Lantronix SCS820 manual

Part No. 900-287 Rev. D April 2004 SCSxx05/SCSxx20 Secure Console Server User Guide Models SCS3205, SCS4805, SCS820, SCS1620 with Firmware v4.3 and later[...]

i Copyright & Trademark © 2003, Lantronix. All rights reserved. No part of the contents of this book may be transmitted or reprodu ced in any form or by any means without the written permission of Lantronix. Printed in the United States of America. Lightwave Communications is a Lantron ix Inc. Company. Ethernet is a trademark of XEROX Corporat[...]

ii Disclaimer & Revisions Operation of this equipment in a residentia l area is likely to cause int erference in which case the user, at his or her own expense, will be required to take whatever measures may be required to correct the interference. Note: This equipment has been tested and foun d to comply with the limits for Class A digital dev[...]

iii Safety Precautions Please follow the safety precautions describe d below when installing and operating the SCSxx05/SCSxx 20 Secure Console Server. Cover  Do not remove the cover of the chassis. There are no use r-serviceable parts inside. Opening or re moving the cover may expose you to dangerous voltage that could cau se fire or electric sh[...]

iv Precauciones de seguridad Al instalar y utilizar el servidor segu ro de consola SCSxx05/SCSxx20, observe las precauciones de seguri dad que se describen a co ntinuación. Tapa  No retire la tapa del chasis. En el interior no hay ningu na pieza que el usuario deba manipular. Abrir o retira r la tapa puede exponer al usuario a tensiones peligro[...]

v Conexiones de puertos  Conecte el puerto de red solam ente a una red Ethernet compatibl e con 10Base-T/100Base-TX.  Conecte los puertos de di spositivos solamente a equi pos con puert os serie compatibles con EIA-232 (antes, RS-232C).  Conecte el puerto terminal solamente a equip os con puertos seri e compatibles con EIA-232 (antes, RS-2[...]

vi Fusibles  Pour assurer la protecti on contre l’incendie, remplacez toujours le fusibl e du module d’alimentation électri que par un modèle du même type et de la même capacité. Rack  N’installez pas cet équipement dan s un rack si une mauvaise rép artition des masses risque de provoquer l’instab ilité du rack. Toute chute ri[...]

vii  Während eines Gewitters dürfen Sie das Gerät nicht anschließen oder vom Netz trennen. Erdung  Schließen Sie das Gerät an einem zuverlässig en Erdungspunkt an.  Achten Sie besonders auf die ein wandfreie Verbindung, wen n der Anschluss über eine Steckdosenlei ste u nd nicht direkt am Endstromkreis erfolgt. Sicherungen  Erset[...]

viii  Используйте только шнур питания , у которого номинальные значения напряжения и тока превышают номинальные значения напряжения и тока , указанные на устройстве .  Установите устройство[...]

ix[...]

x[...]

xi[...]

xii[...]

xiii[...]

xiv[...]

xv Contents Copyright & Trademark ________________________________________________________ i LINUX GPL Compliance _______________________________________________________ i Contacts ___________________________________________________________________ i Disclaimer & Re visions ________________________________________________________ ii Safety [...]

xvi Connecting Using Telnet or Your Serial Termin al _____________________________ 4-2 Logging in as System Administrator _______________________________________ 4-2 Accessing the Setup Menu ______________________________________________ 4-2 Navigating ________________________________________________________________ 4-3 Done Option ________________[...]

xvii 7: System Administrator and User Functions __________________________ 7-1 System Administrator Functions __________________________________________ 7-1 Security and Passwords _____________________________________________________ 7-1 Changing the S ysadmin Password _____________________________________________ 7-1 Changing the Root Pass word __[...]

xviii less _____________________________________________________________________ 8-8 logout ___________________________________________________________________ 8-8 User Management Comm ands ___________________________________________ 8-9 listusers __________________________________________________________________ 8-9 adduser _______________________[...]

xix SCSxx20 Adap ters ________________________________________________________ C-13 D: Compliance and Warranty Information _____________________________ D-1 Compliance Information (1) ______________________________________________ D-1 Compliance Information (2) ______________________________________________ D-3 Warranty ____________________________[...]

1-1 1 1 : : I I n n t t r r o o d d u u c c t t i i o o n n The Lantronix SCS family of Secure Con s ole Servers enables IT professionals to remotely and securely configure and ad minister servers, routers, s witches, telephone equipment, or other devi ces equipped with a serial po rt. This chapter introduce s you to the Lant ronix SCSxx05 and SCSx[...]

SCSxx05/SCSxx20 User Guide 1: Introduction 1-2 Figure 1-1. SCS4805 – 48 De vice Ports, 1 Network Port, 1 Terminal Port, AC Powered This User Guide covers the following p roducts:  Model SCS820 - AC or DC Powered 8-Port Secu re Console Server  Model SCS1620 - AC or DC Powered 16-Port Se cure Console Server  Model SCS3205 - AC Powered 32-P[...]

SCSxx05/SCSxx20 User Guide 1: Introduction 1-3 Figure 1-3. SCS1620 A – 16 Device Ports, 1 Network Port, 1 Terminal Po rt, AC Powered Figure 1-4. SCS820 – 8 De vice Ports, 1 Network Port, 1 Terminal Port, AC Powered Hardware Features  1U-tall (1.75 inches) rack-mount able secure console server  One 10Base-T/100Base-TX network port for con [...]

SCSxx05/SCSxx20 User Guide 1: Introduction 1-4 System Features  Ability to connect up to 48 RS-232 serial console s  10Base-T/100Base-TX IP network compatible  Buffer logging to file  ID/Password security, configura ble access right s  Email notification  Secure shell (SSH) security  Open Lightweight Directory Access Protocol ([...]

SCSxx05/SCSxx20 User Guide 1: Introduction 1-5 LDAP (Lightweight Directory Access Protocol) A set of protocols for accessing info rmation directories. NFS (Network File System) A protocol that allows file sharing across a network. NIS (Network Information System) A network-naming and admini stration system for smaller networks. NTP (Network Time Pr[...]

SCSxx05/SCSxx20 User Guide 1: Introduction 1-6 All devices attached to both the device por ts and the terminal p ort must support the RS-232C (EIA-232) sta ndard. Category 5 cabling with RJ45 connections is used for the device port conne ctions and for the terminal port. Device ports (numbered from port 1 to port 48) supp ort seven baud rate option[...]

SCSxx05/SCSxx20 User Guide 1: Introduction 1-7 Device Port Buffer The SCS products support port data buf fe ring of the messages on the system's device ports. Port buffers are enabled by default. 256K FIFO Buffer Each device port stores 256 KB (approximately 400 screen s) of I/O data in a true FIFO buffer. You may view this data while t he use[...]

SCSxx05/SCSxx20 User Guide 1: Introduction 1-8 Technical Specifications Table 1-1. SCSxx05 Technical Sp ecifications CPU, Memory AMD SC520 133 MHz 128 MB FLASH Card Memory (non-volatil e) 128MB RAM 256K FIFO Buffer RAM per Device Port Serial Interface (Device) RJ45-type 8-conductor connector (DT E default; configurable) Speed software selectable (2[...]

SCSxx05/SCSxx20 User Guide 1: Introduction 1-9 Table 1-2. SCSxx20 Technical Sp ecifications CPU, Memory AMD SC520 133 MHz 128 MB FLASH Card Memory (non-volatil e) 128MB RAM (includes 256K FI FO Buffer RAM per device port) Serial Interface (Device) RJ45-type 8-conductor connector (DCE defa ult; configurable) Speed software selectable (2400 to 1 15,2[...]

SCSxx05/SCSxx20 User Guide 1: Introduction 1-10 System Resource Information The SCS is programmable using OS -level command s and options. The system administrator configures the prod uct using a command-line inte rface or one of several prepared scripts. Numerous resources on the Internet (a nd elsewhere ) provide information about security option[...]

2-1 2 2 : : I I n n s s t t a a l l l l a a t t i i o o n n This chapter provides instruction s for installing the SCS. It includes the following topics: Topic Page Physical Installation 2-1 Power 2-2 Connecting a Terminal 2-3 Connecting to a Device Port 2-4 Connecti ng the Netw ork Port 2-5 Connecting the Modem Port (SCSxx20) 2-5 Power Manager Int[...]

SCSxx05/SCSxx20 User Guide 2: Installation 2-2 Power The SCS consumes less than 25W of electri cal power. AC Input The SCS has a universal auto-switching AC power su pply. The power supply accepts AC input voltage between 10 0 and 240 VAC with a frequency between 50/60 Hz. The power inlet to the chassis use s a conventional IEC-type cord set, which[...]

SCSxx05/SCSxx20 User Guide 2: Installation 2-3 Connecting a Terminal The terminal port is for local access to the SCS and the attach ed devices. You may attach a dumb terminal or computer with terminal emulation to the terminal port. The SCS terminal port uses RS-232C protocol and suppo rts VT100 emulation. Figure 2-4. SCS3 205 Rear Panel Connec ti[...]

SCSxx05/SCSxx20 User Guide 2: Installation 2-4 Connecting to a Device Port You can connect any device that has a serial console port to the SCS for consolidated remote administration. You can configure the device p orts individually. The console port must supp ort the RS-232C interface. Additionally, many servers must either have the se rial port e[...]

SCSxx05/SCSxx20 User Guide 2: Installation 2-5 Connecting the Network Port The SCS’s network port (10Base-T/10 0B ase-TX) allows remote access to the attached devices and the system administrative functions. You must first set up the network paramete rs for the network port before you can reach the SCS remotely. You can change the netwo rk parame[...]

SCSxx05/SCSxx20 User Guide 2: Installation 2-6 Power Manager Interface The SCSxx20 has a dedicated port for the Lantronix PCU8 Po wer Control Unit. With the SCSxx05 (and the SCSxx20, if desired), you may use any available device port. The PCU8 uses a DB9 connector on its serial conn ector and requires a Part Numb er 200.0069 DB9 to RJ45 adapter for[...]

3-1 3 3 : : Q Q u u i i c c k k S S t t a a r r t t This chapter helps you get your IP netwo rk port up and running quickly, so you may administer the SCS using your netwo rk. There are two m ethods to quick start the network connectio ns:  You may use the front panel display and buttons, or  You may use your existing IP netwo rk, accessing t[...]

SCSxx05/SCSxx20 User Guide 3: Quick Start 3-2 Method #1 – Using the Front Panel Displa y You can use the front panel display an d pushbuttons to set up the basic network interface. The system administrator can then access the SCS using your existing IP network. Figure 3-1. Front Panel LCD Display and Five Pushbuttons (Enter, Up, Down, Left and Ri[...]

SCSxx05/SCSxx20 User Guide 3: Quick Start 3-3 Figure 3-2. Front Pane l Setup Options with Associate d Parameters Normal Network Terminal Release Dates Time / Date Settings IP Setting Settings System Timezone Subnet Mask LCD Calendar Gateway DNS1 DNS2 DNS3 > 3. When the display shows the feature that you wish to edit, press the Enter key on the k[...]

SCSxx05/SCSxx20 User Guide 3: Quick Start 3-4 Method # 2- Using Telnet You can use Telnet to connect to the SCS instead of using the terminal port if your workstation is configured to commu nicate with the default net work settings of the SCS. The default IP address of the SCS is 10.0.0.1 with a subnet mask of 255.0.0.0. If you temporarily change y[...]

4-1 4 4 : : C C o o n n f f i i g g u u r r a a t t i i o o n n The setup command provides a text-ba sed interface for administering the SCS. It requires VT100 terminal sup port using the keyboard (no mou se support). The setup command prom pts the system administrator for appro priate entries to simplify the configur ation process. The setup comma[...]

SCSxx05/SCSxx20 User Guide 4: Configuration 4-2 Topic Page Configuring Device Ports 4-5 Updating Software 4-14 Using Done 4-16 Saving 4-17 Rebooting 4-17 Connecting Using Telnet or Your Serial Terminal If you are not already connected as de scribed in Quick Start, you have two options:  Connect the terminal port to a VT100 terminal device or com[...]

SCSxx05/SCSxx20 User Guide 4: Configuration 4-3 Figure 4-1. Setup (Sy stem Configuration) Program 2. To make changes to the system configuration, select Yes and pre ss Enter . A setup (configuration) menu, includi ng the available configuration options and a Done option, displays. (You mu st scroll down to see all of the menu options.) Note: If you[...]

SCSxx05/SCSxx20 User Guide 4: Configuration 4-4 Table 4-1. Setup Me nu Navigation Done Option The last item in the menu list is Done . You must use this optio n to complete your entries and to exit the setup script. Done prepares any entries to be written to flash memory, but it does not write them to flash memory. For more information about Done ,[...]

SCSxx05/SCSxx20 User Guide 4: Configuration 4-5 2. Select Yes to use DHCP to obtain the IP address, netmask, and gateway, or No to enter your own values. DHCP What is the value for BOOTPROTO? Enable DHCP (Please select ‘dhcp’ or ‘none’) If you choose ‘none’, you MUST provide values for IPADDR, NETMASK, and GATEWAY. Dhcp none 3. Press En[...]

SCSxx05/SCSxx20 User Guide 4: Configuration 4-6 Ip Address in dot quad notation (e.g., 10.2.3.4) Answer: 172.20.201.28 8. Press Enter. The netmask prompt displa ys. 9. Enter the value of the netmask, in dot-quad notation. Hostname and IP Address What is the value for NETMASK? IP Netmask in dot quad notation (e.g., 255.255.255.0) Answer: 255.0.0.0 1[...]

SCSxx05/SCSxx20 User Guide 4: Configuration 4-7[...]

SCSxx05/SCSxx20 User Guide 4: Configuration 4-8 4. At the end of the Timezone script, press Enter . The setup menu returns with Configure DNS select ed. At this point, you may continue with the next setup menu item, you may use the arrow keys to select another item in the list, or you may arrow down to Done to exit the setup script. (You can do thi[...]

SCSxx05/SCSxx20 User Guide 4: Configuration 4-9 Configuring Services With this menu option, you enable or disable the follo wing:  Syslog (system logging) (default is enab led)  System logins using SSH (default is disabled)  System logins using Telnet (default is e nabled)  Simple Network Managem ent Protocol (SNMP Agent) (default is di[...]

SCSxx05/SCSxx20 User Guide 4: Configuration 4-10 Enabling/Disabling Web Configuration The SCS offers a Web-based configurati on interfa ce, which you can only access through your browser using SSL (Sec ure Sockets Layer) (https://). The Web interface has most of the same options as the console-ba sed setup routine and may be useful for updating con[...]

SCSxx05/SCSxx20 User Guide 4: Configuration 4-11 Configuring Email Relay The SCS incorporates a mail transport agent for email delivery. Use this option to identify your network’s SMTP relay server. 1. With Configure Email Relay selected, pre ss Enter . 2. Leave this value blank unless email deliv ery is not working, in which case enter the IP ad[...]

SCSxx05/SCSxx20 User Guide 4: Configuration 4-12 4. Press Enter . The PPP timeout prompt displays. 5. To cause an idle PPP connection to be disconnected after a specified number of minutes, backspace over the existing value and enter a number between 1 and 30 (minutes). Configure PPP Timeout Input value for Configure PPP Timeout. Answer: disabled 6[...]

SCSxx05/SCSxx20 User Guide 4: Configuration 4-13 1. With Config ure Mode m selected, press Enter. The enable modem logins prompt displays. 2. Select Yes to enable or No (default) to disable mode m logins. Enable Modem Logins? Do you want to enable logins on the Modem? This will allow PPP and TTY logins. Enable Modem Logins? Yes / No If you selected[...]

SCSxx05/SCSxx20 User Guide 4: Configuration 4-14 8. Select Yes to enable a direct PPP login, or No to disable a direct PPP login. Enable PPP Logins? Do you want to enable PPP logins? This will allow a direct PPP login without having to log into a user shell. Yes / No 9. Press Enter. If you selected Yes, the PPP parameters options prompt displays. I[...]

SCSxx05/SCSxx20 User Guide 4: Configuration 4-15 Configuring CHAP Secrets The SCSxx20 supports either CHAP or PAP, but not both. PAP is the default authentication method. The CHAP parameters include:  Client  Server  Secret (password used for authentic ation; generated by the system administrator)  IP address (acceptable local IP addre [...]

SCSxx05/SCSxx20 User Guide 4: Configuration 4-16 Configuring PAP Secrets PAP is the default authentication method. The parameters include:  Client  Server  Secret (password used for authentic ation; generated by the system administrator)  IP address (acceptable local IP addre ss) 1. With PAP Secrets on the setup menu selected, press Ent[...]

SCSxx05/SCSxx20 User Guide 4: Configuration 4-17 1. With Configure User Auth entication selected, press Enter . The User Authentication menu displays with Configure NIS selected. Figure 4-3. User Authentication Menu 2. Follow the instructions below for the method (NIS, LDAP, or RADIUS) you want to use. In addition to the selected method, you may co[...]

SCSxx05/SCSxx20 User Guide 4: Configuration 4-18 6. Enter the IP Address (in dot quad notation) of at least the NIS master se rver (required), and press Enter . The first slave server prompt display s. You may configure up to five NIS slave se rvers (SLAVE-1 through SLAVE-5). Slave server values are optional. There are five similar scre ens, one fo[...]

4-1 Configuring RADIUS If you are using the RADIUS option for authenti cating users, you must:  Enable RADIUS (default is disabl ed)  Enter the IP address of a RADIUS server  Enter the shared secret (text string that serves as a password b etween a RADIUS client and the SCS)  Enter the timeout (server connection timeout) 1. With Configu[...]

SCSxx05/SCSxx20 User Guide 4: Configuration 4-2 1. With Configure Global Port Permissions selected, press Enter . The direct mode permissions prompt displays. 2. If desired, enter a range and/or list of ports (for example, 1, 3, 5-7) to whi ch the direct mode permi ssions will apply. Default Permissions What is the value for ALLOW_DIRECT? Specify t[...]

SCSxx05/SCSxx20 User Guide 4: Configuration 4-3 1. With NFS Mount selected, press Enter . The NFS mount prompt display s. Enable NFS? Do you want to mount an NFS share from an NFS server? Do not use packet filtering (firewall) if you are using NFS or NIS Enable NFS? Yes No 2. Select Yes to install the NFS server information to mount an NFS share, o[...]

SCSxx05/SCSxx20 User Guide 4: Configuration 4-4 Configuring Firewall (Packet Filtering) The SCS incorporates a packet filtering option (a "firewall"). (The Web configuration interface uses the term “Packet Filtering.”) Note: You must not use packet filtering (firewall) if you are using NFS or NIS, because it would filter out the NFS o[...]

SCSxx05/SCSxx20 User Guide 4: Configuration 4-5 7. To enter the list of TCP Public Serv ices that the SCS should support, edit the text-entry list from the choices indicated in the Answer field (ftp-dat a, ftp, SSH, telnet, www, and https). Firewall.conf What is the value for TCP_PUBLIC_SERVICES? This is the list of ports we allow TCP connections t[...]

SCSxx05/SCSxx20 User Guide 4: Configuration 4-6 Device Port Configuration Options You can configure the device ports for p o rt identity (apply a relevant name) and for feature access and buff er logging. You can co nfigure device ports (fo r departments, for identifying equipment types, or fo r any other reason) in any combination; groups can b e [...]

SCSxx05/SCSxx20 User Guide 4: Configuration 4-7 4. Backspace over the existing data, and enter your name for this po rt. The device name cannot contai n a spac e. Use an underscore if you need an empty space in the name. 5. Press Enter. You have two options:  To go back and name or rename the sa me device p ort, repeat steps 3-5.  To save you[...]

SCSxx05/SCSxx20 User Guide 4: Configuration 4-8 3. In the Answer field, enter the number, range, or combination of ports to be administered. What device port do you want to configure? Input a device number, a device name, or a range. Examples of ranges: 3,7,9 2-12 1,4,6-9,14 Valid port range is 1-48 What device port do you want to configure? Answer[...]

SCSxx05/SCSxx20 User Guide 4: Configuration 4-9 Data Bits, Stop Bits, and Parity The format of the bit-wise transmissi on of data is determined by the data bits, stop bits, and parity parameters. The de fault settings are 8 data bits, 1 stop bit, and no parity. Check your equipment do cu mentation for the proper settings. 1. Use the arrow keys to s[...]

SCSxx05/SCSxx20 User Guide 4: Configuration 4-10 1. Select Yes to disable buffering, or sele ct No (default) to enable buffering. 2. Press Enter . You have two options:  To go back and change an y of your settings for this port or group of ports, select the Setup the Dev ice parameters option, or  When you are satisfied with the cha nges you [...]

SCSxx05/SCSxx20 User Guide 4: Configuration 4-11 File Logging by Port This option includes the followin g parameters:  Enable/disable (default is disabl ed)  Number of files saved per port  Log file path (can be NFS mounted)  Log file size (in bytes) 1. With File Logging Port selected, p ress Enter . The log to file flag prompt displays[...]

SCSxx05/SCSxx20 User Guide 4: Configuration 4-12 7. Enter the desired log file size in by tes (2048 = 2K ). The default is 2048 bytes. The amount of available memory limit s the maximum size of the log file. 8. Press Enter . the Device Logging Parameters menu return s with Syslog Port Logging, selected. Syslog Logging by Port Next, you configure th[...]

SCSxx05/SCSxx20 User Guide 4: Configuration 4-13 3. Enter the number (digits) of bytes of data the port will receive after which the SCS will capture log data and se nd an email regarding this port. In most cases, the terminal (consol e ) port of your device does not send any data unless there is an alarm condition. After the SCS receives a small n[...]

SCSxx05/SCSxx20 User Guide 4: Configuration 4-14 10. Press Enter . The email address prompt displ ays. 11. Enter the complete email address of the message recipient(s) for each device port(s). Each device port has its own recipi ent list. If you wish to enter more than one email address, sepa rate the addresses with a single space . Set Email Addre[...]

SCSxx05/SCSxx20 User Guide 4: Configuration 4-15 1. With Software Updates selected, press Enter . The protocol p rompt displays. What is the value for PROTOCOL? Please enter ‘tftp’ or ‘ftp’ to select the server type that will be used to obtain Software update files and as the server type for configuration save and restore. tftp ftp 2. Selec[...]

SCSxx05/SCSxx20 User Guide 4: Configuration 4-16 6. Enter the ftp user password and press Enter . The install software updates prompt displays. Input value for Install Software Update(s) Enter a space separated list of software update files to apply. They will be obtained from the server specified by SERVERIPADDR. Unless the filename here is specif[...]

SCSxx05/SCSxx20 User Guide 4: Configuration 4-17 Saving This SAVE command saves all change s and updates to non-volatile memory. The SCS automatically saves the programmed para meters after running the setup script for the first time only . After that, the system administrator must run SAVE manually, as follows: 1. To permanently save any parameter[...]

5-1 5 5 : : W W e e b b I I n n t t e e r r f f a a c c e e The SCS incorporates a browser-based in terface for the syste m administrator. This interface provides an alternate m e thod of updating most of the parameters initially set up using the setup command. The Web interface is password protected, using SSL encryption. Always use the https:// p[...]

SCSxx05/SCSxx20 User Guide 5: Web Interface 5-2 Web Configuration Ut ility Main Page The Web Configuration Utility allows the system adminis trator to configure the SCS, much like the setup script does via a network o r terminal connection. Figure 5-2. The SCS Web Configuration Utility Main Page This section of the User Guide do es not show each wi[...]

SCSxx05/SCSxx20 User Guide 5: Web Interface 5-3 Table 5-1. Link s to Setup Menu Para meters Parameter Link Page Network Configuring Hostname an d IP Address 4-4 Timezone Configuring T imezone 4-6 DNS Configuring DNS 4-8 Services Configuring Services 4-9 NTP Configuring NTP 4-10 Email Relay Configuring Email Relay 4-11 Timeouts Configuring Timeouts [...]

SCSxx05/SCSxx20 User Guide 5: Web Interface 5-4 Saving Web Interface Entries Figure 5-6. Buttons a t Bottom of We b Utility Configuration Pa ge Apply Changes Applies the changes for the current pag e, but does not save them to flash memory. Closing the Web window d oes not save or apply any changes. You must apply changes after completi ng the chan[...]

6-1 6 6 : : M M o o d d e e m m S S e e t t u u p p If your SCSxx20 was shipped with a modem installed, it is not necessary to perform the modem setup, and you can skip this chapter. This p rocedure is for installing a modem in the field. This chapter includes the followin g topics: Topic Page Installing a Modem Card 6-1 Initializing the Modem 6-1 [...]

SCSxx05/SCSxx20 User Guide 6: Modem Setup 6-2 To initialize the modem (only n eeded when first installed ): 1. Login as sysadmin 2. Type install_modem at the sysadmin> prompt. 3. When the command has run complete ly, the sysad min> prompt displays. The modem has reset and is ready to use. SCS1620 login: sysadmin Password: sysadmin>install_[...]

7-1 7 7 : : S S y y s s t t e e m m A A d d m m i i n n i i s s t t r r a a t t o o r r a a n n d d U U s s e e r r F F u u n n c c t t i i o o n n s s This chapter describe s how the system administrator and u sers gain access to the system and the functions permitted for each role. It include s the following topics. Topic Page System Administrato[...]

SCSxx05/SCSxx20 User Guide 7: System Administrator and Us er Functions 7-2 Changing the Root Password The system administrator must also change the password fo r the root level. Although users do not require root access, the sy stem administrator ca n access it using SSH. Make sure to know the root access password and b e certain that it has not be[...]

SCSxx05/SCSxx20 User Guide 7: System Administrator and Us er Functions 7-3 If You Misplace the Sysadmin Password You can lock the system do wn and prevent programming access if you misplace your pass word. If this should happen, recover the sy stem as follows: 1. Connect a terminal or PC running terminal software to the terminal port on the SCS. 2.[...]

SCSxx05/SCSxx20 User Guide 7: System Administrator and Us er Functions 7-4 Terminal Port Access To form a terminal port connection to the SCS, use a hard wired VT100 terminal or terminal emulation program that is conne cted to the terminal connector on th e SCS. The system administrator normally us es this type connection during service events; how[...]

SCSxx05/SCSxx20 User Guide 7: System Administrator and Us er Functions 7-5 Alpha, the prompt would read GEORGE-Al pha>. When this prom pt displays, you are in monitor mode. There is no direct communicatio n between you and the server. Note: You may select a serve r already selected by another use r. The system saves any output from the se rver t[...]

SCSxx05/SCSxx20 User Guide 7: System Administrator and Us er Functions 7-6  To change the sequence, enter the new sequence an d press Enter . If for some reason the sequence is unacceptable, an error messag e displays, and the sequence reverts to the existing character val ues. A list of hexadecimal character settings is pr ovided at the end of [...]

8-1 8 8 : : C C o o m m m m a a n n d d s s This chapter includes the followin g topics: Topic Page Summary of Commands 8-1 System Commands 8-1 Device Commands 8-7 User Management Commands 8-9 User Commands 8-12 Advanced Sysadmin Comma nds 8-13 Summary of Commands A summary of the SCS commands is provided below. Some commands only sysadmin can acce[...]

SCSxx05/SCSxx20 User Guide 8: Commands 8-2 sysadmin User Command Purpose x x passwd Sets user password. x poweroff Powers-off (shuts down) the SCS. x reboot Reboots the SCS. x reset-modem Resets the internal modem. (SCSxx20 only) x SAVE Commits (saves) programming changes. x x select Selects a port. x x scp Secures copy. x setup Initially configure[...]

SCSxx05/SCSxx20 User Guide 8: Commands 8-3 poweroff Use the poweroff command to shut the system off. This command allows the system to properly close any open files and gracefully exit and shut down. If you turn off the system without using the poweroff command (including power failure), the system will require some extr a self -checks and start-up[...]

SCSxx05/SCSxx20 User Guide 8: Commands 8-4 passwd At the first login, the SCS uses the factory default password, PASS (all upper case). The sysadmi n should change thi s default password as soon as po ssible to prevent access by unauthorized person nel. sysadmin>passwd Changing password for sysadmin (current) UNIX password: New UNIX password: Re[...]

SCSxx05/SCSxx20 User Guide 8: Commands 8-5 sysadmin> sysadmin>info SCS4805 Shell V4.00 sysadmin> reset-modem Use this command to reset the internal modem. (SCSxx20 only) scp Use scp to perform a secure copy , using SSH, between two hosts. The file copy is encrypted and is therefore se cure. Refer to the man pages for scp for a descriptio n[...]

SCSxx05/SCSxx20 User Guide 8: Commands 8-6 − Device buffer examined ( less or cat ) − User becomes root The SCS comes set to log all warnings and higher e vents. The default file entry is *.warning , with lower level settings (a lowe r level generate s more messages) in *.notice and *.info (even more events). To change the logging level: 1. Log[...]

SCSxx05/SCSxx20 User Guide 8: Commands 8-7 edituser V3.05 lcd V3.13 lciclear V3.06 lcistty V3.06 listen V3.21 listend V3.22 ltxloggerd V1.17 lu V3.05 modem_reset V3.10 perms V3.09 timeout V3.08 timeoutd V3.06 lci-system-configure V1.22 EXAR-XR16L788 Device Driver V2.8 SCS4805 release date: Thu Sep 19 16:14:49 2002 V4.0 sysadmin> Device Commands [...]

SCSxx05/SCSxx20 User Guide 8: Commands 8-8 Device Name The device name cannot contain a spac e. Use an un derscore if you need an empty space in the name. Baud Rate Seven device baud rates are offered: 2400, 4800, 96 00, 19200, 38400, 57600, and 115,200. Most devices use 9600 a s t he terminal/administration port' s baud rate, so the device po[...]

SCSxx05/SCSxx20 User Guide 8: Commands 8-9 User Management Commands The system administrator u ses the following commands to add an d delete users and to add and change settings for system users. The sysadmin is also a user, although one who cannot b e deleted. listusers Use listusers to get a list of all assigned users in the SCS. sysadmin>list[...]

SCSxx05/SCSxx20 User Guide 8: Commands 8-10 The system automatically enters the edituser mode for this new user, allowing the system administrator to cha nge any of the preset parameters. edituser Use this command to edit the port configuration and d efault operational sequences for that use r profile. This command creates u ser IDs and privileges.[...]

SCSxx05/SCSxx20 User Guide 8: Commands 8-11 3. To accept the changes, type y for yes, or to reject the changes, type n or do not enter anything. 4. Press Enter . sysadmin> sysadmin>edituser Enter accepts present value Server number of 0 (zero) will remove all access to servers ESCAPE_SEQ= x1bA > BREAK_SEQ= x1bB > ALLOW_CLEAR= 1-8 >[...]

SCSxx05/SCSxx20 User Guide 8: Commands 8-12 User Commands After the user logs in to the system, the user name be comes the command prompt. For example, ross> displays after Ross logs in. Users log in to identify themselves to t he system and to access the device port s to which the system administrator has assigned them privilege s. select Use s[...]

SCSxx05/SCSxx20 User Guide 8: Commands 8-13 Advanced Sysadmin Commands You can access the followi ng features from the command line inte rface or administer them using a Linux comm and line prompt through your network. Using ssh Keys and keygen Procedures The following info is taken, with great liberties, from a n open source article discussing ssh[...]

SCSxx05/SCSxx20 User Guide 8: Commands 8-14 Using Single Signon t o Save Time To automate and save time, try this: [max@miraclehut ~]$ ssh-agent /bin/b ash [max@miraclehut max]$ ssh- add Need passphrase for /home/max /.ssh/identit y (max@miraclehut). Enter passphrase: Identity added: /home/max/. ssh/identity (max@miraclehut) [max@miraclehut max]$ f[...]

SCSxx05/SCSxx20 User Guide 8: Commands 8-15 To mount a file system at boot time, the /etc/fstab file must have an entry that is associated with the director y to mount. Following is an example of how to use this facility to automatically mount an NFS file on the SCS. In /etc/fstab the following entry must be present: /dev/device /dir/to/mount ftype[...]

SCSxx05/SCSxx20 User Guide 8: Commands 8-16 You can only configure this feature from the bash sh ell as the root user. (See instructions for changing to the root u ser in Mounting File Systems During Boot .) The following files are needed to insure that autofs works properly: /usr/sbin/ automount /etc/rc.d/init.d/ autofs /etc/ auto.maste r auto.exp[...]

SCSxx05/SCSxx20 User Guide 8: Commands 8-17 b) In the auto.export file, add the following: tomv -fstype=nfs,rw,int r,soft,bg erh62:/home/tomv where tomv The NFS mounted directory name. fstype The comma-delimited option list that mount will use. erh62:/home/tomv The server name and directory that the SCS will use. 2. Once the configuration files are[...]

9-1 9 9 : : P P o o r r t t A A c c c c e e s s s s The SCS provides various ways of a ccessing serial ports. This ch apter includes the following topics: Topic Page Telnet to Serial Port 9-1 IP Address per Serial Port Feature 9-5 Telnet to Serial Port Feature This section describes ho w to set up and us e the Telnet to a Serial Port feature of the[...]

SCSxx05/SCSxx20 User Guide 9: Port Access 9-2 IP Port Number Serial Port Number 9001 1 9002 2 9003 3 ... ... 9008 8 ... ... 9046 46 9047 47 9048 48 IP Port Number/Serial Port Number Cross-Reference If you are assigning an IP address per co nsole server seri al port, enter the following command on the client machin e to directly access a serial port[...]

SCSxx05/SCSxx20 User Guide 9: Port Access 9-3 Assigning an IP Port Number to a Serial Port You need to modify two files to assign an IP port number to a serial port. In our example we specify that:  IP port number 9001 correlates to se rial port 1  IP port number 9002 correlates to se rial port 2 and so on, up to 9048 correlating to device po[...]

SCSxx05/SCSxx20 User Guide 9: Port Access 9-4 Testing If you have not set up the (local or NIS) port permission file for use rs on the console server, they will not be abl e to access the se rial ports. If the user does not have the appropriat e serial port permissi ons, attempting to connect via Telnet gives the following results: kerrym@erh62 $ T[...]

SCSxx05/SCSxx20 User Guide 9: Port Access 9-5 IP Address per Serial Port Feature The IP Address per Serial Port featur e allows you to set multiple network addresses on the same low-level netwo rk device driver (e.g., two IP addresses in one Ethernet card). It is typically used for services that act differently based on the address they listen on ([...]

SCSxx05/SCSxx20 User Guide 9: Port Access 9-6 The content of the first file, ifcfg-eth0:0 , is: DEVICE="eth0:0" BOOTPROTO="none" ONBOOT="yes" IPADDR="192.168.202.11" NETMASK="255.255.255.0" The content of the second file, ifcfg-eth0 :1 is: DEVICE="eth0:1" BOOTPROTO="none" ONBOOT=[...]

SCSxx05/SCSxx20 User Guide 9: Port Access 9-7 Note: If you need to set up an additional gateway to a ccess the aliased IP addresses from client workstation(s), for exam ple, set up the /etc/sysconfig /static- routes file. (This is an additional gateway – the default gateway is set up through the sysadm in setup program.) By default, the static-r [...]

SCSxx05/SCSxx20 User Guide 9: Port Access 9-8 Saving the Changes to Flash Once you have completed the setup and test, change the file system back to read-only and save the cha nges to flash. (Note that on the system shown below, NIS was running. NIS was use d for both t he login authentication of “kerrym” and to obtain the permissions for the s[...]

SCSxx05/SCSxx20 User Guide 9: Port Access 9-9 Bypassing Authentication Note: The ability to bypass the authentication m echanisms, as described below, may not be deployed on your pa rticular console server. If it has been deployed on your con sole server and you have specified that authentication should not take place on certain serial ports, bewar[...]

SCSxx05/SCSxx20 User Guide 9: Port Access 9-10 2. Set up the nobody.conf file and modify it accordingly. a) Log in to the sysadmin account, and then go into the bash shell. sysadmin>bash sysadmin@km3210 /var/tmp$ su Password: root@km3210 /var/tmp# cd /lci/users root@km3210 /lci# cp ../default.user.conf nobody.conf root@km3210 /lci# vi nobody.con[...]

A-1 A A : : U U n n i i x x C C o o m m m m a a n n d d H H e e l l p p The system administrator u ses some UNIX/Linux commands in ad ministering the SCS. Some of the system commands automatically invoke the less command (e.g., if you run the devices command, less displays the inform ation.) You may use the vi editor when you run setup . less comma[...]

SCSxx05/SCSxx20 User Guide A: Unix Command Help A-2 SEARCHING /pattern * Search forward for (N-th) matching line. ?pattern * Search backward for (N-th) matching line. ESC-^B <c1> <c2> * Find open bracket <c1> ?pattern * Search backward for (N-th) matching line. n * Repeat previous search (for N-th occurrence). N * Repeat previous [...]

SCSxx05/SCSxx20 User Guide A: Unix Command Help A-3 MISCELLANEOUS COMMANDS -<flag> Toggle a command line option [see OPTIONS below]. --<name> Toggle a command line option, by name. _<flag> Display the setting of a command line option. __<name> Display the setting of an option, by name. +cmd Execute the less cmd each time a n[...]

SCSxx05/SCSxx20 User Guide A: Unix Command Help A-4 If you are not sure which mode you are in at any time, press Esc , which returns you to the command mode. A summary of the modes and some vi commands follows. Using vi in Command Mode The following keyboard command s apply to vi in command mode. Move the cursor within the open file using the follo[...]

B-1 B B : : H H e e x x a a d d e e c c i i m m a a l l C C o o n n v v e e r r s s i i o o n n C C h h a a r r t t Equivalent characters in italics are non-p rinting characters or signal s. Hexadecimal to Character Co nversion Hexadecimal Code Equivalent Character Hexadecimal Code Equivalent Character 00 NUL 20 SP 01 SOH 21 ! 02 STX 22 “ 03 ETX [...]

SCSxx05/SCSxx20 User Guide B: Hexadecimal Conv ersion Chart B-2 Hexadecimal Code Equivalent Character Hexadecimal Code Equivalent Character 42 B 62 b 43 C 63 c 44 D 64 d 45 E 65 e 46 F 66 f 47 G 67 g 48 H 68 h 49 I 69 i 4A J 6A j 4B K 6B k 4C L 6C l 4D M 6D m 4E N 6E n 4F O 6F o 50 P 70 p 51 Q 71 q 52 R 72 r 53 S 73 s 54 T 74 t 55 U 75 u 56 V 76 v [...]

C-1 The serial device port s of the SCS xx05/SCSxx20 products match the RJ45 pinouts of the console port s of many popular devices found in a ne twork environment. The SCS uses conventional Categ ory 5 fully pinned network cables for all connections; the cables are availa ble from Lantronix in various lengths. In some cases you will need an adaptor[...]

SCSxx05/SCSxx20 User Guide C: Pinouts and Adapters C-2 SCSxx05 SCSxx05 Pinouts Pinouts for SCSxx05 Terminal and Device Ports (DCE and DTE) 4 2 7 8 1 6 3 5 Tx Rx RTS CTS DTR DSR SG SCSxx05 Termi nal / De vice (DTE) RJ45 4 2 7 8 1 6 3 5 Tx Rx RTS CTS DTR DSR SG SCSxx0 5 Terminal / Devic e (DCE) RJ45 pin 1 RJ45 Connector Note: De fault for Device Port[...]

SCSxx05/SCSxx20 User Guide C: Pinouts and Adapters C-3 SCSxx05 Adapters The adapters illustrated below are comp atible with the Lantronix SCSxx05 models. RJ45 Receptacle to DB25M DCE Adapter for the SCSxx05 (Part# 2 00.2066A) Use PN 200.2066A adapter with a du mb terminal or with most SUN applications. 1 5 2 6 4 7 6 2 7 20 8 4 8 5 3 3 RJ45 DB25 Mal[...]

SCSxx05/SCSxx20 User Guide C: Pinouts and Adapters C-4 RJ45 Receptacle to DB25F DCE Adapter for the SCSxx05 (Part# 200.2 067A) 1 5 2 6 4 7 6 2 7 20 8 4 8 5 3 3 RJ45 DB25 Female Pin 1[...]

SCSxx05/SCSxx20 User Guide C: Pinouts and Adapters C-5 RJ45 Receptacle to DB9M DCE Adapter for the SCSxx05 (Part# 2 00.2069A) 1 8 2 6 4 5 6 3 7 4 8 7 1 5 3 2 RJ45 DB9 Male Pin 1[...]

SCSxx05/SCSxx20 User Guide C: Pinouts and Adapters C-6 RJ45 Receptacle to DB9F DCE Adapter for the SCSxx05 (Part# 200.2070 A) Use PN 200.2070A adapter with a PC's serial p ort. 1 8 2 6 4 5 6 3 7 4 8 7 1 5 3 2 RJ45 DB9 Female Pin 1[...]

SCSxx05/SCSxx20 User Guide C: Pinouts and Adapters C-7 RJ45 Receptacle to DB9M DTE Adapter for the SCSxx05 (Part# 200.2071)[...]

SCSxx05/SCSxx20 User Guide C: Pinouts and Adapters C-8 RJ45 Receptacle to DB9F DTE Adapter for the SCSxx05 (Part# 200.2072)[...]

SCSxx05/SCSxx20 User Guide C: Pinouts and Adapters C-9 RJ45 Receptacle to DB25M DT E Adapter for the SCSxx05 (Part# 20 0.2073)[...]

SCSxx05/SCSxx20 User Guide C: Pinouts and Adapters C-10 RJ45 Receptacle to DB25F DT E Adapter for the SCSxx05 (Part# 200.207 4)[...]

SCSxx05/SCSxx20 User Guide C: Pinouts and Adapters C-11 RJ45 to RJ45F Netra Adapter for the SCSxx05 (Part# 200.2225) Use this adapter for Netra/ SUN/CISCO and others.[...]

SCSxx05/SCSxx20 User Guide C: Pinouts and Adapters C-12 SCSxx20 SCSxx20 Pinouts Pinouts for SCSxx20 Terminal and Device Port s (DCE and DTE) 1 4 6 8 7 2 3 5 Tx Rx RTS CTS DTR DSR DCD SG SCS1620 Terminal / Device (DTE) RJ45 1 4 6 8 7 2 3 5 Tx Rx RTS CTS DTR DSR DCD SG SCS1620 Terminal / Device (DCE) RJ45 pin 1 RJ45 Connector Note: Default for De vic[...]

SCSxx05/SCSxx20 User Guide C: Pinouts and Adapters C-13 SCSxx20 Adapters The adapters illustrated below are comp atible with the Lantronix SCSxx20 models. RJ45 Receptacle to DB25M DCE Adapter for the SCSxx20 (Part# 2 00.0066) Use PN 200.0066 adapter with a dumb terminal or with most SUN appli cations. 2 3 4 7 6 6 8 1 20 4 5 5 8 DB25 Male RJ45 Pin 1[...]

SCSxx05/SCSxx20 User Guide C: Pinouts and Adapters C-14 RJ45 Receptacle to DB25F DCE Adapter for the SCSxx20 (Part# 20 0.0067) 2 3 4 7 6 6 8 1 20 4 1 5 5 8 DB25 Male RJ45 Pin 1 3 2 7 5[...]

SCSxx05/SCSxx20 User Guide C: Pinouts and Adapters C-15 RJ45 Receptacle to DB9M Adapter for SCSxx20 (Part # 200.0069) 1 1 3 3 5 5 7 7 8 8 1 5 4 4 DB9 Male RJ45 Pin 1 2 2 6 6[...]

SCSxx05/SCSxx20 User Guide C: Pinouts and Adapters C-16 RJ45 Receptacle to DB9F Adapter for SCSxx20 (Part# 200.0070) Use PN 200.0070 adapter with a PC's serial port. 1 1 3 3 5 5 7 7 8 8 1 5 4 4 DB9 Female RJ45 Pin 1 2 2 6 6[...]

SCSxx05/SCSxx20 User Guide C: Pinouts and Adapters C-17 Netra t1 to SCSxx20 RJ45 Adapter (Part# 200.0225) Use this adapter for Netra/ SUN/CISCO and others.[...]

D-1 D D : : C C o o m m p p l l i i a a n n c c e e a a n n d d W W a a r r r r a a n n t t y y I I n n f f o o r r m m a a t t i i o o n n Compliance Information (1) Manufacturer’s Name & Address : Lantronix Inc., 15353 Barranca Parkway, Irvine, CA 92618 USA Declares that the following prod uct: Product Name(s): Model SCS4805 Secure Cons ole[...]

SCSxx05/SCSxx20 User Guide D: Compliance and Warranty Information D-2 This product carries the CE mark sin ce it has been tested and found compli ant with the following standards: Safety: EN 60950: 2000 Emissions: EN 55022: 1998 Class A Immunity: EN 55024: 1998 This product meets the requirem ents for and carries the following marks: VCCI (Japan) A[...]

SCSxx05/SCSxx20 User Guide D: Compliance and Warranty Information D-3 Compliance Information (2) (according to ISO/IEC Guide 22 and EN 45014) Manufacturer’s Name & Address : Lantronix Inc., 15353 Barranca Parkway, Irvine, CA 92618 USA Declares that the following prod uct: Product Name(s): Models SCS820, SCS162 0, SCS3205 Secure Console Server[...]

SCSxx05/SCSxx20 User Guide D: Compliance and Warranty Information D-4 Warranty Lantronix warrants each Lantronix product to be free from defe cts in material and workmanship for a period of ONE YEAR after the date of shipment. During this period, if a customer is unable to resolve a produ ct problem with Lantronix Technical Support, a Return Materi[...]