manualshive.com logo in svg

Lantronix XPort AR, Руководство пользователя, Страница: 86 / 142

Поделиться
Скачать
Lantronix XPort AR Скачать руководство пользователя страница 86

10: Security Settings

XPort AR User Guide

86

3.

Click 

Submit.

 

Note:

You can delete stored settings when the [Delete] link displays in the Current 

Configuration table.

SSH Client Users

You can configure SSH client settings for users. SSH client known users are used by all 
applications that play the role of an SSH client, specifically tunneling in Connect Mode. 
Minimumally, a password or key pair must be configured for a user.

The keys for public key authentication can be created on another device and uploaded to the 
XPort AR or automatically generated on the XPort AR. If uploading existing keys, be sure the 
private key does not get compromised in transit. Upload the data over a secure private network. If 
you are uploading a key, ensure that it is not password protected.

To configure the SSH client users, perform the following steps.

Public DSA Key

Enter the path and name of the existing public DSA key you want to use with 
this known host or use the 

Browse

 button to select the key.

Table 10-3 SSH Client Known Hosts Fields (continued)

Field

Description

Содержание XPort AR

Страница 1: ...Part Number 900 405 Revision F May 2010 XPort AR User Guide ...

Страница 2: ...Online www lantronix com support Sales Offices For a current list of our domestic and international sales offices go to the Lantronix web site at www lantronix com about contact Disclaimer and Revisions The information in this guide may change without notice The manufacturer assumes no responsibility for any errors that may appear in this guide For the latest revision of this product document plea...

Страница 3: ...mments June 2005 A Initial document November 2005 B Added V2 0 software information December 2006 C Added V3 0 information March 2007 D Corrected pin numbers June 2009 E Update to firmware v4 0 0 0R16 May 2010 F Updated for firmware release 5 1 0 0R10 ...

Страница 4: ..._______________________________________________17 Terminal Server Device Management _______________________________________18 Troubleshooting Capabilities ______________________________________________18 Configuration Methods______________________________________________________18 Addresses and Port Numbers ________________________________________________19 Hardware Address________________________...

Страница 5: ...___55 Line Terminal Configuration ______________________________________________56 Host Configuration _________________________________________________________58 8 Configurable Pins Manager 60 Overview ________________________________________________________________60 Default Groups ________________________________________________________60 Custom Groups ___________________________________________...

Страница 6: ...____________95 Protocol Stack ____________________________________________________________98 TCP _________________________________________________________________98 IP ___________________________________________________________________99 ICMP _______________________________________________________________100 ARP ________________________________________________________________101 IP Address Filter_...

Страница 7: ...125 Import Configuration from Filesystem ___________________________________126 Import Line s from Single Line Settings on the Filesystem __________________128 13 Branding the XPort AR 131 Web Manager Customization________________________________________________131 Short and Long Name Customization _________________________________________131 14 Updating Firmware 133 A Technical Support 134 B Bina...

Страница 8: ..._____55 Figure 7 2 Terminal on Line 1 Configuration Web Page___________________________________57 Figure 7 3 Host Configuration Web Page ______________________________________________58 Figure 8 1 CPM CPs Page _________________________________________________________61 Figure 8 2 CPM Groups Page_______________________________________________________64 Figure 9 1 DNS Status and Cache Web Page _____...

Страница 9: ...b Page _________________________________________________113 Figure 11 18 System Web Page____________________________________________________114 Figure 12 1 Email Statistics Web Page_______________________________________________116 Figure 12 2 Email 1 Configuration Web Page__________________________________________117 Figure 12 3 CLI Statistics Web Page ____________________________________________...

Страница 10: ...ble 8 1 CPM CPs Current Configuration Fields and Descriptions _________________________61 Table 8 2 CPM CPs Status Fields and Descriptions______________________________________62 Table 8 3 CPM Group Status Fields and Descriptions ____________________________________63 Table 8 4 CPM Groups Current Configuration Fields and Descriptions _______________________64 Table 9 1 PPP Configuration Fields ___...

Страница 11: ...nfiguration Fields______________________________________________118 Table 12 2 CLI Configuration Fields _________________________________________________120 Table 12 3 XML Export Configuration Fields __________________________________________122 Table 12 4 XML Export Status Fields ________________________________________________124 Table 12 5 Import Configuration from Filesystem Fields ___________...

Страница 12: ...nfigure Ethernet settings 6 Line and Tunnel Settings Instructions for using the web interface to configure lines and tunnels 7 Terminal and Host Settings Instructions for using the web interface to configure terminals and host settings 8 Configurable Pins Manager Instructions for using the Configurable Pins Manager CPM to set up the configurable pins to work with a device 9 Services Settings Instr...

Страница 13: ... and to view its current settings A Technical Support Instructions for contacting Lantronix Technical Support B Binary to Hexadecimal Conversions Instructions for converting binary values to hexadecimals C Compliance Lantronix compliance information Table 1 2 Conventions Used in This Book Convention Description Bold text Default parameters Brackets Optional parameters Angle Brackets Possible value...

Страница 14: ...director Quick Start and Online Help Instructions for using the Lantronix Windows based utility to create virtual com ports Secure Com Port Redirector User Guide Instructions for using the Lantronix Windows based utility to create secure virtual com ports ...

Страница 15: ...ional features above and beyond the original XPort including The Evolution OS operating system Two full serial ports with all hardware handshaking signals or three serial ports without handshaking signals Eleven configurable pins Fully compliant PoE designs by using PoE compliant magnetics and passing through both the used and unused pairs Increased memory 4MB Flash and 1 25MB RAM Applications The...

Страница 16: ... XML data transport and configurability Really Simple Syndication RSS information feeds Enterprise grade security with SSL and SSH Comprehensive troubleshooting tools Software Features Modem Emulation In modem emulation mode the XPort AR can replace dial up modems The unit accepts modem AT commands on the serial port and then establishes a network connection to the end device leveraging network co...

Страница 17: ...r many RSS feeds at one time More powerful than simple email alerts RSS uses XML as an underlying Web page transport and adds intelligence to the networked device while not taxing already overloaded email systems Enterprise Grade Security Evolution OS provides the XPort AR the highest level of networking security possible This data center grade protection ensures that each device on the M2M networ...

Страница 18: ...et that lets you troubleshoot problems quickly and easily Available from the Web Manager CLI and XML interfaces the diagnostic tools let you View critical hardware memory MIB II buffer pool and IP socket information Perform ping and traceroute operations Conduct forward or backup DNS lookup operations View all processes currently running on the XPort AR including CPU utilization and total stack sp...

Страница 19: ...n and every UDP datagram is defined by a destination and source IP address and a destination and source port number For example a Telnet server commonly uses port number 23 The following is a list of the default server port numbers running on the XPort AR TCP Port 22 SSH Server Command Mode configuration TCP Port 23 Telnet Server Command Mode configuration TCP Port 80 HTTP Web Manager configuratio...

Страница 20: ...2 Overview XPort AR User Guide 20 Bar code Part number Serial number which is the hardware address also referred to as Ethernet or MAC address Figure 2 1 XPort AR Product Information Label ...

Страница 21: ...forms a network device search To perform another search click the Search button 2 Expand the XPort folder by clicking the plus symbol next to the folder icon The list of available Lantronix XPort devices displays 3 Select the XPort AR by expanding its entry and clicking on its hardware MAC address to view its configuration 4 Click the Device Details tab on the right The current XPort AR configurat...

Страница 22: ...d manually If the IP address was assigned dynamically the following fields appear Obtain via DHCP with values of True or False Obtain via BOOTP with values of True or False Subnet Mask Shows the subnet mask specifying the network segment on which the XPort AR resides Gateway Shows the IP address of the router of this network There is no default Number of Ports Shows the number of serial ports on t...

Страница 23: ...guration tab on the DeviceInstaller window To access the Web Manager perform the following steps 1 Open a standard web browser Lantronix supports the latest version of Internet Explorer Mozilla Suite Mozilla Firefox Safari or Opera 2 Enter the IP address of the XPort AR in the address bar The IP address may have been assigned manually using DeviceInstaller or the serial port see the XPort AR Demo ...

Страница 24: ...eb Manager XPort AR User Guide 24 The Home page is also the Device Status page which appears after you log into the Web Manager It also appears when you click Status in the Main Menu Figure 4 1 XPort AR Web Manager Home Page ...

Страница 25: ... of the web page and contains information or instructions associated with the page The center of a web page contains the following additional sections At the top there are links to configurable fields The links often indicate the configurable field for example Line Host or Tunnel In the middle you can select or enter new configuration settings Some pages display statistics or status in this area r...

Страница 26: ...che 67 Email Shows email statistics and lets you clear the email log configure email settings and send an email 116 Filesystem Shows file system statistics and lets you browse the file system to view a file create a file or directory upload files using HTTP copy a file move a file or perform TFTP actions 95 FTP Shows statistics and lets you change the current configuration for the File Transfer Pr...

Страница 27: ... to log and the server and ports to which the syslog should be sent 74 System Lets you reboot the XPort AR restore factory defaults upload new firmware and change the XPort AR long and short names 114 Terminal Lets you change current settings for a terminal 55 TFTP Shows statistics and lets you change the current configuration for the Trivial File Transfer Protocol TFTP server 72 Tunnel Lets you c...

Страница 28: ...ure the aspects of your network This chapter contains the following sections Network 1 Interface Status Network 1 Interface Configuration Network 1 Ethernet Link Network 1 Interface Status To view the Network 1 interface status click Network on the Main Menu Figure 5 1 shows the page that displays Using this page you can view the status on your network interfaces Figure 5 1 Network 1 eth0 Interfac...

Страница 29: ...Figure 5 2 Network 1 eth0 Interface Configuration Web Page 3 Enter or modify the fields in Table 5 1 Table 5 1 Network 1 Interface Configuration Fields Field Description BOOTP Client Select On or Off At boot up the XPort AR will attempt to obtain an IP address from a BOOTP server Notes Overrides the configured IP address network mask gateway hostname and domain When DHCP is On the system automatic...

Страница 30: ...s to obtain an IP address from DHCP If it cannot AutoIP a server less method of selecting the IP address when the DHCP server is unavailable assigns an address in the range of 169 254 xxx xxx Default Gateway Enter the IP address of the router for this network Or clear the field appears as None This address is only used for static IP address configuration Hostname Enter the XPort AR hostname It mus...

Страница 31: ...s the page that displays Figure 5 3 Network 1 eth0 Ethernet Link Web Page 3 Enter or modify the fields in Table 5 2 4 Click Submit Table 5 2 Network 1 eth0 Ethernet Link Fields Field Description Speed Select the Ethernet link speed Auto is the default Duplex Select the Ethernet link duplex mode Auto is the default ...

Страница 32: ...l on Lines 1 and 2 Line 3 can be configured for software flow control Tunnels can only be configured on Lines 1 and 2 and not Line 3 Line 3 is typically used as a console or dedicated control channel PPP is not allowed on Line 3 The following sub menus you can use Line Statistics Displays statistics for the two lines For example the bytes received and transmitted breaks flow control parity errors ...

Страница 33: ...Tunnel Settings XPort AR User Guide 33 1 Click Line on the Main Menu Figure 6 1 shows the page that displays Figure 6 1 Line 1 Statistics Web Page Line Configuration To configure a line perform the following steps ...

Страница 34: ...To change the status select Enabled or Disabled from the drop down menu Protocol Select the protocol from the drop down menu The default is Tunnel Note All protocols work in Connect and Accept Mode except the LPD or Tunnel protocol option which is supported only in Accept Mode Baud Rate Select the baud rate from the drop down menu The default is 9600 Parity Select the parity from the drop down men...

Страница 35: ...low of data when Flow Control is set to Software Prefix a decimal character with or a hexadecimal character with 0x or provide a single printable character The default Xon char is 0x11 Xoff Char Specify the character to use to stop the flow of data when Flow Control is set to Software Prefix a decimal character with or a hexadecimal character with 0x or provide a single printable character The def...

Страница 36: ...the CP Group are matched Disabled Turns off Command Mode Wait Time Enter the wait time for the serial string during boot up in milliseconds Serial String Enter the serial string characters Select a string type Text String of bytes that must be read on the Serial Line during boot time to enable Command Mode It may contain a time element in x milliseconds in the format x to specify a required delay ...

Страница 37: ...el web page When you click Tunnel from the Main Menu Tunnel 1 fields display To go to Tunnel 2 click the Tunnel 2 button There are six sub menus that you can use as follows Statistics Displays statistics for the two lines For example completed accepts completed connects disconnects dropped accepts dropped connects etc Serial Settings Configures buffer size and DTR Connect Mode Controls how a tunne...

Страница 38: ...e for both serial line 1 and serial line 2 Configure the buffer size to change the maximum amount of data the serial port stores For any active connection the XPort AR sends the data in the buffer The modem control signal DTR on the Line may be continually asserted or asserted only while either an Accept Mode tunnel or a Connect Mode tunnel is connected To configure the serial settings perform the...

Страница 39: ...y field Current serial settings for the line Protocol Display only field The protocol being used for the tunnel Buffer Size Enter the buffer size used for the tunneling of serial data received Requires reboot to take effect DTR Select when to assert DTR Unasserted Asserted while connected Asserted whenever a connect or an accept mode tunnel connection is active Continuously asserted Asserted regar...

Страница 40: ...meout field is used to force a packet to be sent after a maximum time The packet is sent even if the threshold value is not reached When Send Character is configured a single printable character or control character read on the Serial Line forces the packet to be sent immediately There is an optional trailing character parameter which can be specified It can be a single printable character or a co...

Страница 41: ...s Figure 6 7 Tunnel 1 Packing Mode Timeout 1 Enter or modify the fields in Table 6 4 2 Click Submit Table 6 4 Tunnel Packing Mode Timeout Fields Field Description Threshold Send the queued data when the number of queued bytes reaches the threshold value Timeout Enter a time in milliseconds for the XPort AR to send the queued data after the first character was received ...

Страница 42: ...racter Fields Field Description Threshold Send the queued data when the number of queued bytes reaches the threshold value Send Character Enter a single character either a printable character or control character for the send character Upon receiving this character on the serial line the XPort AR sends out the queued data Trailing Character This is an optional setting Enter a single character eith...

Страница 43: ...SSH the SSH server host keys and at least one SSH authorized user must be configured SSL TCP AES encryption over TCP Telnet XPort AR supports IAC codes It drops the IAC codes when Telnetting and does not forward them to the serial port Accept Mode has the following states Disabled never a connection Enabled always listening for a connection Active if it receives any character from the serial port ...

Страница 44: ...cept an incoming connection default Any Character Start waiting for an incoming connection when any character is read on the serial line Start Character Start waiting for an incoming connection when the start character for the selected tunnel is read on the serial line Modem Control Asserted Start waiting for an incoming connection as long as the Modem Control pin DSR is asserted on the serial lin...

Страница 45: ...at connection Flush Serial Data Select Enabled to flush the serial data buffer on a new connection Block Serial Data Select On to block or not tunnel serial data transmitted to the XPort AR Block Network Data Select On to block or not tunnel network data transmitted to the XPort AR Password Enter a password that clients must send to the XPort AR within 30 seconds from opening a network connection ...

Страница 46: ...t Mode has six modes used to initiate and maintain a connection Disable no connection Always always makes a connection Any Character active if it sees any character from the serial port Start Character active if it sees a specific configurable character from the serial port Modem Control Asserted started when the modem control pin is asserted on the serial line Modem Emulation started by an ATD co...

Страница 47: ...method to be used to attempt a connection to a remote host or device Choices are Always A connection is attempted until one is made If the connection gets disconnected the XPort AR retries until it makes a connection default Disable An outgoing connection is never attempted Any Character A connection is attempted when any character is read on the serial line Start Character A connection is attempt...

Страница 48: ...It designates the port on the remote host to connect to Protocol Select the protocol type Your choices are SSH SSL TCP TCP AES Telnet UDP and UDP AES The default protocol is TCP When TCP is enabled probes are sent to the other end of the connection to ensure that the connection is still valid Default is 45000 milliseconds Enter zero to disable and blank the value to restore the default The followi...

Страница 49: ...te See Disconnect Mode on page 50 for more information about the parameters If Disconnect Mode is disabled and the network connection is dropped then the re establishment of a tunnel connection is governed by the configured Connect Mode settings Flush Serial Data Select whether to flush the serial line when a connection is made Choices are Enabled Flush the serial line when a connection is made Di...

Страница 50: ...ly The following settings end a connection Stop character received Timeout period elapsed and no activity Both Accept Mode and Connect Mode must be idle for a specified time frame Modem control inactive setting Note To clear data out of the serial buffers upon a disconnect enable Flush Serial Data To configure Disconnect Mode perform the following steps 1 Click Tunnel 1 Disconnect Mode Figure 6 11...

Страница 51: ...TDP to establish a connection All of these commands behave like a modem For commands that are valid but not applicable to the XPort AR an OK message is sent but the command is silently ignored The XPort AR attempts to make a Command Mode connection as per the IP DNS port numbers defined in Connect Mode It is possible to override the remote address as well as the remote port number Table 6 9 lists ...

Страница 52: ...echo pluses command To configure modem emulation perform the following steps ATD Like ATDT Dials default Connect Mode remote address and port ATD Address Info Sets up a TCP connection A value of 0 begins a command line interface session ATO Switches to data mode if connection still exists Vice versa to ATEn Switches echo in Command Mode off 0 on 1 ATH Disconnects the network session ATI Shows mode...

Страница 53: ...ho the modem commands to the console Verbose Response Select Enable to send modem response codes out on the serial line Response Type Select the type of response code Text or Numeric Error Unknown Commands Select whether an ERROR or OK response is sent in reply to unrecognized AT commands Choices are Enabled ERROR is returned for unrecognized AT commands Disabled OK is returned for unrecognized AT...

Страница 54: ...ation string prepares the modem for communications It is a customized string sent with the CONNECT modem response code Display Remote IP Selects whether the incoming RING sent on the Serial Line is followed by the IP address of the caller Default is Disabled Table 6 10 Tunnel Modem Emulation Fields continued Field Description ...

Страница 55: ...on a serial line or on the network by using the Terminal web page When you click Terminal from the Main Menu Line 1 fields display To go to the network or line 2 click the Network or Line 2 button Network Terminal Configuration To configure menu features applicable to CLI access via the network perform the following steps 1 Click Terminal Network Figure 7 1 shows the page that displays Figure 7 1 ...

Страница 56: ... Note IAC is a method to send commands over the network such as send break or start echoing Login Connect Menu Select the interface to display when the user logs in Choices are Enabled Shows the Login Connect Menu Disabled Shows the CLI Exit Connect Menu Select whether to display a choice for the user to exit the Login Connect Menu and reach the CLI Choices are Enabled Allows the user to exit to t...

Страница 57: ...Description Terminal Type Enter text to describe the type of terminal The text will be sent to a host via interpret as command IAC Note IAC is a method to send commands over the network such as send break or start echoing Login Connect Menu Select the interface to display when the user logs in Choices are Enabled Shows the Login Connect Menu Disabled Shows the CLI Exit Connect Menu Select whether ...

Страница 58: ...r e g control Y or blank to disable When the Send Break control character is received from the network on its way to the serial line it is not sent to the line instead the line output is forced to be inactive the break condition Break Duration Enter how long the break should last in milliseconds Echo Applies only to Connect Mode Telnet connections not to Accept Mode Only disable Echo if your termi...

Страница 59: ...e to connect to the host Choices are Telnet SSH Note SSH keys must be loaded or created on the SSH page for the SSH protocol to work SSH Username Appears if you selected SSH as the protocol Enter a username to select a pre configured Username Password Key configured on the SSH Client Users page or leave it blank to be prompted for a username and password at connect time Remote Address Enter an IP ...

Страница 60: ...For instance when working with an RS485 driver that requires a signal to be asserted when in half duplex mode the CP that is driving that signal chosen by the engineer designing the circuit is added to the default group named Line1_RS485_HDpx The XPort AR asserts the CP at the correct time via the default group Custom Groups The email tunneling and CLI features can interact with CPs This is accomp...

Страница 61: ...f the page Figure 8 1 shows the page that displays Table 8 1 lists and describes the current configuration fields Figure 8 1 CPM CPs Page Table 8 1 CPM CPs Current Configuration Fields and Descriptions Field Description CP Indicates the configurable pin number Ref Indicates the hardware pin number associated with the CP Configured As Shows the current CP configuration A CP configured as Input is s...

Страница 62: ...d Descriptions Fields Description Name Shows the CP number State Shows the current enable state of the CP On the XPort AR the CP state is always enabled Type Indicates whether the CP is set for input or output Value Shows the current value of the CP Bit Shows the bit position CPs are always displayed in bit position zero Level Indicates the voltage level of the CP A plus sign indicates the CP is a...

Страница 63: ...me State Shows the current state of the CP group Locked groups are Lantronix default groups and cannot be deleted Use the button in this field to enable or disable the group Value Shows the current CP group value Bit Displays the 7 bit positions for the CPs in the group Level Indicates the voltage level of the CP A plus sign indicates the CP bit is asserted the voltage is high A minus sign indicat...

Страница 64: ...2 CPM Groups Page 2 Enter a group name in the Create Group text box and click Submit 3 Add CPs with the Add button Be sure to specify CP Bit position Input or output Assertion level Check the Assert Low box to specify inverted assertion Table 8 4 CPM Groups Current Configuration Fields and Descriptions Fields Description Group Name Shows the CP group name State Indicates whether the group is enabl...

Страница 65: ...e is in the Group Name column 2 Click the red x that appears next to the name in the Group Status table 3 Click OK to confirm the deletion Remove CPs from CP Groups To remove a CP from a CP group perform the following steps 1 Click on the Group in the Group Name column that contains the CP to be removed 2 Select the CP from the Remove drop down list at the bottom of the page 3 Click Remove ...

Страница 66: ...interface The static addresses displayed on the Network Interface Configuration web page may be overridden by DHCP or BOOTP The DNS web page enables you to view the status and cache When a DNS name is resolved using a forward lookup the results get stored in the DNS cache temporarily The XPort AR checks the cache when performing forward lookups Each item in the cache eventually times out and gets ...

Страница 67: ...me and password PAP authentication offers a straightforward method for the peer to determine its identity Upon the link establishment the user ID and password are repeatedly sent to the authenticator until it is acknowledged or the connection is terminated However PAP is not a strong authentication process There is no protection against trial and error attacks The peer is responsible for the frequ...

Страница 68: ...e authentication and assign an IP address to the peer Upon PPP configuration IP packets are routed between Ethernet and PPP interfaces The XPort AR does not perform network address translation NAT between the serial side network interface and the Ethernet WLAN network interface Therefore to pass packets through the XPort AR a static route must be configured on both the PPP Peer device and the remo...

Страница 69: ... the following steps Table 9 1 PPP Configuration Fields Field Description Local IP Address Enter the IP address assigned to the XPort AR s PPP interface Peer IP Address Enter the IP address assigned to the peer when requested during negotiation Authentication Mode Choose the authentication mode None No authentication is required PAP Password Authentication Protocol CHAP Challenge Handshake Authent...

Страница 70: ...unity Enter the SNMP read only community string Write Community Enter the SNMP read write community string System Contact Enter the name of the system contact System Name Enter the system name System Description Enter the system description System Location Enter the system location Traps Enabled Select On to enable the transmission of the SNMP cold start trap messages This trap is generated during...

Страница 71: ...e Current Configuration table FTP The FTP web page shows the FTP configuration and statistics about the FTP server To configure FTP perform the following steps 1 Click FTP on the Main Menu Figure 9 4 shows the page that displays Figure 9 4 FTP Web Page Secondary Trap Dest IP Enter the secondary SNMP trap host Table 9 2 SNMP Fields continued Field Description ...

Страница 72: ...ics To configure TFTP server perform the following steps 1 Click TFTP on the Main Menu Figure 9 5 shows the page that displays Figure 9 5 TFTP Server Web Page Table 9 3 FTP Fields Field Description State Select Enabled to enable the FTP server Admin Username Enter the username to use when logging in via FTP Admin Password Enter the password to use when logging in via FTP ...

Страница 73: ...ays Table 9 4 TFTP Server Fields Field Description State Select Enabled to enable the TFTP server Allow File Creation Select whether to allow the creation of new files stored on the TFTP server Allow Firmware Update Specifies whether or not the TFTP Server is allowed to accept a firmware update for the device An attempt to update firmware is recognized based on the name of the file Note TFTP canno...

Страница 74: ... sent for storage Local Port Enter the number of the local port on the XPort AR from which system logs are sent Remote Port Enter the number of the port on the remote server that supports logging services The default is 514 Severity Log Level From the drop down box select the minimum level of system message the XPort AR should log This setting applies to all syslog facilities The drop down list is...

Страница 75: ...of usernames and passwords for access to the XPort AR device The HTTP web page contains the following sub menus Statistics Viewing statistics such as bytes received and transmitted bad requests authorizations required etc Configuration Configuring and viewing the current configuration Authentication Configuring and viewing the authentication HTTP Statistics To view HTTP statistics perform the foll...

Страница 76: ... viewable You can change the maximum number of entries that can be viewed on the HTTP Configuration Web Page HTTP Configuration To configure HTTP perform the following steps 1 Click HTTP Configuration Figure 9 8 shows the page that displays Figure 9 8 HTTP Configuration Web Page 2 Enter or modify the fields in Table 9 6 ...

Страница 77: ...x Timeout Enter the maximum time for the HTTP server to wait when receiving a request This prevents Denial of Service DoS attacks The default is 10 seconds Max Bytes Enter the maximum number of bytes the HTTP server accepts when receiving a request The default is 40 kB this prevents DoS attacks Logging Select On to enable HTTP server logging Max Log Entries Sets the maximum number of HTTP server l...

Страница 78: ...Figure 9 9 shows the page that displays Figure 9 9 HTTP Authentication Web Page 2 Enter or modify the fields in Table 9 7 Table 9 7 HTTP Authentication Fields Fields Description URI Enter the Uniform Resource Identifier URI Note The URI must begin with to refer to the filesystem Realm Enter the domain or realm used for HTTP Required with the URI field ...

Страница 79: ... XPort AR via an RSS publisher RSS can be stored to the file system cfg_log txt file To configure RSS perform the following steps Auth Type Select the authentication type None No authentication is necessary Basic Encodes passwords using Base64 Digest Encodes passwords using MD5 SSL The page can only be accessed over SSL no password is required SSL Basic The page is accessible only over SSL and enc...

Страница 80: ... view and clear settings in the Current Status table by clicking View or Clear Table 9 8 RSS Fields Fields Description RSS Feed Select On to enable RSS feeds to an RSS publisher Persistent Select On to enable the RSS feed to be written to a file cfg_log txt and to be available across reboots Max Entries Sets the maximum number of log entries Only the last Max Entries are cached and viewable ...

Страница 81: ...SSlv2 connection attempt is answered with an SSlv3 response If the initiator also supports SSLv3 SSLv3 handles the rest of the connection This chapter contains the following sections SSH Server Host Keys SSH Server Authorized Users SSH Client Known Hosts SSH Client Users SSL Certificates SSL RSA or DSA SSL Certificates and Private Keys SSL Utilities SSL Configuration SSH Server Host Keys The SSH S...

Страница 82: ... the path and name of the existing private key you want to upload or use the Browse button to select the key Be sure the private key will not be compromised in transit This implies the data is uploaded over some kind of secure private network Public Key Enter the path and name of the existing public key you want to upload or use the Browse button to select the key Key Type Select a key type to use...

Страница 83: ...y have View Key and Delete Keylinks If you click a Delete link a message asks whether you are sure you want to delete this information Click OK to proceed or Cancel to cancel the operation Create New Keys Key Type Select a key type to use RSA Use this key with SSH1 and SSH2 protocols DSA Use this key with the SSH2 protocol Bit Size Select a bit length for the new key 512 768 1024 Using a larger bi...

Страница 84: ...ription Username Enter the name of the user authorized to access the SSH server Password Enter the password associated with the username Public RSA Key Enter the path and name of the existing public RSA key you want to use with this user or use the Browse button to select the key If authentication is successful with the key no password is required Public DSA Key Enter the path and name of the exis...

Страница 85: ...rform the following steps 1 Click SSH Client Known Hosts Figure 10 3 shows the page that displays Figure 10 3 SSH Client Known Hosts Web Page 2 Enter or modify the fields in Table 10 3 Table 10 3 SSH Client Known Hosts Fields Field Description Server Enter the name or IP address of a known host If you enter a server name the name should match the name of the server used as the Remote Address in Co...

Страница 86: ... keys for public key authentication can be created on another device and uploaded to the XPort AR or automatically generated on the XPort AR If uploading existing keys be sure the private key does not get compromised in transit Upload the data over a secure private network If you are uploading a key ensure that it is not password protected To configure the SSH client users perform the following st...

Страница 87: ... the username Remote Command Enter the command that can be executed remotely Default is shell which tells the SSH server to execute a remote shell upon connection This command can be changed to anything the remote host can perform Private Key Enter the name of the existing private key you want to use with this SSH client user You can either enter the path and name of the key or use the Browse butt...

Страница 88: ...new key Key Type Select the key type to be used for the new key Choices are RSA Use this key with the SSH1 and SSH2 protocols DSA Use this key with the SSH2 protocol Bit Size Select the bit length of the new key 512 768 1024 Using a larger Bit Size takes more time to generate the key Approximate times are 2 minutes for a 512 bit RSA Key 5 minutes for a 768 bit RSA Key 15 minutes for a 1024 bit RSA...

Страница 89: ... public CA Since obtaining a certificate signed by a CA that is managed by another company can be expensive it is possible to have your own CA Tools exist to generate self signed CA certificates or to sign other certificates A certificate request is a certificate that has not been signed and only contains the identifying information Signing it makes it a certificate A certificate is also used to s...

Страница 90: ...quests It can convert all kinds of formats Executables are available for Linux and Windows To generate a self signed RSA certificate key combo use the following commands in the order shown openssl req x509 nodes days 365 newkey rsa 1024 keyout mp_key pem out mp_cert pem Note Signing other certificate requests is also possible with OpenSSL See www openssl org or www madboa com geek openssl for more...

Страница 91: ...hese strings and becomes incompatible with the current XPort AR release We will add support for this and other formats in future releases Free Radius Linux open source Radius server It is versatile but complicated to configure SSL Configuration To configure SSL perform the following steps 1 Click SSL from the Main Menu Figure 10 5 shows the page that displays Figure 10 5 SSL Web Page ...

Страница 92: ...d for SSL Tunneling These certificates do not require a private key Enter the path and name of the certificate you want to upload or use the Browse button to select the certificate RSA or DSA certificates with 512 to 1024 bit public keys are allowed Note The format of the file must be PEM The file must start with BEGIN CERTIFICATE and end with END CERTIFICATE Some Certificate Authorities add comme...

Страница 93: ... minutes for a 1024 bit RSA key 8 minutes for a 512 bit DSA key 20 minutes for a 768 bit DSA key 60 minutes for a 1024 bit DSA key Type Select the type of key RSA Public Key Cryptography algorithm based on large prime numbers invented by Rivest Shamir and Adleman Used for encryption and signing DSA Digital Signature Algorithm also based on large prime numbers but can only be used for signing Devel...

Страница 94: ...view file diagnostics and or modify files There are two subsections Statistics and Browse The Statistics section of the Filesystem Statistics window shows current statistics and usage information of the flash file system In the FileSystem Browser section of the Filesystem Statistics web page you can create files and folders upload files copy and move files and use TFTP Filesystem Statistics and Ac...

Страница 95: ...lick Compact in the Actions row to compact the files Note The compact should not be needed under normal circumstances as the system manages this automatically 3 Back up all files before you perform Step 4 because all user files get erased in that step 4 Cick Format in the Actions row The configuration gets retained Filesystem Browser To browse the filesystem perform the following steps ...

Страница 96: ...aintenance and Diagnostics Settings XPort AR User Guide 96 1 Click Filesystem Browse Figure 11 2 shows the page that displays Figure 11 2 Filesystem Browser Web Page 2 Click a filename to view the contents ...

Страница 97: ...ion where the file you want to copy resides Destination Enter the location where you want the file copied After you specify a source and destination click Copy to copy the file Move Source Enter the location where the file you want to move resides Destination Enter the location where you want the file moved After you specify a source and destination click Move to move the file TFTP Action Select t...

Страница 98: ...ault Figure 11 3 shows the page that displays Figure 11 3 TCP Web Page 2 Enter or modify the fields in Table 11 2 Table 11 2 TCP Fields Field Description Send RSTs Click Enabled to send RSTs or Disabled to stop sending RSTs TCP contains six control bits with one or more defined in each packet RST is one of the control bits The RST bit is responsible for telling the receiving TCP stack to end a con...

Страница 99: ... amount of data to acknowledge an ACK gets forced If the sender TCP implementation waits for an ACK before sending more data even though the window is open setting the Ack Limit to 1 packet improves performance by forcing immediate acknowledgements Send Data The Send Data selection governs when data may be sent into the network The Standard implementation waits for an ACK before sending a packet l...

Страница 100: ...r of hops a multicast packet can complete before it is terminated as a Multicast Time to Live 3 Click Submit ICMP To set the ICMP perform the following steps 1 Click Protocol Stack ICMP Figure 11 5 shows the page that displays Figure 11 5 ICMP Web Page 2 Click Enabled 3 Click Submit ...

Страница 101: ...ick Add for ARP Cache Table 11 3 ARP Web Page Fields Field Description ARP ARP Timeout Enter hours minutes and seconds This is the maximum duration an address remains in the cache ARP Cache IP Address Enter the IP address for the ARP cache MAC Address Enter the MAC address to add to the ARP cache Current State Remove All Removes all entries in the ARP cache or click Remove in the specific table en...

Страница 102: ...OTP ensure the DHCP BOOTP server IP address is in the list To configure the IP address filter perform the following steps 1 Click the IP Address Filter on the Main Menu Figure 11 7 shows the page that displays Figure 11 7 IP Address Filter Web Page Note Be aware not to assign your network IP address as filtered Doing so will prevent you from accessing the XPort AR You will have to then access the ...

Страница 103: ...aller utility Only 0x77FE discover messages from DeviceInstaller are supported For more information on DeviceInstaller see 3 Using DeviceInstaller To configure the query port server perform the following steps 1 Click Query Port on the Main Menu Figure 11 8 shows the page that displays Figure 11 8 Query Port Web Page Table 11 4 IP Address Filter Fields Field Description IP Address Enter the IP add...

Страница 104: ... 3 Click Submit Diagnostics The XPort AR has several tools to perform diagnostics and view device statistics These include information on Hardware MIB II IP Sockets Ping Traceroute DNS Lookup Memory Buffer Pools Processes Hardware To display the Hardware configuration perform the following steps ...

Страница 105: ...er Guide 105 1 Click Diagnostics Hardware Figure 11 9 shows the page that displays Figure 11 9 Diagnostics Hardware Web Page MIB II The MIB II Network Statistics page shows the available SNMP MIBs To display MIB II statistics perform the following steps ...

Страница 106: ... MIB II Network Statistics Web Page 2 Click any of the links to open the corresponding table and statistics Note For more information refer to the following Requests for Comments RFCs RFC 1213 MIB II definitions RFC 2011 Updated definitions for IP and ICMP RFC 2012 Updated definitions for TCP RFC 2013 Updated definitions for UDP RFC 2096 Definitions for IP forwarding ...

Страница 107: ... Guide 107 IP Sockets To display all open IP sockets perform the following steps 1 Click Diagnostics IP Sockets Figure 11 11 shows the page that displays Figure 11 11 IP Sockets Web Page Ping To ping a remote device or computer perform the following steps ...

Страница 108: ... the fields in Table 11 5 3 Click Submit Table 11 5 Ping Fields Field Description Host Enter the IP address or host name for the XPort AR to ping Count Enter the number of ping packets XPort AR should attempt to send to the Host The default is 3 Timeout Enter the time in seconds for the XPort AR to wait for a response from the host before timing out The default is 5 seconds ...

Страница 109: ...eps 1 Click Diagnostics Traceroute Figure 11 13 shows the page that displays Figure 11 13 Traceroute Web Page 2 Enter or modify the fields in Table 11 6 3 Click Submit Table 11 6 Traceroute Fields Field Description Host Enter the IP address or DNS hostname This address is used to show the path between it and the XPort AR when issuing the traceroute command Count Enter the number of ping packets XP...

Страница 110: ...okup You can also perform a lookup for a Mail MX record by prefixing a DNS Hostname with Note A DNS server must be configured for DNS Lookup to work To use forward or reverse DNS lookup perform the following steps 1 Click Diagnostics DNS Lookup Figure 11 14 shows the page that displays Figure 11 14 DNS Lookup Web Page 2 Enter or modify the fields in Table 11 7 ...

Страница 111: ...s perform the following steps 1 Click Diagnostics Memory Figure 11 15 shows the page that displays Figure 11 15 Memory Web Page Table 11 7 DNS Lookup Fields Field Description Host Perform one of the following For reverse lookup to locate the hostname for that IP address enter an IP address For forward lookup to locate the corresponding IP address enter a hostname To look up the Mail Exchange MX re...

Страница 112: ...6 shows the page that displays Figure 11 16 Buffer Pools Web Page Processes The Processes web page shows all the processes currently running on the system It shows the Process ID PID the percentage of total CPU cycles a process used within the last three seconds the total stack space available the maximum amount of stack space used by the process since it started and the process name To display th...

Страница 113: ...11 Maintenance and Diagnostics Settings XPort AR User Guide 113 1 Click Diagnostics Processes Figure 11 17 shows the page that displays Figure 11 17 Processes Web Page ...

Страница 114: ... System web page enables the rebooting of the device restoring factory defaults uploading new firmware specifying the short and long name and viewing the current system configuration To configure system settings perform the following steps 1 Click System on the Main Menu Figure 11 18 shows the page that displays Figure 11 18 System Web Page ...

Страница 115: ...to restore the XPort AR to the original factory settings All configurations will be lost The XPort AR automatically reboots upon setting back to the defaults Upload New Firmware Click Browse to locate the firmware file location Click Upload to install the firmware on the XPort AR The device automatically reboots upon the installation of new firmware Name Enter a new Short Name and a Long Name if n...

Страница 116: ...tics The Email Statistics web page displays when you click Email from the Main Menu It shows statistics and current usage information about the email subsystem When you transmit an email the transmission to the SMTP server gets logged and displayed in the bottom portion of the page To view the statistics perform the following steps 1 Click Email on the Main Menu Figure 12 1 shows the page that dis...

Страница 117: ...onfiguration The XPort AR allows you to view and configure email alerts relating to the events occurring within the system To configure email settings perform the following steps 1 Click Email Email 1 Configuration Figure 12 2 shows the page that displays Figure 12 2 Email 1 Configuration Web Page ...

Страница 118: ... alerts will be sent Multiple addresses are separated by semicolon Cc Enter the email address to which the email alerts will be copied Multiple addresses are separated by semicolon From Enter the email address to list in the From field of the email alert Reply To Enter the email address to list in the Reply To field of the email alert Subject Enter the subject for the email alert File Enter the pa...

Страница 119: ...9 CLI Statistics To view the CLI Statistics perform the following steps 1 Click CLI on the Main Menu Figure 12 3 shows the page that displays Figure 12 3 CLI Statistics Web Page CLI Configuration To configure the CLI perform the following steps ...

Страница 120: ...re is no password by default Quit connect line Enter a string to terminate a connect line session and resume the CLI Type control before any key the user must press when holding down the Ctrl key An example of such a string is control L Inactivity Timeout Set an Inactivity Timeout value so the CLI session will disconnect if no data is received after the designated time period Default is 15 minutes...

Страница 121: ...n Page you can import a system configuration from an XML file The XML data can be imported from a file on the file system or uploaded using HTTP The groups to import can be specified by toggling the respective group item or entering a filter string When toggling a group item all instances of that group will be imported The filter string can be used to import specific instances of a group The text ...

Страница 122: ...Enter or modify the fields in Table 12 3 Table 12 3 XML Export Configuration Fields Field Description Export to browser Select this option to export the XCR data in the selected fields to a web browser Export to local file Select this option to export the XCR data to a file on the device If you select this option enter a file name for the XML configuration record ...

Страница 123: ...ure of your browser XML Export Status To export system status in XML format perform the following steps Export secrets Only use this with extreme caution If selected secret password and key information will be exported Use only with a secure link and save only in secure locations Lines to Export Select the instances you want to export in the line LPD PPP tunnel and terminal groups Groups to Export...

Страница 124: ... and display a completion message Table 12 4 XML Export Status Fields Field Description Export to browser Select this option to export the XML status record to a web browser Export to local file Select this option to export the XML status record to a file on the device If you select this option enter a file name for the XML status record Lines to Export Select the instances you want to export in t...

Страница 125: ...gure 12 7 Import Configuration Web Page 2 Click one of the following radio buttons Configuration from External file See Import Configuration from External File on page 125 Configuration from Filesystem See Import Configuration from Filesystem on page 126 Line s from single line Settings on the Filesystem See Import Line s from Single Line Settings on the Filesystem on page 128 Import Configuration...

Страница 126: ...at displays Figure 12 8 Import Configuration from External File Web Page 2 Enter the path and file name of the external XCR file you want to import or browse to select the XCR file 3 Click Import Import Configuration from Filesystem This selection shows a page for entering the filesystem and your import requirements groups lines and instances To import a configuration file from the Filesystem perf...

Страница 127: ... Advanced Settings XPort AR User Guide 127 1 Click XML Import Configuration Configuration from Filesystem Figure 12 9 shows the page that displays Figure 12 9 Import Configuration from Filesystem Web Page ...

Страница 128: ...fault all line instances are selected Only the selected line instances will be imported in the line LPD PPP tunnel and terminal groups Whole Groups to Import Select the configuration groups to import from the XML configuration record This option imports all instances of each selected group unless it is one of the Lines to Import Note By default all groups are checked except those pertaining to the...

Страница 129: ...r modify the fields in Table 12 6 Table 12 6 Import Lines from Single Line Settings Fields Field Description Filename Provide the name of the file on the XPort AR local to its file system that contains XCR data Lines to Import Select the line s whose settings you want to import Click the Select All link to select all the serial lines and the network lines Click the Clear All link clear all of the ...

Страница 130: ...e pertaining to the network configuration this is so that import will not break your network connectivity You may check or uncheck any group to include or omit that group from import To import all of the groups click the Select All but Networking link to import all groups To clear all the checkboxes click the Clear All link Table 12 6 Import Lines from Single Line Settings Fields continued Field D...

Страница 131: ...o the directory cd that you created in Step 2 http config 4 Get the file by using get filename 5 Modify the file as required or create a new one with the same name 6 Put the file by using put filename 7 Type quit The overriding files display in the http config directory Restart any open browser to view the changes If you want to return to the default files in the firmware image delete the overridi...

Страница 132: ...the menu bar Figure 13 1 shows the page that displays Figure 13 1 System Branding Web Page 2 In the Short Name field enter a short name up to 32 characters 3 In the Long Name field enter a long name up to 64 characters 4 Click Submit 5 Click Reboot to display the names ...

Страница 133: ...form the following steps 1 Click System in the Main Menu Figure 14 1 shows the page that displays Figure 14 1 System Web Page 2 Click Browse in the Upload New Firmware section The Choose File window displays 3 Highlight the file and click Open 4 Click Upload to install the firmware The device automatically reboots on the installation of new firmware Alternatively firmware can be updated by sending...

Страница 134: ...t lantronix com Firmware downloads FAQs and the most up to date documentation are available at www lantronix com support When you report a problem please provide the following information Your name and your company name address and phone number Lantronix model number Lantronix serial number Firmware version on the first screen shown when you Telnet to the device and type show Description of the pr...

Страница 135: ... message AES Keys Converting Binary to Hexadecimal Following are two simple ways to convert binary numbers to hexadecimal notation Conversion Table Hexadecimal digits have values ranging from 0 to F which are represented as 0 9 A for 10 B for 11 etc To convert a binary value for example 0100 1100 to a hexadecimal representation treat the upper and lower four bits separately to produce a two digit ...

Страница 136: ...dows operating systems For example 1 On the Windows Start menu click Programs Accessories Calculator 2 On the View menu select Scientific The scientific calculator appears 3 Click Bin Binary and type the number you want to convert Figure B 1 Scientific Calculator 4 Click Hex The hexadecimal value appears Figure B 2 Hex Display 14 1110 E 15 1111 F Table B 1 Conversion Values continued Decimal Binar...

Страница 137: ...3 Issue 4 2004 VCCI V 3 2007 04 AS NZS CISPR 22 2006 EN55022 1998 A1 2000 A2 2003 EN61000 3 2 2000 A2 2005 EN61000 3 3 1995 A1 2001 A2 2005 Immunity EN55024 1998 A1 2001 A2 2003 Direct Indirect ESD EN61000 4 2 1995 RF Electromagnetic Field Immunity EN61000 4 3 2002 Electrical Fast Transient Burst Immunity EN61000 4 4 2004 Surge Immunity EN61000 4 5 2006 RF Common Mode Conducted Susceptibility EN61...

Страница 138: ... substance contained in at least one of the homogeneous materials used for this part is above the limit requirement in SJ T11363 2006 Product Family Name Toxic or hazardous Substances and Elements Lead Pb Mercury Hg Cadmium Cd Hexavalent Chromium Cr VI Polybrominated biphenyls PBB Polybrominated diphenyl ethers PBDE UDS1100 and 2100 0 0 0 0 0 0 EDS 0 0 0 0 0 0 MSS100 0 0 0 0 0 0 IntelliBox 0 0 0 0...

Страница 139: ...C Compliance XPort AR User Guide 139 Manufacturer Contact Lantronix Inc 167 Technology Irvine CA 92618 USA Phone 949 453 3990 Fax 949 450 7249 ...

Страница 140: ...pliance RoHS notice 138 D default server port numbers 19 device control 17 device details summary 21 device management 18 deviceinstaller accessing the XPort AR 21 device details summary 21 using 21 diagnostic toolset 18 E email configuration 117 encrypt ion 18 Enterprise Grade Security 17 ethernet address 19 Europe Middle East and Africa technical support 134 Evolution OS 16 F Filesystem 26 H hos...

Страница 141: ...vice management 18 troubleshooting capabilities 18 web based configuration and troubleshooting 16 xml based architecture and device control 17 P port numbers 19 R rss 17 S secure com port redirector 18 security enterprise grade 17 security settings SSH client known hosts 85 SSH client user configuration 86 SSH server authorized users 83 SSH server host keys 81 SSL certificates 89 SSL certificates ...

Страница 142: ...ings 36 accept mode 43 connect mode 45 disconnect mode 50 modem emulation 51 command mode 51 packing mode 40 serial settings 38 statistics 37 U updating firmware 133 US technical support 134 W web manager accessing 23 components of typical web page 25 configuration 23 navigating 26 navigation 26 summary of web pages 26 web based configuration 16 X xml 18 xml configuration 121 ...

Отзывы:

Нет отзывов