Hide thumbs Also See for OmniView:

Advertisement

Quick Links

OmniView
Serial
®
Console Server

User Manual

F1DP116Sea

Advertisement

Table of Contents
loading

Summary of Contents for Belkin OmniView

  • Page 1: User Manual

    OmniView Serial ® Console Server User Manual F1DP116Sea...
  • Page 2: Table Of Contents

    Table of Contents Product Overview........................1 Introduction ........................1 Package Contents ......................1 Console Server Features ....................2 Equipment Requirements....................3 System Requirements ...................... 3 Unit Display Diagrams ...................... 4 LED Indicators, Button, and Connectors ................. 5 Specifications ........................6 Local Installation ........................7 Desktop or Rack-Mounting ....................
  • Page 3 Table of Contents System Status and Log ......................37 System Status ........................ 37 System Logging ......................37 System Administration ......................39 User Administration ......................39 Add User ........................39 Remove User ......................40 Edit the Access Control List (ACL) ................41 Change Password ....................42 Date and Time (NTP) .....................
  • Page 5: Product Overview

    Product Overview Introduction Thank you for purchasing the Belkin OmniView Serial Console Server (Console Server). This device provides administrators secure monitoring and control of servers, routers, switches, and other serial devices from anywhere on the corporate TCP/IP network, over the Internet, or through dial-up modem connections, even when the server is unavailable through the network.
  • Page 6: Console Server Features

    Product Overview Console Server Features • In-band and out-of-band management Console port management solutions offer remote, reliable, and secure access to serial- console ports through in-band networks and out-of-band connectivity options, such as serial terminal access and dial-up modem. • Manage network devices/servers centrally, remotely, and securely Reliable console-port management solutions allow you to encrypt sensitive data using proven protocols such as SSH/v2, SSL.
  • Page 7: Equipment Requirements

    Product Overview Equipment Requirements • Universal Connectivity Kit (included) • RJ45-RJ45 CAT5 Cable (included) System Requirements Web browser Browser Microsoft Internet Explorer Firefox version 2.0 Operating System version 6.0 SP1 and later and later Windows 2000 SP2 Windows Server 2003 Windows XP Windows Vista Red Hat Linux 3 and 4 Sun Solaris 9 and 10 Novell SUSE Linux 9 and 10 Fedora Core 4 and 5...
  • Page 8: Unit Display Diagrams

    Product Overview Unit Display Diagrams Front/Rear Panel Link LED Fig. 1 Front View Power LED Ready LED Port LEDs Reset but- Fig. 2 Rear View Device ports IEC power LAN port Local console port...
  • Page 9: Led Indicators, Button, And Connectors

    Product Overview LED Indicators, Button, and Connectors Indication Red – power indication Power ON: power is applied Ethernet Link/Act/10/100Mbps: Orange – 10BaseT Ethernet connection established Link Green – 100BaseT Ethernet connection established Blinking: when data in activity ON: when no data in activity and link connected Ready Green –...
  • Page 10: Specifications

    Product Overview Specifications Feature Specification LEDs Power (red) Ready (green, normally blinking), Link/Act/10/100Mbps (Ethernet orange: 10Mbps, green: 100Mbps) General Activity (blue for each serial port) Push button for reset, or restore to default RTC (real-time clock) 16-port (F1DP116S) Serial-port mode (RS232) Serial Interface Serial connector (RJ45) Baud rate (300 to 115200)
  • Page 11: Local Installation

    CAT5 UTP cable between the Console Server and the connected servers does not exceed 50 feet (15m). Cables and Adapters Belkin highly recommends you use Belkin Category 5e, FastCAT5e, or Category 6 Patch Cables for your Console Server to help ensure the signal integrity. Belkin UTP Patch Cables: A3L791-XX-YYY (CAT5e) A3L850-XX-YYY (FastCAT™...
  • Page 12: Desktop Or Rack-Mounting

    Local Installation Desktop or Rack-Mounting The Console Server can be placed on desktops or rack-mounted on 19-inch/1U racks. Note: Before you begin, locate the MAC address and serial number on the back of the Console Server. You may need these numbers later in the installation process, so it is highly recommended that you record these numbers below before mounting the Console Server to your rack.
  • Page 13: Connecting The Target Devices To The Console Server

    Local Installation Connecting the Target Devices to the Console Server 1. Power down the target device(s) that will be connected to your Console Server. 2. Connect the Ethernet cable to the port labeled LAN. 3. Locate the included power cord and plug the appropriate end into the power socket on the rear of the Console Server.
  • Page 14: Network Configuration

    The Console Server offers support for both Dynamic Host Configuration Protocol (DHCP) and static IP addressing. Belkin recommends that an IP address be reserved for the Console Server and that it remains static while connected to the network.
  • Page 15 Network Configuration Note: HTTPS can be used for communication over an encrypted secure socket layer (SSL). When first connecting to the Console Server’s HTTPS configuration page, two browser security warnings may appear. Click “Yes” on both warnings. Login Page Type in the following default user name and password (case-sensitive): User Name Password admin admin There are two levels of access privileges: User Name Default Password Access Privileges...
  • Page 16 Network Configuration Login Click . The web interface will open at the “Connect” page (see below). Main-Connect Page Step 3 Network Configuration Click on “Network” to open the Network-Configuration page (see below). Network-Configuration Page Here you can assign a static IP and other network settings. Click on “Save &...
  • Page 17: Assigning Ip From The Console Port-Vt-100 (Console, Telnet, Ssh)

    1. Connect the console port on the rear panel to a serial port on a PC host using the CAT5 cable and the local console port RJ45/DB9F adapter, included with the Belkin Console Server. 2. Configure a terminal emulation program, such as HyperTerminal, using the following parameters: •...
  • Page 18 Network Configuration The following figure depicts the structure of the interface. Tier 1 menu Product name Software version Tier 2 menu Tier 3 menu Configuration input Navigation input The Menu Layout...
  • Page 19 Network Configuration Network > IP Config The page to the left shows the IP configuration items. 1. For IP mode — You can press the SPACE bar to select Static mode or DHCP mode. 2. For IP Address, Subnet Mask, Default Gateway, Primary DNS, and Secondary DNS — You can change these network settings. 3. After changing the settings and the final enter, the Console Server will prompt you to confirm YES or NO.
  • Page 20: Web-Browser Management Interface

    Network Configuration Note: Only the admin user has the privilege to log in to VT-100. All the other users are not authorized to make configuration with VT-100. Web-Browser Management Interface The Console Server supports both HTTP and HTTPS (HTTP over SSL) protocols. Users must authenticate themselves by logging in to the system with a correct user name and password.
  • Page 21 Network Configuration Where available, the page will allow users to apply or cancel their actions. To apply all changes, select “Apply” and the new values will be applied to the configuration. If you do not want to save the new values, simply click “Cancel” and all changes made will be removed and the previous values restored.
  • Page 22: Network Settings

    Network Settings You can configure the network IP settings via VT-100 or web interface. This section describes configuration through the web interface. IP Configuration The Console Server requires a valid IP address to operate within the user’s network environment. If the IP address is not readily available, contact the system administrator to obtain a valid IP address for the Console Server.
  • Page 23: Ip Filtering

    Network Settings IP Filtering The IP filtering function keeps unauthorized hosts from accessing the Console Server by specifying rules. The IP address/mask specifies the host range by entering the base host IP address followed by “/” and the subnet mask (“/” is a required separator between the IP address and the subnet mask).
  • Page 24 Network Settings When the Console Server receives a TCP packet, it will process the packet with the chain rule depicted below. The process order is important—the packet will enter the chain rule 1 first. If it meets the rule, then it will take action; otherwise, it will go on to chain rule 2. Fig. 4 Chain Rule of IP Filter You can add a new IP filtering rule by setting the properties at the next available add line.
  • Page 25: Web-Server Configuration

    Network Settings After these rules are applied, only the hosts that belong to the subnet 192.168.2.x can access the Console Server (through http port 80). In addition to the IP filter chain rule mentioned above, the web interface also provides a convenient way to enable/disable telnet (port 23) or the web-configuration port (port 80/443).
  • Page 26: Dynamic Dns

    If a user connects the Console Server to a DSL line or uses a DHCP configuration to get a dynamic IP address from the network, the IP address might change. This can make it difficult to know if an IP address has changed, or what the new IP address is. Belkin Serial Console Ethernet Server...
  • Page 27: Radius

    Network Settings Note: The domain-name field requires a Qualified Domain Name (FQDN) instead of just a registered host name. RADIUS Authentication is the process of identifying an individual, usually based on a user name and password. The Console Server supports various authentication options, such as “Local” and “RADIUS”, to authenticate the users who access the serial port.
  • Page 28: Radius-Server Configuration

    Network Settings RADIUS-Server Configuration Note: In order to make RADIUS service effective, a RADIUS server must be installed prior use. HTTPS/SSL The Console Server supports both HTTP and HTTPS (HTTP over SSL) services simultaneously. You can enable or disable security function of each port individually. HTTPS provides a secure, encrypted web interface over SSL (secure sockets layer).
  • Page 29: Serial Ports

    Serial Ports Configuration Under the “Serial” menu heading, click “Configuration” to show the port summary list. Note that if the “Serial Port” is disabled, the “Serial port configuration” panel will display the port in a dark gray font. An enabled serial port will be displayed in a white bold font. Port Authentication Authentication is the process of identifying an individual, usually based on a user name and password.
  • Page 30: Port Enable/Disable

    Serial Ports Port Enable/Disable Each serial port can be individually enabled or disabled. A disabled serial port cannot be accessed by a user. Users can reset the serial port to default settings by clicking the “Set to default” button. Port Title Users can enter descriptive information for each port based on the device attached to it.
  • Page 31: Operation Modes

    Serial Ports Operation Modes The Console Server unit provides four types of operation modes. These are described below. Note: • T he last port (e.g., port 16) can also be used as “External ESP (Entry Serial Port)” in “Serial-to-Serial” operation mode. Refer to the “Serial-to-Serial Function” section for details. Console-Server Mode Configuring a serial port as a console server creates a TCP socket on the unit that listens to a telnet or SSH client connection.
  • Page 32: Terminal-Server Mode

    Serial Ports The following parameters are configurable in console-server mode: Listening TCP Port Number You can also access a serial port through the IP address of the Console Server and the listening TCP port number of the serial port. If the IP address of the Console Server and the serial port are assigned as 192.168.123.100 and the listening TCP port number is 4001, the user can connect to the port as follows: telnet 192.168.123.100 4001 Protocol...
  • Page 33: Dial-In Modem Mode

    Serial Ports In order to terminate a telnet/SSH/RawTCP session in terminal-server mode, you may use these three control-key sequences (Ctrl-Z / Ctrl-X / Ctrl-C). Dial-in Modem Mode In this mode, the Console Server assumes an external modem is attached to the serial port and waits for a dial-in connection from a remote site.
  • Page 34: Port Logging

    Serial Ports Port Logging While in console-server mode, the data received from the tracking serial port will be buffered in the unit’s memory. The “Port logging” feature is valid and visible only if the operation mode of the serial port is configured to console-server mode. If the “Port logging”...
  • Page 35: Break Function

    Serial Ports Click “Port event handling”. The memory buffer size for logging data is 192K per port. If the log data grows larger than the memory size, the new data will overwrite the old data. Break Function In console-server mode, the Console Server is capable of sending a “break” signal to a connected serial device.
  • Page 36: Telnet Java Applet

    Serial Ports Use the hyperlink located at the bottom of the Connect Page to test your Java compatibility. Or use the link below to download the latest Java version. Make sure that you enable your browser’s Java support option and also check your Java Runtime Environment version (known as JRE version).
  • Page 37 Serial Ports 2. Enter the user name and password to log in, so you can start to use it as if you were running a telnet client program (e.g., Telnet DOS program, PuTTY). Note: The active serial port’s name will appear on the window bar. A connection-status indicator will also appear on the lower-right side of the window.
  • Page 38: Serial-To-Serial Function

    Console Server on ports 1 through 15. You may also use an external terminal converter, like the Belkin F1D084Eea, to connect your Console Server to a KVM switch and consolidate the control.
  • Page 39 Serial Ports Note: • I n order to show the following serial-to-serial configuration screen, you need to enable the serial-to-serial function. The default baud rate is fixed as 9600 8N1 (not reconfigurable) in order to get the best compatibility with third-party terminal monitor devices. 5. Choose the port number to which you wish to connect and the screen below will appear. 6.
  • Page 40 Serial Ports The web page also gives read-only settings of the serial-to-serial function; it will automatically change according to the setting change on the VT-100 console. Click “Cancel” to refresh the values.
  • Page 41: System Status And Log

    System Status and Log System Status The “System Status” page lists current system information such as name, serial number, firmware versions, MAC address, current time, and the network settings. Data cannot be changed from this page. This page refreshes automatically every 10 seconds.
  • Page 42: System Logging

    System Status and Log System Logging You may enable or disable the system-logging process and set the log buffer size. The system log buffer’s default value is 50K bytes and can be allocated to up to 300KB maximum. If the logged data grows larger than the pre-allocated buffer size, the new data will overwrite the old data.
  • Page 43: System Administration

    System Administration User Administration At start-up, the system will prompt the user to enter the password to access the system. The administrator can add or remove a user easily via the web pages. There are two levels of access privileges: User Name Default Password Access Privileges...
  • Page 44: Remove User

    System Administration The figure below shows the “Add User” screen. The new user will now appear under the “User Name” list. Remove User To remove a user: • Check the users on the “User administration” screen. • Click the “Remove” button...
  • Page 45: Edit The Access Control List (Acl)

    System Administration Edit the Access Control list (ACL) The Console Server provides ACL (Access Control List) security where you can specify user access discretely by individual ports only, instead of all ports. To edit the ACL: • Check the users on the “User administration” screen. • Click the “Edit” icon. • Enter the user name and password. • Select the port you wish to access. • Click the “Submit” button. Once the user account ACL is set, users can access or make configuration changes to the authorized serial ports only.
  • Page 46: Change Password

    System Administration Change Password To change the parameters of the user account, open the “Edit user” screen by selecting the user name on the “User Configuration” screen and then edit the parameters of the user account such as adding a user. Date and Time (NTP) The Console Server maintains current date and time information.
  • Page 47: Firmware Upgrade

    Firmware Upgrade Firmware can be easily upgraded via a web page. This section describes the upgrade procedures. The latest firmware version is available from www.belkin.com/support. Upgrade from the Web Interface Refer to web page “System > Firmware Upgrade”. Click “Browse” to search the firmware file from the explorer window. Navigate through your PC and select the firmware file.
  • Page 48: Ssl Certificate

    System Administration Warning!!! DO NOT disconnect the power or the Ethernet cable during this upgrading process. Doing so may cause upgrade failure and destroy the image in memory. The Console Server will automatically initiate a self-reboot upon completion of the upgrade process to activate the new firmware. Once the counter expires, the browser will redirect you to the log-in home page.
  • Page 49: Secure Http Certificate

    System Administration Once all certificate files are uploaded, users shall initiate a reboot command manually to make the new certificate effective. Browse prepared CA files (follow the procedure in Appendix E to prepare correctly the three CA files with the same assigned file names), and upload these files to the Console Server. Please double-check each file before uploading.
  • Page 50 System Administration...
  • Page 51 System Administration The other way to tell a secure web connection from an unsafe one is by looking for a lock symbol on your browser (bottom-right corner of Internet Explorer browser). You can double- click on the symbol to examine the detailed information of the server-side certificate. Once you have prepared a publicly signed CA suite of files, upload them from the “SSL Certificate”...
  • Page 52 System Administration...
  • Page 53: Reset To Factory-Default Settings

    System Administration Reset to Factory-Default Settings To roll back to factory-default settings, click on “Apply”. Reboot You can trigger the Console Server to perform a software reboot via the network. The reboot function is mandatory when the CA-certificate upload is complete.
  • Page 54: Technical Data

    Technical Data Default Settings Server Name BelkinSC DHCP Enabled IP Address 192.168.2.156 Net Mask 255.255.255.0 Gateway 192.168.2.1 Serial Number xxxxxxxxx (printed on bottom of unit) MAC Address xx:xx:xx:xx (printed on bottom of unit) Version and Date Current firmware version number and date User Name admin Password admin Protocol (serial) Telnet...
  • Page 55: Appendix A: Adapters

    Appendix A: Adapters F1D120ea (RJ45F–DB9F DTE) DB9 Female DTE Adapter Applications: Bay Accelar, Nortel, etc. Part No: F1D120ea - Single Pack F1D120ea8PK - 8 Pack Adapter Signal RJ45 DB9F 1 (DCD) F1D121ea (RJ45F–DB25F DTE) DB25 Female DTE Adapter Applications: DTE devices such as PC Part No: F1D121ea - Single Pack Adapter Signal...
  • Page 56 Appendix A: Adapters F1D122ea (RJ45F–DB25M DCE) DB25 Male DCE Adapter Applications: Modems Part No: F1D122ea - Single Pack Adapter Signal RJ45 DB25M F1D123ea (RJ45F–DB25M DTE) DB25 Male DTE Adapter Applications: Sun SPARC, etc. Part No: F1D123ea - Single Pack Adapter Signal RJ45 DB25M...
  • Page 57 Appendix A: Adapters F1D124ea (RJ45F–RJ45M CISCO) RJ45 Male Adapter Applications: Sun devices Part No: F1D124ea - Single Pack F1D124ea8PK - 8 Pack Adapter Signal RJ45 RJ45M...
  • Page 58: Appendix B: Ethernet Pin-Outs (Rj45)

    Appendix B: Ethernet Pin-Outs (RJ45) Standard Ethernet Cable RJ45 Pin-Out Description...
  • Page 59: Appendix C: Well-Known Tcp/Udp Port Numbers

    Appendix C: Well-Known TCP/UDP Port Numbers Port numbers are divided into three ranges: Well-Known Ports, Registered Ports, and Dynamic and/or Private Ports. Well-Known Ports are those from 0 through 1023. Registered Ports are those from 1024 through 49151. Dynamic and/or Private Ports are those from 49152 through 65535.
  • Page 60: Appendix D: Protocol Glossary

    Appendix D: Protocol Glossary BOOTP (Bootstrap Protocol) Similar to DHCP, but for smaller networks. Automatically assigns the IP address for a specific duration of time. CHAP (Challenge Handshake Authentication Protocol) A secure protocol for connecting to a system; it is more secure than the PAP. DHCP (Dynamic Host Configuration Protocol) Internet protocol for automating the configuration of computers that use TCP/IP.
  • Page 61 Appendix D: Protocol Glossary NTP (Network Time Protocol) A protocol used to synchronize time on networked computers and equipment. PAP (Password Authentication Protocol) A method of user authentication in which the user name and password are transmitted over a network and compared to a table of name-password pairs. PPP (Point-to-Point Protocol) A protocol for creating and running IP and other network protocols over a serial link.
  • Page 62: Appendix E: Creating Ca Files

    Appendix E: Creating CA Files The Console Server supports secure web-page configuration (aka https). There are two types of certificate files for server-side authentication. • S elf-signed: Users can create the certificate files by themselves. The downside is that the client will be prompted to accept a certificate signed by an authority not known to the browser.
  • Page 63 Appendix E: Creating CA Files ii) Strip passphrase: openssl rsa -in cakey.pem -out cakey-nopassword.pem iii) Combine the key and X.509 certificate files into server.pem: cat cakey-nopassword.pem cacert.pem > server.pem iv) Collect all 3 PEM files and prepare to upload to IPCS server: server.pem , cacert.pem , cakey.pem 2.
  • Page 64: Information

    FCC Statement DECLARATION OF CONFORMITY WITH FCC RULES FOR ELECTROMAGNETIC COMPATIBILITY We, Belkin International, Inc., of 501 West Walnut Street, Compton CA 90220, declare under our sole responsibility that the product: F1DP116S, to which this declaration relates: Complies with Part 15 of the FCC Rules. Operation is subject to the following two conditions: (1) this device may not cause harmful interference, and (2) this device must accept any interference received, including interference that may cause undesired operation.
  • Page 65 Information What will we do to correct problems? Product Warranty. Belkin will repair or replace, at its option, any defective product free of charge (except for shipping charges for the product). What is not covered by this warranty? All above warranties are null and void if the Belkin product is not provided to Belkin for inspection upon Belkin’s request at the sole expense of the purchaser, or if Belkin...
  • Page 66 IN NO EVENT SHALL BELKIN BE LIABLE FOR INCIDENTAL, SPECIAL, DIRECT, INDIRECT, CONSEQUENTIAL OR MULTIPLE DAMAGES SUCH AS, BUT NOT LIMITED TO, LOST BUSINESS OR PROFITS ARISING OUT OF THE SALE OR USE OF ANY BELKIN PRODUCT, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
  • Page 68: Console Server

    France Spain Sweden © 2008 Belkin International, Inc. All rights reserved. All trade names are registered trademarks of respective manufacturers listed. Windows is either a registered trademark or trademark of Microsoft Corporation in the United States and/or other countries. P75598ea...

This manual is also suitable for:

Omniview f1dp116sea

Table of Contents