LEGRAND Server Technology PRO3X User Manual
LEGRAND Server Technology PRO3X User Manual

LEGRAND Server Technology PRO3X User Manual

Hide thumbs Also See for Server Technology PRO3X:
Table of Contents

Advertisement

Quick Links

Server Technology PRO3X User Guide
Copyright © 2023 Server Technology
SPDU_G2_UG_A1_4.0.21
March 2023
Release 4.0.21

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the Server Technology PRO3X and is the answer not in the manual?

Questions and answers

Summary of Contents for LEGRAND Server Technology PRO3X

  • Page 1 Server Technology PRO3X User Guide Copyright © 2023 Server Technology SPDU_G2_UG_A1_4.0.21 March 2023 Release 4.0.21...
  • Page 2: Table Of Contents

    Contents Intro Server Technology PDU Product Models............9 Package Contents.
  • Page 3 FAQs................. . . 36 Linking in the Web Interface.
  • Page 4 Supported Web Browsers and Mobile Devices..........77 Login, Logout and Password Change.
  • Page 5 Yellow- or Red-Highlighted Sensors............135 Managed vs Unmanaged Sensors/Actuators.
  • Page 6 Downloading Diagnostic Information........... . 297 Hardware Issue Detection.
  • Page 7 Inlet Information..............336 Overcurrent Protector Information.
  • Page 8 Authentication Commands............. 429 Environmental Sensor Configuration Commands.
  • Page 9: Intro

    Intro Server Technology power distribution solutions make PRO3X one intelligent rack PDU. Leveraging Xerus Technology Platform, improve uptime and availability by making power management devices easier to deploy, control, and manage remotely across multiple locations. The flexible, high-temperature PRO3X PDU contains PIPS and POPS technology, as well as Branch Current Metrics. The PRO3X rack PDUs are the first hybrid PDU featuring flexible HDOT Cx outlets, new RamLock mechanical locking mechanism, a multi-color LCD display with a push-button interface, a fully hot- swappable onboard controller, the Xerus™...
  • Page 10: Zero U Products

    Zero U Products • • One PRO3X • • Screws, brackets and/or buttons for Zero U Safety Warnings Installation of this product L’installation de ce produit ne doit Dieses Produkt darf nur von Personen should only be performed by être réalisée que par une aufgestellt und installiert werden, die a person who has knowledge personne qui possède des...
  • Page 11 WARNING: Connect this AVERTISSEMENT : branchez ce WARNUNG: Schließen Sie das Produkt product to an AC power produit sur une source nur an eine Wechselstromsteckdose an, source whose voltage is d’alimentation secteur dont la die eine Spannung gemäß der Angaben within the range specified on tension est située dans la plage auf dem Typenschild des Gerätes liefert.
  • Page 12 WARNING: With the AVERTISSEMENT : à l’exception du WARNUNG: Mit Ausnahme des exception of the controller module du contrôleur, le produit Steuermoduls enthält dieses Produkt module, this product ne comprend aucune pièce keine durch den Benutzer zu wartenden contains no user serviceable réparable par l’utilisateur.
  • Page 13: Apipa And Link-Local Addressing

    This product is designed to Ce produit est conçu pour être Dieses Produkt muss in einem be used within an electronic utilisé dans une baie pour Einbauschrank für elektronische Geräte equipment rack. The metal appareils électroniques. Le boîtier installiert werden. Das Metallgehäuse case of this product is métallique de ce produit est dieses Produkts ist elektrisch mit dem...
  • Page 14: Before You Begin

    169.254.x.x/16 , which Factory default is to enable IPv4 only. The link‑local IPv4 address is ranges between 169.254.1.0 and 169.254.254.255. • • IPv6 address: A link-local IPv6 address is available only after IPv6 is enabled on the PRO3X. See Configuring Network Settings. •...
  • Page 15: Checking The Branch Circuit Rating

    Checking the Branch Circuit Rating The rating of the branch circuit supplying power to the product shall be in accordance with national and local electrical codes. Filling Out the Equipment Setup Worksheet An Equipment Setup Worksheet is provided in this guide. Use this worksheet to record the model, serial number, and use of each IT device connected.
  • Page 16: Rackmounts

    Rackmounts In This Chapter Rack-Mounting the PDU..........16 RAMLock Outlets and Cords.
  • Page 17: Mounting Zero U Models Using Two Rear Buttons

    Mounting Zero U Models Using Two Rear Buttons ▶ To mount Zero U models using two buttons: 1) Turn to the rear of the hardware. 2) Locate two screw holes on the rear panel: one near the bottom and the other near the top (the side of cable gland).
  • Page 18: Ramlock Outlets And Cords

    4) Screw a button in the screw hole near the top. The recommended torque for the button is 1.96 N·m (20 kgf·cm). 5) Ensure that the two buttons can engage their mounting holes in the rack or cabinet simultaneously. 6) Press the device forward, pushing the mounting buttons through the mounting holes, then letting the device drop slightly.
  • Page 19: Alternating Branch Metrics

    ▶ A Closer Look at the Universal Cx Outlet: The C19 outlets are replaced with the universal Cx outlet that accepts either a C14 or C20 connector and thus works as two outlets in one. This helps in easy outlet swap-out. The PRO3X has 36-fixed outlets, 18 C13 and 18 HDOT Cx, spread across the length of the PDU for easy access.
  • Page 21: Initial Installation And Configuration

    Initial Installation and Configuration This chapter explains how to install your device and configure network connectivity. In This Chapter Default PRO3X Username and Password........21 Connecting the PDU to a Power Source.
  • Page 22: Usb Wireless Lan Adapters

    ▶ To make a wired connection: 1) Connect a standard network patch cable to one or both Ethernet ports on the PDU. • If the two Ethernet ports have different speeds, use the higher speed port for network connection. • 2) Connect the other end of the cable to your LAN.
  • Page 23: Dual Ethernet Connection

    Dual Ethernet Connection • • ETH1 and ETH2 both support up to 1000 Mbps. Exception: USB-cascading chains have different requirements. ▶ Check list when connecting both ports to the networks: • • Both Ethernet interfaces are connecting to different subnets. •...
  • Page 24: Connecting A Mobile Device

    ▶ Configuration via a connected computer: 1) Connect the PRO3X to a computer. 2) Use the connected computer to configure via the command line or web interface. • Command line interface: See Initial Network Configuration via CLI. • • Web interface: Launch a web browser on the computer, and enter the link-local IP address or •...
  • Page 25 ▶ Step B: Connect the mobile device to PRO3X 1) Get an appropriate USB cable for your mobile device. • iOS: Use the regular USB cable shipped with your iOS mobile device. • • Android: Use a USB OTG adapter cable. •...
  • Page 26 Note: PDView also shows the 'Disconnected' status during the firmware upgrade. If so, wait until the firmware upgrade finishes. b. The PDView shows the "Connected" message when it detects the connected PRO3X. 2) If the factory-default login credentials remain unchanged, or if PDView has been configured with accurate login credentials, PDView automatically logs in to the web interface.
  • Page 27: Saving User Credentials For Pdview's Automatic Login

    If PDView can't log in automatically, the login screen displays instead and you must enter appropriate user credentials for login. 3) The web interface opens and prompts to change the password if this is the first time login. Tip: You can store the updated "admin" or other user credentials in PDView so that automatic login always functions properly upon detection of the PRO3X.
  • Page 28 4) The user credentials setup page opens. • Per default, three administrator user credentials are pre-configured for three Legrand brands: • ▪ Raritan ▪ ▪ Legrand ▪ ▪ Server Technology ▪...
  • Page 29: Connecting To A Computer

    5) Modify existing user credentials or type new ones, and tap Save. The pre-configured admin credentials can be removed or overwritten to meet your needs. Connecting to a Computer The PRO3X can be connected to a computer for configuration via one of the following ports. •...
  • Page 30: Rj45-To-Db9 Cable Requirements For Computer Connections

    To use a web browser for configuration, make a network connection to the computer. The following link- local addressing is available in any network without DHCP available: • • https://169.254.x.x Use the front panel display to find the address. • •...
  • Page 31: Bulk Configuration Methods

    A third party RJ45‑to‑DB9 adapter/cable needs to meet the following requirements. • • RJ‑45 to "DB9 female" • • RX/TX and according control pins are CROSSED The widespread blue Cisco RJ‑45 to DB9 adapter cable is highly recommended, which has the following pin assignments: Note: The blue Cisco RJ‑45 to DB9 adapter cable CANNOT be used for connecting a modem.
  • Page 32: Cascading For Shared Ethernet Connectivity

    For the remaining methods, see Special Configuration and Upgrade Methods (on page ). ▶ A TFTP server: • • Requirement: DHCP is enabled in your network and a TFTP server is available. • • Procedure: Prepare special configuration files, which must include fwupdate.cfg, and copy them to the root directory of the TFTP server.
  • Page 33: Best Practices For Cascading

    Each device in the cascade is accessible over the network, with Bridging or Port-Forwarding cascading mode activated on each device. • • Bridging: Each device in the cascading chain is accessed with a different IP address. • • Port Forwarding: Each device in the cascading chain is accessed with the same IP address(es) but with a different port number assigned.
  • Page 34: Power-Sharing Restrictions And Connection

    • • Longer cabling distance • • Lower latency • • Connection more reliable with RJ‑45 connectors Power-Sharing Restrictions and Connection Two devices can share power supply to their controllers via a designated port, so that when either controller fails to receive adequate power from its inlet(s), it continues to receive backup power from another device which functions properly and therefore remains accessible to users.
  • Page 35: Power Sharing Port On Pro3X

    Tip: You can set an event rule for sending a notification when this sensor enters the fault state. • • The above event is logged in the internal event log. ▶ To check status of power-sharing mode: • • Check the state of the power supply sensor. For SNMP, the sensor type is i1smpsStatus (46). Power Sharing Port on PRO3X PRO3X NIM8G2 controllers include the "AUX"...
  • Page 36: Linking Units

    Linking Units The Linking feature allows the linking configuration of a single Primary unit to multiple link units so that you can view and manage them all in one place. The primary unit has full knowledge of the location of the connected link units, as well as the power and/or environmental information of all link units.
  • Page 37 When the chain is established with a single primary unit, and one or more link units, communication occurs with the primary unit through its IP address. The primary unit, in turn, communicates to the other link units in the chain through their individual IP addresses, which optimizes monitoring and management.
  • Page 38 ▶ What user privileges are required for managing the Linking configuration? Administrative privileges are required for both the primary unit and link unit. To add a link, your administrative login account is required, but after that you only log in to the primary to manage the chain, as all link units in the chain are visible in the user interface from the primary unit view.
  • Page 39: Linking In The Web Interface

    Firmware version must match between primary units and link units to function normally. If the primary unit is updated before the link units, for example, you will see a "Firmware version mismatch" message in the Link Units section. When this occurs, link unit data will not display. You will not be able to switch to the mismatched link unit.
  • Page 40: Options For Adding Link Units

    4) MAC address 5) Rating 6) Link to Data Log The ID of the primary unit is automatically assigned the ID "1", as shown in the example as "My PDU (1)". The ID cannot be edited. Options for Adding Link Units To start configuring the Primary Unit with Link Units, your options in the web interface depend on the network and physical configuration of units.
  • Page 41 ▶ To add a link unit: • • Primary and link units must be the same model, running the same firmware versions. 1) Log in to the primary unit and go to the PDU page. 2) Click Add Link Unit. The following add box displays: 3) The Link ID is populated as the next available ID number (2-8), assigned sequentially as each link unit is added to the chain to identify the link unit in the user interfaces.
  • Page 42: Linking Cascaded Units

    About the Link ID The Link ID "1" is automated and reserved internally for the primary unit. The primary unit’s ID "1" cannot be edited. The Link ID "2-8" is available for you to select as the ID for each of the link units you add to the chain. From the Link ID drop-down, you can select the desired Link ID to manage the link units in the chain.
  • Page 43 The Custom settings option requires that you to select each cascaded unit by its node number, and map it to a Link ID manually. You must also select a hostname type for each link. The linking process follows your customized list and attempts to add all selected expansion units.
  • Page 44 6) Click Link to start the linking process. The table shows progress and then final results. In the example below, expansion unit 1 was linked successfully. Expansion unit 2 failed--the connection may have failed, or this result may also indicate there was no unit at that position. Expansion units 3-7 were skipped because the process stops upon first failure.
  • Page 45 ▶ To link cascaded units (Custom method): 1) On the PDU page, click the Link Cascaded Units button. The Link Cascaded Units dialog opens. 2) Enter the Primary Unit's administrator user name and password. 3) Select Custom Settings. 4) Click Append Node to add a row to the table, then complete each field in the row to describe how the expansion unit should be linked.
  • Page 46: Primary Units Manage Link Units

    Primary Units Manage Link Units The primary unit manages the following functions for the entire chain of linked units: • • User management and authentication – configured only on the primary. • • Date and time – the primary synchronizes its date and time settings to link units. If NTP is not used, then the synchronization interval is every 10 minutes.
  • Page 47: Switching To A Different Unit

    ▶ To release a link unit from the Primary Unit's web interface: Note: If a release action is attempted on a link unit when the unit is an unreachable state, a warning message displays, and the primary will not recognize the link unit. 1) From the PDU page, in the Link Units section, click a link unit to select it.
  • Page 48: Re-Linking A Link Unit

    ▶ To switch to a different unit: 1) Click the Switch control. 2) Select one of the link units from the drop-down list. Link number "2-8" appears in parentheses. 3) The page displays data for the selected link unit. 4) To return to the page for the primary, select the primary unit. Primary number "1" appears in parentheses.
  • Page 49 ▶ Dashboard The Dashboard shows inlets, OCPs, alerted sensors, and inlet history for the entire linked chain. In this example, data for the single inlet of the primary "My PDU (1)" Inlet I1, and the inlet of the link unit "My PDU (2)" Inlet I1, are displayed together. The OCPs for the units are also available together on the Dashboard page.
  • Page 50 ▶ Inlets Page On the Inlets page, the primary unit and link units are displayed together on the same page. In this example, data for the single inlet of the primary "My PDU (1)" Inlet I1, and the inlet of the link unit "My PDU (2)"...
  • Page 51 ▶ Viewing Outlets for Link Units On the Outlets page, you can switch from the primary to the link. 1) From the Outlets page drop-down, select the link unit "My PDU (2)". Note: To view outlets for a specific link unit, the link unit must be selected by name. All outlets of the link unit display for viewing and access exactly like the outlets of the primary unit.
  • Page 52 2) You can switch back to the primary unit by selecting "My PDU (1)". Note: The Switch control is only available when there is at least one link unit in the chain; otherwise, the page defaults to displaying only the outlets of the primary. 3) From the Outlets page (either primary or link), select an outlet in the list to view operational details for the specific outlet and to configure outlet settings.
  • Page 53: Outlet Groups

    Outlet Groups An outlet group is a named collection of selected outlets. When user-defined, an outlet group can contain outlets from different PDUs, including both primary and link units. Outlet groups support fast and efficient outlet control actions (On, Off, Power Cycle) across multiple PDUs, and with PDU Linking, member outlets for the primary and its link units can be collected in the same outlet group.
  • Page 54 ▶ Viewing Outlet Group Details Click an outlet group name in the list to display operations details for the outlet group. From this page, you can issue the outlet control actions On, Off, and Cycle (power cycling to restore the outlet) for all member outlets in the outlet group.
  • Page 55 ▶ To add an outlet group: 1) On the Outlet Groups page, click Add Group. The New Outlet Group page displays, defaulting to the outlets in the primary unit. 2) Type a name for the new outlet group. 3) Select individual member outlets for the primary as shown in the default page, or to select all outlets for the primary, select My PDU (1).
  • Page 56: Pairwise Outlet Groups

    The following example shows the outlet group named "TEST 1" with all outlet members selected for the primary unit and outlet members 1-6 selected for the link unit. Controlling Outlets in Groups 1) From the Outlet Groups page, select an outlet group by name. 2) Click the desired control: On, Off, or Cycle.
  • Page 57 PDU 1 (Primary Unit) Server Load PDU 2 (Link Unit) Outlet 1 Server 1 Outlet 1 Outlet 2 Server 2 Outlet 2 Outlet 3 Server 3 Outlet 3 … … … Outlet 20 Server 20 Outlet 20 Using the above example, to control power to a server, you would typically switch one outlet of PDU 1 and one outlet of PDU 2.
  • Page 58: Ocps Page

    OCPs Page Overcurrent protectors from both primary and link PDUs are displayed together on the same OCPs page. If sensors are present on the units, sensor data for both primary and link units will also appear on the page. Peripherals Page The Peripherals Page shows peripheral devices connected to the primary or link unit.
  • Page 59: Displays For Primary And Link Units

    Displays for Primary and Link Units Each unit in a PDU Linking chain displays its own PDU data (inlets, outlets, sensors, alerts, etc.) ▶ Primary unit: From the following example of the primary unit display, navigate the options for displaying Link PDU identification and status, and to confirm the primary unit that is controlling the link unit in the chain.
  • Page 60 ▶ Link units: 1) No display of alarms/events. 2) PDU information shows the primary IP address...
  • Page 61: Linking In The Cli

    Linking in the CLI For each unit in a chain, you can list the units, switch to a different unit, add a new link unit, and release a link unit. You can then use all regular commands as usual to access and control individual units, as with any standalone unit.
  • Page 62 • • Link ID • • Communication status (for link unit only) • • Device name • • Model name • • Serial number • • Firmware version # pdu list ▶ Switch Unit Switch between the primary and link units. The Link ID must be 1 (primary) or 2-8 (link units). # pdu [id] ▶...
  • Page 63: Using The Hardware Features

    Using the Hardware Features Xerus firmware runs on various hardware designs, including different sizes and controllers. In This Chapter Inlet..............63 Outlets and Outlet LEDs.
  • Page 64: Outlets And Outlet Leds

    Inlet on the side Inlet on the top Outlets and Outlet LEDs The total number and type of outlets varies from model to model. PRO3X Outlets and LEDs Green LEDs: Outlets powered ON. Unlit LEDs: Outlets powered OFF. Connection Ports Connection ports vary by model.
  • Page 65: Connection Port Functions

    • • USB-B • • • • SENSOR Connection Port Functions Port Used for... USB‑B • • Cascading devices for sharing a network connection. • • Establishing a USB connection with a computer for: Using the command line interface and performing disaster recovery with Technical Support.
  • Page 66: Automatic And Manual Modes

    The following diagram shows a sample 0U front panel display. Use the front panel display to view information and even administer features on supported models. It consists of: • • LCD display • • Four control buttons Zero U models automatically adjust the orientation of the content shown after detecting the direction of installation.
  • Page 67: Control Buttons

    ▶ Alerts: • • In the automatic mode, when an alert occurs, the display stops cycling through information, and warns you by showing the alerts notice in a yellow or red background. To enter the manual mode, press • • In the manual mode, both the top and bottom bars will turn yellow or red to indicate the presence of any alert.
  • Page 68: Manually Changing Zero U Lcd Orientation

    All alerts enter the warning level only. Partial or all alerts enter the critical level. • • Both bars turn black when there are NO alerts. Screen with black bars Manually Changing Zero U LCD Orientation A Zero U model has a tilt sensor that can detect the orientation of its physical device to automatically adjust ts LCD content's orientation.
  • Page 69: Alerts Notice In A Yellow Or Red Screen

    ▶ To set up the LCD orientation: 1) Press simultaneously until you see the LCD shows "Fixed Orientation". 2) If the current LCD orientation does not meet your need, repeat the above step until the orientation you preferred is displayed. Alerts Notice in a Yellow or Red Screen In the automatic mode, if an alert occurs, the LCD display automatically shows a yellow or red screen which indicates the total number of alerted sensors and information on the latest transitions.
  • Page 70 ▶ When there are only alerted sensors -- NO ALARMS are present: Number Description The total of alerted sensors in critical and warning levels. A list of alerted sensors. The latest reading/status time related to each alerted sensor. ▶ When there is any alarm present: The display shows the alarm(s) and the available command in the bottom-right corner is 'Actions'.
  • Page 71 ▶ Available operations: • • For alerted sensors only, press to view a list of all alerted sensors. You do not have to acknowledge alerted sensors. • • When an alarm is present, press to view the options. Use the arrow buttons to select an option, and press •...
  • Page 72: Showing The Firmware Upgrade Progress

    Showing the Firmware Upgrade Progress When upgrading the PRO3X, the firmware upgrade progress will be displayed as a percentage on the LCD display, similar to the following diagram. In the end, a message appears, indicating whether the firmware upgrade succeeds or fails. Reset Button The reset button is located inside the small hole labeled RESET near the display panel.
  • Page 73: Circuit Breakers

    Circuit Breakers PRO3X models rated over 20A (North American) or 16A (international) contain overcurrent protectors for outlets, which are usually branch circuit breakers. These circuit breakers automatically trip (disconnect power) when the current flowing through the circuit breaker exceeds its rating. If a circuit breaker switches off power, the front panel display shows open.
  • Page 74 ▶ To request a new controller: Contact Technical Support to request a new controller. Include these details with your request: • • The first (ETH1) and second (ETH2) Ethernet MAC addresses, located on the label on the face of the network interface card (NIC) near the ETH1 port •...
  • Page 75 4) Insert one end of an unused Ethernet cable into the ETH2 port and gently pull the cable directly away from the PDU until the partially separated, then simultaneously lift and pull to fully separate the NIC from the PDU. A slight lift is required to accommodate the tab design (circled in yellow below;...
  • Page 76: Threaded Grounding Point

    Threaded Grounding Point Some models have a threaded grounding point. Identify it via the grounding symbol: Wire this point to an electrical system to protectively ground the PRO3X.
  • Page 77: Using The Web Interface

    Using the Web Interface This chapter explains how to use the product web interface for administration. In This Chapter Supported Web Browsers and Mobile Devices......77 Login, Logout and Password Change.
  • Page 78: Changing Your Password

    ▶ To log in to the web interface: 1) In a supported browser go to the IP address of your PRO3X • If the link-local addressing has been enabled, you can type pdu.local instead of an IP address. • 2) If any security alert message appears, accept it. 3) Enter your user name and password, accept any security agreement displayed, and click Login.
  • Page 79: Web Interface Overview

    ▶ Password requirements: • Case sensitive. • • 4 to 64 characters. • ▶ Password change required on first login: • • On first login, password change is forced and strong passwords are enabled by default. The new password must be at least 8 characters and contain at least one upper case letter, one lower case letter, and one digit.
  • Page 80 Number Web interface element Menu - Not all models support all menu options. Data/setup page of the selected menu item. • • Left side: - PRO3X device name. • • Right side: - Displayed language, which is English (EN) by default. You can change it. - Your login name, which you can click to view your user account settings.
  • Page 81: Menu

    Number Web interface element - Click Last Login to view your login history. • • PRO3X system time, which is converted to the time zone of your computer or mobile device. - Click Device Time to open the Date/Time setup page. Menu Depending on your model and hardware configuration, your PRO3X may show all or some menu items shown below.
  • Page 82: Quick Access To A Specific Page

    Menu Information shown Device Settings Device-related settings, including network, security, system time, event rules and more. Maintenance Device information and maintenance commands, such as firmware upgrade, device backup and reset. Quick Access to a Specific Page If you often visit a specific page in the PRO3X web interface, you can bookmark or share the URL. This allows you to log in directly to the desired page.
  • Page 83: Dashboard - Inlet I1

    ▶ PDU Totals • • For multi-inlet models or in‑line monitors PDU Totals sum up the total active power and active energy. Dashboard - Inlet I1 The number of phases shown in the Inlet section is model dependent. ▶ Link to the Inlet page: To view more information or configure the inlet(s), click this section's title 'Inlet I1' to go to the Inlet page.
  • Page 84 ▶ Left side - generic inlet power data: The left side lists all or some of the following data. Available data is model dependent. • • Active power (kW or W) • • Apparent power (kVA or VA) • • Active energy (kWh or Wh) •...
  • Page 85: Dashboard - Ocp

    • • RMS current (A) and rated current • The smaller, gray text adjacent to RMS current is the rated current. • • • A bar showing the RMS current level • • RMS voltage (V) The RMS current bars automatically change colors to indicate the current status according to your configured thresholds.
  • Page 86 ▶ Each OCP's power data: OCP data from top to bottom includes: • • RMS current (A), and rated current • Smaller gray text adjacent to RMS current is each OCP's rated current, such as "16A" shown in • the above diagram. •...
  • Page 87: Dashboard - Alerted Sensors

    Status Bar colors normal above upper warning above upper critical Dashboard - Alerted Sensors When any internal sensors or environmental sensor packages connected to the PRO3X enter an abnormal state, the Alerted Sensors section in the Dashboard shows them for alerting users. This section also lists tripped circuit breakers or blown fuses, if available.
  • Page 88: Dashboard - Inlet History

    Numeric sensors: • • Warning Numeric sensors: • • Critical State sensors: • • Alarmed state Dashboard - Inlet History • • The Inlet History graph displays the history of the sensor values. Select a different data type by clicking the selector below the diagram.
  • Page 89 • To retrieve the exact data at a particular time, hover your mouse over the data line in the chart. • Both the time and data are displayed as illustrated below. ▶ Inlet selection on multi-inlet models: If your PDU is a multi-inlet model, you can have one or multiple inlets show their power charts by selecting the checkbox(es) of the desired inlet(s).
  • Page 90 • • When multiple inlets are displayed in the chart, their colors differ. You can identify each inlet's data according to the colors of the selected inlet checkboxes. • • When both inlets are shown in the chart, simply hover your mouse over either inlet's data line. Both inlets' values display simultaneously, marked with corresponding colors.
  • Page 91: Dashboard - Alarms

    Dashboard - Alarms If configuring any event rules which create or emit device alarms, the Alarms section will list any event that hasn't been acknowledged yet. Note: For information on event rules, see Event Rules and Actions (on page 213). You must have the 'Acknowledge Alarms' permission to manually acknowledge an alarm.
  • Page 92 This table explains each field of the alarms list. Field Description Name Custom name of the Alarm action. Reason Shows the log message if the alarm was only triggered by one specific event. Reasons Short summary if there were multiple different events. First Date and time when the event indicated in the Reason column Appearance...
  • Page 93: Pdu

    Generic information and PDU settings are available on the PDU page. To open the PDU page, click 'PDU' in the Menu. ▶ Device information shown: • • Firmware version • • Serial number • • MAC address • • Rating •...
  • Page 94 Field Function Note • • After removing power from the PDU, you *Outlet state on Determines the initial power state of ALL must wait for a minimum of 10 seconds power up outlets after the PRO3X powers up. before powering it up again. Otherwise, the •...
  • Page 95 ▶ To reset all minimum/maximum values: For readings that record a maximum and minimum numeric value, you can reset these values as needed to clear the previous highs and lows. 1) On the PDU page, in the Settings section, make sure Edit Settings is not clicked, or cancel out of editing settings.
  • Page 96: Options For Outlet State On Power Up

    Setting Thresholds for Total Active Energy or Power (on page 98) Options for Outlet State on Power Up The following are available options for initial power states of outlets after powering up the PRO3X device. This setting is used in three scenarios: •...
  • Page 97: Inrush Current And Inrush Guard Delay

    Inrush Current and Inrush Guard Delay ▶ Inrush current: When electrical devices are turned on, they can initially draw a very large current known as inrush current. Inrush current typically lasts for 20-40 milliseconds. ▶ Inrush guard delay: The inrush guard delay feature helps prevent a circuit breaker trip due to the combined inrush current of many devices turned on at the same time.
  • Page 98: Setting Thresholds For Total Active Energy Or Power

    Unit Time day(s) Setting Thresholds for Total Active Energy or Power This section applies only to multi‑inlet models, including in‑line monitors. Thresholds for total active energy and total active power are disabled by default. You can enable and set them so that you are alerted when the total active energy or total active power hits a certain level. For a regular PRO3X model with multiple inlets: •...
  • Page 99: Power Supply Sensor

    5) Click Save. Power Supply Sensor The PRO3X's controller receives power from its inlet. A sensor monitors the power supply status and indicates it on the PDU page. This status is also available on the PDU's front panel display, or via the CLI with the command: show pdu details.
  • Page 100 Inlet thresholds help you identify when your inlet enters warning or critical level. In addition, you can automatically generate alert notifications for any warning or critical status. See Event Rules and Actions (on page 213). Note: For multi-inlet models, see Configuring a Multi-Inlet Model (on page 102).
  • Page 101 ▶ Settings--Reset energy counter: The energy counter reset feature per inlet is especially useful when your PRO3X has more than one inlet. Only users with the "Admin" role assigned can reset this value. • • Click Reset and then confirm in the message. This inlet's active energy reading is then reset to zero.
  • Page 102: Configuring A Multi-Inlet Model

    ▶ To configure inlet thresholds: By default, there are pre‑defined RMS voltage and current threshold values in related fields. You can modify them to meet your needs. 1) Click the Thresholds title bar at the bottom of the page to display inlet thresholds. 2) Click the desired sensor to open the settings.
  • Page 103 2) Now you can configure the selected inlet, such as enabling thresholds or resetting its energy. • To disable the inlet, see the following instructions. • ▶ To disable one or multiple inlets: 1) On the individual inlet's data page, click Edit Settings. 2) Select the "Disable this inlet"...
  • Page 104: Outlets

    5) To disable additional inlets, repeat the above steps. • If disabling an inlet will result in all inlets being disabled, a confirmation dialog appears, indicating • that all inlets will be disabled. Then click Yes to confirm this operation or No to abort it. After disabling any inlet, the following information or features associated with the disabled one are no longer available: •...
  • Page 105 • • Go to an individual outlet's data/setup page by clicking an outlet's name. ▶ To power control: 1) Select the checkboxes of the outlets you want to control. 2) Click the power control command.
  • Page 106 • On: Power ON • • Off: Power OFF • • Cycle: Power cycle turns outlet OFF then back ON • 3) A confirmation message appears. Click to confirm, or cancel 4) A 'Sequence running' message may appear while the outlet-switching process finishes. Click Cancel to interrupt the process if needed.
  • Page 107: Available Data Of The Outlets Overview Page

    1) Select the checkboxes of the outlets you want to reset. 2) Click the Three Dots options icon, then select a reset option: • Reset Energy Counter: You must have the Admin role. Resets the active energy readings for the •...
  • Page 108: Threshold Bulk Setup

    • • Status: Outlet status, shown with color icon. Available on outlet-switching capable models only. • • RMS current (A) • • Active power (W) • • Power Factor • • Crest Factor • • Non-Critical: Outlet-switching capable models only. Non-Critical outlets display a green checkmark. Critical outlets display a gray X.
  • Page 109 ▶ To configure thresholds-related settings for multiple outlets: 1) On the Outlets page, click > Threshold Bulk Setup. 2) In the "Show Outlet Sensors of Type" field, select a sensor type. 3) In the "For Outlets of Receptacle Type" field, select an outlet type. 4) Select the checkboxes of the outlets you want to configure.
  • Page 110 Threshold Default value Hysteresis • • RMS current: Threshold Default value Upper warning 65% of rating Upper critical 80% of rating Hysteresis ▶ Multi-phase inlets or outlets: • • Line-Line RMS voltage: Threshold Default value Lower critical -6% of minimum rating Lower warning -3% of minimum rating Upper warning...
  • Page 111: Sequence Setup

    Threshold Default value Upper critical 80% of OCP rating Upper warning 65% of OCP rating Hysteresis ▶ Total residual current: Threshold Default value Upper critical 30mA Hysteresis 15mA Sequence Setup By default, outlets are sequentially powered on in the ascending order from outlet 1 to the final when turning ON or power cycling all outlets.
  • Page 112: Load Shedding Setup: Setting Non-Critical Outlets

    Load Shedding Setup: Setting Non-Critical Outlets Outlets that are turned off when load shedding is activated are called non-critical outlets. Outlets that are not affected by load shedding are called critical outlets. Per default, all outlets are configured as critical. ▶...
  • Page 113: Load Shedding Mode: Activate Or Deactivate

    Load Shedding Mode: Activate or Deactivate Load Shedding is not supported on all models When a UPS supplying power to PRO3X switches into battery backup operation, it may be desirable to switch off non-critical outlets to conserve UPS battery life. This feature is known as load shedding. Outlets that are turned off when load shedding is activated are called non-critical outlets.
  • Page 114 ▶ To activate load shedding mode: 1) On the Outlets page, click > Activate Load Shedding. Note: If the command is not available, check your permissions, especially whether you have the Switch Outlet permission for ALL non‑critical outlets. 2) Click Activate on the confirmation message. In the load shedding mode: •...
  • Page 115 Tip: If you manually perform any power operations on non-critical outlets during the load shedding mode, the icons vary. See Off and Lock Icons for Outlets (on page 115). • The message "Load shedding active" appears next to the 'Outlets' title. •...
  • Page 116: Individual Outlet Pages

    Note: The switching-on operation does not power on the selected non‑critical outlets while the load shedding mode is active, but will cause those outlets to be automatically turned on after disabling the load shedding mode. ▶ Which outlets show the Off icon •...
  • Page 117 2) Configure available fields. Note that the fields marked with * are only available on outlet-switching capable models. Field Description Name Type an outlet name up to 64 characters long. *State on Click this field to select this outlet's initial power state. power-up •...
  • Page 118 1) On the individual outlet page, scroll down to Settings. 2) Click the Reset button to either "Reset energy counter" or Reset minimum/maximum. 3) Click to confirm the reset. ▶ To view this outlet's Outlet History power chart: By default this outlet's active power data within the past two hours is shown in the power chart. •...
  • Page 119 ▶ To configure this outlet's threshold settings: Per default, there are pre‑defined RMS voltage and current threshold values in related fields. See Default Voltage and Current Thresholds. You can modify the defaults as needed. These threshold settings apply to a single outlet. You can also configure thresholds for multiple outlets at once.
  • Page 120 4) Click Save. Detailed Information on Outlet Pages Each outlet's data page has the Details section for showing general outlet information and Sensors section for showing the outlet sensor status. ▶ Details section: Field Description Label The physical outlet number. Outlet status Available on outlet-switching capable models.
  • Page 121: Outlet Groups

    • • Apparent Energy • • Power Factor • • Crest Factor Power-Off Period Options for Individual Outlets There are two options for setting the power-off period during the power cycle on each individual outlet's page. Option Function PDU defined Follows the global power-off period setting, which is set on (configured value) the PDU page.
  • Page 122: Creating An Outlet Group

    • Group number • • Name: the outlet group name displays as a link. Click to go to the details page for the group. • • Status: number of outlets with status ON, number of outlets with status OFF. • •...
  • Page 123: Outlet Group Power Control

    3) Click Save. Outlet Group Power Control You must have either permission below to power control any outlet groups. • • Administrator Privileges • • Switch Outlet Group The power control commands are available on the Outlet Groups main page, where you can select one or more groups to control AND on the individual outlet groups page, where you can control that group only while viewing details.
  • Page 124: Resetting A Group's Energy Counter And Minimum/Maximum Values

    ▶ To switch one group on a specific outlet group's page: 1) In the Outlet Groups page, click a group name to go to its details page. 2) Click a power control command on the top-right corner. 3) Confirm the operation when prompted. If Switchable Outlet Groups are Limited For the Switch Outlet Group permission, if you assign a role to any user, which permits the user to switch only "specific"...
  • Page 125: Modifying An Outlet Group

    • • You can reset the energy counter and minimum/maximum values of other readings for one or more outlet groups at a time on the Outlet Groups page. • • To reset these values for a single outlet group, there are two methods -- either Outlet Groups page or individual group page.
  • Page 126: Deleting An Outlet Group

    2) Click the desired sensor (required), and then click Edit Thresholds. 3) Make changes as needed. • To enable any threshold, select the corresponding checkbox. • • Type a new value in the accompanying text box. • 4) Click Save. Deleting an Outlet Group To delete an outlet group, you must have either permission below.
  • Page 127 ▶ Overcurrent protector overview: • • OCP status - open (tripped) or closed • • Current drawn, rated current and current bar • The smaller, gray text adjacent to "current drawn" is the rated current of each OCP. • • The RMS current bars change colors to indicate the status if the OCP thresholds have been •...
  • Page 128: Individual Ocp Pages

    1) Click > Threshold Bulk Setup. 2) Select one or multiple OCPs. 3) Click Edit Thresholds. 4) Make changes as needed. • To enable any threshold, select the corresponding checkbox. • • Type a new value in the accompanying text box. •...
  • Page 129 Field Description Inlet Inlet associated with this OCP. Useful when your PDU has multiple inlets. RMS current This OCP's current state and readings, including current drawn and current remaining. ▶ To customize this OCP's name: 1) Click Edit Settings. 2) Type a name. 3) Click Save.
  • Page 130 ▶ To configure this OCP's threshold settings: By default, upper thresholds of an OCP's RMS current have been configured. You can modify them as needed. 1) Click the Thresholds title bar at the bottom of the page to display the threshold data. 2) Click the RMS current sensor, then make changes as needed.
  • Page 131: Peripherals

    ▶ Other operations: • • Go to another OCP's data/setup page by clicking the OCP selector on the top-left corner. • • Go to the associated Inlet's data page by clicking the Inlet link in the Details section. Peripherals If there are environmental sensor packages connected, they are listed on the Peripherals page. An environmental sensor package may contain: •...
  • Page 132 Column Description Name By default, the name assigned contains: • • Sensor/actuator type, such as "Temperature" or "Dry Contact." • • Sequential number of the same sensor/actuator type, like 1, 2, 3 and so on. You can customize the name. Customize names on the individual sensor page.
  • Page 133 ▶ To configure sensor/actuator-related settings: 1) Click > Peripheral Device Setup. Field Function Note Peripheral device Options to describe the vertical locations (Z Every sensor has a Z Coordinate field. The format Z coordinate coordinates) of environmental sensor setting specifies whether those coordinates are packages.
  • Page 134 Field Function Note Altitude • • The device's altitude is associated with the Specify the altitude of PRO3X above sea level altitude correction factor. when a differential air pressure sensor is attached. • • The default altitude measurement unit is meter.
  • Page 135: Yellow- Or Red-Highlighted Sensors

    4) Deassertion hysteresis: An alarm is cleared when the sensor reading normalizes the specified amount away from the threshold. In the screenshot example above, if temperature normalizes by more than 1 degree of the threshold, the alarm is cleared. When the reading is within 1°C from the threshold, the alarm will remain active.
  • Page 136: Managed Vs Unmanaged Sensors/Actuators

    In the following table, "R" represents any numeric sensor's reading. The symbol <= means "smaller than" or "equal to." Sensor status Color States shown in the interface Description Unknown unavailable Sensor state or readings cannot be detected. unmanaged Sensors are not being managed. •...
  • Page 137: Sensor/Actuator States

    • • They show one of the managed states. • • For managed 'numeric' sensors, their readings are retrieved and displayed. If any numeric sensor is disconnected or its reading cannot be retrieved, it shows "unavailable" for its reading. ▶ Unmanaged sensors/actuators: •...
  • Page 138: Finding The Sensor's Serial Number

    State Description • • For numeric sensors, it means the readings are within the normal normal range. • • For state sensors, it means they enter the normal state. below lower critical "R" < Lower Critical threshold below lower Lower Critical threshold <= "R" < Lower Warning threshold warning above upper Upper Warning threshold <...
  • Page 139: Identifying The Sensor Position And Channel

    The serial number for each sensor or actuator appears listed in the web interface when it is detected. Match the serial number from the tag to those listed in the sensor table. Identifying the Sensor Position and Channel The Peripheral Devices page shows where each sensor or actuator is connected. •...
  • Page 140: Managing One Sensor Or Actuator

    Managing One Sensor or Actuator If you are managing only one sensor or actuator, you can assign the desired ID number to it. When managing multiple sensors/actuators at a time, the IDs are automatically assigned. Tip: When the total of managed sensors/actuators reaches the maximum value, you cannot manage additional ones.
  • Page 141: Individual Sensor/Actuator Pages

    Available IDs show "unused." 4) Click Manage. ▶ Special note for Legrand humidity sensors: A Legrand humidity sensor is able to provide two measurements - relative and absolute humidity values. • • A relative humidity value is measured in percentage (%).
  • Page 142 Threshold settings, if enabled, help you identify whether any numeric sensor enters the warning or critical level. In addition, you can have PRO3X automatically generate alert notifications for any warning or critical status. ▶ To configure a numeric sensor's threshold settings: 1) Click Edit Thresholds.
  • Page 143 • To have this sensor follow the default threshold settings configured for its own sensor type, select • the 'Use default thresholds' checkbox. Peripherals. The default threshold settings are configured on the page of • To customize the threshold settings for this particular sensor, deselect the 'Use default thresholds' •...
  • Page 144 2) Make changes to available fields, and then click Save. Fields Description Name A name for the sensor or actuator. Description Any descriptive text you want. Location (X, Y Describe the sensor's or actuator's location in the data center by typing alphanumeric values for the and Z) X, Y and Z coordinates.
  • Page 145 Fields Description Sensor Polarity This field is available for DX2‑CC2 contact closure sensors only. Determine the normal state of your DX2‑CC2. • • Normal Open: The open status of the connected detector/switch is considered normal. An alarm is triggered when the detector/switch turns closed. •...
  • Page 146 ▶ To turn on or off an actuator: 1) Click the desired control button. : Turn ON. : Turn OFF. 2) Confirm the operation on the confirmation message. Note: Per default you can turn on as many dry contact actuators as you want, but only one "powered dry contact"...
  • Page 147: Z Coordinate Format

    ▶ Other operations: You can go to another sensor's or actuator's data/setup page by clicking the selector on the top- left corner. Z Coordinate Format Z coordinates refer to vertical locations of environmental sensor packages. You can use either the number of rack units or a descriptive text to describe Z coordinates.
  • Page 148: User Management

    ▶ Example: X = Brown Cabinet Row Y = Third Rack Z = Top of Cabinet ▶ Values of the X, Y and Z coordinates: • • X and Y: They can be any alphanumeric values comprising 0 to 24 characters. •...
  • Page 149 Field/setting Description • • 1 to 32 characters • • Case sensitive • • Colon character :, forward slash /, and spaces are NOT permitted. Full name The user's first and last names. • • 4 to 64 characters Password, •...
  • Page 150 Field/ Description setting • • None • • Authentication: Authentication and no privacy. • • Authentication & Privacy: Authentication protocol SHA-1, privacy protocol AES-128. Default. • • Authentication Password: This section is configurable only when 'Authentication' or 'Authentication & Privacy' is selected. Field/setting Description Same as user...
  • Page 151 Field/setting Description Privacy Click this field to select the desired privacy protocol. Two protocols are available: • • • • AES-128 (default) • • AES-192 • • AES-256 • • AES-192 (3DES key extension) • • AES-256 (3DES key extension) ▶...
  • Page 152: Editing Or Deleting Users

    Built-in role Description Operator Provide frequently-used permissions, including: • • Acknowledge Alarms • • Change Own Password • • Change Pdu, Inlet, Outlet & Overcurrent Protector Configuration (if your model is a PDU) • • Switch Outlet (if your model supports it) •...
  • Page 153: Creating Roles

    2) Click Save for changes. ▶ To delete multiple user accounts: 1) On the Users page, select users by clicking the checkboxes. 2) Click the Delete icon then click to confirm. Note: You cannot delete the original factory-default Administrator account, but you can disable it. Creating Roles A role is a combination of permissions.
  • Page 154 Built-in role Description Operator Provide frequently-used permissions, including: • • Acknowledge Alarms • • Change Own Password • • Change Pdu, Inlet, Outlet & Overcurrent Protector Configuration • • Switch Outlet (for supported models) • • Switch Outlet Group (for supported models) •...
  • Page 155: Editing Or Deleting Roles

    6) Click Save. The role is created and you can assign it to any user. Editing or Deleting Roles Roles cannot be renamed, but you can delete them or change their included privileges. Choose User Management > Roles to open the Roles page, which lists all roles. The built-in Admin role displays the lock icon .
  • Page 156: Setting Your Preferred Measurement Units

    ▶ To edit a role: 1) On the Roles page, click the desired role. The Edit Role page opens. • You can edit the description or change the privileges. • • To delete this role, click • , and confirm the operation. 2) Click Save.
  • Page 157: Setting Default Measurement Units

    Field Description Pressure unit Preferred units for pressure -- Pascal or Psi. • • Pascal = one newton per square meter • • Psi = pounds per square inch 1) Click Save. Setting Default Measurement Units User preferences apply to displays in the GUI and CLI for locally authenticated users. Default preferences apply to the front panel and SNMP, and to remote-authenticated users.
  • Page 158: Network Settings

    Network Settings Configure wired, wireless, and Internet protocol-related settings on the Network page after connecting the PRO3X to your network. You can enable both the wired and wireless networking so that there are multiple IP addresses -- wired and wireless IP. For example, you can obtain one IPv4 and/or IPv6 address by enabling one Ethernet interface, and obtain one more IPv4 and/or IPv6 address by enabling/configuring the wireless interface.
  • Page 159 • • LDAP • • • • SMTP • • • • Telnet • • • • SSL/TLS • • SNMP • • SysLog Note: PRO3X disables TLS 1.0 and 1.1 by default. It enables only TLS 1.2 and 1.3. Common Network Settings Common Network Settings are OPTIONAL, not required.
  • Page 160 Field Description First/Second/ Manually specify static DNS server(s). Third DNS server • • If any static DNS server is specified in these fields, it will override the DHCP-assigned DNS server. • • If DHCP (or Automatic) is selected for IPv4/IPv6 settings, and there are NO static DNS servers specified, DHCP-assigned DNS servers are used.
  • Page 161 ▶ IPv4 settings: Field/setting Description Enable IPv4 Enable or disable the IPv4 protocol. IP auto configuration Select the method to configure IPv4 settings. • • DHCP: Auto-configure IPv4 settings via DHCP servers. • • Static: Manually configure the IPv4 settings. Preferred hostname Enter the hostname you prefer for IPv4 connectivity •...
  • Page 162 fd07:2fa:6cff:1111::0/128 Example: • Assign a Default Gateway. • ▶ Enable Interface: Make sure the Ethernet interface is enabled, or all networking through this interface fails. This setting is available in the ETH1/ETH2 or ETHERNET section, but not available in the BRIDGE section. ▶...
  • Page 163 Field Description Outer authentication This field appears when 'EAP' is selected. There are two authentication methods for EAP. • • PEAP: A TLS tunnel is established, and an inner authentication method can be specified for this tunnel. • • TLS: Authentication between the client and authentication server is performed using TLS certificates.
  • Page 164 Field Description CA certificate This field appears when 'EAP' is selected. CA certificate is required when "Enable verification of TLS certificate chain" is selected by default; and strongly recommended RADIUS authentication This field appears when 'EAP' is selected. server name Type the name of the RADIUS server if it is present in the TLS certificate.
  • Page 165 Field/setting Description Allow connection If powered off for a long time, the system time may be incorrect. if system clock is When this checkbox is deselected, and if the system time is incorrect incorrect, the installed TLS certificate is considered not valid yet and will cause the network connection to fail.
  • Page 166 Field/setting Description Authentication Select an authentication method. • • No Authentication: No authentication data is required. • • PSK: A Pre-Shared Key is required. • • EAP: PRO3X supports 802.1X (EAP) Network Authentication. Enter required authentication data in the fields that appear. Pre-Shared Key This field appears only when PSK is selected.
  • Page 167 Field/setting Description Client certificate, This field appears when 'EAP', 'PEAP' and 'TLS' are all Client private key, selected. Client private key password PEM encoded X.509 certificate and PEM encoded private key are required for certification-based authentication methods. Private key password is optional. •...
  • Page 168 Field/setting Description • • Select this checkbox to make the authentication succeed Allow expired and regardless of the certificate's validity period. not yet valid certificates • • After deselecting this checkbox, the authentication fails whenever any certificate in the selected certificate chain is outdated or not valid yet.
  • Page 169 Field/setting Description • • Enter the hostname you prefer for IPv6 connectivity Preferred hostname • • Automatic settings: Optionally specify the preferred hostname, which must meet the above requirements. • • Static settings: Assign a static IPv6 address, which follows this syntax "IP address/prefix length". Example: fd07:2fa:6cff:1111::0/128 ▶...
  • Page 170 ▶ To view the log: 1) Access the diagnostic log with either method below. • Choose Device Settings > Network > ETH1/ETH2 > Show EAP Authentication Log. • • Choose Device Settings > Network > WIRELESS > Show WLAN Diagnostic Log. •...
  • Page 171 In this example, NIC-2 (192.168.100.88) is the next hop router for your PRO3X to communicate with any device in the other subnet 192.168.200.0. In the IPv4 "Static Routes" section, you should enter the data as shown below. Note that the address in the first field must be of the Classless Inter-Domain Routing (CIDR) notation.
  • Page 172 In this example, NIC-2 (fd07:2fa:6cff:2405::80) is the next hop router for your PRO3X to communicate with any device in the other subnet fd07:2fa:6cff:1111::0. In the IPv6 "Static Routes" section, you should enter the data as shown below. Note that the address in the first field must be of the Classless Inter-Domain Routing (CIDR) notation.
  • Page 173 ▶ Interface list: Interface Description name BRIDGE When another wired network is connected to the Ethernet port of your PRO3X, and your PRO3X has been set to the bridging mode, select this interface name instead of the Ethernet interface. ETH1 When another wired network is connected to the ETH1 port of your PRO3X, select this interface name.
  • Page 174 Field Description Port forwarding role Primary or Expansion. This is to determine which device is the primary and (available on all cascaded devices) which ones are expansion devices. Downstream interface USB or ETH1/ETH2. (available on the primary This is to determine which port on the primary device is connected to Expansion 1.
  • Page 175 In this mode, the DHCP server communicates with every cascaded device respectively and assigns four different IP addresses. Each device has its own IP address. The way to remotely access each cascaded device is completely the same as accessing a standalone device in the network.
  • Page 176 ▶ "Port Forwarding" mode: In this mode, the DHCP server communicates with the primary device alone and assigns one IP address to the primary device. All expansion devices share the same IP address as the primary device. You must specify a 5XXXX port number (where X is a number) when remotely accessing any expansion device with the shared IP address.
  • Page 177 Protocols HTTPS HTTP TELNET SNMP MODBUS • • XX is a two-digit number representing the device position as shown below. Position Position Primary device Expansion 8 Expansion 1 Expansion 9 Expansion 2 Expansion 10 Expansion 3 Expansion 11 Expansion 4 Expansion 12 Expansion 5 Expansion 13...
  • Page 178 Protocols Port Numbers MODBUS In the Port Forwarding mode, the cascaded device does NOT allow you to modify the standard TCP/UDP port configuration, including HTTP, HTTPS, SSH, Telnet and Modbus/TCP. Port Forwarding Examples In this example, Port Forwarding mode is applied to a cascading chain comprising three devices. The IP address is 192.168.84.77.
  • Page 179 ▶ Expansion 1 device: Position code for Expansion 1 is '01' so each port number is 5NN01 as shown below. Protocols Port numbers HTTPS 50001 HTTP 50101 50201 TELNET 50301 SNMP 50501 MODBUS 50601 Examples: • • To access Expansion 1 via HTTPS, the IP address is: https://192.168.84.77:50001/ •...
  • Page 180 http://192.168.84.77:50102/ • • To access Expansion 2 via SSH, the command is: ssh -p 50202 192.168.84.77 Adding, Removing or Swapping Cascaded Devices Change a device's cascading mode first before adding that device to a cascading chain, or before disconnecting that device from the chain. If you only want to change the cascading mode of an existing chain, or swap the primary and expansion device, always start from the expansion device.
  • Page 181: Configuring Network Services

    a. Access the expansion device that will replace the primary device, and set its role to 'Primary', and correctly set the downstream interface. b. Access the primary device, set its role to 'Expansion'. c. Swap the primary and expansion device now. ▪...
  • Page 182 HTTPS and HTTP enable the access to the web interface. Telnet and SSH enable the access to the command line interface. By default, SSH is enabled, Telnet is disabled, and all TCP ports for supported services are set to standard ports. You can change default settings if necessary. Important: PRO3X uses TLS rather than SSL.
  • Page 183 • Enable or disable HTTPS access. • • Enable HSTS: Default is enabled. • • Default port is 443. You can enter a custom port. • Warning: Different network services cannot share the same TCP port. ▶ Special note for AES ciphers: The PRO3X device's TLS-based protocols support AES 128- and 256-bit ciphers.
  • Page 184 2) Enable or disable "SNMP v1 / v2c" and/or "SNMP v3" by clicking the corresponding checkbox. • The SNMP v1/v2c read-only access is enabled by default. The default 'Read community string' is • "public." • To enable read-write access, type the 'Write community string.' Usually the string is "private." •...
  • Page 185 a. Select the 'Enable SNMP notifications' checkbox. b. Select a notification type -- SNMPv2c trap, SNMPv2c inform, SNMPv3 trap, and SNMPv3 inform. c. Specify the SNMP notification destinations and enter necessary information. For details, refer to: ▪ SNMPv2c Notifications ▪ ▪...
  • Page 186 Field Description Server requires Select this checkbox if your SMTP server requires password authentication authentication. User name, Type a user name and password for authentication after selecting the above checkbox. Password • • The length of user name and password ranges between 4 and 64.
  • Page 187 Changing SSH Settings You can enable or disable the SSH access to the command line interface, change the TCP port, or set a password or public key for login over the SSH connection. ▶ To change SSH settings: 1) Choose Device Settings > Network Services > SSH. 2) To enable or disable the SSH access, select or deselect the checkbox.
  • Page 188 ▶ Modbus Gateway: If connecting the Modbus RTU devices to PRO3X and enabling the Modbus Gateway feature, the Modbus TCP clients on your network will be able to communicate with those Modbus RTU devices attached to PRO3X. 1) To allow the Modbus TCP clients on the network to communicate with the Modbus RTU devices connected to the PRO3X, select the 'Enable Modbus gateway' checkbox.
  • Page 189 Enabling Redfish Services You can enable or disable the Redfish services to manage the device through the Redfish API. By default, this service is enabled. Enabling Redfish services allows you to retrieve the following details. • • configuration details, such as thresholds, names, etc. •...
  • Page 190: Configuring Security Settings

    Enabling this feature also enables Link-Local Multicast Name Resolution (LLMNR) and/or MDNS, which are required for resolving APIPA host names. See APIPA and Link-Local Addressing. The service advertisement feature supports both IPv4 and IPv6 protocols. If you have set a preferred host name for IPv4 and/or IPv6, that host name can be used as the zero configuration .local host name, that is, <preferred_host_name>.local, where <preferred_host_name>...
  • Page 191 When traffic reaches or is sent from the PRO3X, the rules are executed in numerical order. Only the first rule that matches the IP address determines whether the traffic is accepted or discarded. Any subsequent rules matching the IP address are ignored. •...
  • Page 192 Editing or Deleting IP Access Control Rules When an existing IP access control rule requires updates of IP address range and/or policy, modify them accordingly. Or you can delete any unnecessary rules. ▶ To modify or delete a rule: 1) Choose Device Settings > Security > IP Access Control. 2) Go to the IPv4 or IPv6 section.
  • Page 193 • Make changes to the selected rule, and then click Save. • • Click • to remove it. • To re-sort its order, click • 5) Click Save. • IPv4 rules: Make sure you click the Save button in the IPv4 section, or the changes made to IPv4 •...
  • Page 194 • • Select the rule above which you want to insert a new rule. For example, to insert a rule between rules #3 and #4, select #4. • • Click Insert Above. • • Type a starting IP address in the Start IP field. •...
  • Page 195 ▶ To modify a role-based access control rule: 1) Choose Device Settings > Security > Role Based Access Control. 2) Go to the IPv4 or IPv6 section. 3) Select the desired rule in the list. • Ensure the IPv4 or IPv6 checkbox has been selected, or you may not edit or delete any rule. •...
  • Page 196 Field Description Country The country where your company is located. Use the standard ISO country code, which comprises two uppercase letters. For a list of ISO codes, google ISO 3166 country codes. State or province The full name of the state or province where your company is located. Locality The city where your company is located.
  • Page 197 a. You are prompted to open or save the file. Click Save to save it onto your computer. b. Submit it to a CA to obtain the digital certificate. c. If the CSR contains incorrect data, click Delete Certificate Signing Request to remove it, and then repeat the above steps to re-create it.
  • Page 198 Field Description Common name The fully qualified domain name (FQDN) of your PRO3X. Email address An email address where you or another administrative user can be reached. Key Type/Key Length Key type RSA requires you to select Key Length: • •...
  • Page 199 Note: If you are using a certificate that is part of a chain of certificates, each part of the chain is signed during the validation process. ▶ To download active key and certificate files from PRO3X: 1) Choose Device Settings > Security > TLS Certificate. 2) In the Active TLS Certificate section, click Download Key and Download Certificate respectively.
  • Page 200 If the external authentication fails, an "Authentication failed" message is displayed. Details regarding the authentication failure are available in the event log. You must have the "Change Authentication Settings" permission to configure or modify the authentication settings. Adding LDAP/LDAPS Servers To use LDAP authentication, enable it in the Device Settings >...
  • Page 201 Field/setting Description Enable verification Select this checkbox if it is required to validate the LDAP server's certificate by the PRO3X of LDAP server prior to the connection. certificate If the certificate validation fails, the connection is refused. CA certificate Consult your AA server administrator to get the CA certificate file for the LDAPS server. Click Browse to select and install the certificate file.
  • Page 202 Field/setting Description User search Search criteria for finding LDAP user objects within the directory tree. subfilter • • Select this checkbox to determine group membership by consulting the user's Group lookup memberOf attribute(s). using memberOf attribute • • Deselect this checkbox to determine group membership by doing a non-recursive search for groups containing the user's DN as member.
  • Page 203 ▶ To duplicate LDAP/LDAPS server settings: If you have added any LDAP/LDAPS server to the PRO3X, and the server you will add shares identical settings with an existing one, the most convenient way is to duplicate that LDAP/LDAPS server's data and then revise the IP address/host name.
  • Page 204 Field/setting Description Timeout This sets the maximum amount of time to establish contact with the Radius server before timing out. Type the timeout period in seconds. Retries Type the number of retries. Shared secret, The shared secret is necessary to protect communication with the Radius server. Confirm shared secret 1) To verify settings, click Test Connection to check if you can connect to the new server successfully.
  • Page 205 Field/setting Description Type of TACACS+ Select an authentication protocol. authentication • • ASCII • • PAP (Password Authentication Protocol) • • CHAP (Challenge Handshake Authentication Protocol) • • MS-CHAP (Microsoft Challenge Handshake Authentication Protocol) CHAP is generally considered more secure because the user name and password are encrypted, while in PAP they are transmitted in the clear.
  • Page 206 Configuring Login Settings Choose Device Settings > Security > Login Settings to open the Login Settings page, where you can: • • Configure the user blocking feature. Note: The user blocking function applies only to local authentication instead of external authentication through AA servers.
  • Page 207 Configuring Password Policy Choose Device Settings > Security > Password Policy to open the Password Policy page, where you can: • • Force users to use strong passwords. • • Force users to change passwords at a regular interval -- that is, password aging. ▶...
  • Page 208: Setting The Date And Time

    ▶ Login manner after enabling the service agreement: After the Restricted Service Agreement feature is enabled, the agreement's content is displayed on the login screen. To log in when a restricted service agreement appears: • • In the web interface, select the checkbox labeled "I understand and accept the restricted service agreement."...
  • Page 209 • • Select 'User specified time'. • • Enter the date or click the calendar icon to select a date. • • Click 12H/24H button to toggle time formats. • • Click the AM/PM button to toggle. • • Enter the time or click the arrows to set it. ▶...
  • Page 210: Door Access Control

    Windows NTP Server Synchronization Solution The NTP client on the PRO3X follows the NTP RFC so the PRO3X rejects any NTP servers whose root dispersion is more than one second. An NTP server with a dispersion of more than one second is considered an inaccurate NTP server by the PRO3X.
  • Page 211 3) The New Door Access Rule page opens. Enter a name for the rule. 128 characters maximum. 4) Select the door locks this rule applies to in the Available Door Handle Locks list. Each selected door lock appears in the Selected Locks section. 5) To allow authorization via card reader, select the Card Access checkbox, then select the correct Card Reader and click Read Card to retrieve the Card ID.
  • Page 212 8) To allow authorization with an Absolute Time Condition, select the Absolute Time checkbox, then use the calendar tool to set the start and end dates, and the clock tools to set the start and end times during which access is granted. Note: Click the 12H/24H icon to toggle between clock styles. 9) To allow authorization with a Periodic Time Condition, select the Periodic Time checkbox, then select the Days of Week and range of hours on which access is granted.
  • Page 213: Event Rules And Actions

    10) Click Create to save the rule. All rules appear on the main Door Access Control page. Event Rules and Actions Crete event rules and actions to notify you of or react to a change in conditions. An event rule consists of two parts: •...
  • Page 214 a. Assign a name to this action. b. Select the desired action and configure it as needed. c. Click Create. 3) Click New Rule to create a new rule. a. Assign a name to this rule. b. Make sure the Enabled checkbox is selected, to make the new rule active. c.
  • Page 215 ▶ Event rule configuration illustration: 1) Choose Device Settings > Event Rules > New Rule. 2) Click the Event field to select an event type. • <Any sub-event> means all events shown on the list. • • <Any Numeric Sensor> means all numeric sensors, including internal and environmental sensors. •...
  • Page 216 6) In this example, 'Above upper critical threshold' is selected because we want the PRO3X to react only when the selected temperature sensor's reading enters the upper critical range. A "Trigger condition" field appears, requiring you to define the "exact" condition related to the "upper critical" event.
  • Page 217 Event types Radio buttons • • Unavailable: action occurs only when the chosen sensor is Sensor availability NOT detected and becomes unavailable. • • Available: action occurs only when the chosen sensor is detected and becomes available. • • Both: action occurs both when the chosen sensor becomes unavailable or available.
  • Page 218 Event types Radio buttons • • Connected: action occurs only when the selected device is Device connection physically connected to it. or disconnection, such as a • • Disconnected: action occurs only when the selected device USB‑cascaded is physically disconnected from it. device •...
  • Page 219 Config of rack unit [AMSRACKUNITPOSITION] of asset strip [AMSNUMBER] ('[AMSNAME]') Asset Management > changed by user '[USERNAME]' to: Name Rack Unit Config '[AMSRACKUNITNAME]', LED Operation Mode Changed '[AMSLEDOPMODE]', LED Color '[AMSLEDCOLOR]', LED Mode '[AMSLEDMODE]' Asset Management > State of asset strip [AMSNUMBER] State ('[AMSNAME]') changed to '[AMSSTATE]'.
  • Page 220 [LINKIDTAG]Firmware upgraded successfully Device > Firmware from version '[OLDVERSION]' to version update completed '[VERSION]' by user '[USERNAME]' from host '[USERIP]'. [LINKIDTAG]Firmware upgrade failed from Device > Firmware version '[OLDVERSION]' to version '[VERSION]' update failed by user '[USERNAME]' from host '[USERIP]'. [LINKIDTAG]Firmware upgrade started from Device >...
  • Page 221 Sending Syslog message to server Device > Sending Syslog [SYSLOGSERVER]:[SYSLOGPORT] message failed ([SYSLOGTRANSPORTPROTO]) failed. [ERRORDESC] [LINKIDTAG]System reset performed by user Device > System reset '[USERNAME]' from host '[USERIP]'. Device > System started [LINKIDTAG]System started. Device > A TACACS+ A TACACS+ error occurred: [ERRORDESC]. error occurred Device >...
  • Page 222 Peripheral device '[EXTSENSORNAME]' in Peripheral Device Slot > Peripheral device '[EXTSENSORNAME]' in [FORMATTEDEXTSENSORSLOT] Numeric Sensor > [FORMATTEDEXTSENSORSLOT] asserted deasserted 'below lower critical' at Below lower critical 'below lower critical' at [SENSORREADING] [SENSORREADING] threshold [SENSORREADINGUNIT]. [SENSORREADINGUNIT]; it is now [SENSORSTATENAME]. Peripheral device '[EXTSENSORNAME]' in Peripheral Device Slot >...
  • Page 223 Link unit [LINKID] ([LINKUNITHOST]) has been Linking > Link unit released by user '[USERNAME]' from released '[USERIP]'. Outlet Grouping > Outlet group '[OUTLETGROUPID]' was Outlet Group > Outlet modified. Group Modified Outlet Grouping > Outlet group '[OUTLETGROUPID]' power cycle Outlet Group > Power initiated by user '[USERNAME]' from host control >...
  • Page 224 Outlet Grouping > Outlet group '[OUTLETGROUPID]' was created. Outlet Group Created Outlet Grouping > Outlet group '[OUTLETGROUPID]' was deleted. Outlet Group Deleted Communication with PDU Communication with PDU [PDUNUMBER] PDU > Controller > [PDUNUMBER] controller controller '[CONTROLLER]' (board ID Communication failed '[CONTROLLER]' (board ID [BOARDID]) failed [BOARDID]) restored...
  • Page 225 Sensor '[PDULINEPAIRSENSOR]' on line '[INLETLINEPAIR]' of PDU Sensor '[PDULINEPAIRSENSOR]' on line PDU > Inlet > Line Pair > [PDUNUMBER] inlet '[INLET]' '[INLETLINEPAIR]' of PDU [PDUNUMBER] inlet Sensor > Below lower deasserted 'below lower critical' at '[INLET]' asserted 'below lower critical' at critical threshold [SENSORREADING] [SENSORREADING] [SENSORREADINGUNIT].
  • Page 226 Sensor '[PDUPOLESENSOR]' on pole Sensor '[PDUPOLESENSOR]' on pole '[INLETPOLE]' of PDU [PDUNUMBER] PDU > Inlet > Pole > '[INLETPOLE]' of PDU [PDUNUMBER] inlet inlet '[INLET]' deasserted 'below Sensor > Below lower '[INLET]' asserted 'below lower warning' at lower warning' at [SENSORREADING] warning threshold [SENSORREADING] [SENSORREADINGUNIT].
  • Page 227 Sensor '[INLETSENSOR]' on PDU Sensor '[INLETSENSOR]' on PDU [PDUNUMBER] inlet '[INLET]' PDU > Inlet > Sensor > [PDUNUMBER] inlet '[INLET]' asserted 'below deasserted 'below lower critical' at Below lower critical lower critical' at [SENSORREADING] [SENSORREADING] threshold [SENSORREADINGUNIT]. [SENSORREADINGUNIT]; it is now [SENSORSTATENAME].
  • Page 228 A swell event occurred on PDU [PDUNUMBER] PX4 or PDU > Inlet > Swell inlet '[INLET]' for [DIPSWELLDURATION] s with PRO4X a maximum voltage of [DIPSWELLVOLTAGE] V. PDU [PDUNUMBER] placed in Load Shedding PDU [PDUNUMBER] removed from PDU > Load Shedding > Mode by user '[USERNAME]' from host Load Shedding Mode by user Started...
  • Page 229 Sensor '[OUTLETSENSOR]' on PDU Sensor '[OUTLETSENSOR]' on PDU [PDUNUMBER] outlet '[OUTLET]' PDU > Outlet > Sensor > [PDUNUMBER] outlet '[OUTLET]' asserted deasserted 'above upper critical' at Above upper critical 'above upper critical' at [SENSORREADING] [SENSORREADING] threshold [SENSORREADINGUNIT]. [SENSORREADINGUNIT]; it is now [SENSORSTATENAME].
  • Page 230 Sensor '[OCPSENSOR]' on PDU PDU > Overcurrent Sensor '[OCPSENSOR]' on PDU [PDUNUMBER] [PDUNUMBER] overcurrent Protector > Sensor > overcurrent protector '[OCP]' asserted 'above protector '[OCP]' deasserted 'above Above upper warning upper warning' at [SENSORREADING] upper warning' at [SENSORREADING] threshold [SENSORREADINGUNIT]. [SENSORREADINGUNIT];...
  • Page 231 Sensor '[OCPSENSOR]' on PDU PDU > Overcurrent Sensor '[OCPSENSOR]' on PDU [PDUNUMBER] [PDUNUMBER] overcurrent Protector > Sensor > overcurrent protector '[OCP]' entered warning protector '[OCP]' exited warning Warning state. state; it is now [SENSORSTATENAME]. PDU [PDUNUMBER] sensor PDU [PDUNUMBER] sensor '[PDUSENSOR]' '[PDUSENSOR]' deasserted 'above PDU >...
  • Page 232 Sensor '[TRANSFERSWITCHSENSOR]' Sensor '[TRANSFERSWITCHSENSOR]' on PDU on PDU [PDUNUMBER] transfer PDU > Transfer Switch > [PDUNUMBER] transfer switch switch '[TRANSFERSWITCH]' Transfer Sensor > Above upper '[TRANSFERSWITCH]' asserted 'above upper deasserted 'above upper warning' at switch warning threshold warning' at [SENSORREADING] [SENSORREADING] [SENSORREADINGUNIT].
  • Page 233 Sensor '[TRANSFERSWITCHSENSOR]' Sensor '[TRANSFERSWITCHSENSOR]' on PDU on PDU [PDUNUMBER] transfer PDU > Transfer Switch > Transfer [PDUNUMBER] transfer switch switch '[TRANSFERSWITCH]' is no Sensor > Unavailable switch '[TRANSFERSWITCH]' has become unavailable. longer unavailable; it is now [SENSORSTATENAME]. Fuse of [FORMATTEDEXTPORT] is Fuse of [FORMATTEDEXTPORT] is Port Fuse >...
  • Page 234 Sensor '[CIRCUITSENSOR]' on panel Power Metering Sensor '[CIRCUITSENSOR]' on panel '[POWERMETER]' circuit '[CIRCUIT]' Controller > Power '[POWERMETER]' circuit '[CIRCUIT]' asserted deasserted 'above upper warning' at BCM2 / Meter > Circuit > 'above upper warning' at [SENSORREADING] [SENSORREADING] Sensor > Above upper [SENSORREADINGUNIT].
  • Page 235 Sensor '[PDUPOLESENSOR]' on pole Power Metering Sensor '[PDUPOLESENSOR]' on pole '[POWERMETERPOLE]' of power Controller > Power '[POWERMETERPOLE]' of power meter meter '[POWERMETER]' deasserted BCM2 / Meter > Pole > Sensor > '[POWERMETER]' asserted 'above upper 'above upper warning' at Above upper warning warning' at [SENSORREADING] [SENSORREADING] threshold...
  • Page 236 Power Metering Sensor '[POWERMETERSENSOR]' on power BCM2 / Controller > Power meter '[POWERMETER]' has been reset by Meter > Sensor > Reset user '[USERNAME]' from host '[USERIP]'. Power Metering Sensor '[POWERMETERSENSOR]' on Sensor '[POWERMETERSENSOR]' on power Controller > Power power meter '[POWERMETER]' is no BCM2 / meter '[POWERMETER]' has become Meter >...
  • Page 237 User Activity > Session Session of user '[USERNAME]' from host timeout '[USERIP]' timed out. User Activity > User User '[USERNAME]' from host '[USERIP]' was blocked blocked. User Administration > Password of user '[UMTARGETUSER]' changed Password changed by user '[USERNAME]' from host '[USERIP]'. User Administration >...
  • Page 238 Some actions have messages that you can customize using placeholders that will populate with specific information when the message is generated. Custom messages with placeholders can be used in these actions: Log event message, Send SMS, Send email (subject+body), Send webcam image (subject+body). ▶...
  • Page 239 3) Available actions depend on your model. See next sections for details on each action you can configure. 4) Click Create to save an action, then you can include it in an event rule. Alarm The Alarm is an action that requires users to acknowledge an alert. This helps ensure that the user is aware of the alert.
  • Page 240 5) In the 'Re-scheduling period' field, specify the time interval (in minutes) at which the alert notification is resent or regenerated regularly. 6) In the 'Re-scheduling limit' field, specify the maximum number of times the alert notification is resent. Values range from 1 to infinite. 7) (Optional) You can instruct the PRO3X to send the acknowledgment notification after the alarm is acknowledged in the 'Acknowledgment notifications' field.
  • Page 241 ▶ Operation: 1) Choose Device Settings > Event Rules > 2) Select 'Change load shedding state' from the Action list. 3) In the Operation field, select either one below: • Start load shedding: Enters the load shedding mode when the specified event occurs. •...
  • Page 242 ▶ Operation: 1) Choose Device Settings > Event Rules > New Action. 2) Select 'Log an event message' from the Action list. 3) Select the 'Use custom log message' checkbox, and then create a custom message in the provided text box. •...
  • Page 243 ▶ Operation: 1) Choose Device Settings > Event Rules > 2) Select 'Push out sensor readings' from the Action list. 3) Select a server or host which receives the data in the Destination field. • If the desired destination is not available yet, go to the Data Push page to specify it. •...
  • Page 244 Folder name Definition options Serial number / Three folders will be created. Webcam name / • • Definitions of the parent folder and first subfolder are the same as the first row. Timestamp • • The final subfolder's name is the time when the recording event occurs, which is the accumulated time in seconds since 1970/1/1.
  • Page 245 4) By default, the SMTP server specified on the SMTP Server page will be the SMTP server for performing this action. To use a different SMTP server, select the 'Use custom settings' radio button. Default messages are sent based on the event. 5) If needed, you can customize the subject and messages sent via this email.
  • Page 246 b. Click the second to select the specific sensor for the target from the list. c. Click to add the selected sensor to the Report Sensors list box. For example, to monitor the current reading of the Inlet 1, select Inlet 1 from the left field, and then select RMS Current from the right field.
  • Page 247 [USERNAME] logged into the device on [TIMESTAMP] translates to Mary logged into the device on 2012-January-30 21:00 ▶ Operation: 1) Choose Device Settings > Event Rules > 2) Select 'Send SMS message' from the Action list. 3) In the 'Recipient phone number' field, specify the phone number of the recipient. 4) Select the 'Use custom log message' checkbox, and then create a custom message in the provided text box.
  • Page 248 • Select the 'Custom subject' checkbox, and enter the text you prefer as this email's subject. • • Select the 'Use custom log message' checkbox, and then create a custom message up to 1024 • characters in the provided field. •...
  • Page 249 ▶ To send SNMP v3 notifications: 1) In the 'Notification type' field, select 'SNMPv3 trap' or 'SNMPv3 inform.' 2) For SNMP TRAPs, the engine ID is prepopulated. 3) For SNMP INFORM communications, leave the resend settings at their default or do the following: a.
  • Page 250 ▶ To automatically start or stop a Lua script: 1) Choose Device Settings > Event Rules > 2) Select 'Start/stop Lua script' from the Action list. 3) In the Operation field, select 'Start script' or 'Stop script.' 4) In the Script field, select the script that you want it to be started or stopped when an event occurs. Scripts must be pre-loaded.
  • Page 251 4) To specify the outlet(s) where this action will be applied, select them one by one from the 'Available outlets' list. • To add all outlets, click Select All. • 5) To remove any outlets from the 'Selected outlets' field, click that outlet's 6) If 'Turn outlet on' or 'Cycle outlet' is selected, choose to select the 'Use sequence order and delays' checkbox so that all selected outlets will follow the power-on sequence defined on the Outlets page.
  • Page 252 Transport Next steps protocols A TLS certificate is required. Do the following: a. Type an appropriate port number in the 'TCP port' field. Default is 6514. b. In the 'CA certificate' field, click Browse to select a TLS certificate. After importing the certificate, you may: •...
  • Page 253 ▶ Steps: 1) Click to create a 'Send email' action that sends an email to the desired recipient(s). • In this example, this action is named Email a Sensor Report. • • The subject and content of this email can be customized. •...
  • Page 254 1) Click to create a timer for performing the 'Send Temperature Sensor Readings' action hourly. • • In this example, the timer is named Hourly Temperature Sensor Reports. • • To perform the specified action at 12:30 pm, 01:30 pm, 02:30 pm, and so on, select Hourly, and set the Minute to 30.
  • Page 255 • • An email containing the specified temperature sensor readings will be sent hourly every day. If you no longer need the report, you can disable the timer by clearing the Enabled checkbox. Placeholders for Custom Messages Actions that include messages allow you to customize text and include placeholders that retrieve system information and include it in the message.
  • Page 256 Placeholder Definition [CARDREADERDESCRIPTION] The custom description of a card reader [CARDREADERID] The id of a card reader [CARDREADERMANUFACTURER] The manufacturer of a card reader [CARDREADERNAME] The custom name of a card reader [CARDREADERPRODUCT] The product name of a card reader [CARDREADERSERIALNUMBER] The serial number of a card reader [COMPONENTID]...
  • Page 257 Placeholder Definition [INLET] The inlet label [INLETLINEPAIR] The inlet line pair identifier [INLETPOLE] The inlet power line identifier [INLETSENSOR] The inlet sensor name [ISASSERTED] Boolean flag whether an event condition became true (1) or false (0) [KEYPADCHANNEL] The channel number of a keypad [KEYPADDESCRIPTION] The custom description of a keypad [KEYPADID]...
  • Page 258 Placeholder Definition [OUTLETGROUPNAME] The outlet group name [OUTLETGROUPSENSOR] The outlet group sensor name [OUTLETNAME] The outlet name Note: If any outlet does not have a name, neither an outlet name nor an outlet number will be shown in the custom message for it. Therefore, it is recommended to check the availability of all outlet names if intending to use this placeholder.
  • Page 259 Placeholder Definition [SMARTCARDTYPE] The type of a smart card [SMTPRECIPIENTS] The list of recipients of an outgoing mail [SMTPSERVER] The name or IP address of an SMTP server [SYSCONTACT] SNMP MIB-II sysContact field [SYSLOCATION] SNMP MIB-II sysLocation field [SYSNAME] SNMP MIB-II sysName field [TIMEREVENTID] The id of a timer event The timestamp of the event occurrence...
  • Page 260 The event rule involves: • • Event: Device > Firmware update failed • • Action: System Event Log Action ▶ To create this PDU-level event rule: 1) For an event at the PDU level, select "Device" in the Event field. 2) Select "Firmware update failed"...
  • Page 261 Note: The SNMP notifications may be SNMP v2c or SNMP v3 traps/informs, depending on the settings for the System SNMP Notification Action. See Enabling and Configuring SNMP. Then the SNMP notifications are sent when: • Any numeric sensor's reading enters the warning or critical range. •...
  • Page 262 The event rule involves: • • Event: Inlet > Sensor > Any sub-event • • Action: System SNMP Notification Action ▶ To create the above event rule: 1) For an event at the inlet level, select "Inlet" in the Event field. 2) Select "Sensor"...
  • Page 263 In this example, we want PRO3X to activate the load shedding function when a contact closure sensor enters the alarmed state. This event rule requires creating a new action before creating the rule. ▶ Step 1: create a new action for activating the load shedding 1) Choose Device Settings >...
  • Page 264 6) Select "Alarmed" since we want the PRO3X to respond when the selected contact closure sensor changes its state related to the "alarmed" state. 7) In the 'Trigger condition' field, select the Alarmed/Open/On radio button so that the action is taken only when the contact closure sensor enters the alarmed state.
  • Page 265: Setting Data Logging

    Device > Any sub-event Send email ▶ Example 3 This example illustrates a situation where two event rules combined regarding the outlet state changes causes the PRO3X to continuously power cycle outlets 1 and 2 in turn. Event selected Action included Outlet >...
  • Page 266 ▶ To configure the data logging feature: 1) Choose Device Settings > Data Logging. 2) To enable the data logging feature, select the "Enable" checkbox in the General Settings section. 3) Measurements Per Log Entry: Valid range is from 1 to 600. The default is 60. 4) Log capacity: Valid range varies, from 60 to 20,000.
  • Page 267: Configuring Data Push Settings

    1) Create a text file containing: • user=<admin_username> • • password=<admin_user_password> • • destroy_and_format_for_storage=true • 2) Save the file as "fwupdate.cfg" on the USB drive. 3) Make sure the Enable Data log backup checkbox is selected in Device Settings > Data Logging. 4) Connect the USB drive to the device.
  • Page 268 After configuring the destination and authentication settings, do either or both of the following: • • To perform the data push after the occurrence of a certain event, create the data push action and assign it to an event rule. •...
  • Page 269 ▶ To immediately push out the data: 1) On the Data Push page, choose the data source you want to push out. 2) Click the Push Now button. ▶ To cancel a data push: • • You can cancel the push in progress: Click Cancel. ▶...
  • Page 270: Monitoring Server Accessibility

    Log Rows The following illustrates log rows with only one sensor record shown. The actual length and order of log rows will be the same as those of sensors descriptors. The comment beginning with // in each line, is added to the following illustration to help explain it. Monitoring Server Accessibility You can monitor whether specific IT devices are alive by having the PRO3X continuously ping them.
  • Page 271 PRO3X can monitor any IT device, such as database servers, remote authentication servers, power distribution units (PDUs), and so on. It supports monitoring a maximum of 64 IT devices. To perform this feature, you need the Administrator Privileges. The default ping settings may not be suitable for monitoring devices that require high connection reliability so it is strongly recommended that you should adjust the ping settings for optimal results.
  • Page 272 Field Description Number of consecutive The number of times the monitored equipment is failures before disabling declared "Unreachable" consecutively before the feature (0 = unlimited) PRO3X disables the ping monitoring feature for it and shows "Waiting for reliable connection." Valid range is 0 to 100.
  • Page 273 Field Description SSH port The monitored device's SSH port. • • Default is 22. Power target Select the outlet or outlet group that is powering the monitored to switch device. Method of This field determines when PRO3X will power off the outlet(s) checking that supplies power to the monitored device, after PRO3X issues successful...
  • Page 274 Server Status Checking or Power Control Not all models supports the shutdown and power control features via the Server Reachability page. After adding IT equipment for monitoring, all IT devices are listed on the Server Reachability page. In the beginning, the status of the added IT equipment shows "Waiting for reliable connection," which means the requested number of consecutive successful or unsuccessful pings has not reached before PRO3X can declare that the monitored device is reachable or unreachable.
  • Page 275 Power control Description status Server is shutting The shutdown command was sent to the monitored equipment, down but the shutdown operation has not completed or succeeded yet. Power state Cannot determine the power state of the outlet(s) associated unknown with the monitored device. For example, maybe the outlet group associated with the monitored device has been deleted.
  • Page 276 ▶ Step 1: Set up the ping monitoring for the target PDU 1) Choose Device Settings > Server Reachability. 2) Click 3) Ensure the "Enable ping monitoring for this server" checkbox is selected. 4) Enter the data shown below. • Enter the server's data. •...
  • Page 277: Front Panel Settings

    Field/setting Data specified Rule name Send SNMP notifications for PDU (192.168.84.95) inaccessibility Event Choose Server Monitoring > 192.168.84.95 > Unreachable Trigger condition Select the Unreachable radio button This will make the PRO3X react only when the target PDU becomes inaccessible. 5) Select the System SNMP Notification Action.
  • Page 278: Configuring The Serial Port

    Mode Data entered Inlet overview The LCD display cycles through the inlet information only. • To enable the front panel outlet-switching function, select the 'Outlet switching' checkbox. • • To enable the front panel actuator-control function, select the 'Peripheral actuator control' •...
  • Page 279: Lua Scripts

    Options Description Force analog The PRO3X attempts to recognize that the connected device is an analog modem modem. Force GSM modem The PRO3X attempts to recognize that the connected device is a GSM modem. 2) Click the 'Console baud rate' field to select the baud rate intended for console management. Note: For a serial RS‑232 or USB connection between a computer and the PRO3X, leave it at the default (115200 bps).
  • Page 280 Writing or Loading a Lua Script You can enter or load up to 4 scripts. ▶ To write or load a Lua script: 1) Choose Device Settings > Lua Scripts > 2) Type a name for this script. Its length ranges between 1 to 63 characters. The name must contain the following characters only.
  • Page 281 • To load an existing Lua script file, click Load Local File. • • To use one of the default Lua script examples, click Load Example. • Warning: The newly-loaded script will overwrite all existing codes in the Source Code section. Therefore, do not load a new script if the current script meets your needs.
  • Page 282 To start with new arguments, click > Start With Arguments. Newly-assigned arguments will override default ones. 4) If you chose "Start With Arguments" in the above step, enter the key and value in the Start Lua Script dialog. • Click •...
  • Page 283 ▶ State: State Description The script is never executed since the device boot. Running The script is currently being executed. Terminated The script was once executed, but stops now. Restarting The script will be executed. Only the scripts with the "Restart" column set to "yes"...
  • Page 284: Miscellaneous

    Modifying or Deleting a Script ▶ To modify or replace a script: 1) Choose Device Settings > Lua Scripts. 2) Click the desired one in the scripts list. 3) Click > Edit Script. 4) Make changes to the information shown, except for the script's name, which cannot be revised. •...
  • Page 285: Using Prometheus And Grafana

    Using Prometheus and Grafana You can use the open-source tools Prometheus and Grafana to collect sensor data and visualize it. In Prometheus, the sensor readings are stored locally as time series data, which can be visualized in graphs created by Grafana or similar tools This information is displayed on dashboards, and you can create multiple dashboards as needed.
  • Page 286: Maintenance

    Maintenance Click 'Maintenance' in the Menu to view the options. Device Information The Device Information page displays hardware and software information of components or connected peripheral devices. Tip: If the information shown on this page does not match the latest status, press F5 to reload it. ▶...
  • Page 287 Section title Information shown Information General device information, such as model name, serial number, firmware version, hardware revision, MIB download link(s) and so on. Network The network information, such as the current networking mode, IPv4 and/or IPv6 addresses and so on. Information on cascading configurations also shows here.
  • Page 288: Viewing Connected Users

    Section title Information shown Security SSH host keys. Viewing Connected Users You can check which users are logged in and their status. If you have administrator privileges, you can terminate any user's connection. ▶ To view and manage connected users: 1) Choose Maintenance >...
  • Page 289: Viewing Or Clearing The Local Event Log

    Column Description Idle Time The length of time for which a user remains idle. 1) To disconnect any user, click the corresponding a. Click Disconnect on the confirmation message. b. The disconnected user is forced to log out. ▶ If there are live webcam sessions: All Live Preview window sessions sharing the same URL, including one Primary Standalone Live Preview window and multiple Secondary Standalone Live Preview windows, are identified as one single "<webcam>"...
  • Page 290: Updating The Firmware

    • ID number of the event • • Date and time of the event • • Event type • • A description of the event • 2) To filter the list, select the desired event type in the 'Filter event class' field, or enter keywords in the 'Filter by log message' field.
  • Page 291 5) Once complete, information of both installed and uploaded firmware versions as well as compatibility and signature-checking results are displayed. • If anything is incorrect, click Discard Upload. • 6) To proceed with the update, click Update Firmware. Warning: Do NOT power off the PRO3X during the update. 7) During the firmware update: •...
  • Page 292: Viewing Firmware Update History

    Downgrade Firmware (not supported) Safety measures are added to prevent the downgrade of the PRO3X. You will see compatibility warnings about the older firmware version after uploading the firmware. A downgraded device may not function properly, and it may lose settings. WARNING: Downgrades are not officially supported and must be discussed in advance with Technical Support.
  • Page 293 When the date and time settings are included in the bulk configuration file, exercise caution when distributing that file to target devices located in a different time zone than the source device. This bulk configuration method can be employed through the web interface, USB, or SCP. See Special Configuration and Upgrade Methods (on page ).
  • Page 294 Option Description Inherited The setting will follow its parent setting (that is, the upper-level setting). • • If you select 'Excluded' for its upper-level setting, this setting will be also excluded. • • If you select 'Included' for its upper-level setting, this setting will be also included.
  • Page 295 • • Content is displayed in clear text. Cleartext • • The file is saved to the TXT format. 1) In Encrypted mode, you can password protect the file. Select the Use Password checkbox, then enter a password. A password will be required when the file is uploaded on the target device. 2) Click Download Bulk Configuration.
  • Page 296: Backup And Restore Of Device Settings

    ▶ To delete profiles 1) Select one or multiple profiles, then click the Delete icon 2) Click Delete in the confirmation message. Backup and Restore of Device Settings Unlike the bulk configuration file, the backup file contains ALL device settings, including device-specific data like device names and all network settings.
  • Page 297: Network Diagnostics

    Network Diagnostics PRO3X provides the following tools in the web interface for diagnosing potential networking issues. • • Ping: The tool is useful for checking whether a host is accessible through the network or Internet. • • Trace Route: The tool lets you find out the route over the network between two hosts or systems. •...
  • Page 298: Hardware Issue Detection

    ▶ To retrieve a diagnostic file: 1) Choose Maintenance > Download Diagnostic > Download Diagnostic. 2) The system prompts you to save or open the file. Save the file. Hardware Issue Detection This page lists any internal hardware issues PRO3X has detected, including current events and historical records.
  • Page 299: Rebooting

    ▶ Hardware failure(s) detected: ▶ Hardware failure types: Hardware issues Description Network device not detected A specific networking interface is NOT detected. I2C Bus stuck A specific I2C bus is stuck, which affects the communication with sensors. Expansion unit controller not Communication with a specific expansion unit controller fails.
  • Page 300: Resetting All Settings To Factory Defaults

    2) Click Reboot. 3) A message appears, with a countdown timer showing the remaining time of the operation. It takes about one minute to complete. 4) When the restart is complete, the login page opens. Tip: If you are not redirected to the login page after the restart is complete, click the text "this link" in the countdown message.
  • Page 301: Webcam Management

    2) Type your password and then click Factory Reset. 3) A message appears, with a countdown timer showing the remaining time of the operation. It takes about two minutes to complete. 4) When the reset is complete, the login page opens. Tip: If you are not redirected to the login page after the reset is complete, click the text "this link"...
  • Page 302: Configuring Webcams And Viewing Live Images

    ▶ Permissions required: To do... Permission(s) required Either permission below: View snapshots and videos • • Change Webcam Configuration • • View Webcam Snapshots and Configuration Configure webcam settings Change Webcam Configuration Configuring Webcams and Viewing Live Images To configure a webcam or view live snapshot/video sessions, choose Webcams in the Menu. Then click the desired webcam to open that webcam's page.
  • Page 303 Tip: The date and time shown on the PRO3X web interface are automatically converted to your computer's time zone. 2) To save the current image onto PRO3X or a remote server, click Save Snapshot. • The default storage location for snapshots is the PRO3X device. To save them onto a remote server, •...
  • Page 304: Sending Links To Snapshots Or Videos

    1) Adjust the brightness, contrast, saturation and gain by modifying their values or adjusting the corresponding slide bar. • To customize the gain value, you must deselect the Auto Gain checkbox first. • • To restore all settings to this webcam's factory defaults, click Set to Webcam Defaults. •...
  • Page 305 Tip: All Live Preview window sessions sharing the same URL, including one Primary Standalone Live Preview window and multiple Secondary Standalone Live Preview windows, are identified as one single "<webcam>" user in the Connected Users list. You can disconnect a "<webcam>" user to terminate all sessions sharing the same URL.
  • Page 306: Viewing, Downloading, Deleting Locally-Saved Snapshots

    How Long a Link Remains Accessible For documentation purposes, the one who opens and sends the URL of the Primary Standalone Live Preview window is called User A and the two recipients of the same URL link are called User B and C. User C is able to access the snapshot or video image via the link when the URL link remains valid, which can be one of these scenarios: •...
  • Page 307: Changing Storage Settings

    Changing Storage Settings Important: The PRO3X web interface only lists the snapshots stored locally on the PRO3X device, but does NOT list those saved onto remote servers. You must launch appropriate third-party applications, such as an FTP client, to access and manage the snapshots stored on remote servers. The default is to store snapshots locally on the device, which has a limitation of 10 snapshots.
  • Page 308 Storage Description location • • It can store a maximum of 10 snapshots only. • • The web interface can list and display all snapshots stored on the PRO3X. • • All snapshots are CLEARED when the PRO3X is rebooted. CIFS/ Snapshots are saved onto a Common Internet File System/Samba.
  • Page 309 The structure of a snapshots folder looks similar to the diagram below. Number Folder name description User-defined parent directory, whose name depends your server settings, such as your FTP configuration. Serial number of your PRO3X device where the webcam is connected. For example, PH85350018.
  • Page 310: Smartlock

    If you have purchased a SmartLock kit with the door handle controller "DX2‑DH2C2", both menu items "SmartLock" and "Card Readers" will appear in the menu after connecting and configuring properly DX2‑DH2C2 and the door handles included in the kit. Note that "SmartLock" appears only when your door handles are connected via DX2‑DH2C2, but "Card Readers"...
  • Page 311 On this page you can: • • View the status of the cabinet door and card reader. Note: Data of "external" USB card readers is shown on the Card Readers page. • • Configure the doors connected to DX2‑DH2C2. You must set this because the types of connected door handles are not automatically detected.
  • Page 312 1) Click Edit Settings in the Settings section. 2) In the 'Door handle type' field, select the door handle type you are using. • If your specific Southco H3-EM model is listed, select it. For all other supported Southco H3-EM •...
  • Page 313 3) Make changes to the remaining fields as needed, then click Save. Section Description Auto Relock • • Specify how long the lock can remain open after someone opens the door handle lock via smart card or remote control without the Time handle being opened during that period.
  • Page 314: Door Status And Control

    Door Status and Control After configuring the door handle type properly, you can see the Status and Card Reader sections. ▶ To view the status of the door and card reader: Section Description Status Shows all sensor states detected by DX2‑DH2C2, including: •...
  • Page 315: Card Readers

    ▶ To control the door: Per default, only one door handle can be opened at the same time so you must close one door before opening another. To increase the upper limit of concurrently opened doors, go to the Peripherals page. 1) Go to the proper door section, and click Open or Close.
  • Page 316 When a user scans a smart card with the card reader, the card's type and ID are retrieved and shown in the corresponding Card Type and Card ID column. If no data is shown in the two columns, it means the scanned card may not be supported by the card reader.
  • Page 317: Using Snmp

    Using SNMP This SNMP section helps you set up the PRO3X for use with an SNMP manager. The PRO3X can be configured to send traps or informs to an SNMP manager, as well as receive GET and SET commands in order to retrieve status and configure some basic settings.
  • Page 318 4) Select 'SNMPv3 trap' or 'SNMPv3 inform' as the notification type. 5) For SNMP TRAPs, the engine ID is prepopulated. 6) Type values in the following fields. Field Description Host The IP address of the device(s) you want to access. This is the address to which notifications are sent by the SNMP agent.
  • Page 319: Snmpv2C Notifications

    Field Description Security level Three types are available. • • noAuthNoPriv - neither authentication nor privacy protocols are needed. • • authNoPriv - only authentication is required. • • authPriv - both authentication and privacy protocols are required. Authentication The three fields are available when the security level is set to AuthNoPriv or authPriv. protocol, •...
  • Page 320: Downloading Snmp Mib

    Field Description Timeout The interval of time, in seconds, after which a new inform communication is resent if the first is not received. • • For example, resend a new inform communication once every 3 seconds. Number of The number of times you want to resend the inform communication if retries it fails.
  • Page 321: Snmp Gets And Sets

    ▶ MIB download via the Device Information page: 1) Choose Maintenance > Device Information. 2) In the Information section, click the desired download link: • PDU2-MIB • • ASSETMANAGEMENT‑MIB • 3) Click Save to save the file onto your computer. SNMP Gets and Sets In addition to sending notifications, the PRO3X is able to receive SNMP get and set requests from third- party SNMP managers.
  • Page 322: Snmp Sets And Thresholds

    For example, the measurementsGroup group contains objects for sensor readings of PRO3X as a whole. One object listed under this group, measurementsUnitSensorValue, is described later in the MIB as "The sensor value". pduRatedCurrent, part of the configGroup group, describes the PDU current rating. SNMP Sets and Thresholds Some objects can be configured from the SNMP manager using SNMP set commands.
  • Page 323: Retrieving Energy Usage

    Tip: To specify the time zone, use the CLI or web interface instead. When using the SNMP SET command to specify or change NTP servers, it is required that both the NTP server's address type and address be set in the command line simultaneously. For example, the SNMP command to change the primary NTP server's address from IPv4 (192.168.84.84) to host name looks similar to the following: snmpset -v2c -c private 192.168.84.84 firstNTPServerAddressType = dns...
  • Page 324: Using The Command Line Interface

    Using the Command Line Interface This section explains how to use the command line interface (CLI) to administer the PRO3X. Note that available CLI commands are model dependent. CLI commands are case sensitive. The CLI can be used to: • •...
  • Page 325: With Ssh Or Telnet

    ▶ To log in using HyperTerminal: 1) Connect your computer to the product via a local connection. 2) Launch HyperTerminal on your computer and open a console window. When the window first opens, it is blank. Make sure the COM port settings use this configuration: •...
  • Page 326: With An Analog Modem

    Then you are prompted to enter a password. 4) Type a password and press Enter. The password is case sensitive. 5) After properly entering the password, the PRO3X name appears at the prompt. Tip: The 'Last login' information, including the date and time, is also displayed if the same user account was used to log in to this product's web interface or CLI.
  • Page 327: Closing A Local Connection

    • • User Mode: When you log in as a normal user, who may not have full permissions to configure the PRO3X, the > prompt appears. • • Administrator Mode: When you log in as an administrator, who has full permissions to configure the PRO3X, the # prompt appears.
  • Page 328: Querying Available Parameters For A Command

    ▶ In the configuration mode: config:# ▶ In the diagnostic mode: diag:# Press Enter after pressing the ? command, and a list of main commands for the current mode is displayed. Querying Available Parameters for a Command If you are not sure what commands or parameters are available for a particular type of CLI command or its syntax, you can have the CLI show them by adding a space and the help command (?) or list command (ls) to the end of that command.
  • Page 329: Automatically Completing A Command

    Automatically Completing a Command A CLI command always consists of several words. You can easily enter a command by typing first word(s) or letter(s) and then pressing Tab or Ctrl+i instead of typing the whole command word by word. ▶ To have a command completed automatically: 1) Type initial letters or words of the desired command.
  • Page 330 ▶ Example 1 - Combination of ETH1's Activation, Configuration Method and IP The following multi-command syntax configures IPv4 address, configuration method and activation status for ETH1's network connectivity simultaneously. config:# network ipv4 interface eth1 enabled true configMethod static address 192.168.84.225/24 Results: •...
  • Page 331: Showing Information

    config:# sensor outlet 5 current upperCritical disable upperWarning enable lowerWarning 1.0 Results: • • The Upper Critical threshold of outlet 5 RMS current is disabled. • • The Upper Warning threshold of outlet 5 RMS current is enabled. • • The Lower Warning threshold of outlet 5 RMS current is set to 1.0A and enabled at the same time.
  • Page 332 Note: In the bridging mode, only the IP parameters of the BRIDGE interface function. The IP parameters of ETH1/ETH2 and WIRELESS interfaces do NOT function. Interface Description eth1 Show the IP-related configuration of the ETH1 interface. eth2 Show the IP-related configuration of the ETH2 interface. wireless Show the IP-related configuration of the WIRELESS interface.
  • Page 333 Variables: • • <ETH> is one of the network interfaces: ETH1/ETH2, WIRELESS, or BRIDGE. Note that you must choose/configure the bridge interface if your PRO3X is set to the bridging mode. Note: In the bridging mode, only the IP parameters of the BRIDGE interface function. The IP parameters of ETH1/ETH2 and WIRELESS interfaces do NOT function.
  • Page 334 Interface Description wireless Show the WIRELESS interface's non-IP settings. bridge Show the BRIDGE interface's non-IP settings. Show the non-IP settings of all interfaces. Tip: You can also type the command without adding this option "all" to get the same data. That is, show network interface.
  • Page 335: Device Configuration

    Device Configuration This command shows the device configuration, such as the device name, firmware version, model type and upper limit of active powered dry contact actuators. The CLI is supported by various Xerus products, so you must insert your specific <device-name> as shown in these commands. •...
  • Page 336: Outlet Group Information

    Displayed information: • • Without the parameter "details," only the outlet name and state are displayed. • • With the parameter "details," more outlet information is displayed in addition to the state, such as rated current, voltage, active power, active energy, and outlet settings. Outlet Group Information This command syntax shows the outlet group information.
  • Page 337: Overcurrent Protector Information

    show inlets <n> details Variables: • • <n> is one of the options: all, or a number. Option Description Displays the information for all inlets. Tip: You can also type the command without adding this option "all" to get the same data. A specific Displays the information for the specified inlet only.
  • Page 338: Date And Time Settings

    Option Description A specific Displays the information for the specified overcurrent overcurrent protector only. protector number Displayed information: • • Without the parameter "details," only the overcurrent protector status and name are displayed. • • With the parameter "details," more overcurrent protector information is displayed in addition to status, such as the rating and RMS current value.
  • Page 339: Environmental Sensor Package Information

    Variables: • • <n> is one of the options: all, or a number. Option Description Displays the information of all environmental sensors. Tip: You can also type the command without adding this option "all" to get the same data. A specific Displays the information for the specified environmental environmental sensor sensor only.
  • Page 340: Actuator Information

    Information similar to the following is displayed. Peripheral Device Package refers to an environmental sensor package. Peripheral Device Package 1 Serial Number: 1GE7A00022 Package Type: DX2-T1H1 Position: Port 1, Chain Position 1 Package State: operational Firmware Version: 33.0 Peripheral Device Package 2 Serial Number: 1GE7A00021 Package Type: DX2-T3H1 Position: Port 1, Chain Position 2...
  • Page 341: Outlet Sensor Threshold Information

    Option Description A specific Displays the information for the specified actuator only. actuator number* * The actuator number is the ID number assigned to the actuator. The ID number can be found using the PRO3X web interface or CLI. It is an integer starting at 1. Displayed information: •...
  • Page 342: Outlet Group Threshold Information

    • • Without the parameter "details," only the sensor reading, state, threshold, deassertion hysteresis and assertion timeout settings of the specified outlet sensor are displayed. • • With the parameter "details," more sensor information is displayed, including resolution and range. •...
  • Page 343: Inlet Pole Sensor Threshold Information

    Variables: • • <n> is the number of the inlet whose sensors you want to query. For a single-inlet PDU, <n> is always 1. • • <sensor type> is one of the following sensor types: Sensor type Description current Current sensor voltage Voltage sensor activePower...
  • Page 344: Overcurrent Protector Sensor Threshold Information

    Pole Label Current sensor Voltage sensor <p> L1 - L2 L2 - L3 L3 - L1 • • <sensor type> is one of the following sensor types: Sensor type Description current Current sensor voltage Voltage sensor activePower Active power sensor apparentPower Apparent power sensor powerFactor...
  • Page 345: Environmental Sensor Threshold Information

    Sensor type Description current Current sensor Displayed information: • • Without the parameter "details," only the reading, state, threshold, deassertion hysteresis and assertion timeout settings of the specified overcurrent protector sensor are displayed. • • With the parameter "details," more sensor information is displayed, including resolution and range. Environmental Sensor Threshold Information This command syntax shows the specified environmental sensor's threshold-related information.
  • Page 346: Environmental Sensor Default Thresholds

    Variables: • • <n> is the environmental sensor number. The environmental sensor number is the ID number assigned to the sensor, which can be found on the Peripherals page of the PRO3X web interface. Displayed information: • • Without the parameter "details," only the reading, threshold, deassertion hysteresis and assertion timeout settings of the specified environmental sensor are displayed.
  • Page 347: Security Settings

    Displayed information: • • Without the parameter "details," only the default upper and lower thresholds, deassertion hysteresis and assertion timeout settings of the specified sensor type are displayed. • • With the parameter "details," the threshold range is displayed in addition to default thresholds settings.
  • Page 348: Existing User Profiles

    ▶ One Radius server's settings: To show the configuration of a specific Radius server, assign the desired Radius server with its sequential number in the command. To get detailed information, add "details" to the end of the command. # show authentication radiusServer <server_num> -- OR-- # show authentication radiusServer <server_num>...
  • Page 349: Existing Roles

    Variables: • • <user_name> is the name of the user whose profile you want to query. The variable can be one of the options: all or a user's name. Option Description This option shows all existing user profiles. Tip: You can also type the command without adding this option "all"...
  • Page 350: Load Shedding Settings

    Displayed information: • • Role settings are displayed, including the role description and privileges. Load Shedding Settings This section applies to outlet-switching capable models only. This command shows the load shedding settings. show loadshedding Displayed information: • • The load shedding state is displayed along with non‑critical outlets. Note: The load shedding mode is associated with critical and non-critical outlets.
  • Page 351: Network Connections Diagnostic Log

    ▶ Show a specific number of last entries associated with a specific type of events only: # show eventlog limit <n> class <event_type> Variables: • • <n> is one of the options: all or a number. Option Description Displays all entries in the event log. An integer Displays the specified number of last entries in the event log.
  • Page 352: Server Reachability Information

    show network diagLog Server Reachability Information This command shows all server reachability information with a list of monitored servers and status. show serverReachability Server Reachability Information for a Specific Server To show the server reachability information for a certain IT device only, use the following command. show serverReachability server <n>...
  • Page 353: Command History

    Command History This command shows the command history for current connection session. show history Displayed information: • • A list of commands that were previously entered in the current session is displayed. Reliability Data This command shows the reliability data. show reliability data Reliability Error Log This command shows the reliability error log.
  • Page 354: Clearing Information

    Clearing Information You can use the clear commands to remove unnecessary data. After typing a "clear" command, press Enter to execute it. Note: Depending on your login name, the # prompt may be replaced by the > prompt. Clearing Event Log This command removes all data from the event log.
  • Page 355: Device Configuration Commands

    ▶ To enter configuration mode: 1) Ensure you have entered administrator mode and the # prompt is displayed. 2) Type config and press Enter. 3) The config:# prompt appears, indicating that you have entered configuration mode. 4) Now you can type any configuration command and press Enter to change the settings. Important: To apply new configuration settings, you must issue the "apply"...
  • Page 356 Setting the Outlet Relay Behavior This section applies to outlet-switching capable models only. This command syntax determines the relay behavior of all outlets on a PRO3X model. config:# pdu relayBehaviorOnPowerLoss <option> Variables: • • <option> is one of the options: latching or nonLatching Setting the Outlet Power-On Sequence This section applies to outlet-switching capable models only.
  • Page 357 Separate outlet numbers and their delay settings with a colon. Outlets followed by delays are separated with a semicolon. Variables: • • <outlet1>, <outlet2>, <outlet3> and the like are individual outlet numbers or a range of outlets using a dash. For example, 3-8 represents outlets 3 to 8. •...
  • Page 358 Variables: • • <timing> is the time of the cycling power-off period in seconds, which is an integer between 0 and 3600, or pduDefined for following the PDU-defined timing. Setting the Inrush Guard Delay Time This section applies to outlet-switching capable models only. This command sets the inrush guard delay.
  • Page 359: Network Configuration Commands

    Variables: • • <outlets1> is one or multiple outlet numbers to be set as critical outlets. Use commas to separate outlet numbers. 3-8 represents outlets 3 to 8. Use a dash for a range of consecutive outlets. For example, • •...
  • Page 360 Configuring IPv4 Parameters An IPv4 configuration command begins with network ipv4. Setting the IPv4 Configuration Mode This command determines the IP configuration mode. config:# network ipv4 interface <ETH> configMethod <mode> Variables: • • <ETH> is one of the network interfaces: ETH1/ETH2, WIRELESS, or BRIDGE. Note that you must choose/configure the bridge interface if your PRO3X is set to the bridging mode.
  • Page 361 Variables: • • <ETH> is one of the network interfaces: ETH1/ETH2, WIRELESS, or BRIDGE. Note that you must choose/configure the bridge interface if your PRO3X is set to the bridging mode. Note: In the bridging mode, only the IP parameters of the BRIDGE interface function. The IP parameters of ETH1/ETH2 and WIRELESS interfaces do NOT function.
  • Page 362 Interface Description eth2 Determine the IPv4 address of the ETH2 interface (that is, wired networking). wireless Determine the IPv4 address of the WIRELESS interface (that is, wireless networking). bridge Determine the IPv4 address of the BRIDGE interface (that is, the bridging mode).
  • Page 363 ▶ Method 1: add a static route when the other network is NOT directly reachable: config:# network ipv4 staticRoutes add <dest-1> nextHop <hop> ▶ Method 2: add a static route when the other network is directly reachable: config:# network ipv4 staticRoutes add <dest-1> interface <ETH> ▶...
  • Page 364 config:# network ipv6 interface <ETH> configMethod <mode> Variables: • • <ETH> is one of the network interfaces: ETH1/ETH2, WIRELESS, or BRIDGE. Note that you must choose/configure the bridge interface if your PRO3X is set to the bridging mode. Note: In the bridging mode, only the IP parameters of the BRIDGE interface function. The IP parameters of ETH1/ETH2 and WIRELESS interfaces do NOT function.
  • Page 365 Variables: • • <ETH> is one of the network interfaces: ETH1/ETH2, WIRELESS, or BRIDGE. Note that you must choose/configure the bridge interface if your PRO3X is set to the bridging mode. Note: In the bridging mode, only the IP parameters of the BRIDGE interface function. The IP parameters of ETH1/ETH2 and WIRELESS interfaces do NOT function.
  • Page 366 Interface Description eth2 Determine the IPv6 address of the ETH2 interface (wired networking). wireless Determine the IPv6 address of the WIRELESS interface (that is, wireless networking). bridge Determine the IPv6 address of the BRIDGE interface (that is, the bridging mode). •...
  • Page 367 ▶ Method 1: add a static route when the other network is NOT directly reachable: config:# network ipv6 staticRoutes add <dest-1> nextHop <hop> ▶ Method 2: add a static route when the other network is directly reachable: config:# network ipv6 staticRoutes add <dest-1> interface <ETH> ▶...
  • Page 368 <suffix1>, <suffix2>, and the like are the DNS suffixes that automatically apply when searching for any device via PRO3X. For example, <suffix1> can be raritan.com, and <suffix2> can be legrand.com. You can specify up to 6 suffixes by separating them with commas.
  • Page 369 config:# network ethernet <ETH> enabled <option> Variables: • • <ETH> is one of the options -- eth1 or eth2. Option Description eth1 ETH1 port eth2 ETH2 port • • <option> is one of the options: true or false. Option Description true The specified network interface is enabled.
  • Page 370 Option Description 1000Mbps The LAN speed is always 1000 Mbps. Changing the LAN Duplex Mode This command determines the LAN interface duplex mode. network ethernet <ETH> duplexMode <mode> config:# Variables: • • <ETH> is one of the options -- eth1 or eth2. Option Description eth1...
  • Page 371 config:# network ethernet <interface> [enabled <enabled>] The following command sets the authentication method for the selected Ethernet interface to either none or Extensible Authentication Protocol (EAP). config:# network ethernet <ETH> authMethod <method> Variables: • • <ETH> is one of the options -- eth1 or eth2. Option Description eth1...
  • Page 372 ▶ Set the EAP identity: config:# network ethernet <ETH> eapIdentity <identity> ▶ Set the EAP password: config:# network ethernet <ETH> eapPassword After performing the above command, the PRO3X prompts you to enter the password. Then type the password and press Enter. ▶...
  • Page 373 ▶ Allow network connection with incorrect system time: config:# network ethernet <ETH> allowConnectionWithIncorrectClock <option3> ▶ Set the RADIUS authentication server for EAP: config:# network ethernet <ETH> eapAuthServerName <FQDN> Variables: • • <ETH> is one of the options -- eth1 or eth2. Option Description eth1...
  • Page 374 Option Description true Always make the network connection successful even though the TLS certificate chain contains any certificate which is outdated or not valid yet. false The network connection is NOT successfully established when the TLS certificate chain contains any certificate which is outdated or not valid yet. •...
  • Page 375 5) Select and copy the contents as illustrated below, including the starting line containing "BEGIN CERTIFICATE" and the ending line containing "END CERTIFICATE." 6) Paste the contents in the terminal. 7) Press Enter. 8) Verify whether the system shows the following command prompt, indicating the provided CA certificate is valid.
  • Page 376 Setting Wireless Parameters You must configure wireless parameters, including Service Set Identifier (SSID), authentication method, Pre-Shared Key (PSK), and Basic Service Set Identifier (BSSID) after the wireless networking mode is enabled. A wireless configuration command begins with network wireless. Note: If wireless networking mode is not enabled, the SSID, PSK and BSSID values are not applied until the wireless networking mode is enabled.
  • Page 377 Variables: • • <method> is one of the authentication methods: PSK or EAP. Method Description The authentication method is set to PSK. The authentication method is set to EAP. None The authentication method is set to None. Setting the PSK If the Pre-Shared Key (PSK) authentication method is selected, you must assign a PSK passphrase by using this command.
  • Page 378 ▶ Set the EAP password: config:# network wireless eapPassword After performing the above command, the PRO3X prompts you to enter the password. Then type the password and press Enter. ▶ Provide a Client Certificate for authentication set to "EAP + TLS" or "EAP + PEAP + TLS": config:# network wireless eapClientCertificate After performing any certificate or private key commands, including commands for the client certificate,...
  • Page 379 ▶ Set the RADIUS authentication server for EAP: config:# network wireless eapAuthServerName <FQDN> Variables: • • <outer_auth> is one of the options: PEAP or TLS. Option Description PEAP Outer authentication is set to Protected Extensible Authentication Protocol (PEAP). Outer authentication is set to TLS. •...
  • Page 380 Option Description false The network connection is NOT successfully established when the PRO3X finds that the TLS certificate is not valid due to incorrect system time. • • <FQDN> is the name of the RADIUS server if it is present in the TLS certificate. The name must match the fully qualified domain name (FQDN) of the host shown in the certificate.
  • Page 381 Mode Description portForwarding The Port Forwarding mode, where every cascaded device in the chain shares the same IP address, with diverse port numbers assigned. Important: When enabling either cascading mode, you must make sure the other cascading mode is disabled, or the preferred cascading mode may not be enabled successfully.
  • Page 382 Setting the HTTP Port The commands used to configure the HTTP port settings begin with network services http. ▶ Change the HTTP port: config:# network services http port <n> ▶ Enable or disable the HTTP port: config:# network services http enabled <option> ▶...
  • Page 383 Variables: • • <n> is a TCP port number between 1 and 65535. The default HTTPS port is 443. • • <option> is one of the options: true or false. Option Description true Forces any access to the PRO3X via HTTP to be redirected to HTTPS. false No HTTP access is redirected to HTTPS.
  • Page 384 ▶ Enabling or Disabling SSH This command enables or disables the SSH service. config:# network services ssh enabled <option> Variables: • • <option> is one of the options: true or false. Option Description true The SSH service is enabled. false The SSH service is disabled.
  • Page 385 Option Description passwordOrPublicKey Enables both the password- and public key-based login. This is the default. If the public key authentication is selected, you must enter a valid SSH public key for each user profile to log in over the SSH connection. Setting the SNMP Configuration You can enable or disable the SNMP v1/v2c or v3 agent, configure the read and write community strings, or set the MIB-II parameters, such as sysContact, using the CLI commands.
  • Page 386 Option Description disable The SNMP v3 protocol is disabled. ▶ Setting the SNMP Read Community This command sets the SNMP read-only community string. config:# network services snmp readCommunity <string> Variables: • • <string> is a string comprising 4 to 64 ASCII printable characters. •...
  • Page 387 Variables: • • <value> is a string comprising 0 to 255 alphanumeric characters. ▶ Setting the sysLocation Value This command sets the SNMP MIB-II sysLocation value. config:# network services snmp sysLocation <value> Variables: <value> is a string comprising 0 to 255 alphanumeric characters. Changing the Modbus Configuration You can enable or disable the Modbus agent, configure its read-only capability, or change its TCP port.
  • Page 388 Option Description true The read-only mode is enabled. false The read-only mode is disabled. ▶ Changing the Modbus Port This command changes the Modbus port. config:# network services modbus port <n> Variables: • • <n> is a TCP port number between 1 and 65535. The default Modbus port is 502. Setting Redfish Service You can enable or disable the redfish service.
  • Page 389: Time Configuration Commands

    Option Description mdns Service advertisement via MDNS is enabled or disabled. llmnr Service advertisement via LLMNR is enabled or disabled. • • <option> is one of the options: enable or disable. Option Description enable Service advertisement via the selected method (MDNS or LLMNR) is enabled.
  • Page 390 ▶ Specify the secondary time server: config:# time ntp secondServer <second_server> ▶ To delete the primary time server: config:# time ntp firstServer "" ▶ To delete the secondary time server: config:# time ntp secondServer "" Variables: • • The <first_server> is the IP address or host name of the primary NTP server. •...
  • Page 391 Setting the Time Zone The CLI has a list of time zones to configure the date and time for PRO3X. config:# time zone After a list of time zones is displayed, type the index number of the time zone or press Enter to cancel. ▶...
  • Page 392: Security Configuration Commands

    ▶ In the administrator/user mode: check ntp ▶ In the configuration mode: config# check ntp Example -Time Configuration This section illustrates several time configuration examples. ▶ Example 1 - Time Setup Method The following command sets the date and time settings by using the NTP servers. config:# time method ntp ▶...
  • Page 393 Firewall Control You can manage firewall control features through the CLI. The firewall control lets you set up rules that permit or disallow access to the PRO3X from a specific or a range of IP addresses. • • An IPv4 firewall configuration command begins with security ipAccessControl ipv4. •...
  • Page 394 Variables: • • <option> is one of the options: true or false. Option Description true Enables the IP access control feature. false Disables the IP access control feature. • • <policy> is one of the options: accept, drop or reject. Option Description accept Accepts traffic from all IP addresses.
  • Page 395 config:# security ipAccessControl ipv4 rule add <direction> <insert> <rule_number> <ip_mask> <policy> • • IPv6 commands ▶ Add a new rule to the bottom of the IPv6 rules list: config:# security ipAccessControl ipv6 rule add <direction> <ip_mask> <policy> ▶ Add a new IPv6 rule by inserting it above or below a specific rule: config:# security ipAccessControl ipv6 rule add <direction>...
  • Page 396 Option Description insertAbove Inserts the new rule above the specified rule number. Then: new rule's number = the specified rule number insertBelow Inserts the new rule below the specified rule number. Then: new rule's number = the specified rule number + 1 •...
  • Page 397 ▶ Modify an IPv6 rule's policy: config:# security ipAccessControl ipv6 rule modify <direction> <rule_number> policy <policy> ▶ Modify all contents of an IPv6 existing rule: config:# security ipAccessControl ipv6 rule modify <direction> <rule_number> ipMask <ip_mask> policy <policy> Variables: • • <direction>...
  • Page 398 ▶ IPv6 commands config:# security ipAccessControl ipv6 rule delete <direction> <rule_number> Variables: • • <direction> is one of the options: in or out. Direction Description Inbound traffic. Outbound traffic. • • <rule_number> is the number of the existing rule that you want to remove. Restricted Service Agreement The CLI command used to set the Restricted Service Agreement feature begins with security restrictedServiceAgreement,...
  • Page 399 Do either of the following, or the login fails: • • In the web interface, select the checkbox labeled "I understand and accept the restricted service agreement." Tip: To select the agreement checkbox using the keyboard, first press Tab to go to the checkbox and then Enter.
  • Page 400 Login Limitation The login limitation feature controls login-related limitations, such as password aging, simultaneous logins using the same user name, and the idle time permitted before forcing a user to log out. A login limitation command begins with security loginLimits. Single Login Limitation This command enables or disables the single login feature, which controls whether multiple logins using the same login name simultaneously is permitted.
  • Page 401 Variables: • • <value> is a numeric value in days set for the password aging interval. The interval ranges from 7 to 365 days. Idle Timeout This command determines how long a user can remain idle before that user is forced to log out of the PRO3X web interface or CLI.
  • Page 402 config:# security strongPasswords enabled <option> Variables: • • <option> is one of the options: true or false. Option Description true Enables the strong password feature. false Disables the strong password feature. Minimum Password Length This command determines the minimum length of the password. config:# security strongPasswords minimumLength <value>...
  • Page 403 Option Description disable No lowercase character is required. Uppercase Character Requirement This command determines whether a strong password includes at least a uppercase character. config:# security strongPasswords enforceAtLeastOneUpperCaseCharacter <option> Variables: • • <option> is one of the options: enable or disable. Option Description enable...
  • Page 404 Option Description enable At least one special character is required. disable No special character is required. Maximum Password History This command determines the number of previous passwords that CANNOT be repeated when changing the password. config:# security strongPasswords passwordHistoryDepth <value> Variables: •...
  • Page 405 ▶ Determine the IPv6 role-based access control policy: config:# security roleBasedAccessControl ipv6 defaultPolicy <policy> Variables: • • <option> is one of the options: true or false. Option Description true Enables the role-based access control feature. false Disables the role-based access control feature. •...
  • Page 406 ▶ Add a new IPv4 rule by inserting it above or below a specific rule: config:# security roleBasedAccessControl ipv4 rule add <start_ip> <end_ip> <role> <policy> <insert> <rule_number> • • IPv6 commands ▶ Add a new rule to the bottom of the IPv6 rules list: config:# security roleBasedAccessControl ipv6 rule add <start_ip>...
  • Page 407 Modifying a Role-Based Access Control Rule Depending on what to modify in an existing rule, the command syntax varies. • • IPv4 commands ▶ Modify a rule's IPv4 address range: config:# security roleBasedAccessControl ipv4 rule modify <rule_number> startIpAddress <start_ip> endIpAddress <end_ip> ▶...
  • Page 408 ▶ Modify an IPv6 rule's policy: config:# security roleBasedAccessControl ipv6 rule modify <rule_number> policy <policy> ▶ Modify all contents of an existing IPv6 rule: config:# security roleBasedAccessControl ipv6 rule modify <rule_number> startIpAddress <start_ip> endIpAddress <end_ip> role <role> policy <policy> Variables: •...
  • Page 409 Variables: • • <rule_number> is the number of the existing rule that you want to remove. Enabling or Disabling Front Panel Outlet Switching This section applies to outlet-switching capable models only. The following CLI commands control whether you can turn on or off an outlet by operating the front panel display.
  • Page 410: Outlet Configuration Commands

    Enabling or Disabling Front Panel Beeper-Sound Control The following CLI commands control whether you can mute the internal beeper by operating the front panel LCD display when the beeper sounds. ▶ To enable the front panel beeper sound control feature: config:# security frontPanelPermissions add muteBeeper ▶...
  • Page 411: Outlet Group Configuration Commands

    Variables: • • <n> is the number of the outlet that you want to configure. • • <option> is one of the options: off, on, lastKnownState and pduDefined. Option Description Turn off the outlet. Turn on the outlet. lastKnownState Restore the outlet to the state prior to last PDU power down. pduDefined PDU-defined setting.
  • Page 412 Creating an Outlet Group This command creates a new outlet group. config:# outletgroup add "<name>" <members> Variables: • • <name> is a string comprising up to 64 ASCII printable characters. The <name> variable must be enclosed in quotes when it contains spaces. Tip: PRO3X allows you to assign the same name to diverse outlet groups.
  • Page 413 Variables: • • <ID> is an outlet group's index number. • • <name> is a string comprising up to 64 ASCII printable characters. The <name> variable must be enclosed in quotes when it contains spaces. • • <members> is one or multiple member outlets' index numbers separated with commas. If the member outlets are consecutive outlets, you can type a hyphen between the initial and the final index number instead of using commas.
  • Page 414: Inlet Configuration Commands

    If you entered the command without "/y", a message appears, prompting you to confirm the operation. Then: • • Type y to confirm the operation, OR Type n to abort the operation Variables: • • <ID> is an outlet group's index number. Inlet Configuration Commands An inlet configuration command begins with inlet.
  • Page 415: Overcurrent Protector Configuration Commands

    Option Description false The specified inlet is disabled. Note: If performing this command causes all inlets to be disabled, a warning message appears, prompting you to confirm. When this occurs, press y to confirm or n to cancel the operation. Example - Inlet Naming The following command assigns the name "AC source"...
  • Page 416 config:# user create <name> <option> <roles> After performing the user creation command, the PRO3X prompts you to assign a password to the newly‑created user. Then: 1) Type the password and press Enter. 2) Re-type the same password for confirmation and press Enter. Variables: •...
  • Page 417 1) Verify that you have entered the configuration mode. 2) Type the following command to change the password for the user profile "May." config:# user modify May password 3) Type a new password when prompted, and press Enter. 4) Type the same new password and press Enter. 5) If the password change is completed successfully, the config:# prompt appears.
  • Page 418 Variables: • • <name> is the name of the user whose settings you want to change. • • <option> is one of the options: true or false. Option Description true Enables the specified user profile. false Disables the specified user profile. Forcing a Password Change This command determines whether the password change is forced when a user logs in to the specified user profile next time.
  • Page 419 ▶ Determine whether the authentication passphrase is identical to the password: config:# user modify <name> userPasswordAsAuthenticationPassphrase <option3> ▶ Determine the authentication passphrase: config:# user modify <name> authenticationPassPhrase After performing the above command, the system prompts you to enter the authentication passphrase. ▶...
  • Page 420 Option Description disable Disables the SNMP v3 access permission for the specified user. • • <option2> is one of the options: noAuthNoPriv, authNoPriv or authPriv. Option Description noAuthNoPriv No authentication and no privacy. authNoPriv Authentication and no privacy. authPriv Authentication and privacy. •...
  • Page 421 Option Description DES privacy protocol is applied. AES‑128 AES‑128 privacy protocol is applied. AES‑192 AES‑192 privacy protocol is applied. AES‑256 AES‑256 privacy protocol is applied. AES‑192 (3DES key extension) AES‑192 privacy protocol is applied. AES‑256 (3DES key extension) AES‑256 privacy protocol is applied. •...
  • Page 422 ▶ Set the preferred pressure unit: config:# user modify <name> preferredPressureUnit <option3> Variables: • • <name> is the name of the user whose settings you want to change. • • <option1> is one of the options: C or F. Option Description This option displays the temperature in Celsius.
  • Page 423 a. Open your SSH public key with a text editor. b. Copy all contents in the text editor. c. Paste the contents into the terminal. d. Press Enter. ▶ To remove an existing SSH public key: 1) Type the same command as shown above. 2) When the system prompts you to input the contents, press Enter without typing or pasting anything.
  • Page 424 1) Verify that you have entered the configuration mode. 2) Type the following command and press Enter. config:# password 3) Type the existing password and press Enter when the following prompt appears. Current password: 4) Type the new password and press Enter when the following prompt appears. Enter new password: 5) Re-type the new password for confirmation and press Enter when the following prompt appears.
  • Page 425: Role Configuration Commands

    Option Description meter This option displays the length or height in meters. feet This option displays the length or height in feet. • • <option3> is one of the options: pascal or psi. Option Description pascal This option displays the pressure value in Pascals (Pa). This option displays the pressure value in psi.
  • Page 426 Privilege Description acknowledgeAlarms Acknowledge Alarms adminPrivilege Administrator Privileges changeAssetStripConfiguration Change Asset Strip Configuration changeAuthSettings Change Authentication Settings changeDataTimeSettings Change Date/Time Settings changeExternalSensorsConfiguration Change Peripheral Device Configuration changeModemConfiguration Change Modem Configuration changeNetworkSettings Change Network Settings changePassword Change Own Password changePduConfiguration Change Pdu, Inlet, Outlet & Overcurrent Protector Configuration changeSecuritySettings Change Security Settings...
  • Page 427 Privilege Description viewWebcamSettings View Webcam Snapshots and Configuration * The "switchActuator" privilege requires an argument that is separated with a colon. The argument could be: • • All actuators, that is, switchActuator:all • • An actuator's ID number. For example: switchActuator:1 switchActuator:2 switchActuator:3...
  • Page 428 ▶ Modify a role's description: config:# role modify <name> description "<description>" ▶ Add more privileges to a specific role: config:# role modify <name> addPrivileges <privilege1>;<privilege2>;<privilege3>... If a specific privilege contains any arguments, add a colon and the argument(s) after that privilege.
  • Page 429: Authentication Commands

    • • <name> is a string comprising up to 32 ASCII printable characters. • • <description> is a description comprising alphanumeric characters. The <description> variable must be enclosed in quotes when it contains spaces. • • <privilege1>, <privilege2>, <privilege3> and the like are names of the privileges assigned to the role. Separate each privilege with a semi-colon.
  • Page 430 ▶ Determine the authentication type and enable/disable the option of switching to local authentication: config:# authentication type <option1> useLocalIfRemoteUnavailable <option2> Note: You cannot enable or disable the option of switching to local authentication without determining the authentication type in the CLI. Therefore, always type "authentication type <option1>" when setting up "useLocalIfRemoteUnavailable".
  • Page 431 ▶ Add a new LDAP server: config:# authentication ldap add <host> <port> <ldap_type> <security> <bind_type> <base_DN> <login_name_att> <user_entry_class> "Optional Parameters" Note: "Optional Parameters" refer to one or multiple parameters listed in the section Optional Parameters. They are required only when your server settings need to specify these parameters. For example, if setting the <bind_type>...
  • Page 432 Type Description Enable the Bind with authentication. authenticatedBind Bind DN and password are required. • • <base_DN> is the base DN for search. • • <login_name_att> is the login name attribute. • • <user_entry_class> is the User Entry Object Class. Optional Parameters You can add one or multiple "optional parameters", such as specifying the Bind DN or certificate upload, to an LDAP-server-adding command as illustrated below.
  • Page 433 • • <filter> is the user search subfilter you specify. • • <bind_DN> is bind DN. • • <AD_domain> is the Active Directory Domain. • • <verify_cert> is one of the options: true or false. Option Description Enable the verification of the LDAP server certificate. true Disable the verification of the LDAP server certificate.
  • Page 434 config:# authentication ldap add ldap.raritan.com 389 openldap startTls ... inetOrgPerson verifyServerCertificate true b. The system now prompts you to enter the certificate's content. c. Type or copy the certificate's content in the CLI and press Enter. Note: Select and copy the content including the starting line containing "BEGIN CERTIFICATE" and the ending line containing "END CERTIFICATE."...
  • Page 435 Variables: • • <server_num> is the sequential number of the specified server in the LDAP server list. • • Replace "parameters" with one or multiple commands in the following table, depending on which parameter(s) you want to modify. ▶ Parameters: Parameters Description host <host>...
  • Page 436 Parameters Description verifyServerCertificate Enable or disable the certificate verification. <verify_cert> • • <verify_cert> enables or disables the certificate verification feature. • • Available values include: true, false certificate Re-upload a different certificate. a. First add the "certificate" parameter to the command, and press Enter. b.
  • Page 437 config:# authentication ldap delete <server_num> Variables: • • <server_num> is the sequential number of the specified server in the LDAP server list. Radius Settings All Radius-related commands begin with authentication radius. If you enable Radius authentication, you must add at least one Radius server. Later you can modify or delete any existing Radius server as needed.
  • Page 438 ▶ Example: config:# authentication radius add 192.168.7.99 chap 1812 1813 10 3 Modifying an Existing Radius Server You can modify one or multiple parameters of an existing Radius server, or change the priority or sequence of existing servers in the server list. ▶...
  • Page 439: Environmental Sensor Configuration Commands

    ▶ Change the priority of the specified server: config:# authentication radius modify <server_num> sortPositon <position> Tip: You can add more than one parameters to the command. For example, "authentication radius modify <server_num> host <host> authType <rds_type> authPort <auth_port> accountPort <acct_port> ...". Variables: •...
  • Page 440 Changing the Sensor Name This command names an environmental sensor. config:# externalsensor <n> name "<name>" Variables: • • <n> is the ID number of the environmental sensor that you want to configure. The ID number is available in the web interface or using the command "show externalsensors <n>" in the CLI.
  • Page 441 Variables: • • <n> is the ID number of the environmental sensor that you want to configure. The ID number is available in the PRO3X web interface or using the command "show externalsensors <n>" in the CLI. It is an integer starting at 1. •...
  • Page 442 config:# externalsensor <n> description "<description>" Variables: • • <n> is the ID number of the environmental sensor that you want to configure. The ID number is available in the web interface or using the command "show externalsensors <n>" in the CLI.
  • Page 443: Configuring Environmental Sensors' Default Thresholds

    Variables: • • <n> is the ID number of the environmental sensor that you want to configure. The ID number is available in the PRO3X web interface or using the command "show externalsensors <n>" in the CLI. It is an integer starting at 1. •...
  • Page 444 ▶ Set the Default Assertion Timeout for a specific sensor type: config:# defaultThresholds <sensor type> assertionTimeout <as_value> Variables: • • <sensor type> is one of the following numeric sensor types: Sensor types Description absoluteHumidity Absolute humidity sensors relativeHumidity Relative humidity sensors temperature Temperature sensors airPressure...
  • Page 445: Sensor Threshold Configuration Commands

    Example - Default Upper Thresholds for Temperature It is assumed that your preferred measurement unit for temperature is set to degrees Celsius. Then the following command sets the default Upper Warning threshold to 20 and Upper Critical threshold to for all temperature sensors. config:# defaultThresholds temperature upperWarning 20 upperCritical 24 Sensor Threshold Configuration Commands...
  • Page 446 ▶ Set the Lower Critical threshold for an outlet sensor: config:# sensor outlet <n> <sensor type> lowerCritical <option> ▶ Set the Lower Warning threshold for an outlet sensor: config:# sensor outlet <n> <sensor type> lowerWarning <option> ▶ Set the deassertion hysteresis for an outlet sensor: config:# sensor outlet <n>...
  • Page 447 Option Description disable Disables the specified threshold for a specific outlet sensor. A numeric value Sets a value for the specified threshold of a specific outlet sensor and enables this threshold at the same time. • • <hy_value> is a numeric value that is assigned to the hysteresis for the specified outlet sensor. See "To De-assert"...
  • Page 448 ▶ Set the assertion timeout for an outlet group sensor: config:# sensor outletgroup <ID> <sensor type> assertionTimeout <as_value> Variables: • • <ID> is an outlet group's index number. • • <sensor type> is one of the following sensor types: Sensor type Description activePower An outlet group's active power sensor...
  • Page 449 ▶ Set the Upper Warning threshold for an inlet sensor: config:# sensor inlet <n> <sensor type> upperWarning <option> ▶ Set the Lower Critical threshold for an inlet sensor: config:# sensor inlet <n> <sensor type> lowerCritical <option> ▶ Set the Lower Warning threshold for an inlet sensor: config:# sensor inlet <n>...
  • Page 450 Note: If the requested sensor type is not supported, the "Sensor is not available" message is displayed. • • <option> is one of the options: enable, disable or a numeric value. Option Description enable Enables the specified threshold for a specific inlet sensor. disable Disables the specified threshold for a specific inlet sensor.
  • Page 451 ▶ Set the Inlet Pole's Deassertion Hysteresis: config:# sensor inletpole <n> <p> <sensor type> hysteresis <hy_value> ▶ Set the Inlet Pole's Assertion Timeout: config:# sensor inletpole <n> <p> <sensor type> assertionTimeout <as_value> Variables: • • <n> is the number of the inlet whose pole sensors you want to configure. For a single-inlet PDU, <n> is always 1.
  • Page 452 Option Description enable Enables the specified threshold for the specified inlet pole sensor. disable Disables the specified threshold for the specified inlet pole sensor. A numeric Sets a value for the specified threshold of the specified inlet value pole sensor and enables this threshold at the same time. •...
  • Page 453 ▶ Set the assertion timeout for an overcurrent protector: config:# sensor ocp <n> <sensor type> assertionTimeout <as_value> ▶ Set the residual current sensor parameters config:# sensor ocp <n> residualCurrent|residualDCCurrent upperCritical|upperWarning|lowerWarning|lowerCritical| hysteresis|assertionTimeout <as_value> Variables: • • <n> is the number of the overcurrent protector that you want to configure. •...
  • Page 454 ▶ Set the Upper Critical threshold for an environmental sensor: config:# sensor externalsensor <n> <sensor type> upperCritical <option> ▶ Set the Upper Warning threshold for an environmental sensor: config:# sensor externalsensor <n> <sensor type> upperWarning <option> ▶ Set the Lower Critical threshold for an environmental sensor: config:# sensor externalsensor <n>...
  • Page 455: Actuator Configuration Commands

    Sensor types Description airPressure Air pressure sensors airFlow Air flow sensors vibration Vibration sensors Note: If the specified sensor type does not match the type of the specified environmental sensor, this error message appears: "Specified sensor type 'XXX' does not match the sensor's type (<sensortype>),"...
  • Page 456 ▶ Set the Y coordinate: config:# actuator <n> ylabel "<coordinate>" ▶ Set the Z coordinate: config:# actuator <n> zlabel "<z_label>" ▶ Modify the actuator's description: config:# actuator <n> description "<description>" Variables: • • <n> is the ID number assigned to the actuator. The ID number can be found using the web interface or CLI.
  • Page 457: Server Reachability Configuration Commands

    Server Reachability Configuration Commands You can use the CLI to add or delete an IT device, such as a server, from the server reachability list, or modify the settings for a monitored IT device. A server reachability configuration command begins with serverReachability.
  • Page 458 You can find each IT device's sequence number using the CLI command of show serverReachability as illustrated below. Modifying a Monitored Device's Settings The command to modify a monitored IT device's settings begins with serverReachability modify. You can modify various settings for a monitored device at a time. ▶...
  • Page 459 ▶ Modify the wait time after an unsuccessful ping: config:# serverReachability modify <n> waitTimeAfterUnsuccessfulPing <fail_wait> ▶ Modify the wait time before resuming pinging after declaring "Unreachable": config:# serverReachability modify <n> waitTimeBeforeResumingPinging <resume> ▶ Modify the number of consecutive "Unreachable" declarations before disabling the ping monitoring feature: config:# serverReachability modify <n>...
  • Page 460: Peripheral Devices Configuration Commands

    Example - Server Settings Changed The following command modifies several ping monitoring settings for the second server in the server reachability list. config:# serverReachability modify 2 numberOfSuccessfulPingsToEnable 10 numberOfUnsuccessfulPingsForFailure 8 waitTimeAfterSuccessfulPing 30 Peripheral Devices Configuration Commands You can use the CLI to set the Z Coordinate format for external sensors, set the device altitude, enable/ disable device auto management, set the active powered dry contact limit, and enable/disable the "mute other door handle"...
  • Page 461: Serial Port Configuration Commands

    enable / disable Enter one of these values activePoweredDryContactLimit Keyword You need either 'Change Peripheral Device Configuration' privilege or 'Administrator Privileges'. number2 Enter an integer An "active" actuator is turned ON, or, if with a number from 0 - 24. door handle connected, is OPENED.
  • Page 462 ▶ Determine the CONSOLE baud rate: config:# serial consoleBaudRate <baud_rate> Note: The serial port bit-rate change is required when the PRO3X works in conjunction with Raritan's Dominion LX KVM switch. Dominion LX only supports 19200 bps for communications over the serial interface.
  • Page 463: Load Shedding Configuration Commands

    config:# serial consoleBaudRate 9600 Load Shedding Configuration Commands This section applies to outlet-switching capable models only. A load shedding configuration command begins with loadshedding. Unlike other CLI configuration commands, the load shedding configuration command is performed in the administrator mode rather than the configuration mode. Enabling or Disabling Load Shedding This section applies to outlet-switching capable models only.
  • Page 464: Power Control Operations

    Power Control Operations This section applies to outlet-switching capable models only. Outlets can be turned on or off, or power cycled through the CLI. You can also cancel the power-on process while the system is powering on ALL outlets. You must perform this operation in the administrator mode. Turning On the Outlet(s) This section applies to outlet-switching capable models only.
  • Page 465 Option Description A range of outlets with Switches ON multiple, consecutive outlets. a hyphen in between For example, to specify 6 consecutive outlets -- 3, 4, 5, 6, 7, 8, type: outlets 3-8. If you entered the command without "/y", a message appears, prompting you to confirm the operation. Then: •...
  • Page 466 Option Description A comma- separated Switches OFF multiple, inconsecutive or consecutive list of outlets outlets. For example, to specify 7 outlets -- 2, 4, 9, 11, 12, 13 and 15, type: outlets 2,4,9,11-13,15. A range of outlets with Switches OFF multiple, consecutive outlets. a hyphen in between For example, to specify 6 consecutive outlets -- 3, 4, 5, 6, 7, 8, type:...
  • Page 467 Option Description A comma- separated Power cycles multiple, inconsecutive or consecutive list of outlets outlets. For example, to specify 7 outlets -- 2, 4, 9, 11, 12, 13 and 15, type: outlets 2,4,9,11-13,15. A range of outlets with Power cycles multiple, consecutive outlets. a hyphen in between For example, to specify 6 consecutive outlets -- 3, 4, 5, 6, 7, 8, type:...
  • Page 468: Actuator Control Operations

    # power outlets 2,6-8,10,13-16 cycle Actuator Control Operations An actuator, which is connected to a dry contact signal channel of a sensor package, can control a mechanism or system. You can switch on or off that mechanism or system through the actuator control command in the CLI.
  • Page 469: Unblocking A User

    Variables: • • <n> is an actuator's ID number. The ID number is available in the PRO3X web interface or using the show command in the CLI. It is an integer starting at 1. If you entered the command without "/y", a message appears, prompting you to confirm the operation. Then: •...
  • Page 470: Resetting Energy Readings

    ▶ To restart the PRO3X: 1) Ensure you have entered administrator mode and the # prompt is displayed. 2) Type either of the following commands to restart the PRO3X. reset unit -- OR -- reset unit /y 3) If you entered the command without "/y" in Step 2, a message appears prompting you to confirm the operation.
  • Page 471: Resetting To Factory Defaults

    ▶ To reset one outlet's energy readings: reset energy outlet <outlet_n> -- OR -- reset energy outlet <outlet_n> /y ▶ To reset one outlet group's energy readings: reset energy outletgroup <ID> -- OR -- reset energy outletgroup <ID> /y If you entered the command without "/y", a message appears prompting you to confirm the operation. Type y to confirm the reset or n to abort it.
  • Page 472: Network Troubleshooting In Diagnostic Mode

    ▶ To reset PRO3X settings after login, use either command: reset factorydefaults -- OR -- reset factorydefaults /y ▶ To reset PRO3X settings before login: Username: factorydefaults See Using the CLI Command for details. Note: Device reset will cause CLI communications over an "USB" connection to be lost. Therefore, re- connect the USB cable after the reset is complete.
  • Page 473: Showing Network Connections

    diag> nslookup <host> Variables: • • <host> is the name or IP address of the host whose DNS information you want to query. Showing Network Connections This command syntax displays network connections and/or status of ports. diag> netstat <option> Variables: •...
  • Page 474: Tracing The Route

    Options Description timeout Determines the waiting period before timeout. <number3> is <number3> an integer number in seconds ranging from 1 to 600. The command looks like the following when it includes all options: diag> ping <host> count <number1> size <number2> timeout <number3> Tracing the Route This command syntax traces the network route between your PRO3X and a network host.
  • Page 475 ▶ Step 1: Set up the ping monitoring for the target PDU 1) Choose Device Settings > Server Reachability. 2) Click 3) Ensure the "Enable ping monitoring for this server" checkbox is selected. 4) Enter the data shown below. • Enter the server's data. •...
  • Page 476 Field/setting Data specified Rule name Send SNMP notifications for PDU (192.168.84.95) inaccessibility Event Choose Server Monitoring > 192.168.84.95 > Unreachable Trigger condition Select the Unreachable radio button This will make the PRO3X react only when the target PDU becomes inaccessible. 5) Select the System SNMP Notification Action.
  • Page 477 Index 802.1x Security Overview 160 Backup and Restore of Device Settings 296 Before You Begin 14 Best Practices for Cascading 33 A Note about Firmware Upgrade Time 291 Built-in Rules and Rule Configuration 214 A Note about Infinite Loop 264 Bulk Configuration Restrictions 293 A Note about Untriggered Rules 265 About the Link ID 42...
  • Page 478 Checking the Accessibility of NTP Servers 391 Connecting to Your Network 21 Checking the Branch Circuit Rating 15 Control Buttons 67 Circuit Breakers 73 Controlling Outlets in Groups 56 Cisco ISE Xerus TACACS+ Authentication Copying an Existing Authentication Server's Settings 434 Clearing Diagnostic Log for Network Connections Creating a CSR 195 Clearing Event Log 354...
  • Page 479 Device Settings 157 Environmental Sensor Default Thresholds 346 Diagnostic Log for Network Connections 169 Environmental Sensor Information 338 Different CLI Modes and Prompts 326 Environmental Sensor Package Information 339 Displays for Primary and Link Units 59 Environmental Sensor Threshold Information 345 Door Access Control 210 Ethernet (Wired) Interface Settings 160 Door Status and Control 314...
  • Page 480 Log Rows 270 Logging in to CLI 324 Identifying Snapshots Folders on Remote Servers Logging out of CLI 327 Identifying the Sensor Position and Channel 139 Login and Logout 77 Idle Timeout 401 Login Limitation 400 If Switchable Outlet Groups are Limited 124 Login, Logout and Password Change 77 Illustrations of Adding LDAP Servers 433 Lowercase Character Requirement 402...
  • Page 481 Mounting Zero U Models Using Two Rear Buttons Password Aging 400 Password Aging Interval 400 Multi-Command Syntax 329 PDU 93 Performing Bulk Configuration 294 Peripheral Devices Configuration Commands 460 Network Configuration 331 Peripheral Devices Settings 352 Network Configuration Commands 359 Peripherals Page 58 Network Connections Diagnostic Log 351 Placeholders for Custom Messages 255...
  • Page 482 Reliability Data 353 Sending Links to Snapshots or Videos 304 Reliability Error Log 353 Sensor Descriptors for Inlet Active Power 269 Reliability Hardware Failures 353 Sensor Log 269 Re-linking a Link Unit 48 Sensor Threshold Configuration Commands 445 Removing an Existing LDAP Server 436 Sensor Threshold Settings Removing an Existing Radius Server 439 Sensor/Actuator Location Example: X, Y, Z...
  • Page 483 Setting the IPv6 Configuration Mode 363 Specifying the Agreement Contents 399 Setting the IPv6 Gateway 366 Specifying the CC Sensor Type 440 Setting the IPv6 Preferred Host Name 364 Specifying the SSH Public Key 422 Setting the LAN MTU 370 Start or Stop a Lua Script 249 Setting the Outlet Initialization Delay 358 Static Route Examples 170...
  • Page 484 User Configuration Commands 415 User Interfaces Showing Default Units 157 User Management 148 Using Default Thresholds 442 Using Prometheus and Grafana 285 Using SNMP 317 Using the Command Line Interface 324 Using the Hardware Features 63 Using the Web Interface 77 Viewing Connected Users 288 Viewing Firmware Update History 292 Viewing Link Unit Information 48...

Table of Contents