manualshive.com logo in svg

Digi Digi CM 16, Руководство пользователя

Поделиться
Скачать
Digi Digi CM 16 Скачать руководство пользователя страница 80

Configure security and authentication

Configure authentication for the web server

Digi CM User Guide

80

6

Choose 

Save & apply changes

.

Configure authentication for the web server

1

Access the web interface.

2

Choose Network > Web server configuration.This screen opens.

3

Choose an authentication method and then 

Save & apply

.

When you are using remote authentication for the web server, such as RADIUS, RADIUS Down-local, 

, LDAP, Kerberos, or Custom PAM, you must also be added to the local database. The user 

password must be different from local authentication; otherwise, the CM will authenticate against 

the local database instead of the remote one. For details, see 

User administration

.

When your password is approved by the authentication server, the Digi CM unit uses the local 

permission rights to provide access privileges for you to ports and the configuration.

LDAP authentication

The Digi CM unit supports authenticating against an LDAP-based database, including LDAP systems 

running on Linux servers as well as Microsoft Active Directory together with the LDAP gateway ADAM 

(Active Directory Application Mode).
If the Digi CM unit authenticates against an LDAP directory, all users must be configured in one 

container. The Digi CM unit will extend the username using the LDAP search base and authenticate 

the user.
In the next example, the domain is called dilbert.com, the LDAP server is at 10.1.1.1, and all users 

with access to the Digi CM unit are located in the container: USA Users
Configure the LDAP authentication as shown here:

Authentication method: LDAP server
First LDAP Server 10.1.1.1
Second LDAP Server
LDAP search base: ou=users,ou=usa,dc=dilbert,dc=com
Domain name for active directory:

If your LDAP database resides on a Microsoft system you also have to configure the Domain name for 

the active directory (dilbert.com in the above example).

Содержание Digi CM 16

Страница 1: ...User Guide Digi CM 8 port 16 port 32 port and 48 port...

Страница 2: ...d warranties of fitness or merchantability for a particular purpose Digi may make improvements and or changes in this manual or in the product s and or the program s described in this manual at any ti...

Страница 3: ...cape menu 17 Description of fields 19 SNMP 19 Save and apply changes 19 One step save and apply changes 19 Two step save to flash and then apply changes 20 Locater light 20 Getting started Introductio...

Страница 4: ...47 Host mode configuration 48 Console server mode 48 Terminal server mode 49 Dial In modem mode 49 Dial In terminal server 50 Configure host mode 51 Supported protocols 52 Serial port parameters 52 DT...

Страница 5: ...o a menu 86 Default menu 86 Port Access menu 86 Microsoft SAC support About the Digi CM Unit s support for Microsoft Windows Server 2003 89 Setup overview 89 Setup the Windows Server 2003 port 90 Comm...

Страница 6: ...d a PC modem 118 Configure for Dial In Terminal Server access 118 Power Controller Introduction 121 Install Power Controller 122 Configure Power Controller 122 Configure the serial port parameters to...

Страница 7: ...u 155 Access the configuration menu 155 Configure SSH 155 Add edit and remove users 156 Add and configure a PC card 156 Host Mode Configuration 157 Port parameters 158 Port Access Menu 158 System logg...

Страница 8: ...2 DB 25 Female console adapter 183 DB 25 Female to RJ 45 pin assignments 183 DB 25 Male modem adapter Digi 8 pack reorder P N 76000670 184 DB 25 Male modem to RJ 45 pin assignment 184 DB 9 Male modem...

Страница 9: ...and passwords 12 Adding port administrators and users 12 Access lists 12 Ways to configure the Digi CM 12 Ways of accessing the Digi CM ports overview 14 Web interface access menu 14 Port Access Menu...

Страница 10: ...led browser It is the first console server to provide a secure graphical user interface for easy out of band management of Microsoft Windows Server 2003 systems It connects to serial console ports usi...

Страница 11: ...g NFS PC card Port Access Telnet SSH Reverse Telnet SSH HTTP HTTPS Port escape menu PC Card Support CompactFlash memory card Wireless LAN adapter 802 11b Ethernet LAN adapter PSTN CDMA modem card See...

Страница 12: ...h two default users root and system admin The user names of the the Digi CM unit are case sensitive Adding port administrators and users The system administrator and root user can add port administrat...

Страница 13: ...Configure network settings on the left navigation bar Directly entering the IP address You can enter the IP address directly into the URL address bar of your browser Of course the IP address must alre...

Страница 14: ...he command line interface Ways of accessing the Digi CM ports overview There are multiple ways to access the native serial ports on the Digi CM unit Web Interface Port Access Menu Direct Port Access C...

Страница 15: ...er Management units or Rackable Systems Management Card The of User column shows how many users are actually connected to the port and the username of the read write user 1 If you are conducting a spe...

Страница 16: ...access menu Access type Permissions Procedure Web interface Any user can use this method 1 Access the web interface 2 Choose Serial port Connection Port access menu connection 3 Log in Telnet Any user...

Страница 17: ...iff sessions Every connection method accommodates port escape You configure the escape sequence per port Follow the procedure to configure the port escape sequence 1 Serial Port Configuration Select t...

Страница 18: ...escape menu Digi CM User Guide 18 To open a sniff session 1 Click Serial port Connection 2 Select the port you want to access 3 Log in with your user name and password 4 Enter the letter of the port e...

Страница 19: ...ves changes but the changes do not take effect until you choose Apply changes The following topics describe how to do each of these operations One step save and apply changes To save and apply changes...

Страница 20: ...ial ports This allows you to receive an e mail or SNMP trap if there is a change in the expected response from the device connected to the serial port If the device goes down or is disconnected for an...

Страница 21: ...Digi CM User Guide 21 Getting started Introduction 22 Assigning IP settings from the console port 22 Configure for SSH 23 Add edit and remove users 25...

Страница 22: ...on the rear panel of the Digi CM unit to a serial port on a workstation using the Ethernet console cable and the appropriate console adapter packaged with the the Digi CM unit The arrow in the follow...

Страница 23: ...s for SSH Options The Port Access Menu and individual ports can be configured for SSH Configure the Port Access Menu for SSH 1 Access the web interface 2 Log in as root admin or a member of the port a...

Страница 24: ...ows one log in directly to the port 5 Click Save apply Configure a Port for SSH 1 Access the web interface 2 Log in as root admin or a member of the port administration group The default password for...

Страница 25: ...s The root user and system administrator can add remove or edit users from the web interface Procedure 1 Access the web interface 2 Log in as root or admin The default password for root is dbps and th...

Страница 26: ...from the system For more information about configuring access rights for specific users see Configure user access privileges About shell options The shell program selection determines the interface y...

Страница 27: ...Digi CM User Guide 27 Install and configure PC cards Introduction 28 Compatible PC cards 28 Add a compact flash card 28 Add a network card 29 Add a wireless LAN card 30 Add a serial modem 31...

Страница 28: ...cards that have been tested with the Digi CM unit visit the Digi support site at digi com products consoleservers digicm productsupport Add a compact flash card A PC card slot is located on the front...

Страница 29: ...IDE Fixed Disk Card The options are EXT2 or FAT formats Select the format option and then select the Format button 5 Enter the appropriate parameters on the configuration page 6 Click Save to flash or...

Страница 30: ...Under the PC card heading click Configuration Note The card is automatically discovered and a configuration menu is displayed 4 Click Configure the detected card 5 Enter the appropriate parameters in...

Страница 31: ...wireless network administrator for the wireless encryption key string 6 Click Save to flash Add a serial modem The modem must first be inserted and installed on your system before it can be used To c...

Страница 32: ...Install and configure PC cards Add a serial modem Digi CM User Guide 32 3 Click Configure the detected card 4 Edit any appropriate parameters and Click Save apply...

Страница 33: ...Digi CM User Guide 33 System status and port logging Introduction 34 System status log 34 Enable the log storage location 35 Configure system logging 39 Configure port logging 40...

Страница 34: ...For basic system information click System status log The parameters for the system status are described in the following list System Information Model No Identification of Digi device Serial No Serial...

Страница 35: ...ory to primary NFS server Primary NFS timeout Interval in seconds before timeout 5 3600 Primary NFS mount retrying interval Interval in second between attempts to connect 5 3600 Enable Disable encrypt...

Страница 36: ...t up an email alert and or an SNMP trap configuration for an NFS server disconnect To configure this feature use this procedure 1 Farther down the NFS Configuration screen at the Email alert configura...

Страница 37: ...erver and select the syslog facility from the drop down menu 5 Click Save apply Enable a compact flash card The compact flash card must be installed and configured on the Digi CM unit before it can be...

Страница 38: ...is dependent on the port count of the Digi CM unit used The log file sizes shown in the following table are maximum settings See also Configure system logging Total flash card size Digi CM System log...

Страница 39: ...ory choice is always available System logging Enable or Disable System log storage location Memory or NFS server System log to SYSLOG server Enable to store system logs to a SYSLOG server System log b...

Страница 40: ...power is turned off You can also define alarm keywords for each serial port and send email alerts or SNMP traps to enable unattended serial data monitoring The following steps configure a serial port...

Страница 41: ...This parameter defines the action taken if a NFS partition of a CF card is mounted or re mounted Enable rename the existing log file by adding a xx with xx being an incremented number Disable keep wri...

Страница 42: ...ons of the system logs To view the port logs on the NFS server for port number 5 enter the following command more mnt nfs port5data Partial logfiles can also be viewed on the web interface by going to...

Страница 43: ...ort 44 Resetting ports 45 Port title 45 Configure Automatic Device Recognition 46 Apply all ports settings 47 Host mode configuration 48 Configure host mode 51 Supported protocols 52 Serial port param...

Страница 44: ...on the host and allows applications to talk to devices across a network as though the devices were directly attached to the host In actuality the devices are connected to a Digi device server or term...

Страница 45: ...ber 2 Click Reset this port Reset Reset individual port settings Individual ports can be reverted to factory defaults 1 Click Serial port Configuration Port number 2 Click Set this port as factory def...

Страница 46: ...t recognized immediately by the Digi CM unit add a rule to the file If Passive detect is selected no probe string is sent to the attached device but the port buffer is analyzed The script tmp cnf pass...

Страница 47: ...esult of the Active or Passive detection process Device detection method If Active is selected a probe string is periodically sent to the device and the response is analyzed If Passive is selected the...

Страница 48: ...Digi CM unit provides four modes of communication between serial devices and remote hosts Console server terminal server dial in modem and dial in terminal server These are described in the following...

Страница 49: ...access servers on the network from a serial terminal RawTCP is also supported with the Terminal Server Mode Dial In modem mode In this mode the Digi CM unit assumes an external modem is attached to t...

Страница 50: ...e dial in terminal server mode the Digi CM unit assumes the serial port is connected to an external modem and is waiting for a dial in connection from a remote site When you dial in using terminal app...

Страница 51: ...ver The options are MS SAC English and MS SAC International which you use to provide a graphic user interface to the Windows Server 2003 Special Administration Console see Microsoft SAC support and Ot...

Страница 52: ...rotocol options The three protocols available are RawTCP SSH and Telnet Choose SSH as the protocol when logging in from an SSH client program to access a port Choose RawTCP when connecting directly to...

Страница 53: ...ing the TCP IP protocol However if it is not full the Digi CM unit will also transfer data dependent on the timeout value selected Specialty Use of Port When Data is Processed in Chunks Some applicati...

Страница 54: ...very user transaction on the remote system Keyword monitoring and alarm while connection is up Configure remote ports To configure a remote port use the following procedure 1 Access the Digi CM unit s...

Страница 55: ...the port number the specific port number is defined on the Host mode configuration page SSH to the port name SSH to the IP and the port number the specific port number is defined on the Host mode conf...

Страница 56: ...s and notifications Introduction 57 Configuring SMTP alerts 57 SNMP information 58 Traps 58 Configure SNMP 59 Manage the SNMP protocol 60 Configure port event handling 60 Configure alerts for Automati...

Страница 57: ...nit supports both versions 1 and 2 of the SNMP protocol The main function of SNMP on the Digi CM unit is to allow a system administrator to query remote devices for information Configuring SMTP alerts...

Страница 58: ...the port level The following table shows where the trap is under Serial port Configuration on the web interface trap name configure options and the trap functions The MIBs for login traps can be foun...

Страница 59: ...ach time the network connection comes up EnableLoginTrap Determines whether the SNMP agent generates a trap for each login Note Trap values override all other configuration information meaning all oth...

Страница 60: ...S or SNMP browser However before the NMS or SNMP browser can access the data the Access control settings must list the IP address of the host from which the browser is executed See the preceding graph...

Страница 61: ...Alerts and notifications Configure port event handling Digi CM User Guide 61 5 Choose Save apply 6 Choose Port event handling The following page appears...

Страница 62: ...is any text string that will trigger an alert when it traverses the serial port Configure alerts for Automatic Device Recognition ADR Before configuring the alerts for Automatic Device Recognition be...

Страница 63: ...Digi CM User Guide 63 User administration Administer users 64...

Страница 64: ...iguration Access lists allow access to the ports and are created by defining the privileges of the lists Access Lists manage rights of multiple users at the same time Multiple users with the same righ...

Страница 65: ...Spelling is not verified against the local user database This allows you to add externally configured users that only exist in the RADISU LDAP or other central databases Remove a user 1 Check the box...

Страница 66: ...er is assigned Groups include Root System Admin Port Admin and User See User groups for more information Password Password to assign to the user This must conform to the rules stipulated above for a u...

Страница 67: ...and authentication Introduction 68 Configure network IP filtering 68 Configure User Access Control 72 Security Profile 76 Authentication 78 Configure authentication methods for port access 79 Configu...

Страница 68: ...ity parameters per network port or password The Digi CM unit supports several authentication methods including Local RADIUS TACACS LDAP Kerberos The Kerberos module is not part of the normal firmware...

Страница 69: ...IP Filtering rules Telnet console TCP IP port 23 SSH console TCP IP port 22 Web configuration TCP IP port 80 The fields are described next Interface The name of the network interface through which a...

Страница 70: ...her hosts try to access You can specify either one port using a single value or a range of ports in this form port1 port2 where port1 defines the lowest port and port2 the highest port Chain rule Dete...

Страница 71: ...rt23 The Invert option specifies that the rule applies to all addresses except those listed The rule says to Drop traffic from all addresses not listed 3 Define access to the Digi CM unit using HTTP p...

Страница 72: ...ding users see User administration Note Users do not need to be authenticated locally they can be users on any configured authentication server Using Access lists you can add rights to a single user o...

Страница 73: ...e on the remote authentication server or configured locally The username is case sensitive In the next example three users are configured on the Digi CM unit Jeff Tim and Paul To give Tim and Paul rea...

Страница 74: ...tice that Everyone has more access than Jeff does Note The usernames and passwords on the Digi CM unit are case sensitive Notice Everyone has access to Port Monitor and Power while Jeff has access to...

Страница 75: ...e else is using the port The Digi CM unit supports multiple concurrent sniff sessions Type of users Access types How to permit or restrict Only specific users have access Permitted Users Access type i...

Страница 76: ...erial port Display data direction arrows Enable Disable Displays arrows to indicate the direction of data to or from the server When the second user accesses the port the global Port escape menu is di...

Страница 77: ...n hard wired serial dial up modem or both In such situations the Ethernet connection is used only for reports and alerts SSHv1 SSHv1 Secure Shell Version 1 SSHv1 uses server and host keys to authentic...

Страница 78: ...gth passwords can be 8 255 characters long and must include three of these four categories of characters English uppercase characters A Z English lowercase characters a z Base 10 digits 0 9 Non alphab...

Страница 79: ...To configure the Digi CM unit for authentication do the following 1 Access the web interface 2 Under the Serial port heading choose Configuration 3 Choose All or an Individual port Authentication 4 F...

Страница 80: ...you to ports and the configuration LDAP authentication The Digi CM unit supports authenticating against an LDAP based database including LDAP systems running on Linux servers as well as Microsoft Act...

Страница 81: ...usr 2 on the Digi CM unit 2 Use an scp client like WinSCP to copy data to the usr2 directory or download the ftp client for the Digi CM unit from support digi com 3 Make sure the module is flagged to...

Страница 82: ...Digi CM User Guide 82 Custom and default menus Introduction 83 Make custom menus 83 Default menu 86...

Страница 83: ...ports Custom menus can only be configured via the web however they can only be accessed via the shell command line Make custom menus Before making custom menus plan the kind of menus and menu items yo...

Страница 84: ...dd users Create menu names To make a custom menu do the following 1 Access the web interface 2 Custom Menu Configuration 3 Enter the Menu Name to assign and click the Add Menu button The menu is added...

Страница 85: ...reate new submenu Assign a name for a new submenu that this menu item will be assigned or linked to Go to existing submenu Choose an existing submenu from the drop down menu that this menu item will b...

Страница 86: ...d 3 Choose a menu for a user by selecting a menu from the drop down Assigned Menu list 4 Choose Save apply Default menu Port Access menu The Port Access menu is a flat one level menu showing all ports...

Страница 87: ...port to connect to the Digi CM unit initiates a connection to this port using the appropriate protocol Telnet of SSH You can also change your own password by using the P Key If the Digi CM unit is co...

Страница 88: ...C support About the Digi CM Unit s support for Microsoft Windows Server 2003 89 Setup the Windows Server 2003 port 90 Setup the Digi CM Unit for SAC support 90 Access the Windows Server 2003 Console p...

Страница 89: ...and line are available from a graphical user interface GUI SAC features accessible from this interface include Reset and shutdown Show performance values like memory utilization Show and configure IP...

Страница 90: ...ort com id baud 115200 where com is the COM port to which console traffic will be redirected is the is the number of the boot entry The port speed is set to the recommended rate although you can use a...

Страница 91: ...ply 8 Configure serial port communication settings by doing the following a Choose Serial port parameters from the menu b Adjust settings as required This includes ensuring that the Baud rate matches...

Страница 92: ...Choose Serial port Connection A screen similar to the following appears 3 Click on the title of the port to which the Windows Server 2003 console port is connected Note If support for Windows Server 2...

Страница 93: ...2003 Shutdown Shuts down the Microsoft Server 2003 Caution This switches off the server and you can no longer access it remotely Performance Provides access to Microsoft Server 2003 status informatio...

Страница 94: ...KVM Introduction 95 Use Virtual KVM with Remote Desktop protocol 96 Use Virtual KVM with VNC protocol 99 Use Virtual KVM with X Window System Protocol and XManager software 102 Virtual KVM Assistant 1...

Страница 95: ...iguration This diagram shows the Digi CM managing a Linux SuSE 9 2 system a Windows 2003 system and an HPUX system Virtual KVM protocols This table lists the Virtual KVM protocols and the client softw...

Страница 96: ...stem through Virtual KVM using Remote Desktop Protocol Configure To set up Virtual KVM with Remote Desktop protocol follow this procedure 1 Access the Digi Passport Web interface and log in 2 Choose S...

Страница 97: ...rogram drop down list select Windows remote desktop connection 7 If you are not using IP automatic detection enter the IP address 8 Click the Save Apply button Note If you are using Remote Desktop con...

Страница 98: ...icon 2 Click OK in each of the three Java confirmation request windows The applet first checks whether the optional Virtual KVM Assistant is installed on the system Then If the applet is installed it...

Страница 99: ...cation is in the search path on your server See Install programs for Virtual KVM Use Virtual KVM with VNC protocol This section describes how to Configure Virtual KVM with VNC Protocol Connect to a sy...

Страница 100: ...e Virtual KVM with VNC protocol Digi CM User Guide 100 3 Double click the port you want to configure A window similar to this one opens showing the serial port number and title 4 Select the Virtual KV...

Страница 101: ...connect through the Connection window and a Virtual KVM connection is configured you now see The terminal monitor button which connects to the serial console A mouse button next to the monitor icon wh...

Страница 102: ...normal behavior if the applet does not find the Virtual KVM assistant The application starts and you see a message that the connection succeeded The Virtual KVM VNC Connection opens 3 Enter your user...

Страница 103: ...th X Window System Protocol and XManager Software follow this procedure 1 Access the Digi Passport Web interface and log in 2 Choose Serial Port Configuration You see this window 3 Choose the port you...

Страница 104: ...tor button which connects to the serial console A mouse button next to the monitor icon which connects to the Virtual KVM graphical interface To connect through Virtual KVM using X Window System Proto...

Страница 105: ...nter your user name and password and click OK If the application does not start check to make sure that the application is in the search path on your server See Install programs for Virtual KVM Virtua...

Страница 106: ...indows XP 2000 NT Linux Users need to download the program to use it The Digi Passport java applet automatically detects the program if it is present and in your path Install programs for Virtual KVM...

Страница 107: ...ream To get to the VGA video stream do either of these steps Install additional software tsmmc msc on your XP system At the command line change the command in Virtual KVM from RDC to tsmmc msc The VGA...

Страница 108: ...ry Usage notes Follow the distribution specific instructions for enabling VNC support on your Unix or Linux Server Xmanager Client software needed The Xmanager software is available for free 30 day ev...

Страница 109: ...Digi CM User Guide 109 Rackable Systems management card Introduction 110 Setup the Digi CM Unit to support the Rackable Systems management card 110...

Страница 110: ...offers a graphical web based user interface to manage the Rackable Systems Management Card Setup the Digi CM Unit to support the Rackable Systems management card To set up the serial port to provide a...

Страница 111: ...om the Digi CM Unit s User Interface 1 Access the Digi CM unit s web interface 2 Under the Serial Port heading choose Connection A screen similar to the following appears 3 Click on the icon in the M...

Страница 112: ...er by sending a 500ms reset signal to the server Connect Spawn the Java Telnet applet or the local Telnet SSH application to connect directly to the port LED Mgmt LED Management To control the LED in...

Страница 113: ...rrent temperature inside the Rackable Systems Server Power delay Time in seconds before the server starts up after applying power 0 98 seconds 99 means no power on delay Power sense The power sense op...

Страница 114: ...Digi CM User Guide 114 Rackable Systems management card Introduction 115 Configure for dial in modem access 115 Add a PC modem 118 Configure for Dial In Terminal Server access 118...

Страница 115: ...elnet or SSH client to a pre defined server RawTCP is also an option for dial in users For more information on the different types of Host mode configuration see Host mode configuration Configure for...

Страница 116: ...See your modem user manual for more information Callback For security reasons the callback feature can be activated If callback is enabled the Digi CM unit does not accept any incoming calls After th...

Страница 117: ...st started Calling to 1234444567 07 16 2004 12 45 22 Modem connected through Port 15 07 16 2004 12 45 22 Port 16 Modem Test succeeded In this example a modem connected to port 16 is calling another mo...

Страница 118: ...The host mode Dial In Terminal Server is identical to the host mode Terminal Server but allows you to configure a modem init string In this mode an incoming modem connection is automatically connected...

Страница 119: ...accessed is automatically connected to a system on the network Protocol The protocol that will be used to establish the connection to Destination IP port The options are SSH RawTCP and Telnet Inactivi...

Страница 120: ...r Introduction 121 Install Power Controller 122 Configure Power Controller 122 Set alarms and thresholds 123 Outlet configuration 124 User access for Power Controller 125 Power Controller management 1...

Страница 121: ...gured through the Digi CM unit for non serial devices The second scenario is a serial device such as a router or server managed through a port on the Digi CM unit with its power supply mapped through...

Страница 122: ...turn it on Note The DIP switches on the Digi RPM unit are used for cascading Make sure that the dip switches of the first unit are set to off For more information about cascading refer to Cascade mult...

Страница 123: ...the port number it is connected to You have the ability to change this title in step 5 if needed 4 Click Add controller 5 After the controller is detected automatically you can correct the number of p...

Страница 124: ...controller click Outlets 2 Click the outlet number to configure 3 Select the serial port number that controls the device connected to the Digi CM unit if any If the port number has a title it will app...

Страница 125: ...ontroller The Digi CM unit can be configured to allow all users or specific users access to the power controller feature as well as restricting specific users to the power controller feature User Acce...

Страница 126: ...entered Note The screen above shows outlets 1 2 control power to the Sun Server configured on port 1 of the Digi CM unit Outlets 3 and 4 are not serial devices Gilligan has been designated the specif...

Страница 127: ...pply Note Gilligan does not have access to Outlet 4 Power Controller management The Power Controller Management option allows you to change outlet settings or get a quick update of the power controlle...

Страница 128: ...pending on what you want the outlet to do Cascade multiple Digi RPM units The Digi RPM power controllers can be cascaded when used with the Digi CM unit The DIP switches on the front panel of the Digi...

Страница 129: ...Power Controller Cascade multiple Digi RPM units Digi CM User Guide 129 The following table shows all possible IDs that can be configured on the Digi RPM unit...

Страница 130: ...Power Controller Cascade multiple Digi RPM units Digi CM User Guide 130...

Страница 131: ...Digi CM User Guide 131 Port clustering Introduction 132 Configure port clustering 132...

Страница 132: ...figuration To set up the Digi CM unit for port clustering you will need to Configure all the Digi CM serial ports Assign one Digi CM unit as the master clustering device all other Digi CM units defaul...

Страница 133: ...n mode Local authentication is the slave independently authenticating all port access Master authentication is the master performs port authentication Users do NOT need to be defined on the slave unit...

Страница 134: ...unit to change configuration A quick access method to connect to the slave Source port This is the port number that you would access to get to the slave on the master unit The first slave port default...

Страница 135: ...Access the cluster ports You can connect to the slave port using the web Telnet or SSH client You can access the port access menu or custom menu of each slave device or connect directly to each slave...

Страница 136: ...ring Digi CM User Guide 136 SSH 1 Click on the port with SSH protocol 2 Login 3 Enter the port escape sequence listed on the page Depending on your access rights you can sniff read only or monitor rea...

Страница 137: ...ration Introduction 138 Upgrade the firmware 138 Configuration management 138 Automatically upgrade the Digi CM Unit s firmware or configuration using TFTP 140 Reset factory defaults 143 Set the date...

Страница 138: ...al machine or CF card if configured 4 Choose the Browse button and locate the firmware download 5 Choose Upgrade The Digi CM unit will automatically reboot when the upgrade is complete Note Do not pow...

Страница 139: ...tion Periodic used to set the save option per your time frame 10 minutes after last change as described Location CF card Primary NFS server User space Send via email options for where to save the conf...

Страница 140: ...sm During boot the Digi CM unit can verify a hash file and determine if it needs to download upgrades from the TFTP server There are multiple ways to configure the TFTP upgrade function DHCP The DHCP...

Страница 141: ...figuration file with one line per entry Each entry defines one upgrade action There are three actions defined 1 Upgrade firmware 2 Upgrade configuration 3 Upgrade any file 4 Execute an application The...

Страница 142: ...The file tmp cnf cnfversion is a hidden file Example config tar gz DigiPassport48 v1 6 0 After the firmware configuration is upgraded the Digi CM unit boots again A sample hash file can be downloaded...

Страница 143: ...face The web interface provides the option of retaining the IP settings To use the web interface to reset the Digi CM unit do the following 1 Access the web interface 2 System administration Configura...

Страница 144: ...NTP server choose Enable the NTP server s IP address the Time offset and the Date and Time fields or To use the internal battery fill in the Date and Time fields only Note If you change your time zone...

Страница 145: ...System administration Configure a host name Digi CM User Guide 145 3 Enter the name you want to assign the Digi CM unit 4 Choose Save apply...

Страница 146: ...Digi CM User Guide 146 Command line interface Introduction 147 Linux commands 147 Important file locations 148 Example scripts 150 User administration 152...

Страница 147: ...listing of commands and does not detail what the commands do or give their particular parameters If you need more information see the man pages on a Linux system Two commands that are very important f...

Страница 148: ...and unmounts the cnf file If the configuration files are modified in the tmp cnf file and the configuration is saved to flash saveconf the unit mounts the cnf file and compresses the tmp cnf to cnf cn...

Страница 149: ...os information keywords Keywords for alert configuration menu All custom menu information xml files pap secrets PAP auth via PPPoE passive detect Passive auto detection of serial devices passwd User p...

Страница 150: ...Disabling Telnet is just shown as one example 1 Create a new script file usr2 run user that includes the commands you want iptables A INPUT p tcp dport 23 j DROP 2 Run the following command to make t...

Страница 151: ...null do sleep 5 done usr sbin inetd 4 Reboot reboot Note If you factory default the unit the usr2 rc user script file is moved to usr2 rc user old and the default rc user file will be restored Example...

Страница 152: ...ptions are CLI Command Line Interface Config menu Port access menu or Custom menu bin bash CLI bin editconf Configuration menu bin vts master Port access menu bin menu Custom menu These are the four t...

Страница 153: ...ve the locator feature without a Find Me LED To identify another Digi CM unit all the LEDs blink when the feature is activated The file and syntax for the locator LED is bin blinkled start stop Exampl...

Страница 154: ...iguration 157 Port parameters 158 Port Access Menu 158 System logging 159 Configure SNMP 160 Configure SMTP 161 Network IP filtering 161 Port IP filtering 162 Sniff sessions 163 Authentication 165 Upl...

Страница 155: ...ministrator can only change serial port parameters The configuration menu enables the authorized users to configure the Digi CM unit with the same functionality as is available with the web interface...

Страница 156: ...nistration and then choose an operation to perform Add Remove or Edit 2 Configure the user as required 3 Use the ESC key to return to the main configuration menu 4 Choose Exit and apply changes Add an...

Страница 157: ...searches for the card and displays information on the product model number and type of card 4 Use the ESC key to back out to the main configuration menu 5 Choose Save Changes Host Mode Configuration...

Страница 158: ...2 Choose Serial Port Configuration an individual port number or 0 zero for all ports 3 Enter the desired parameters for each menu item 4 Use the ESC key when all parameters are entered to return to th...

Страница 159: ...part process First the device being used to record the system logs must be configured Secondly system logging must be configured for the system under System status and log System logs can be saved to...

Страница 160: ...Enter the desired parameters for the menu items 4 Use the ESC key when all parameters are entered to return to the main menu 5 Choose Save changes Configure SNMP To configure SNMP from the configurat...

Страница 161: ...2 Choose Network configuration SMTP configuration 3 Enter the desired parameters for the menu items 4 Use the ESC key when all parameters are entered to return to the main menu 5 Choose Save changes N...

Страница 162: ...ey to return to the main menu 5 Choose Save changes Port IP filtering To configure the Digi CM unit for Port IP filtering do the following 1 Access the configuration menu 2 Choose Serial port configur...

Страница 163: ...ss the configuration menu 2 Choose Serial port configuration 3 Choose an individual port number or 0 zero for all ports User access control 4 Choose User Access Control 5 Choose Enable Disable Sniff M...

Страница 164: ...next user with port access rights to enter the port will be given the option to take over the main session This user is given the option to take over the main session by either terminating the first...

Страница 165: ...cation 4 Choose Authentication type 5 Use the ESC key to return to the main menu 6 Choose Save changes r reboot device using power switch only if power management is available on this port p power dev...

Страница 166: ...cate for the HTTPS interface OpenSSL SSLeay Simple CA Usage Install Openssl 1 Download latest openssl package 2 Install openssl package cd work tar xvzf openssl 0 9 7c tar gz cd openssl 0 9 7c config...

Страница 167: ...me full name Your State Minnesota Locality Name eg city Minneapolis Organization Name eg company Digi International Organizational Unit Name eg section Enter Common Name eg YOUR name Bob Alou Email Ad...

Страница 168: ...following extra attributes to be sent with your certificate request A challenge password Press Enter Do not enter any other characters An optional company name Press Enter Do not enter any other chara...

Страница 169: ...erify signed certificate newcert pem is generated ls demoCA key pem newcert pem newreq pem req pem Make certificate for the Digi CM Unit 1 Removing headings in newcert pem file cd work openssl 0 9 7c...

Страница 170: ...onfigured for a dial in modem To configure a serial port for a dial in modem do the following 1 Access the configuration menu 2 Choose Serial Port Configuration 3 Choose an individual port number and...

Страница 171: ...ges Clustering By default clustered slave devices are configured using the Telnet protocol and port parameters of the following bps 9600 data bits 8 parity none stop bits 1 flow control none When the...

Страница 172: ...Select Enable configuration 9 Select Auto Configuration 10 Choose Exit and apply changes Firmware upgrade Before upgrading firmware from the configuration menu you should have Downloaded the firmware...

Страница 173: ...store the unit to its factory defaults The options are restoring all factory defaults or restoring all factory defaults except IP settings To restore your unit to the factory defaults do the following...

Страница 174: ...hernet cable packaged with the Digi CM unit and attach the DB 9 adapter The arrow in the following graphic points to the Console Port 2 Set up a terminal emulation program such as HyperTerminal using...

Страница 175: ...w control none 3 Reboot or power on the Digi CM unit 4 Press the ESC key within three seconds of applying power to the device 5 The following screen appears 6 Choose Firmware upgrade by entering 3 The...

Страница 176: ...Configuration menu Access the Boot Loader program Digi CM User Guide 176 10 Choose Exit and boot from flash...

Страница 177: ...de 177 Hardware information Introduction 178 Hardware specifications 178 LED indicators 180 About serial port cabling 180 Serial port pinouts 181 Cable adapters 181 Ethernet pinouts 185 Rack mounting...

Страница 178: ...10 to 90 non condensing 10 to 90 non condensing Power supply Internal 100 240VAC 50 60 Hz 1 2A max Internal 36 72 Vdc 1 2A max Power consumption 0 37A 120VAC 45W typical 150W max 0 4A 48Vdc 19W typic...

Страница 179: ...at embedded SDRAM 64 megabytes 64 megabytes Flash memory 8 megabytes 8 megabytes Dimensions unpackaged 17 x 8 5 x 1 75 431 8 cm x 215 9 cm x 44 5 cm 17 x 8 5 x 1 75 431 8 cm x 215 9 cm x 44 5 cm Dimen...

Страница 180: ...25 male adapter provides a modem connection See the cable adapter information that follows later in this chapter Note The cable length restrictions common to RS 232 cables apply to the Digi CM serial...

Страница 181: ...ions show cable adapter pin outs Additional adapters can be purchased from Digi in quantities of 8 DB 25 Male console adapter Digi 8 pack reorder P N 76000672 DB 25 Male to RJ 45 connector pin assignm...

Страница 182: ...ts 6 TxD Connected to 3 RxD 7 DTR Connected to 6 DCD 8 DSR 8 RTS Connected to 5 CTS RJ 45 Signal DB 9F Signal 1 CTS Connected to 7 RTS 2 DSR Connected to 4 DTR 5 DCD 3 RxD Connected to 3 TxD 4 GND Con...

Страница 183: ...ck reorder P N 76000673 DB 25 Female to RJ 45 pin assignments RJ 45 Signal DB 25M Signal 1 CTS Connected to 4 RTS 2 DSR Connected to 20 DTR 5 DCD 3 RxD Connected to 2 TxD 4 GND Connected to 7 GND 6 Tx...

Страница 184: ...P N 76000670 DB 25 Male modem to RJ 45 pin assignment RJ 45 Signal DB 25M Signal 1 CTS Connected to 5 CTS 2 DSR Connected to 6 DSR 3 RxD Connected to 3 RxD 4 GND Connected to 7 GND 5 DCD Connected to...

Страница 185: ...unit uses a standard Ethernet connector that is a shielded and compliant with AT T 258 specifications RJ 45 Signal DB 9M Signal 1 CTS Connected to 8 CTS 2 DSR Connected to 6 DSR 3 RxD Connected to 2 R...

Страница 186: ...A 70 Connect equipment to a DC supply source reliably earthed that is electrically isolated from the AC source Directly connect the equipment chassis to the DC supply system grounding electrode conduc...

Страница 187: ...Digi CM User Guide 187 Certifications Safety 188 Power and ground Digi CM 48 single and dual power 190 Emissions 190 Immunity 190 Solaris ready 190...

Страница 188: ...informations de date et d heure Si vous devez r initialiser plusieurs reprises les informations d heure et de date apr s avoir allum l unit Digi CM remplacez la batterie ATTENTION Une nouvelle batteri...

Страница 189: ...elsewhere Locate the DC supply source within the same premises as the equipment Route away and secure all DC input wiring from sharp edges to prevent chaffing as well as provide strain relief Provide...

Страница 190: ...tective earthing connection Emissions US FCC part 15 Class A Canada ICES 003 Class A Europe EN55022 Japan VCCI Australia AS3548 Immunity Europe EN55024 1998 EN61000 3 2 2000 EN61000 3 3 1998 Solaris r...

Отзывы:

Нет отзывов

Бренды по названию

Популярные бренды

Загрузить еще бренды