Manuals / Perle Systems / Computer Equipment / Server

Perle Systems 5500161-40 manual Introduction 213 Authentication, 223, 226

Models: 5500161-40

1 424

Download 424 pages 39.35 Kb

Page 13

	Table of Contents
Chapter 9 Configuring Security	213
Introduction	213
Authentication	213
Authentication	214
Local	215
Overview	215
Field Descriptions	215
RADIUS	216
Overview	216
General Field Descriptions	216
Attributes Field Descriptions	217
Kerberos	218
Field Descriptions	218
LDAP	219
Overview	219
Field Descriptions	219
TACACS+	220
Overview	220
Field Descriptions	220
SecurID	221
Overview	221
Field Descriptions	221
NIS	222
Field Descriptions	222
SSH	223
Overview	223
Functionality	223
Users Logging into the IOLAN Using SSH	223
Users Passing Through the IOLAN Using SSH (Dir/Sil)	224
Field Descriptions	225
SSL/TLS	226
Overview	226
Functionality	226
Field Descriptions	227
Cipher Suite Field Descriptions	228
Adding/Editing a Cipher	229
Validation Criteria Field Descriptions	230

13

Image 13

Perle Systems 5500161-40 manual Introduction 213 Authentication, 223, 226

Contents

Iolan SDS/SCS/STS/MDC EN 55022 1998, Class A, Note Table of Contents Getting to Know Your Iolan Power Supply SpecificationsIntroduction Configuration Methods Overview Powering Up the IolanEasy Config Wizard DeviceManager WebManagerMenu Command Line InterfaceIOLAN+ Interface Using DeviceManager to Connect to the Iolan Setting Up the Serial Ports Setting Up UsersUsing WebManager to Connect to the Iolan Configuration FilesManaging the Iolan Introduction IP SettingsAdvanced Serial Port Profiles 116 Introduction 113 Serial PortsUDP Sockets Profile 142 Port Buffering Control Signal I/O Profile 169Advanced 197 Introduction 201 User Settings 202Adding/Editing Users 203 223 Introduction 213 Authentication226 Introduction 245 Settings 246 Services 240231 Keys and Certificates 242Modbus Slave ChannelsAccessing I/O Data Via TruePort 285 Modbus I/O Access 278TruePort I/O 283 Snmp Traps 289296 Introduction 295 Option Card SettingsIntroduction 299 Alerts Management 302Introduction 319 Managing Configuration Files Serial Port Power Control 315Introduction 313 RPS Control Channels 316326 323327 329Configuring PPP Dial On Demand 337 Setting Up Printers 338 Configuring Modbus 333Configuring a Virtual Private Network 340 Introduction 347Introduction 359 Valid SSL/TLS Ciphers EIA-232 Cabling Diagrams 371361 Serial Pinouts 363Introduction 391 TruePort Wiring I/O Diagrams 385Communication Issues 410 API I/O Access Over TruePort 392Host Problems 411 Decoder 393415 Models 415 IPv6 Issues 416 Contacting Technical Support 417Index About This Book PrefaceIntended Audience DocumentationOnline Help Typeface ConventionsAbout the Iolan IntroductionIolan Family Models Hardware Iolan FeaturesSoftware Ldap SecurityIntroduction ConnectivityIolan Components What’s IncludedAvailable Accessories Power Supply SpecificationsPower Over Ethernet PoE Models Desktop ModelsMedical Unit Models Rack Mount Models except Electric Utility modelsElectric Utility models Overview Getting to Know Your IolanIolan Model LED Label Green light PortPort End View Top ViewConsole Port/LED View Rack MountSerial/Ethernet View Medical Unit Power/Ethernet ViewSerial View Front LED/Console portView Back Serial/Ethernet/power ViewConsole Mode Console/Serial SwitchSerial Mode Dedicated Console Port Powering Up the IolanDesktop/Rack Mount Models excluding Electric Utility models Left VDC + Right ModelsEarthing Wire DC Power Models excluding Electric Utility modelsPrimary Supply Secondary back-up SupplyDisconnecting 48V Power Supplies from the Iolan Grounding WiringTerminal # Description Usage Wiring up an HV unitWiring up a DHV unit Wiring up a the Fail-Safe Relay Powering Up the Iolan Configuration Methods Chapter Configures an IP Address Configuration Methods OverviewRequires a Configured IP Address Easy Config Wizard Features Access PlatformsConnecting to the Iolan Using DeviceManager DeviceManagerDeviceManager Navigating the Options Using DeviceManagerWebManager Downloading the ConfigurationIolan Connecting to the Iolan Using WebManagerUsing WebManager Connecting to the Iolan Using the CLI Command Line InterfaceThrough the Network Connecting to the Iolan Using the Menu Using the CLIMenu Through the Serial PortUsing the Menu Using DHCP/BOOTP Connecting to the Iolan Using DHCP/BOOTPTACACS+ Securid DHCP/BOOTP ParametersSnmp Connecting to the Iolan Using SnmpUsing the Snmp MIB Using the IOLAN+ Interface Connecting to the Iolan to Use the IOLAN+ InterfaceIOLAN+ Interface Changes to the IOLAN+ Interface REMOTE-ADMINOpt HEX Rlogin/Telnet Remote Access Systems Screen Name Wchiewsds2 Debug mode IP address IOLAN+ Interface Getting Started Easy Configuration Wizard Setting Up the Network Using a Direct Serial Connection to Specify an IP Address Using a Direct Serial Connection to Enable BOOTP/DHCP For an IPv6 Network Using ARP-PingSetting Up the Serial Ports Setting Up the Serial Ports Setting Up Users Setting Up Users Using DeviceManager WebManager DeviceManager Navigating DeviceManager/WebManagerEasyPort Web WebManagerStarting a New Session Using DeviceManager to Connect to the IolanAssigning a Temporary IP Address to a New Iolan Logging in to the Iolan Adding/Deleting IOLANs ManuallyConfiguration Files Using WebManager to Connect to the IolanCreating a New Iolan Configuration in DeviceManager Logging into the IolanImporting an Existing Configuration File Opening an Existing Configuration FileManaging the Iolan Network Settings IPv4 Settings IP SettingsOverview Field DescriptionsIPv6 Settings Field Format IPv6 address Field Format IPv6 address DSN ServerAdding/Editing a Custom IPv6 Address Prefix Bits Range DefaultServer Name.Domain Prefix.Domain Name AdvancedDefault 200 ms Default 100 msDefault Disabled Advertise DHCPv6 ConfigurationHost Table AdvancedFunctionality IP Filtering Data OptionsHost Name Adding/Editing a HostFully Qualified Domain NameRoute List Adding/Editing Routes Default DefaultType IPv4 Subnet MaskDNS/WINS Editing/Adding DNS/WINS Servers RIPDefault None Ethernet ModeAuthentication PasswordOverview Functionality Dynamic DNSEnd Time KeyDefault Dynamic Account SettingsUser Name System TypeCipher Suite Field Descriptions Adding/Editing a Cipher Suite Validation Criteria Field Descriptions Common Name IPv6 TunnelsAdding/Editing an IPv6 Tunnel Default ManualName Mode112 Iolan SDS/SCS/STS/MDC User’s Guide, Version Functionality Serial PortsEditing a Serial Port Copying a Serial Port Serial Port Profiles Resetting a Serial PortCommon Tabs Hardware Tab Field Descriptions Default Auto Flow Control Default FullEnable Inbound Flow Control Default Enabled Enable OutboundEmail Alert Tab Field Descriptions Packet Forwarding Tab Field Descriptions Enable Trigger2 Enable Trigger1Packet Definition Packet SizeEOF1 Character Default TriggerEOF2 Character TriggerDefault Client SSL/TLS Settings Tab Field Descriptions124 Iolan SDS/SCS/STS/MDC User’s Guide, Version 125 126 Iolan SDS/SCS/STS/MDC User’s Guide, Version Console Management Profile Default TelnetGeneral Tab Field Descriptions ProtocolAdvanced Tab Field Descriptions Administrator Enable MicrosoftSupport Default Disabled Multisessions Idle TimeoutModem TruePort ProfilePhone Connect to remote System Default Enabled Host NameConnect to Multiple HostsAdding/Editing a Multihost Entry Adding/Editing Additional TruePort Hosts133 Day Motd Default Disabled Enable TCP Signals highWhen Session Timeout Enable DataLogging TCP Sockets Profile Connection Workstation/Server on the network Default EnabledReceived on the serial port Initiate ConnectionAdding/Editing Additional Hosts 139 Day Motd Default Disabled Enable Data 141 UDP Sockets Profile UDP port Terminal Profile Default 0 zeroDirection Start IP Address145 VT100 Default DumbTVI925 VT320 specifically supporting VT320-7Is received Default Disabled ProtocolData Range 149 Login Settings User Service SettingsInterrupt Telnet SettingsQuit EraseUser is only prompted for a password Rlogin SettingsEscape SSH Settings RSA authentication for the SSH session Slip SettingsAuthentication for the SSH session ArcfourVJ Compression RoutingPPP Settings IPv6 Remote Default ChapNone Remote User Configure Req Remote PasswordTimeout Default 3 secondsRoaming Callback Default 1 minuteChallenge Interval Address/ControlPrinter Profile Serial Server Tunnel Serial Tunneling ProfileSerial Client Iolan TunnelAct As Tunnel Client Default Disabled Host NameVirtual Modem Profile 165 DCD AT Command DTR Signal Acts as RTS Signal Always On RTS Signal Acts asResponse Delay Phone Number to Host Mapping VModem Phone Number Entry Control Signal I/O ProfilePhone Number Host IP AddressInvert Signal Input Signal Field DescriptionsDescription LatchMode Default Disabled Auto Clear ModeManual Clear SyslogFailsafe Action Output Signal Field DescriptionsModbus Gateway Profile Destination Slave Settings Button UID RangeIP Mappings Advanced SlaveDefault 1000 ms Default 30 msAdvanced Field Descriptions Modbus Slave IP Settings Field Descriptions Default Host Adding/Editing Modbus Slave IP SettingsUID Start UID EndDefault TCP Modbus Slave Advanced Settings Field DescriptionsRange Default 50 ms Data Options TCP or UDPPower Management Profile Default RSP820 Editing Power Management Plug Settings Field DescriptionsRPS Name RPS ModelDefault State Remote Access PPP ProfileDefault Off Data Options On, OffDynamic DNS Negotiate IPIPv6 Global Authentication Tab Field Descriptions 185 DNS for this Serial Default Disabled Port Host Enable DynamicAccount Settings Dynamic DNS Field Descriptions187 Compression Default Enabled Enable Protocol Configure RequestEnable VJ Enable MagicMS Direct Host Dial In/OutMS Direct Guest Remote Access Slip Profile 191 192 Iolan SDS/SCS/STS/MDC User’s Guide, Version General Tab Field Description Custom Application ProfileLocal Port Buffering Port BufferingKeyboard Buttons Hot Keys Direction Remote Port Buffers Field DefinitionsData Default Disabled Enable Key Stroke Enable PortNFS Host NFS DirectorySignals Advanced Serial Settings TabProcess Break Deny MultipleSerial Port Menu Default ~menuString Session EscapeAdding/Editing a Modem Modems TabName Name of the modem Field Definitions TruePort Baud Rate TabConfiguring Users User Settings General Tab Adding/Editing UsersDefault Normal Service Services TabDefault DSPrompt Host IPIndentifier IPv6 InterfaceAdvanced Tab Default English Sessions Tab Connect Session 1, 2, 3Serial Port Access Serial Port Access TabAllow Access to Clustered Ports212 Iolan SDS/SCS/STS/MDC User’s Guide, Version Authentication Configuring SecurityMethod Default Local Secondary AuthenticationPrimary MethodLocal General Field Descriptions RadiusAddress Default Enabled Authenticator response Default Enabled RetryAttributes Field Descriptions NAS-IdentifierRealm KerberosKDC Domain KDC PortBase Enable TLSTLS Port Default None Authentication Authentication Authorization Primary Host Secondary HostAuthorization Port Default Authentication Primary Host Default NoneSecurID NIS Device Server Users Logging into the Iolan Using SSHLynn TracyLynn Sales Server Users Passing Through the Iolan Using SSH Dir/SilHR Server Interactive Default Enabled Password Protocol Default DisabledField Descriptions Allow SSH-1Output Default Disabled Enable VerboseBreak String Button For a valid SSL/TLS connection 228 Iolan SDS/SCS/STS/MDC User’s Guide, Version Adding/Editing a Cipher 230 Iolan SDS/SCS/STS/MDC User’s Guide, Version VPN ESP Phase 2 Proposals IKE Phase 1 ProposalsAuthentication Algorithms-MD5, SHA1, SHA2 IPsecAdding/Editing the IPsec Tunnel Secret/Remote Default LeftValidation Criteria Local DeviceShared Secret Field Description Remote Validation Criteria Field Descriptions Allow L2TP/IPsec L2TP/IPsecExceptions Field Description Adding/Editing a VPN ExceptionTelnet Server ServicesTruePort Full Syslog ClientWebManager DeviceManagerSSH Server Sntp ClientKeys and Certificates Key Type 244 Iolan SDS/SCS/STS/MDC User’s Guide, Version Configuring I/O InterfacesChapter Access Functionality SettingsAdvanced Slave Modbus Settings Request Queuing Default 30 seconds Failsafe Timer FunctionalityFailsafe Action is triggered Broadcast of I/O Default Disabled Status Enable UDPUDP Functionality UDP Entry UDP SettingsDefault Celsius Temperature FunctionalityAnalog ChannelsMonitoring Application A4D2 Analog I/O AnalogAlarm Settings Default CurrentMonitoring Application Digital InputDigital I/O Input Mode 257 Digital Output Default Sink Output ModeOutput Inactive Signal Width Active Signal Width Pulse ModeDelay Pulse CountMonitoring Application A4D2Relay RelayRelay I/O Width Inactive SignalDigital I/O Extension Active SignalFront Door Warehouse Perle Iolan ReceptionMessage type 1 Byte Current Alarm State 1 Byte z 0 = Not in alarmInput number 1 Byte Extension Enable I/OInput TCP Port Local connection HostsSimultaneously Communicate to the Host Temperature I/O Industrial Freezers TemperatureDefault RTD Basic Analog Alarm Settings Alarm SettingsClear Mode Advanced Analog Alarm SettingsTrigger Type Clear UDP Broadcast Packet UDP Unicast FormatAnalog Section Length EnabledSection Channel Digital/Relay Section Serial Pin Signal SectionLength Channel Length PinUDP Unicast Example Modbus SlaveModbus Serial Application Connected to the Serial Port Modbus Serial Application Connected to the NetworkModbus TCP Application Modbus I/O AccessFunction Codes PC running a Modbus RTU or Ascii Application UIDCoil/Register Descriptions A4/T4 Registers Serial Port Coil/Register DescriptionsData Model A1/T1 A2/T2 A3/T3 A4/T4 Holding Registers Input RegistersData Model D1/R1 D2/R2 Coils A4D2/A4R2 RegistersD4/D2R2 Registers Serial Pin SignalsData Model D3/R1 D4/R2 Coils Data Model Pin CoilsTruePort I/O Modbus Serial Application TruePort Power Digital OutputTruePort/Modbus Combination PC running aPC running Custom Application API TruePort API Over TruePort OnlySetup Accessing I/O Data Via TruePortIntroduction Get Commands Format of API CommandsCommand Format Response FormatSet Commands Unsuccessful Response Format Successful Response FormatExample 1 Turn on the first relay on a D2R2 unit Example 2 Turn on the first and second relay on a D2R2 unitSnmp Traps Error Codes290 Iolan SDS/SCS/STS/MDC User’s Guide, Version Clustering Slave List Configuring Clustering ChapterAdvanced Button Adding Clustering Slaves Advanced Clustering Slave Options Editing Clustering Slave SettingsPort Name Master TCP Port Slave TCP PortOption Card Settings Configuring the Option CardConfiguring the Iolan Modem Card Overview Field Descriptions Configuring a Wireless WAN CardCard APN 298 Iolan SDS/SCS/STS/MDC User’s Guide, Version Alerts Configuring the System ChapterEmail Alerts Alerts Syslog Contact ManagementLocation CommunityAuth Password Auth Algorithm Data Options MD5, SHA Default MD5Default DES Privacy PasswordPrivacy Algorithm Data Options DES, AES Default DES Algorithm Data Options MD5, SHA Default MD5Confirm Password Trap TimeNetwork Time Tab Field Descriptions Sntp ModeSntp Version Time Zone/Summer Time Tab Field Descriptions Custom App/Plugin Login Tab Field Descriptions Bootup Files Tab Field Descriptions Tftp Host Message of the Day Motd Tab Field DescriptionsFilename Display Motd WebManager EasyPort WebTftp Tab Field Descriptions Default Flow ControlConsole Port Tab Field Descriptions Baud Rate312 Iolan SDS/SCS/STS/MDC User’s Guide, Version Controlling the RPS, I/O Channels, and IPsec Tunnels State Button Management profile settingsRPS Control OK Button Closes the window Plug ControlPower Plug Status Serial Port Power ControlButton Serial port Deactivate Output Manually deactivates the channel output IPsec Tunnel Control 318 Iolan SDS/SCS/STS/MDC User’s Guide, Version Managing Configuration Files System Administration ChapterSaving Configuration Files Downloading Configuration Files Reboot Server Downloading Configuration Files to Multiple IOLANsSpecifying a Custom Factory Default Configuration Uploading Configuration FilesDownloading Iolan Firmware Resetting the Iolan to the Default ConfigurationCalibrating I/O Calibrating Analog InputCalibrating Voltage Calibrating Temperature InputCalibrating Current Calibrating ThermocoupleCalibrating Analog Channels Resetting Calibration DataRebooting the Iolan Setting the IOLAN’s Date and TimeResetting the Iolan to Factory Defaults Language Support Resetting the SecurID Node SecretLoading a Supplied Language Translation Guidance Software Upgrades and Language FilesCreating Terminal Definition Files Downloading Terminal DefinitionsFor example Resetting Configuration ParametersLost Admin Password 332 Iolan SDS/SCS/STS/MDC User’s Guide, Version Configuring a Master Gateway Configuring ModbusConfiguring a Slave Gateway ApplicationsModbus Master Gateway Modbus Gateway SettingsModbus Slave Gateway Modbus Master Settings Modbus Serial Port SettingsModbus Slave UID Master Gateway Serial EIA-232Modbus Master Slave Gateway Modbus Slave SettingsSerial Port EIA-422/485 Modbus Master Modbus Slave UID 172.16.0.0 Configuring PPP Dial On DemandRemote Printing Using LPD Setting Up PrintersRemote Printing Using Host-Based Print Handling Software Remote Printing Using RCPIOLAN-to-Host/Network Configuring a Virtual Private NetworkOr just 172.16.45.84 192.168.45.87 192.168.45.12 Network-to-NetworkLeft External IP Address Right Host-to-HostGateway Router 172.16.45.99344 Iolan SDS/SCS/STS/MDC User’s Guide, Version VPN Client Initiate Communication Router Broadband Right VPN Client-to-Network346 Iolan SDS/SCS/STS/MDC User’s Guide, Version Supported Radius Parameters Radius and TACACS+ Appendix aPPP User level. See Perle Radius Dictionary Example Accounting Message Radius Parameter Iolan Parameter Mapped Radius Parameters to Iolan ParametersPerle Radius Dictionary Example Value TACACS+ Accessing the Iolan Through a Serial Port UsersName Values Description Slip Accessing the Iolan from the Network Users Accessing the Iolan from the Network User Example Settings Valid SSL/TLS Ciphers SSL/TLS CiphersDES-CBC-MD5 Virtual Modem Initialization Commands CommandsAT&Rn AT&SnAT&Cn Serial Pinouts Pinouts and Cabling DiagramsDB25 Male DB25 Female RJ45 Number Iolan model Pins SeeRJ45 for desktop and rack mount models RJ45 for SCS48C/SCS32C/SCS16C/SCS8C models Pinout EIA-232 Admin Port Serial PortsEIA-485 Pin# EIA-232 EIA-422 Full Duplex Half Duplex RJ45 for SDS32C/SDS16C/SDS8C Electric Utility modelsRJ45 for medical unit models DB9 Male Serial OnlyDB9 Male I/O Power Over Ethernet PinoutsTerminal DB25 Connector EIA-232 Cabling DiagramsDB25 Male DB25 Female10-pin Pin RJ45DB9 Male Iolan RJ45 DCE Modem DB25 ConnectorRxD TxD DTR 20 DTR GND 376 Iolan SDS/SCS/STS/MDC User’s Guide, Version Port Iolan DB25 Male/Female Setting JumpersPort Iolan RJ45 Port Iolan RJ45 P Power Over EthernetPort Iolan SDS1M Modem Port Iolan DB9Port Iolan Port/Line # Line Termination 5V Output Input Volt Output Port Desktop IolanDigital I/O Module Analog Input Module 384 Iolan SDS/SCS/STS/MDC User’s Guide, Version Digital I/O Wiring I/O DiagramsDigital Input Wet Contact Digital Input Dry ContactDigital Output Source Digital Output SinkCurrent Analog InputVoltage RTD 2-Wire Temperature InputRTD 3-Wire ThermocoupleRelay Output RTD 4-WireNormally Open Contact Normally Closed Contact390 Iolan SDS/SCS/STS/MDC User’s Guide, Version TruePort UtilitiesAPI Request Format API I/O Access Over TruePortAPI Response Format Decoder Error Codes394 Iolan SDS/SCS/STS/MDC User’s Guide, Version Installing a Perle PCI Card AccessoriesInstalling a Perle PCI Card Accessories RJ45F to DB25M DTE Crossover Adapter Starter Kit Adapters/CableRJ45F to DB25M DCE Modem Adapter RJ45F DB25F RJ45F to DB25F DTE Crossover AdapterRJ45F to DB9M DTE Crossover Adapter RJ45F to DB9F DTE Crossover Adapter Sun/Cisco RJ45M Connector Cable for Rack Mount ModelsSCS48C/SCS32C/SCS16C/SCS8C Starter Kit Adapters/Cable GND DTR 20 DTR DSR RJ45F to DB25F DTE Crossover Adapter 406 Iolan SDS/SCS/STS/MDC User’s Guide, Version RJ45F Sun/Cisco Roll-Over Adapter for Rack Mount Models408 Iolan SDS/SCS/STS/MDC User’s Guide, Version Hardware Troubleshooting TroubleshootingDeviceManager Problems Communication IssuesPower/Ready LED Labels General communication checks and practices are as followsRadius Authentication Problems Host ProblemsProblems with Terminals Login ProblemsCallback Problems DHCP/BOOTP ProblemsLanguage Problems You observe Tftp errors when the Iolan boots, for examplePPP Problems Modem ProblemsPrinting Problems Long Reboot CycleModels Certificate did not match configurationCould not obtain peers certificate An A4R2 model is starting/stoppingIPv6 Issues Making a Technical Support Query Contacting Technical SupportFeedback on this Manual Repair ProcedureGlossary Authentication Protocol Radius Remote PAP PasswordAuthentication Dial Users Services Reverse Connection RIP RoutingAPI IndexLdap Radius