background image

 

Secure Console Server  

Model SCS1620 

Product Guide 

 

 

 
 
 
 
 
 
 
 

Part Number 15.00.032

Revision B 

February 2002

Содержание SCS1620

Страница 1: ...Secure Console Server Model SCS1620 Product Guide Part Number 15 00 032 Revision B February 2002...

Страница 2: ...SCS1620 Product Manual Lightwave Communications Page ii www lightwavecom com...

Страница 3: ...NIX is a registered trademark of The Open Group Windows 95 Windows 98 Windows 2000 and Windows NT are trademarks of Microsoft Corp Netscape is a trademark of Netscape Communications Corporation Adobe...

Страница 4: ...ed to provide reasonable protection against such interference when operating in a commercial environment This equipment generates uses and can radiate radio frequency energy and if not installed and u...

Страница 5: ...Radiated Immunity Field Test EN61000 4 4 1995 Electrical Fast Transient Test EN61000 4 5 1995 Power Supply Surge Test EN61000 4 6 1996 Conducted Immunity Test EN61000 4 8 1993 Magnetic Field Test EN61...

Страница 6: ...l 11 2 4 2 Network 11 2 4 3 Modem 12 2 4 4 Power Manager 12 2 5 Device Port Buffer 12 2 6 System Resource Information 12 3 0 Installation 13 3 1 Physical Installation 13 3 2 Power 13 3 2 1 AC Input 13...

Страница 7: ...3 5 Configure Services 35 5 3 6 Configure Modem 37 5 3 7 PPP and CHAP or PAP 41 5 3 8 Configure NIS 44 5 3 9 Configure LDAP 46 5 3 10 Configure the Firewall 48 5 3 11 Done 53 5 4 SAVE 56 5 4 Reboot 57...

Страница 8: ...C 3 Electrical 87 C 3 1 AC Power 87 C 3 2 DC Power 88 C 4 Interface 88 C 4 1 Terminal and Device 88 C 4 2 Network 88 C 4 3 Modem 88 C 4 4 Power Manager 88 C 5 Compliance and Certification 89 Appendix...

Страница 9: ...s 10 100 baseT IP network compatible ID Password Security configurable access rights OpenSSH version 2 security Open LDAP NIS capable for remote database rights Modem support for PPP PAP or CHAP and C...

Страница 10: ...ring One 1 serial TERMINAL port for VT100 console or PC with emulation One 1 POWER MANAGER port DB9F serial interface for Lightwave PCU8 Power Control Unit Optional One 1 Modem Module for analog Dial...

Страница 11: ...is controlled by assigning access rights to system user profiles Each user profile is assigned an ID a password and access rights Users must have a user profile to access any of the attached devices T...

Страница 12: ...user is not directly interacting with the attached device 2 6 System Resource Information The SCS1620 is programmable using OS level commands and options The System Administrator sysadmin configures t...

Страница 13: ...r rubber feet are provided and the rack mount brackets may be removed 3 2 Power The SCS1620 consumes less than 20W of electrical power The SCS1620 is available as AC powered models or DC powered model...

Страница 14: ...the DC powered systems and the connectors are also available separately from Lightwave See Appendix D for specifications regarding the DC power source 3 3 Connecting a Terminal Console The TERMINAL po...

Страница 15: ...n the terminal or start your computer s communication program 3 4 Connecting to the Device Port Any serial device that has a console port may be connected to the SCS1620 for consolidated remote admini...

Страница 16: ...Network Port Also refer to the setup setup setup setup command in Section 5 3 for additional network configuration 3 6 Connecting the Modem Port An optional modem module is available for the SCS1620...

Страница 17: ...red as Device Port 17 and operates like the other DEVICE ports except that its physical interface is a DB9F serial connector The Power Manager port is intended for the Lightwave PCU8 Power Control Uni...

Страница 18: ...display and pushbuttons can be used to set up the basic network interface which will allow the sysadmin to access the SCS1620 using your existing IP network Front Panel LCD Display and Pushbuttons The...

Страница 19: ...isplay shows the feature that you wish to edit press the SELECT key to enter the editing mode The display will show Editing Network Settings or other feature if chosen 3 A cursor appears under one cha...

Страница 20: ...fault IP address of the SCS1620 is 10 0 0 1 with a subnet mask of 255 0 0 0 For Windows 9x from the DOS command prompt type route add 10 0 0 1 mask 255 0 0 0 your workstation s IP address route add 10...

Страница 21: ...re the ENTER key to respond and are case sensitive 5 1 System Administrator Functions When the SCS1620 is first installed and powered up it must be configured to operate with your network Connect the...

Страница 22: ...m s default values are configured to minimize security issues however as features are turned on by the sysadmin more potential security holes open up The sysadmin programming level is as close to root...

Страница 23: ...tor logs into the SCS1620 for the first time It is a text based user interface and requires VT100 terminal support using the keyboard no mouse At default values SSH is not enabled encryption keys have...

Страница 24: ...ally at any time thereafter If using the setup setup setup setup command you will see the following display on your VT100 terminal this session screen was generated using SSH login which shows a sligh...

Страница 25: ...ll get the following message The setup screen is shown after successfully reaching the setup mode The experienced Linux user may also directly edit any parameter they choose The setup screen is put in...

Страница 26: ...ntinues to the Menu List shown on the next page which includes 10 options and DONE The sysadmin can step through the menu using the arrow keys or use a combination of arrow keys and the Tab key to sel...

Страница 27: ...ter Address Gateway and NIS Domain Hostname including domain IP Address of the SCS1620 Network Mask of IP address Gateway IP address of the Router of this network If using NIS the NIS domain name Sele...

Страница 28: ...ostname Use Back at any time if you wish to go back one screen Select Next using Tab and Arrows and press Enter to proceed Note The HOSTNAME appears as your command prompt when logged in to the system...

Страница 29: ...Network Mask in dot quad notation select Next using Tab and Arrows and press Enter to proceed Note Do NOT use leading 0 s in the numeric fields for numbers less than 100 For example if your netmask is...

Страница 30: ...and Arrows and press Enter to proceed If you will be using NIS enter a value for the NISDOMAIN select Next using Tab and Arrows and press Enter to proceed You are returned to the setup program menu Yo...

Страница 31: ...0 Product Manual 15 00 032 Rev B Page 31 5 3 3 Configure Timezone Configure Timezone using TUC time parameters Set the Local Timezone For some Timezone entries select the sub entry for the Local Timez...

Страница 32: ...3 4 Configure DNS Note If you choose to configure the DNS entry you are required to complete at least the Primary DNS Nameserver field If you cannot complete this entry at this time enter an address...

Страница 33: ...Company SCS1620 Product Manual 15 00 032 Rev B Page 33 Press Enter to proceed Enter a value for the Primary Nameserver This is a required entry After your entry is correct select Next and press Enter...

Страница 34: ...ue for the Secondary Nameserver if you have one This is optional After your entry is correct select Next and press Enter to proceed Enter a value for the Tertiary Nameserver This is optional leave the...

Страница 35: ...Page 35 You are returned to the setup program menu 5 3 5 Configure Services Configure Services syslog ssh and or telnet Enable syslog system logging yes no Enable System Logins using ssh yes no Enable...

Страница 36: ...ommunications Page 36 www lightwavecom com For System Logging select Yes or No using the arrows then select Next using Tab and press Enter to proceed For SSH select Yes or No using the arrows then sel...

Страница 37: ...e Modem Logins to allow PPP and or TTY no exit Enable Modem TTY Logins Enable Modem TTY Modem Callbacks o Enter Callback Telephone Number if YES above Configure PPP no exit o IP Address es Local and R...

Страница 38: ...Product Manual Lightwave Communications Page 38 www lightwavecom com This step assumes a positive response press Enter to proceed Select Yes or No using the arrows then select Next using Tab and pres...

Страница 39: ...ntronix Company SCS1620 Product Manual 15 00 032 Rev B Page 39 Select Yes or No using the arrows then select Next using Tab and press Enter Enter the TTY Callback number Press Esc to end the editing m...

Страница 40: ...ing the arrows then select Next using Tab and press Enter If you choose No this subroutine ends and you return to the menu and your menu choice will skip to Configure NIS since PPP features will be di...

Страница 41: ...7 PPP and CHAP or PAP PPP Authentication Either CHAP or PAP Required if PPP is enabled o Enter CHAP Secrets information if CHAP yes Enter CHAP Secrets information as 4 separate fields separated by a s...

Страница 42: ...com If you select No you will be directed to the PAP secrets steps If you select Yes you will be directed to the CHAP secrets steps Select Yes or No using the arrows then select Next using Tab and pr...

Страница 43: ...d Press ESC when done then select Next and Enter to proceed PAP Secrets Or PAP Secrets instead of CHAP secrets if CHAP was not selected previously This is a text fill in field for the sysadmin for PAP...

Страница 44: ...SCS1620 Product Manual Lightwave Communications Page 44 www lightwavecom com 5 3 8 Configure NIS Configure NIS Enable NIS Authentication no exit Enter IP Address of NIS Server Press Enter to continue...

Страница 45: ...Company SCS1620 Product Manual 15 00 032 Rev B Page 45 Select Yes or No using the arrows then select Next using Tab and press Enter Enter the value for the NIS server then select Next using Tab and p...

Страница 46: ...Lightwave Communications Page 46 www lightwavecom com 5 3 9 Configure LDAP Configure LDAP Enable LDAP version 2 Authentication no exit Enter IP Address of LDAP Server Input value for the LDAP Base Pr...

Страница 47: ...ix Company SCS1620 Product Manual 15 00 032 Rev B Page 47 Select Yes or No using the arrows then select Next using Tab and press Enter Enter the IP address of the LDAP server select Next using Tab pre...

Страница 48: ...r If your entry was improper you ll get a warning statement 5 3 10 Configure the Firewall Configure the Firewall Enable the Firewall no exit DENY for Ignore Connection Attempts sends no response REJEC...

Страница 49: ...any SCS1620 Product Manual 15 00 032 Rev B Page 49 Press Enter to continue Select Yes or No using the arrows then select Next using Tab and press Enter If you choose No this subroutine ends and you re...

Страница 50: ...Communications Page 50 www lightwavecom com Enter DENY to ignore and not respond to any connection attempts Enter REJECT to return a connection rejected message to any connection attempts Then select...

Страница 51: ...enabled separated by a space Any service previous enabled that is not listed here will then be disabled Please note that this field does not remove a service from the system but merely turns it off F...

Страница 52: ...bled that is not listed here will then be disabled Please note that this does not remove a service from the system but merely turns it off For utmost security a feature e g telnet that is not needed s...

Страница 53: ...the previous programming options you must save the values in order to commit them to memory and enable the changes Likewise you can exit the setup program without making any changes at this time Save...

Страница 54: ...ww lightwavecom com Press Enter to continue Select Yes or No using the arrows then select Next using Tab and press Enter If you select Yes the system will commit the changes to memory same as performi...

Страница 55: ...0 Product Manual 15 00 032 Rev B Page 55 The system then writes and properly stores the files Depending on the features and options you have selected especially Firewall options this can take several...

Страница 56: ...4 SAVE The SCS1620 will automatically save the programmed parameters after running the setup script for the first time only The sysadmin MUST run the SAVE script after any programming changes if the...

Страница 57: ...aved into non volatile memory the Reboot operation includes a prompt allowing you to SAVE the files if desired SAVE can be run at any time even after a reboot as shown above All other setup setup setu...

Страница 58: ...ser Settings x x exit Deselect a port x x help Display Help x x info Show system information x x less Browse history buffer x x listdev List device names x x listen Listen to a port x listusers List U...

Страница 59: ...and the power on self test will run Only the system administrator may issue the reboot reboot reboot reboot command sysadmin reboot Broadcast message from root ttyM17 Tue Oct 2 14 24 49 2001 The syst...

Страница 60: ...wd At the first login the SCS1620 will use the factory default password PASS PASS PASS PASS all upper case This default password should be changed as soon as possible to prevent access by anyone other...

Страница 61: ...as Use alias alias alias alias to get a list of some of the system command aliases sysadmin alias Command aliases dir direct devl listdevice sel select help ver version lu listusers devices editdev de...

Страница 62: ...20 save changes made to etc files V1 02 break SCS1620 disconnect a user from a port V1 02 ci SCS1620 Shell V2 01 connections SCS1620 show users in direct mode V1 02 devices SCS1620 modify device port...

Страница 63: ...host elsewhere After the keys have been generated the user can establish a secure shell connection using ssh over a network syslog The SCS1620 keeps a system log file called var log syslog var log sys...

Страница 64: ...d the idle time exceeds the timeout duration the session will be disconnected by the system Use timeout timeout timeout timeout h h h h to get a help file for the timeout feature Use timeout timeout t...

Страница 65: ...or name to edit and update the parameter settings of a device Step through each device option when done the system prompts Are you sure before accepting the changes dtedce Use dtedce dtedce dtedce dte...

Страница 66: ...user is connected to the device and is in direct mode The device port buffer still collects data while not in direct mode when this setting is active It may be desirable to disable direct mode buffer...

Страница 67: ..._LISTEN ALLOW_LISTEN ALLOW_LISTEN prompt determines which devices a user may select for listen mode To edit or change parameters for the sysadmin enter the command edituser edituser edituser edituser...

Страница 68: ...dmin sysadmin adduser usage lci bin adduser name sysadmin adduser newuser Changing password for user newuser New UNIX password Retype new UNIX password passwd all authentication tokens updated success...

Страница 69: ...sure y sysadmin As soon as the password has been entered the system creates the new user identity and authenticates and creates the default parameters for it The system automatically enters the editu...

Страница 70: ...tusers listusers listusers command to verify after deleting a user ID editbrk Use editbrk user name editbrk user name editbrk user name editbrk user name to edit the break sequence for a user The brea...

Страница 71: ...ect port name or number direct port name or number direct port name or number to connect to a port only applies to port for which this user is allowed DIRECT access listen Use listen port name or numb...

Страница 72: ...using their programmed Escape sequence The preset value for this option is ESC then A which must be performed quickly but not simultaneously 6 5 3 Break Sequence The user can send a break signal to t...

Страница 73: ...m card is hot swappable so it is not necessary to power down the unit before installing the modem card 1 Remove the blank metal plate covering the modem slot on the SCS1620 Insert the modem card 2 Ins...

Страница 74: ...run on the system This command does not appear in the help help help help or command menu list since it is only used when installing the modem card after the initial installation To Initialize the Mo...

Страница 75: ...scape character is SCS1620 login 8 3 Modem Module The SCS1620 with the optional Modem module can support three configurations Plain text tty This provides for an interface identical to that presented...

Страница 76: ...ay be accessed by the user see Section 5 7 Using the Buffer but the user may issue no commands to the server If the user desires to issue commands to the server they must enter direct mode see Section...

Страница 77: ...ce a window with the hexadecimal representation of the old escape sequence will appear Pressing ESC to exit from the edit prompt will not work it will add additional ESC characters hexadecimal value 1...

Страница 78: ...em A A 01 01 of Terminal Device RJ45 Connector Pinouts SCS1620 Drawing Number 1620_term_dev vsd 1 4 6 8 7 2 3 5 Tx Rx RTS CTS DTR DSR DCD SG SCS1620 Terminal Device DTE RJ45 1 4 6 8 7 2 3 5 Tx Rx RTS...

Страница 79: ...most SUN applications Title Size Part Number Rev Sheet File System A A 200d0066S vsd 01 01 of RJ45 Receptacle to DB25M Adapter 200 0066 SCS1620 2 DB25 MALE 3 4 5 6 7 8 20 3 2 7 8 6 5 1 4 RJ45 pin 1 Dr...

Страница 80: ...Part Number Rev Sheet File System A A 200d0067 1620 vsd 01 01 of RJ45 Receptacle to DB25F Adapter 200 0067 SCS1620 2 DB25 FEMALE 3 4 5 6 7 8 20 3 2 7 8 6 5 1 4 RJ45 pin 1 Drawing Number 700 200 0067 1...

Страница 81: ...mber Rev Sheet File System A A 200d0069 vsd 01 01 of RJ45 Receptacle to DB9M Adapter 200 0069 System Console Switch 1 DB9 MALE 2 3 4 5 6 7 8 1 2 3 4 5 6 7 8 RJ45 pin 1 Drawing Number 700 200 0069 261...

Страница 82: ...s serial port Title Size Part Number Rev Sheet File System A A 200d0070 1620 vsd 01 01 of RJ45 Receptacle to DB9F Adapter 200 0070 SCS1620 1 DB9 FEMALE 2 3 4 5 6 7 8 1 2 3 4 5 6 7 8 RJ45 pin 1 Drawing...

Страница 83: ...rs Title Size Part Number Rev Sheet File System A A 01 01 of Netra t1 to SCS1620 RJ45 adapter pinout 200 0225 SCS1620 Drawing Number 700 200 0225 200d0225 vsd 100 Washington Street Milford CT 06460 80...

Страница 84: ...620 s operating software can be updated by a downloadable software update downloaded from Lightwave s FTP site which consists of two files a tar file and an update script file The two files must alway...

Страница 85: ...so that the case is accessible Shut Down the SCS1620 1 You must be logged in as sysadmin 2 Type poweroff and press Enter The system will gracefully shut down and close all files after about two minute...

Страница 86: ...it to prevent static discharge slide the Flash module into the holder DO NOT FORCE THE MODULE IN it is keyed by its alignment grooves and will slide easily only one way 4 Be certain that the module is...

Страница 87: ...ndensing Storage temperature range 4 F 20 C to 158 F 70 C Storage humidity range 10 to 90 RH non condensing Heat generated in normal operation 75 1 BTU hour C 3 Electrical Both the AC and DC power ver...

Страница 88: ...rate 115 200 Minimum baud rate 2400 Maximum user sessions 16 ports any combination C 4 2 Network Connector RJ45 Protocol TCP IP IP version 4 Maximum speed 10 or 100 Mbits half duplex Auto negotiation...

Страница 89: ...Warning This is a Class A product In a domestic environment this product may cause radio interference in which case the user may be required to take adequate measures Note This equipment has been tes...

Страница 90: ...trip DC rated Overcurrent protection devices e g circuit breakers must be provided as part of each installation and are not included with the SCS1620 The device must be located between the DC power so...

Страница 91: ...Equivalent Character Hexadecimal Code Equivalent Character 00 NUL 20 SP 01 SOH 21 02 STX 22 03 ETX 23 04 EOT 24 05 ENQ 25 06 ACK 26 07 BEL 27 08 BS 28 09 HT 29 0A NL 2A 0B VT 2B 0C NP 2C 0D CR 2D 0E...

Страница 92: ...Code Equivalent Character 40 60 41 A 61 a 42 B 62 b 43 C 63 c 44 D 64 d 45 E 65 e 46 F 66 f 47 G 67 g 48 H 68 h 49 I 69 i 4A J 6A j 4B K 6B k 4C L 6C l 4D M 6D m 4E N 6E n 4F O 6F o 50 P 70 p 51 Q 71...

Страница 93: ...isplayed To end the less less less less program press q to return to the command line SUMMARY OF LESS COMMANDS Commands marked with may be preceded by a number N Notes in parentheses indicate the beha...

Страница 94: ...et command goes forward to the close bracket matching the N th open bracket in the top line Each find open bracket command goes backward to the open bracket matching the N th close bracket in the bott...

Страница 95: ...s CAUTION It is possible to damage a file which might render the system inoperative by improper use of a file or command editor on system files This section is only meant as a review for those familia...

Страница 96: ...rt the text All existing text is shifted down and follows the text you are about to insert u undo the last modification x delete the letter at the current cursor position dd delete the current line On...

Страница 97: ...ing the root password To Change the root level password of the SCS1620 follow the example above The default root password is root 1 Log in as sysadmin 2 Type bash bash bash bash to get to root level n...

Страница 98: ...SCS1620 Product Manual Lightwave Communications Page 98 www lightwavecom com For Your Notes...

Отзывы: