Instruction/ maintenance manual of the product F1DP116SEA Belkin
Go to page of 68
OmniView ® Serial Consol e Server User Manual F1DP116Sea.
T abl e of Contents Product Ov erview....................................................................................................................1 Introduction ...................................................................................
T abl e of Contents System Status and Log .........................................................................................................37 System Status .......................................................................................
.
1 section Product Ov erview Introduction Thank you for purchasing the Belkin OmniView Serial Console Server (Console Server). This device provides administrators secure monitoring and control of serve.
2 Product Ov erview Console Server F eatures • In-bandandout-of-bandmanagement Console port management solutions offer remote, reliable, and secure access to serial- console ports through in-band networks and out-of-band connectivity options, such as serial terminal access and dial-up modem.
3 section Product Ov erview Equipment Requirements • UniversalConnectivityKit(included) • RJ45-RJ45CAT5Cable(included) System Requir ements Web browser Java Plug-In The Console Server’s web interface requires installing JRE (Java Runtime Environment) v6.
4 Product Ov erview Unit Display Diagrams Front/RearPanel Fig. 1 Front View Fig.2RearView ReadyLED PowerLED LinkLED Resetbut- ton IECpower LANport Localconsoleport .
5 section Product Ov erview LED Indicators, Button, and Connectors • RESET button: Quickly press and release the button to reboot the Console Server. Press and hold the “Reset” button for more than five seconds to set the unit to its default configuration settings.
6 Product Ov erview Specifications Note: Specifications are subject to change without notice. Feature Specification General LEDs Power (red) Ready (green, normally blinking), Link/Act/10/100M.
7 section Local Installation WheretoplacetheConsoleServer: The enclosure of the Console Server is designed for stand-alone or rack-mount configuration. The Console Server can be mounted to a standard 19-inch server rack using the included rack-mount brackets and screws.
8 Local Installation Desktop or Rack-Mounting The Console Server can be placed on desktops or rack-mounted on 19-inch/1U racks. Note: Before you begin, locate the MAC address and serial number on the back of the Console Server.
9 section Local Installation Connecting the T arget De vices to the Console Server 1. Power down the target device(s) that will be connected to your Console Server. 2. Connect the Ethernet cable to the port labeled LAN. 3. Locate the included power cord and plug the appropriate end into the power socket on the rear of the Console Server.
10 Network Configuration Before you can connect to a target device, you will need to configure the network settings. The Console Server offers two methods of setting the network: via web-browser interface or through the local console port.
11 section Network Configuration Note:HTTPScanbeusedforcommunicationoveranencryptedsecuresocketlayer (SSL). When first connecting to the Console Server’s HTTPS configuration page, two browser security warnings may appear.
12 Network Configuration Click . The web interface will open at the “Connect” page (see below). Main-ConnectPage Step3NetworkConguration Click on “Network” to open the Network-Configuration page (see below). Network-CongurationPage Here you can assign a static IP and other network settings.
13 section Network Configuration Assigning IP fr om the Console Port—VT-100 (Console, T elnet, SSH) The Console Server also offers a user-friendly, menu-driven command-line interface. You can simply connect a VT-100 terminal to the local console port to access the Console Server.
14 Network Configuration The following figure depicts the structure of the interface. TheMenuLayout Tier2menu Tier1menu Productname Software version Congurationinput Navig.
15 section Network Configuration Network>IPCong The page to the left shows the IP configuration items. 1. For IPmode — You can press the SPACE bar to select Static mode or DHCP mode.
16 Network Configuration Note: Only the admin user has the privilege to log in to VT-100. All the other users are not authorized to make configuration with VT-100. W eb-Browser Management Interfac e The Console Server supports both HTTP and HTTPS (HTTP over SSL) protocols.
17 section Network Configuration Where available, the page will allow users to apply or cancel their actions. To apply all changes, select “Apply” and the new values will be applied to the configuration. If you do not want to save the new values, simply click “Cancel” and all changes made will be removed and the previous values restored.
18 Network Settings You can configure the network IP settings via VT-100 or web interface. This section describes configuration through the web interface. IP Configuration The Console Server requires a valid IP address to operate within the user’s network environment.
19 section Network Settings IP Filtering The IP filtering function keeps unauthorized hosts from accessing the Console Server by specifying rules. The IP address/mask specifies the host range by entering the base host IP address followed by “/” and the subnet mask (“/” is a required separator between the IP address and the subnet mask).
20 Network Settings When the Console Server receives a TCP packet, it will process the packet with the chain rule depicted below. The process order is important—the packet will enter the chain rule 1 first. If it meets the rule, then it will take action; otherwise, it will go on to chain rule 2.
21 section Network Settings After these rules are applied, only the hosts that belong to the subnet 192.168.2.x can access the Console Server (through http port 80).
22 Network Settings Dynamic DNS If a user connects the Console Server to a DSL line or uses a DHCP configuration to get a dynamic IP address from the network, the IP address might change. This can make it difficult to know if an IP address has changed, or what the new IP address is.
23 section Network Settings RADIUS Authentication is the process of identifying an individual, usually based on a user name and password. The Console Server supports various authentication options, such as “Local” and “RADIUS”, to authenticate the users who access the serial port.
24 Network Settings RADIUS-Server Configuration HTTPS/SSL The Console Server supports both HTTP and HTTPS (HTTP over SSL) services simultaneously. You can enable or disable security function of each port individually. HTTPS provides a secure, encrypted web interface over SSL (secure sockets layer).
25 section Serial Ports Configuration Under the “Serial” menu heading, click “Configuration” to show the port summary list. Note that if the “Serial Port” is disabled, the “Serial port configuration” panel will display the port in a dark gray font.
26 Serial Ports PortEnable/Disable Each serial port can be individually enabled or disabled. A disabled serial port cannot be accessed by a user. Users can reset the serial port to default settings by clicking the “Set to default” button. Port Title Users can enter descriptive information for each port based on the device attached to it.
27 section Serial Ports OperationModes The Console Server unit provides four types of operation modes. These are described below. Console-ServerMode Configuring a serial port as a console server creates a TCP socket on the unit that listens to a telnet or SSH client connection.
28 Serial Ports The following parameters are configurable in console-server mode: ListeningTCPPortNumber You can also access a serial port through the IP address of the Console Server and the listening TCP port number of the serial port. If the IP address of the Console Server and the serial port are assigned as 192.
29 section Serial Ports In order to terminate a telnet/SSH/RawTCP session in terminal-server mode, you may use these three control-key sequences (Ctrl-Z / Ctrl-X / Ctrl-C). Dial-inModemMode In this mode, the Console Server assumes an external modem is attached to the serial port and waits for a dial-in connection from a remote site.
30 Serial Ports PortLogging While in console-server mode, the data received from the tracking serial port will be buffered in the unit’s memory. The “Port logging” feature is valid and visible only if the operation mode of the serial port is configured to console-server mode.
31 section Serial Ports Click “Port event handling”. The memory buffer size for logging data is 192K per port. If the log data grows larger than the memory size, the new data will overwrite the old data. BreakFunction In console-server mode, the Console Server is capable of sending a “break” signal to a connected serial device.
32 Serial Ports Use the hyperlink located at the bottom of the Connect Page to test your Java compatibility. Or use the link below to download the latest Java version. Make sure that you enable your browser’s Java support option and also check your Java Runtime Environment version (known as JRE version).
33 section Serial Ports 2. Enter the user name and password to log in, so you can start to use it as if you were running a telnet client program (e.g., Telnet DOS program, PuTTY). Note: The active serial port’s name will appear on the window bar. A connection-status indicator will also appear on the lower-right side of the window.
34 Serial Ports Serial-to-Serial Function The serial-to-serial function allows you to use a simple terminal device (video display and keyboard) to access and control any device connected to the Console Server on ports 1 through 15.
35 section Serial Ports 5. Choose the port number to which you wish to connect and the screen below will appear. 6. Type in the user name and password. The data-channel connection between port 16 and the selected serial port will be built, so the administrator can control the serial device or server.
36 Serial Ports The web page also gives read-only settings of the serial-to-serial function; it will automatically change according to the setting change on the VT-100 console.
37 section System Status and Log System Status The “System Status” page lists current system information such as name, serial number, firmware versions, MAC address, current time, and the network settings. Data cannot be changed from this page. This page refreshes automatically every 10 seconds.
38 System Status and Log System Logging You may enable or disable the system-logging process and set the log buffer size. The system log buffer’s default value is 50K bytes and can be allocated to up to 300KB maximum. If the logged data grows larger than the pre-allocated buffer size, the new data will overwrite the old data.
39 section System Administr ation User Administration At start-up, the system will prompt the user to enter the password to access the system. The administrator can add or remove a user easily via the web pages. There are two levels of access privileges: An “Access Deny” page will display if the user is not authorized to access the web page.
40 System Administr ation The figure below shows the “Add User” screen. The new user will now appear under the “User Name” list. RemoveUser To remove a user: • Checktheusersonthe“Useradministration”screen.
41 section System Administr ation EdittheAccessControllist(ACL) The Console Server provides ACL (Access Control List) security where you can specify user access discretely by individual ports only, instead of all ports. To edit the ACL: • Checktheusersonthe“Useradministration”screen.
42 System Administr ation Change Password To change the parameters of the user account, open the “Edit user” screen by selecting the user name on the “User Configuration” screen and then edit the parameters of the user account such as adding a user.
43 section System Administr ation Firmware Upgr ade Firmware can be easily upgraded via a web page. This section describes the upgrade procedures. The latest firmware version is available from www.belkin.com/support. UpgradefromtheWebInterface Refer to web page “System > Firmware Upgrade”.
44 System Administr ation Warning!!!DONOT disconnect the power or the Ethernet cable during this upgrading process. Doing so may cause upgrade failure and destroy the image in memory. The Console Server will automatically initiate a self-reboot upon completion of the upgrade process to activate the new firmware.
45 section System Administr ation Once all certificate files are uploaded, users shall initiate a reboot command manually to make the new certificate effective. Browse prepared CA files (follow the procedure in Appendix E to prepare correctly the three CA files with the same assigned file names), and upload these files to the Console Server.
46 System Administr ation.
47 section System Administr ation The other way to tell a secure web connection from an unsafe one is by looking for a lock symbol on your browser (bottom-right corner of Internet Explorer browser). You can double- click on the symbol to examine the detailed information of the server-side certificate.
48 System Administr ation.
49 section System Administr ation Reset to F actory-Default Settings To roll back to factory-default settings, click on “Apply”. Reboot You can trigger the Console Server to perform a software reboot via the network. The reboot function is mandatory when the CA-certificate upload is complete.
50 T echnical Data 50 Default Settings ServerName DHCP IPAddress NetMask Gateway BelkinSC Enabled 192.168.2.156 255.255.255.0 192.168.2.1 SerialNumber MACAddress xxxxxxxxx (printed on b.
51 51 Appendix A: Adapters F1D120ea (RJ45F–DB9F DTE) DB9FemaleDTEAdapter Applications: Bay Accelar, Nortel, etc. Part No: F1D120ea - Single Pack F1D120ea8PK - 8 Pack F1D121ea (RJ45F.
52 Appendix A: Adapters F1D122ea (RJ45F–DB25M DCE) DB25MaleDCEAdapter Applications: Modems Part No: F1D122ea - Single Pack F1D123ea (RJ45F–DB25M DTE) DB25MaleDTEAdapter Applications: Sun SPARC, etc.
53 Appendix A: Adapters F1D124ea (RJ45F–RJ45M CISC O) RJ45MaleAdapter Applications: Sun devices Part No: F1D124ea - Single Pack F1D124ea8PK - 8 Pack Adapter Signal RJ45 RJ45M DSR 1 2 RT.
54 54 54 Appendix B: Ethernet Pin-Outs (RJ45) Standard Ethernet Cabl e RJ45 Pin-Out Pin Description 1 Tx+ 2 Tx- 3 Rx+ 4 NC 5 NC 6 Rx- 7 NC 8 NC.
55 55 55 Appendix C: W ell-Known TCP/UDP Port Number s Port numbers are divided into three ranges: Well-Known Ports, Registered Ports, and Dynamic and/or Private Ports. Well-Known Ports are those from 0 through 1023. Registered Ports are those from 1024 through 49151.
56 56 Appendix D: Prot ocol Glossary BOOTP(BootstrapProtocol) Similar to DHCP, but for smaller networks. Automatically assigns the IP address for a specific duration of time. CHAP(ChallengeHandshakeAuthenticationProtocol) A secure protocol for connecting to a system; it is more secure than the PAP.
57 57 Appendix D: Prot ocol Glossary NTP(NetworkTimeProtocol) A protocol used to synchronize time on networked computers and equipment. PAP(PasswordAuthenticationProtocol) A method of user authentication in which the user name and password are transmitted over a network and compared to a table of name-password pairs.
58 58 58 Appendix E: Creating C A Files The Console Server supports secure web-page configuration (aka https). There are two types of certificate files for server-side authentication. • Self-signed:Userscancreatethecerticatelesbythemselves.
59 59 59 Appendix E: Creating C A Files ii) Strip passphrase: openssl rsa -in cakey.pem -out cakey-nopassword.pem iii) Combine the key and X.509 certificate files into server.pem: cat cakey-nopassword.pem cacert.pem > server.pem iv) Collect all 3 PEM files and prepare to upload to IPCS server: server.
60 Information FC C Statement DECLARATIONOFCONFORMITYWITHFCCRULESFOR ELECTROMAGNETICCOMPATIBILITY We, Belkin International, Inc., of 501 West Walnut Street, Compton CA 90220, declare under our sole responsibility that the product: F1DP116S, to which this declaration relates: Complies with Part 15 of the FCC Rules.
61 Information Whatwillwedotocorrectproblems? Product Warranty. Belkin will repair or replace, at its option, any defective product free of charge (except for shipping charges for the product).
62 Information Howstatelawrelatestothewarranty. THIS WARRANTY CONTAINS THE SOLE WARRANTY OF BELKIN. THERE ARE NO OTHER WARRANTIES, EXPRESSED OR, EXCEPT AS REQUIRED BY LAW, IMPLIED, I.
63.
© 2008 Belkin International, Inc. All rights reserved. All trade names are registered trademarks of respective manufacturers listed. Windows is either a registered trademark or trademark of Microsoft Corporation in the United States and/or other countries.
An important point after buying a device Belkin F1DP116SEA (or even before the purchase) is to read its user manual. We should do this for several simple reasons:
If you have not bought Belkin F1DP116SEA yet, this is a good time to familiarize yourself with the basic data on the product. First of all view first pages of the manual, you can find above. You should find there the most important technical data Belkin F1DP116SEA - thus you can check whether the hardware meets your expectations. When delving into next pages of the user manual, Belkin F1DP116SEA you will learn all the available features of the product, as well as information on its operation. The information that you get Belkin F1DP116SEA will certainly help you make a decision on the purchase.
If you already are a holder of Belkin F1DP116SEA, but have not read the manual yet, you should do it for the reasons described above. You will learn then if you properly used the available features, and whether you have not made any mistakes, which can shorten the lifetime Belkin F1DP116SEA.
However, one of the most important roles played by the user manual is to help in solving problems with Belkin F1DP116SEA. Almost always you will find there Troubleshooting, which are the most frequently occurring failures and malfunctions of the device Belkin F1DP116SEA along with tips on how to solve them. Even if you fail to solve the problem, the manual will show you a further procedure – contact to the customer service center or the nearest service center
