Manuals / Black Box / Marine Equipment / Marine Safety Devices

Black Box Secure Device Servers, 1102, 1101 manual , Target Specification

Models: 1101 1102 Secure Device Servers

1 164

Download 164 pages 30.63 Kb

Page 156

1101 and 1102 Secure Device Servers

Options

-1,--onPower ON targets. -0,--offPower OFF targets.

-c, --cycle	Power cycle targets.
-r,--resetAssert hardware reset for targets (if implemented by RPC).
-f,--flashTurn beacon ON for targets (if implemented by RPC).
-u, --unflash	Turn beacon OFF for targets (if implemented by RPC).
-l, --list	List available targets. If possible, output will be compressed into a host range (see TARGET SPECIFICATION below).
-q, --query	Query plug status of targets. If none specified, query all targets. Status is not cached; each time this option is used, powermand
queries the appropriate RPC's. Targets connected to RPC's that could not be contacted (e.g. due to network failure) are reported as status
"unknown". If possible, output will be compressed into host ranges.
-n, --node	Query node power status of targets (if implemented by RPC). If no targets specified, query all targets. In this context, a node in
	the OFF state could be ON at the plug but operating in standby power mode.
-b, --beacon	Query beacon status (if implemented by RPC). If no targets are specified, query all targets.
-t, --temp	Query node temperature (if implemented by RPC). If no targets are specified, query all targets. Temperature information is not
interpreted	by powerman and is reported as received from the RPC on one line per target, prefixed by target name.
-h,--helpDisplay option summary.
-L, --license	Show powerman license information.
-d,--destination host[:port] Connect to a powerman daemon on non-default host and optionally port.
-V, --version	Display the powerman version number and exit.
-D, --device	Displays RPC status information. If targets are specified, only RPC's matching the target list are displayed.
-T, --telemetry	Causes RPC telemetry information to be displayed as commands are processed. Useful for debugging device scripts.
-x, --exprange	Expand host ranges in query responses.
For more details refer
Also refer	( ) documentation and

( )

Target Specification

powerman target hostnames may be specified as comma separated or space separated hostnames or host ranges. Host ranges are of the general form: prefix[n-m,l-k,...], where n < m and l < k, etc., This form should not be confused with regular expression character classes (also denoted by ''[]''). For example, foo[19] does not represent foo1 or foo9, but rather represents a degenerate range: foo19.

This range syntax is meant only as a convenience on clusters with a prefix NN naming convention and specification of ranges should not be considered necessary—the list foo1,foo9 could be specified as such, or by the range foo[1,9].

Some examples of powerman targets follows.

Power on hosts bar,baz,foo01,foo02,...,foo05: powerman --on bar baz foo[01-05]

Power on hosts bar,foo7,foo9,foo10: powerman --onbar,foo[7,9-10]

Power on foo0,foo4,foo5: powerman --onfoo[0,4-5]

As a reminder to the reader, some shells will interpret brackets ([ and ]) for pattern matching. Depending on your shell, you might need to enclose ranged lists within quotes. For example, in tcsh, the last example above should be executed as:

powerman --on "foo[0,4-5]"

The pmpower utility is a high level tool for manipulating remote preconfigured power devices connected to the console server via a serial or network connection. The PDU UPS and IPMI power devices are variously controlled using the open source PowerMan, IPMItool, or Network UPS Tools, and Black Box’s pmpower utility arches over these tools so the devices can be controlled through one command line:

pmpower [-?h] [-l device -r host] [-o outlet] [-u username] [-p password] action

-?/-hThis help message. -lThe serial port to use.

-oThe outlet on the power target to apply to

-rThe remote host address for the power target -uOverride the configured username

-pOverride the configured password

on This action switches the specified device or outlet(s) on off This action switches the specified device or outlet(s) off

cycle This action switches the specified device or outlet(s) off and on again

156	724-746-5500 blackbox.com

Image 156

Black Box Secure Device Servers, 1102, 1101 manual , Target Specification

Contents

1102 Secure Device Servers 1102 Secure Device Servers Normas Oficiales Mexicanas NOM Electrical Safety Statement FCC and IC RFI StatementsTrademarks Used in this Manual Table of Contents Local Authentication Tacacs Authentication SMS Alerts Snmp AlertsAdd a New Alert 106 107108 110Installing the Key and Certificate PowerMan ToolPmpower Tool FingerprintingSpecifications SpecificationsOverview 2.1 Introduction Manual OrganizationTypes of Users Overview Management ConsoleHardware Description 2.5.1 LES1101A Front Panel Number Component Description DB9 connector 2 LES1101A Back PanelEthernet Connectivity LED RJ-45 Ethernet ActivityNumber Component Description Barrel connector Power LED left side of connector Ethernet Connectivity LEDLED right side of connector Ethernet Activity LED 3 LES1102A Front PanelWhat’s Included 1 LES1101A2 LES1102A Installation InstallationPower Connection Network ConnectionNon RS-232 Serial Port Pinouts- LES1102A Non RS-232 Serial Port Pinouts- LES1101A +3VRX+ TX+ +VIN TX +System Configuration Connected PC/Workstation SetupManagement Console Connection System Configuration Browser connectionAdministrator Password Network IP Address System Services IPv6 configurationSystem Services screen SDT Connector SDT connector SSH encryptedCommunications Software Forwarded toPuTTY SSHTermSerial Port, Host, Device, and User Configuration Configure Serial PortsSerial Port, Host, Device, and User Configuration Common SettingsConsole Server Mode Serial Port, Host, Device, and User Configuration 1102 Secure Device Servers SDT Mode Device RPC, UPS, EMD Mode Terminal Server ModeSerial Bridging Mode Syslog Local Ethernet LAN LES1102A COM portAdd/ Edit Users Serial Port, Host, Device, and User Configuration Authentication Network HostsTrusted Networks Serial Port RedirectionManaged Devices LES1102A Retail data systemsSerial Port, Host, Device, and User Configuration Secure SSH Tunneling and SDT Connector Secure LocalLES1102A Serial Connected Secure SSH Tunneling and SDT Connector Configuring for SSH Tunneling to HostsSDT Connector Client Configuration SDT Connector installation1102 Secure Device Servers Secure SSH Tunneling and SDT Connector Manually Adding Hosts to the SDT Connector Gateway Make an SDT Connection through the Gateway to a HostManually Adding New Services to the New Hosts 10. Clients1102 Secure Device Servers Adding a Client Program to be Started for the New Service 16. Telnet client Click OK SDT Connector to Management Console 17. Edit SDT host screen1102 Secure Device Servers Secure SSH Tunneling and SDT Connector SDT Connector Public Key Authentication Importing and Exporting PreferencesSetting up SDT for Remote Desktop Access Configure the Remote Desktop Connection Client 23. Remote Desktop Users dialog boxUse -p to receive password prompt Computer, enter the appropriate IP Address and Port NumberGeometry width x height or 70% screen percentage SDT SSH Tunnel for VNC For Linux servers and clients Install, Configure, and Connect the VNC Viewer 30. VNC authentication 1102 Secure Device Servers 33. Incoming TCP/IP properties Set up SDT Serial Ports on Console Server SSH Tunneling Using other SSH Clients for example, PuTTY Address of port01. Then select the RDP Service check box1102 Secure Device Servers Secure SSH Tunneling and SDT Connector 1102 Secure Device Servers Configure SMTP/SMS/SNMP/Nagios Alert Service Alerts and LoggingAlerts and Logging Email AlertsSMS Alerts Snmp AlertsSelect Alerts & Logging Snmp Nagios Alerts Activate Alert Events and NotificationsConfiguring General Alert Types Add a New AlertSerial port signal alert Configuring Power Alert Type This alert type monitors UPSes, RPCs, and power devicesRemote Log Storage Serial Port LoggingNetwork TCP or UDP Port Logging 1102 Secure Device Servers Power Management Power ManagementRemote Power Control RPC RPC Connection1102 Secure Device Servers RPC Access Privileges and Alerts User Power ManagementUninterruptible Power Supply Control UPS RPC StatusTurn on Turn OFF Cycle Status Managed UPS Connections Serial, USB, or Network Connections ManagedAs Device Type UPS and clicking Apply Click Add Managed UPSPower Management Remote UPS Management Controlling UPS Powered Computers UPS AlertsUPS Status Overview of Network UPS Tools NUT 12. Log tableRefer to 1102 Secure Device Servers Authentication Authentication ConfigurationLocal Authentication Tacacs AuthenticationRadius Authentication Enter the Server PasswordLdap Authentication RADIUS/TACACS User ConfigurationPAM Pluggable Authentication Modules PamtacplusPamldap Radius ExampleSSL Certificate SSL certificates screenChallenge Password Confirm Challenge PasswordCommon name Organizational UnitUpload button LES1102A Network Managed hosts Services Nagios IntegrationNagios Overview Central Management and Setting Up SDT for Nagios Nagios IntegrationDistributed console servers Black Box console servers Setup Central Nagios Server Setup Distributed Console ServersDescription enter Administrator connection Configuring Nagios Distributed Monitoring Enable Nagios on the Console ServerSelect Users & Groups from the Serial & Network menu Enable Nrpe Monitoring Enable Nsca MonitoringLES1102A Serial Check Nagios Tunneled SSH LES1102A Sendncsa Program/script NagiosConfigure Selected Serial Ports for Nagios Monitoring Configure Selected Network Hosts for Nagios MonitoringConfigure the Upstream Nagios Monitoring Host Commandname checknrpedaemon Commandline Commandname checkserialstatus CommandlineDefine service Hostname Server Use Generic-serviceDefine service Servicedescription port-log-server Server Use Generic-serviceActivechecksenabled Passivechecksenabled CheckportlogBasic Nagios Plug-Ins Number of Supported DevicesUsing Nagios in a local office Remote site Distributed Monitoring Usage ScenariosRemote site with restrictive firewall System Administration and Reset System ManagementUpgrade Firmware System ManagementConfigure Date and Time Configuration Backup109 Port Access and Active Users Select the Status Port AccessStatus Reports StatisticsStatus Reports Support ReportsDashboard Select Status SyslogConfiguring the Dashboard Configure dashboard screenCreating Custom Widgets for the Dashboard Echo tableManagement ManagementDevice Management Port and Host LogsSerial Port Terminal Connection Select Manage TerminalSelect Manage Power Configuration from the Command Line Accessing config from the Command LineConfiguration from the Command Line Config tool# config -g config.users.user1.description # config -g configSerial Port Configuration Device Mode SDT modeTerminal server mode Serial bridge modeSyslog settings Adding and Removing Users# ./delete-node config.users.user2 # config -r users# config -g config.groups.total # config -aAdding and Removing User Groups # rmuser Group7List of remote authentiction and authorization servers # config -r auth# config -g config.sdt.hosts.total # config -s config.sdt.hosts.total=4Log level for services # config -g config.devices.total# config -hosts # config -g config.portaccess.total# config -s config.cascade.slaves.total=1 # config -r cascadeCascaded Ports UPS Connections# config -s config.ups.monitors.total=1 # config -d config.ups.monitors.monitor1RPC Connections Remote UPSes# config -d config.devices.device8 To configure serial/network port loggingPort Log To delete the above managed deviceGeneral settings for all alerts Signal AlertAlerts Connection AlertUPS Power Status Alert Power Sensor Alert# config -r alerts Smtp and SMSAdministration IP SettingsSnmp Date and Time Settings Services # config -r timeDhcp Server Enable SDT for Nagios ext Enabled SDT gateway address Prefer Nrpe over Nsca Disabled defaults to DisabledTo configure Nrpe with following settings Nrpe port Nagios Advanced Configuration ! Bin/sh /etc/scripts/alert-email $suffix # ./delete-node config.users.user3 NEWTOTAL=$ $TOTAL Echo Warning $TOTALNODE greater than number of items Add the following line to rc.local# loop indefinitely While true do # config Etc/config/scripts/config-postUsage /etc/scripts/backup-usb Command File # /etc/scripts/backup-usb check-magic Etc/config/pmshell-start.sh #!/bin/sh PORT=$1 USER=$2 Config --set config.system.snmp.address2=w.x.y.z Config --set config.system.snmp.trapport2=162To set the Manager Address field To set the Community field Snmp version 1 and 2c only$& ! $&$ $&% ! Chown fred /etc/config/users/fred/.ssh/authorizedkeys #$! #$ $ mkdir keys $ ssh-keygen -t rsaHttp//openssh.org/portable.html ! Http//www openbsd.org/cgi-bin/man.cgi?query=sshdOpenSSH Windows http//sshwindows.sourceforge.net/download # ssh remhostAb7e33bd85505a430be0bd433f1ca5f8 Offending key in /.ssh/knownhosts1 Client KeysAuthorized Keys Uploading Keys+- ! !$ % !!#$! #$ #% #% Target Specification Powerstrip IdName or ID of the device support/id Powerstrip Ppassword PportTargetaddress Username#%& #Appendix a Linux Commands and Source Code Appendix A. Linux Commands and Source CodeAdd a group or add an user to a group Add an user GNU Bourne-Again ShellLogin RebootIp6tables Iptables-saveVconfig SleepSmbmnt Smbmount164