Tripp Lite B092-016 Manuel utilisateur

Tripp Lite World Headquarters

1111 W. 35th Street, Chicago, IL 60609 USA

www.tripplite.com/support

Owner’s Manual

WARRANTY

REGISTRATION:

chance to win a FREE Tripp Lite

product—www.tripplite.com/warranty

Console Server Management Switch

Models:

B096-016 / B096-048

Console Server with PowerAlert

Model:

B092-016

Console Server

Models:

B095-004-1E / B095-003-1E-M / B094-008-2E-M-F

Please take care to follow the safety precautions below when installing and operating the Console Server:

• Donotremovethemetalcovers.Therearenooperator-serviceablecomponentsinside.Openingor

removing the cover may expose you to dangerous voltage which may cause ﬁre or electric shock. Refer all

service to Tripp Lite qualiﬁed personnel

• Toavoidelectricshockthepowercordprotectivegroundingconductormustbeconnectedthroughtoground

• Alwayspullontheplug,notthecable,whendisconnectingthepowercordfromthesocket

• DonotconnectordisconnecttheConsoleServerduringanelectricalstorm

• AlsoitisrecommendedyouuseasurgesuppressororUPStoprotecttheequipmentfromtransients

FCC Information, Class A

Thisdevicecomplieswithpart15oftheFCCRules.Operationissubjecttothefollowingtwoconditions:(1)Thisdevicemay

notcauseharmfulinterference,and(2)thisdevicemustacceptanyinterferencereceived,includinginterferencethatmay

cause undesired operation.

Note: This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to part 15 of

the FCC Rules. These limits are designed to provide reasonable protection against harmful interference when the equipment

is operated in a commercial environment. This equipment generates, uses, and can radiate radio frequency energy and, if

not installed and used in accordance with the instruction manual, may cause harmful interference to radio communications.

Operation of this equipment in a residential area is likely to cause harmful interference in which case the user will be required

to correct the interference at his own expense. The user must use shielded cables and connectors with this equipment. Any

changes or modiﬁcations to this equipment not expressly approved by Tripp Lite could void the user’s authority to operate this

equipment.

RoHS

This product is RoHS compliant.

User Notice

Allinformation,documentationandspecicationscontainedinthismanualaresubjecttochangewithoutpriornoticationby

themanufacturer.Themanufacturermakesnorepresentationsorwarranties,eitherexpressedorimplied,withrespecttothe

contents hereof and speciﬁcally disclaims any warranties as to merchantability or ﬁtness for any particular purpose. Any of the

manufacturer's software described in this manual is sold or licensed `as is'. Should the programs prove defective following

theirpurchase,thebuyer(andnotthemanufacturer,itsdistributor,oritsdealer),assumestheentirecostofallnecessary

servicing,repairandanyincidentalorconsequentialdamagesresultingfromanydefectinthesoftware.

The manufacturer of this system is not responsible for any radio and/or TV interference caused by unauthorized modiﬁcations

to this device. It is the responsibility of the user to correct such interference. The manufacturer is not responsible for any

damage incurred in the operation of this system if the correct operational voltage setting was not selected prior to operation.

Introduction 10

Installation 14

2.1 Models 14

2.1.1 Kitcomponents:B096-048andB096-016ConsoleServerManagementSwitch 14

2.1.2 Kitcomponents:B092-016ConsoleServerwithPowerAlert 15

2.1.3 Kitcomponents:B095-004-1EandB095-003-1E-MConsoleServer 15

2.1.4 Kitcomponents:B094-008-2E-M-FConsoleServer 16

2.2 Power Connection 17

2.2.1 Power: Console Server Management Switch 17

2.2.2 Power: Console Server with PowerAlert 17

2.2.3 Power: Console Server 17

2.3 Network Connection 17

2.4 Serial Port Connection 18

2.5 USB Port Connection 18

2.6 Rackmount Console / KVM Connection (B092-016 only) 18

System Conﬁguration 19

3.1 Management Console Connection 19

3.1.1 Connected computer set up 19

3.1.2 Browser connection 20

3.1.3 InitialB092-016connection 21

3.2 Administrator Password 22

3.2.1 Set up new administrator 22

3.3 Network IP Address 23

3.3.1 IPv6conguration 24

3.3.2 DynamicDNS(DDNS)conguration 25

3.4 System Service Access 26

3.5 Communications Software 29

3.5.1 SDTConnector 29

3.5.2 PuTTY 29

3.5.3 SSHTerm 30

3.6 Management Network Conﬁguration 31

3.6.1 EnabletheManagementLAN 31

3.6.2 ConguretheDHCPserver 32

3.6.3 SelectFailoverorbroadbandOOB 33

3.6.4 Bridgingthenetworkports 34

3.6.5 WirelessLAN 34

3.6.6 Static routes 35

Table of Contents

Serial Port, Host, Device & User Conﬁguration 36

4.1 Conﬁguring Serial Ports 36

4.1.1 CommonSettings 37

4.1.2 ConsoleServerMode 38

4.1.3 SDTMode 41

4.1.4 Device(RPC,UPS,EMD)Mode 42

4.1.5 TerminalServerMode 42

4.1.6 SerialBridgingMode 43

4.1.8 Syslog 43

4.2 Add/ Edit Users 44

4.3 Authentication 46

4.4 Network Hosts 46

4.5 Trusted Networks 47

4.6 Serial Port Cascading 48

4.6.1 AutomaticallygenerateanduploadSSHkeys 48

4.6.2 ManuallygenerateanduploadSSHkeys 49

4.6.3 Conguretheslavesandtheirserialports 50

4.6.4 Managingtheslaves 50

4.7 Serial Port Redirection 51

4.7.1 InstallVirtualPortclient 51

4.7.2 ConguretheVirtualPortclient 52

4.7.3 Toremoveaconguredport 54

4.7.4 Conguretheremoteserialdeviceconnection 54

4.8 Managed Devices 55

4.9 IPsec VPN 56

4.9.1 EnabletheVPNgateway 56

4.10 OpenVPN 58

4.10.1 EnabletheOpenVPN 59

4.10.2 CongureasServerorClient 60

4.10.3 WindowsOpenVPNClientandServersetup 62

4.11 PPTP VPN 65

4.11.1 EnablethePPTPVPNserver 66

4.11.2 AddaPPTPuser 67

4.11.3 SetuparemotePPTPclient 68

Firewall, Failover & OoB 69

5.1 OoB Dial-In Access 69

5.1.1 Conguredial-inPPP 70

5.1.2 UsingSDTConnectorclientfordial-in 71

5.1.3 SetupWindowsXP/2003/Vista/7clientfordial-in 71

5.1.4 SetupearlierWindowsclientsfordial-in 72

5.1.5 SetupLinuxclientsfordial-in 72

5.2 OoB Broadband Access 73

5.3 Broadband Ethernet Failover 73

5.4 Dial-Out Failover 74

5.4.1 Always-ondial-out 74

5.4.2 Dial-OutFallover 75

5.5 Firewall & Forwarding 76

5.5.1 Conﬁguring network forwarding and IP masquerading 76

5.5.2 Conguringclientdevices 78

5.5.3 Port Forwarding 79

5.5.4 PortRules 80

Table of Contents

SSH Tunnels & SDT Connector 82

6.1 Conﬁguring for SDT Tunneling to Hosts 83

6.2 SDT Connector Conﬁguration 84

6.2.1 SDTConnectorclientinstallation 84

6.2.2 ConguringanewgatewayintheSDTConnectorclient 85

6.2.3 Auto-congureSDTConnectorclientwiththeuser’saccessprivileges 86

6.2.4 MakeanSDTconnectionthroughthegatewaytoahost 87

6.2.5 ManuallyaddinghoststotheSDTConnectorgateway 88

6.2.6 Manuallyaddingnewservicestothenewhosts 89

6.2.7 Adding a client program to be started for the new service 91

6.2.8 Dial-inconguration 92

6.3 SDT Connector to Management Console 93

6.4 SDT Connector - Telnet or SSH Serial Device Connection 94

6.5 SDT Connector OoB Connection 95

6.6 Importing (and Exporting) Preferences 96

6.7 SDT Connector Public Key Authentication 97

6.8 Setting up SDT for Remote Desktop Access 98

6.8.1 EnableRemoteDesktoponthetargetWindowscomputertobeaccessed 98

6.8.2 ConguretheRemoteDesktopConnectionclient 99

6.9 SDT SHH Tunnel for VNC 102

6.9.1 InstallandconguretheVNCServeronthecomputertobeaccessed 102

6.9.2 Install,congureandconnecttheVNCViewer 103

6.10 SDT IP Connection to Hosts 105

6.10.1 EstablishaPPPconnectionbetweenthehostCOMportandConsoleServer 105

6.10.2 SetupSDTSerialPortsonConsoleServer 108

6.10.3 SetupSDTConnectortoSSHportforwardovertheConsoleServerSerialPort 108

6.11 SSH Tunneling using other SSH clients (e.g. PuTTY) 109

Alerts, Automated Response and Logging 112

7.1 Set Up Auto-Response and Conﬁgure Check Conditions 112

7.1.1 Email alerts 113

7.1.2 AlarmsandDigitalInputs 114

7.1.3 UPS/PowerSupply 114

7.1.4 UPSStatus 114

7.1.5 Serial Login/Logout 115

7.1.6 ICMP Ping 115

7.1.7 CellularData 115

7.1.8 CustomCheck 116

7.1.9 SMS Command 116

7.2 Trigger and Resolve Actions 117

7.2.1 Send Email on Trigger 117

7.2.2 Send SMS on Trigger 117

7.2.3 Perform RPC Action on Trigger 117

7.2.4 RunCustomScriptonTrigger 118

7.2.5 SendSNMPTraponTrigger 118

7.2.6 SendNagiosEventonTrigger 118

7.2.7 ResolveActions 118

7.2.8 SendEmailalertsonResolution 119

7.2.9 Send SMS Alerts on Resolution 119

7.2.10 SendSNMPTrapalertsonResolution 120

7.2.11 SendNagiosEventalertsonResolution 120

Table of Contents

7.3 Remote Log Storage 121

7.4 Serial Port Logging 121

7.5 Network TCP or UDP Port Logging 122

7.6 Auto-Response Event logging 122

7.7 Power Device Logging 122

Power and Environmental Monitoring 123

8.1 Remote Power Control (RPC) 123

8.1.1 RPCconnection 123

8.1.2 RPCalerts 125

8.1.3 RPCstatus 125

8.1.4 Userpowermanagement 126

8.2 Uninterruptible Power Supply Control (UPS) 127

8.2.1 ManagedUPSconnections 127

8.2.2 CongureUPSpoweringtheConsoleServer 129

8.2.3 ConguringpoweredcomputerstomonitoraManagedUPS 130

8.2.4 UPSalerts 131

8.2.5 UPSstatus 131

8.2.6 OverviewofNetworkUPSTools(NUT) 132

8.3 Environmental Monitoring 133

8.3.1 ConnectingtheEMD 134

8.3.2 Environmentalalerts 135

8.3.3 Environmentalstatus 135

Authentication 136

9.1 Authentication Conﬁguration 136

9.1.1 Local authentication 136

9.1.2 TACACS authentication 137

9.1.3 RADIUSauthentication 138

9.1.4 LDAPauthentication 139

9.1.5 RADIUS/TACACSuserconguration 139

9.1.6 Groupsupportwithremoteauthentication 140

9.1.7 RemotegroupswithRADIUSauthentication 140

9.1.8 RemotegroupswithLDAPauthentication 141

9.1.9 Idletimeout 143

9.1.10 Kerberosauthentication 143

9.1.11 Authenticationtesting 143

9.2 PAM (Pluggable Authentication Modules) 144

9.3 Secure Management Console Access 145

9.4 SSL Certiﬁcate 146

Table of Contents

Nagios Integration 148

10.1 Nagios Overview 148

10.2 Central management and setting up SDT for Nagios 149

10.2.1 SetupcentralNagiosserver 149

10.2.2 Set up distributed Console Servers 150

10.3 Conﬁguring Nagios distributed monitoring 152

10.3.1 EnableNagiosontheConsoleServer 153

10.3.2 EnableNRPEmonitoring 153

10.3.3 EnableNSCAmonitoring 154

10.3.4 CongureselectedSerialPortsforNagiosmonitoring 155

10.3.5 CongureselectedNetworkHostsforNagiosmonitoring 156

10.3.6 ConguretheupstreamNagiosmonitoringhost 157

10.4 Advanced Distributed Monitoring Conﬁguration 158

10.4.1 SampleNagiosconguration 158

10.4.2 BasicNagiosplug-ins 161

10.4.3 Additionalplug-ins 161

System Management 163

11.1 System Administration and Reset 163

11.2 Upgrade Firmware 164

11.3 Conﬁgure Date and Time 165

11.4 Conﬁguration Backup 166

11.5 Delayed Conﬁguration Commit 167

11.6 FIPS Mode 168

Status Reports 169

12.1 Port Access and Active Users 169

12.2 Statistics 169

12.3 Support Reports 170

12.4 Syslog 170

12.5 Dashboard 171

12.5.1 ConguringtheDashboard 171

12.5.2 CreatingcustomwidgetsfortheDashboard 173

Management 174

13.1 Device Management 174

13.2 Port and Host Log Management 174

13.3 Terminal Connection 174

13.3.1 WebTerminal 174

13.3.1.1 Web Terminal to Command Line 175

13.3.1.2 WebTerminaltoSerialDevice 175

13.3.2 SDTConnectoraccess 176

13.4 Power Management 176

13.5 Remote Console Access (B092-016 only) 177

Table of Contents

Conﬁguration from the Command Line 178

14.1 Accessing conﬁg from the command line 178

14.1.1 SerialPortconguration 180

14.1.2 AddingandremovingUsers 183

14.1.3 AddingandremovinguserGroups 184

14.1.4 Authentication 185

14.1.5 NetworkHosts 186

14.1.6 TrustedNetworks 187

14.1.7 CascadedPorts 187

14.1.8 UPSConnections 188

14.1.9 RPCConnections 189

14.1.10 Environmental 190

14.1.11 ManagedDevices 190

14.1.12 PortLog 191

14.1.13 Alerts 192

14.1.14 SMTP&SMS 194

14.1.15 SNMP 195

14.1.16 Administration 195

14.1.17 IPsettings 195

14.1.18 Date&Timesettings 196

14.1.19 Dial-insettings 196

14.1.20 DHCPserver 197

14.1.21 Services 198

14.1.22 NAGIOS 198

14.2 General Linux command usage 199

Advanced Conﬁguration 201

15.1 Custom Scripting 201

15.1.1 Custom script to run when booting 201

15.1.2 Running custom scripts when alerts are triggered 202

15.1.3 Examplescript-Powercyclingonpatternmatch 203

15.1.4 Examplescript-Multipleemailnoticationsoneachalert 203

15.1.5 DeletingcongurationvaluesfromtheCLI 204

15.1.6 Power cycle any device upon a ping request failure 207

15.1.7 Runningcustomscriptswhenaconguratorisinvoked 208

15.1.8 Backing-upthecongurationandrestoringusingalocalUSBstick 208

15.1.9 Backing-upthecongurationoff-box 209

15.2 Advanced Portmanager 210

15.2.1 Portmanager commands 210

15.2.2 External Scripts and Alerts 211

15.3 Raw Access to Serial Ports 212

15.3.1 Access to serial ports 212

15.3.2 Accessing the console/modem port 212

15.4 IP- Filtering 213

15.5 SNMP Status Reporting and Traps 214

15.5.1 RetrievingstatusinformationusingSNMP 214

15.5.2 Checkrewallrules 214

15.5.3 EnableSNMPservice 214

15.5.4 /etc/cong/snmpd.conf 217

15.5.5 AddingmultipleremoteSNMPmanagers 218

Table of Contents

15.6 Secure Shell (SSH) Public Key Authentication 219

15.6.1 SSHOverview 219

15.6.2 GeneratingPublicKeys(Linux) 219

15.6.3 InstallingtheSSHPublic/PrivateKeys(Clustering) 220

15.6.4 InstallingSSHPublicKeyAuthentication(Linux) 220

15.6.5 Generatingpublic/privatekeysforSSH(Windows) 222

15.6.6 Fingerprinting 223

15.6.7 SSHtunneledserialbridging 224

15.6.8 SDTConnectorPublicKeyAuthentication 226

15.7 Secure Sockets Layer (SSL) Support 227

15.8 HTTPS 227

15.8.1 Generatinganencryptionkey 227

15.8.2 Generatingaself-signedcerticatewithOpenSSL 227

15.8.3 Installingthekeyandcerticate 228

15.8.4 LaunchingtheHTTPSServer 228

15.9 Power Strip Control 229

15.9.1 PowerMan 229

15.9.2 pmpower 230

15.9.3 Adding new RPC devices 230

15.10 IPMItool 232

15.11 Scripts for Managing Slaves 234

15.12 SMS Server Tools 235

15.13 Multicast 235

Thin Client (B092-016) 236

16.1 Local Client Service Connections 236

16.1.1 Connect: Serial Terminal 237

16.1.2 Connect:Browser 238

16.1.3 Connect:VNC 239

16.1.4 Connect:SSH 240

16.1.5 Connect:IPMI 241

16.1.6 Connect:RemoteDesktop(RDP) 242

16.1.7 Connect:CitrixICA 243

16.1.8 Connect:PowerAlert 243

16.2 Advanced Control Panel 244

16.2.1 System:Terminal 244

16.2.2 System:Shutdown/Reboot 244

16.2.3 System:Logout 244

16.2.4 Custom 244

16.2.5 Status 244

16.2.6 Logs 244

16.3 Remote Control 245

Appendix A: Hardware Speciﬁcation 246

Appendix B: Serial Port Connectivity 247

Appendix C: End User License Agreements 249

Appendix D: Service and Warranty 256

Table of Contents

ThisUserManualisprovidedtohelpyougetthemostfromyourB096-016/B096-048ConsoleServerManagementSwitch,

B092-016ConsoleServerwithPowerAlertorB095-004-1E/B095-003-1E-M/B094-008-2E-M-FConsoleServerproduct.

These products are referred to generically in this manual as Console Servers.

Oncecongured,youwillbeabletouseyourConsoleServertosecurelymonitor,accessandcontrolthecomputers,

networkingdevices,telecommunicationsequipment,powersuppliesandoperatingenvironmentinyourdatacenter,branch

ofceorcommunicationsroom.Thismanualguidesyouinmanagingthisinfrastructurelocally(attheracksideoracrossyour

operationsormanagementLANorthroughthelocalserialconsoleport),andremotely(acrosstheInternet,privatenetworkor

viadialup).

Manual Organization

This manual contains the following chapters:

1. Introduction An overview of the features of the Console Server and information on this manual

2.Installation DetailsphysicalinstallationoftheConsoleServerandtheinterconnectionofcontrolled

devices

3.SystemConguration DescribestheinitialinstallationandcongurationusingtheManagementConsoleofthe

Console Server on the network and the services that will be supported

4.SerialandNetwork Coversconguringserialportsandconnectednetworkhosts,andsettingupUsersand

Groups

5.FailoverandOoBdial-in Describessettingupthehigh-availabilityaccessfeaturesoftheConsoleServer

6.SecureTunneling(SDT) CoverssecureremoteaccessusingSSHandconguringforRDP,VNC,HTTP,HTTPS,etc.

access to network and serially connected devices

7.AlertsandLogging Explainsthesettingupoflocalandremoteevent/datalogsandtriggeringSNMPandemail

alerts

8.Power&Environment ManagementofUSB,serialandnetworkattachedPowerDistributionunitsandUPSunits

 includingNetworkUPSTool(NUT)operationandIPMIpowercontrol.EMDenvironmental

sensor conﬁguration

9. Authentication All access to the Console Server requires usernames and passwords which are locally or

externally authenticated

10.NagiosIntegration SettingNagioscentralmanagementwithSDTextensionsandconguringtheConsoleServer

 asadistributedNagiosserver

11. System Management Covers access to and conﬁguration of services to be run on the Console Server

12.StatusReports Viewthestatusandlogsofserialandnetworkconnecteddevices(ports,hosts,powerand

 environment)

13.Management IncludesportcontrolsandreportsthatcanaccessedbyUsers

14.BasicConguration Commandlineinstallationandcongurationusingthecongcommand

15. Advanced Conﬁg More advanced command line conﬁguration activities where you will need to use Linux

commands

16.ThinClient Congurationanduseofthethinclientandotherapplications(includingPowerAlert)

 embeddedintheConsoleServerwithPowerAlert(B092-016)product

Chapter 1: Introduction

Autres manuels pour B092-016

Ce manuel convient aux modèles suivants

Table des matières

Autres manuels Tripp Lite Matériel réseau

Tripp Lite

Tripp Lite SmartRack Panel-Mount Three-Fan Accessory... Manuel utilisateur

Tripp Lite

Tripp Lite BP240V1207C Manuel utilisateur

Tripp Lite

Tripp Lite PDU1415 Manuel utilisateur

Tripp Lite

Tripp Lite SNMPWEBCARD Manuel utilisateur

Tripp Lite

Tripp Lite B095-003-1E-M Manuel utilisateur

Tripp Lite

Tripp Lite BP240V787C-1PH Manuel utilisateur

Tripp Lite

Tripp Lite BP240V150 Manuel utilisateur

Tripp Lite

Tripp Lite N490-016-STSC Manuel utilisateur

Tripp Lite

Tripp Lite B096-048 Manuel utilisateur

Tripp Lite

Tripp Lite N480-024-LC Manuel utilisateur

Tripp Lite

Tripp Lite B050-000 Manuel utilisateur

Tripp Lite

Tripp Lite BP240V1407C-1PH Manuel utilisateur

Tripp Lite

Tripp Lite B095-003-1E-M Manuel utilisateur

Tripp Lite

Tripp Lite Open Frame Rack Caster Kit SRCASTER Manuel utilisateur

Tripp Lite

Tripp Lite Mini-Port Replicator UPR-112G Manuel utilisateur

Tripp Lite

Tripp Lite SmartRack SRCABLELADDER Manuel utilisateur

Tripp Lite

Tripp Lite SRCABLETRAY Manuel utilisateur

Tripp Lite

Tripp Lite N490-016-STST Manuel utilisateur

Tripp Lite

Tripp Lite SNMPWEBSOLO Manuel utilisateur

Tripp Lite

Tripp Lite B078-001-USB Manuel utilisateur

Tripp Lite

Tripp Lite N48LSM-16X16 Manuel utilisateur

Tripp Lite

Tripp Lite N48M Series Manuel utilisateur

Tripp Lite

Tripp Lite Mounting Ears UPSHDEARKIT Manuel d'instructions d'installation

Tripp Lite

Tripp Lite N48LSS-16X16 Manuel utilisateur

Manuels Matériel réseau populaires d'autres marques

Matrix Switch Corporation

Matrix Switch Corporation MSC-HD161DEL Manuel utilisateur

B&B Electronics

B&B Electronics ZXT9-IO-222R2 Manuel utilisateur

Yudor

Yudor YDS-16 Manuel utilisateur

D-Link

D-Link ShareCenter DNS-320L Manuel utilisateur

Samsung

Samsung ES1642dc Instructions d'utilisation

Honeywell Home

Honeywell Home LTEM-PV Instructions de montage

evertz

evertz 7700 Series Manuel utilisateur

D-Link

D-Link ShareCenter DNS-343 Manuel utilisateur

Asante

Asante AsanteBridge 1012 Manuel utilisateur

FireBrick

FireBrick FB2700 Manuel utilisateur

Audiovox Electronics

Audiovox Electronics ARWH2T Manuel utilisateur

ADC

ADC DSX-1 Manuel

NetComm

NetComm NF2 Manuel utilisateur

Alcatel-Lucent

Alcatel-Lucent 5620 Manuel utilisateur

Dell EMC

Dell EMC XC6420 Series Manuel utilisateur

Lanner

Lanner NCA-1020A Manuel utilisateur

Allied Telesis

Allied Telesis AT-TN121-A Manuel utilisateur

Arista

Arista CCA-ETM-Q12 Manuel utilisateur