le_server_digicp_ ip_address username and password of the device or select Ask During Login option if you want to provide user credentials during the login time endpoint should be defined as appliance...

Page 69: ...ress username and password of the device or select Ask During Login option if you want to provide user credentials during the login time endpoint should be defined as serial_port port_number should be...

Page 70: ...dded to the platform The Nodegrid supports the following features for these devices KVM Session Web Sessions Power Control through Rack PDU Add KVM Switches WebUI Navigate Managed Devices Devices clic...

Page 71: ...he Nodegrid platform In the Type field select a type that matches the KVM switch Possible values are kvm_dsr kvm_mpu kvm_aten kvm_raritan Enter username and password of the KVM switch or select Ask Du...

Page 72: ...ls during the login time endpoint should be defined as appliance save the changes with commit Optional settings which control the display and behavior of the device can be adjusted at this time See De...

Page 73: ...ed as the port number save the changes with commit Optional settings which control the display and behavior of the device can be adjusted at this time See Device Settings for more details Note Ports c...

Page 74: ...ntrol feature needs to be supported by the Rack PDU Check the manual of the Rack PDU if the feature is available on a specific model Rack PDUs WebUI Navigate Managed Devices Devices click the Add butt...

Page 75: ...ing these interface is typically very slow It is therefore recommended to use SNMP for the communication with the Rack PDU if possible Navigate Managed Devices Devices Click on the Name of the newly a...

Page 76: ...ave Note Use SNMP details which provide read and write access With Read Only credentials can the Nodegrid Platform not control the power outlets The Rack PDU Outlets will be automatically discovered t...

Page 77: ...unication with the Rack PDU if possible Navigate to settings devices device name commands outlet Change the protocol to SNMP Navigate to settings devices device name managment Enable SNMP and select t...

Page 78: ...Web Session Custom Commands Add Cisco UCS WebUI Navigate Managed Devices Devices click the Add button to add a device to the system Enter the name of the Cisco UCS Blade to be added Enter the IP addre...

Page 79: ...During Login option if you want to provide user credentials during the login time save the changes with commit Optional settings which control the display and behaviour of the device can be adjusted a...

Page 80: ...ck PDU Add Netapp WebUI Navigate Managed Devices Devices click the Add button to add a device to the system Enter the name of the appliance you want to add Enter the IP address of the device Make sure...

Page 81: ...s with commit Optional settings which control the display and behaviour of the device can be adjusted at this time See Device Settings for more details admin nodegrid cd settings devices admin nodegri...

Page 82: ...d a device to the system Enter the name of the appliance you want to add Enter the IP address of the device Make sure the IP address is reachable by the Nodegrid platform In the Type field select a ty...

Page 83: ...mmit Optional settings which control the display and behaviour of the device can be adjusted at this time See Device Settings for more details Navigate to settings devices Device management use the se...

Page 84: ...Nodegrid supports the following features for these devices MKS Sessions for VMWare machines only Virtual Serial console session for VMWare machines only Console session for KVM machines only Power Con...

Page 85: ...ing Virtual Serial Port vSPC on VM Servers Add VMWare Virtual Machines WebUI Define a VM Manager Navigate to Managed Devices Auto Discovery VM Managers Click on Add to define a new VM Manager Provide...

Page 86: ...ame has to match the name on the hypervisor Optional enter the IP address of the Virtual Machine In the Type field select a type that matches the Virtual Machine type Possible values are virtual_conso...

Page 87: ...vices use the add command to create a new device use the set command to define the following settings name type possiable values are virtual_console_vmware optional ip_address as of teh target device...

Page 88: ...Save button Add KVM Virtual Machines CLI Create a Device Navigate to settings devices use the add command to create a new device use the set command to define the following settings name or the virtu...

Page 89: ...e being detected based on data logging and event logging by simulating events and checking if any notification was created Verify that the device is in the desirable authorization group with correct a...

Page 90: ...d Devices Devices click the Add button to add a device to the system Enter a name of the template you want to add Enter 127 0 0 1 for the IP address In the Type field select a type that matches the co...

Page 91: ...ide a list of ports which should be scanned examples are 1 3 5 10 20 The Host or VM Identifier parameter can be used to further apply a filter if a value is provided then part of the port name has to...

Page 92: ...er and KVM Switch ports CLI Create Template Device Navigate to settings devices use the add command to create a new device use the set command to define the following settings name type possiable valu...

Page 93: ...Discovery Rule Navigate to settings auto_discovery discovery_rules use the add command to create a Discovery Rule use the set command to define the following settings rule_name for the Discovery Rule...

Page 94: ...Nodegrid Platform This includes appliances which support Telnet SSH ICMP Console Servers KVM Switches or IMPI protocols besides others Appliances can be discovered through 3 separate method s which ca...

Page 95: ...n IP Range to be scanned with IP Range Start and IP Range End Select and define one or more of the three scan methods for Similar Devices select an existing template which will be used to identify dev...

Page 96: ...t the Network Scan ID which was created The Host or VM Identifier parameter can be used to further apply a filter if a value is provided then part of the port name has to match the value For Action se...

Page 97: ...ine the following settings name type possiable values are device_console ilo imm drac idrac6 ipmi1 5 impi2 0 ilom cimc_ucs netapp infrabox pdu ip_address as 127 0 0 1 set username and password or sele...

Page 98: ...and ip_range_end set enable_scanning to yes to enable the scan define one or more of the three scan methods to use similar_devices set device to match one of the existing devices or templates to use p...

Page 99: ...ated earlier save the changes with commit admin nodegrid cd settings auto_discovery discovery_rules admin nodegrid discovery_rules add admin nodegrid discovery_rules set rule_name Network_Scan admin n...

Page 100: ...n time Select as Mode Disabled this will ensure that the device is not displayed in the access page click the Save button Optional settings which control the display and behaviour of the device can be...

Page 101: ...ode Discovered Discard discovered Devices In the Clone from field select the template device which was created earlier Click on Save to create the rule Define a VM Manager Navigate to Managed Devices...

Page 102: ...stem this can take a few minutes Click on the newly created and connected VM Manager Enable Discover Virtual Machines option to configure the Virtual Machine discovery option define as a minimum a Dat...

Page 103: ...d devices set mode disabled admin nodegrid devices commit Create Discovery Rule Navigate to settings auto_discovery discovery_rules use the add command to create a Discovery Rule use the set command t...

Page 104: ...ne the following settings vm_server Provide the VCenter ESXi IP or FQDN define username and password adjust the html_console_port if needed save the changes with commit admin nodegrid cd settings auto...

Page 105: ...DHCP Server for details on how to setup the DHCP Server feature Auto Discovery of DHCP Clients Web UI Create Template Device Navigate to Managed Devices Devices click the Add button to add a device t...

Page 106: ...hich should be performed when a new device is discovered possible values are Clone Mode Enabled Clone Mode On Demand Clone Mode Discovered Discard discovered Devices In the Clone from field select the...

Page 107: ...now admin nodegrid devices set username admin password admin admin nodegrid devices set mode disabled admin nodegrid devices commit Create Discovery Rule Navigate to settings auto_discovery discovery_...

Page 108: ...eature allows the automatic discovery of a target devices hostnames network or serial base on its login prompt promt or a banner By default it has already some probes and matches for most of following...

Page 109: ...Name access set enable_hostname_detection to yes Commit the changes admin nodegrid settings devices Device_Console_Serial access admin nodegrid set enable_hostname_detection yes admin nodegrid commit...

Page 110: ...nflict This option can be enabled In case multiple devices have the same name then the latestdevice discovered with this name will receive the name Probe is String Text combinations of characters send...

Page 111: ...d write access all other users have read access to the session By enabling the option Read Write Multisession can this behavior be changed so that all connected users have read write access to the ses...

Page 112: ...multisession to yes Optional set write_multisession to yes commit the changes admin nodegrid settings devices Device_Console_Serial access admin nodegrid set multisession yes admin nodegrid set read w...

Page 113: ...ices Device_Console_Serial access admin nodegrid set enable_send_break yes admin nodegrid access set break_sequence break admin nodegrid access commit Escape Sequences Escape Sequences allow users to...

Page 114: ...authentication for the specific devices Note This will disable any Nodegrid authentication methond for this device Ensure that appropiate authentication menchanism are setup on the target device WebU...

Page 115: ...st the port number as needed CLI SSH Navigate to settings devices Device Name access use the set command set allow_ssh_protocol to yes use the set command to define a ssh_port number commit the change...

Page 116: ...ss set tcp_socket_port 15001 admin nodegrid access commit IP Aliases Console sessions can be started from the WebUI CLI or directly through a ssh telnet client In case a ssh client is used the default...

Page 117: ...ngs devices Device_Console_Serial access admin nodegrid set enable_ip_alias yes admin nodegrid access set ip_alias 192 168 10 249 admin nodegrid access set interface eth0 admin nodegrid access set ip_...

Page 118: ...121 9750624 admin nodegrid access set address_location 46757 Fremont Blvd Fremont CA 94538 USA admin nodegrid access commit Web URL A Web URL can be defined for each device The URL will be used for t...

Page 119: ...WebUI Navigate to Managed Devices Devices Click on the Target Device to access its settings Adjust the device icon by click on Select Icon and selecting the desired icon CLI Navigate to settings devi...

Page 120: ...em through a discovery process WebUI Navigate to Managed Devices Devices Click on the Target Device to access its settings Set the device mode by selecting a valid mode from the drop down list Note Di...

Page 121: ...y being added moved and deleted and the Nodegrid managed device license may become available NOTE This feature is only available for IP based devices WebUI Navigate to Managed Devices Devices Click on...

Page 122: ...for a specific device can the device state detection be changed to use the data flow instead In this case the state will be determent based on actaul data be transmitted by the device To use this feat...

Page 123: ...c yes admin nodegrid access commit Run Custom Scripts on Device Status Change This feature allows users to assigned custom scripts to specific device status changes This feature is mostly used in case...

Page 124: ...gs devices Device_Console_Serial management admin nodegrid set on_session_start sessionstart sh admin nodegrid management commit Data Logging Note This feature is available to all text based sessions...

Page 125: ...admin nodegrid logging commit Event Logging Note This feature is available to Service Processor and IPMI sessions By enabling this feature will the system be configured to collcet Service Processor Ev...

Page 126: ...ata and Event Logging features can additionally to collecting information as well create event notifications and based on these events execute custom scripts This is archived by defining alert strings...

Page 127: ...the defined Data Script in case a custom script should be executed WebUI Event Logging Alerts Navigate to Managed Devices Devices Click on the Target Device to access its settings and Navigate to Logg...

Page 128: ...set enable_data_logging_alerts yes admin nodegrid logging set data_string_1 String admin nodegrid logging set data_script_1 ShutdownDevice_sample sh admin nodegrid logging commit CLI Event Logging Al...

Page 129: ...Click on Add to create a new Custom Field Provide a Field Name Provide a Filed Value CLI Navigate to settings devices Device Name custom_fields use the add command to create a new custom field use the...

Page 130: ...rtinging from additional session options to specific custom tasks which should be performed on a device The scripts need to be written and provided either by the customer or through a Proffessional Se...

Page 131: ...to create a new custom field use the set command to define a field_name and field_value commit the changes admin nodegrid settings devices Serial_Console commands admin nodegrid add admin nodegrid co...

Page 132: ...currently utilise the specific device type Preferences The Preference menu allows administrators to define Power Menu and Session Prefernces options further These are global settings and will effect a...

Page 133: ...information about Memory Usage CPU Usage and Disk usage for the current system Discovery Logs The Discovery Logs page shows the logs of the discovery processes set on the Managed Devices setting for a...

Page 134: ...y such as transmitted and received data RS232 signals errors The USB devices page provides details about connected USB devices and initialized drivers Scheduler The Scheduler page provides information...

Page 135: ...port of the Nodegrid is included with the product A managed device is any physical or virtual device defined under Nodegrid for access and control System Preferences Main system preferences are confi...

Page 136: ...below can be edited and customized by the admin Default login banner WARNING This private system is provided for authorized use only and it may be monitored for all lawful purposes to ensure its use A...

Page 137: ...ged for later inspection and auditing The collected data logs will be stored locally to the Nodegrid or remotely depending on the Auditing settings The Data Logging features can create event notificat...

Page 138: ...re ISO file in var sw To upgrade from your local computer connected to the Nodegrid click on Local Computer radio button and select the file to be used for upgrading To upgrade from a remote server cl...

Page 139: ...sing the command line Command output is displayed in the lower part of the page Backup and Restore Save Settings Current configuration can be saved in the Ndegrid itself to the local computer connecte...

Page 140: ...me configure Network Failover between multiple interfaces enable IP Forwarding and to configure a loopback address Hostname and Domain Name The units hostname and domain name can be defined in the Net...

Page 141: ...e will be used to trigger a fallback Interval between retries seconds Number Amount of time which will be waited between tries The system supports configuration of Dynamic DNS for the failover interfa...

Page 142: ...rid Bold SR Nodegrid Services Router backplane0 provides connection to switch ports and sfp0 Nodegrid Services Router BACKPLANE1 Nodegrid Services Router backplane1 provides connection to sfp1 hotspot...

Page 143: ...Static IPv4 IPv6 IPv4 IPv6 address Defines a static IP address if the mode is set to static IPv4 IPv6 bitmask Defines a static IP bitmask if the mode is set to static IPv4 IPv6 gateway Defines a stati...

Page 144: ...nterfaces Bonding Interfaces Bonding interfaces allow the system to bond two physical network interfaces to one interface All physical interfaces in the bond will then act as one interface This allows...

Page 145: ...after a link is detected Value is only valid for MII mode Link Down delay ms Allows defining a delay in ms before an interface is brought down after link down is detected Value is only valid for MII m...

Page 146: ...ated interfaces allow the system to establish an internet connection which is most commonly used for failover options Users and remote systems can as well directly access the device through a mobile c...

Page 147: ...I Client To use the Nodegrid a WiFi client is it required to disable the existing hotspot connection by navigating to its settings and to disable the option Connect Automatically Ensure that the hotsp...

Page 148: ...ng Tree is enabled Max Age sec Allows defining maximum age for packages The setting is used when Spanning Tree is enabled Bridge network interfaces allow the same network configuration options as all...

Page 149: ...IPv6Address This setting allows the definition of IPv4 addresses for the PPP connection the following options are available No Address Local Configuration allows the configuration of a local and remot...

Page 150: ...default value of 100 Setting Description IP Address allows the definition of the target hosts IP address IPv4 and IPv6 formats are supported Hostname allows the definition of the targets hostname Ali...

Page 151: ...ration of the DHCP server is a two step process In the first the general DHCP scope and configuration is configured and created In the 2nd step can IP address ranges Network Range be defined which wil...

Page 152: ...and by then changing the PORT VLAN ID to the desired VLAN By doing this the port will automatically be assigned to VLAN and untagged port Note the VLAN needs to exist before the port can be assigned...

Page 153: ...to host site to site and others SSL VPN Nodegrid supports a wide variety of SSL configuration option and the system can act as either an SSL Client or SSL Server depending on the customer configuratio...

Page 154: ...n Password Password CA Certificate CA Certificate file used by the SSL Server Password plus TLS Username Connection Username Password plus TLS Password Connection Password Password plus TLS CA Certifi...

Page 155: ...s settings for the tunnel options available are Network Point to Point Point To Point IPv6 IP Address Network IPv4 Tunnel NetAddr Netmask Allows the definition of an IPv4 network address and network m...

Page 156: ...ertificate to be used Password Server Certificate allows selecting the server certificate to be used Password Server Key allows selecting the private key belonging to the server certificate Password D...

Page 157: ...ailable together with IPSec and the Nodegrid solution Some of these are very easy to implement like Pre Shared keys and RSA keys but offer limited flexibility in larger setups while certificates requi...

Page 158: ...cation of one node to multiple nodes communication limited just to the nodes involved or expanding beyond the directly involved nodes to the networks access able behind the nodes Due to the multitude...

Page 159: ...idual VPN connections between hosts or by specific multi site configurations The later greatly improve scalability and manageability of the connection setup As the name indicates allows a Host to mult...

Page 160: ...the Nodegrid See How to Prepare a Nodegrid Node for IPSec Ensure that one of the authentication methods is prepared How to create Pre shared Keys for IPSec https desk zoho com portal zpesystem sinc k...

Page 161: ...icates How to Configure IPSec Host to Host Tunnel with Certificate How to Configure IPSec Host to Site Tunnel with Certificate How to Configure IPSec Site to Site Tunnel with Certificate Distribute an...

Page 162: ...rs and groups External authentication of users and groups can be done through LDAP AD Tacacs Radius and Kerberos All users have access to all enabled managed devices by default Fine Grain Authorisatio...

Page 163: ...me checkbox To add the user to an available user group choose the group name from the box on the left and then click Add To remove a user group from the box select it and click Remove Click Save Hash...

Page 164: ...nt of days the password has to be valid for before it can be changed Default value 0 Password Expiration Max Days Number Maximum amount of days a password can be valid for before it has to be changed...

Page 165: ...the group has been created to change its properties and permissions click on the group name Add local users to a group Go to Security Authorization to display all groups Click on the name of the group...

Page 166: ...are Upgrade and Reboot System Grants Permission to perform system upgrades and reboots Configure System Grants administrative rights to change the system configuration Configure User Account Grants pe...

Page 167: ...ustom Session Timeout True False Enable a custom session time Timeout seconds Number Session timeout in seconds Email Events to Email Address list of email address to which events will be send Assign...

Page 168: ...Multiple devices can be added at the same time and the access permissions can be set together Note access permissions to control power outlets are granted through the Outlets permissions and not thro...

Page 169: ...e Permission to access monitoring features Sensors Data True False Permission to read sensor data Custom Commands True False Permission to execute custom commands Assign power outlet permissions Acces...

Page 170: ...o an internal group Authentication providers can be added deleted modified in the Security Authentication section The section will display all currently configured authentication providers and allows...

Page 171: ...sent unencrypted On is recommended This feature needs to be supported by the Server Global Catalog Server True False When enabled that the provider will use an Active Directory Global Catalog Server...

Page 172: ...dentifier For Active Directory this is memberOf by default Search Filter Search Filter following the LDAP implementation Field Value Status True Fallback if denied access True Remote Sever 192 168 1 1...

Page 173: ...on how to setup LDAP and Active Directory can be found under How to Configure Active Directory or LDAP Authentication Provider TACACS Terminal Access Controller Access Control System Plus TACACS is a...

Page 174: ...ult value is raccess Secret Confirm Secret Secret Timeout Number Communication timeout in seconds Default value 2 Retries Number Amount of retries before connection fails TACACS Version V0 V1 V0_V1 V1...

Page 175: ...ceType attribute association to local authorization group True False Allows the assignment of Radius Service Types to Nodegrid local groups Service Type Login Nodegrid group name Service Type Framed N...

Page 176: ...te Server IP address Realm Domain Name Kerberos realm name Domain Name domain name Kerberos Kerberos is a computer network authentication protocol that uses tickets to allow nodes communicating over a...

Page 177: ...LISHED RELATED INVALID one or multiple States can be selected Security Firewall Nodegrid acts as a Firewall when configured to do so by an administrator There are six built in default chains three for...

Page 178: ...achable Protocol Unreachable Network Prohibited Host Prohibited Administratively Prohibited TCP Reset Protocol Numeric TCP UDP ICMP Protocol Numeric Protocol Number Protocol Number Protocol TCP Source...

Page 179: ...ble Network Unreachable Host Unreachable Protocol Unreachable Port Unreachable Fragmentation Needed Source Route Failed Network Unknown Host Unknown Network Prohibited TOS Network Unreachable TOS Host...

Page 180: ...on port TRUE FALSE Log Level Debug Info Notice Warning Error Critical Alert Emergency Log Prefix Log Prefix String Log TCP Sequence Numbers TRUE FALSE Log Options From The TCP Packet Header TRUE FALSE...

Page 181: ...nable Virtualization Services TRUE FALSE Needs to be Enabled in order to run NFV s or Docker apps Both features require licenses Cloud TCP Port Port Number Default value 9966 Enable Automatic Cloud En...

Page 182: ...ll be available to the user and the user will be able to access them without restriction Enable Autodiscovery TRUE FALSE This feature allows the Auto Discovery of managed devices on the network DHCP l...

Page 183: ...value 5 Rescue Mode requires authentication TRUE FALSE After the feature is enabled the Rescue Mode will require authentication through a local user account like root Setting Value Description SSH al...

Page 184: ...g Value Description TLSv1 2 TRUE FALSE Default value Enabled TLSv1 1 TRUE FALSE Default value Enabled TLSv1 TRUE FALSE Default value Disabled Cipher Suite Level High Medium Low Custom Default value Me...

Page 185: ...ettings In this section the Cloud feature and the additional services Perr Management and License Pool can be enabled and configured Note The Cloud feature requires a software license for each node in...

Page 186: ...ch are potentially Nodegrid units as the system will send continually invitations to all IP s until a Nodegrid unit was found on a specific IP and it was added to the Cloud This way the Coordinator wi...

Page 187: ...0160127 is o The page lists all Nodegrid systems in the Cloud Select desired nodes that have the Management Status as Idle If the status shows disabled it means that the Nodegrid has Peer Management f...

Page 188: ...Trap and Syslog It also allows data logging and events logging to be stored locally remotely via NFS or sent to a Syslog server Data Logging The Data logging feature allows capturing the data stream...

Page 189: ...blank Setting Values Description Each of these event categories can be configured to send the events to any of the 4 event destinations or to none Event Destinations are File This can be local File s...

Page 190: ...e provided Addresses need to be separated by a comma IPv4 Address or Hostname TRUE FALSE By default is disabled IPv6 Remote Server IP address One or multiple IP addresses can be provided Addresses nee...

Page 191: ...NMP trap to an existing NMS system The Nodegrid system supports SNMP v2 and 3 for traps The MIB files for the Nodegrid system are available together with the firmware files Note SNMP3 INFORM messages...

Page 192: ...1 Trap Version Version 2c Version 3 SNMP version to be used Version 2c Community community name Version 3 User Name user name Version 3 Security Level noAuthNoPriv authNoPriv authPriv Version 3 Authen...

Page 193: ...rt TCP port to be used Default port is 25 Username Username Password Password Confirm Password Password Destination Email email address target email address to which the events will be sent to Start T...

Page 194: ...directory according to the protocol used to collect the monitoring data either SNMP or IPMI etc collectd templates snmp etc collectd templates ipmi Any new file in these directories will automatically...

Page 195: ...SNMP OID prefix that will be walked to retrieve a list of names that will be associated with the corresponding values For example in a PDU this could be the outlet name If Table is false The name of...

Page 196: ...before persisting it Data pdu_in_cur Type current Table true Instance 1 3 6 1 4 1 476 1 42 3 8 40 20 1 20 Values 1 3 6 1 4 1 476 1 42 3 8 40 20 1 130 Scale 0 01 Data The host entry in an SNMP template...

Page 197: ...igate on the specific device to the Management section Enable and configure the required monitoring protocol like SNMP or IPMI Enable Monitoring and assign the template and assign the collection inter...

Page 198: ...oard feature is only available through the WebUI Exploring Data Points This section is not required but it will describe how it can be verified that the collected data are stored and to learn more abo...

Page 199: ...e The instance of the plugin collecting the data if the plugin requires it Present iin the aggregation plugin collectd_type temperature fanspeed humidity counter percent timeleft voltage current power...

Page 200: ..._location Address coordinates Coordinates ip IP address mac MAC address The MAC address of the device if known alias IP address alias groups list of groups The authorization groups which have granted...

Page 201: ...tions to display and aggregate data The following sections cover a small subset of the options available and aim to be a starting point in the creation process of custom visualizations Line Charts Lin...

Page 202: ...tive Click on the Arrow to the left of Y Axis to expand it Select Average for Aggregation and value for Field Click on X Axis Select Date Histogram as Aggregation Leave Field and Interval as default I...

Page 203: ...ptionally associate a label by clicking on the settings icon provide a label Click on Add Filter to add another element to the visualization Repeat these steps to add all desirable elements Click on t...

Page 204: ...rements for different although related entities such as the outlets of a PDU Note Review the Line Chart section before continuing with the Area Chart Click on Visualize Select a Visualisation Style to...

Page 205: ...points fields but they can also refer to fields associated with the device in Nodegrid such as type IP address authorization groups custom fields and more For example to collect the current provided b...

Page 206: ...et to custom fields The resulting visualization would look like this Filters can be added to display the values of only one Rack PDU by using the IP address Additional filters can be used as needed al...

Page 207: ...of one or more visualizations They can be changed or new Dashboards can be created The following steps outline how a new Dashboard can be created Click on Dashboard Click on the new dashboard icon Cl...

Page 208: ...ed If applicable filters can be added to the dashboard Click on the save icon Provide the dashboard name and then click on save Inspecting a Dashboard From this point on can be opened and viewed follo...

Page 209: ...g a search expression in the dashboard filter The selected dashboard will show up The display time frame can be adjusted by clicking on the clock icon Selecting a new time frame It is possible to auto...

Page 210: ...y options Note The applications feature requires additional licenses to be installed The Virtualization service is by default disabled and needs to be enabled under Services Docker Applications Docker...

Page 211: ......

Page 212: ...nload following the below steps Navigate to Applications Images Click on Add Provide the image which should be downloaded specific versions can be downloaded by using the sign Click on Save the image...

Page 213: ...e of the Docker container CPUs NUMBER Amount of CPU s which will be assigned to the container Memory MB NUMBER Amount of RAM assigned to the container Arguments Arguments Optional Options which will b...

Page 214: ...created Application Network Function Virtualisation The Nodegrid platform allows administrators to run additional NFV s or other Virtual Machines A large variety of configuration options is available...

Page 215: ...on Submit You will receive an Email from ZPE Systems confirming that your request has been received and will be reviewed by our support staff The Email will as well contain your ticket number Please...

Page 216: ...In order to check that go to ESXi Configuration select Security Profile and click on Properties On Remote Access page check the box related to VM serial port connected to vSPC The Outgoing Ports shou...

Page 217: ...e following commands Edit the port section Save the changes and then restart the firewall service For further information on VMware firewall please refer to VMware Knowledge Base DC Power DC power is...

Page 218: ...in personal injury or damage to the equipment Warning Wiring to power from a DC supply may be confusing especially in telecom racks where the supply s positive wire usually of red color goes to the g...

Page 219: ...nd your 48 VDC lead to the 48 VDC terminal and tighten the screws 6 Slide the protective cover back into place over the DC terminal block 7 If your unit has dual input DC terminals repeat steps 3 6 fo...

Page 220: ...Case of 48VDC supply Case of 48VDC supply...

Page 221: ...GND N A 5 GND N A 6 TxD OUT 7 DTR OUT 8 RTS OUT AC Power AC diagram for the NSR models with PoE support Figure NSR Single AC PoE Power Input and Switch Serial Port Pinout The tables below display seri...

Page 222: ...Please refer to the links below for RoHS information Nodegrid Serial Console Nodegrid Services Router Nodegrid Bold SR Data Persistency In normal operation user data resulting from keystrokes managed...

Page 223: ...twork Soft Removal Erase the nonvolatile memory of Nodegrid using the following procedure 1 Shutdown Nodegrid unit and power it off 2 Remove Nodegrid unit from the network disconnect Ethernet cables o...

Page 224: ...l Secure Erase Erase the nonvolatile memory of Nodegrid unit using the following procedure 1 Shutdown Nodegrid unit and power it off 2 Remove Nodegrid unit from the network disconnect Ethernet cables...

Page 225: ...to edit the commands before booting or c for a command line 8 Type erase to permanently erase all data from the system Nodegrid Boot live Secure Erase This action will completely erase the system Usin...

Page 226: ...halted Secure erase of SDD will start now security_password PasSWorD dev sda Issuing SECURITY_SET_PASS command password PasSWorD user user mode high security_password PasSWorD dev sda Issuing SECURITY...

Page 227: ...ZPE Systems Inc 46757 Fremont Blvd Fremont CA 94538 USA www zpesystems com...

Search results

Summary of Contents for Nodegrid Bold SR

Reviews:

Related manuals for Nodegrid Bold SR

Brands by name

Popular brands

ZPE Nodegrid Bold SR, User Manual

Search results

Summary of Contents for Nodegrid Bold SR

Reviews:

Related manuals for Nodegrid Bold SR

Brands by name

Popular brands