Basic Configuration | Western Telematic AFS-16-1 guide

Basic Configuration

•HTTPS Port: Selects the TCP/IP port number that will be used for HTTPS connections. (Default = 443.)

Notes:

•In the Text Interface, HTTP and HTTPS parameters reside in a separate submenu. To enable and configure HTTP and HTTPS Access via the

Text Interface, access the Network Configuration Menu as described in Section 5.9, then type 23, press [Enter] and use the resulting submenu (Figure 14.1) to select parameters as described in Section 14.

•When the Web Access parameter is accessed via the Text Interface, the resulting submenu will also allow you to select SSL (encryption) parameters as described in Section 14.

•Harden Web Security: When the Harden Web Security feature is On (default,) only the high and medium cypher suites for SSLv3 and TLSv1 will be enabled. When the Harden Web Security feature is Off, all SSL protocols will be enabled, allowing compatibility with older browsers. Note that in the Text Interface, this option is enabled/disabled via the Web Access submenu. (Default = On.)

•SYSLOG Address: The IP Address or domain name (up to 64 characters) for the Syslog Daemon that will receive log records generated by the AFS-16. For more information, please refer to Section 11. (Default = undefined.)

•Ping Access: Enables/Disables response to the ping command. When Disabled, the AFS-16 will not respond to Ping commands. Note that disabling Ping Access at the Network Port will not effect the operation of the Ping-No-Access Alarm.

(Default = On.)

•Outbound Access: Enables/Disables the ability to create outbound Telnet and/ or SSH connections via the AFS-16 Network Port. When enabled, users who are connected to the AFS-16 command mode via the RS232 Serial Port will be able to connect to the Network Port, and then invoke the /TELNET and/or /SSH commands to create an outbound connection. For example, to create an outbound Telnet connection, first make certain that this option is enabled for both the RS232 Serial Port and the password/account, then access command mode via the Text Interface at the RS232 Port. At the AFS> prompt, invoke the /TELNET command as described in Section 10.3. (Default = Off.)

5-28

Image 49

Western Telematic AFS-16-1 manual Basic Configuration

Contents

AFS-16-1 Secure Racking Shock Hazard Do Not Enter Lithium Battery Two Power Supply Cables Disconnect Power Table of Contents Basic Configuration Telnet & SSH Functions Upgrading AFS-16 Firmware Command Reference Guide Vii List of Figures Introduction Security and Co-Location Features Environmental Monitoring and Management Typographic ConventionsWTI Management Utility Bold Font  Power Switch and on Indicator Dual Power Supply ModuleUnit Description Control Module Control Module Unit Description Circuit Module Circuit Module Getting Started Apply Power to the AFS-16Connect Your PC to the AFS-16 Communicating with the AFS-16 Fallback Switching Text Interface Fallback Switching Fallback Switching Web Browser Interface Connecting the Power Supply Cables Hardware InstallationConnecting the Network Cable Connecting an External Modem Optional Connecting a Local Control Device A/C/B Connectors Module Set UpCircuit Module Set Up Control Module SetUp Communicating with the AFS-16 Unit Basic ConfigurationText Interface Web Browser Interface Access Via PDA Configuration Menus Defining System Parameters Basic Configuration Real Time Clock and Calendar Invalid Access Lockout Feature Log Configuration Web Browser Interface Callback Security Basic Configuration Scripting Options Basic Configuration User Accounts Command Access Levels Granting Circuit Module Access Viewing User Accounts Managing User AccountsAdding User Accounts Basic Configuration Deleting User Accounts Modifying User Accounts Circuit Configuration Viewing Circuit Groups Circuit Group Directory Modifying Circuit Groups Adding Circuit GroupsDeleting Circuit Groups Serial Port Configuration Menu Serial Port ConfigurationCommunication Settings 1. RS232 Port Modes Port Mode Parameters Network Configuration Network Port Parameters Network Parameters Basic Configuration IP Security Basic Configuration Net/Mask Pairs Except Domain Name Server Static Route Snmp Access Parameters Snmp Trap Parameters Ldap Parameters Group Membership Value Type Default = DN Basic Configuration Tacacs Parameters Basic Configuration Radius Parameters WTI-Group-Access=111000 WTI-Circuit-Access=0101WTI-Super=2 Example Email Messaging Parameters Save User Selected Parameters Restore Configuration Adding Ping-No-Answer Profiles Ping-No-Answer Fallback Switching Ping-No-Answer Fallback Switching Modifying Ping-No-Answer Profiles Viewing Ping-No-Answer ProfilesDeleting Ping-No-Answer Profiles Alarm Configuration Output Contacts Control Module AUX Connector Output Contacts Over Temperature Alarms Alarm Configuration Configuring the Ping-No-Answer Alarm Ping-No-Answer AlarmDefining Ping-No-Answer IP Addresses Alarm Configuration Invalid Access Lockout Alarm Alarm Configuration Power Cycle Alarm Monitor/Alarm Input Alarm Configuration High Low Monitor Input Level Settings Alarm Configuration Product Status Status ScreensNetwork Status Screen Circuit Status Screen Circuit Group Status Screen Audit Log Event Logs Temperature Log Alarm Log Operation A/B Switching Web Browser InterfaceCircuit Control Screen Web Browser Interface Circuit Group Control Screen Web Browser Interface Operation Circuit Status Screen Text Interface A/B Switching Text Interface TA 1 Enter or /TA Datacenter Enter 2. A/B Switching Commands Text InterfaceTB 2 Enter or /TB Servers Enter TA ROUTER,Y or /T 2,B,Y B Enter or /T SERVERS,A EnterTB 1+3+4 Enter +3+4,B Enter TA 13 Enter Manual Operation Logging Out of Command Mode SSH Encryption Telnet & SSH FunctionsEnter 10-1 Telnet ip port raw Enter Creating an Outbound Telnet ConnectionTelnet 255.255.255.255 2000 raw Enter 10-2 SSH ip -l username Enter Creating an Outbound SSH ConnectionUsername SSH 255.255.255.255 -l employee Enter Syslog Messages Configuration11-1 11-2 Testing Syslog Configuration 12-1 Snmp Traps 12-2 Testing the Snmp Trap Function Configuration via Snmp AFS-16 Snmp Agent SNMPv3 Authentication and EncryptionUserTableuserAccessLevel Account access level Operation via Snmp Adding Users Viewing UsersModifying Users Deleting Users Controlling Circuits Circuit Control via SnmpControlling Circuit Groups 13-3 Circuit Status Viewing AFS-16 Status via Snmp155 Unit Environment Status 13-5 Sending Traps via Snmp 14-1 Setting Up SSL Encryption 14-2 Creating a Self Signed Certificate 14-3 Creating a Signed Certificate 14-4 Downloading the Server Private Key Sending Parameters to a File Saving and Restoring Configuration Parameters15-1 15-2 Restoring Saved Parameters 15-3 Restoring Previously Saved Parameters 16-1 Upgrading AFS-16 Firmware 16-2 Command Conventions Command Reference GuideTA * Enter 17-1 17-2 Command Summary Display Circuit Status Screen Command SetDisplay Circuit Group Status Screen Display Network Status Log Functions Exit Command ModeDisplay Site ID / Unit Information Connect TA 2+3,Y Enter Toggle to a PositionToggle to B Position TB 2+3,Y Enter Set All Circuits to Default States Toggle Command+3,A,Y Enter Send Parameters to File Send SSH Key Unlock Port Invalid Access LockoutTelnet Outbound Telnet Format /TELNET ip port raw Enter Format /SSH ip -l username Enter SSH Outbound SSHSet System Parameters Set Serial Port Parameters Alarm Configuration Parameters PNA Configure Ping-No-Answer FunctionCircuit Group Parameters Network Port Parameters Upgrade Firmware Reboot System DefaultTest Test Network Parameters When not connected When connectedAppendix A. Interface Description Serial Port RS232 Switching Appendix B. SpecificationsPhysical/Environmental Apx-2 Apx-3 Appendix C. Customer Service Trademarks and Copyrights Used in this Manual Trademark and Copyright InformationApx-4 Index-1 Index Radius CLI Index-2 Ldap Index-3 Tacacs Index-4 NTP Index-5 Index-6 Snmp Index-7 SNMPV3 Index-8