Download Print this page
Lantronix SLC8 Manager User Manual

Lantronix SLC8 Manager User Manual

Slc console manager
Hide thumbs Also See for SLC8:

Advertisement

SLC™ Console Manager User Guide
SLC8
SLC16
SLC32
SLC48
Revision I November 2013
Part Number 900-449

Advertisement

loading

Summary of Contents for Lantronix SLC8

  • Page 1 SLC™ Console Manager User Guide SLC8  SLC16  SLC32  SLC48  Part Number 900-449 Revision I November 2013...
  • Page 2: Copyright And Trademark

    Copyright and Trademark © 2013 Lantronix, Inc. All rights reserved. No part of the contents of this book may be transmitted or reproduced in any form or by any means without the written permission of Lantronix. Lantronix is a registered trademark of Lantronix, Inc. in the United States and other countries.
  • Page 3: Revision History

    The user is cautioned that changes and modifications made to the equipment without  approval of the manufacturer could void the user’s authority to operate this equipment. Changes or modifications to this device not explicitly approved by Lantronix will void  the user's authority to operate this device.
  • Page 4: Table Of Contents

    Table of Contents Copyright and Trademark ____________________________________________________2 Warranty _________________________________________________________________2 Open Source Software ______________________________________________________2 Contacts _________________________________________________________________2 Disclaimer and Revisions ____________________________________________________2 Revision History ___________________________________________________________3 List of Figures ____________________________________________________________11 List of Tables ____________________________________________________________14 1: About This Guide Chapter Summaries _______________________________________________________15 Conventions _____________________________________________________________17 Additional Documentation ___________________________________________________17 2: Overview SLC Models and Part Numbers ______________________________________________18 System Features __________________________________________________________20...
  • Page 5 4: Quick Setup Recommendations ________________________________________________________30 IP Address _______________________________________________________________30 Front Panel LCD Display and Pushbuttons __________________________________31 Navigating ____________________________________________________________32 Entering the Settings ___________________________________________________32 Restoring Factory Defaults _______________________________________________34 Next Step _______________________________________________________________39 5: Web and Command Line Interfaces Web Interface ____________________________________________________________40 Logging In ____________________________________________________________42 Logging Off ___________________________________________________________42 Web Page Help ________________________________________________________42 Command Line Interface ____________________________________________________42...
  • Page 6 NFS and SMB/CIFS Commands __________________________________________69 Secure Lantronix Network ___________________________________________________69 Secure Lantronix Network Commands ______________________________________72 Date and Time ___________________________________________________________72 Date and Time Commands _______________________________________________74 Web Server ______________________________________________________________74 Web Server Commands _________________________________________________77 Google Gadgets __________________________________________________________77 8: Devices Connection Methods _______________________________________________________79 Permissions ______________________________________________________________80...
  • Page 7 9: PC Cards Set Up of PC Card Storage _________________________________________________118 Modem Settings _________________________________________________________120 PC Card Commands ______________________________________________________126 10: USB Port Set Up of USB Storage ____________________________________________________127 Manage Firmware and Configuration Files _____________________________________129 USB Commands ______________________________________________________130 11: Connections Types of Endpoints and Connections _________________________________________132 Typical Configurations of SLC Connections ____________________________________132 Terminal Server ______________________________________________________132 Remote Access Server _________________________________________________133...
  • Page 8 Imported Keys ________________________________________________________168 Exported Keys _______________________________________________________168 SSH Commands ______________________________________________________173 Custom User Menus ______________________________________________________173 Custom User Menus Commands _________________________________________175 13: Maintenance Firmware and Configurations _______________________________________________177 Firmware and Configurations Commands __________________________________182 System Logs ____________________________________________________________183 System Logs Commands _______________________________________________185 Audit Log _______________________________________________________________185 Audit Log Commands __________________________________________________186 Email Log ______________________________________________________________186 Email Log Commands _________________________________________________186 Diagnostics _____________________________________________________________187...
  • Page 9 Console Port Commands __________________________________________________219 Custom User Menu Commands _____________________________________________219 Date and Time Commands _________________________________________________221 Device Commands _______________________________________________________222 Device Port Commands ___________________________________________________223 Diagnostic Commands ____________________________________________________227 Email Log Commands _____________________________________________________229 Events Commands _______________________________________________________229 Host List Commands ______________________________________________________231 IP Filter Commands ______________________________________________________232 Kerberos Commands _____________________________________________________234 LDAP Commands ________________________________________________________234 Local Users Commands ___________________________________________________235 Log Commands __________________________________________________________238...
  • Page 10 Appendix C: Safety Information Cover __________________________________________________________________266 Power Plug _____________________________________________________________266 Input Supply ____________________________________________________________266 Grounding ______________________________________________________________267 Fuses _________________________________________________________________267 Rack __________________________________________________________________267 Port Connections _________________________________________________________268 Appendix D: Sicherheitshinweise Geräteabdeckung ________________________________________________________269 Netzstecker _____________________________________________________________269 Stromversorgung _________________________________________________________270 Anschluß an die Schutzerde ________________________________________________270 Gerätesicherung _________________________________________________________270 Rack / Einbauschrank _____________________________________________________270 Signalverbindungen ______________________________________________________271 Appendix E: Adapters and Pinouts Appendix F: Protocol Glossary...
  • Page 11: List Of Figures

    List of Figures Figure 2-2 Lantronix SLC48 Console Manager with PC Card Slots __________________________20 Figure 2-3 Lantronix SLC48 Console Manager with USB Port ______________________________20 Figure 2-4 Device Port Connections __________________________________________________22 Figure 2-5 Console Port Connection__________________________________________________23 Figure 2-6 Network Connection _____________________________________________________23...
  • Page 12 Figure 8-2 Device Ports Page _______________________________________________________82 Figure 8-3 Device Ports - Settings Page_______________________________________________84 Figure 8-4 Modem Log ____________________________________________________________91 Figure 8-5 Port Status and Counters Section ___________________________________________92 Figure 8-6 Device Ports - SLP Page __________________________________________________93 Figure 8-7 Device Ports - Sensorsoft _________________________________________________95 Figure 8-8 Device Ports - Logging ___________________________________________________98 Figure 8-9 Console Port Page______________________________________________________102 Figure 8-10 Host Lists Page _______________________________________________________103...
  • Page 13 Figure 13-4 System Log Output Page________________________________________________184 Figure 13-5 Audit Log Page _______________________________________________________185 Figure 13-6 Email Log Page _______________________________________________________186 Figure 13-7 Diagnostics Page______________________________________________________187 Figure 13-8 Diagnostics Report Page ________________________________________________189 Figure 13-9 Status/Reports Page ___________________________________________________191 Figure 13-10 Generated Reports Page_______________________________________________192 Figure 13-11 Events Page ________________________________________________________193 Figure 13-12 Banners Page _______________________________________________________195 Figure 13-13 LCD/Keypad Page ____________________________________________________196 Figure 14-1 SLC Console Manager _________________________________________________198...
  • Page 14: List Of Tables

    List of Tables Table 1-1 Chapter/Appendix and Summary ____________________________________________15 Table 1-2 Conventions Used in This Book _____________________________________________17 Table 2-1 SLC Part Numbers, Models, and Descriptions __________________________________19 Table 3-1 Component Part Numbers and Descriptions ___________________________________25 Table 3-2 Components and Descriptions ______________________________________________26 Table 4-1 Methods of Assigning an IP Address _________________________________________30 Table 4-3 LCD Arrow Pushbutton Actions _____________________________________________32 Table 4-4 Front Panel Setup Options with Associated Parameters __________________________32...
  • Page 15: 1: About This Guide

    This guide provides the information needed to install, configure, and use the products in the Lantronix® SLC™ Console Manager family. It is for IT professionals who must remotely and securely configure and administer servers, routers, switches, telephone equipment, or other devices equipped with a serial port.
  • Page 16 1: About This Guide Table 1-1Chapter/Appendix and Summary (continued) Chapter/Appendix Summary Chapter 10: USB Port Provides instructions for configuring USB storage devices (thumb drive) or USB modems. Chapter 11: Connections Provides instructions for configuring connections and viewing, updating, or disconnecting a connection. Chapter 12: User Provides instructions for enabling or disabling methods that authenticate Authentication...
  • Page 17: Conventions

    SLC Console Manager Online Help for the Web Interface—Provides online help for  configuring the SLC console manager using the web page. Detector™ Online Help—Provides online help for assigning a static IP address to the SLC  console manager using the Lantronix® Detector™ tool. SLC™ Console Manager User Guide...
  • Page 18: 2: Overview

    IT professionals a variety of tools to securely access and manage their resources. Lantronix has been an innovator in this market with terminal servers and secure console servers, as well as other remote access devices. The SLC console managers build on that foundation and offer new features and capabilities.
  • Page 19: Table 2-1 Slc Part Numbers, Models, And Descriptions

    Table 2-1 SLC Part Numbers, Models, and Descriptions Part Number Part Number Model and Description PC Card Slots SLC00812N-03 SLC00812N-02 SLC8: 8 port, Single AC Supply Secure Console Manager SLC01612N-03 SLC01612N-02 SLC16: 16 Port, Single AC Supply Secure Console Manager SLC03212N-03 SLC03212N-02...
  • Page 20: System Features

    2: Overview Figure 2-2 Lantronix SLC48 Console Manager with PC Card Slots Two-line Display Front Panel Pushbuttons Two PC Card Slots RS232 Port 1u Tall Self-Contained Rack-Mountable Chassis Dual DC Power Inputs RS-232 Device Ports Two 10/100 (1 - 48)
  • Page 21: Protocols Supported

    2: Overview Configurable user rights for local and remotely authenticated users  Supports an internal PC Card modem, USB modem, or an external modem  No unintentional break ever sent to attached servers (Solaris Ready)  Simultaneous access on the same port - “listen” and “direct” connect mode ...
  • Page 22: Hardware Features

    5: Adapters and Pinouts on page 272. Note: RJ45 to DB9/DB25 adapters are available from Lantronix. Device ports and the console port support eight baud-rate options: 300, 600, 1200, 2400, 4800, 9600, 19200, 38400, 57600, and 115200 baud. The ports are shown in...
  • Page 23: Network Connections

    This PC Card interface is only supported on SLC -02 part numbers. The SLC console manager has two PC Card slots as shown in Figure 2-7. Lantronix qualifies cards continuously and publishes a list of qualified cards on the Lantronix web site. SLC™ Console Manager User Guide...
  • Page 24: Usb Port

    2: Overview Figure 2-7 PC Card Interface USB Port Note: This USB port is only supported on SLC -03 part numbers. The SLC console manager has a USB port as shown in Figure 2-8. Figure 2-8 SLC Console Manager with USB Interface SLC™...
  • Page 25: 3: Installation

    ADP010104-01 Adapter: RJ45 rolled serial, Cisco, and Sun Netra Note: An optional adapter for an external modem is available from Lantronix. The part number is 200.2073 and description is DB25M (DCE) to RJ45. Cables 200.0063 Cable: RJ45 to RJ45, 6.6 ft (2 m)
  • Page 26: Product Information Label

    3: Installation Verify and inspect the contents of the SLC package using the enclosed packing slip or the table above. If any item is missing or damaged, contact your place of purchase immediately. Product Information Label The product information label on the underside of the unit contains the following information about each specific unit: Part Number ...
  • Page 27: Physical Installation

    To connect to a device port: 1. Connect one end of the Cat 5 cable to the device port. 2. Connect the other end of the Cat 5 cable to a Lantronix serial console adapter. Note: To connect a device port to a Lantronix SLP™ power manager, use the rolled serial cable provided with the unit, a 200.2225 adapter and Cat 5 cabling, or the...
  • Page 28: Connecting To Network Ports

    Cable/Adapter Lookup on the Support menu. To connect a terminal: 1. Attach the Lantronix adapter to your terminal (use PN 200.2066A adapter) or your PC's serial port (use PN 200.2070A adapter). 2. Connect the Cat 5 cable to the adapter, and connect the other end to the SLC console port.
  • Page 29: Figure 3-4 Ac Power Input And Power Switch (Slcxxxx2N)

    The DC version of the SLC console manager accepts standard –48 VDC power. The SLC0xx24T models accept two DC power inputs for supply redundancy. Lantronix provides the DC power connections using industry standard Wago connectors. One set of connectors is included with the SLC console manager.
  • Page 30: 4: Quick Setup

    IP address, you can view this IP address on the LCD or by running the Detector tool available for download at http://www.lantronix.com/support/downloads/. If Eth1 cannot acquire an IP address, you cannot use Telnet, SSH, or the web interface to run Quick Setup.
  • Page 31: Front Panel Lcd Display And Pushbuttons

    Detector™ A Windows-based application available for download at http:// www.lantronix.com/support/downloads/ for viewing a DHCP-provided IP address or for assigning a static IP address to the SLC console manager. You can use Detector only if you have not already assigned a static IP address by another method.
  • Page 32: Navigating

    4: Quick Setup Any changes made to the network, console port, and date/time settings take effect immediately. Navigating The front panel has one Enter button (in the center) and four arrow buttons (up, left, right, and down). Press the arrow buttons to navigate from one option to another, or to increment or decrement a numerical entry of the selected option.
  • Page 33 4: Quick Setup Note: If you have connected Eth1 to the network, and Eth1 is able to acquire an IP address through DHCP, this IP address displays, followed by the letter [D]. Otherwise, the IP address displays as all zeros (000.000.000.000). 2.
  • Page 34: Restoring Factory Defaults

    4: Quick Setup able to Telnet or SSH to the SLC console manager through your network connection, or access the web interface through a web browser. Restoring Factory Defaults To use the LCD display to restore factory default settings: 1. Press the right arrow button to move to the last option, Release. 2.
  • Page 35: Figure 4-5 Quick Setup Tab

    4: Quick Setup Figure 4-5 Quick Setup Tab 4. To accept the defaults, select the Accept default Quick Setup settings checkbox in the top portion of the page and click the Apply button at the bottom of the page. Otherwise, continue with step 5.
  • Page 36 The host name becomes the prompt in the command line interface. Domain If desired, specify a domain name (for example, support.lantronix.com). The domain name is used for host name resolution within the SLC console manager. For example, if abcd is specified for the SMTP server, and mydomain.com is specified for the domain, if abcd cannot be resolved, the SLC device attempts to resolve abcd.mydomain.com for the SMTP server.
  • Page 37: Figure 4-6 Quick Setup Screen Using Cli

    4: Quick Setup To complete the quick setup: 1. Do one of the following: With a serial terminal connection, power up, and when the command line displays,  press Enter. With a network connection, use an SSH program or Telnet program (if Telnet has ...
  • Page 38 The host name becomes the prompt in the command line interface. Domain If desired, specify a domain name (for example, support.lantronix.com). The domain name is used for host name resolution within the SLC console manager. For example, if abcd is specified for the SMTP server, and mydomain.com is specified for the domain, if abcd cannot be resolved, the SLC device attempts to resolve abcd.mydomain.com for the SMTP server.
  • Page 39: Next Step

    4: Quick Setup Figure 4-7 Completed Quick Setup 5. To logout, type logout at the prompt and press Enter. Next Step After quick starting the SLC console manager, you may want to configure other settings. You can use the web page or the command line interface for configuration. For information about the web and the command line interfaces, go to 5: Web and ...
  • Page 40: 5: Web And Command Line Interfaces

    Web and Command Line Interfaces This chapter describes the interfaces for configuring the SLC console manager that are: command line interface (CLI) and the Web Manager. You can also use the Front Panel LCD which is described in Chapter 4: Quick Setup. This chapter contains the following sections: Web Interface ...
  • Page 41: Figure 5-1 Web Page Layout

    5: Web and Command Line Interfaces Figure 5-1 Web Page Layout The web page has the following components: Tabs: Groups of settings to configure.  Options: Below each tab are options for specific types of settings. Only those options for ...
  • Page 42: Logging In

    PIN number, the next passcode, or the next tokencode. The Lantronix SLC Quick Setup page displays automatically the first time you log in. Subsequently, the Lantronix SLC Home page displays. (If you want to display the Quick Setup page again, click Quick Setup on the main menu.)
  • Page 43: Logging In

    5: Web and Command Line Interfaces Note: By default, Telnet is disabled and SSH is enabled. To enable Telnet, use the SSH/ Telnet/Logging tab, a serial terminal connection, or an SSH connection. See Chapter 7: Services for more information. The sysadmin user and users with who have full administrative rights have access to the complete command set, while all other users have access to a reduced command set based on their permissions.
  • Page 44: Command Line Help

    5: Web and Command Line Interfaces Table 5-2 Actions and Category Options Action Category auth | cifs | cli | command | consoleport | datetime | deviceport | history | hostlist | ipfilter | kerberos | ldap | localusers | log | menu | network | nfs | nis | ntp | password | radius | remoteusers | routing | script | services | slcnetwork | sshkey | tacacs+ | temperature | usb show auth | auditlog | cifs | cli | connections | consoleport | datetime | deviceport | emaillog | history...
  • Page 45: General Cli Commands

    5: Web and Command Line Interfaces To clear an IP address, type 0.0.0.0, or to clear a non-IP address value, type CLEAR.  When the number of lines displayed by a command exceeds the size of the window (the default is 25), the command output is halted until the user is ready to continue. To display the next line, press Enter, and to display the page, press the space bar.
  • Page 46 5: Web and Command Line Interfaces To view the last 100 commands entered in the session: show history To clear the command history: set history clear To view the rights of the currently logged-in user: show user Note: For information about user rights, see Chapter 12: User Authentication.
  • Page 47: 6: Basic Parameters

    Basic Parameters This chapter describes how to set the following basic configuration settings for the SLC console manager using the SLC web interface or CLI: Network parameters that determine how the SLC console manager interacts with the attached  network Firewall and routing ...
  • Page 48: Network Settings

    6: Basic Parameters Network Settings Network parameters determine how the SLC console manager interacts with the attached network. Use this page to set the basic configuration settings for the network ports (Eth1 and Eth2). If you entered some of these settings using a Quick Setup procedure, you may update them here.
  • Page 49: Figure 6-1 Network Web Page

    6: Basic Parameters Figure 6-1 Network Web Page SLC™ Console Manager User Guide...
  • Page 50 6: Basic Parameters 2. Enter the following fields. Ethernet Interfaces Note: Configurations with the same IP subnet on multiple interfaces (Ethernet or PPP) are not currently supported. Eth1/Eth2 Disabled: If selected, disables the network port. Defaults are Eth1 and Eth2 Settings enabled.
  • Page 51 Delay between Number of seconds between pings Pings Number of Failed Number of pings that fail before the Lantronix SLP™ power manager uses the Pings alternate gateway. Enable IP IP forwarding enables network traffic received on one interface (Eth1, Eth2, or an...
  • Page 52: Ethernet Counters

    The host name becomes the prompt in the command line interface. Domain If desired, specify a domain name (for example, support.lantronix.com). The domain name is used for host name resolution within the SLC console manager. For example, if abcd is specified for the SMTP server, and mydomain.com is specified for the domain, if abcd cannot be resolved, the SLC device attempts to resolve abcd.mydomain.com for the SMTP server.
  • Page 53: Network Commands

    6: Basic Parameters Network Commands The following CLI commands correspond to the Network Settings page. For more information, 15: Command Reference. set network (on page 240)  set network bonding (on page 240)  set network dns (on page 240) ...
  • Page 54: Configuring Ip Filters Rulesets

    6: Basic Parameters Figure 6-3 IP Filter Page 1. Enter the following fields. Enable IP Filter Select the Enable IP Filter checkbox to enable all filters, or clear the checkbox to disable all filters. Disabled by default. Packets Dropped Displays the number of data packets that the filter ignored (did not respond (view only) to).
  • Page 55: Figure 6-4 Adding Network Ip Filter Rulesets

    6: Basic Parameters Figure 6-4 Adding Network IP Filter Rulesets 2. Enter the Ruleset Name. The Ruleset Name identifies a filter. The name can be letters, numbers, and hyphens only but cannot start with a hyphen. For example, FILTER-2. 3. Enter following fields. Rule Parameters IP Address Specify a single IP address to act as a filter.
  • Page 56 6: Basic Parameters Action Select whether to drop, reject, or allow communications for the specified IP address, subnet mask, protocol, and port range. Drop ignores the packet with no notification. Reject ignores the packet and sends back an error message. Allow permits the packet through the filter.
  • Page 57: Viewing Ip Filter Rulesets And Mapping

    6: Basic Parameters Viewing IP Filter Rulesets and Mapping You can view a list of filter rulesets and a table showing how each filter is mapped to an interface. You can also view the status of the configured filter rulesets. The status page displays the number of incoming, outgoing, and forwarded packets.
  • Page 58: Ip Filter Commands

    6: Basic Parameters Figure 6-6 IP Filter Status IP Filter Commands The following CLI commands correspond to the Network - IP Filter Status page. For more information, see 15: Command Reference. set ipfilter state (on page 233)  set ipfilter mapping (on page 232) ...
  • Page 59: Figure 6-7 Routing Page

    6: Basic Parameters Figure 6-7 Routing Page 2. Enter the following fields. Enable RIP Select to enable Dynamic Routing Information Protocol (RIP) to assign routes automatically. Disabled by default. RIP Version Select the RIP version. The default is 2. Enable Static Select to assign the routes manually.
  • Page 60: Routing Commands

    6: Basic Parameters Figure 6-8 Status/Reports Page 2. Click the IP Routes checkbox and Generate Report. You can also generate reports for port status and counters, connections, and system configurations in this page. Routing Commands The following CLI commands correspond to the Status/Reports page. For more information, see 15: Command Reference.
  • Page 61: 7: Services

     Enable or disable SSH and Telnet logins.  Configure an audit log.  View the status of and manage the SLC console manager on the secure Lantronix network.  Set the date and time.  Configure the web server.
  • Page 62: Figure 7-1 Ssh/Telnet/Logging Page

    7: Services Figure 7-1 SSH/Telnet/Logging Page Enter the following fields. System Logging In System Logging, select one of the following alert levels from the drop-down list for each category: Off: Disables this type of logging.  Info: Saves informative message, in addition to warning and error messages. ...
  • Page 63 7: Services Services Specifies that messages about SNMP and SMTP get logged. Authentication Specifies that messages concerning user authentication get logged. Device Ports Specifies that messages concerning device ports and connections get logged. Diagnostics Specifies that messages concerning system status and problems get logged. General Specifies that messages not in the categories above get logged.
  • Page 64: Ssh, Telnet, And Logging Commands

    Phone Home Enable If enabled, the SLC console manager will attempt to phone home every hour until it has contacted a Lantronix SLM™ management appliance and provided it with its configuration. IP Address IP address of the SLM management appliance.
  • Page 65: Snmp

    7: Services SNMP Simple Network Management Protocol (SNMP) is a set of protocols for managing complex networks. 1. Click the Services tab and select the SNMP option. Figure 7-2 shows the page that displays. Figure 7-2 SNMP Page 2. Enter the following fields. Enable Agent Enables or disables SNMP agent, which allows read-only access to the system.
  • Page 66 7: Services Enable Traps Traps are notifications of certain critical events. Disabled by default. This feature is applicable when SNMP is enabled. Examples of traps that the SLC console manager sends include: Ethernet Port Link Up  Ethernet Port Link Down ...
  • Page 67: Snmp Commands

    7: Services Encrypt with Encryption standard to use: DES: Data Encryption Standard (default)  AES: Advanced Encryption Standard  V3 Read-Only User User Name SNMP v3 is secure and requires user-based authorization to access SLC MIB objects. Enter a user ID. The default is snmpuser. Up to 20 characters. Password/Retype Password for a user with read-only authority to use to access SNMP v3.
  • Page 68: Figure 7-3 Nfs And Smb/Cifs Page

    7: Services Logs directory, which contains the system logs and the device port local buffers (see  System ) and is read-only. Logs on page 183 Config directory, which contains saved configurations and is read-write.  The share allows users to access the contents of the directory or map the directory onto a Windows computer.
  • Page 69: Nfs And Smb/Cifs Commands

    (on page 243)  Secure Lantronix Network Use the Secure Lantronix Network option to view and manage SLC Console Managers and Lantronix® Spider™ devices on the local subnet. Note: Status and statistics shown on the web interface represent a snapshot in time. To see the most recent data, reload the web page.
  • Page 70: Figure 7-4 Secure Lantronix Network Page With Local Subnet Addressing

    7: Services Figure 7-4 Secure Lantronix Network Page with Local Subnet Addressing 2. Click a device IP Address in the column labeled IP Address/Web Interface. A separate browser opens at the device Home page after you have logged in. In the separate browser page, you can manage the device.
  • Page 71: Figure 7-5 Telnet Session

    7: Services Figure 7-5 Telnet Session To configure how SLC devices are searched for on the network: 1. Click the Search Options link on the top right of the Secure Lantronix Network page. Figure 7-6 shows the page that displays.
  • Page 72: Secure Lantronix Network Commands

    Address button. 6. Click the Apply button. When the confirmation message displays, click Secure Lantronix Network on the main menu. The Secure Lantronix Network page displays the SLC devices resulting from the search. You can now manage these devices. Secure Lantronix Network Commands The following CLI commands correspond to the Secure Lantronix Network page.
  • Page 73: Figure 7-7 Date & Time Page

    7: Services Figure 7-7 Date & Time Page 1. Enter the following fields. Change Date/ Select the checkbox to manually enter the date and time at the SLC location. Time Date Select the current month, day, and year from the drop-down lists. Time Select the current hour and minute from the drop-down lists.
  • Page 74: Date And Time Commands

    7: Services Date and Time Commands The following CLI commands correspond to the Date & Time page. For more information, see Command Reference.  set datetime (on page 221) set ntp (on page 221)  show ntp (on page 222) ...
  • Page 75: Figure 7-9 Web Server - Web Sessions Page

    7: Services 2. Enter the following fields. Timeout Select the number of minutes (5-120) after which the SLC web session times out. The default is 5. To avoid timeouts, select No. If the session times out, refresh the browser page and enter your user ID and password to open another web session. Note: If you close the browser without logging off the SLC console manager first, you will have to wait for the timeout time to expire.
  • Page 76: Figure 7-10 Web Server - Ssl Certificate Page

    7: Services Figure 7-10 Web Server - SSL Certificate Page 2. Enter the following fields. Reset to To reset to the default certificate, select the checkbox to reset to the default certificate. Default Unselected by default. Certificate Import SSL To import your own SSL Certificate, select the checkbox. Unselected by default. Certificate Import via Select the SCP, SFTP, or HTTPS method from the drop-down list.
  • Page 77: Web Server Commands

    1. Load the following XML code on a web server that is accessible over the Internet. This code describes how to retrieve information and how to format the data for display. <?xml version=”1.0” encoding=”UTF-8”?> - <Module> <ModulePrefs title=”__UP_model__ Devport Status” title_url=”http:// www.lantronix.com” directory_title=”SLC/SLB Status” description=”Devport status and counters” scrolling=”true” width=”400” height=”360” /> <UserPref name=”model” display_name=”Model” datatype=”enum”...
  • Page 78: Figure 7-11 Igoogle Gadget Page

    7: Services <UserPref name=”rate” display_name=”Refresh Rate” datatype=”enum” default_value=”10”> <EnumValue value=”1” display_value=”1 second” /> <EnumValue value=”5” display_value=”5 seconds” /> <EnumValue value=”10” display_value=”10 seconds” /> <EnumValue value=”30” display_value=”30 seconds” /> <EnumValue value=”60” display_value=”1 minute” /> <EnumValue value=”300” display_value=”5 minutes” /> <EnumValue value=”600” display_value=”10 minutes”...
  • Page 79: 8: Devices

    Devices This chapter describes how to view the device status, configure devices, and use an SLC device port connected to an external device, such as a server or a modem. Chapter 11: Connections describes how to use the Connections page to connect external devices and outbound network connections (such as Telnet or SSH) in various configurations.
  • Page 80: Permissions

    8: Devices For #2, #3, #4, #5, and #6, if logins or authentication are not enabled, the user is directly connected to the device port with no authentication. For #1 and #6, if logins are enabled, the user is authenticated first, and then logged into the command line interface.
  • Page 81: Device Ports

    8: Devices Figure 8-1 Device Status Page Device Ports On the Device Ports page, you can set up the numbering of Telnet, SSH, and TCP ports, view current port modes, and select individual ports to configure. SLC™ Console Manager User Guide...
  • Page 82: Figure 8-2 Device Ports Page

    8: Devices 1. Click the Devices tab and select the Device Ports option. Figure 8-2 shows the page that displays. Figure 8-2 Device Ports Page Starting port numbers for Telnet, SSH, and TCP display on the left. The list of ports on the right includes the individual ports and the current mode.
  • Page 83 8: Devices Telnet in or SSH in is enabled for the device port. The device port is either waiting for a Telnet or SSH login or has received a Telnet or SSH login (a user has logged in). To set up Telnet, SSH, and TCP port numbers: Enter the following fields.
  • Page 84: Figure 8-3 Device Ports - Settings Page

    8: Devices Figure 8-3 Device Ports - Settings Page SLC™ Console Manager User Guide...
  • Page 85 8: Devices Click the port number on the green bar at the top of each  page (shown here). The same page displays as in Figure 8-3. To enter device port settings: Enter the following fields. Port Displays the port number. (view only) Mode Displays the port status automatically.
  • Page 86 8: Devices IP Settings Telnet In Enables access to this port through Telnet. Disabled by default. Port: Automatically assigned Telnet, SSH, and TCP port numbers. You can  override the value. Timeout: To cause an idle Telnet, SSH or TCP connection to disconnect after a ...
  • Page 87 8: Devices Note: Check the serial device equipment settings and documentation for the proper settings. The device port and the attached serial device must have the same settings. Baud Enables the speed (baud rate) with which the device port exchanges data with the attached serial device.
  • Page 88 8: Devices Modem Settings Note: Depending on the State and Mode you select, different fields are available. State Indicates whether an external modem is attached to the device port. If enabling, set the modem to dial-out, dial-in, dial-back, CBCP server, CBCP client, dial-on- demand, dial in &...
  • Page 89 8: Devices Modem Settings: Text Mode Timeout Logins If you selected Text mode, you can enable logins to time out after the connection is inactive for a specified number of minutes. The default is No. This setting is only applicable for text mode connections. PPP mode connections stay connected until either side drops the connection.
  • Page 90 8: Devices Restart Delay The number of seconds after the timeout and before the SLC device attempts another connection. The default is 30 seconds. 2. Click the Apply button. To save selected settings to ports other than the one you are configuring: From the Apply Settings drop-down box at the bottom of the Device Ports - Settings page, select none, General, IP, Data, Modem, or All.
  • Page 91: Port Status And Counters

    8: Devices Figure 8-4 Modem Log Port Status and Counters Port Status and Counters list the status of signals and interfaces. SLC console manager updates and increments the port counters as signals change and data flows in and out of the system. These counters help troubleshoot connections or diagnose problems because they give the user an overview of the state of various parameters.
  • Page 92: Device Port - Slp Power Manager

    8: Devices Note: Status and statistics shown on the web interface represent a snapshot in time. To see the most recent data, you must reload the web page. Figure 8-5 Port Status and Counters Section Device Port – SLP Power Manager On the Device Ports –...
  • Page 93: Figure 8-6 Device Ports - Slp Page

    8: Devices Figure 8-6 Device Ports - SLP Page To configure the SLP power manager: Enter the following fields. Port Displays the port number. (view only) Name Displays the port name. (view only) Device Displays the device type. (view only) SLP Login User ID for logging into the SLP power manager.
  • Page 94: Device Port - Sensorsoft Device

    8: Devices Environmental Click the link to view the environmental status (e.g., temperature and humidity) of Status the SLP power manager. Infeed Status Click the link to view the status of the data the SLP power manager is receiving. System Info Click the link to see system information pertaining to the SLP power manager.
  • Page 95: Figure 8-7 Device Ports - Sensorsoft

    8: Devices Figure 8-7 Device Ports - Sensorsoft To configure Sensorsoft settings: 1. Select a port and enter the following fields. Device Port Displays the port number. (view only) Device Port Name Displays the port name. (view only) Temp (°C) Displays the current temperature (Celsius).
  • Page 96: Device Port Commands

    8: Devices Device Port Commands The following CLI commands correspond to the Device Ports page. For more information, see Command Reference. set deviceport port (on page 223)  set deviceport global (on page 225)  set command (on page 222) ...
  • Page 97: Pc Card Logging

    8: Devices 02_Port-2_3.log 02_Port-2_4.log 02_Port-2_5.log PC Card Logging Note: The PC Card logging feature is only supported on SLC -02 part numbers. Data can be logged to a PC Card Compact Flash that is loaded into one of the PC Card slots on the front of the SLC device and properly mounted.
  • Page 98: Figure 8-8 Device Ports - Logging

    8: Devices To set logging parameters: 1. In the Device Ports – Settings page, click the Logging: Settings link. Figure 8-8 shows the page that displays. Figure 8-8 Device Ports - Logging Enter the following fields. Local Logging Local Logging Enable local logging and each device port stores 256 Kbytes (approximately 400 screens) of I/O data in a true FIFO buffer.
  • Page 99 8: Devices Email Traps Email/Traps Select the checkbox to enable email and SNMP logging. Email logging sends an email message to pre-defined email addresses or an SNMP trap to the designated NMS (see Services) when alert criteria are met. Disabled by default. Send Select notification type to send: Email, SNMP, or Both.
  • Page 100 8: Devices Email Subject Input a subject text appropriate for your site. May have up to 128 characters. The email subject line is pre-defined for each port with its port number. You can use the email subject to inform the desired recipients of the problem on a certain server or location (e.g., server location or other classification of your equipment).
  • Page 101: Logging Commands

    8: Devices USB Logging Note: This USB logging feature is only supported on SLC -03 part numbers. USB Logging Select to enable USB logging. See USB Port Logging on page 97. Disabled by default. USB Log to View A list of saved log files to view. Log To Port U1 is the default and is automatically selected.
  • Page 102: Console Port

    8: Devices Console Port The console port initially has the same defaults as the device ports. Use the Console Port page to change the settings, if desired. To set console port parameters: 1. Click the Devices tab and select Console Port. Figure 8-9 shows the page that displays.
  • Page 103: Console Port Commands

    8: Devices Show Lines on Click the checkbox if you connect to the console port with a terminal emulator. You Connecting will see the last lines of output to the console. For example, the SLC boot messages or the last lines of output during a CLI session on the console. 3.
  • Page 104: Host Parameters

    8: Devices Note: To clear fields in the lower part of the page, click the Clear Host List button. Host Lists Displays host lists by ID and Name. (view only Host List Id Displays after a host list is saved. (view only) Host List Name Enter a name for the host list.
  • Page 105: Host List Commands

    8: Devices 2. Click View Host Lists button. The parameters display in the Host List Parameters section. 3. Click the Edit Host List button. A new window opens and when the changes are complete, the message “Host List configuration is complete.” displays. 4.
  • Page 106: Figure 8-11 Scripts Page

    8: Devices Figure 8-11 Scripts Page 2. Click the Add button. Figure 8-11 shows the page that displays. SLC™ Console Manager User Guide...
  • Page 107: Figure 8-12 Adding New Scripts Page

    8: Devices Figure 8-12 Adding New Scripts Page 3. Enter the following fields. Script Name A unique identifier for the script. Type Select Interface for a script that utilizes Expect/Tcl to perform pattern detection and action generation on Device Port output. Select Batch for a script of CLI commands.
  • Page 108: Batch Script Syntax

    8: Devices 4. Click the Apply button. If your Interface script gets validated before it is saved. Once the script is saved, the main Scripts page displays. To view or update a script: 1. In the Scripts table, select the script and click the Edit Script button. The page for editing script attributes displays.
  • Page 109: Definitions

    8: Devices Secondary commands provide support for the primary commands and are generally not useful by themselves. For example, the expr command can be used to generate a value for a set command. set <my_var> [expr 1 + 1] Control Flow commands allow conditional execution of other commands based on the results of the evaluation of a Boolean expression.
  • Page 110 8: Devices parameters. The preprocessor will require that these commands appear only as the first element of a command line. The start of a command line is delimited by any of the following: The start of a new line of text in the script ...
  • Page 111: Secondary Commands

    8: Devices send, send_user The send command sends output to a sub-process, The send_user command sends output to the standard output. Both commands have the same syntax: send <string> send_user <string> where <string> can be either a quoted string or a variable reference. expect, expect_user, expect_before, expect_after, expect_background The expect command waits for input and attempts to match it against one or more patterns.
  • Page 112: Control Flow Commands

    8: Devices string range <str> <int start> <int end> Return a string consisting of the characters in 'str' between 'int start' and 'int end' string tolower <str> Convert <str> to lowercase string toupper <str> Convert <str> to uppercase string trim <str 1> <str 2> Trim 'str 2' from 'str 1' string trimleft <str 1>...
  • Page 113 8: Devices while (<Boolean expression>) { command 1 command 2 Command n if, elseif and else The if command executes an associated block of commands if its Boolean expression evaluates to TRUE. Each command within the block must be a Primary command. Syntax: if (<Boolean expression>) { command 1 command 2...
  • Page 114: Sample Scripts

    8: Devices Sample Scripts Interface Script—Monitor Port The Monitor Port (Monport) script connects directly to a device port by logging into the SLC port, gets the device hostname, loops a couple of times to get port interface statistics, and logs out. The following is the script: set monPort 7 set monTime 5...
  • Page 115 8: Devices #Already Logged in got Command Prompt $prompt { send_user "Already Logged..\r\n" #Get hostname info send "show network port 1 host\r" expect { timeout { send_user "Time out Getting Hostname 1\r\n"; return "Domain" { #Get Hostname from slc set hostname "[string range $expect_out(buffer) [string first Hostname: $expect_out(buffer)] [expr [string first Domain $expect_out(buffer)]-2]]"...
  • Page 116 Model Number: SLC48 For a list of commands, type 'help'. [slc251glenn]> show network port 1 host show network port 1 host ___Current Hostname Settings___________________________________________________ Hostname: slc251glenn Domain: support.int.lantronix.com [slc251glen Device HOSTNAME: SLC251GLENN __________________________________________________________________________ Monitored Port: Port 7 Monitor Interval Time: 5 Seconds...
  • Page 117 Hostname: slc251glenn Domain: support.int. Device HOSTNAME: SLC251GLENN __________________________________________________________________________ Monitored Port: Port 7 Monitor Interval Time: 5 Seconds [Current Time:21:25:04] show portcounter deviceport 7 lantronix.com [slc251glenn]> show portcounter deviceport 7 Device Port: Seconds since zeroed: 1454120 Bytes input: Bytes output: Framing errors:...
  • Page 118: 9: Pc Cards

    Device Ports – Logging on page 96). The SLC console manager supports a variety of Compact Flash-to-PC Card adapters, as well as modem and Basic Rate Interface (BRI) ISDN cards. See the Lantronix web site www.lantronix.com/products/pc-cards-slc.html for a complete list.
  • Page 119: Figure 9-2 Pc Card - Storage Page

    9: PC Cards Figure 9-2 PC Card - Storage Page 4. Enter the following fields. Slot Slot on the SLC console manager where the PC Card is inserted. (view only) Device Type of PC Card (modem or storage). (view only) Type Information read from PC Card.
  • Page 120: Modem Settings

    To enter modem settings for a PC card, perform the following steps. 1. Insert any of the supported modem or ISDN cards (see www.lantronix.com/slc) into one of the PC card bays on the front of the SLC device. You can do this before or after powering up the SLC console manager.
  • Page 121: Figure 9-3 Pc Card - Modem/Isdn Page

    9: PC Cards Figure 9-3 PC Card - Modem/ISDN Page SLC™ Console Manager User Guide...
  • Page 122 9: PC Cards 5. Enter the following fields. Slot Displays the slot position. (view only) Device Displays the device type. (view only) Type Displays the card type. (view only) Firmware Version Displays the current firmware version. (view only) State Displays the state of the device. (view only) State Enables the modem to use dial-out, dial-in, dial-back, CBCP server, CBCP client,...
  • Page 123 9: PC Cards Dial-back Delay For dial-back and CBCP Server, the number of seconds between the dial-in and dial-out portions of the dialing sequence. For more information about CBCP, see Modem State Parameters on page 277. Data Settings Baud The speed with which the device port exchanges data with the attached serial device.
  • Page 124 9: PC Cards GPRS Context Command to specify the protocol data packet (PDP) context parameter values. PPP Compression Select to enable negotiation of data compression over PPP links. Disabled by default. GSM Bearer Svc. Command to select the bearer service, data rate, and connection element to use when data call originate.
  • Page 125 9: PC Cards Enable NAT Select to enable Network Address Translation (NAT) for dial-in and dial-out PPP connections on a per modem (Device Port or PC Card) basis. Users dialing into the SLC console manager access the network connected to Eth1 and/or Eth2. Note: IP forwarding must be enabled on the Network - Settings page for NAT to work.
  • Page 126: Pc Card Commands

    9: PC Cards To view the log of all modem activity: 1. Click the View Modem Log link. PC Card Commands The following CLI commands correspond to the PC Card. For more information, see Chapter 15: Command Reference pccard storage copy (on page 246) ...
  • Page 127: 10: Usb Port

    Device Ports – Logging on page 96). The SLC console manager supports a variety of thumb drives and modems. See the Lantronix web site for a complete list. Note: This USB port chapter applies only to SLC models with part numbers -03.
  • Page 128: Figure 10-2 Usb - Storage Page

    10: USB Port 4. To configure the USB port, from the USB Ports table, click the radio button (on the far right) for Port U1. 5. Click Configure. Figure 10-2 shows the page that displays. Figure 10-2 USB - Storage Page 6.
  • Page 129: Manage Firmware And Configuration Files

    10: USB Port 7. Click Apply. Manage Firmware and Configuration Files To manage the firmware and configuration files, perform the following steps. 1. Click the Manage Files on the Thumb Drive link on the USB - Storage page. Figure 10-3 Firmware and Configurations - Manage Files (Top of Page) Note: At the bottom of the page, shown in Figure...
  • Page 130: Usb Commands

    10: USB Port Figure 10-4 Firmware and Configurations - Manage Files (Bottom of Page) 2. To delete a file, click the check box next to the filename and click Delete File. A confirmation message displays. 3. To download a file, click the Download button. Select the file from the list. 4.
  • Page 131 10: USB Port set usb storage delete (on page 261)  set usb storage format (on page 261)  show usb (on page 261)  show usb storage (on page 262)  show usb modem (on page 262)  SLC™ Console Manager User Guide...
  • Page 132: 11: Connections

    11: Connections This chapter describes how to use the Connections web page to connect external devices and outbound network connections, such as Telnet or SSH, in various configurations. For information about how to configure devices to interact with an SLC device port connected to an external device, see Chapter 8: Devices.
  • Page 133: Remote Access Server

    11: Connections Figure 11-1 Terminal Server VT100 Terminals VT100 Terminals Remote Access Server Figure 11-2 shows the SLC console manager connected to one or more modems by its device ports. Configure the device ports on the Device Ports - Settings web page by selecting the Dial-in option in the Modem Settings section.
  • Page 134: Multiport Device Server

    PC. Configure the SLC device for this setup by using special software, for example, Com Port Redirector (available on www.lantronix.com) or similar software. Figure 11-4 Multiport Device Server...
  • Page 135: Figure 11-5 Console Server

    11: Connections Figure 11-5 Console Server SLC™ Console Manager User Guide...
  • Page 136: Connection Configuration

    11: Connections Connection Configuration To create a connection: 1. Click the Devices tab and Connections. Figure 11-6 shows the page that displays. Figure 11-6 Connections Page 2. Enter the following fields. Outgoing Enable an outgoing timeout by clicking the Yes radio button and specifying the Connection seconds.
  • Page 137 11: Connections Connect: Input the port number that you are connecting. The device port must be connected DevicePort to an external serial device and must not have command line interface logins enabled, be connected to a modem, or be running a loopback test. Note: To see the current settings for this device port, click the Settings link.
  • Page 138: Connection Commands

    11: Connections Figure 11-7 Current Connections Section of the Connections Page To view details about a connection: 1. Hold the mouse over the arrow in the Flow column. To disconnect/delete one or more connections: 1. Select one or more connections in the Select column and click the Terminate buttons. To reestablish the connection: 1.
  • Page 139: 12: User Authentication

    12: User Authentication This chapter describes authentication methods for users who attempt to log into the SLC console manager by Telnet, SSH, the console port, or one of the device ports. It includes descriptions of user rights, NIS, LDAP, RADIUS, Kerberos, and TACACS+ options. The chapter contains the following sections: Overview of Authentication ...
  • Page 140: User Rights

    Table 12-1 User Group Rights User Right Administrators Power Users Default Users  Full Administrative   Networking  Services  Secure Lantronix Network   Date/Time  Local Users  Remote Authentication  SSH Keys  User Menus ...
  • Page 141: Authentication Methods

    12: User Authentication By default, the system assigns new users to the Default Users group, but you can change their group membership at any time. If you change a user's rights while the user is logged into the web or CLI, the results do not take effect until the next time the user logs in. Local/Remote User Settings on page 145 for information about assigning rights to users.
  • Page 142 12: User Authentication NIS (Network A network naming and administration system developed by Sun Information System) Microsystems for smaller networks. Each host client or server in the network has knowledge about the entire network. A user at any host can access files or applications on any host in the network with a single user identification and password.
  • Page 143: Authentication Commands

    12: User Authentication LDAP on page 152  RADIUS on page 157  Kerberos on page 161  TACACS+ on page 164  Authentication Commands The following CLI commands correspond to the Authentication Methods page. For more information, see Chapter 15: Command Reference set auth (on page 214) ...
  • Page 144 12: User Authentication The top of the page has checkboxes for enabling local and remote users and for setting password requirements. The bottom of the page displays a table listing and describing all local and remote users. To enable local and remote users capabilities: 1.
  • Page 145: Local/Remote User Settings

    12: User Authentication Local/Remote User Settings You can add, edit, or delete a local or remote user. To add a user: 1. On the Local/Remote Users page, click the Add/Edit User button. Figure 12-4 shows the page that displays. Figure 12-4 Local/Remote User Settings Page 2.
  • Page 146 12: User Authentication Listen Ports The device ports that the user may access to view data using the connect listen command. Enter the port numbers or the range of port numbers (for example, 1, 5, 8, 10-15). U and L denote the PC Card upper and lower slots. U1 denotes the USB port.
  • Page 147 Services Right to enable and disable system and audit logging, SSH and Telnet logins, SNMP, and SMTP. Includes NFS and CIFS. Secure Lantronix Right to view and manage secure IT management devices (e.g., SLP power Network managers, Spider devices, SLC console managers) on the local subnet.
  • Page 148: Local/Remote Users Commands

    12: User Authentication Note: The logged-in username displays at the top of the web page. Only the tabs and options display for the user who has rights. Shortcut to add a user based on an existing user: 1. Display the existing user on the Local/Remote Users Settings page. The fields in the top part of the page display the current values for the user.
  • Page 149: Nis

    12: User Authentication set localusers maxloginattempts (on page 237)  set localusers multipleadminlogins (on page 237)  set localusers periodlockout (on page 237)  set localusers periodwarning (on page 238)  set localusers reusehistory (on page 238)  set remoteusers (on page 249) ...
  • Page 150: Figure 12-5 Nis Page

    12: User Authentication Figure 12-5 NIS Page 2. Enter the following fields. Enable NIS Displays selected if you enabled this method on the Authentication Methods page. If you want to set up this authentication method but not enable it immediately, clear the checkbox.
  • Page 151 12: User Authentication NIS Slave Servers The IP addresses or host names of up to five slave servers. #1 -5 Custom Menu If custom menus have been created (see Local/Remote Users Commands on page 148), you can assign a default custom menu to NIS users. Escape Sequence A single character or a two-character sequence that causes the SLC console manager to leave direct (interactive) mode.
  • Page 152: Nis Commands

    12: User Authentication Secure Lantronix Right to view and manage secure IT management devices (e.g., SLP power Network managers, Spider devices, SLC console managers) on the local subnet. Local Users Right to add or delete local users on the system.
  • Page 153: Schema Permissions Versus Default User Rights

    Appendix I: LDAP Schemas on page 288 for information about installing schema support in the Windows active directory and creating the Lantronix SLC schema attribute. Schema Permissions versus Default User Rights The User Rights shown on the SLC console manager under the LDAP settings are the ones that...
  • Page 154: Figure 12-6 Ldap Page

    12: User Authentication Figure 12-6 LDAP Page 2. Enter the following fields. Enable LDAP Displays as checked if you enabled this method in the User Authentication Methods page. If you want to set up this authentication method but not enable it immediately, clear the checkbox.
  • Page 155 Bind Name contain the $login token, which will be replaced with the current login. For example, if the Bind Name is uid=$login,ou=People,dc=lantronix,dc=com, and user roberts logs into the SLC console manager, LDAP will bind with uid=roberts,ou=People,dc=lantronix,dc=com and the password entered by roberts.
  • Page 156 Right to enter Network settings. Services Right to enable and disable system logging, SSH and Telnet logins, SNMP, and SMTP. Secure Lantronix Right to view and manage SLC units (e.g., SLP power managers, Spider devices, Network SLC console managers) on the local subnet.
  • Page 157: User Attributes And Permissions From Ldap Schema

    12: User Authentication User Attributes and Permissions from LDAP Schema Remote user attributes (group/permissions and port access) can be obtained from an Active Directory server schema via the user attribute secureLinxSLCPerms. This attribute is a set of parameter-value pairs. Each parameter and value is separated by a space, and a space separates each parameter-value pair.
  • Page 158: Figure 12-7 Radius Page

    12: User Authentication Figure 12-7 RADIUS Page 2. Enter the following fields. Enable RADIUS Displays selected if you enabled this method on the User Authentication page. If you want to set up this authentication method but not enable it immediately, clear the checkbox.
  • Page 159 12: User Authentication Server #1 Secret Text that serves as a shared secret between a RADIUS client and the server (SLC device). The shared secret is used to encrypt a password sent between the client and the server. May have up to 128 characters. RADIUS Server #2 IP address or host name of the secondary RADIUS server.
  • Page 160 Services Right to enable and disable system logging, SSH and Telnet logins, SNMP, and SMTP. Secure Lantronix Right to view and manage secure IT management devices (e.g., SLP power Network managers, Spider devices, SLC console managers) on the local subnet.
  • Page 161: Radius Commands

    12: User Authentication RADIUS Commands The following CLI commands correspond to the RADIUS page. For more information, see Chapter 15: Command Reference set radius (on page 248)  set radius server (on page 248)  show radius (on page 249) ...
  • Page 162: Figure 12-8 Kerberos Page

    12: User Authentication Figure 12-8 Kerberos Page 2. Enter the following fields. Enable Kerberos Displays selected if you enabled this method on the User Authentication page. If you want to set up this authentication method but not enable it immediately, clear the checkbox.
  • Page 163 12: User Authentication KDC Port Port on the KDC listening for requests. Enter an integer with a maximum value of 65535. The default is 88. Custom Menu If custom menus have been created (see Local/Remote Users Commands on page 148), you can assign a default custom menu to RADIUS users. Escape Sequence A single character or a two-character sequence that causes the SLC console manager to leave direct (interactive) mode.
  • Page 164: Kerberos Commands

    Services Right to enable and disable system logging, SSH and Telnet logins, SNMP, and SMTP. Secure Lantronix Right to view and manage secure IT management devices (e.g., SLP power Network managers, Spider devices, SLC console managers) on the local subnet.
  • Page 165: Figure 12-9 Tacacs+ Page

    12: User Authentication Users who are authenticated through Kerberos are granted device port access through the port permissions on this page. All Kerberos users are members of a group that has predefined user rights associated with it. You can add additional user rights that are not defined by the group. To configure the SLC console manager to use TACACS+ to authenticate users: 1.
  • Page 166 12: User Authentication TACACS+ IP address or host name of up to three TACACS+ servers. Servers 1-3 Secret Shared secret for message encryption between the SLC console manager and the TACACS+ server. Enter an alphanumeric secret of up to 127 characters. Encrypt Select the checkbox to encrypt messages between the SLC device and the Messages...
  • Page 167: Tacacs+ Commands

    Services Right to enable and disable system logging, SSH and Telnet logins, SNMP, and SMTP. Secure Lantronix Right to view and manage secure IT management devices (e.g., SLP power Network managers, Spider devices, SLC console managers) on the local subnet.
  • Page 168: Ssh Keys

    12: User Authentication SSH Keys The SLC console manager can import and export SSH keys to facilitate shared key authentication for all incoming and outgoing SSH connections. By using a public/private key pair, a user can access multiple hosts with a single passphrase, or, if a passphrase is not used, a user can access multiple hosts without entering a password.
  • Page 169: Figure 12-10 Ssh Keys Page

    12: User Authentication To configure the SLC console manager to use SSH keys to authenticate users: 1. From the main menu, select User Authentication – SSH Keys. Figure 12-10 shows the page that displays. Figure 12-10 SSH Keys Page SLC™ Console Manager User Guide...
  • Page 170 12: User Authentication 2. Enter the following fields. Imported Keys (SSH In) Host & User These entries are required in the following cases: Associated with  The imported key file does not contain the host that the user will be making an SSH connection from, or ...
  • Page 171 12: User Authentication Passphrase/ Optionally, enter a passphrase associated with the key. The passphrase may have Retype up to 50 characters. The passphrase is an optional password that can be Passphrase associated with an SSH key. It is unique to each user and to each key. SECSH Format Indicate whether the keys will be exported in SECSH format (by default the key is exported in OpenSSH format).
  • Page 172: Figure 12-11 Ssh Server/Host Keys Page

    12: User Authentication Figure 12-11 SSH Server/Host Keys Page 2. Enter the following fields. Reset to Default Select the All Keys checkbox to reset all default key(s), or select one or more Host Key checkboxes to reset defaults for RSA1, RSA, or DSA keys. All checkboxes are unselected by default.
  • Page 173: Ssh Commands

    12: User Authentication Type From the drop-down list, select the type of host key to import. Import via From the drop-down list, select the method of importing the host key (SCP or SFTP). The default is SCP. Public Key Filename Filename of the public host key.
  • Page 174 12: User Authentication For example, the system administrator creates two custom user menus, with menu1 having a nested menu (menu2). Arrow keys can be used at the Command and Nickname prompts to cycle through previously entered commands and nicknames. [slc]> set menu add menu1 Enter optional menu title (<return>...
  • Page 175: Custom User Menus Commands

    12: User Authentication The system administrator configures local user “john” to use custom menu “menu1”: [slc]> set localusers edit john custommenu menu1 Local users settings successfully updated. [slc]> show localusers user john ___Current Local Users Settings________________________________________________ Login: john Password: <set> UID: 101 Listen Ports: 1-32 Data Ports: 1-32...
  • Page 176 12: User Authentication set menu edit (on page 220)  set menu delete (on page 221)  set cli menu (on page 220)  show menu (on page 221)  SLC™ Console Manager User Guide...
  • Page 177: 13: Maintenance

    13: Maintenance This chapter describes the tasks that the system administrator performs by using the pages of the Maintenance tab and additional commands on the command line interface. It contains the following sections: Firmware and Configurations  System Logs  Audit Log ...
  • Page 178: Figure 13-1 Firmware & Configurations Page

    13: Maintenance To configure settings: 1. Click the Maintenance tab. Figure 13-1 shows the page that displays. Figure 13-1 Firmware & Configurations Page SLC™ Console Manager User Guide...
  • Page 179 If you select USB, port U1 is automatically selected Firmware Filename The name of the firmware update file downloaded from the Lantronix web site. A 32-hex character key for validating the firmware file. The key is provided in the firmware Release Notes available with the SLC firmware at www.lantronix.com/support/downloads.
  • Page 180 13: Maintenance NFS Mounted Dir Displays created NFS local directories. Note: You must create NFS mounts by using the Services tab and accessing the NFS/CIFS page. PC Card Slot or USB For the SLC device with the PC Card slots, select the upper slot or lower slot options.
  • Page 181 13: Maintenance Location for Save, If you selected to save or restore a configuration, select one of the following Restore, or Manage options: Local Disk – Saved Configurations: If restoring, select a saved  configuration from the drop-down list. FTP Server: The FTP server specified in the FTP/SFTP/TFTP section. If ...
  • Page 182: Firmware And Configurations Commands

    13: Maintenance Figure 13-2 Firmware & Configurations - Manage Configuration Files Page 2. To download files, click the Download File button. A File Download window opens to confirm the download. 3. To rename files, check the box of the file that you want to rename and enter the new name in the text box.
  • Page 183: System Logs

    13: Maintenance admin config save (on page 207)  admin config show (on page 207)  System Logs The System Logs page allows you to view and clear system logs. See Chapter 7: Services more information about system logs. To view system logs: 1.
  • Page 184: Figure 13-4 System Log Output Page

    Select to and enter the person’s email address. c. Press the Email Output button. 5. To email the system log to Lantronix Technical Support: a. In the Comment field, enter a comment (if desired). b. Select to: Lantronix Tech Support.
  • Page 185: System Logs Commands

    13: Maintenance System Logs Commands The following CLI commands correspond to the System Logs page. For more information, see Chapter 15: Command Reference show syslog (on page 257)  show syslog clear (on page 257)  Audit Log The Audit Log web page displays a log of all actions that have changed the configuration of the SLC console manager.
  • Page 186: Audit Log Commands

    13: Maintenance Audit Log Commands The following CLI commands correspond to the Audit Log page. For more information, see Chapter 15: Command Reference show auditlog (on page 213)  Email Log The Email Log web page displays a log of all emails that have been sent by the SLC console manager, a count of the number of emails sent, the number of bytes sent, and the number of email errors.
  • Page 187: Diagnostics

    13: Maintenance Diagnostics The Diagnostics web page provides methods for diagnosing problems such as network connectivity and device port input/output problems. You can use equivalent commands on the command line interface. An additional diagnostic, loopback, is only available as a command. 1.
  • Page 188 13: Maintenance Ping If you enter a host name in the corresponding Hostname field, the SLC console manager verifies that the host is up and running. Check the Ethernet Port button (Both, Eth1, or Eth2), and check the IPv6 box. Note: The Ethernet Port option restricts ping transmission to both Ethernet ports, Eth1, or Eth2.
  • Page 189: Figure 13-8 Diagnostics Report Page

    In the Comment field, enter a comment (if desired). b. Select to: Lantronix Tech Support c. Call Lantronix Tech Support and obtain a case number. For contact information, click the Lantronix Tech Support link. d. Enter the number in Case Number.
  • Page 190: Diagnostics Commands

    13: Maintenance Diagnostics Commands The following CLI commands correspond to the Diagnostics page. For more information, see Chapter 15: Command Reference diag arp (on page 227)  diag internals (on page 227)  diag netstat (on page 228)  diag nettrace (on page 228) ...
  • Page 191: Figure 13-9 Status/Reports Page

    13: Maintenance Figure 13-9 Status/Reports Page 2. Enter the following fields. View Report View Report Select as many of the reports as desired, or select All. Port Status: Displays the status of each device port: mode, user, any related  connections, and serial port settings.
  • Page 192: Figure 13-10 Generated Reports Page

    In the Comment field, enter a comment (if desired). b. Select to: Lantronix Tech Support c. Call Lantronix Tech Support and obtain a case number. For contact information, click the Lantronix Tech Support link. d. Enter the number in Case Number.
  • Page 193: Status/Reports Commands

    13: Maintenance c. Press the Email Output button. Status/Reports Commands The following CLI commands correspond to the Status/Reports page. For more information, see Chapter 15: Command Reference show sysconfig (on page 257)  show sysstatus (on page 257)  show connections (on page 218) ...
  • Page 194: Events Commands

    13: Maintenance 2. Enter the following fields. Event Trigger From the drop-down list, select the type of incident that triggers an event. Currently, the options are: Receive Trap  Temperature Over/Under Limit: For Sensorsoft devices.  Humidity Over/Under Limit: For Sensorsoft devices. ...
  • Page 195: Banners

    13: Maintenance Banners The Banners page allows the system administrator to customize text messages that display to users. To configure banner settings: 1. Click Banners. Figure 13-12 shows the page that displays. Figure 13-12 Banners Page 1. Enter the following fields. Welcome Banner The text to display on the command line interface before the user logs in.
  • Page 196: Banner Commands

    13: Maintenance Banner Commands The following CLI commands correspond to the Banners page. For more information, see Chapter 15: Command Reference admin banner login (on page 205)  admin banner logout (on page 205)  admin banner show (on page 205) ...
  • Page 197: Lcd/Keypad Commands

    13: Maintenance To configure the Keypad: 1. Enter the following fields. Keypad Locked Select this to lock out any input to the keypad. The default is for the keypad to be unlocked. Restore Factory The 6 digit key sequence entered at the keypad to restore the SLC console Defaults Password manager to factory defaults.
  • Page 198: 14: Application Examples

    14: Application Examples Each SLC console manager has multiple serial ports and two network ports as shown in Figure 14-1. Each serial port can be connected to the console port of a device. Using a network in-band port or an out-of-band modem for a dial-up connection, an administrator can remotely access any of the connected devices using Telnet or SSH.
  • Page 199 14: Application Examples In the example below, the system administrator performs the following steps: 1. Display the settings for device port 2 by using the show deviceport command. [SLC]> show deviceport port 2 ___Current Device Port Settings________________________________________________ Number: 2 Name: Port-2 Modem Settings-------------------Data Settings----------IP Settings--------- Modem State: disabled Baud Rate: 9600...
  • Page 200: Dial-In (Text Mode) To A Remote Device

    14: Application Examples Dial-in (Text Mode) to a Remote Device The example in Figure 14-3 shows a modem connected to the SLC console manager device port 1, and a SUN server connected to the SLC device port 2. You can configure the modem for text mode dial-in, so a remote user can dial into the modem using a terminal emulation program and access the SUN server.
  • Page 201: Local Serial Connection To Network Device Via Telnet

    14: Application Examples 4. Log into the SLC console manager. CONNECT 57600 Welcome to the SLC login: sysadmin Password: Welcome to the SLC Console Manager Model Number: SLC 48 For a list of commands, type 'help'. [SLC]> 5. Connect to the SUN UNIX server using the connect direct command. [SLC]>...
  • Page 202 14: Application Examples The system administrator performs the following steps. 1. Display the settings for device port 2 by using the show deviceport command. [SLC]> show deviceport port 2 ___Current Device Port Settings________________________________________________ Number: 2 Name: Port-2 Modem Settings-------------------Data Settings----------IP Settings--------- Modem State: disabled Baud Rate: 9600 Telnet: disabled...
  • Page 203: 15: Command Reference

    15: Command Reference This chapter lists and describes all of the commands available on the SLC command line interface (CLI) accessed by using Telnet, SSH, or a serial connection. In addition to the commands, this chapter contains the following sections: Introduction to Commands ...
  • Page 204: Command Line Actions And Categories

    15: Command Reference <value> User must specify an appropriate value, for example, an IP address. The  parameter values are in mixed case. Square brackets [ ] indicate optional parameters. Command Line Actions and Categories Table 15-1 lists the actions and categories for each action. Table 15-1 Actions and Category Options Action Category...
  • Page 205: Deprecated Commands

    15: Command Reference To clear an IP address, type 0.0.0.0, or to clear a non-IP address value, type CLEAR.  When the number of lines displayed by a command exceeds the size of the window (the  default is 25), the command output is halted until you are ready to continue. To display the next line, press Enter, and to display the page, press the space bar.
  • Page 206 15: Command Reference Description Configures the banner that displays prior to SSH authorization. admin banner welcome Syntax admin banner welcome <Banner Text> Description Configures the banner displayed before the user logs in. Note: To go to the next line, type \n and press Enter. admin clear Syntax admin clear tmpdir...
  • Page 207 15: Command Reference dt - Date/Time pc - PC Card lu - Local Users ub - USB Note: The Config Params to Preserve get contained as a comma-separated list of current configuration parameters that are kept after the config restore or factorydefaults.
  • Page 208 15: Command Reference Description Lists the configurations saved to a location. admin firmware bootbank Syntax admin firmware bootbank <1|2> Description Sets the boot bank to be used at the next SLC console manager reboot. Applies to dual-boot SLC devices only. admin firmware copybank Syntax admin firmware copybank...
  • Page 209 15: Command Reference admin ftp server Syntax admin ftp server <IP Address or Name> [login <User Login>] [path <Directory>] Description Sets the FTP/TFTP/SFTP server used for firmware updates and configuration save/restore. admin ftp show Syntax admin ftp show Description Displays FTP settings. admin keypad Syntax admin keypad <lock|unlock>...
  • Page 210 15: Command Reference admin lcd reset Syntax admin lcd reset Description Restarts the program that controls the LCD. admin lcd line1 Syntax admin lcd line1 <1-24 Chars> line2 <1-24 Chars> Description Sets the strings displayed on the LCD user string screen. admin lcd screens Syntax admin lcd screens <zero or more parameters>...
  • Page 211 15: Command Reference Description Displays the LCD screens. admin quicksetup Syntax admin quicksetup Description Runs the quick setup script. admin reboot Syntax admin reboot Description Terminates all connections and reboots the SLC console manager. The front panel LCD displays the “Rebooting the SLC” message, and the normal boot sequence occurs. admin site Syntax admin site row <Data Center Rack Row Number>...
  • Page 212 15: Command Reference admin version Syntax admin version Description Displays current hardware and firmware information. admin web certificate Syntax admin web certificate import via <sftp|scp> certfile <Certificate File> privfile <Private Key File> host <IP Address or Name> login <User Login> [path <Path to Files>] Description Imports an SSL certificate.
  • Page 213: Audit Log Commands

    15: Command Reference admin web protocol Syntax admin web protocol <sslv2|nosslv2> Description Configures the web server to use SSLv2 in addition to SSLv3 and TLSv1. admin web timeout Syntax admin web timeout <disable|5-120> Description Configures the timeout for web sessions. admin web terminate Syntax admin web terminate <Session ID>...
  • Page 214: Cli Commands

    15: Command Reference set auth Syntax set auth <one or more parameters> Parameters authusenextmethod <enable|disable> kerberos <1-6> ldap <1-6> localusers <1-6> nis <1-6> radius <1-6> tacacs+ <1-6> Description Sets ordering of authentication methods. Local Users authentication is always the first method used.
  • Page 215 15: Command Reference listdev ssh <IP Address or Name> Description Allows you to use SCS-compatible commands as shortcuts for executing commands. Enabling this feature enables it only for the current cli session. It is disabled by default. Note: Settings are retained between CLI sessions for local users and users listed in the remote users list.
  • Page 216: Connection Commands

    15: Command Reference Connection Commands connect bidirection Syntax connect bidirection <Device Port # or Name> <endpoint> <one or more parameters> <endpoint> is one of: deviceport <Device Port # or Name> telnet <IP Address or Name> [port <TCP Port>] ssh <IP Address or Name> [port <TCP Port>] [<SSH flags>] tcp <IP Address>...
  • Page 217 15: Command Reference version <1|2> command <Command to Execute> Description Connects to a device port to monitor and/or interact with it, or establishes an outbound network connection. connect listen Syntax connect listen <Device Port # or Name> Description Monitors a device port. connect global outgoingtimeout Syntax connect global outgoingtimeout <disable|1-9999 seconds>...
  • Page 218 15: Command Reference connect unidirection Syntax connect unidirection <Device Port # or Name> dataflow <toendpoint|fromendpoint> <endpoint> <one or more parameters> <endpoint> is one of: deviceport <Device Port # or Name> telnet <IP Address or Name> [port <TCP Port>] ssh <IP Address or Name> [port <TCP Port>] [<SSH flags>] tcp <IP Address>...
  • Page 219: Console Port Commands

    15: Command Reference Description Displays details for a single connection. You can optionally email the displayed information. Console Port Commands set consoleport Syntax set consoleport <one or more parameters> Parameters baud <300-230400> databits <7|8> flowcontrol <none|xon/xoff|rts/cts> parity <none|odd|even> showlines <disable|1-50 lines> stopbits <1|2>...
  • Page 220 15: Command Reference No syntax checking. (Enter each command correctly.)  set cli menu Syntax set cli menu <start | Menu Name> Description Tests a CLI menu. set localusers menu Syntax set localusers add|edit <User Login> menu <Menu Name> Description Assigns a custom user menu to a local user.
  • Page 221: Date And Time Commands

    15: Command Reference set menu delete Syntax set menu delete <Menu Name> [command <Command Number>] Description Deletes a custom user menu or one command within a custom user menu. show menu Syntax show menu <all|Menu Name> Description Displays a list of all menu names or all commands for a specific menu. Date and Time Commands set datetime Syntax...
  • Page 222: Device Commands

    15: Command Reference localserver3 <IP Address or Name> poll <local|public> publicserver <IP Address or Name> state <enable|disable> sync <broadcast|poll> Description Synchronizes the SLC console manager with a remote time server using NTP. show ntp Syntax show ntp Description Displays NTP settings. Device Commands set command Syntax...
  • Page 223: Device Port Commands

    15: Command Reference Description Sends commands to (or control) a device connected to an SLC device port over the serial port. Note: Currently the only devices supported for this type of interaction are the SLP power manager and Sensorsoft devices. Device Port Commands set deviceport port Syntax...
  • Page 224 15: Command Reference dodchapsecret <CHAP Secret or User Password> emaildelay <Email Delay> emaillogging <disable|bytecnt|charstr> emailrestart <Restart Delay> emailsend <email|trap|both> emailstring <Regex String> emailsubj <Email Subject> emailthreshold <Threshold> emailto <Email Address> flowcontrol <none|xon/xoff|rts/cts> initscript <Modem Initialization Script> ipaddr <IP Address> localipaddr <negotiate|IP Address> locallogging <enable|disable>...
  • Page 225 15: Command Reference slmtime <Time Frame> sshauth <enable|disable> sshin <enable|disable> sshport <TCP Port> sshtimeout <disable|1-1800 seconds> stopbits <1|2> sysloglogging <enable|disable> tcpauth <enable|disable> tcpin <enable|disable> tcpport <TCP Port> tcptimeout <disable|1-1800 seconds> telnetauth <enable|disable> telnetin <enable|disable> telnetport <TCP Port> telnettimeout <disable|1-1800 sec> timeoutlogins <disable|1-30 minutes>...
  • Page 226 15: Command Reference Description Configures settings for all or a group of device ports. show deviceport global Syntax show deviceport global Description Displays global settings for device ports. show deviceport names Syntax show deviceport names Description Displays a list of all device port names. show deviceport port Syntax show deviceport port <Device Port List or Name>...
  • Page 227: Diagnostic Commands

    15: Command Reference Description Displays the modes and states of one or more device port(s). You can optionally email the displayed information. Diagnostic Commands diag arp Syntax diag arp [email <Email Address>] Description Displays the ARP table of IP address-to-hardware address mapping. You can optionally email the displayed information.
  • Page 228 15: Command Reference diag netstat Syntax diag netstat [protocol <all|tcp|udp>] [email <Email Address>] Description To display a report of network connections. You can optionally email the displayed information. diag nettrace Syntax diag nettrace <one or more parameters> Parameters ethport <1|2> host <IP Address or Name>...
  • Page 229: Email Log Commands

    15: Command Reference Description Displays performance statistics for an Ethernet Port or Device Port, averaged over the last 5 seconds. diag sendpacket host Syntax diag sendpacket host <IP Address or Name> port <TCP or UDP Port Number> [string <Packet String>] [protocol <tcp | udp>] [count <Number of Packets>] Defaults protocol:tcp...
  • Page 230 15: Command Reference admin events add Syntax admin events add <trigger> <response> <trigger> is one of: receivetrap, templimit, humidlimit or overcurrent <response> is one of: action <syslog> action <fwdalltrapseth|fwdseltrapeth> ethport <1|2> nms <SNMP NMS> community <SNMP Community> [oid <SNMP OID>] action <fwdalltrapsmodem|fwdseltrapmodem>...
  • Page 231: Host List Commands

    15: Command Reference admin events show Syntax admin events show Description Displays event definitions. Host List Commands set hostlist (name) Syntax set hostlist add|edit <Host List Name> [<parameters>] Parameters name <Host List Name> (edit only) retrycount <1-10> (Default is 3.) auth <enable|disable>...
  • Page 232: Ip Filter Commands

    15: Command Reference set hostlist edit Syntax set hostlist edit <Host List Name> move <Host Number> position <Host Number> Description Moves a host entry to a new position in the host list. show hostlist Syntax show hostlist <all|names|Host List Name> Description Displays the members of a host list.
  • Page 233 15: Command Reference append insert <Rule Number> replace <Rule Number> delete <Rule Number> Description Sets IP filter rules. set ipfilter state Syntax set ipfilter state <enable|disable> [testtimer <disable|1-120 minutes>] Description Enables or disables IP filtering for incoming network traffic. show ipfilter Syntax show ipfilter Description...
  • Page 234: Kerberos Commands

    15: Command Reference Kerberos Commands set kerberos Syntax set kerberos <one or more parameters> Parameters breakseq <1-10 Chars> clearports <Port List> custommenu <Menu Name> allowdialback <enable|disable> dialbacknumber <Phone Number> dataports <Port List> escapeseq <1-10 Chars> group <default|power|admin> ipaddr <Key Distribution Center IP Address> kdc <Key Distribution Center>...
  • Page 235: Local Users Commands

    15: Command Reference adsupport <enable|disable> base <LDAP Base> bindname <Bind Name> bindpassword <Bind Password> bindwithlogin <enable|disable> useldapschema <enable|disable> breakseq <1-10 Chars> clearports <Port List> custommenu <Menu Name> allowdialback <enable|disable> dialbacknumber <Phone Number> dataports <Ports List> encrypt <enable|disable> escapeseq <1-10 Chars> group <default|power|admin>...
  • Page 236 15: Command Reference breakseq <1-10 Chars> changenextlogin <enable|disable> changepassword <enable|disable> clearports <Port List> custommenu <Menu Name> dataports <Port List> dialbacknumber <Phone Number> displaymenu <enable|disable> escapeseq <1-10 Chars> group <default|power|admin> listenports <Port List> passwordexpires <enable|disable> permissions <Permission List> Description Configures local accounts including sysadmin who log in to the SLC console manager by means of the Web, SSH, Telnet, or the console port.
  • Page 237 15: Command Reference Description Deletes a local user. set localusers lifetime Syntax set localusers lifetime <Number of Days> Description Sets the number of days the login password may be used. The default is 90 days. set localusers lock Syntax set localusers lock|unlock <User Login> Description Allows or blocks a user login.
  • Page 238: Log Commands

    15: Command Reference set localusers periodwarning Syntax set localusers periodwarning <Number of Days> Description Sets the number of days the system warns the user that the password will be expiring. The default is 7 days. set localusers reusehistory Syntax set localusers reusehistory <Number of Passwords> Description Sets the number of passwords the user must use before reusing an old password.
  • Page 239 15: Command Reference Description Clears the modem log the modem log is automatically pruned when it reaches 50K. set log modem pppdebug Syntax set log modem pppdebug <enable|disable> Description Enables PPP debugging in the modem log. When enabled, performance could be impacted. show log files Syntax show log files nfs | pccard | usb [locdir <NFS Mount Local...
  • Page 240: Network Commands

    15: Command Reference Network Commands set network Syntax set network <parameters> Parameters interval <1-99999 Seconds> ipforwarding <enable|disable> probes <Number of Probes> startprobes <1-99999 Seconds> Description Sets TCP Keepalive and IP Forwarding network parameters. set network bonding Syntax set network bonding <disabled|active-backup|802.3ad|load-balancing> Description Configures ethernet bonding.
  • Page 241 15: Command Reference set network host Syntax set network host <Hostname> [domain <Domain Name>] Description Sets the SLC host name and domain name. set network ipv6 Syntax set network ipv6 <enable|disable> Description Enables or disables IPv6 networking. set network port Syntax set network port <1|2>...
  • Page 242: Nfs And Smb/Cifs Commands

    15: Command Reference show network dns Syntax show network dns Description Displays DNS settings. show network gateway Syntax show network gateway Description Displays gateway settings. show network host Syntax show network host Description Displays the network host name of the SLC console manager. show network port Syntax show network port <1|2>...
  • Page 243 15: Command Reference Note: The admin config command saves SLC configurations on the SMB/CIFS share. set cifs password Syntax set cifs password Description Changes the password for the SMB/CIFS share login (default is cifsuser). set nfs mount Syntax set nfs mount <1|2|3> <one or more parameters> Parameters remdir <NFS Share>...
  • Page 244: Nis Commands

    15: Command Reference Description Displays NFS share settings. NIS Commands set nis Syntax set nis <one or more parameters> Parameters breakseq <1-10 Chars> broadcast <enable|disable> clearports <Port List> custommenu <Menu Name> allowdialback <enable|disable> dialbacknumber <Phone Number> dataports <Port List> domain <NIS Domain Name> escapeseq <1-10 Chars>...
  • Page 245: Pc Card Commands

    15: Command Reference PC Card Commands pccard modem Syntax pccard modem <upper|lower> <parameters> Parameters auth <pap|chap> baud <300-115200> (Default is 9600) cbcpnocallback <enable|disable> cbcptype <admin|user> calleridcmd <Modem Command String> calleridlogging <enable|disable> chaphost <CHAP Host or User Name> chapsecret <CHAP Secret or User Password> databits <7|8>...
  • Page 246 15: Command Reference modemtimeout <disable|1-9999 sec> nat <enable|disable> parity <none|odd|even> remoteipaddr <negotiate|IP Address> restartdelay <PPP Restart Delay> service <none|telnet|ssh|tcp> sshauth <enable|disable> sshport <TCP Port> stopbits <1|2> tcpauth <enable|disable> tcpport <TCP Port> telnetauth <enable|disable> telnetport <TCP Port> timeoutlogins <disable|1-30 minutes> Note: Dial-out GPRS connections may replace the default route and DNS entries.
  • Page 247 15: Command Reference pccard storage format Syntax pccard storage format <upper|lower> [filesystem <ext2|fat>] Description Formats a Compact Flash card. pccard storage mount Syntax pccard storage mount <upper|lower> Description Mounts a Compact Flash card in the SLC console manager for use as a storage device. The Compact Flash card must be formatted with an ext2 or FAT file system before you mount it.
  • Page 248: Radius Commands

    15: Command Reference show pccard modem Syntax show pccard modem Description Displays product information and settings for any PC card modem. RADIUS Commands set radius Syntax set radius <one or more parameters> Parameters breakseq <1-10 Chars> clearports <Port List> custommenu <Menu Name> allowdialback <enable|disable>...
  • Page 249: Remote Users Commands

    15: Command Reference show radius Syntax show radius Description Displays RADIUS settings. Remote Users Commands set remoteusers Syntax set remoteusers add|edit <User Login> [<parameters>] Parameters allowdialback <enable|disable> breakseq <1-10 Chars> listenports <Port List> clearports <Port List> custommenu <Menu Name> dataports <Port List> dialbacknumber <Phone Number>...
  • Page 250: Routing Commands

    15: Command Reference set remoteusers listonlyauth Syntax set remoteusers listonlyauth <enable|disable> Description Sets whether remote users who are not part of the remote user list will be authenticated. show remoteusers Syntax show remoteusers Description Displays settings for all remote users. Routing Commands set routing Syntax...
  • Page 251: Script Commands

    15: Command Reference Script Commands set script delete Syntax set script delete <interface|batch> name <Script Name> Description Delete a script. set script import Syntax set script import <interface|batch> via <ftp|scp|copypaste> [file <Script File>] [name <Script Name>] [host <IP Address or Name>] [login <User Login>] [path <Path to Script File>] Note: Interface scripts have default/do user rights.
  • Page 252: Services Commands

    15: Command Reference show script Syntax show script [type <interface|batch> [name <Script Name>]] Description Display list of Device Port (interface) scripts or CLI (batch) scripts, or view the contents of a script. Services Commands set services Syntax set services <one or more services parameters> Parameters alarmdelay <1-6000 Seconds>...
  • Page 253 15: Command Reference ssh <enable|disable> syslogserver1 <IP Address or Name> syslogserver2 <IP Address or Name> telnet <enable|disable> timeoutssh <disable|1-30 minutes> timeouttelnet <disable|1-30 minutes> traps <enable|disable> trapcommunity <Trap Community> v1ssh <enable|disable> webssh <enable|disable> webtelnet <enable|disable> v3auth <md5|sha> v3encrypt <des|aes> v3password <V3 RO User Password> v3phrase <V3 RO User Passphrase>...
  • Page 254: Slc Network Commands

    15: Command Reference SLC Network Commands set slcnetwork Syntax set slcnetwork <parameters> Parameters add <IP Address> delete <IP Address> search <localsubnet|ipaddrlist|both> Description Detects and displays all SLC console manager or user-defined IP addresses on the local network. show slcnetwork Syntax show slcnetwork[ipaddrlist <all|Address Mask>] Description Detects and displays all SLC console managers on the local network.
  • Page 255 15: Command Reference Description Deletes an ssh key. Specify the keyuser and keyhost to delete an imported key; specify the keyuser and keyname to delete exported key. set sshkey export Syntax set sshkey export <ftp|scp|copypaste> <one or more parameters> Parameters [format <openssh|secsh>] [host <IP Address or Name>] [login <User Login>]...
  • Page 256 15: Command Reference Description Resets defaults for all or selected host keys. show sshkey export Syntax show sshkey export <one or more parameters> Parameters [keyhost <SSH Key IP Address or Name>] [keyuser <SSH Key User>] [viewkey <enable|disable>] Description Displays all exported keys or keys for a specific user, IP address, or name. show sshkey import Syntax show sshkey import <one or more parameters>]...
  • Page 257: Status Commands

    15: Command Reference Status Commands show sysconfig Syntax show sysconfig [display <basic|auth|devices>] [email <Email Address] Description Displays a snapshot of all configurable parameters. Optionally emails the displayed information. show sysstatus Syntax show sysstatus [email <Email Address>] Description To display the overall status of all SLC devices. Optionally emails the displayed information. System Log Commands show syslog Syntax...
  • Page 258: Tacacs+ Commands

    15: Command Reference TACACS+ Commands set tacacs+ Syntax set tacacs+ <one or more parameters> Parameters breakseq <1-10 Chars> clearports <Port List> custommenu <Menu Name> allowdialback <enable|disable> dialbacknumber <Phone Number> dataports <Port List> encrypt <enable|disable> escapeseq <1-10 Chars> group <default|power|admin> listenports <Port List> permissions <Permission List>...
  • Page 259: Usb Commands

    15: Command Reference Description Sets the acceptable range for the internal temperature sensor (an SNMP trap is sent if the temperature is outside of this range). show temperature Syntax show temperature Description Displays the acceptable range and the current reading from the internal temperature sensor. USB Commands set usb access Syntax...
  • Page 260 15: Command Reference dodchaphost <CHAP Host or User Name> dodchapsecret <CHAP Secret or User Password> restartdelay <PPP Restart Delay> flowcontrol <none|xon/xoff|rts/cts> initscript <Modem Init Script> localipaddr <negotiate|IP Address> modemmode <text|ppp> modemstate <disable | dialin | dialout | dialback | cbcpserver | cbcpclient | dialondemand |dialin+ondemand | dialinhostlist>...
  • Page 261 15: Command Reference set usb storage copy Syntax set usb storage copy <U1> file <Filename> newfile <New Filename> Description Copies a file on a thumb drive. set usb storage delete Syntax set usb storage delete <U1> file <Current Filename> Description Removes a file on a thumb drive.
  • Page 262: User Permissions Commands

    - view Diagnostics & Reports rs - Reboot or Shutdown the SLC wb - Web Access fc - manage Firmware and Configurations sn - configure Secure Lantronix Network ad - full Administrative rights sk - configure SSH Keys po - configure Power Outlets...
  • Page 263: Appendix A: Bootloader

    To access the bootloader CLI: 1. Power up the SLC console manager. 2. Type x15 within 10 seconds of power up. The bootloader halts the boot procedure and displays a Lantronix command prompt. Bootloader Commands Table A-1 User Commands Lists and prints the command list and online help.
  • Page 264: Administrator Commands

    Appendix A: Bootloader Administrator Commands In addition to the commands that the user can issue, the administrator can issue the following commands: Copies an image of the drive from the lower PCMCIA imagecopy device to the internal CF card. Provides a new password for user admin. The default passwd password for user admin is admin.
  • Page 265: Appendix B: Security Considerations

    Appendix B: Security Considerations The SLC console manager provides data path security by means of SSH or Web/SSL. Do not assume that you have complete security, however. Securing the data path is only one way to ensure security. This appendix briefly discusses some important security considerations. Security Practice Develop and document a Security Practice.
  • Page 266: Appendix C: Safety Information

    Note: Refer all servicing to Lantronix, Inc. Power Plug When disconnecting the power cable from the socket, pull on the plug, not the cord.
  • Page 267: Grounding

    Appendix C: Safety Information Grounding Maintain reliable grounding of this product.  Pay particular attention to supply connections when connecting to power strips, rather than  directly to the branch circuit. Install DC-rated equipment only under the following conditions:  Connect the equipment to a DC supply source that is electrically isolated from the AC source and reliably connected to ground, or connect it to a DC (SELV) source.
  • Page 268: Port Connections

    Appendix C: Safety Information Port Connections Only connect the network port to an Ethernet network that supports 10Base-T/100Base-T.  Only connect device ports to equipment with serial ports that support EIA-232 (formerly RS-  232C). Only connect the console port to equipment with serial ports that support EIA-232 (formerly ...
  • Page 269: Appendix D: Sicherheitshinweise

    Umständen Feuer oder elektrischen Schlag zur Folge haben könnten. Hinweis: Lassen Sie alle Wartungsarbeiten durch die Firma Lantronix durchführen. Netzstecker Wenn Sie das Netzkabel von der Steckdose trennen, ziehen Sie am Stecker und nicht am ...
  • Page 270: Stromversorgung

    Appendix D: Sicherheitshinweise Stromversorgung Dieses Gerät kann mehr als eine Stromversorgung haben. Trennen Sie alle Stromquellen vor  Wartungsarbeiten, um elektrischen Schlag zu vermeiden. Überprüfen Sie die elektrischen Angaben auf dem Typenschild um sicherzustellen, das die  Netzversorgung oder Anschlußkabel nicht überlastet werden. Anschluß...
  • Page 271: Signalverbindungen

    Appendix D: Sicherheitshinweise installiert wird, in der die Temperatur geringer als die für das SLC Gerät angegebene, maximale Betriebstemperatur ist. Installieren Sie das Gerät in einen Einbauschrank oder Rack so daß es zu keiner  Einschränkung der Luftzufuhr kommt, die einen sicheren Betrieb des Gerätes gewährleistet. Installieren Sie das Gerät in einen Einbauschrank oder Rack so daß...
  • Page 272: Appendix E: Adapters And Pinouts

    Lantronix adapters. The cables are available in various lengths. In most cases, you will need an adapter for your serial devices. Lantronix offers a variety of RJ45- to-serial connector adapters for many devices. These adapters convert the RJ45 connection on...
  • Page 273 Appendix E: Adapters and Pinouts Figure E-2 RJ45 Receptacle to DB25F DCE Adapter for the SLC Console Manager (PN 200.2067A) SLC™ Console Manager User Guide...
  • Page 274 Appendix E: Adapters and Pinouts Figure E-3 RJ45 Receptacle to DB9M DCE Adapter for the SLC Console Manager (PN 200.2069A) SLC™ Console Manager User Guide...
  • Page 275 Appendix E: Adapters and Pinouts Figure E-4 RJ45 Receptacle to DB9F DCE Adapter for the SLC Console Manager (PN 200.2070A) Use PN 200.2070A adapter with a PC serial port. SLC™ Console Manager User Guide...
  • Page 276 Appendix E: Adapters and Pinouts Figure E-5 RJ45 to RJ45 Adapter for Netra/Sun/Cisco and SLP (PNs 200.2225 and ADP010104-01) Note: The cable ends of the ADP010104-01 are an RJ45 socket on one end and a RJ45 plug on the other instead of RJ45 sockets on both ends. Use this adapter for SLP remote power manager, Netra/SUN/Cisco, and others.
  • Page 277: Appendix F: Protocol Glossary

    Appendix F: Protocol Glossary BOOTP (Bootstrap Protocol) Similar to DHCP, but for smaller networks. Automatically assigns the IP address for a specific duration of time. CHAP (Challenge Handshake Authentication Protocol) A secure protocol for connecting to a system; it is more secure than the PAP. DHCP (Dynamic Host Configuration Protocol) Internet protocol for automating the configuration of computers that use TCP/IP.
  • Page 278 Appendix F: Protocol Glossary configured for the modem – either a fixed number assigned to the modem, or a number associated with the user that was authenticated (the user must have Allow Dial-back enabled and a Dial-back Number defined). If the SLC console manager can determine a dial-back number to use, it will hang up and wait Dial-back Delay seconds before initiating the dial- back.
  • Page 279 Appendix F: Protocol Glossary For Dial-on-Demand, the PPP connection will be established when it sees IP traffic destined  for the Remote IP. When this occurs, the SLC console manager dials the Dial-out Number, and if the remote peer requests PAP or CHAP authentication, provides the Dial-out Login and Dial-out Password as authentication tokens.
  • Page 280 Appendix F: Protocol Glossary The SLC device will request the type of number defined by CBCP Client Type - either an  Admin-defined Number (the CBCP server determines the number to call) or a User-defined Number (the SLC console manager will provide the Fixed Dial-back Number as the number to call).
  • Page 281 Appendix F: Protocol Glossary RADIUS (Remote Authentication Dial-In User Service) An authentication and accounting protocol. Enables remote access servers to communicate with a central server to authenticate dial-in users and their access permissions. A company stores user profiles in a central database that all remote servers can share. SMB/CIFS (Server Message Block/Common Internet File System): Microsoft’s protocol for allowing all applications as well as Web browsers to share files across the Internet.
  • Page 282: Appendix G: Compliance Information

    Manufacturer Name and Address Lantronix Inc., 167 Technology, Irvine, CA 92618 USA Declares that the following product: Product Names: Models SLC8, SLC16, SLC32, and SLC48 Console Managers Conform to the following standards or other normative documents: Safety: EN60950:1992+A1, A2, A3, A4, A11...
  • Page 283 This product carries the CE mark since it has been tested and found compliant with the following standards: Safety:EN 60950 Emissions:EN 55022 Class A Immunity:EN 55024 RoHS Notice All Lantronix products in are China RoHS-compliant and free of the following hazardous substances and elements: Lead (Pb)  Mercury (Hg) ...
  • Page 284 Appendix G: Compliance Information Table G-1 Lantronix Product Family Names and Toxic/Hazardous Substances and Elements Product Family Name Toxic or hazardous Substances and Elements Lead Mercur Cadmium Hexavalent Polybrominated Polybrominate (Pb) y (Hg) (Cd) Chromium (Cr biphenyls (PBB) d diphenyl...
  • Page 285: Appendix H: Dc Connector Instructions

    Appendix H: DC Connector Instructions The -48VDC plug connector is provided to make the input power connectors for your console server. The -48VDC input source should be circuit breaker or fuse protected at 5 amps. Input Voltage: -48VDC (acceptable range of -40 to -60 VDC) ...
  • Page 286 Appendix H: DC Connector Instructions 3. Using a small screwdriver, press the slot to release the spring pressure for each conductor (as shown in Figure H-2) and insert the wire. When the wire is in position, release the pressure on the screwdriver to securely capture the wire.
  • Page 287 Appendix H: DC Connector Instructions Figure H-5 DC Power Cord into the SLC Console Manager b. Turn on your -48VDC power source. c. Turn on the power switch of the SLC console server. 7. Follow the setup instructions in your SLC manual to use your product. SLC™...
  • Page 288: Appendix I: Ldap Schemas

    Appendix I: LDAP Schemas This appendix describes the procedure for defining individual user permissions from a Windows Active Directory (AD) server to use with the SLC console manager firmware version 5.4 or greater. The procedure outlined in this appendix is based on Windows Server 2003 and 2008 and can vary with other Windows versions.
  • Page 289 Appendix I: LDAP Schemas Figure I-1 Programs Window 3. Click Start > Run > mmc. 4. Click OK. Figure I-2 shows the window that displays. Figure I-2 MMC Window 5. On the File menu, click Add/Remove Snap-in. Figure I-3 shows the window that displays. SLC™...
  • Page 290 Appendix I: LDAP Schemas Figure I-3 Snap-In Window 6. Under Available snap-ins, click Active Directory Schema > Add > OK. Figure I-4 shows the directory that displays. Figure I-4 Active Directory Schema 7. To save this console, click Save on the File menu. Figure I-5 shows the window that displays.
  • Page 291 Appendix I: LDAP Schemas Figure I-5 Console Root 8. In the Save As dialog box, do one of the following: a. To place the snap-in in the Administrative Tools folder, in File name box, type a name for the snap-in, and then click Save. Figure I-6 shows the folder that displays.
  • Page 292: Creating The Slc Schema Attribute

    Appendix I: LDAP Schemas Figure I-7 Save As Window Creating the SLC Schema Attribute 1. Once you have a saved Schema console, open it and right click on Attributes. 2. Mouse over New and left click on Attribute. Figure I-8 shows the window that displays.
  • Page 293: Adding The Attribute To The Users Group In Windows

    Appendix I: LDAP Schemas Figure I-9 Create New Attribute Object Window 5. For the OID, enter 1.3.6.1.4.1.244.100.10. 6. Enter anything for the description. 7. Change the Syntax: pull-down menu to Unicode String. 8. Click on OK. Adding the Attribute to the Users Group in Windows 1.
  • Page 294 Appendix I: LDAP Schemas Figure I-11 User Class Window 3. Right click on user and left click on Properties. Figure I-12 shows the window that displays. Figure I-12 Class User Properties Window 4. Under the Attributes tab, click on Add. Figure I-13 shows the window that displays.
  • Page 295 Appendix I: LDAP Schemas Figure I-13 User Properties Window 5. Find the secureLinxSLCPerms attribute, highlight it, and click on OK. Figure I-14 Select Schema Object Window 6. Click on OK on the window underneath. 7. Click on File and click on Save. 8.
  • Page 296: Adding The Permissions To The Individual User

    Appendix I: LDAP Schemas Adding the Permissions to the Individual User 1. Open ADSI Edit (if you start typing adsi in the search line in Windows, it should find it). Figure I-15 shows the window that displays. Figure I-15 ADSI Edit Window 2.
  • Page 297 Appendix I: LDAP Schemas Figure I-16 ADSI Edit Window, CN=Users Folder 3. Right click on the user for whom you wish to configure permissions and left click on Properties. Figure I-17 shows the Properties Window. Figure I-17 Properties Window 4. Under the Attribute Editor tab, scroll down to secureLinxSLCPerms. 5.
  • Page 298: Values To Use

    The values that you can use in the Value: field that specify the user permissions are as follows: rights  data  listen  clear  outlet (for the Lantronix SLB™ branch office manager)  group  escseq  brkseq  menu ...
  • Page 299: String Format

     fc: Firmware/Configuration  dr: Diagnostic Reports  sn: Secure Lantronix Network  wb: Web Access  For data, listen, and clear, you specify ports. Contiguous ports with a dash, non-contiguous with a comma, U1 for the USB port, or U and L for the upper and lower PC Card slots (1-5,8,11,U,L).

This manual is also suitable for:

Slc16Slc32Slc48