RuggedCom RS400 manual ROS Secure Shell Server

Page 17

Administration

Typing a new value after pressing enter always erases the old parameter value. The left and right cursor keys can be used to position the edit point without erasing the old parameter value. The up and down cursor keys can be used to cycle through the next higher and lower values for the parameter.

After the parameter has been edited, press enter again to change other parameters. When all desired parameters have been modified, press <CTRL> A to apply changes. The switch will automatically prompt you to save changes when you leave a menu in which changes have been made.

Some menus will require you to press <CTRL> I to insert a new record of information and <CTRL> L to delete a record.

1.1.4 Updates Occur In Real Time

All configuration and display menus present the values at the current instant, automatically updating if changed from other user interface sessions or SNMP. All statistics menus will display changes to statistics as they occur.

1.1.5 Alarm Indications Are Provided

Alarms are events for which the user is notified through the Diagnostics submenu. All configuration and display menus present an indication of the number of alarms (in the upper right hand corner of the screen) as they occur, automatically updating as alarms are posted and cleared.

1.1.6 The CLI Shell

The user interface provides a shell for operations that are more easily performed at the command line. You may switch back and forth from the menu system and shell by pressing <CTRL> S. For more information on the capabilities of the shell see the approapriate chapter of this guide.

1.2 The ROSSecure Shell Server

1.2.1 Using a Secure Shell to Access the User Interface

SSH (Secure Shell) is a network protocol which provides a replacement for insecure remote login and command execution facilities, such as telnet and remote shell. SSH encrypts traffic in both directions, preventing traffic sniffing and password theft.

SSH protocol version 2 is implemented in ROS. The authentication method is keyboard interactive password authentication. User name will not be verified in order to grant access to SSH server. The passwords to be used for login are configured in Password Table and user’s privileges are the same as for user logged in via the console port.

1.2.2 Using a Secure Shell to Transfer Files

ROS implements SFTP protocol over SSH to transfer files in secure manner. The file system is created in one directory only. Also, all the files are created in the system at startup time and can not be deleted, created, renamed. Files can be downloaded (upgraded) and uploaded (to be analyzed outside of the unit).

The implemented commands are: dir – a file directory

RS400

17

ROS™ v3.5

Image 17
Contents Rugged Operating System ROS V3.5 User Guide Copyright WarrantyDisclaimer of liability Registered TrademarksTable Of Contents DNP 109 Igmp 221 Page Table Of Figures WIN and TIN Form 160 Port Lldp Parameters Form 216 Who Should Use This User Guide Supported PlatformsHow Chapters are organized Document ConventionsFirmware/User Guide Version Numbering System Applicable Firmware RevisionROS User Interface Using the RS232 Port to Access the User InterfaceAdministration Structure of the User Interface Making Configuration ChangesROS Secure Shell Server ROS Web Server Interface Using a Web Browser to Access the Web InterfaceLog in to The Device with a Web Browser ROS RS400 Main Menu via Web Server Interface Structure of the Web InterfaceParameters Form Example Updating Statistics DisplaysAdministration Menu Administration Menu IP Interfaces Table IP InterfacesIP Address Type TypeMgmt Subnet Synopsis ###.###.###.### where ### ranges from 0 to DefaultIP Address Gateway IP GatewaysDestination Inactivity Timeout IP ServicesTelnet Sessions Allowed Web Server Users AllowedSynopsis Disabled, Enabled Default Enabled Synopsis 1 to 254 or Disabled Default DisabledModBus Address SSH Sessions AllowedSystem Identification Login BannerSystem Name LocationAuth Type PasswordsSynopsis Local, Radius Default Local Guest Password Administration Guest UsernameOperator Password Admin UsernameTime Time and DateDate Time ZoneNTP Update Period Default UTC-000 Lisbon, LondonSynopsis 1 to Default 60 min NTP Server AddressSnmp Users Snmp ManagementAuth Protocol NamePriv Protocol Auth KeySynopsis snmpV1, snmpV2c, snmpV3 Default snmpV3 Administration Priv KeySnmp Security to Group Maps SecurityModelGroup Snmp AccessSynopsis Any 32 characters Default SecurityLevel Synopsis noView, V1Mib, allOfMib Default noViewReadViewName WriteViewNameAdministration NotifyViewName Radius overview User Login Authentication and AuthorizationVendor Default Primary Radius Server ConfigurationSynopsis ###.###.###.### where ### ranges from 0 to ServerAuth UDP Port TACACS+ TACACS+ Server ConfigurationTACACS+ Server Form Auth TCP PortDhcp Server Address Dhcp Relay Agent N/A for RMC30Administration Dhcp Client Ports Configuring Local SyslogDefault Debugging SyslogConfiguring Remote Syslog Server Configuring Remote Syslog ClientSynopsis 1025 to 65535 or Default UDP PortSeverity FacilityProblem One Troubleshooting2 ‘Preemptive Raw Socket’ protocol features 1 ‘Raw Socket’ protocol featuresSerial Protocols Overview Serial Protocols4 ‘DNP’ protocol features 3 ‘Modbus’ protocol features5 ‘Microlok’ protocol features 6 ‘WIN’ protocol featuresRTU Polling Serial Protocols OperationBroadcast RTU Polling Broadcast RTU PollingPermanent and Dynamic Master Connection Support Preemptive Raw SocketMessage Packetization Use of Port RedirectorsTCPModbus Performance Determinants Modbus Server and Client ApplicationsRTU Worked Example Use of Turnaround DelayConcept of Links DNP 3.0, Microlok, TIN and WIN ApplicationsAddress Learning for DNP Address Learning Address Learning for TINTIN Broadcast Messages Broadcast Messages DNP Broadcast MessagesTransport Protocols Use of Differentiated Services Code Point DscpTransport for Raw Socket Transport for Protocols with Defined LinksOptical loop topology Force Half Duplex Mode of OperationSerial Protocols Menu Serial Protocol Configuration and StatisticsSerial Ports Table Serial PortsSerial Protocols Port Pack TimerProtocol ForceHDRaw Socket Default 0 msTransport Pack CharFlow Control Max Conns Call DirLoc Port Rem PortPreemptive Raw Socket Table Preemptive Raw SocketDyn Pack Char Synopsis 3 to Default 10 msDyn Pack Timer Synopsis 10 to Default 10 s Serial Protocols TimeoutModbus Server Synopsis 1 to maximum port numberModbus Client Response TimerAuxiliary TCP Port Send ExceptionsSerial Protocols Forward Exceptions WIN and TINMessage Aging Timer Serial Protocols TIN ModeAddress Aging Timer TIN TransportWIN Dscp MicroLokLearning Synopsis TCP, UDP Default TCP8 DNP Mirrored Bits Serial Protocols Aging TimerMirrored Bits Form Device Address Table Device AddressesAddress Synopsis Any 31 characters DefaultRemote IP Addr Synopsis 1 to maximum port number or UnknownDynamic Device Addresses Default UnknownSynopsis Any 16 characters Default Aging Time Links StatisticsConnection Statistics Serial Port Statistics Parity Errors Packet ErrorsFraming Errors Overrun ErrorsClearing Serial Port Statistics Resetting Serial PortsProblem Four Problem TwoProblem Three Page Ethernet Ports Controller Protection Through Link-Fault-Indication LFIEthernet Ports Ethernet Ports Menu Ethernet Ports Configuration and StatusPort Parameters Table Port ParametersState MediaAutoN SpeedLFI Link AlarmsPort Rate Limiting Table Port Rate LimitingPort Mirroring Limitations Port MirroringIngress Limit Ingress FramesPort Mirroring Synopsis Disabled, Enabled Default DisabledSource Port Target PortFast Link Detection Synopsis Off, On, OnwithPortGuard Default OnwithPortGuardLink Detection Options Negative impact on overall system responsiveness PoE Parameters when applicablePowered AdminClass Pwr LimitEthernet Ports Current EoVDSL Parameters when applicableROS 106 RS400 Set Rate DS/US ModeLink Port StatusLink Rate DS/US SNR MrgnDuplex Resetting PortsEthernet Ports Name Page Ethernet Statistics Ethernet StatisticsSynopsis ----, Down, Up Viewing Ethernet StatisticsInOctets OutOctetsOutPkts ErrorPktsEthernet Statistics InPkts Ethernet Port Statistics Table Viewing Ethernet Port StatisticsEthernet Port Statistics Form Ethernet Statistics InOctets CRCAlignErrorsTotalInOctets TotalInPktsCollisions JabbersLateCollisions Pkt64OctetsOutBroadcasts Ethernet Statistics OutMulticastsUndersizePkts OutUcastPktsClear Ethernet Port Statistics Form Clearing Ethernet Port StatisticsRmon History Controls Remote Monitoring RmonRequested Buckets IndexGranted Buckets IntervalEthernet Statistics Owner Synopsis Any 127 characters Default MonitorRmon History Samples Synopsis Dddd days, Hhmmss SampleStartTime Number of good Broadcast packets received Utilization Rmon AlarmsROS 126 RS400 Rising Thr VariableFalling Thr Startup AlarmValue Rising EventRmon Events Table Rmon EventsSynopsis Any 31 characters Default public Synopsis none, log, snmpTrap, logAndTrap Default logAndTrapCommunity Last Time SentRmon Event Log Table Rmon Event LogLogTime LogLogDescription Synopsis Any 49 charactersSpanning Tree Rstp OperationState Rstp States and RolesBridge and Port Roles RolePoint-to-Point and Multipoint Links Edge PortsPath and Port Costs How Port Costs Are GeneratedBridge Diameter STP vs. Rstp CostsMST Regions and Interoperability Mstp OperationCist Root Mstp Bridge and Port Roles 5.2.2.1 Bridge RolesCist Regional Root Msti Regional RootCist Port Roles Port RolesMsti Port Roles Boundary PortsBenefits of Mstp Isolation of Spanning Tree ReconfigurationLoad Balancing Mstp versus PvstImplementing Mstp on a Bridged Network Rstp Applications Rstp in Structured Wiring ConfigurationsSelect the design parameters for the network Identify required legacy supportChoose the root bridge and backup root bridge carefully Rstp in Ring Backbone ConfigurationsIdentify desired steady state topology Decide upon port cost calculation strategyIdentify edge ports Rstp Port RedundancyChoose the root bridge Assign bridge priorities to the ringSpanning Tree Menu Spanning Tree ConfigurationBridge Rstp Parameters Synopsis STP, RSTP, Mstp Default RstpVersion Support ERSTP EnhancementsBridge Priority Forward DelayHello Time Max Age TimeCost Style Synopsis STP 16 bit, Rstp 32 bit Default STP 16 bitBpdu Guard Timeout Ports Port Rstp ParametersPriority Spanning Tree EnabledSTP Cost Rstp CostSpanning Tree MST Region Identifier Synopsis Any 32 characters Default 00-0A-DC-00-41-74Revision Level DigestInstance ID Bridge Msti ParametersPort Msti Parameter Table Port Msti ParametersPorts Bridge Rstp Statistics Spanning Tree StatisticsBridge Status Bridge IDConfigured Forward Delay Configured Hello TimeLearned Forward Delay Configured Max AgePort Rstp Statistics Table Port Rstp StatisticsRole StatusTX Configs RX ConfigsCost RX RSTsBridge Msti Statistics Table Bridge Msti StatisticsPort Msti Statistics Table Port Msti StatisticsPort Msti Statistics Form Spanning Tree Role Troubleshooting Problem Seven Problem FiveProblem Six Problem Nine Problem EightVLANs and Tags Vlan OperationTagged vs. Untagged Frames Native VlanEdge Type Edge and Trunk Port TypesTrunk Type Vlan Ingress and Egress RulesVLAN-aware and VLAN-unaware operation modes Egress RulesForbidden Ports List Gvrp Generic Vlan Registration Protocol QinQ not supported in RS400 and RS8000/RS1600 families Edge SwitchROS 174 RS400 Traffic Domain Isolation Vlan ApplicationsReduced Hardware Administrative ConvenienceSynopsis No, Yes Default Yes Vlan ConfigurationGlobal Vlan Parameters VLAN-awareVID Static VLANsForbidden Ports Synopsis Any 19 characters DefaultVlan Name Port Vlan Parameters Table Port Vlan ParametersSynopsis Untagged, Tagged Default Untagged Synopsis Edge, Trunk Default EdgeSynopsis Adv&Learn, Adv Only, Disabled Default Disabled VLANs PortsExplicit Vlan SummaryImplicit DynamicDon’t need VLANs at all. How do I turn them off? Page CoS Operation Inspection PhaseClasses of Service Determining The CoS Of a Received Frame Forwarding PhaseCoS Weighting CoS ConfigurationSynopsis 8421, Strict Default Global CoS ParametersPort CoS Parameter Table Port CoS ParametersSynopsis Normal, Medium, High, Crit Default Normal Default CoSPriority to CoS Mapping Inspect TOSPriority to CoS Mapping Form CoSTOS Dscp to CoS Mapping Table Dscp to CoS MappingCoS Access Priorities Table CoS Access Priorities RS8000 and RS1600 families onlyCrit Access Priority Normal Access PriorityPage Multicast Filtering IgmpRouter and Host Igmp Operation Active Mode Switch Igmp OperationIgmp and Rstp Passive ModeIgmp Snooping Rules Processing Joins Combined Router and Switch Igmp OperationProcessing Leaves Configuring Igmp Parameters Multicast Filtering Configuration and StatusQuery Interval Multicast Filtering ModeRouter Ports Router ForwardingMAC Address Configuring Static Multicast GroupsSynopsis ##-##-##-##-##-## where ## ranges 0 to FF Default Joined Ports Synopsis ##-##-##-##-##-## where ## ranges 0 to FFViewing IP Multicast Groups Troubleshooting Problem Six Page MAC Address Tables MAC Address TablesSynopsis 0 to 65535 or Multi, Local Viewing MAC AddressesSynopsis Static, Dynamic Synopsis Normal, Medium, High, CritConfiguring Static MAC Address Table Configuring MAC Address Learning OptionsSynopsis 15 to Default 300 s Age Upon Link LossMAC address that is to be statically configured Purging MAC Address Table Page Network Discovery Lldp OperationNetwork Discovery Menu Network Discovery MenuTx Delay Reinit DelayGlobal Lldp Parameters Tx IntervalPort Lldp Parameters Table Port Lldp ParametersLldp Global Remote Statistics Lldp Neighbor Information Lldp Statistics Page PPP over Modem PPP over Modem OperationRemote Dial-in For Monitoring Router Concentration Router ConcentrationUsing PAP 11.1.4 PAP/CHAP Authentication 11.1.4.1 Users ProfilesUsing Chap Assigning IP Addresses For PPPStatic Routes PPP Configuration Menu PPP ConfigurationAT Commands Modem SettingsSynopsis Any 48 characters Default Country CodePPP Status PPP ControlLocal IP Address Remote IP AddressOutgoing PAP Password Synopsis Any 15 characters Default ServerSynopsis Any 15 characters Default PPP over Modem Server NameUser Name PPP UsersSynopsis Any 9 characters Default PPP over Modem PasswordRemote Net Remote SubnetCurrent Status PPP StatisticsModem Speed Synopsis 0 to 2147483647 bps or OfflineConnected User AuthenticationPPP over Modem Tx LCP Packets Clearing PPP Statistics Resetting PPPCan connect to the server, but I can’t ping or telnet to it Am having performance problems Page Diagnostics Using the Alarm SystemPassive Alarms Active AlarmsAlarms and the Critical Failure Relay Viewing and Clearing AlarmsTotal Powered Time Viewing CPU DiagnosticsSynopsis MMM DD Hhmm Synopsis Any 127 charactersTemperature Diagnostics CPU UsageRAM Total RAM AvailableViewing the System Log Viewing and Clearing the System LogViewing Product Information RS900 v2, 40-00-0066, RS900 v2 Loading Factory Default ConfigurationResetting the Device ROS 244 RS400 Entering and Leaving the Shell Summary Of CLI Commands available in ROSUsing the CLI Shell Listing files Getting Help for a CommandViewing Files Tracing Events Viewing and Clearing Log FilesPinging a Remote Device Enabling Trace Displaying Trace settingsViewing Dhcp Learned Information Executing Commands Remotely Through RSHStarting Trace Resetting the Device Upgrading Firmware Upgrading Firmware using XModemUpgrading Firmware and Managing Configurations Checking Status of Download Upgrading Firmware Using a Tftp Client on Your WorkstationExample of an Upgrade using ROS Tftp Client Upgrading Firmware Using ROS Tftp ClientCapturing Configurations with Tftp Capturing ConfigurationsCapturing Configurations with XModem Finding the Correct Table Using SQL CommandsGetting Started Retrieving Parameter from a Table Retrieving a Table with Where ClauseChanging Values in a Table Setting Default Values in a TableUsing RSH and SQL Using RSH and SQLGroups Supported Standard MIBsModule Name Proprietary MIB Module Name RuggedCom proprietary MIBsAppendix B Snmp Trap Summary TcpInSegs IfInErrorsIfInOctets IfInUcastPktsTcpRetransSegs UdpInErrorsUdpInDatagrams UdpNoPortsEtherStatsMulticastPkts EtherStatsCRCAlignErrorsEtherStatsUndersizePkts EtherStatsOversizePktsDot1dBasePortMtuExceededDiscards Dot1dBasePortDelayExceededDiscardsDot1dTpPortInFrames Dot1dTpPortOutFramesIfHCOutBroadcastPkts RcDeviceStsTemperature0x040x03 RequestResponse 0x10Modbus Memory Map AlarmsPage Serial Cmd TextUint16 Uint32Read Data from device using PortCmd AlarmPerforming write actions on the device using PortCmd PSStatusCmdSee ROS Read Power Supply Status from device using PSStatusCmdSee Lldp MstiTagging 169
Related manuals
Manual 8 pages 2.5 Kb