Manuals / Black Box / Computer Equipment / Server

Black Box LES1248A-R2, LES1332A, LES1408A, LES144BA, LES1416A, LES1348A, LES1432A Blackbox.com

Models: LES1116A LES110BA LES1308A LES1348A LES144BA Value-Line and Advanced Console Servers LES114BA LES1432A LES1332A LES1316A LES1416A LES1208A-R2 LES1132A LES1216A-R2 LES1232A LES1248A-R2 LES1408A

1 286

Download 286 pages 6.23 Kb

Page 80

Note: To connect remote VPN clients to the local network, you need to know the user name and password for the PPTP account you added, as well as the Internet IP address of the console server. If your ISP has not allocated you a static IP address, consider using a dynamic DNS service. Otherwise you must modify the PPTP client configuration each time your Internet IP address changes.

_____________________________________________________________________

724-746-5500 blackbox.com

Page 80

Image 80

Black Box LES1248A-R2, LES1332A, LES1408A, LES144BA, LES1416A, LES1348A, LES1432A, LES1316A, LES1308A, LES1232A Blackbox.com

Contents

Value-Line and Advanced Console Servers User’s Manual Value-Line and Advanced Console Servers Manual Blackbox.com Value-Line and Advanced Console Servers Manual Value-Line and Advanced Console Servers Manual Power connection Administrator PasswordSystem Services Management network configurationFIREWALL, Failover and OoB DIAL-IN OoB Dial-In Access Configuring for SSH Tunneling to HostsSDT Connector Client Configuration Serial Port Redirection Managed Devices IPsec VPNSDT Connector to Management Console SDT Connector Public Key AuthenticationSetting up SDT for Remote Desktop access SSH Tunneling using other SSH clients e.g. PuTTYRemote Power Control RPC Uninterruptible Power Supply Control UPSAuthentication Configuration PAM Pluggable Authentication Modules13.4 Power Management 212 203209 213Raw Access to Serial Ports Modifying Snmp ConfigurationSecure Shell SSH Public Key Authentication Power Strip ControlAppendix Chapter Introduction This ManualManual Organization ServerConsole server Types of usersManagement Console Manual Conventions Publishing historyDate Revision Update details Copyright Models Chapter InstallationIntroduction Kit components LES1508A Console Server Blackbox.com Kit components LES1108A Console Server Power connection1 LES1508A power 2 LES1116A, LES1132A and LES1148A power Serial Port connection 4 LES1108A powerNetwork connection PIN Signal Definition Direction USB Port ConnectionBefore powering on the console server Antenna and SIMIP address Chapter Initial System ConfigurationManagement console connection Browser connection Blackbox.com Administrator Password Name the console server Set up new administratorNetwork IP address Configuration Method 1 IPv6 configuration Dynamic DNS Ddns configurationSystem Services Service AccessBlackbox.com Message Changes to configuration succeeded Service Settings  Select the Service Settings tab on the System ServicesCommunications Software SDT Connector PuTTYManagement network configuration SSHTermEnable the Management LAN Configure the Dhcp server  Check Enable Dhcp ServerSelect Failover or broadband OOB Blackbox.com Aggregating the network ports Static routes To add to the static route to the route table of the system Serial Port, Host, Device & User Configuration Configure Serial PortsCommon Settings Console Server Mode Blackbox.com Blackbox.com Blackbox.com Blackbox.com SDT Mode Device RPC, UPS, EMD Mode Terminal Server ModeSerial Bridging Mode Add/ Edit Users Cisco USB console connectionAdmin PptpdDialin FtpBlackbox.com Blackbox.com Authentication Network HostsTrusted Networks  Select Serial & Network Trusted NetworksSerial Port Cascading Automatically generate and upload SSH keysManually generate and upload SSH keys  Check Generate SSH keys automatically and click Apply Select RSA Keys and/or DSA Keys # ssh remhost Configure the slaves and their serial ports Serial Port Redirection Managing the SlavesManaged Devices  Select Serial & Network Managed DevicesAdd Connection IPsec VPN Enable the VPN gateway  Select IPsec VPN on the Serial & Networks menuEnable the OpenVPN  Select OpenVPN on the Serial & Networks menuConfigure as Server or Client Windows OpenVPN Client and Server set up Windows client/server configuration file options are AES Blackbox.com Pptp VPN None  Click Apply Settings Add a Pptp user Set up a remote Pptp clientBlackbox.com Chapter Firewall, Failover and OoB Dial Access OoB Dial-In AccessConfigure Dial-In PPP  Check Enable Dial-InMSCHAPv2 Using SDT Connector client Set up Windows XP/ 2003/Vista/7 clientSet up Linux clients for dial-in OoB broadband accessSet up earlier Windows clients Broadband Ethernet Failover Dial-Out Failover Always-on dial-outBlackbox.com Failover dial-out Connect to the GSM HSUPA/UMTS carrier networkBlackbox.com Manual Activation Connect to the Cdma EV-DO carrier networkOtasp Activation Verify cellular connection Cellular modem watchdogOOB access set up Cellular failover setupCellular routing Cellular CSD dial-in setup Check Enable Dial-In and configure the Dial-In Settings Firewall & Forwarding Configuring network forwarding and IP masquerading Dhcp Configuration Configuring client devicesManual Configuration Port forwarding  Click Add New Port ForwardFirewall rules Interface Dialout/Cellular Port Range  Click New Firewall RuleDialout/Cellular, VPN, Network Interface, Dial-in etc Interface Port RangeSource IP Destination IPChapter Secure SSH Tunneling & SDT Connector Configuring for SSH Tunneling to Hosts SDT Connector Client ConfigurationSDT Connector installation  Run the set-up programBlackbox.com Blackbox.com Make an SDT connection through the gateway to a host Manually adding hosts to the SDT Connector gateway Manually adding new services to the new hosts Blackbox.com Adding a client program to be started for the new service Blackbox.com SDT Connector to Management Console Dial in configurationBlackbox.com  Click Add, then scroll to the bottom and click Apply Blackbox.com Importing and exporting preferences Pon networkconnectionSDT Connector Public Key Authentication OpenSSH Windows http//sshwindows.sourceforge.net/downloadSetting up SDT for Remote Desktop access Configure the Remote Desktop Connection client Blackbox.com  Click Connect Option DescriptionOn a Macintosh client SDT SSH Tunnel for VNC Install, configure and connect the VNC Viewer Blackbox.com Blackbox.com Blackbox.com From  Select Allow calling computer to specify its own address Set up SDT Serial Ports on console server SSH Tunneling using other SSH clients e.g. PuTTY Blackbox.com Blackbox.com Configure Auto-Response Chapter Alerts, Auto-response LoggingBlackbox.com UPS / Power Supply  Click on UPS / Power Supply as the Check Condition Check Save Auto-Response UPS Status  Click on UPS Status as the Check Condition Check Save Auto-Response Cellular Data Serial Login/Logout Click on Icmp Ping as the Check Condition  Click on Custom Check as the Check Condition  Check Save Auto-Response SMS Command Click on SMS Command as the Check Condition Action Delay Time Send EmailSend SMS  Select Alerts & Logging Smtp &SMS  Click Save New ActionSend Email alerts Send SMS alerts SMS via Email Gateway Select Cellular Modem In the SMS Settings field SMS via Cellular ModemSend Snmp trap alerts  Select Alerts & Logging SnmpLogging Nagios alertsNetwork Serial Ports refer to Chapter Log storageSerial port logging Auto-Response event logging Power device loggingNetwork TCP and UDP port logging RPC connection Chapter Power & Environmental ManagementRemote Power Control RPC Blackbox.com Blackbox.com Turn on RPC access privileges and alertsUser power management RPC status Uninterruptible Power Supply Control UPSTurn OFF Cycle Status Managed UPS connections Blackbox.com Blackbox.com Remote UPS management Controlling UPS powered computers UPS status Monitor managedups@192.168.0.1 1 username password slaveUPS alerts Overview of Network UPS Tools NUT Blackbox.com Environmental Monitoring Connecting the EMD Blackbox.com Environmental alerts Environmental statusChapter Authentication Authentication ConfigurationTacacs authentication Radius authentication  Enter the Server Password Ldap authenticationBlackbox.com RADIUS/TACACS User Configuration Group support with remote authenticationNetwork Remote groups with Radius authenticationRemote groups with Ldap authentication Administration Group DN Remote groups with TACACS+ authentication Idle timeout Select Serial and Network Authentication Kerberos authenticationPAM Pluggable Authentication Modules Authentication testingTACACS+ SSL Certificate Blackbox.com Blackbox.com Chapter Nagios Integration Central management and setting up SDT for Nagios Nagios OverviewSet up central Nagios server Distributed console servers Black Box console serversSet up distributed console servers Description, for example Windows 2003 IIS Server In Description enter Administrator connection  Select Serial Port from the Serial & Network menu Click Console server Mode, and select Logging Level  Check Nagios NscaConfiguring Nagios distributed monitoring Enable Nagios on the console serverEnabled  Select Users & Groups from the Serial & Network menuEnable Nsca monitoring Enable Nrpe monitoring Select System Nagios and check Nrpe Enabled  Select System Nagios and check Nsca Enabled Configure Selected Serial Ports for Nagios MonitoringConfigure Selected Network Hosts for Nagios Monitoring Permitted ServiceSample Nagios configuration Advanced Distributed Monitoring ConfigurationConfigure the upstream Nagios monitoring host Hostname Black Box Checkportlog CheckpingviaBlack BoxBasic Nagios plug-ins Executionfailurecriteria SSH Port Define commandCheckconnviaBlack Box Additional plug-ins Number of supported devicesDistributed Monitoring Usage Scenarios Local officeII. Remote site Remote site with restrictive firewallRemote site with no network access System Administration and Reset Chapter System ManagementUpgrade Firmware Configure Date and TimeConfiguration Backup Blackbox.com Blackbox.com Delayed Configuration Commit Fips Mode  Select the System Administration menu optionPort Access and Active Users  Select the Status Port AccessChapter Status Reports StatisticsSupport Reports Syslog Select the Status Statistics  Select Status SyslogConfiguring the Dashboard DashboardBlackbox.com Blackbox.com Creating custom widgets for the Dashboard Echo tableChapter Management Device ManagementWeb Terminal Web Terminal to Command LinePort and Host Logs  Select Manage Terminal SDT Connector access Check Web Terminal and click Apply Power Management  Select Manage PowerChapter Command Line Configuration Accessing config from the command lineOptions SyntaxDescription At /etc/config/config.xml Run=configurator# /bin/config -d element name Listed belowSerial Port configuration Console server mode Device ModeSerial bridge mode # config -s config.ports.port5.mode=bridgeConfig.ports.port5.bridge.ssh.enabled=on Syslog settingsAdding and Removing Users # config -g config.users.total# config -d config.users.user2.port1 # ./delete-node config.users.user2 # config -r users# config -g config.groups.total Adding and removing user Groups# config -a # config -r auth# config -g config.sdt.hosts.total # config -s config.sdt.hosts.total=4Add power device host Add other network host# config -g config.devices.total # config -hosts# config -g config.portaccess.total Cascaded PortsManaged UPSes # config -r cascadeUPS Connections Remote UPSes # config -s config.ups.monitors.total=1RPC Connections Environmental User Syslog Mail News # config -d config.devices.device8Port Log Error General settings for all alertsSignal Alert AlertsPattern Match Alert UPS Power Status AlertEnvironmental and Power Sensor Alert Alarm Sensor Alert # config -r alerts# config -s config.system.smtp.server2=mail.Black Box.com Smtp & SMSSnmp AdministrationIP settings Date & Time Settings Dial-in settings # config -s config.system.timezone=US/Eastern# config -r time # config -s config.console.ppp.defaultroute=onServices Nagios Blowfish Twofish RIJNDAEL-256 Serpent GostChapter Advanced Configuration Using IPMItoolsCustom script to run when booting Custom Scripting# cd # dos2unix /etc/config/rc.localRunning custom scripts when alerts are triggered Example script Power Cycling on Pattern Match Deleting Configuration Values from the CLIExample script Multiple email notifications on each alert Bin/sh /etc/scripts/alert-email $suffix# ./delete-node config.users.user3 Delete-node scriptNEWTOTAL=$ $TOTAL While $COUNTER != $TOTAL-NUMBER+1 doPower Cycle any device when a ping request fails Ping-detect script Running custom scripts when a configurator is invoked Backing-up the configuration off-box # /etc/scripts/backup-usb list# /etc/scripts/backup-usb load filename Portmanager commands Advanced PortmanagerPmshell PmchatSignals PmusersPortmanager daemon External Scripts and AlertsRaw Access to Serial Ports Access to serial portsIP- Filtering Accessing the console/modem portEtc/config/ipfilter Sysdescr Black Box Syscontact Modifying Snmp Configuration15.5.1 /etc/config/snmpd.conf Adding more than one Snmp server SSH Overview Secure Shell SSH Public Key AuthenticationConfig --set config.system.snmp.password2=yourpassword Installing the SSH Public/Private Keys Clustering Generating Public Keys Linux$ ssh-keygen -t rsadsa 28aa2938ba40f4115e3fd4fae53614d6 user@serverInstalling SSH Public Key Authentication Linux Chown fred /etc/config/users/fred/.ssh/authorizedkeysBlackbox.com Generating public/private keys for SSH Windows Blackbox.com Offending key in /.ssh/knownhosts1 FingerprintingAb7e33bd85505a430be0bd433f1ca5f8 SSH tunneled serial bridging Client KeysPublic key to refer to either idrsa.pub or iddsa.pub Authorized KeysSDT Connector Public Key Authentication Secure Sockets Layer SSL Support$ ls /home/user/keys Uploading KeysHttps Generating an encryption keyOpenssl genrsa -des3 -out sslkey.pem Generating a self-signed certificate with OpenSSLPower Strip Control Installing the key and certificateLaunching the Https Server Kill -HUP `cat /var/run/inetd.pid`Synopsis PowerMan toolTarget Specification Adding new RPC devices Powerman --on foo0,4-5Pmpower tool Blackbox.com Ipmitool -c-h-v-V-I lan -H hostname -p port P-f password -o oemtype commandIPMItool Aauthtype CciphersuiteIinterface LprivlvlHelp Ipmitool helpIpmitool chassis power help Custom Development Kit CDKScripts for Managing Slaves Ipmitool chassis helpSelect Status Support Report Select Alerts & Logging Port LogSelect Serial & Network Serial Port, Edit the serial ports Appendix a Linux Commands & Source Code Blackbox.com Blackbox.com Blackbox.com Commands Sigspec -n signum -si let arg arg Appendix B Hardware Specifications Feature ValueAppendix C Safety & Certifications FCC Warning StatementRead Before Using the Accompanying Software Appendix F End User License AgreementJSch License SDT Connector License Blackbox.com No Warranty Blackbox.com Blackbox.com Black Box Tech Support FREE! Live /7