Lantronix SLC 8000 Advanced Console Manager User Manual To The A85d6a67 08f9 4e1d B0cb Fc23a5d0970b

User Manual: Lantronix SLC 8000 to the manual

Open the PDF directly: View PDF .
Page Count: 337

Download
Open PDF In Browser	View PDF

SLC™ 8000
Advanced Console Manager
User Guide

Part Number 900-704-R
Revision B October 2014

Copyright & Trademark
© 2014 Lantronix, Inc. All rights reserved. No part of the contents of this book may be transmitted
or reproduced in any form or by any means without the written permission of Lantronix.
Lantronix and Lantronix Spider are registered trademarks of Lantronix, Inc. in the United States
and other countries. SLC, SLP, and vSLM are trademarks of Lantronix, Inc.
Windows and Internet Explorer are registered trademarks of Microsoft Corporation. Firefox is a
registered trademark of the Mozilla Foundation. Chrome and iGoogle are trademarks of Google
Inc. All other trademarks and trade names are the property of their respective holders.

Warranty
For details on the Lantronix warranty policy, please go to our web site at
http://www.lantronix.com/support/warranty.

Open Source Software
Some applications are Open Source software licensed under the Berkeley Software Distribution
(BSD) license or the GNU General Public License (GPL) as published by the Free Software
Foundation (FSF). Lantronix grants you no right to receive source code to the Open Source
software; however, in some cases, rights and access to source code for certain Open Source
software may be available directly from Lantronix’ licensors. Upon request, Lantronix will identify
the Open Source components and the licenses that apply to them. Your use of each Open Source
component or software is subject to the terms of the applicable license. The BSD license is
available at http://opensource.org/licenses. The GNU General Public License is available at
http://www.gnu.org/licenses/. Your use of each Open Source component or software is subject to
the terms of the applicable license.
OPEN SOURCE SOFTWARE IS DISTRIBUTED WITHOUT ANY WARRANTY, INCLUDING ANY
IMPLIED WARRANTY OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE.
SEE THE APPLICATION LICENSE AGREEMENT FOR ADDITIONAL INFORMATION.

Contacts
Lantronix Corporate Headquarters
167 Technology Drive
Irvine, CA 92618, USA
Toll Free:
Phone:
Fax:

800-526-8766
949-453-3990
949-453-3995

Technical Support
Online: www.lantronix.com/support
Sales Offices
For a current list of our domestic and international sales offices, go to the Lantronix web site at
www.lantronix.com/about/contact.

SLC™ 8000 Advanced Console Manager User Guide

Disclaimer & Revisions
All information contained herein is provided “AS IS.” Lantronix undertakes no obligation to update
the information in this publication. Lantronix does not make, and specifically disclaims, all
warranties of any kind (express, implied or otherwise) regarding title, non-infringement, fitness,
quality, accuracy, completeness, usefulness, suitability or performance of the information provided
herein. Lantronix shall have no liability whatsoever to any user for any damages, losses and
causes of action (whether in contract or in tort or otherwise) in connection with the user’s access or
usage of any of the information or content contained herein. The information and specifications
contained in this document are subject to change without notice.
Operation of this equipment in a residential area is likely to cause interference, in which case the
user, at his or her own expense, will be required to take whatever measures may be required to
correct the interference.
Note: This equipment has been tested and found to comply with the limits for Class A
digital device pursuant to Part 15 of the FCC Rules. These limits are designed to provide
reasonable protection against harmful interference when the equipment is operated in a
commercial environment. This equipment generates, uses, and can radiate radio
frequency energy and, if not installed and used in accordance with this User Guide, may
cause interference to radio communications. Operation of this equipment in a residential
area is likely to cause interference, in which case the user will be required to correct the
interference at his own expense.
Changes or modifications made to this device that are not explicitly approved by Lantronix will void
the user's authority to operate this device.

Revision History
Date

Rev.

Comments

March 2014

Preliminary release.

October 2014

Initial document for firmware release 7.1.0.0.

SLC™ 8000 Advanced Console Manager User Guide

Table of Contents
Copyright & Trademark ______________________________________________________ 2
Warranty _________________________________________________________________ 2
Open Source Software ______________________________________________________ 2
Contacts _________________________________________________________________ 2
Disclaimer & Revisions ______________________________________________________ 3
Revision History ___________________________________________________________ 3
List of Tables ____________________________________________________________ 13
List of Figures ____________________________________________________________ 14

1: About this Guide

Purpose and Audience _____________________________________________________ 17
Summary of Chapters ______________________________________________________ 17
Additional Documentation ___________________________________________________ 18

2: Introduction

Features ________________________________________________________________ 19
Console Management __________________________________________________ 19
Power _______________________________________________________________ 19
Models __________________________________________________________________ 20
System Features __________________________________________________________ 20
Protocols Supported ____________________________________________________ 21
Access Control ________________________________________________________ 21
Device Port Buffer _____________________________________________________ 22
Configuration Options ___________________________________________________ 22
Hardware Features ________________________________________________________ 22
Serial Port Interfaces ___________________________________________________ 23
Network Connections ___________________________________________________ 24
USB Interface _________________________________________________________ 25
Memory Card Port _____________________________________________________ 25
Internal Modem ________________________________________________________ 26

3: Installation

What's in the Box _________________________________________________________ 27
Product Information Label _______________________________________________27
Technical Specifications ____________________________________________________ 28
Physical Installation ________________________________________________________ 29
Connecting to a Device Port ______________________________________________ 29
Modular Expansion for I/O Module _________________________________________ 31
Connecting to Network Ports _____________________________________________ 31

SLC™ 8000 Advanced Console Manager User Guide

Connecting Terminals ___________________________________________________ 31
AC Input _____________________________________________________________ 32
Modem Installation _____________________________________________________ 33
Battery Replacement ___________________________________________________ 35

4: Quick Setup

Recommendations ________________________________________________________ 39
IP Address _______________________________________________________________ 39
Method #1 Using the Front Panel Display _______________________________________ 40
Front Panel LCD Display and Keypads _____________________________________ 40
Navigating ____________________________________________________________ 40
Entering the Settings ___________________________________________________ 42
Restoring Factory Defaults _______________________________________________43
Method #2 Quick Setup on the Web Page ______________________________________ 43
Network Settings ______________________________________________________ 45
Date & Time Settings ___________________________________________________ 45
Administrator Settings __________________________________________________ 46
Method #3 Quick Setup on the Command Line Interface ___________________________ 46
Next Step _______________________________________________________________ 49

5: Web and Command Line Interfaces

Web Manager ____________________________________________________________ 50
Logging in ____________________________________________________________ 52
Logging Out __________________________________________________________ 53
Web Page Help _______________________________________________________ 53
Command Line Interface ____________________________________________________ 53
Logging In ____________________________________________________________ 53
Logging Out __________________________________________________________ 54
Command Syntax ______________________________________________________ 54
Command Line Help ____________________________________________________ 54
Tips _________________________________________________________________ 54
General CLI Commands _________________________________________________ 55

6: Basic Parameters

Requirements ____________________________________________________________ 57
Ethernet Interfaces (Eth1 and Eth2) ________________________________________ 59
Gateway _____________________________________________________________ 60
Hostname & Name Servers ______________________________________________ 60
DNS Servers __________________________________________________________ 61
DHCP-Acquired DNS Servers ____________________________________________ 61
TCP Keepalive Parameters ______________________________________________ 61
Ethernet Counters _____________________________________________________ 61

SLC™ 8000 Advanced Console Manager User Guide

Network Commands ____________________________________________________ 61
IP Filter _________________________________________________________________ 63
Viewing IP Filters ______________________________________________________ 63
Mapping Rulesets ______________________________________________________ 63
Enabling IP Filters _____________________________________________________ 64
Configuring IP Filters ___________________________________________________ 64
Rule Parameters _______________________________________________________ 65
Updating an IP Filter ____________________________________________________ 67
Deleting an IP Filter ____________________________________________________ 67
IP Filter Commands _______________________________________________________ 67
Routing _________________________________________________________________ 68
Dynamic Routing ______________________________________________________ 68
Static Routing _________________________________________________________ 69
Equivalent Routing Commands ___________________________________________ 69
VPN ____________________________________________________________________69
Configuring an IPsec VPN Tunnel through the CLI ________________________________ 72
Security _________________________________________________________________ 73

7: Services

System Logging and Other Services ___________________________________________ 75
SSH/Telnet/Logging _______________________________________________________ 76
System Logging _______________________________________________________ 76
Audit Log ____________________________________________________________ 77
SMTP _______________________________________________________________ 77
SSH ________________________________________________________________ 77
Telnet _______________________________________________________________ 78
Web SSH/Web Telnet Settings ___________________________________________ 78
Phone Home __________________________________________________________ 78
SNMP __________________________________________________________________ 78
Communities __________________________________________________________ 80
Version 3 ____________________________________________________________ 80
V3 Read-Only User ____________________________________________________ 81
V3 Read-Write User ____________________________________________________ 81
SNMP, SSH, Telnet, and Logging Commands ________________________________ 81
NFS and SMB/CIFS _______________________________________________________ 82
SMB/CIFS Share ______________________________________________________ 83
NFS and SMB/CIFS Commands __________________________________________ 84
Secure Lantronix Network ___________________________________________________ 85
Secure Lantronix Network Commands ______________________________________ 89
Date and Time ____________________________________________________________ 90
Date and Time Commands _______________________________________________92
Web Server ______________________________________________________________ 93
Admin Web Commands _________________________________________________ 94

SLC™ 8000 Advanced Console Manager User Guide

Services - Web Sessions ________________________________________________ 95
Services - SSL Certificate ________________________________________________ 96
Web Server Commands _________________________________________________ 98
iGoogle Gadgets __________________________________________________________ 98

8: Device Ports

100

Connection Methods ______________________________________________________ 100
Permissions _____________________________________________________________ 100
I/O Modules _____________________________________________________________ 101
Device Status ___________________________________________________________ 102
Device Ports ____________________________________________________________ 103
Telnet/SSH/TCP in Port Numbers ________________________________________ 104
Global Commands ____________________________________________________ 104
Device Ports - Settings ____________________________________________________ 105
Device Port Settings ___________________________________________________ 107
IP Settings __________________________________________________________ 107
Data Settings ________________________________________________________ 108
Hardware Signal Triggers _______________________________________________ 109
Modem Settings (Device Ports) __________________________________________ 109
Modem Settings: Text Mode _____________________________________________ 110
Modem Settings: PPP Mode ____________________________________________ 110
Port Status and Counters _______________________________________________ 112
Device Ports - SLP / ServerTech CDU Device _______________________________ 112
Status/Info __________________________________________________________ 114
Commands __________________________________________________________ 114
Device Port - Sensorsoft Device __________________________________________ 114
Device Port Commands ________________________________________________ 115
Device Commands ____________________________________________________ 117
Interacting with a Device Port _______________________________________________ 118
Device Ports - Logging ____________________________________________________ 119
Local Logging ________________________________________________________ 119
NFS File Logging _____________________________________________________ 119
USB and SD Card Logging ______________________________________________120
Email/SNMP Notification _______________________________________________ 120
Sylog Logging ________________________________________________________ 120
Local Logging ________________________________________________________ 121
Email/Traps _________________________________________________________ 121
Log Viewing Attributes _________________________________________________ 123
NFS File Logging _____________________________________________________ 123
USB / SD Card Logging ________________________________________________ 123
Syslog Logging _______________________________________________________ 123
Logging Commands ___________________________________________________ 124
Console Port ____________________________________________________________ 125

SLC™ 8000 Advanced Console Manager User Guide

Console Port Commands _______________________________________________ 126
Internal Modem Settings ___________________________________________________ 126
Setting Up Internal Modem Storage _______________________________________ 127
Host Lists ______________________________________________________________ 130
Host Parameters ______________________________________________________ 131
Host Parameters ______________________________________________________ 133
Host List Commands __________________________________________________ 134
Scripts _________________________________________________________________ 135
Scripts ______________________________________________________________ 137
User Rights __________________________________________________________ 138
Batch Script Syntax ___________________________________________________ 139
Interface Script Syntax _________________________________________________ 140
Primary Commands ___________________________________________________ 141
Secondary Commands _________________________________________________ 142
Control Flow Commands _______________________________________________ 144
Sample Scripts _______________________________________________________ 145
Batch Script—SLC CLI _________________________________________________ 147
Sites __________________________________________________________________ 149
Modem Dialing States _____________________________________________________ 152
Dial In ______________________________________________________________ 152
Dial-back ____________________________________________________________ 153
Dial-on-demand ______________________________________________________ 153
Dial-in & Dial-on-demand _______________________________________________ 154
Dial-back & Dial-on-demand _____________________________________________ 154
CBCP Server ________________________________________________________ 155

9: USB/SD Card Port

157

Set Up of USB/SD Card Storage ____________________________________________ 157
Data Settings ________________________________________________________ 161
Modem Settings ______________________________________________________ 161
Text Mode ___________________________________________________________ 162
PPP Mode __________________________________________________________ 163
IP Settings __________________________________________________________ 164
Manage Files ____________________________________________________________ 164
USB Commands _________________________________________________________ 165
SD Card Commands ______________________________________________________ 165

10: Connections

166

Typical Setup Scenarios for the SLC Unit ______________________________________ 166
Terminal Server ______________________________________________________ 166
Remote Access Server _________________________________________________ 167
Reverse Terminal Server _______________________________________________ 167
Multiport Device Server ________________________________________________ 168

SLC™ 8000 Advanced Console Manager User Guide

Console Server _______________________________________________________ 168
Connection Configuration _______________________________________________ 169
Connection Commands ________________________________________________ 171

11: User Authentication

174

Authentication Commands ______________________________________________176
User Rights _____________________________________________________________ 177
Local and Remote User Settings ____________________________________________ 178
Adding, Editing or Deleting a User ________________________________________ 179
Shortcut ____________________________________________________________ 183
Local Users Commands ________________________________________________ 183
Local User Rights Commands ___________________________________________ 184
Remote User Commands _______________________________________________ 185
Parameters __________________________________________________________ 185
NIS ___________________________________________________________________186
NIS Commands ______________________________________________________ 189
LDAP __________________________________________________________________ 190
LDAP Commands _____________________________________________________ 194
RADIUS ________________________________________________________________ 196
RADIUS Commands ___________________________________________________ 199
User Attributes & Permissions from LDAP Schema or RADIUS VSA _____________ 200
Kerberos _______________________________________________________________ 201
Kerberos Commands __________________________________________________ 204
TACACS+ ______________________________________________________________ 205
TACACS+ Commands _________________________________________________ 208
Groups ________________________________________________________________ 209
SSH Keys ______________________________________________________________ 212
Imported Keys _______________________________________________________ 212
Exported Keys _______________________________________________________ 213
Imported Keys (SSH In) ________________________________________________ 215
Host & Login for Import _________________________________________________ 215
Exported Keys (SSH Out) _______________________________________________ 215
Host and Login for Export _______________________________________________ 216
SSH Commands ______________________________________________________ 218
Custom Menus __________________________________________________________ 220
Custom User Menu Commands __________________________________________ 223

12: Maintenance

227

Firmware & Configurations _________________________________________________ 227
Internal Temperature __________________________________________________ 229
Site Information ______________________________________________________ 229
SLC Firmware ________________________________________________________ 229
Boot Banks __________________________________________________________ 230

SLC™ 8000 Advanced Console Manager User Guide

Load Firmware Via Options _____________________________________________ 230
Configuration Management _____________________________________________ 231
Manage Files ________________________________________________________ 232
Administrative Commands ______________________________________________232
System Logs _________________________________________________________ 235
System Log Command _________________________________________________ 236
Audit Log _______________________________________________________________ 237
Email Log ______________________________________________________________ 239
Diagnostics _____________________________________________________________ 240
Diagnostic Commands _________________________________________________ 241
Status/Reports __________________________________________________________ 244
View Report _________________________________________________________ 245
Status Commands ____________________________________________________ 246
Emailing Logs and Reports _________________________________________________ 246
Events _________________________________________________________________ 249
Events Commands ____________________________________________________ 250
LCD/Keypad ____________________________________________________________ 251
LCD/Keypad Commands _______________________________________________ 253
Banners ________________________________________________________________ 253
Banner Commands ____________________________________________________ 254

13: Application Examples

255

Telnet/SSH to a Remote Device __________________________________________ 255
Dial-in (Text Mode) to a Remote Device _______________________________________ 257
Local Serial Connection to Network Device via Telnet ____________________________ 258

14: Command Reference

260

Introduction to Commands _________________________________________________ 260
Command Syntax _____________________________________________________ 260
Command Line Help ___________________________________________________ 261
Tips ________________________________________________________________ 261
Administrative Commands _________________________________________________ 262
Audit Log Commands _____________________________________________________ 271
Authentication Commands _________________________________________________ 272
Kerberos Commands _____________________________________________________ 273
LDAP Commands ________________________________________________________ 274
Local Users Commands ___________________________________________________ 275
NIS Commands __________________________________________________________ 278
RADIUS Commands ______________________________________________________ 279
TACACS+ Commands ____________________________________________________ 280
User Permissions Commands _______________________________________________ 281
CLI Commands __________________________________________________________ 284
Connection Commands ____________________________________________________ 285

SLC™ 8000 Advanced Console Manager User Guide

Custom User Menu Commands _____________________________________________ 289
Date and Time Commands _________________________________________________ 291
Device Commands _______________________________________________________ 292
Device Port Commands ___________________________________________________ 293
Diagnostic Commands ____________________________________________________ 297
End Device Commands ___________________________________________________ 300
Events Commands _______________________________________________________ 301
Group Commands ________________________________________________________ 302
Host List Commands ______________________________________________________ 303
Internal Modem Commands ________________________________________________ 305
IP Filter Commands ______________________________________________________ 305
Logging Commands ______________________________________________________ 306
Network Commands ______________________________________________________ 309
NFS and SMB/CIFS Commands _____________________________________________ 312
Routing Commands ______________________________________________________ 313
SD Card Commands ______________________________________________________ 314
Security Commands ______________________________________________________ 315
Services Commands ______________________________________________________ 315
SLC Network Commands __________________________________________________ 317
SSH Key Commands

____________________________________________________ 317

Status Commands ________________________________________________________ 320
System Log Commands ___________________________________________________ 321
USB Access Commands ___________________________________________________ 322
USB Storage Commands __________________________________________________ 322
USB Modem Commands __________________________________________________ 324
VPN Commands _________________________________________________________ 325

Appendix A: Security Considerations

328

Security Practice _________________________________________________________ 328
Factors Affecting Security __________________________________________________ 328

Appendix B: Safety Information

329

Safety Precautions _______________________________________________________ 329
Cover ______________________________________________________________ 329
Power Plug __________________________________________________________ 329
Input Supply _________________________________________________________ 329
Grounding ___________________________________________________________ 329
Fuses ______________________________________________________________ 329
Rack _______________________________________________________________ 330
Port Connections _____________________________________________________ 330

SLC™ 8000 Advanced Console Manager User Guide

Appendix C: Adapters and Pinouts

331

Appendix D: Protocol Glossary

334

Appendix E: Compliance Information

336

SLC™ 8000 Advanced Console Manager User Guide

List of Tables
Table 2-5 Console (DTE) Port Pinout ________________________________________________ 23
Table 3-1 Part Numbers and Descriptions _____________________________________________ 27
Table 3-2 SLC Technical Specifications ______________________________________________ 28
Table 3-4 Console Port and Device Port (DTE) - Reverse Pinout Disabled ___________________ 30
Table 3-5 Device Port (DCE) - Reverse Pinout Enabled __________________________________ 30
Table 3-6 Available I/O Configurations _______________________________________________31
Table 4-1 Methods of Assigning an IP Address _________________________________________ 39
Table 4-3 LCD Arrow Keypad Actions ________________________________________________ 41
Table 4-4 Front Panel Setup Options with Associated Parameters __________________________41
Table 5-2 CLI Keyboard Shortcuts ___________________________________________________ 56
Table 8-1 Supported I/O Module Configurations _______________________________________ 101
Table 8-6 Port Status and Counters _________________________________________________ 112
Table 8-16 Definitions ___________________________________________________________ 140
Table 8-17 Primary Commands ____________________________________________________ 141
Table 8-18 Secondary Commands _________________________________________________ 143
Table 8-19 Control Flow Commands ________________________________________________ 144
Table 11-2 User Types and Rights _________________________________________________ 177
Table 14-1 Actions and Category Options

___________________________________________ 260

SLC™ 8000 Advanced Console Manager User Guide

List of Figures
Figure 2-1 SLC 8048 Unit (Front Side) - Part Number SLC 804812N-01-S ____________________ 20
Figure 2-2 SLC 8048 Unit (Back Side) - Part Number SLC 804812N-01-S ____________________ 20
Figure 2-3 Device Ports (Back Side) _________________________________________________ 23
Figure 2-4 Console Port (Front Side) _________________________________________________ 23
Figure 2-6 Network Connection _____________________________________________________ 24
Figure 2-7 Dual USB Ports _________________________________________________________ 25
Figure 2-8 Memory Card Port _______________________________________________________ 25
Figure 2-9 Internal Modem Location __________________________________________________ 26
Figure 3-3 Device Port Connections (Back Side) ________________________________________ 30
Figure 3-7 AC Power Input _________________________________________________________ 32
Figure 4-2 Front Panel LCD Display and Five Button Keypad (Enter, Up, Down, Left, Right) ______ 40
Figure 4-5 Quick Setup ____________________________________________________________ 44
Figure 4-6 Home _________________________________________________________________ 44
Figure 4-7 Quick Setup Completed in Web Manager _____________________________________ 46
Figure 4-8 Beginning of Quick Setup Script ____________________________________________ 47
Figure 4-9 Quick Setup Completed in CLI _____________________________________________ 48
Figure 5-1 Web Page Layout _______________________________________________________ 51
Figure 6-1 Network > Network Settings _______________________________________________58
Figure 6-2 Network > IP Filter ______________________________________________________ 63
Figure 6-3 Network > IP Filter Ruleset (Adding/Editing Rulesets) ___________________________ 65
Figure 6-4 Network > Routing _______________________________________________________ 68
Figure 6-5 Network > VPN _________________________________________________________ 70
Figure 6-6 Network > Security ______________________________________________________ 74
Figure 7-1 Services > SSH/Telnet/Logging_____________________________________________ 76
Figure 7-2 Services > SNMP _______________________________________________________ 79
Figure 7-3 Services > NFS & SMB/CIFS ______________________________________________ 83
Figure 7-4 Services > Secure Lantronix Network ________________________________________ 86
Figure 7-5 IP Address Login Page ___________________________________________________ 87
Figure 7-6 SSH and Telnet Opening File Popups________________________________________ 87
Figure 7-7 SSH or Telnet CLI Session ________________________________________________ 88
Figure 7-8 Disabled Port Number Popup Window _______________________________________ 88
Figure 7-9 Services > Secure Lantronix Network > Search Options__________________________89
Figure 7-10 Services > Date & Time _________________________________________________ 91
Figure 7-11 Services > Web Server _________________________________________________ 93
Figure 7-12 Web Sessions _________________________________________________________ 96

SLC™ 8000 Advanced Console Manager User Guide

Figure 7-13 SSL Certificate_________________________________________________________ 97
Figure 7-14 iGoogle Gadget Example_________________________________________________ 99
Figure 8-2 Devices > Device Status _________________________________________________ 102
Figure 8-3 Devices > Device Ports __________________________________________________ 103
Figure 8-4 Port Number Bar _______________________________________________________ 105
Figure 8-5 Device Ports > Settings __________________________________________________ 106
Figure 8-7 Device Ports > SLP / ServerTech CDU ______________________________________ 113
Figure 8-8 Devices > Device Ports > Sensorsoft _______________________________________ 114
Figure 8-9 Devices > Device Ports - Logging __________________________________________ 121
Figure 8-10 Devices > Console Port _________________________________________________ 125
Figure 8-11 Devices > Internal Modem_______________________________________________ 128
Figure 8-12 Devices > Host Lists ___________________________________________________ 131
Figure 8-13 View Host Lists _______________________________________________________ 133
Figure 8-14 Devices > Scripts______________________________________________________ 136
Figure 8-15 Adding or Editing New Scripts ____________________________________________ 137
Figure 9-1 Devices > USB / SD Card ________________________________________________ 158
Figure 9-2 Devices > USB > Configure_______________________________________________ 158
Figure 9-3 Devices > SD Card > Configure ___________________________________________ 159
Figure 9-4 Devices > USB > Modem ________________________________________________ 160
Figure 9-5 Firmware and Configurations - Manage Files (Top of Page)______________________ 164
Figure 10-1 Terminal Server _______________________________________________________ 167
Figure 10-2 Remote Access Server _________________________________________________ 167
Figure 10-3 Reverse Terminal Server________________________________________________ 167
Figure 10-4 Multiport Device Server _________________________________________________ 168
Figure 10-5 Console Server _______________________________________________________ 168
Figure 10-6 Devices > Connections _________________________________________________ 169
Figure 10-7 Current Connections ___________________________________________________ 170
Figure 11-1 User Authentication > Authentication Methods _______________________________ 175
Figure 11-3 User Authentication > Local/Remote Users__________________________________ 178
Figure 11-4 User Authentication > Local/Remote User > Add/Edit User _____________________ 180
Figure 11-5 User Authentication > NIS _______________________________________________ 186
Figure 11-6 User Authentication > LDAP _____________________________________________ 191
Figure 11-7 User Authentication > RADIUS ___________________________________________ 196
Figure 11-8 User Authentication > Kerberos___________________________________________ 202
Figure 11-9 User Authentication > TACACS+__________________________________________ 206
Figure 11-10 User Authentication > Groups ___________________________________________ 210
Figure 11-11 User Authentication > SSH Keys_________________________________________ 214
Figure 11-12 Current Host Keys ___________________________________________________ 217

SLC™ 8000 Advanced Console Manager User Guide

Figure 11-13 User Authentication > Custom Menus _____________________________________ 221
Figure 12-1 Maintenance > Firmware & Configurations __________________________________ 228
Figure 12-2 Network > Firmware/Config > Manage _____________________________________ 232
Figure 12-3 Maintenance > System Logs _____________________________________________ 235
Figure 12-4 System Logs _________________________________________________________ 236
Figure 12-5 Maintenance > Audit Log________________________________________________ 238
Figure 12-6 Maintenance > Email Log _______________________________________________ 239
Figure 12-7 Maintenance > Diagnostics ______________________________________________240
Figure 12-8 Diagnostics Report ____________________________________________________ 241
Figure 12-9 Maintenance > Status/Reports ___________________________________________ 244
Figure 12-10 Generated Status/Reports ______________________________________________245
Figure 12-11 Emailed Log or Report_________________________________________________ 247
Figure 12-12 About SLC __________________________________________________________ 248
Figure 12-13 Maintenance > Events _________________________________________________ 249
Figure 12-14 Maintenance > LCD/Keypad ____________________________________________ 252
Figure 12-15 Maintenance > Banners________________________________________________ 253
Figure 13-1 SLC - Console Manager Configuration _____________________________________ 255
Figure 13-2 Remote User Connected to a SUN Server via the SLC unit _____________________ 255
Figure 13-3 Dial-in (Text Mode) to a Remote Device ____________________________________ 257
Figure 13-4 Local Serial Connection to Network Device via Telnet _________________________258
Figure C-1 RJ45. Receptacle to DB25M DCE Adapter for the SLC unit (PN 200.2066A) ________ 331
Figure C-2 RJ45 Receptacle to DB25F DCE Adapter for the SLC unit (PN 200.2067A) _________ 332
Figure C-3 RJ45 Receptacle to DB9M DCE Adapter for the SLC unit (PN 200.2069A)__________ 332
Figure C-4 RJ45 Receptacle to DB9F DCE Adapter for the SLC unit (PN 200.2070A) __________ 333

SLC™ 8000 Advanced Console Manager User Guide

About this Guide

Purpose and Audience
This guide provides the information needed to install, configure, and use the Lantronix® SLC™
8000 Advanced Console Manager. The SLC unit is for IT professionals who must remotely and
securely configure and administer servers, routers, switches, telephone equipment, or other
devices equipped with a serial port for facilities that are typically remote branch offices or
“distributed” IT locations.

Summary of Chapters
The remaining chapters in this guide include:
Chapter

Description

Chapter 2: Introduction

Describes the SLC 8000 models, their main features, and the protocols they
support.

Chapter 3: Installation

Provides technical specifications; describes connection formats and power
supplies; provides instructions for installing the SLC 8000 advanced console
manager in a rack.

Chapter 4: Quick Setup

Provides instructions for getting your SLC unit up and running and for
configuring required settings.

Chapter 5: Web and
Command Line Interfaces

Describes the web and command line interfaces available for configuring
the SLC 8000 advanced console manager.
The configuration chapters (6-12) provide detailed instructions for using the
web interface and include equivalent command line interface commands.

Chapter 6: Basic Parameters Provides instructions for configuring network ports, firewall and routing
settings, and VPN.
Chapter 7: Services

Provides instructions for enabling and disabling system logging, SSH and
Telnet logins, SNMP, SMTP, and the date and time.

Chapter 8: Device Ports

Provides instructions for configuring global device port settings, individual
device port settings, and console port settings.

Chapter 9: USB/SD Card Port Provides instructions for using the USB port.
Chapter 10: Connections

Provides instructions for configuring connections and viewing, updating, or
disconnecting a connection.

Chapter 11: User
Authentication

Provides instructions for enabling or disabling methods that authenticate
users who attempt to log in via the web, SSH, Telnet, or the console port.
Provides instructions for creating custom menus.

Chapter 12: Maintenance

Provides instructions for upgrading firmware, viewing system logs and
diagnostics, generating reports, and defining events. Includes information
about web pages and commands used to shut down and reboot the SLC
8000 advanced console manager.

Chapter 13: Application
Examples

Shows how to set up and use the SLC unit in three different configurations.

Chapter 14: Command
Reference

Lists and describes all of the commands available on the SLC command line
interface

SLC™ 8000 Advanced Console Manager User Guide

1: About this Guide

Chapter (continued)

Description

Appendix A: Security
Considerations

Provides tips for enhancing SLC security.

Appendix B: Safety
Information

Lists safety precautions for using the SLC 8000 advanced console
manager.

Appendix C: Adapters and
Pinouts

Includes adapter pinout diagrams.

Appendix D: Protocol
Glossary

Lists the protocols supported by the SLC unit with brief descriptions.

Appendix E: Compliance
Information

Provides information about the SLC 8000 advanced console manager’s
compliance with industry standards.

Additional Documentation
Visit the Lantronix Web site at www.lantronix.com/support/documentation for the latest
documentation and the following additional documentation.
Document

Description

SLC 8000 Advanced Console Manager
Quick Start

Describes the steps for getting the SLC unit up and running.

SLC 8000 Advanced Console Manager
Online Help for the Command Line
Reference

Provides online help for configuring the SLC 8000
advanced console manager using commands.

SLC 8000 Advanced Console Manager
Online Help for the Web Interface

Provides online help for configuring the SLC 8000
advanced console manager using the web page.

SLC™ 8000 Advanced Console Manager User Guide

Introduction
The SLC 8000 advanced console manager enables IT system administrators to manage remote
servers and IT infrastructure equipment securely over the Internet.
IT equipment can be configured, administered, and managed in a variety of ways, but most
devices have one method in common: an RS-232 serial port, sometimes called a console,
auxiliary, or management port. These ports are often accessed directly by connecting a terminal or
laptop to them, meaning that the administrator must be in the same physical location as the
equipment. The SLC 8000 advanced console manager gives the administrator a way to access
them remotely from anywhere there is a network or modem connection.
Many types of equipment can be accessed and administered using console managers including:


Servers: Unix, Linux, Windows, and others.



Networking equipment: Routers, switches, storage networking.



Telecom: PBX, voice switches.



Other systems with serial interfaces: Heating/cooling systems, security/building access
systems, UPS, medial devices.

The key benefits of using console managers:


Saves money: Enables remote management and troubleshooting without sending a
technician onsite. Reduces travel costs and downtime costs.



Saves time: Provides instant access and reduces response time, improving efficiency.



Simplifies access: Enables you to access equipment securely and remotely after hours and
on weekends and holidays—without having to schedule visits or arrange for off-hour access.



Protects assets: Security features provide encryption, authentication, authorization, and
firewall features to protect your IT infrastructure while providing flexible remote access.
The SLC advanced console manager provides features such as convenient text menu
systems, break-safe operation, port buffering (logging), remote authentication, and Secure
Shell (SSH) access. Dial-up modem support ensures access when the network is not
available.

Features
Console Management


Up to 48 RS-232 serial ports for console connectivity



Enables system administrators to remotely manage devices with serial console ports, e.g.,
Linux, Unix, and recent versions of Windows servers, routers, telecom, and switches with RS232C (now EIA-232) compatible serial consoles in a 1U-tall rack space. All models have two
Ethernet ports called Eth1 and Eth2 in this document.



Provides data logging, monitoring, and secure access control via the Internet

Power



Universal AC power input (100-240V, 50/60 Hz)
Convection cooled, silent operation, low power consumption

SLC™ 8000 Advanced Console Manager User Guide

2: Introduction

Models
SLC 8048 has the following hardware components:


SLC Chassis: The SLC 8000 advanced console manager has a 1U tall, self-contained rackmountable chassis.



Serial Device Ports: Up to forty-eight serial RS-232C (EIA-232) device ports are for remote
console management of the attached equipment. These match the RJ45 pin-outs of the
console ports of many popular devices found in a network environment, and where different
can be converted using Lantronix adapters. See Appendix C: Adapters and Pinouts on page
331 for more information on serial adapters and pin-outs.



Network Ports: The SLC unit has two 10/100/1000 Base-T Ethernet ports (referred to in this
user guide as Eth1 and Eth2)



Console Port: The SLC has a front panel serial console port (RJ45).



SLC 8000 advanced console manager also includes two USB type A ports in the front panel.
Figure 2-1 SLC 8048 Unit (Front Side) - Part Number SLC 804812N-01-S

Figure 2-2 SLC 8048 Unit (Back Side) - Part Number SLC 804812N-01-S

System Features
The SLC 8000 firmware has the following basic capabilities:


Software reversible device port pinouts



Connects up to 48 RS-232 serial consoles

SLC™ 8000 Advanced Console Manager User Guide

2: Introduction



10/100/1000 Base-T Ethernet network compatibility



Buffer logging to file



Email and SNMP notification



ID/Password security, configurable access rights



Secure shell (SSH) security; supports numerous other security protocols



Network File System (NFS) and Common Internet File System (CIFS) support



RAW TCP, Telnet or SSH to a serial port by IP address per port or by IP address and TCP port
number



Configurable user rights for local and remotely authenticated users



Supports an external modem



No unintentional break ever sent to attached servers (Solaris Ready)



Simultaneous access on the same port - “listen” and “direct” connect mode



Local access through a console port



Web administration (using most browsers)

Protocols Supported
The SLC 8000 advanced console manager supports the TCP/IP network protocol as well as:


SSH, Telnet, PPP, NFS, and CIFS for connections in and out of the SLC console manager



SMTP for mail transfer



DNS for text-to-IP address name resolution



SNMP for remote monitoring and management



SCP, FTP and SFTP for file transfers and firmware upgrades



TFTP for firmware upgrades



DHCP and BOOTP for IP address assignment



HTTPS (SSL) for secure browser-based configuration



NTP for time synchronization



LDAP, NIS, RADIUS, CHAP, PAP, Kerberos, TACACS+, and SecurID (via RADIUS) for user
authentication



Callback Control Protocol (CBCP)



IPsec for VPN access

For brief descriptions of these protocols, see Appendix D: Protocol Glossary on page 334.

Access Control
The system administrator controls access to attached servers or devices by assigning access
rights to up to 128 user profiles. Each user has an assigned ID, password, and access rights.
Other user profile access options may include externally configured authentication methods such
as NIS and LDAP.

SLC™ 8000 Advanced Console Manager User Guide

2: Introduction

Device Port Buffer
The SLC 8000 unit supports real-time data logging for each device port. The port can save the
data log to a file, send an email notification of an issue, or take no action.
You can define the path for logged data on a port-by-port basis, configure file size and number of
files per port for each logging event, and configure the device log to send an email alert message
automatically to the appropriate parties indicating a particular error.

Configuration Options
You may use the backlit front-panel LCD display for initial setup and configuration and to view
current network, console, and date/time settings, and get internal temperature status.
Both a web interface viewed through a standard browser and a command line interface (CLI) are
available for configuring the SLC settings and monitoring performance.

Hardware Features
The SLC 8000 hardware includes the following:


1U-tall (1.75 inch) rack-mountable appliance



Two 10/100/1000 Base-T network ports with LED for link and activity



Up to 48 RS-232 serial device ports connected via RJ45 wiring



One front panel serial console port for VT100 terminal or PC with emulation with LED for
activity indicators



Two USB Ports



Secure Digital (SD) memory card slot



Front panel LCD display and keypad



256 KB-per-port buffer memory for serial device ports



Software reversible device port pinouts



LCD display and keypad on the front



Universal AC power input (100-240V, 50/60 Hz)



Convection cooled, silent operation, low power consumption

Note:

For more detailed information, see Chapter 4: Quick Setup on page 39.

SLC™ 8000 Advanced Console Manager User Guide

2: Introduction

Serial Port Interfaces
All devices attached to the device ports and the console port must support the RS-232C (EIA-232)
standard. RJ45 cabling, like Category 5 or 6 patch cabling, is used for the device port connections
and for the console port. (For pinout information, see the Appendix C: Adapters and Pinouts on
page 331.)
Device ports for the SLC 8000 advanced console manager are reversed by default so that straightthrough RJ45 patch cables may be used to connect to Cisco and Sun RJ45 serial console ports. If
you are replacing an SLC with an SLC 8000 you can either switch the ports to the non-reversed
pinout used by SLC units and use your original cables and adapters, or remove any rolled cables
or adapters and replace them with straight-through RJ45 cables, e.g. Ethernet patch cables.
Note:

RJ45 to DB9/DB25 adapters are available from Lantronix.

Device ports and the console port support the following baud-rate options: 300, 600, 1200, 2400,
4800, 9600, 19200, 38400, 57600, 115200 and 230400 baud.
Figure 2-3 Device Ports (Back Side)

Figure 2-4 Console Port (Front Side)

Table 2-5 Console (DTE) Port Pinout

SLC™ 8000 Advanced Console Manager User Guide

Pin Number

Description

RTS (output)

DTR (output)

TXD (output)

Ground

RXD (input)

DSR (input)

CTS (input)

2: Introduction

Network Connections
The SLC 8000 network interfaces are 10/100/1000 Base-T Ethernet for use with a conventional
Ethernet network as shown in Figure 2-6. Use standard RJ45-terminated cables, like Category 5 or
6 patch cable. Additionally, CAT5E or better cables are recommended for 1000 Base Ethernet.
Network parameters must be configured before the SLC console manager can be accessed over the
network.
Note: One possible use for the two Ethernet ports is to have one port on a private,
secure network and the other on a public, unsecured network.
Figure 2-6 Network Connection

SLC™ 8000 Advanced Console Manager User Guide

2: Introduction

USB Interface
The SLC 8000 unit has two 2.0 USB ports (HS, FS, LS).
Figure 2-7 Dual USB Ports

Memory Card Port
The SLC unit has a memory card port on the front panel of the unit which accepts SD cards.
Figure 2-8 Memory Card Port

SLC™ 8000 Advanced Console Manager User Guide

2: Introduction

Internal Modem
An internal modem can be installed in the SLC 8000 advanced console manager. See Modem
Installation on page 33 for instructions.
Figure 2-9 Internal Modem Location

SLC™ 8000 Advanced Console Manager User Guide

Installation
This chapter provides a high-level procedure for installing the SLC advanced console manager
followed by more detailed information about the SLC connections and power supplies.
Caution:

To avoid physical and electrical hazards, please read appendix,
Appendix A: Security Considerations on page 328 before installing the SLC
8000 advanced console managerSLC 8000 advanced console manager.

What's in the Box
In addition to the SLC unit, the following table lists components in the box and their corresponding
part numbers.

Table 3-1 Part Numbers and Descriptions
Part #

Component Description

Quantity

200.2070A

RJ45 to DB9F Adapter

200.0062

RJ45 to RJ45, Cat5, 6.6 ft (2 m)

500-153

RJ45 Loopback

Cables:

Power Cords:
500-041-ACC

For AC Supply Models: AC Power Cord included only

1 for Single
2 for Dual

083-014-ACC

For DC Supply Models: DC Installation Kit only

Verify and inspect the contents of the SLC package using the enclosed packing slip or the table
above. If any item is missing or damaged, contact your place of purchase immediately.

Product Information Label
The product information label on the underside of the SLC 8000 advanced console manager
contains the following information about each SLC unit:


Part Number



Serial Number



Serial Number Bar Code



Date Code



Country of Manufacture

SLC™ 8000 Advanced Console Manager User Guide

3: Installation

Technical Specifications
Table 3-2 SLC Technical Specifications
Component

Description

Serial Interface (Device)




(48) RJ45-type 8-conductor connectors which are individually configurable
standard or reversed pinouts
Speed software selectable (300 to 230400 baud)

Note: Device ports for the SLC 8000 advanced console manager are
reversed by default. Do not use rolled cables and adapters when replacing an
SLC 8000 advanced console manager with the SLC 8000 model.
Serial Interface (Console)





Network Interface




(1) RJ45-type 8-pin connector (DTE)
Speed software selectable (300 to 230400 baud)
LEDs:
 Green light ON indicates data transmission activities
 Yellow light ON indicates data receiving activities
(2) 10/100/1000 Base-T RJ45 Ethernet
LEDs:
 Green light ON indicates a link at 1000 Base-T
 Green light OFF indicates a link at other speeds or no link
 Yellow light ON indicates a link is established
 Yellow light blinking indicates activity

Power Supply AC
(single or dual)



Power Supply DC (dual)

20V to 72V input

Power Consumption

Less than 25 watts

Dimensions

1U, 1.75 in x 17.25 in x 12 in

Weight

11.5 lbs or less, depending on options

Temperature



Relative Humidity

Universal AC power input: 100-240 VAC
50 or 60 Hz IEC 60320/C19IEC-type regional cord set included

Operating: 0 to 50°C (32 to 122°F), 30 to 90% RH, non-condensing
Storage: -20 to 80°C (-4 to 176°F), 10 to 90% RH, non-condensing



Operating: 10% to 90% non-condensing; 40% to 60% recommended
Storage: 10% to 90% non-condensing

USB Ports



(2) ports, type A, host USB 2.0 (HS, FS, LS)

Memory Card

Single memory card slot supporting:






Modem









SD
SDHC
300 bps to 56K bps data rate
Upstream 48K bps, downstream 56K bps
V.44 data compression (V92MB-U, V92HU)
V.42 bis and MNP-5 data compression
V.29 FastPOS support
Caller ID type I and II for select countries
Agency approvals: Transferable FCC68, CS03 and CTR21 certifications,
IEC60601-1 (Medical Electronics) compliant, CE Marking, IEC60950 approved

SLC™ 8000 Advanced Console Manager User Guide

3: Installation

Physical Installation
Install the SLC 8000 advanced console manager in an EIA-standard 19-inch rack (1U tall) or as a
desktop unit. The SLC module uses convection cooling to dissipate excess heat.
To install the SLC 8000 advanced console manager in a rack:
1. Place the SLC unit in a 19-inch rack.
Warning:

Do not to block the air vents on the sides of the SLC module. If you
mount the SLC advanced console manager in an enclosed rack, we
recommended that the rack have a ventilation fan to provide adequate
airflow through the SLC unit.

2. Connect the serial device(s) to the SLC unit ports. See the section, Connecting to a Device
Port (on page 29).
3. Choose one of the following options:
-

To configure the SLC 8000 advanced console manager using the network, or to monitor
serial devices on the network, connect at least one SLC network port to a network. See
Connecting to Network Ports (on page 31).

To configure the SLC unit using a dumb terminal or a computer with terminal emulation,
connect the terminal or PC to the SLC console port. See Connecting Terminals (on page
31).

4. Connect the power cord, and apply power. See AC Input (on page 32).
5. Wait approximately a minute for the boot process to complete.
When the boot process ends, the SLC host name and the clock appear on the LCD display.
Now you are ready to configure the network settings as described in Chapter 4: Quick Setup.

Connecting to a Device Port
You can connect almost any device that has a serial console port to a device port on the SLC 8000
advanced console manager for remote administration. The console port must support the RS232C interface.
Note: Many servers must either have the serial port enabled as a console or the
keyboard and mouse detached. Consult the server hardware and/or software
documentation for more information.
To connect to a device port:
1. Connect one end of the Cat 5 cable to the device port.
2. Connect the other end of the Cat 5 cable to a Lantronix serial console adapter.
Note: See Device Port Commands on page 115 to enable or disable reverse pinouts
through the CLI. Table 3-4, Table 3-5 and Figure 3-3 provide additional information on
reverse pinouts. Reference Appendix C: Adapters and Pinouts on page 331 for more
information about Lantronix adapters.

SLC™ 8000 Advanced Console Manager User Guide

3: Installation

Figure 3-3 Device Port Connections (Back Side)

RJ45
CABLE

3. Connect the adapter to the serial console port on the serial device as shown in Figure 3-3.

Table 3-4 Console Port and Device Port (DTE) - Reverse Pinout Disabled
Pin Number

Description

RTS (output)

DTR (output)

TXD (output)

Ground

RXD (input)

DSR (input)

CTS (input)

Table 3-5 Device Port (DCE) - Reverse Pinout Enabled
Pin Number

Description

CTS (input)

DSR (input)

RXD (input)

Ground

TXD (output)

DTR (output)

RTS (output)

SLC™ 8000 Advanced Console Manager User Guide

3: Installation

Modular Expansion for I/O Module
The SLC 8000 advanced console manager supports the flexibility to change the I/O module
configuration by offering a 16 port card for expansion. See Table 3-6. When device ports are
unused or unsupported, they are greyed out in the Port Number Bar. Bay 1 is the slot next to the
Ethernet ports and Bay 3 is the slot beside the power supply module.
Table 3-6 Available I/O Configurations

Connecting to Network Ports
The SLC network ports, 10/100/1000 Base-T Ethernet, allow remote access to the attached
devices and the system administrative functions. Use a standard RJ45-terminated Category 5
cable to connect to the network port. A CAT5e or better cable is recommended for use with a
1000 Base-T Ethernet connection.
Note: One possible use for the two Ethernet ports is to have one port on a private,
secure network, and the other on an unsecured network.

Connecting Terminals
The console port is for local access to the SLC 8000 advanced console manager and the attached
devices. You may attach a dumb terminal or a computer with terminal emulation to the console
port. The SLC console port uses RS-232C protocol and supports VT100 emulation. The default
baud rate is 9600.
To connect the console port to a terminal or computer with terminal emulation, Lantronix offers
optional adapters that provide a connection between an RJ45 jack and a DB9 or DB25 connector.
The console port is configured as DTE. See Appendix C: Adapters and Pinouts on page 331 for
more information, and our Web site at www.lantronix.com/support and click Cable/Adapter
Lookup on the Support menu.

SLC™ 8000 Advanced Console Manager User Guide

3: Installation
To connect a terminal:
1. Attach the Lantronix adapter to your terminal (typifcally a PN 200.2066A adapter) or your PC's
serial port (use PN 200.2070A adapter).
2. Connect the Cat 5 cable to the adapter, and connect the other end to the SLC console port.
3. Turn on the terminal or start your computer's communication program (e.g., HyperTerminal for
Windows XP or lower. For recent versions of Windows use a free terminal emulator such as
PuTTY or TeraTerm Pro).
4. Once the SLC 8000 advanced console manager is running, press Enter to establish
connection. You should see the model name and a login prompt on your terminal. You are
connected.

AC Input
The power supply module for the SLC controller accepts AC input voltage of 100-240 VAC, 50/60
HZ. Rear-mounted IEC-type AC power connectors are provided for universal AC power input.
(See What's in the Box on page 27.)
Caution:

Disconnect all power supply modules before servicing to avoid electric shock.
Figure 3-7 AC Power Input

SLC™ 8000 Advanced Console Manager User Guide

3: Installation

Modem Installation

Caution:

TO REDUCE THE RISK OF FIRE, USE ONLY NO. 26 AWG OR LARGER (e.g., 24
AWG) UL LISTED OR CSA CERTIFIED TELECOMMUNICATION LINE CORD.

Attention: POUR RÉDUIRE LES RISQUES D'INCENDIE, UTILISER UNIQUEMENT DES
CONDUCTEURS DE TÉLÉCOMMUNICATIONS 26 AWG AU DE SECTION
SUPÉRLEURE.
Warning:

RISK OF ELECTRICAL SHOCKS; DISCONNECT ALL POWER AND
PHONE LINES BEFORE SERVICING!

Caution:

DEVICES INSIDE THE EQUIPMENT AND THE MODEM ARE ELECTROSTATIC SENSITIVE; DO NOT HANDLE EXCEPT AT A STATIC FREE WORKPLACE.

MODEM PART NUMBER
Lantronix 56KINTMODEM-01
MODEM SERVICING INSTRUCTIONS
You will need a medium size Phillips screw driver.
1. Turn off power to the SLC 8000 advanced console manager.
2. Locate the battery modem door on the top of the SLC unit.
3. Unscrew and lift the door off with the screw driver.

SLC™ 8000 Advanced Console Manager User Guide

3: Installation
4. Take note of the orientation of the modem so that later you can install a new modem correctly
with the same orientation.

5. If there is a modem replacement, carefully lift the old modem out of its socket.

6. Install the new modem with correct orientation.
7. Make sure to have correct pin alignment.

SLC™ 8000 Advanced Console Manager User Guide

3: Installation
8. Press the modem down to make sure it sits down all the way in the socket.

9. Double-check the new modem placement to make sure it is done properly.
10. Place the battery modem door back.
11. Tighten the door screw.

Battery Replacement

Caution:

RISK OF EXPLOSION IF BATTERY IS REPLACED BY AN INCORRECT TYPE.
DISPOSE OF USED BATTERIES ACCORDING TO THE INSTRUCTIONS.

Attention: II Y A DANGER D'EXPLOSION S'IL Y A REMPLACEMENT INCORRECT DE LA
BATTERIE. REMPLACER UNIQUEMENT AVEC UNE BATTERIE DU MÊME TYPE
OU D'UN TYPE EQUIVALENT RECOMMANDÉ PAR LE CONSTRUCTEUR.
METTRE AU REBUT LES BATTERIES USAGÉES CONFORMÉMENT AUX
INSTRUCTIONS DU FABRICANT.

Caution:

DEVICES INSIDE THE EQUIPMENT ARE ELECTROSTATIC -SENSITIVE; DO NOT
HANDLE EXCEPT AT A STATIC FREE WORKPLACE.

Battery Part Numbers
Panasonic BR2032 or equivalent (button cell lithium, non-rechargeable)
Caution:

DO NOT USE BATTERY TYPE CR2032 SINCE IT HAS A LOWER OPERATING
TEMPERATURE RANGE.

SLC™ 8000 Advanced Console Manager User Guide

3: Installation

DISPOSAL OF USED BATTERIES (from battery data sheet)


If not in a large quantity, button cell batteries contain so little Lithium that they do not qualify as
reactive hazardous waste. These batteries are safe for disposal in the normal municipal waste
stream.



If in a large quantity, disposal of button cell batteries should be performed by permitted,
professional firms knowledgeable in Federal, State and local hazardous waste transportation
and disposal requirements.

Caution:

RISK OF FIRE, EXPLOSION AND BURNS. DO NOT RECHARGE, CRUSH, HEAT
ABOVE 212°F (100°C) OR INCINERATE.

Battery Replacement Instructions
Warning:

RISK OF ELECTRICAL SHOCKS; DISCONNECT ALL POWER AND
PHONE LINE BEFORE SERVICING!

You will need a medium size Phillips screw driver.
1. Turn off power to the SLC 8000 advanced console manager.
2. Locate the battery modem door on the top of the SLC unit.
3. Unscrew and lift the door off with the screw driver.

4. If there is a modem, note the orientation of the modem so that later you can install it back
correctly.

SLC™ 8000 Advanced Console Manager User Guide

3: Installation

5. If there is a modem, carefully lift the modem out of its socket.

6. Use fingers to lift the battery out of the socket.

Caution:

DO NOT USE A METAL OBJECT TO PRY OUT THE BATTERY SINCE IT MAY
SHORT THE BATTERY AND DAMAGE THE BATTERY HOUSING.

7. Install the new battery with the (+) side up making sure the battery sits completely and
securely in the housing.

SLC™ 8000 Advanced Console Manager User Guide

3: Installation
8. Re-install the modem with correct orientation.
a. Make sure also to have correct pin alignment.
b. Press the modem down to make sure it sits down all the way in the socket.

9. Double-check the battery and modem placements to make sure they are done properly.
10. Place the battery modem door back.
11. Tighten the door screw.
12. Reprogram the SLC system date-time after installing a new battery, if necessary.

SLC™ 8000 Advanced Console Manager User Guide

Quick Setup
This chapter helps get the IP network port up and running quickly, so you can administer the SLC
advanced console manager using your network.

Recommendations
To set up the network connections quickly, we suggest you do one of the following:


Use the front panel LCD display and keypads.



Complete the quick setup (see Figure 4-5) on the web interface.



SSH to the command line interface and follow the Quick Setup script on the command line
interface.



Connect to the console port and follow the Quick Setup script on the command line interface.

Note: The first time you power up the SLC unit, Eth1 tries to obtain its IP address via
DHCP. If you have connected Eth1 to the network, and Eth1 is able to acquire an IP
address, you can view this IP address on the LCD or by running the Lantronix
DeviceInstaller™ application. If Eth1 cannot acquire an IP address, you cannot use
Telnet, SSH, or the web interface to run Quick Setup.

IP Address
Your SLC 8000 advanced console manager must have a unique IP address on your network. The
system administrator generally provides the IP address and corresponding subnet mask and
gateway. The IP address must be within a valid range, unique to your network, and in the same
subnet as your PC.
The following table lists the options for assigning an IP address to your SLC unit.

Table 4-1 Methods of Assigning an IP Address
Method

Description

DHCP

A DHCP server automatically assigns the IP address and network settings.
The SLC 8000 advanced console manager is DHCP-enabled by default.
With the Eth1 network port connected to the network, and the SLC unit
powered up, Eth1 acquires an IP address, viewable on the LCD.
At this point, you can use SSH to connect to the SLC console manager or use
the web interface.

BOOTP

Non-dynamic predecessor to DHCP.

Front panel LCD display
and keypads

You manually assign the IP address and other basic network, console, and
date/time settings. If desired, you can restore the factory defaults.

Serial port login to
command line interface

You assign an IP address and configure the SLC unit using a terminal or a PC
running a terminal emulation program to the SLC serial console port
connection.

SLC™ 8000 Advanced Console Manager User Guide

4: Quick Setup

Method #1 Using the Front Panel Display
Before you begin, ensure that you have:


Unique IP address that is valid on your network (unless automatically assigned)



Subnet mask (unless automatically assigned)



Gateway (unless automatically assigned)



DNS settings (unless automatically assigned)



Date, time, and time zone



Console port settings: baud rate, data bits, stop bits, parity, and flow control

Make sure the SLC advanced console manager is plugged into power and turned on.

Front Panel LCD Display and Keypads
With the SLC unit powered up, you can use the front panel display and buttons to set up the basic
parameters.
Figure 4-2 Front Panel LCD Display and Five Button Keypad (Enter, Up, Down, Left, Right)

The front panel display initially shows the hostname (abbreviated to 14 letters) and the date and
time.
When you click the right-arrow button, the SLC network settings displays. Using the five buttons on
the keypad, you can change the network, console port, and date/time settings and view the
firmware release version. If desired, you can restore the factory defaults.
Note: Have your information handy as the display times out without accepting any
unsaved changes if you take more than 30 seconds between entries.
Any changes made to the network, console port, and date/time settings take effect immediately.

Navigating
The front panel keypad has one Enter button (in the center) and four arrow buttons (up, left, right,
and down). Press the arrow buttons to navigate from one option to another, or to increment or
decrement a numerical entry of the selected option. Use the Enter button to select an option to
change or to save your settings.

SLC™ 8000 Advanced Console Manager User Guide

4: Quick Setup

The following table lists the SLC navigation actions, buttons, and options.

Table 4-3 LCD Arrow Keypad Actions
Button

Action

Right arrow

To move to the next option (e.g., from Network Settings to Console Settings)

Left arrow

To return to the previous option

Enter (center button)

To enter edit mode

Up and down arrows

Within edit mode, to increase or decrease a numerical entry

Right or left arrows

Within edit mode, to move the cursor right or left

Enter

To exit edit mode

Up and down arrows

To scroll up or down the list of parameters within an option (e.g., from IP
Address to Mask)

Table 4-4 Front Panel Setup Options with Associated Parameters
Left/Right Arrow
Current
Time

Eth1
Network
Settings

Console
Port
Settings

Date /
Time
Settings

User ID &
Current
TIme

Eth1 IP
Address

Baud Rate, Time Zone
Data Bits,
Stop Bits,
Parity,
Flow
Control

Release

Internal
Temp

Reading in
Firmware
version and Celsius &
Fahrenheit
date code
(display
only)

Up/
Down
Arrow

User
Strings

Location

Device
Ports

Displays
configured
user
string(s), if
any.

Indicates
the Rack
(RK), Row
(RW) &
Cluster
(CW)
locations.

Detects the
connection
state of each
port:
0=No DSR
input signal
detected on
device port
1=DSR input
signal
detected on
device port

Eth1
Subnet
Mask

Data Bits

Gateway

Stop Bits

DNS1

Parity

DNS2

Flow
Control

Date/Time

Restore
Factory
Defaults

DNS3

Note: The individual screens listed from left to right in Table 4-4 can be enabled or
disabled for display on the SLC LCD screen. The order of appearance of the screens, if
enabled, along with the elected “Home Page” may vary on the LCD monitor according to
configuration. The internal temperature, user strings, location and device ports LCD
menus are disabled by default. See LCD/Keypad (on page 251) for instructions on
enabling and disabling screens.

SLC™ 8000 Advanced Console Manager User Guide

4: Quick Setup

Entering the Settings
To enter setup information:
1. From the normal display (host name, date and time), press the right arrow button to display
Network Settings. The IP address for Eth1 displays.
Note: If you have connected Eth1 to the network, and Eth1 is able to acquire an IP
address through DHCP, this IP address displays, followed by the letter [D]. Otherwise, the
IP address displays as all zeros (000.000.000.000).
2. Press the Enter button on the keypad to enter edit mode. A cursor displays below one
character of the existing IP address setting.
3. To enter values:
-

Use the left or right arrow to move the cursor to the left or to the right position.

Use the up or down arrow to increment or decrement the numerical value.

4. When you have the IP address as you want it, press Enter to exit edit mode, and then press
the down arrow button. The Subnet Mask parameter displays.
Note: You must edit the IP address and the Subnet Mask together for a valid IP address
combination.
5. To save your entries for one or more parameters in the group, press the right arrow button.
The Save Settings? Yes/No prompt displays.
Note:

If the prompt does not display, make sure you are no longer in edit mode.

6. Use the left/right arrow buttons to select Yes, and press the Enter button.
7. Press the right arrow button to move to the next option, Console Settings.
8. Repeat steps 2-7 for each setting.
9. Press the right arrow button to move to the next option, Date/Time Settings, and click Enter
to edit the time zone.
-

To enter a US time zone, use the up/down arrow buttons to scroll through the US time
zones, and then press Enter to select the correct one.

To enter a time zone outside the US, press the left arrow button to move up to the top level
of time zones. Press the up/down arrow button to scroll through the top level.
A time zone with a trailing slash (such as Africa/) has sub-time zones. Use the right arrow
button to select the Africa time zones, and then the up/down arrows to scroll through them.
Press Enter to select the correct time zone. To move back to the top-level time zone at
any time, press the left arrow.

10. To save your entries, press the right arrow button. The Save Settings? Yes/No prompt
displays.
Note:

If the prompt does not display, make sure you are no longer in edit mode.

11. Use the left/right arrow buttons to select Yes, and press the Enter button.
12. To review the saved settings, press the up or down arrows to step through the current settings.

SLC™ 8000 Advanced Console Manager User Guide

4: Quick Setup
When you are done, the front panel returns to the clock display. The network port resets to the
new settings, and you can connect to your IP network for further administration. You should be
able to SSH to the SLC 8000 advanced console manager through your network connection, or
access the Web interface through a Web browser.

Restoring Factory Defaults
To use the LCD display to restore factory default settings:
1. Press the right arrow button to move to the last option, Release.
2. Use the down arrow to move to the Restore Factory Defaults option. A prompt for the 6-digit
Restore Factory Defaults password displays.
3. Press Enter to enter edit mode.
4. Using the left and right arrows to move between digits and the up and down arrows to change
digits, enter the password (the default password is 999999).
Note: The Restore Factory Defaults password is only for the LCD. You can change it at
the command line interface using the admin keypad password command.
5. Press Enter to exit edit mode. If the password is valid, a Save Settings? Yes/No prompt
displays.
6. Select Yes and press Enter. When the process is complete, the SLC unit reboots.

Method #2 Quick Setup on the Web Page
After the unit has an IP address, you can use the Quick Setup page to configure the remaining
network settings. This page displays the first time you log into the SLC 8000 advanced console
manager only. Otherwise, the SLC Home page displays.
To complete the Quick Setup page:
1. Open a web browser (Firefox, Chrome or Internet Explorer web browsers with JavaScript
enabled).
2. In the URL field, type https:// followed by the IP address of your SLC console manager.
Note: The web server listens for requests on the unencrypted (HTTP) port (port 80) and
redirects all requests to the encrypted (HTTPS) port (port 443).
3. Log in using sysadmin as the user name and PASS as the password. The first time you log in to
the SLC unit, the Quick Setup page automatically displays. Otherwise, the Home page displays.
Note:

To open the Quick Setup page at another time, click the Quick Setup tab.

SLC™ 8000 Advanced Console Manager User Guide

4: Quick Setup

Figure 4-5 Quick Setup

Figure 4-6 Home

4. To accept the defaults, select the Accept default Quick Setup settings checkbox on the top
portion of the page and click the Apply button at the bottom of the page. Otherwise, continue
with step 5.

SLC™ 8000 Advanced Console Manager User Guide

4: Quick Setup
Note: Once you click the Apply button on the Quick Setup page, you can continue using
the web interface to configure the SLC further.
5. Enter the following settings:

Network Settings
Note: Configurations with the same IP subnet on multiple interfaces (Ethernet or PPP)
are not currently supported.
Network Setting

Description

Eth 1 Settings






IP Address
(if specifying)




Obtain from DHCP: Acquires IP address, subnet mask, hostname and gateway
from the DHCP server. (The DHCP server may not provide the hostname
gateway, depending on its setup.) This is the default setting. If you select this
option, skip to Gateway.
Obtain from BOOTP: Lets a network node request configuration information from
a BOOTP "server" node. If you select this option, skip to Gateway.
Specify: Lets you manually assign a static IP address, generally provided by the
system administrator.
Enter an IP address that is unique and valid on your network. There is no default.
Enter all IP addresses in dot-quad notation. Do not use leading zeros in the fields
for dot-quad numbers less than 100. For example, if your IP address is
172.19.201.28, do not enter 028 for the last segment.

Note: Currently, the SLC 8000 advanced console manager does not support
configurations with the same IP subnet on multiple interfaces (Ethernet or PPP).
Subnet Mask

If specifying an IP address, enter the subnet mask for the network on which the SLC
unit resides. There is no default.

Default Gateway

The IP address of the router for this network. There is no default.

Hostname

The default host name is slcXXXX, where XXXX is the last 4 characters of the
hardware address of Ethernet Port 1. There is a 64-character limit (contiguous
characters, no spaces). The host name becomes the prompt in the command line
interface.

Domain

If desired, specify a domain name (for example, support.lantronix.com). The domain
name is used for host name resolution within the SLC 8000 advanced console
manager. For example, if abcd is specified for the SMTP server, and
mydomain.com is specified for the domain, if abcd cannot be resolved, the SLC unit
attempts to resolve abcd.mydomain.com for the SMTP server.

Date & Time Settings
Date & Time Setting

Description

Change Date/Time

Select the checkbox to manually enter the date and time at the SLC unit’s location.

Date

From the drop-down lists, select the current month, day, and year.

Time

From the drop-down lists, select the current hour and minute.

Time Zone

From the drop-down list, select the appropriate time zone.

SLC™ 8000 Advanced Console Manager User Guide

4: Quick Setup

Administrator Settings
Administrator
Setting

Description

Sysadmin Password To change the password (e.g., from the default) enter a Sysadmin Password of up
to 64 characters.
Retype Password

Re-enter the Sysadmin Password above in this field as a confirmation.

6. Click the Apply button to save your entries.
Figure 4-7 Quick Setup Completed in Web Manager

Method #3 Quick Setup on the Command Line Interface
If the SLC 8000 advanced console manager does not have an IP address, you can connect a
dumb terminal or a PC running a terminal emulation program (VT100) to access the command line
interface. (See Connecting Terminals on page 31.) If the unit has an IP address, you can use SSH
or Telnet to connect to the SLC unit.


By default, Telnet is disabled and SSH is enabled. To enable Telnet, use the Services > SSH/Telnet/
Logging (on page 76).
To complete the command line interface Quick Setup script:
1. Do one of the following:
-

With a serial terminal connection, power up, and when the command line displays, press
Enter.

With a network connection, use an SSH program or Telnet program (if Telnet has been
enabled) to connect to xx.xx.xx.xx (the IP address in dot quad notation), and press
Enter. You should be at the login prompt.

2. Enter sysadmin as the user name and press Enter.
3. Enter PASS as the password and press Enter. The first time you log in, the Quick Setup script
runs automatically. Normally, the command prompt displays.

SLC™ 8000 Advanced Console Manager User Guide

4: Quick Setup

Figure 4-8 Beginning of Quick Setup Script

To accept a default or to skip an entry that is not required, press Enter.

CLI Quick Setup
Settings

Description

Config Eth1

Select one of the following:





IP Address (if
specifying)

(1) obtain IP Address from DHCP: The unit will acquire the IP address, subnet
mask, hostname, and gateway from the DHCP server. (The DHCP server may or
may not provide the gateway and hostname, depending on its setup.) This is the
default setting.
(2) obtain IP Address from BOOTP: Permits a network node to request
configuration information from a BOOTP "server" node.
(3) static IP Address: Allows you to assign a static IP address manually. The IP
address is generally provided by the system administrator.

An IP address that is unique and valid on your network and in the same subnet as
your PC. There is no default.
If you selected DHCP or BOOTP, this prompt does not display.
Enter all IP addresses in dot-quad notation. Do not use leading zeros in the fields for
dot-quad numbers less than 100. For example, if your IP address is 172.19.201.28,
do not enter 028 for the last segment.
Note: Configurations with the same IP subnet on multiple interfaces (Ethernet or
PPP) are not currently supported.

Subnet Mask

The subnet mask specifies the network segment on which the SLC 8000 advanced
console manager resides. There is no default. If you selected DHCP or BOOTP, this
prompt does not display.

Default Gateway

IP address of the router for this network. There is no default.

Hostname

The default host name is slc, where XXXX is the last 4 characters of the hardware
address of Ethernet Port 1. There is a 64-character limit (contiguous characters, no
spaces).
Note: The host name becomes the prompt in the command line interface.

Domain

If desired, specify a domain name (for example, support.lantronix.com). The domain
name is used for host name resolution within the SLC unit. For example, if abcd is
specified for the SMTP server, and mydomain.com is specified for the domain, if
abcd cannot be resolved, the SLC 8000 advanced console manager attempts to
resolve abcd.mydomain.com for the SMTP server.

Time Zone

If the time zone displayed is incorrect, enter the correct time zone and press Enter. If
the entry is not a valid time zone, the system guides you through selecting a time
zone. A list of valid regions and countries displays. At the prompts, enter the correct
region and country.

SLC™ 8000 Advanced Console Manager User Guide

4: Quick Setup

CLI Quick Setup
Settings

Description

Date/Time

If the date and time displayed are correct, type n and continue. If the date and time
are incorrect, type y and enter the correct date and time in the formats shown at the
prompts.

Sysadmin
password

Enter a new sysadmin password.

After you complete the Quick Setup script, the changes take effect immediately.
Figure 4-9 Quick Setup Completed in CLI

Quick Setup will now step you through configuring a few basic settings.
The current settings are shown in brackets ('[]').
You can accept the current setting for each question by pressing
.
____Ethernet Port and Default Gateway___________________________________
The SLC8048 has two ethernet ports, Eth1 and Eth2.
By default, both ports are configured for DHCP.
Configure Eth1: (1) obtain IP Address from DHCP
(2) obtain IP Address from BOOTP
(3) static IP Address
Enter 1-3: [1]
The SLC8048 can be configured to use a default gateway.
Enter gateway IP Address: [none]
____Hostname____________________________________________________________
The current hostname is 'slc', and the current domain is ''.
The hostname will be shown in the CLI prompt.
Specify a hostname: [slc]
Specify a domain: []
____Time Zone___________________________________________________________
The current time zone is 'GMT'.
Enter time zone: [GMT]
____Date/Time___________________________________________________________
The current time is Tue Feb 4 11:26:55 2014
Change the current time? [n]
____Sysadmin Password___________________________________________________
Enter new password: []
Quick Setup is now complete.
[slc]>

SLC™ 8000 Advanced Console Manager User Guide

4: Quick Setup

Next Step
After completing quick setup on the SLC 8000 advanced console manager, you may want to
configure other settings. You can use the web page or the command line interface for
configuration.




For information about the web and the command line interfaces, go to Chapter 5: Web and
Command Line Interfaces.
To continue configuring the SLC unit, go to Chapter 6: Basic Parameters.

SLC™ 8000 Advanced Console Manager User Guide

Web and Command Line Interfaces
The SLC advanced console manager offers three interfaces for configuring the SLC unit: a
command line interface (CLI), a web interface, and an LCD with keypads on the front panel. This
chapter discusses the web and command line interfaces.
Note: See Chapter 4: Quick Setup on page 39 for instructions on using the LCD front
panel to configure basic network settings and web manager and CLI to perform quick
setup.

Web Manager
A web manager allows the system administrator and other authorized users to configure and
manage the SLC 8000 advanced console manager using most web browsers (Firefox, Chrome or
Internet Explorer web applications with JavaScript enabled). The Web Telnet and Web SSH
features require Java 1.1 (or later) support in the browser. The SLC unit provides a secure,
encrypted web interface over SSL (secure sockets layer).
Note: The web server listens for requests on the unencrypted (HTTP) port (port 80) and
redirects all requests to the encrypted (HTTPS) port (port 443).

SLC™ 8000 Advanced Console Manager User Guide

5: Web and Command Line Interfaces

The following figure shows a typical web page:
Figure 5-1 Web Page Layout
Port
Number
Bar

Logout
Button

Icons

Tabs

Help
Button

Options

Entry Fields
and Options

Apply Button

The web page has the following components:


Tabs: Groups of settings to configure.



Options: Below each tab are options for specific types of settings.

Note:


Only those options for which the currently logged-in user has rights display.

Port Number Bar:
-

The light green LCD button allows you to configure the front panel LCD.

The beige SD button allows you to configure the SD card, if a card is inserted. See
Chapter 9: USB/SD Card Port on page 157.

SLC™ 8000 Advanced Console Manager User Guide

5: Web and Command Line Interfaces
-

The gray U1 button allows you to configure the upper USB device (flash drive or modem)
plugged into the front panel USB connector. The gray U2 button allows you to configure
the lower USB device plugged into the front panel USB connector. See Chapter 9: USB/
SD Card Port on page 157.

The brown MD button allows you to configure the internal modem, if an internal modem is
installed.

The blue E1 and E2 buttons display the Network > Network Settings page.

The number buttons allow you to select a port and display its settings. Only ports to which
the currently logged-in user has rights are enabled.
Below the bar are options for use with the port buttons. Selecting a port and the
Configuration option takes you to the Device Ports > Settings page. Selecting a port and
the WebSSH option displays the WebSSH window for the device port --if Web SSH is
enabled, and if SSH is enabled for the device port. Selecting the port and the Connected
Device button allows access to supported devices such as SLP power managers and/or
SensorSoft temperature and humidity probes connected to the device port.



The yellow orange A and B buttons display the status of the power supplies.

Entry Fields and Options: Allow you to enter data and select options for the settings.

Note: For specific instructions on completing the fields on the web pages, see Chapters
5 through 12.


Apply Button: Apply on each web page makes the changes immediately and saves them so
they will be there when the SLC 8000 advanced console manager is rebooted.



Icons: The icon bar above the Main Menu has icons that display the following:
Home page.
Information about the SLC unit and Lantronix contact information.
Configuration site map.
Status of the SLC 8000 advanced console manager.



Help Button: Provides online Help for the specific web page.

Logging in
Only the system administrator or users with web access rights can log into the web manager. More
than one user at a time can log in, but the same user cannot login more than once.
To log in to the SLC web manager:
1. Open a web browser.
2. In the URL field, type https:// followed by the IP address of your SLC 8000 advanced
console manager.
3. To configure the SLC unit, use sysadmin as the user name and PASS as the password.
(These are the default values.)
Note: The system administrator may have changed the password using one of the
Quick Setup methods in the previous chapter.

SLC™ 8000 Advanced Console Manager User Guide

5: Web and Command Line Interfaces
The Lantronix SLC Quick Setup page displays automatically the first time you log in.
Subsequently, the Lantronix SLC Home page displays. (If you want to display the Quick Setup
page again, click Quick Setup on the main menu.)

Logging Out
To log off the SLC web interface:
1. Click the Logout button located on the upper left part of any user interface page. You are
brought back to the login screen when logout is complete.

Web Page Help
To view detailed information about an SLC web page:
1. Click the Help button to the right of any user interface page. Online Help contents will appear
in a new browser.

Command Line Interface
A command line interface (CLI) is available for entering all the commands you can use with the
SLC 8000 advanced console manager. In this User Guide, after each section of instructions for
using the web interface, you will find the equivalent CLI commands. You can access the command
line interface using Telnet, SSH, or a serial terminal connection.
Note: By default, Telnet is disabled and SSH is enabled. To enable Telnet, use the
Services > SSH/Telnet/Logging web page, a serial terminal connection, or an SSH
connection. (See Chapter 7: Services.)
The sysadmin user and users with who have full administrative rights have access to the complete
command set, while all other users have access to a reduced command set based on their
permissions.

Logging In
To log in to the SLC command line interface:
1. Do one of the following:
-

With a serial terminal connection, power up, and when the command line displays, press
Enter.

If the SLC 8000 advanced console manager already has an IP address (assigned
previously or assigned by DHCP), Telnet (if Telnet has been enabled) or SSH to
xx.xx.xx.xx (the IP address in dot quad notation) and press Enter. The login prompt
displays.

2. To log in as the system administrator for setup and configuration, enter sysadmin as the user
name and press Enter.
3. Enter PASS as the password and press Enter. The first time you log in, the Quick Setup script
runs automatically. Normally, the command prompt displays. (If you want to display the Quick
Setup script again, use the admin quicksetup command.)

SLC™ 8000 Advanced Console Manager User Guide

5: Web and Command Line Interfaces
Note: The system administrator may have changed the password using one of the
Quick Setup methods in the previous chapter.
To log in any other user:
1. Enter your SLC user name and press Enter.
2. Enter your SLC password and press Enter.

Logging Out
To log out of the SLC command line interface, type logout and press Enter.

Command Syntax
Commands have the following format:

where
is set, show, connect, admin, diag, or logout.
is a group of related parameters whose settings you want to configure or view.
Examples are ntp, deviceport, and network.
is one or more name-value pairs in one of the following formats:

User must specify one of the values (aa or bb) separated by a
vertical line ( | ). The values are in all lowercase and must be
entered exactly as shown. Bold indicates a default value.

User must specify an appropriate value, for example, an IP address.
The parameter values are in mixed case. Square brackets [ ]
indicate optional parameters.

Command Line Help


For general Help and to display the commands to which you have rights, type: help



For general command line Help, type: help command line



For more information about a specific command, type help followed by the command. For
example: help set network or help admin firmware

Tips


Type enough characters to identify the action, category, or parameter name uniquely. For
parameter values, type the entire value. For example, you can shorten:
set network port 1 state static ipaddr 122.3.10.1 mask 255.255.0.0
to
se net po 1 st static ip 122.3.10.1 ma 255.255.0.0



Use the Tab key to automatically complete action, category, or parameter names. Type a
partial name and press Tab either to complete the name if only one is possible, or to display
the possible names if more than one is possible. Following a space after the preceding name,
Tab displays all possible names.

SLC™ 8000 Advanced Console Manager User Guide

5: Web and Command Line Interfaces



Should you make a mistake while typing, backspace by pressing the Backspace key and/or
the Delete key, depending on how you accessed the interface. Both keys work if you use
VT100 emulation in your terminal access program when connecting to the console port. Use
the left and right arrow keys to move within a command.



Use the up and down arrows to scroll through previously entered commands. If desired, select
one and edit it. You can scroll through up to 100 previous commands entered in the session.



To clear an IP address, type 0.0.0.0, or to clear a non-IP address value, type CLEAR.



When the number of lines displayed by a command exceeds the size of the window (the
default is 25), the command output is halted until the user is ready to continue. To display the
next line, press Enter, and to display the page, press the space bar. You can override the
number of lines (or disable the feature altogether) with the set cli command.

General CLI Commands
The following commands relate to the CLI itself.
To configure the current command line session:
set cli scscommands
Allows you to use SCS-compatible commands as shortcuts for executing commands:
Note: Settings are retained between CLI sessions for local users and users listed in the
remote users list.
SCS Commands

Commands

info

'show sysstatus'

version

'admin version'

reboot

'admin reboot'

poweroff

'admin shutdown'

listdev

'show deviceport names'

direct

'connect direct deviceport'

listen

'connect listen deviceport'

clear

'set locallog clear'

telnet

'connect direct telnet'

ssh

'connect direct ssh'

To set the number of lines displayed by a command:
set cli terminallines
Sets the number of lines in the terminal emulation (screen) for paging through text one screenful at
a time, if the SLC 8000 advanced console manager cannot detect the size of the terminal
automatically.
To show current CLI settings:
show cli

SLC™ 8000 Advanced Console Manager User Guide

5: Web and Command Line Interfaces
To view the last 100 commands entered in the session:
show history
To clear the command history:
set history clear
To view the rights of the currently logged-in user:
show user
Note:

For information about user rights, see Chapter 11: User Authentication.
Table 5-2 CLI Keyboard Shortcuts

Keyboard Shortcut

Description

Control + [a]

Move to the start of the line.

Control + [e]

Move to the end of the line.

Control + [b]

Move back to the start of the current word.

Control + [f]

Move forward to the end of the next word.

Control + [u]

Erase from cursor to the beginning of the line.

Control + [k]

Erase from cursor to the end of the line.

SLC™ 8000 Advanced Console Manager User Guide

Basic Parameters
This chapter explains how to set the following basic configuration settings for the SLC advanced
console manager using the SLC web interface or the CLI:


Network parameters that determine how the SLC 8000 advanced console manager interacts
with the attached network



Firewall and routing



Date and time

Note: If you entered some of these settings using a Quick Setup procedure, you may
update them here.

Requirements
If you assign a different IP address from the current one, it must be within a valid range, unique to
your network, and with the same subnet mask as your workstation.
To configure the unit, you need the following information:
Eth1
Eth2

IP address:

________ - ________ - ________ - ________

Subnet mask:

________ - ________ - ________ - ________

IP address (optional):

________ - ________ - ________ - ________

Subnet mask (optional): ________ - ________ - ________ - ________
Gateway:

___________ - ___________ - ___________ - ___________

DNS:

___________ - ___________ - ___________ - ___________

SLC™ 8000 Advanced Console Manager User Guide

6: Basic Parameters

To enter settings for one or both network ports:
1. Click the Network tab and select the Network Settings option. The following page displays:
Figure 6-1 Network > Network Settings

SLC™ 8000 Advanced Console Manager User Guide

6: Basic Parameters

2. Enter the following information:

Ethernet Interfaces (Eth1 and Eth2)
Note: Configurations with the same IP subnet on multiple interfaces (Ethernet or PPP)
are not currently supported.
Eth 1 Settings
or
Eth 2 Settings




IP Address
(if specifying)




Disabled: If selected, disables the network port.
Obtain from DHCP: Acquires IP address, subnet mask, hostname and gateway
from the DHCP server. (The DHCP server may not provide the hostname
gateway, depending on its setup.) This is the default setting. If you select this
option, skip to Gateway.
Obtain from BOOTP: Lets a network node request configuration information
from a BOOTP "server" node. If you select this option, skip to Gateway.
Specify: Lets you manually assign a static IP address, generally provided by the
system administrator.
Enter an IP address that will be unique and valid on your network. There is no
default.
Enter all IP addresses in dot-quad notation. Do not use leading zeros in the
fields for dot-quad numbers less than 100. For example, if your IP address is
172.19.201.28, do not enter 028 for the last segment.

Note: Currently, the SLC unit does not support configurations with the same IP
subnet on multiple interfaces (Ethernet or PPP).
Subnet Mask

If specifying an IP address, enter the network segment on which the SLC unit
resides. There is no default.

IPv6 Address

Address of the port in IPv6 format.
Note: The SLC 8000 advanced console manager supports IPv6 connections for a
limited set of services: the web, SSH, and Telnet.
IPv6 addresses are written as 8 sets of 4-digit hexadecimal numbers separated by
colons. There are several rules for modifying the address. For example:

1234:0BCD:1D67:0000:0000:8375:BADD:0057 may be shortened to
1234:BCD:1D67::8375:BADD:57.
IPv6 Address
(Link Local)

An IPv6 address that is intended only for communications within the segment of a
local network.

Mode

Select the direction (full duplex or half-duplex) and speed (10, 100, or 1000 Mbit) of
data transmission. The default is Auto, which allows the Ethernet port to autonegotiate the speed and duplex with the hardware endpoint to which it is
connected.

MTU

Specifies the maximum transmission unit (MTU) or maximum packet size of
packets at the IP layer (OSI layer 3) for the Ethernet port. When fragmenting a
datagram, this is the largest number of bytes that can be used in a packet.

Multicast

Displays the multicast address of the Ethernet port.

Enable IPv6

Select this box to enable the IPv6 protocol. Disabled by default.

Ethernet Bonding

Ethernet 1 and Ethernet 2 can be bonded to support redundancy (Active Backup),
aggregation (802.3ad), and load balancing. Disabled by default. Note that if
Ethernet Bonding is enabled, assigning individual IP Addresses to Device Ports is
not supported.

SLC™ 8000 Advanced Console Manager User Guide

6: Basic Parameters

Enable IP
Forwarding

IP forwarding enables network traffic received on one interface (Eth1, Eth2, or an
external/USB modem attached to the SLC unit with an active PPP connection) to
be transferred out another interface (any of the above). The default behavior (if IP
forwarding is disabled) is for network traffic to be received but not routed to another
destination.
Enabling IP forwarding is required if you enable Network Address Translation
(NAT) for any device port modem or USB/ISDN modem. IP forwarding allows a
user accessing the SLC 8000 advanced console manager over a modem to access
the network connected to Eth1 or Eth2.

Note: Configurations with the same IP subnet on multiple interfaces (Ethernet or PPP)
are not currently supported.

Gateway
Default

IP address of the router for this network.
If this has not been set manually, any gateway acquired by DHCP for Eth1 or Eth2
displays.
All network traffic that matches the Eth1 IP address and subnet mask is sent out
Eth1. All network traffic that matches the Eth2 IP address and subnet mask is sent
out Eth 2.
If you set a default gateway, any network traffic that does not match Eth1 or Eth2 is
sent to the default gateway for routing.

DHCP-Acquired

Gateway acquired by DHCP for Eth1 or Eth2. View only.

Precedence

Indicates whether the gateway acquired by DHCP or the default gateway takes
precedence. The default is DHCP Gateway. If the DHCP Gateway is selected and
both Eth1 and Eth2 are configured for DHCP, the SLC unit gives precedence to the
Eth1 gateway.

Alternate

An alternate IP address of the router for this network, to be used if an IP address
usually accessible through the default gateway fails to return one or more pings.

IP Address to Ping

IP address to ping to determine whether to use the alternate gateway.

Ethernet Port to Ping Ethernet port to use for the ping.
Delay between Pings Number of seconds between pings
Number of Failed
Pings

Number of pings that fail before the SLC 8000 advanced console manager uses the
alternate gateway.

Hostname & Name Servers
Hostname

Domain

SLC™ 8000 Advanced Console Manager User Guide

6: Basic Parameters

DNS Servers
#1 - #3

Configure up to three name servers. #1 is required if you choose to configure DNS
(Domain Name Server) servers.
The first three DNS servers acquired via DHCP through Eth1 and/or Eth2 display
automatically.

DHCP-Acquired DNS Servers
#1 - #3

Displays the IP address of the name servers if automatically assigned by DHCP.

TCP Keepalive Parameters
Start Probes

Number of seconds the SLC unit waits after the last transmission before sending the
first probe to determine whether a TCP session is still alive. The default is 600
seconds (10 minutes).

Number of Probes

Number of probes the SLC 8000 advanced console manager sends before closing a
session. The default is 5.

Interval

The number of seconds the SLC unit waits between probes. The default is 60
seconds.

3. To save your entries, click the Apply button. Apply makes the changes immediately and
saves them so they will be there when the SLC 8000 advanced console manager is rebooted.

Ethernet Counters
The Network > Network Settings page displays statistics for each of the SLC Ethernet ports since
boot-up. The system automatically updates them.
Note: For Ethernet statistics for a smaller time period, use the diag perfstat
command.

Network Commands
The following CLI commands correspond to the web page entries described above.
To configure Ethernet port 1 or 2:
set network port <1|2>
Parameters
mode
state
[ipaddr mask ]
[ipv6addr ]
To configure up to three DNS servers:
set network dns <1|2|3> ipaddr

SLC™ 8000 Advanced Console Manager User Guide

6: Basic Parameters
To set the default and alternate network gateways:
set network gateway
Parameters
default
precedence
alternate
pingip
ethport <1 or 2>
pingdelay <1-250 seconds>
failedpings <1-25>
The alternate gateway is used if an IP address usually accessible through the default gateway fails
to return one or more pings.
To set the SLC host name and domain name:
set network host [domain ]
To set TCP Keepalive and IP Forwarding network parameters:
set network
Parameters
interval <1-99999 Seconds>
ipforwarding
probes
startprobes <1-99999 Seconds>
To view all network settings:
show network all
To view Ethernet port settings and counters:
show network port <1|2>
To view DNS settings:
show network dns
To view gateway settings:
show network gateway
To view the host name of the SLC 8000 advanced console manager:
show network host

SLC™ 8000 Advanced Console Manager User Guide

6: Basic Parameters

IP Filter
IP filters (also called a rule set) act as a firewall to allow or deny individual or a range of IP
addresses, ports, and protocols. When a network connection is configured to use an IP filter, all
network traffic through that connection is compared, in order, to the rules of that filter. Network
traffic may be allowed to pass, it may be dropped (without notice), or it may be rejected (sends
back an error packet) depending upon the rules of that filter rule set.
The administrator uses the Network > IP Filter page to view, add, edit, delete, and map IP filters,
Warning:

IP filters configuration is a feature for advanced users. Adding and
enabling IP filter sets incorrectly can disable your SLC unit.

Viewing IP Filters
You can view a list of filters and a table showing how each filter is mapped to an interface.
To view a list of IP filters:
1. Click the Network tab and select the IP Filter option. The following page displays:
Figure 6-2 Network > IP Filter

Mapping Rulesets
The administrator can assign an IP Filter Rule Set to a network interface (Ethernet interface), a
modem connected to a device port, or a USB modem or an internal modem (if installed).
To map a ruleset to a network interface:
1. Click the Network tab and select the IP Filter option. The Network > IP Filter page displays.
2. Select the IP filter rule set to be mapped.

SLC™ 8000 Advanced Console Manager User Guide

6: Basic Parameters
3. From the Interface drop-down list, select the interface and click the Map Ruleset button. The
Interface and rule set display in the IP Filter Mappings table.
To delete a mapping:
1. Click the Network tab and select the IP Filter option. The Network > IP Filter page displays.
2. Select the mapping from the list and click the Delete Mappings button. The mapping no
longer displays.
3. Click the Apply button.

Enabling IP Filters
On the Network > IP Filter page, you can enable all filters or disable all filters.
Note:

There is no way to enable or disable individual filters.

To enable IP filters:
1. Enter the following:
Enable IP Filter

Select the Enable IP Filter checkbox to enable all filters, or clear the checkbox
to disable all filters. Disabled by default.

Packets Dropped

Displays the number of data packets that the filter ignored (did not respond to).
View only.

Packets Rejected

Displays the number of data packets that the filter sent a “rejected” response to.
View only.

Test Timer

Timer for testing IP Filter rulesets. Select No to disable the timer. Select Yes,
minutes (1-120) to enable the timer and enter the number of minutes the timer
should run. The timer automatically disables the IP Filters when the time
expires.

Time Remaining

Indicates how many minutes are left on the timer before it expires and IP Filters
disabled. View only.

Configuring IP Filters
The administrator can add, edit, delete, and map IP filters.
Note: A configured filter has no effect until it is mapped to a network interface.
See Mapping Rulesets on page 63.
To add an IP filter:
1. On the Network > IP Filter page, click the Add Ruleset button. The following page displays:

SLC™ 8000 Advanced Console Manager User Guide

6: Basic Parameters

Figure 6-3 Network > IP Filter Ruleset (Adding/Editing Rulesets)

Rulesets can be added or updated on this page.
2. Enter the following:
Ruleset Name

Name that identifies a filter; may be composed of letters, numbers, and hyphens
only. (The name cannot start with a hyphen.)
Example: FILTER-2

Rule Parameters
IP Address(es)

Specify a single IP address to act as a filter.
Example: 172.19.220.64 – this specific IP address only

Subnet Mask

Specify a subnet mask to act determine how much of the address should apply to
the filter.
Example: 255.255.255.255 to specify the whole address should apply.

Protocol

From the drop-down list, select the type of protocol through which the filter will
operate. The default setting is All.

SLC™ 8000 Advanced Console Manager User Guide

6: Basic Parameters

Port Range

Enter a range of destination TCP or UDP port numbers to be tested. An entry is
required for TCP, TCP New, TCP Established, and UDP, and is not allowed for
other protocols. Separate multiple ports with commas. Separate ranges of ports by
colons.
Examples:




22 – filter on port 22 only
23,64,80 – filter on ports 23, 64 and 80
23:64,80,143:150 – filter on ports 23 through 64, port 80 and ports 143 through
150

Action

Select whether to Drop, Reject, or Allow communications for the specified IP
address, subnet mask, protocol, and port range. Drop ignores the packet with no
notification. Reject ignores the packet and sends back an error message. Allow
permits the packet through the filter.

Generate rule to
allow service

You may wish to “punch holes” in your filter set for a particular protocol or service.
For instance, if you have configured your NIS server and wish to create an opening
in your filter set, select the NIS option and click the Add Rule button. This entry
adds a new rule to your filter set using the NIS -configured IP address. Other
services and protocols added automatically generate the necessary rule to allow
their use.

3. Click the right arrow
button to add the new rule to the bottom of the Rules list box on the
right. A maximum of 64 rules can be created for each ruleset.
4. To remove a rule from the filter set, highlight that line and click the left
arrow. The rule
populates the rule definition fields, allowing you to make minor changes before reinserting the
rule. To clear the definition fields, click the Clear button.
5. To change the order of priority of the rules in the list box, select the rule to move and use the
up

or down

arrow buttons on the right side of the filter list box.

6. To save, click the Apply button. The new filter displays in the menu tree.
Note: To add another new filter rule set, click the Back to IP Filter link to return to the
Network > IP Filter page.

SLC™ 8000 Advanced Console Manager User Guide

6: Basic Parameters

Updating an IP Filter
To update an IP filter rule set:
1. From the Network > IP Filter page, the administrator selects the IP filter ruleset to be edited
and clicks the Edit Ruleset button to return to the Network > IP Filter Ruleset (Adding/Editing
Rulesets) page (see Figure 6-3).
2. Edit the information as desired and click the Apply button.

Deleting an IP Filter
To delete an IP filter rule set:
1. On the Network > IP Filter page, the administrator selects the IP filter ruleset to be deleted and
clicks the Delete Ruleset button.

IP Filter Commands
The following CLI commands correspond to the web page entries described above.
To enable or disable IP filtering for incoming network traffic:
set ipfilter state
To set IP filter mapping:
set ipfilter mapping
Parameters
ethernet <1|2> state
ethernet <1|2> state ruleset
deviceport <1..48> state
deviceport <1..48> state ruleset
internal modem state
internal modem state ruleset
usbport state
usbport state ruleset
To set IP filter rules:
set ipfilter rules
Parameters
add
delete
edit
Edit Parameters:
append
insert

SLC™ 8000 Advanced Console Manager User Guide

6: Basic Parameters

replace
delete

Routing
The SLC 8000 advanced console manager allows you to define static routes and, for networks
using Routing Information Protocol (RIP)-capable routes, to enable the RIP protocol to configure
the routes dynamically.
To configure routing settings:
1. Click the Network tab and select the Routing option. The following page displays:
Figure 6-4 Network > Routing

2. Enter the following:

Dynamic Routing
Enable RIP

Select to enable Dynamic Routing Information Protocol (RIP) to assign routes
automatically. Disabled by default.

RIP Version

Select the RIP version. The default is 2.

SLC™ 8000 Advanced Console Manager User Guide

6: Basic Parameters

Static Routing
Enable Static
Routing

Select to assign the routes manually. The system administrator usually provides the
routes. Disabled by default.




To add a static route, enter the IP Address, Subnet Mask, and Gateway for the
route and click the Add/Edit Route button. The route displays in the Static Routes
table. You can add up to 64 static routes.
To edit a static route, select the radio button to the right of the route, change the IP
Address, Subnet Mask, and Gateway fields as desired, and click the Add/Edit
Route button.
To delete a static route, select the radio button to the right of the route and click the
Delete Route button.

3. Click the Apply button.
Note: To display the routing table, status or specific report, see the section,
Status/Reports on page 244.

Equivalent Routing Commands
The following CLI commands correspond to the web page entries described above.
To configure static or dynamic routing:
set routing [parameters]
Parameters
rip
route <1-64> ipaddr mask gateway
static
version <1|2|both>
Note: To delete a static route, set the IP address, mask, and gateway parameters to
0.0.0.0.
To set the routing table to display IP addresses (disable) or the corresponding host names
(enable):
show routing [resolveip ] [email ]
Note:

You can optionally email the displayed information.

VPN
This page can be used to create a Virtual Private Network (VPN) tunnel to the SLC 8000 advanced
console manager for secure communication between the SLC unit and a remote host or gateway.
The SLC 8000 advanced console manager supports IPSec tunnels using Encapsulated Security
Payload (ESP). The SLC unit supports host-to-host, net-to-net, host-to-net, and roaming user
tunnels.
Note: To allow VPN tunnel access if the SLC firewall is enabled, traffic to UDP ports 500
and 4500 from the remote host should be allowed, as well as protocol ESP from the
remote host.

SLC™ 8000 Advanced Console Manager User Guide

6: Basic Parameters
To complete the VPN page:
1. Click the Network tab and select the VPN option. The following page displays:
Figure 6-5 Network > VPN

2. Enter the following:
Enable VPN Tunnel

Select to create a tunnel.

Name

The name assigned to the tunnel. Required to create a tunnel.

Ethernet Port

Select ethernet port 1 or 2.

Remote Host

The IP address of the remote host's public network interface. The special
value of any can be entered if the remote host is a roaming user who may
not have the same IP address each time a tunnel is created. In this case, it
is recommended that the Remote Id also be configured.

SLC™ 8000 Advanced Console Manager User Guide

6: Basic Parameters

Remote Id

How the remote host should be identified for authentication. The Id is used
to select the proper credentials for communicating with the remote host.

Remote Hop/Router

If the remote host is behind a gateway, this specifies the IP address of the
gateway's public network interface.

Remote Subnet(s)

One or more subnets behind the remote host, expressed in CIDR notation
(IP address/mask bits). If multiple subnets are specified, the subnets should
be separated by a comma.

Local Id

How the SLC 8000 advanced console manager should be identified for
authentication. The Id is used by the remote host to select the proper
credentials for communicating with the SLC advanced console manager.

Local Hop/
Router

If the SLC unit is behind a gateway, this specifies the IP address of the
gateway's public network interface.

Local Subnet(s)

One or more subnets behind the SLC 8000 advanced console manager,
expressed in CIDR notation (IP address/mask bits). If multiple subnets are
specified, the subnets should be separated by a comma.

IKE Negotiation

The Internet Key Exchange (IKE) protocol is used to exchange security
options between two hosts who want to communicate via IPSec. The first
phase of the protocol authenticates the two hosts to each other and
establishes the Internet Security Association Key Management Protocol
Security Association (ISAKMP SA). The second phase of the protocol
establishes the cryptographic parameters for protecting the data passed
through the tunnel, which is the IPSec Security Association (IPSec SA). The
IPSec SA can periodically be renegotiated to ensure security. The IKE
protocol can use one of two modes: Main Mode, which provides identity
protection and takes longer, or Aggressive Mode, which provides no
identity protection but is quicker. With Aggressive Mode, there is no
negotiation of which cryptographic parameters will be used; each side must
give the correct cryptographic parameters in the initial package of the
exchange, otherwise the exchange will fail. If Aggressive Mode is used, the
IKE Encryption, IKE Authentication, and IKE DH Group must be
specified.

IKE Encryption

The type of encryption, 3DES or AES, used for IKE negotiation. Any can be
selected if the two sides can negotiate which type of encryption to use.

Authentication (IKE)

The type of authentication, SHA1 or MD5, used for IKE negotiation. Any
can be selected if the two sides can negotiate which type of authentication
to use.

DH Group (IKE)

The Diffie-Hellman Group, 2 or 5, used for IKE negotiation. Any can be
selected if the two sides can negotiate which Diffie-Hellman Group to use.

ESP Encryption

The type of encryption, 3DES or AES, used for encrypting the data sent
through the tunnel. Any can be selected if the two sides can negotiate
which type of encryption to use.

Authentication (ESP)

The type of authentication, SHA1 or MD5, used for authenticating data sent
through the tunnel. Any can be selected if the two sides can negotiate
which type of authentication to use.

DH Group (ESP)

The Diffie-Hellman Group, 2 or 5, used for the key exchange for data sent
through the tunnel. Any can be selected if the two sides can negotiate
which Diffie-Hellman Group to use.

SLC™ 8000 Advanced Console Manager User Guide

6: Basic Parameters

Authentication

The type of authentication used by the host on each side of the VPN tunnel
to verify the identity of the other host. For RSA Public Key, each host
generates a RSA public-private key pair, and shares its public key with the
remote host. The RSA Public Key for the SLC 8000 advanced console
manager (which has 2192 bits) can be viewed at either the web or CLI. For
Pre-Shared Key, each host enters the same passphrase to be used for
authentication.

RSA Public Key for
Remote Host

If RSA Public Key is selected for authentication, enter the public key for the
remote host.

Pre-Shared Key

If Pre-Shared Key is selected for authentication, enter the key.

Retype Pre-Shared Key

If Pre-Shared Key is selected for authentication, re-enter the key.

Perfect Forward Secrecy

When a new IPSec SA is negotiated after the IPSec SA lifetime expires, a
new Diffie-Hellman key exchange can be performed to generate a new
session key to be used to encrypt the data being sent through the tunnel. If
this is enabled, it provides greater security, since the old session keys are
destroyed.

Mode Configuration Client

If this is enabled, the SLC unit can receive network configuration from the
remote host. This allows the remote host to assign an IP address/netmask
to the SLC advanced console manager side of the VPN tunnel.

XAUTH Client

If this is enabled, the SLC 8000 advanced console manager will send
authentication credentials to the remote host if they are requested. XAUTH,
or Extended Authentication, can be used as an additional security measure
on top of the Pre-Shared Key or RSA Public Key.

XAUTH Login (Client)

If XAUTH Client is enabled, this is the login used for authentication.

XAUTH Password

If XAUTH Client is enabled, this is the password used for authentication.

Retype Password

If XAUTH Client is enabled, this is the password used for authentication.

3. To save, click Apply button.
4. To see a details of the VPN tunnel connection, including the cryptographic algorithms used,
select the View Detailed Status link.
5. To see the last 100 lines of the logs associated with the VPN tunnel, select the View VPN
Logs link.
6. To see the RSA public key for the SLC 8000 advanced console manager (required for
configuring the remote host if RSA Public Keys are being used), select the View SLC RSA
Public Key link.

Configuring an IPsec VPN Tunnel through the CLI
1. Set vpn :
tunnel
ethport <1|2>
auth
remotehost
remoteid
remotehop
remotesubnet
localid
localhop

SLC™ 8000 Advanced Console Manager User Guide

6: Basic Parameters

localsubnet
ikenegotation
ikeenc
ikeauth
ikedhgroup
espenc
espauth
espdhgroup
pfs
modeconfig
xauthclient
xauthlogin
2. Enter RSA public key or Pre-Shared Key of remote host: set vpn key
3. Enter XAUTH password: set vpn xauthpassword
4. Display all VPN settings and current status: show vpn [email ]
5. Display detailed VPN status: show vpn status [email ]
6. Display VPN logs: show vpn viewlog [numlines ]
7. Dispplay RSA public key of the SLC: show vpn rsakey

Security
The SLC 8000 advanced console manager supports a security mode that complies with the FIPS
140-2 standard. FIPS (Federal Information Processing Standard) 140-2 is a security standard
developed by the United States federal government that defines rules, regulations and standards
for the use of encryption and cryptographic services. The National Institute of Standards and
Technology (NIST) maintains the documents related to FIPS at:
http://csrc.nist.gov/publications/PubsFIPS.html
FIPS 140-2 defines four security levels, Level 1 through Level 4. The SLC unit uses a FIPS
module certified at Level 1.
To enable FIPS mode, the Network -> Security -> FIPS Mode flag needs to be enabled and the
SLC unit rebooted. Each time the SLC unit is booted in FIPS mode, it will perform a power up self
test to verify the integrity of the SLC unit's cryptographic module. If there are any issues with the
integrity of the cryptographic module, FIPS mode will be disabled and the SLC unit will be
rebooted into non-FIPS mode.
When the SLC unit is running in FIPS mode, the following protocols will be supported: SSL v3.1/
TLS 1.0, TLS 1.1, TLS 1.2, and SSH v2.
For SSL and TLS, the SLC unit will support the following cipher suites:


AES128-SHA



AES128-SHA256



AES128-GCM-SHA256



AES256-SHA



AES256-SHA256



AES256-GCM-SHA384

SLC™ 8000 Advanced Console Manager User Guide

6: Basic Parameters



DES-CBC3-SHA

SSL/secure certificates imported for use with the web server or LDAP authentication must use
either the SHA1 or SHA2 hash with a RSA public key of 1024, 2048 or 3072 bits.
When the SLC unit is running in FIPS mode, the following protocols/functions will not be
supported: NIS, Kerberos, RADIUS, TACACS+, Telnet/WebTelnet, WebSSH, IPSec/VPN, SSLv2,
SSH v1, FTP, PPP, CIFS/Samba, TCP (to Device Ports), unencrypted LDAP, and SNMP. If any of
these protocols/functions are enabled prior to enabling FIPS mode, they will be automatically
disabled.
LDAP authentication must be configured with the following:


StartTLS encryption (SSL encryption over port 636 is not supported)



A SSL/secure certificate



Either Bind with Login or a Bind Name and Password

Note:

In FIPS mode, passphrases are not supported for SSH keys and SSL certificates.
Figure 6-6 Network > Security

To enable FIPS:
1. Check the Enable FIPS Mode check box on the Networks > Security page.
2. Click Apply. The SLC unit will need to be rebooted to initiate FIPS mode. Once the SLC
module is running in FIPS mode, the Security page, will display all processes that are running
in FIPS mode.
To disable FIPS:
1. Uncheck the Enable FIPS Mode check box on the Networks > Security page.
2. Click Apply. The SLC unit will need to be rebooted for this change to take effect.

SLC™ 8000 Advanced Console Manager User Guide

Services

System Logging and Other Services
Use the Services tab to:


Configure the amount of data sent to the logs.



Enable or disable SSH and Telnet logins.



Enable a Simple Network Management Protocol (SNMP) agent.

Note: The SLC advanced console manager supports both MIB-II (as defined by RFC
1213) and a private enterprise MIB. The private enterprise MIB provides read-only access
to all statistics and configurable items provided by the SLC unit. It provides read-write
access to a select set of functions for controlling the SLC 8000 advanced console
manager and device ports. See the MIB definition file for details.


Identify a Simple Mail Transfer Protocol (SMTP) server.



Enable or disable SSH and Telnet logins.



Configure an audit log.



View the status of and manage the SLC 8000 advanced console managers on the Secure
Lantronix network.



Set the date and time.



Configure NFS and CIFS shares



Configure the web server

SLC™ 8000 Advanced Console Manager User Guide

7: Services

SSH/Telnet/Logging
To configure SSH, Telnet, and Logging settings:
1. Click the Services tab and select the SSH/Telnet/Logging option. The following page
displays.
Figure 7-1 Services > SSH/Telnet/Logging

2. Enter the following settings:

System Logging
In the System Logging section, select one of the following alert levels from the drop-down list for
each message category:


Off: Disables this type of logging.



Error: Saves messages that are output because of an error.



Warning: Saves message output from a condition that may be cause for concern, in addition
to error messages. This is the default for all message types.

SLC™ 8000 Advanced Console Manager User Guide

7: Services



Info: Saves informative message, in addition to warning and error messages.



Debug: Saves extraneous detail that may be helpful in tracking down a problem, in addition to
information, warning, and error messages.

Network Level

Messages concerning the network activity, for example about Ethernet and routing.

Services

Messages concerning services such as SNMP and SMTP.

Authentication

Messages concerning user authentication.

Device Ports

Messages concerning device ports and connections.

Diagnostics

Messages concerning system status and problems.

General

Any message not in the categories above.

Remote Servers
(#1 and #2)

IP address of the remote server(s) where system logs are stored.
The system log is always saved to local SLC storage. It is retained through SLC unit
reboots for files up to 200K. Saving the system log to a server that supports remote
logging services (see RFC 3164) allows the administrator to save the complete system
log history.

Audit Log
Enable Log

Select to save a history of all configuration changes in a circular log. Disabled by
default. The audit log is saved through SLC 8000 advanced console manager reboots.

Size

The log has a default maximum size of 50 Kbytes (approximately 500 entries). You
can set the maximum size of the log from 1 to 500 Kbytes.

Include CLI
Commands

Select to cause the audit log to include the CLI commands that have been executed.
Disabled by default.

Include In System If enabled, the contents of the audit log are added to the system log (under the
Log
General/Info category/level). Disabled by default.

SMTP
Server

IP address of your network’s Simple Mail Transfer Protocol (SMTP) relay server. If an
SMTP server is not specified, the SLC module will attempt to look up the MX record for
the domain in the destination email addresses of outgoing emails.

Sender

The email address of the sender of outgoing emails. The strings "$host" and "$domain"
can be part of the email address - they will be substituted with the actual hostname and
domain. The default is donotreply@$host.$domain.

SSH
Enable Logins

Enables or disables SSH logins to the SLC unit to allow users to access the CLI using
SSH. Enabled by default.
This setting does not control SSH access to individual device ports. (See Device Ports
- Settings (on page 105) for information on enabling SSH access to individual ports.)
Most system administrators enable SSH logins, which is the preferred method of
accessing the system.

Web SSH

Enables or disables the ability to access the SLC command Iine interface or device
ports (connect direct) through the Web SSH window. Disabled by default.

Timeout

If you enable SSH logins, you can cause an idle connection to disconnect after a
specified number of minutes. Select Yes and enter a value of from 1 to 30 minutes.

SLC™ 8000 Advanced Console Manager User Guide

7: Services

SSH Port

Allows you to change the SSH login port to a different value in the range of 1 - 65535.
The default is 22.

SSH V1 Logins

Enables or disables SSH version 1 connections to the SLC 8000 advanced console
manager. Enabled by default.

Telnet
Enable Logins

Enables or disables Telnet logins to the SLC unit to allow users to access the CLI
using Telnet. Disabled by default.
This setting does not control Telnet access to individual device ports. (See Device
Ports > Settings (on page 106) for information on enabling Telnet access to individual
ports.) You may want to keep this option disabled for security reasons.

Web Telnet

Enables or disables the ability to access the SLC command Iine interface or device
ports (connect direct) through the Web Telnet window. Disabled by default.

Timeout

If you enable Telnet logins, you can cause an idle connection to disconnect after a
specified number of minutes. Select Yes and enter a value of from 1 to 30 minutes.

Outgoing Telnet

Enables or disables the ability to create Telnet out connections.

Web SSH/Web Telnet Settings
Java Terminal
Deployment

Method used to launch Java applications, either Java Web Start or Applet.

Java Terminal
Buffer Size

Number of lines in the Java terminal window that are available for scrolling back
through output.

Phone Home
Enable

If enabled, allows SLC 8000 advanced console manager to directly contact a vSLM™
management appliance and request addition to the database

IP Address

IP address of the SLM device.

Last Attempt

Displays the date and time of last connection attempt.

(view only)
Results

Indicates whether the attempt was successful.

(view only)

3. To save, click the Apply button.

SNMP
Simple Network Management Protocol (SNMP) is a set of protocols for managing complex
networks. The SLC unit supports both MIB-II (as defined by RFC 1213) and a private enterprise
MIB. The private enterprise MIB provides read-only access to all statistics and configurable items
provided by the SLC unit. It provides read-write access to a select set of functions for controlling
the SLC unit and device ports. See the MIB definition file for details. The SLC MIB definition file
and the top level MIB file for all Lantronix products is accessible from the SNMP web page.
1. Click the Services tab and select the SNMP option. The following page displays:

SLC™ 8000 Advanced Console Manager User Guide

7: Services

Figure 7-2 Services > SNMP

2. Enter the following:
Enable Agent

Enables or disables SNMP agent, which allows read-only access to the system.
Disabled by default.

Top Level MIB

Click the link to access the top level MIB file for all Lantronix products.

SLC MIB

Click the link to access the SLC MIB definition file for SLC 8000 advanced console
managers and advanced console managers.

SLC™ 8000 Advanced Console Manager User Guide

7: Services

Enable Traps

Traps are notifications of certain critical events. Disabled by default. This feature is
applicable when SNMP is enabled. Examples of traps that the SLC 8000 advanced
console manager sends include:









Ethernet Port Link Up
Ethernet Port Link Down
Authentication Failure
SLC Booted
SLC Shutdown
Device Port Logging
Power Supply Status
Sysadmin user password changed

The SLC unit sends the traps to the host identified in the NMS field.
NMS #1 (or #2)

When SNMP is enabled, an NMS (Network Management System) acts as a central
server, requesting and receiving SNMP-type information from any computer using
SNMP. The NMS can request information from the SLC 8000 advanced console
manager and receive traps from the SLC unit. Enter the IP address of the NMS server.
Required if you selected Enable Traps.

Location

Physical location of the SLC 8000 advanced console manager (optional). Useful for
managing the SLC unit using SNMP. Up to 20 characters.

Contact

Description of the person responsible for maintaining the SLC 8000 advanced console
manager, for example, a name (optional). Up to 20 characters.

Communities
Read-Only

A string that SNMP agent provides. The default is public.

Read-Write

A string that acts like a password for an SNMP manager to access the read-only data
from the SLC unit SNMP, like a password for an SNMP manager to access the readonly data the SLC SNMP agent provides, and to modify data where permitted. The
default is private.

Trap

The trap used for outgoing generic and enterprise traps. Traps sent with the Event
trigger mechanism still use the trap community specified with the Event action. The
default is public.

Enable v1/v2

If checked, SNMP version 1 and version 2 (which use the Read-Only and Read-Write
Communities) is enabled. Uncheck to only allow the more secure version 3 to be used
to access the SLC 8000 advanced console manager via SNMP. The default is
enabled.

Alarm Delay

Number of seconds delay between outgoing SNMP traps.

Version 3
Security

Levels of security available with SNMP v. 3.




Auth with

For Auth/No Encryp or Auth/Encrypt, the authentication method:



Encrypt with

No Auth/No Encrypt: No authentication or encryption.
Auth/No Encrypt: Authentication but no encryption. (default)
Auth/Encrypt: Authentication and encryption.
MD5: Message-Digest algorithm 5 (default)
SHA: Secure Hash Algorithm

Encryption standard to use:



DES: Data Encryption Standard (default)
AES: Advanced Encryption Standard

SLC™ 8000 Advanced Console Manager User Guide

7: Services

V3 Read-Only User
User Name

SNMP v3 is secure and requires user-based authorization to access SLC MIB objects.
Enter a user ID. The default is snmpuser. Up to 20 characters.

Password/Retype Password for a user with read-only authority to use to access SNMP v3. The default is
Password
SNMPPASS. Up to 20 characters.
Passphrase/
Retype
Passphrase

Passphrase associated with the password for a user with read-only authority. Up to 20
characters.

V3 Read-Write User
User Name

SNMP v3 is secure and requires user-based authorization to access SLC MIB objects.
Enter a user ID for users with read-write authority. The default is snmprwuser. Up to
20 characters.

Password/
Password for the user with read-write authority to use to access SNMP v3. The default
Retype Password is SNMPRWPASS. Up to 20 characters.
Passphrase/
Retype
Passphrase

Passphrase associated with the password for a user with read-write authority. Up to 20
characters.

3. To save, click the Apply button.

SNMP, SSH, Telnet, and Logging Commands
The following CLI commands correspond to the web page entries described above.
To configure services (system logging, SSH and Telnet access, SSH and Telnet timeout,
SNMP agent, email (SMTP) server, and audit log):
set services
Parameters
alarmdelay <1-6000 Seconds>
auditlog
auditsize
Range is 1-500 Kbytes.
authlog
clicommands
contact
devlog
diaglog
genlog
includesyslog
location
netlog
nms1
nms2
phonehome
phoneip
portssh
rocommunity
rwcommunity

SLC™ 8000 Advanced Console Manager User Guide

7: Services

servlog
smtpserver
snmp
ssh
syslogserver1
syslogserver2
telnet
timeoutssh
timeouttelnet
traps
trapcommunity
v1ssh
v1v2
v3user
v3rwuser
v3security
v3auth
v3encrypt
v3password
v3user
webssh
webtelnet
To set SNMP v3 read-only password or passphrase, or read-write password or passphrase:
set services v3password|v3phrase|v3rwpassword|v3rwphrase
To view current services:
show services

NFS and SMB/CIFS
Use the Services > NFS & SMB/CIFS page if you want to save configuration and logging data onto
a remote NFS server, or export configurations by means of an exported CIFS share.
Mounting an NFS shared directory on a remote network server onto a local SLC directory enables
the SLC advanced console manager to store device port logging data on that network server. This
configuration avoids possible limitations in the amount of disk space on the SLC unit available for
the logging file(s). You may also save SLC configurations on the network server.
Similarly, use SMB/CIFS (Server Message Block/Common Internet File System), Microsoft's filesharing protocol, to export a directory on the SLC 8000 advanced console manager as an SMB/
CIFS share. The SLC unit exports a single read-write CIFS share called "public," with the
subdirectory the config directory, which contains saved configurations and is read-write.
The share allows users to access the contents of the directory or map the directory onto a
Windows computer.
To configure NFS and SMB/CIFS:
1. Click the Services tab and select the NFS/CIFS option. The following page displays:

SLC™ 8000 Advanced Console Manager User Guide

7: Services

Figure 7-3 Services > NFS & SMB/CIFS

2. Enter the following for up to three directories:
NFS Mounts
Remote Directory

The remote NFS share directory in the format:

nfs_server_hostname or ipaddr:/exported/path
Local Directory

The local directory on the SLC 8000 advanced console manager on which to mount
the remote directory. The SLC unit creates the local directory automatically.

Read-Write

If enabled, indicates that the SLC 8000 advanced console manager can write files to
the remote directory. If you plan to log port data or save configurations to this
directory, you must enable this option.

Mount

Select the checkbox to enable the SLC unit to mount the file to the NFS server.
Disabled by default.

3. Enter the following:

SMB/CIFS Share
Share SMB/CIFS
directory

Select the checkbox to enable the SLC 8000 advanced console manager to export an
SMB/CIFS share called “public.” Disabled by default.

Network
Interfaces

Select the network ports from which the share can be seen. The default is for the share
to be visible on both network ports.

SLC™ 8000 Advanced Console Manager User Guide

7: Services

CIFS User
Only one user special username (cifsuser) can access the CIFS share. Enter the CIFS
Password/Retype user password in both password fields. The default user password is CIFSPASS.
Password
More than one user can access the share with the cifsuser user name and password
at the same time.
Workgroup

The Windows workgroup to which the SLC unit belongs. Every PC exporting a CIFS
share must belong to a workgroup. Can have up to 15 characters.

4. To save, click the Apply button.
5. Click the Firmware & Configurations link to access the
Firmware & Configurations (on page 227) to save SLC configuration, as desired.

NFS and SMB/CIFS Commands
The following CLI commands correspond to the web page entries described above.
To mount a remote NFS share:
set nfs mount
Parameters
locdir
mount
remdir
rw
Enables read/write access to remote directory.
Note: The remdir and locdir parameters are required, but if you specified them
previously, you do not need to provide them again.
To unmount a remote NFS share:
set nfs unmount <1|2|3>
To view NFS share settings:
show nfs
To configure the SMB/CIFS share, which contains the system and device port logs:
set cifs
Parameters
eth1
eth2
state
workgroup
Note:

The admin config command saves SLC configurations on the SMB/CIFS share.

To change the password for the SMB/CIFS share login (default is cifsuser):
set cifs password

SLC™ 8000 Advanced Console Manager User Guide

7: Services
To view SMB/CIFS settings:
show cifs

Secure Lantronix Network
Use the Secure Lantronix Network option to view and manage vSLM management appliances,
SLC 8000 advanced console managers, and Lantronix Spider® devices on the local subnet.
Note: Status and statistics shown on the web interface represent a snapshot in time. To
see the most recent data, reload the web page.
To access vSLM management appliances and Lantronix Spider devices on the local
network:
1. Click the Services tab and select the Secure Lantronix Network option. The following page
displays.

SLC™ 8000 Advanced Console Manager User Guide

7: Services

Figure 7-4 Services > Secure Lantronix Network

SLC™ 8000 Advanced Console Manager User Guide

7: Services
2. Access your device or device port through any of the methods below.
To directly access the web interface for a secure Lantronix device:
1. Make sure Web Telnet and Web SSH is enabled for the specific device or device port.
2. Click the IP address of a specific secure Lantronix device to open a new browser page with
the web interface for the selected secure Lantronix device.
3. Log in as usual.
Figure 7-5 IP Address Login Page

To directly access the CLI interface for a device:
1. Click the SSH or Telnet link in the SSH/Telnet to CLI column directly beside the port you
would like to access. A ssh or telnet popup window appears depending on what is clicked.
Figure 7-6 SSH and Telnet Opening File Popups

2. Click OK and login to the CLI interface which appears.

SLC™ 8000 Advanced Console Manager User Guide

7: Services

Figure 7-7 SSH or Telnet CLI Session

To directly access a specific port on a particular device:
1. Click a port number in a green square beside the specific device.

Enabled port numbers are in a bright green box and will allow you to select either a
WebSSH or a WebTelnet session. If enabled, an ssh or telnet popup window appears
depending on what is clicked. See Figure 7-6.

d. Disabled port numbers are in a dark green box and you will see a popup:
Figure 7-8 Disabled Port Number Popup Window

2. Click OK and login to the CLI interface which appears. See Figure 7-7.
To configure how secure Lantronix devices are searched for on the network:
1. Click the Search Options link on the top right of the Services > Secure Lantronix Network
page. The following web page displays:

SLC™ 8000 Advanced Console Manager User Guide

7: Services

Figure 7-9 Services > Secure Lantronix Network > Search Options

Enter the following:

Secure Lantronix
Network Search

Select the type of search you want to conduct.




IP Address

Local Subnet performs a broadcast to detect secure Lantronix devices on the
local subnet.
Manually Entered IP Address List provides a list of IP addresses that may not
respond to a broadcast because of how the network is configured.
Both is the default selection.

If you selected Manually Entered IP Address List or Both, enter the IP address of
the secure Lantronix device you want to find and manage.

3. If you entered an IP address, click the Add IP Address button. The IP address displays in the
IP Address List.
4. Repeat steps 2 and 3 for each IP address you want to add.
5. To delete an IP address from the IP Address List, select the address and click the Delete IP
Address button.
6. Click the Apply button. When the confirmation message displays, click Secure Lantronix
Network on the main menu. The Services > Secure Lantronix Network page displays the
secure Lantronix devices resulting from the search. You can now manage these devices.

Secure Lantronix Network Commands
The following commands for the command line interface correspond to the web page entries
described above.
To detect and view all SLC advanced console managers or user-defined IP addresses on
the local network:
set s
Parameters
add
delete

SLC™ 8000 Advanced Console Manager User Guide

7: Services

search
To detect and display all vSLM management appliance and Lantronix Spider devices on the
local network:
show slcnetwork [ipaddrlist ]
Note: Without the ipaddrlist parameter, the command searches the network according to
the search setting. With the ipaddrlist parameter, the command displays a sorted list of all
IP addresses or displays the IP addresses that match the mask (for example,
172.19.255.255 would display all IP addresses that start with 172.19).

Date and Time
Use the Date and Time Settings page to specify the local date, time, and time zone at the SLC
location, or enable the SLC unit to use NTP to synchronize with other NTP devices on your
network. Note that changing the date/time and/or timezone, or enabling NTP may affect the user's
ability to login to the web; if this happens, use the CLI admin web restart command to restart
the web server.
The CLI show ntp command will display the current NTP status if NTP is enabled. The column
headings are as follows: the host names or addresses shown in the remote column correspond to
configured NTP server names; however, the DNS names might not agree if the names listed are
not the canonical DNS names. The refid column shows the current source of synchronization,
while the st column reveals the stratum, t the type (u = unicast, m = multicast, l =
local, - = don't know), and poll the poll interval in seconds. The when column shows the
time since the peer was last heard in seconds, while the reach column shows the status of the
reachability register (see RFC-1305) in octal. The remaining entries show the latest delay, offset
and jitter in milliseconds. The symbol at the left margin displays the synchronization status of each
peer. The currently selected peer is marked *, while additional peers designated acceptable for
synchronization, but not currently selected, are marked +. Peers marked * and + are included in
the weighted average computation to set the local clock; the data produced by peers marked with
other symbols are discarded.
To set the local date, time, and time zone:
1. Click the Services tab and select the Date & Time option. The following page displays:

SLC™ 8000 Advanced Console Manager User Guide

7: Services

Figure 7-10 Services > Date & Time

2. Enter the following:
Change Date/Time

Select the checkbox to manually enter the date and time at the SLC location.

Date

From the drop-down lists, select the current month, day, and year.

Time

From the drop-down lists, select the current hour and minute.

Time Zone

From the drop-down list, select the appropriate time zone. For information on each
timezone, see http://en.wikipedia.org/wiki/List_of_tz_database_time_zones

3. To save, click the Apply button.
To synchronize the SLC 8000 advanced console manager with a remote timeserver using
NTP:
1. Enter the following:
Enable NTP

Select the checkbox to enable NTP synchronization. NTP is disabled by default.

SLC™ 8000 Advanced Console Manager User Guide

7: Services

Synchronize via

Select one of the following:




Broadcast from NTP Server: Enables the SLC unit to accept time
information periodically transmitted by the NTP server. This is the default if
you enable NTP.
Poll NTP Server: Enables the SLC 8000 advanced console manager to query
the NTP Server for the correct time. If you select this option, complete one of
the following:
 Local: Select this option if the NTP servers are on a local network, and
enter the IP address of up to three NTP servers. This is the default, and it is
highly recommended.
 Public: Select this option if you want to use a public NTP server, and select
the address of the NTP server from the drop-down list. This is not
recommended because of the high load on many public NTP servers. All
servers in the drop-down list are stratum-2 servers. (See www.ntp.org for
more information.) Each public NTP server has its own usage rules --please
refer to the appropriate web site before using one. Our listing them here is
to provide easy configuration but does not indicate any permission for use.

2. To save, click the Apply button.

Date and Time Commands
The following CLI commands correspond to the web page entries described above.
To set the local date, time, and local time zone (one parameter at a time):
set datetime
Parameters
date
timezone
Note: If you type an invalid time zone, the system guides you through the process of
selecting a time zone.
To view the local date, time, and time zone:
show datetime
To synchronize the SLC 8000 advanced console manager with a remote time server using
NTP:
set ntp
Parameters
localserver1
publicserver
sync

or Hostname>
or Hostname>
or Hostname>
or Hostname>

SLC™ 8000 Advanced Console Manager User Guide

7: Services
To view NTP settings:
show ntp

Web Server
The Web Server page allows the system administrator to:


Configure attributes of the web server.



View and terminate current web sessions.



Import a site-specific SSL certificate.



Enable an iGoogle gadget that displays the status of ports on multiple SLC units.

To configure the Web Server:
1. Click the Services tab and select the Web Server option. The following page appears:
Figure 7-11 Services > Web Server

SLC™ 8000 Advanced Console Manager User Guide

7: Services
2. Enter the following fields:
Timeout




Select No to disable Timeout.
Select Yes, minutes (5-120) to enable timeout.
Enter the number of minutes (must be between 30 and 120 minutes) after
which the SLC web session times out. The default is 5.

Note: If a session times out, refresh the browser page and login to a new web
session.
Enable iGoogle Gadget Select the check box to enable an SLC iGoogle gadget. The iGoogle gadget
Web Content
allows an iGoogle user to view the port status of many SLC units on one web
page. (See “iGoogle Gadgets” on page 98.)
Allow SSLv2 Protocol

Click the checkbox to support SSLv2 protocol. By default, the web supports the
SSLv3/TLSv1 protocol. Changing this option requires a reboot for the change to
take effect.

Cipher

By default, the web uses High/Medium security (128 bits or higher) for the cipher.
This option can be used to configure the web to also support Low security (less
than 128 bits) ciphers or FIPS approved ciphers (see Security.) Changing this
option requires a reboot for the change to take effect.

Group Access

Specify one or more groups to allow access to the web manager user interface.
If undefined, any group can access the web. If one or more groups are specified
(groups are delimited by the characters ',' (comma) or ';' (semicolon)), then any
user who logs into the web must be a member of one of the specified groups,
otherwise access will be denied. Users authenticated via RADIUS may have a
group (or groups) provided by the RADIUS server via the Filter-Id attribute that
overrides the group defined for a user on the SLC. A group provided by a remote
server must be either a single group or multiple groups delimited by the
characters ',' (comma), ';' (semicolon), or '=' (equals) - for example
"group=group1,group2;" or "group1,group2,group3".

Banner

Enter to replace default text displayed on the web manager home page after the
user logs in. May contain up to 1024 characters. Blank by default. To create
additional lines in the banner use the \n character sequence.

Web Sessions

Click this link to view or terminate a web session. (See “Services - Web
Sessions” on page 95.)

SSL Certificate

Click this link to view, import or reset the SSL Certificate. (See “Services - SSL
Certificate” on page 96.)

3. Click the Apply button to save.

Admin Web Commands
The following CLI commands correspond to the wegb page entries described above.
To configure the timeout for web sessions:
admin web timeout
To configure the web server to use SSLv2 in addition to SSLv3 and TLSv1:
admin web protocol
To configure the strength of the cipher used by the web server
(high is 256 or 128 bit, medium is 128 bit, low is 64, 56 or 40 bit):
admin web cipher

SLC™ 8000 Advanced Console Manager User Guide

7: Services
To enable or disable iGoogle Gadget web content:
admin web gadget
To configure the group that can access the web:
admin web group
To configures the banner displayed on the web home page:
admin web banner
To define a list of network interfaces the web is available on:
admin web iface
To terminate a web session:
admin web terminate
To view the current sessions and their ID:
admin web show
To import an SSL certificate or reset the web server certificate to the default:
admin web certificate import via certfile
privfile host
login [path ]
admin web certificate reset
admin web certificate show
admin web show [viewslmsessions ]

Services - Web Sessions
The Services > Web Server page enables you to view and terminate current web sessions.
To view or terminate current web sessions:
1. On the Services tab, click the Web Server page and click the Web Sessions link to the right.
The following page displays:

SLC™ 8000 Advanced Console Manager User Guide

7: Services

Figure 7-12 Web Sessions

2. To terminate, click the check box in the row of the session you want to terminate and click the
Terminate button.
3. To return to the Services > Web Server page, click the Back to Web Server link.

Services - SSL Certificate
The Services > Web Server page enables you to view and update SSL certificate information. The
SSL certificate, consisting of a public/private key pair used to encrypt HTTP data, is associated
with the web server. You can import a site-specific SSL certificate, if desired.
To view, reset, import, or change an SSL Certificate:
1. On the Services tab, click the Web Server page and click the SSL Certificate link. The
following page displays the current SSL certificate.

SLC™ 8000 Advanced Console Manager User Guide

7: Services

Figure 7-13 SSL Certificate

2. If desired, enter the following:
Reset to Default
Certificate

To reset to the default certificate, select the checkbox to reset to the default
certificate. Unselected by default.

Import SSL Certificate To import your own SSL Certificate, select the checkbox. Unselected by default.
Import via

From the drop-down list, select the method of importing the certificate (SCP,
SFTP, or HTTPS). The default is SCP.

Certificate Filename

Filename of the certificate.

Key Filename

Filename of the private key for the certificate.

Passphrase /
Retype Passphrase

Enter the passphrase associated with the SSL certificate if the private key is
encrypted.

Host

Host name or IPaddress of the host from which to import the file.

Path

Path of the directory where the certificate will be stored.

User ID to use to SCP or SFTP the file.

SLC™ 8000 Advanced Console Manager User Guide

7: Services

Password /
Retype Password

Password to use to SCP or SFTP the file.

3. Click the Apply button.
Note: You must reboot the SLC advanced console manager for the update to take
effect.
4. To return to the Services > Web Server page, click the Back to Web Server link.

Web Server Commands
The following CLI commands correspond to the Web Server page. For more information, see
Chapter 14: Command Reference on page 260.


admin web certificate



admin web certificate reset



admin web cipher



admin web gadget



admin web protocol



admin web timeout



admin web terminate



admin web show

iGoogle Gadgets
You can create iGoogle gadgets that enables you to view the status of the ports of multiple SLC
8000 advanced console managers on one web page.
Anyone with a Google email account (gmail.com) can create an iGoogle gadget for viewing web
pages. There are two types of iGoogle gadgets: public gadgets and private gadgets. The public
gadgets are listed for import on iGoogle web pages. The SLC gadget is a private gadget, whose
location is not publicly advertised.
To set up an SLC iGoogle gadget:
1. Load the following XML code on a web server that is accessible over the Internet. This code
describes how to retrieve information and how to format the data for display.
-

SLC™ 8000 Advanced Console Manager User Guide

7: Services

/UserPref>

2. On the iGoogle web page, click the Add stuff link.
3. On the new page, click the Add feed or gadget link.
4. In the field that displays, type the URL of the gadget location.
5. Return to the gadget viewing page and complete the SLC gadget configuration fields.
You should see an iGoogle gadget similar to the following:
Figure 7-14 iGoogle Gadget Example

SLC™ 8000 Advanced Console Manager User Guide

Device Ports
This chapter describes how to configure and use an SLC advanced console manager port
connected to an external device, such as a server or a modem. The next chapter,
Chapter 10: Connections describes how to use the Devices > Connections web page to connect
external devices and outbound network connections (such as Telnet or SSH) in various
configurations. The Devices > Console Port page allows you to configure the console port, if
desired.

Connection Methods
A user can connect to a device port in one of the following ways:
1. Telnet or SSH to the Eth1 or Eth2 IP address, or connect to the console port, and log in to the
command line interface. At the command line interface, issue the connect direct or connect
listen commands.
2. If Telnet is enabled for a device port, Telnet to :< telnet port
number> or :, where telnet port number is
uniquely assigned for each device port.
3. If SSH is enabled for a device port, SSH to : or
:, where ssh port number is uniquely assigned for
each device port.
4. If TCP is enabled for a device port, establish a raw TCP connection to : or :, where
tcp port number is uniquely assigned for each device port.
5. If a device port has an IP address assigned to it, you can Telnet, SSH, or establish a raw TCP
connection to the IP address. For Telnet and SSH, use the default TCP port number (23 and
22, respectively) to connect to the device port. For raw TCP, use the TCP port number defined
for TCP In to the device port according to the Device Ports - Settings (on page 105) section.
6. Connect a terminal or a terminal emulation program directly to the device port. If logins are
enabled, the user is prompted for a username/password and logs in to the command line interface.
For #2, #3, #4, #5, and #6, if logins or authentication are not enabled, the user is directly
connected to the device port with no authentication.
For #1 and #6, if logins are enabled, the user is authenticated first, and then logged into the
command line interface. The user login determines permissions for accessing device ports.

Permissions
There are three types of permissions:
1. Direct (or data) mode: The user can interact with and monitor the device port (connect direct
command).
2. Listen mode: The user can only monitor the device port (connect listen command).
3. Clear mode: The user can clear the contents of the device port buffer (set locallog
clear buffer command).

SLC™ 8000 Advanced Console Manager User Guide

100

8: Device Ports
The administrator and users with local user rights may assign individual port permissions to local
users. The administrator and users with remote authentication rights assign port access to users
authenticated by NIS, RADIUS, LDAP, Kerberos and TACACS+.

I/O Modules
The SLC module port configuration can be changed by adding or replacing I/O modules in the I/O
module slots. Any changes to the I/O modules must be done while the SLC unit is powered off.
The following I/O module configurations are supported (Bay 1 is the leftmost bay when viewing the
back of the SLC 8000 advanced console manager where the device ports are located):
Table 8-1 Supported I/O Module Configurations
Model

Bay 1

Bay 2

Bay 3

SLC 8008

8 port module

Empty

SLC 8016

16 port module

Empty

SLC 8024

8 port module

16 port module

Empty

SLC 8032

16 port module

Empty

SLC 8040

8 port module

16 port module

SLC 8048

16 port module

Note: A 16 port module is shown as "RJ45-16" in the About page in the Web interface
and the output of the admin version command in the CLI, and a 8 port module is shown
as "RJ45-08". For example, I/O Module Type(s): RJ45-08, RJ45-16, and RJ45-16
indicate that the SLC unit has an 8 port I/O module in Bay 1, and 16 port modules in Bay 2
and 3. Please note that only the following configurations are available from Lantronix:
SLC 8008, SLC 8016, SLC 8032 and SLC 8048 modules. The SLC 8024 and SLC 8040
console managers can only be created by adding RJ45-16 modules to an existing SLC
8008 unit.
The number of device ports in a SLC 8000 advanced console manager can be expanded by
adding 16 port I/O modules in slots 2 and 3, or by swapping an 8 port I/O module in Bay 1 for a 16
port module. The configurations listed above are the only valid configurations; if any other
configuration is detected at boot, the SLC unit will still boot, disable use of the device ports, and
provide indications in the boot messages, in the CLI and in the web that the I/O configuration is
invalid. When an invalid configuration is corrected by reconfiguring the I/O modules into a valid
configuration, after the SLC module is powered up and booted, the valid configuration will be
detected and the SLC module ports can be used again.
For the SLC 8024 and SLC 8040 modules, with an 8 port I/O module in Bay 1, the device ports will
be numbered 1-8 and 17-32 (for the SLC 8024 model) and 1-8 and 17-48 (for the SLC 8040
model). See Figure 8-2 Devices > Device Status on page 102.
Restoring a configuration to the SLC 8000 advanced console manager will automatically adjust the
number of device ports to reflect the number of ports in the SLC unit the configuration is being
restored to. For example, a configuration that is saved on an SLC 8048 unit and restored to an
SLC 8016 unit will have the last 32 ports removed from the configuration. Conversely, a
configuration that is saved on a SLC 8016 unit and restored to a SLC 8048 unit will have 32 device
ports (with factory default settings) added to the configuration.

SLC™ 8000 Advanced Console Manager User Guide

101

8: Device Ports

Device Status
The Devices > Device Status page displays the status of the SLC ports, USB ports and SD card
ports.
1.

Click the Devices tab and select the Device Status option. The following page displays:
Figure 8-2 Devices > Device Status

SLC™ 8000 Advanced Console Manager User Guide

102

8: Device Ports

Device Ports
On the Devices > Device Ports page, you can set up the numbering of Telnet, SSH, and TCP
ports, view a summary of current port modes, establish the maximum number of direct
connections for each device port, and select individual ports to configure.
1. Click the Devices tab and select the Device Ports option. The following page displays:
Figure 8-3 Devices > Device Ports

Current port numbering schemes for Telnet, SSH, and TCP ports display on the left. The list of
ports 1-16 on the right includes the individual ports and their current mode.
Note:
ports.

For units with more ports, click the buttons above the table to view additional

Icons that represent some of the possible modes include:
Idle

The port is not in use.
The port is in data/text mode.
Note: You may set up ports to allow Telnet access using the IP Setting per Device Ports Settings (on page 105).
An external modem is connected to the port. The user may dial into or out of the port.
Telnet in or SSH in is enabled for the device port. The device port is either waiting for a Telnet
or SSH login or has received a Telnet or SSH login (a user has logged in).

SLC™ 8000 Advanced Console Manager User Guide

103

8: Device Ports
To set up Telnet, SSH, and TCP port numbering:
1. Enter the following:

Telnet/SSH/TCP in Port Numbers
Starting Telnet Port Each port is assigned a number for connecting via Telnet. Enter a number (102565528) that represents the first port. The default is 2000 plus the port number. For
example, if you enter 2001, subsequent ports are automatically assigned numbers
2002, 2003, and so on.
Starting SSH Port

Each port is assigned a number for connecting via SSH. Enter a number (102565528) that represents the first port. The default is 3000 plus the port number. For
example, if you enter 3001, subsequent ports are automatically assigned numbers
3002, 3003, and so on.

Starting TCP Port

Each port is assigned a number for connecting through a raw TCP connection. Enter
a number (1025-65528) that represents the first port. The default is 4000 plus the
port number. For example, if you enter 4001, subsequent ports are automatically
numbered 4002, 4003, and so on.
You can use a raw TCP connection in situations where a TCP/IP connection is to
communicate with a serial device. For example, you can connect a serial printer to a
device port and use a raw TCP connection to spool print jobs to the printer over the
network.
Note: When using raw TCP connections to transmit binary data, or where the break
command (escape sequence) is not required, set the Break Sequence of the
respective device port to null (clear it).

Caution:

Ports 1-1024 are RFC-assigned and may conflict with services running
on the SLC 8000 advanced console manager. Avoid this range.

2. Click the Apply button to save the settings.
To set limits on direct connections:
1. Enter the maximum number (1-10) of simultaneous direct connections for each device port.
The default is 1.
2. Click the Apply button to save the settings.
To configure a specific port:
1. You have two options:
-

Select the port from the ports list and click the Configure button. The Device Ports >
Settings page for the port displays.

Click the port number on the green bar at the top of each page.

2. Continue with directions in the section, Device Ports - Settings (on page 105).

Global Commands
The following CLI commands correspond to the web page entries described above.
To configure settings for all or a group of device ports:
set deviceport global

SLC™ 8000 Advanced Console Manager User Guide

104

8: Device Ports
Parameters
sshport
tcpport
telnetport
Port is a port number between 1025 and 65528.
To view global settings for device ports:
show deviceport global

Device Ports - Settings
On the Device Ports > Settings page, configure IP and data (serial) settings for individual ports,
and if the port connects to an external modem, modem settings as well.
To open the Device Ports - Settings page:
1. You have two options:
-

In the Port Number Bar page (described in the previous section), select the port from the
ports list and click the Configure button.

Click the desired port number in the green bar (shown below) at the top of any page:
Figure 8-4 Port Number Bar

SLC™ 8000 Advanced Console Manager User Guide

105

8: Device Ports

The following page displays:
Figure 8-5 Device Ports > Settings

SLC™ 8000 Advanced Console Manager User Guide

106

8: Device Ports
2. Enter the following:

Device Port Settings
Port

Displays number of port; displays automatically.

Mode

The status of the port; displays automatically.

Name

The name of the port. Valid characters are letters, numbers, dashes (-), periods,
and underscores ( _ ).

Group Access

If undefined, any group can access the device port. If one or more groups are
specified (groups are delimited by the characters ' ' (space), ',' (comma), or ';'
(semicolon)), then any user who logs into the device port must be a member of one
of the specified groups, otherwise access will be denied. Users authenticated via
RADIUS may have a group (or groups) provided by the RADIUS server via the
Filter-Id attribute that overrides the group defined for a user on the SLC unit. A
group provided by a remote server must be either a single group or multiple groups
delimited by the characters ' ' (space), ',' (comma), ';' (semicolon), or '=' (equals) for example "group=group1,group2;" or "group1,group2,group3".

Banner

Text to display when a user connects to a device port by means of Telnet, SSH, or
TCP. If authentication is enabled for the device port, the banner displays once the
user successfully logs in. Blank is the default.

Break Sequence

A series of one to ten characters users can enter on the command line interface to
send a break signal to the external device. A suggested value is Esc+B (escape
key, then uppercase “B” performed quickly but not simultaneously). You would
specify this value as \x1bB, which is hexadecimal (\x) character 27 (1B) followed
by a B.

View Port Log Seq

The key sequence used to view the Port Log while in Connect Direct mode. Nonprinting characters can be specified by giving their hexidecimal code (see Break
Sequence above). The default is Esc+V (\x1bV).

View Port Log

Select to allow the user to enter the View Port Log Sequence to view the Port Log
during Connect Direct mode. The default is disabled.

Zero Port Counters

Resets all of the numerical values in the Port Counters table at the bottom of the
page to zero (0).

Logging

Click the Settings link to configure file logging, email logging, and local logging.

Connected to

The type of device connected to the device port. Presently, the SLC 8000
advanced console manager supports Lantronix SLP Power Manager (SLP8
SLP16) ServerTech CDUs and Sensorsoft devices. If the type of device is not
listed, select undefined.
If you select anything other than undefined, click Device Commands. The
appropriate web page displays.

IP Settings
Telnet In

Enables access to this port through Telnet. Disabled by default.

SSH In

Enables access to this port through SSH. Disabled by default.

TCP in

Enables access to this port through a raw TCP connection. Disabled by default:
Note: When using raw TCP connections to transmit binary data, or where the
break command (escape sequence) is not required, set the Break Sequence of
the respective device port to null (clear it).

Port

Automatically assigned Telnet, SSH, and TCP port numbers. You may override
this value, if desired.

SLC™ 8000 Advanced Console Manager User Guide

107

8: Device Ports

Authentication

If selected, the SLC unit requires user authentication before granting access to
the port. Authenticate is selected by default for Telnet in and SSH in, but not for
TCP in.

Timeout

To cause an idle Telnet, SSH or TCP connection to disconnect after a specified
number of seconds, select the checkbox and enter a value from 1 to 1800
seconds. The default is no timeout.

Seconds

Number of seconds before a timeout.

IP Address/Netmask
Bits

IP address used for this device port so a user can Telnet, SSH, or establish a raw
TCP connection to this address and connect directly to the device port. The
optional netmask bits specify the netmask to use for the IP address. For
example, for a netmask of 255.255.255.0 specify 24 bits. If the netmask bits are
not specified, a default netmask used for the class of network that the IP address
falls in will be used.
For Telnet and SSH, the default TCP port numbers (22 and 23, respectively) are
used to connect to the device port. For raw TCP, the TCP port number defined
for TCP In to the device port is used.

Web SSH/Telnet
Columns

Number of columns in the Web SSH/Telnet applet when this device port is
accessed via the applet.

Rows

Number of rows in the Web SSH/Telnet applet when this device port is accessed
via the applet.

Data Settings
Note: Check the serial device’s equipment settings and documentation for the proper
settings. The device port and the attached serial device must have the same settings.
Baud

The speed with which the device port exchanges data with the attached serial
device.
From the drop-down list, select the baud rate. Most devices use 9600 for the
administration port, so the device port defaults to this value. Check the equipment
settings and documentation for the proper baud rate.

Data Bits

Number of data bits used to transmit a character. From the drop-down list, select
the number of data bits. The default is 8 data bits.

Stop Bits

The number of stop bit(s) used to indicate that a byte of data has been transmitted.
From the drop-down list, select the number of stop bits. The default is 1.

Parity

Parity checking is a rudimentary method of detecting simple, single-bit errors.
From the drop-down list, select the parity. The default is none.

Flow Control

A method of preventing buffer overflow and loss of data. The available methods
include none, xon/xoff (software), and rts/cts (hardware). The default is none.

Enable Logins

For serial devices connected to the device port, displays a login prompt and
authenticates users. Successfully authenticated users are logged into the
command line interface.
The default is disabled. This is the correct setting if the device port is the endpoint
for a network connection.

Max Direct Connects

Enter the maximum number (1-10) of simultaneous connections for the device
port. The default is 1.

SLC™ 8000 Advanced Console Manager User Guide

108

8: Device Ports

Show Lines on
Connecting

If enabled, when the user either does a connect direct from the CLI or connects
directly to the port using Telnet or SSH, the SLC outputs up to 24 lines of buffered
data as soon as the serial port is connected.
For example, an SLC user issues a connect direct device 1 command
to connect port 1 to a Linux server.
Then the SLC user ls command to display a directory on the Linux server, then
exits the connection. When the SLC user issues another direct connect
device 1, the last 24 lines of the ls command is displayed so the user can see
what state the server was left in.

Reverse Pinout

If enabled, swaps the positions of the serial lines, such that the direction of data or
the signal is reversed. For instance, TX is swapped with RX. Enabling Reverse
Pinout facilitates connections to Cisco and Sun style RS-45 console ports using a
straight through Ethernet patch cable, without the need for a rolled cable or
adapter. Enabled by default.
Note: All Lantronix serial adapters are intended to be used with Reverse Pinout
disabled. If you are replacing an original SLC unit with an SLC 8000 advanced
console manager, disable the reverse pinout so you can use the original cables
and adapters.

Hardware Signal Triggers
Check DSR on
Connect

If this setting is enabled, the device port only establishes a connection if DSR
(Data Set Ready) is in an asserted state. DSR should already be in an asserted
state, not transitioning to, when a connection attempt is made. Disabled by default
unless dial-in, dial-out, or dial-back is enabled for the device port.

Disconnect on DSR

If a connection to a device port is currently in session, and the DSR signal
transitions to a de-asserted state, the connection disconnects immediately.
Disabled is the default unless dial-in, dial-out, or dial-back is enabled for the device
port.

Modem Settings (Device Ports)
Note:

Depending on the State and Mode you select, different fields are available.

State

Used if an external modem is attached to the device port. If enabling, set the
modem to dial-out, dial-in, dial-back, dial-on-demand, dial-in/host list, dial-back &
dial-on-demand, dial in & dial-on-demand, CBCP Server, and CBCP Client.
Disabled by default. See Modem Dialing States (on page 152) for more
information.

Mode

The format in which the data flows back and forth:




Use Sites

Text: In this mode, the SLC advanced console manager assumes that the
modem will be used for remotely logging into the command line. Text mode
can only be used for dialing in or dialing back. Text is the default.
PPP: This mode establishes an IP-based link over the modem. PPP
connections can be used in dial-out mode (e.g., the SLC unit connects to an
external network), dial-in mode (e.g., the external computer connects to the
network that the SLC 8000 advanced console manager is part of), or dial-ondemand.

Enables the use of site-oriented modem parameters which can be activated by
various modem-related events (authentication, outbound network traffic for dialon-demand connections, etc.). Sites can be used with the following modem
states: dial-in, dial-back, dial-on-demand, dial-in & dial-on-demand, dial-back &
dial-on-demand, and CBCP server.

SLC™ 8000 Advanced Console Manager User Guide

109

8: Device Ports

Initialization Script

Commands sent to configure the modem may have up to 100 characters. Consult
your modem’s documentation for recommended initialization options. If you do
not specify an initialization script, the SLC unit uses a default initialization string of
AT S7=45 SO=0 L1 V1 X4 &D2 &c1 E1 Q0.
Note: We recommend that the modem initialization script always be preceded
with AT and include E1 V1 x4 Q0 so that the SLC 8000 advanced console
manager may properly control the modem. For information on AT commands,
refer to the modem user guide, or do a web search for at command set.

Modem Timeout

Timeout for all modem connections. Select Yes (default) for the SLC unit to
terminate the connection if no traffic is received during the configured idle time.
Enter a value of from 1 to 9999 seconds. The default is 30 seconds.

Caller ID Logging

Select to enable the SLC advanced console manager to log caller IDs on
incoming calls. Disabled by default.
Note: For the Caller ID AT command, refer to the modem user guide.

Modem Command

Modem AT command used to initiate caller ID logging by the modem.

Dial-back Number

Users with dial-back access can dial into the SLC device and enter their login and
password. Once the SLC 8000 advanced console manager authenticates them,
the modem hangs up and dials them back.

Note: For the AT command, refer to the modem user guide.

Select the phone number the modem dials back on -a fixed number or a number
associated with their login. If you select Fixed Number, enter the number (in the
format 2123456789).
The dial-back number is also used for CBCP client as the number for a userdefined number. See Device Ports - Settings (on page 105) for more information.
Dial-back Delay

For dial-back and CBCP Server, the number of seconds between the dial-in and
dial-out portions of the dialing sequence.

Dial-back Retries

For dial-back and CBCP Server, the number of times the SLC unit will retry the
dial-out portion of the dialing sequence if the first attempt to dial-out fails.

Modem Settings: Text Mode
Timeout Logins

If you selected Text mode, you can enable logins to time out after the connection is
inactive for a specified number of minutes. The default is No. This setting is only
applicable for text mode connections. PPP mode connections stay connected until
either side drops the connection. Disabled by default.

Dial-in Host List

From the drop-down list, select the desired host list. The host list is a prioritized list
of SSH, Telnet, and TCP hosts that are available for establishing outgoing modem
connections or for connect direct at the CLI. The hosts in the list are cycled
through until the SLC 8000 advanced console manager successfully connects to
one.
To establish and configure host lists, click the Host Lists link.

Modem Settings: PPP Mode
Negotiate IP Address

If the SLC unit and/or the serial device have dynamic IP addresses (e.g., IP
addresses assigned by a DHCP server), select Yes. Yes is the default.
If the SLC advanced console manager or the modem have fixed IP addresses,
select No, and enter the Local IP (IP address of the port) and Remote IP (IP
address of the modem).

SLC™ 8000 Advanced Console Manager User Guide

110

8: Device Ports

Authentication

Enables PAP or CHAP authentication for modem logins. PAP is the default.
With PAP, users are authenticated by means of the Local Users and any of the
remote authentication methods that are enabled. With CHAP, the CHAP
Handshake fields authenticate the user.

CHAP Handshake

The Host/User Name (for UNIX systems) or Secret/User Password (for
Windows systems) used for CHAP authentication. May have up to 128
characters.

CHAP Auth Uses

For CHAP authentication, determines what is used to validate the CHAP host/
user sent by the remote peer: either the CHAP Host defined for the modem, or
any of the users in the Local Users list.

Same authentication for Select this option to let incoming connections (dial-in) use the same
Dial-in & Dial-on-Demand authentication settings as outgoing connections (dial-on-demand). If this option
(DOD)
is not selected, then the dial-on-demand connections take their authentication
settings from the DOD parameter settings. If DOD Authentication is PAP, then
the DOD CHAP Handshake field is not used.
DOD Authentication

Enables PAP or CHAP authentication for dial-in & dial-on-demand. PAP is the
default. With PAP, users are authenticated by means of the Local Users and
any of the remote authentication methods that are enabled. With CHAP, the
DOD CHAP Handshake fields authenticate the user.

DOD CHAP Handshake

For DOD Authentication, enter the Host/User Name for UNIX systems) or
Secret/User Password (for Windows systems) used for CHAP authentication.
May have up to 128 characters.

Enable NAT

Select to enable Network Address Translation (NAT) for dial-in and dial-out
PPP connections on a per modem (device port or USB port) basis. Users
dialing into the SLC 8000 advanced console manager access the network
connected to Eth1 and/or Eth2.
Note: IP forwarding must be enabled on the Network > Network Settings page
for NAT to work. See Chapter 6: Basic Parameters on page 57.

Dial-out Number

Phone number for dialing out to a remote system or serial device. May have up
to 20 characters. Any format is acceptable.

Remote/Dial-out Login

User ID for dialing out to a remote system. May have up to 32 characters.

Remote/Dial-out
Password

Password for dialing out to a remote system. May have up to 64 characters.

Retype

Re-enter remote/dial-out password for dialing out to a remote system. May
have up to 64 characters.

Restart Delay

The number of seconds after the timeout and before the SLC unit attempts
another connection. The default is 30 seconds.

CBCP Server Allow
No Callback

For CBCP Server state, allows "No Callback" as an option in the CBCP
handshake in addition to User-defined Number and Admin-defined Number.

CBCP Client Type

For CBCP Client, this selects the number that the client would like to use for
callback - either a user-defined number passed to the server (specified by the
Fixed Dial-back Number) or an administrator-defined number determined by
the server based on the login that is PAP or CHAP authenticated.

3. To save settings for just this port, click the Apply button.
4. To save selected settings to ports other than the one you are configuring:
-

From the Apply Settings drop-down box, select none, a group of settings, or All.

In to Device Ports, type the device port numbers, separated by commas; indicate a range
of port numbers with a hyphen (e.g., 2, 5, 7-10).

SLC™ 8000 Advanced Console Manager User Guide

111

8: Device Ports
Note:

It may take a few minutes for the system to apply the settings to multiple ports.

Port Status and Counters
Port Counters describe the status of signals and interfaces. SLC advanced console manager
updates and increments the port counters as signals change and data flows in and out of the
system. These counters help troubleshoot connections or diagnose problems because they give
the user an overview of the state of various parameters. By setting them to zero and then rechecking them later, the user can view changes in status.
The chart in the middle of the page displays the flow control lines and port statistics for the device
port. The system automatically updates these values. To reset them to zeros, select the Zero port
counters checkbox in the IP Settings section of the page.
Note: Status and statistics shown on the web interface represent a snapshot in time. To
see the most recent data, you must reload the web page.
Table 8-6 Port Status and Counters

Device Ports - SLP / ServerTech CDU Device
On the Device Ports > SLP / ServerTech CDU page, configure commands to send to a
ServerTech CDU, SLP power manager, or SLP expansion chassis that expands the number of
power ports.
To open the Device Ports - SLP page:
1. Connect to a specific port on the Devices > Device Ports page according to instructions in To
open the Device Ports - Settings page: (on page 105).
2. In the Connected to drop-down menu above the IP Settings section of the Device Ports >
Settings page, select one of the SLP, SLPEXP, or ServerTech CDU options.
3. Click the Device Commands link. The following page displays:

SLC™ 8000 Advanced Console Manager User Guide

112

8: Device Ports

Figure 8-7 Device Ports > SLP / ServerTech CDU

To enter SLP commands:
1. Enter the following:
Number of Outlets
Number of Expansion
Outlets
Login
Password
Retype Password
Prompt

Enter the number of outlets for a ServerTech CDU. This setting is not
applicable for an SLP unit.
Enter the number of outlets for a ServerTech CDU expansion unit. This setting
is not applicable for an SLP device.
User ID for logging into the SLP unit or ServerTech CDU device.
Enter password for logging into the SLP power manager or ServerTech CDU
device.
Re-enter password for logging into the SLP unit or ServerTech CDU device.
Enter the prompt displayed by the SLP unit or ServerTech CDU device. This
will default to a typical prompt for an SLP power manager or ServerTech CDU.
If you are unable to control the SLP unit or ServerTech CDU device, verify that
the prompt is set to the right value.

SLC™ 8000 Advanced Console Manager User Guide

113

8: Device Ports

Status/Info
Outlet Status

Note: If there is a master unit and an expansion unit, the master unit is Tower
A and the expansion unit is Tower B.
For Tower A or Tower B, select All Outlets or Single Outlet to view the status
of all outlets or a single outlet of the SLP device. If you select Single Outlet,
enter a value of 1-8 for the SLP8 or 1-16 for the SLP16 device. For the
ServerTech CDU, the valid range of outlets is specified by the Number of
Outlets setting (for Tower A) or the Number of Expansion Outlets setting (for
Tower B).

Environmental Status
Infeed Status
System Info

Click the Outlet Status link to see the status of the selected outlet(s).
Click the link to view the environmental status (e.g., temperature and humidity.)
Click the link to view the status of the data the SLP power manager or
ServerTech CDU is receiving.
Click the link to see system information pertaining to the SLP or ServerTech
CDU device.

Commands
Restart
Control Outlet

To restart the SLP power manager or ServerTech CDU device, select the
checkbox.
For Tower A or Tower B, select All Outlets or Single Outlet, the number of
the outlet to be controlled (1-8 for the SLP8 or 1-16 for the SLP16) and select
the command for the outlet (No Action, On, Off, Cycle Power). No Action is
the default.

2. Click the Apply button.

Device Port - Sensorsoft Device
Devices made by Sensorsoft are used to monitor environmental conditions.
1. In the Connected to drop-down menu above the IP Settings section of the
Device Ports > Settings page, select Sensorsoft.
2. Click the Device Commands link. The following page displays:
Figure 8-8 Devices > Device Ports > Sensorsoft

SLC™ 8000 Advanced Console Manager User Guide

114

8: Device Ports

3. Select a port and enter or view the following information:
Dev Port

Displays the number of the SLC port.

Device Port Name

Displays the name of the SLC port.

Temp

Current temperature (degrees Celsius) on the device the sensor is monitoring.

Low Temp

Enter the temperature (degrees Celsius) permitted on the monitored device below
which the SLC 8000 advanced console manager sends a trap.

High Temp

Enter the temperature (degrees Celsius) permitted on the monitored device above
which the SLC unit sends a trap.

Use °F

Display and set the temperature for this device in degrees Fahrenheit, instead of
Celsius, which is the default.

Humidity (%)

Current relative humidity on the device the sensor is monitoring.

Low Humidity

Enter the relative humidity permitted on the device the sensor is monitoring below
which the sensor sends a trap to the SLC advanced console manager.

High Humidity

Enter the highest relative acceptable humidity permitted on the device above which
the sensor sends a trap to the SLC unit.

Traps

Select to indicate the SLC 8000 advanced console manager should send a trap or
configured Event Alert when the sensor detects an out-of-range configured
threshold.

4. Click the Apply button.
5. To view the status detected by the Sensorsoft, click the Sensorsoft Status link to the right of
the table.

Device Port Commands
The following CLI commands correspond to the web page entries described above.
To configure a single port or a group of ports (for example, set deviceport port 2-5,6,12,1516 baud 2400):
set deviceport port
Parameters
auth
banner
baud <300-230400>
breakseq <1-10 Chars>
calleridcmd
calleridlogging
chaphost
chapsecret
The user defines the secret.
checkdsr
closedsr
databits <7|8>
device

dialbackeretries <1-10>

SLC™ 8000 Advanced Console Manager User Guide

115

8: Device Ports

dialbackdelay
dialinlist
dialoutnumber
dialoutlogin
dialbacknumber
dodauth
dodchaphost
dodchapsecret
flowcontrol
group
idletimeout
ipaddr
initscript
A script that initializes a modem.
localipaddr
logins
modemmode
modemstate
modemtimeout
name
nat
parity
remoteipaddr
restartdelay
reversepinout
showlines
sshauth
sshin
sshport
stopbits <1|2>
tcpauth
tcpin
tcpport
telnetauth
telnetin
telnetport
timeoutlogins
usesites
webcolumns
webrows
To set the dialout password:
set deviceport port dialoutpassword
To view the settings for one or more device ports:
show deviceport port

SLC™ 8000 Advanced Console Manager User Guide

116

8: Device Ports
To view a list of all device port names:
show deviceport names
To view the modes and states of one or more device port(s):
Note:

You can optionally email the displayed information.

show portstatus [deviceport ] [email ]
To view device port statistics and errors for one or more ports:
Note:

You can optionally email the displayed information.

show portcounters [deviceport ] [email ]
To zero the port counters for one or more device ports:
show portcounters zerocounters

Device Commands
The following CLI commands correspond to the web page entries described above.
To send commands to (or control) a device connected to an SLC unit port over the serial
port:
Note: Currently the only devices supported for this type of interaction are the SLP power
manager and Sensorsoft devices.
set command
Parameters
slp|servertech auth login
Establishes the authentication information to log into the SLP or ServerTech CDU attached to the
device port.
slp|servertech restart
Issues the CLI command the SLP or ServerTech CDU uses to restart itself.
slp|servertech outletcontrol state [outlet ][tower ]
Outlet # is 1-8 for SLP8 and 1-16 for SLP16. For the ServerTech CDU, the valid range of outlets is
specified by the number of outlets settings (for Tower A) or number of expansion outlets settings
(for Tower B) - see below.
The outletcontrol parameters control individual outlets.
slp|servertech outletstate [outlet ] [tower ]
The outletstate parameter shows the state of all outlets or a single outlet.
slp|servertech envmon

SLC™ 8000 Advanced Console Manager User Guide

117

8: Device Ports
Displays the environmental status (e.g., temperature and humidity) of the SLP or ServerTech
CDU.
slp|servertech infeedstatus
Displays the infeed status and load of the SLP or ServerTech CDU.
slp|servertech system
Displays the system configuration information, such as firmware, revision and uptime.
slp|servertech config [prompt ]
Enter the prompt displayed by the SLP or ServerTech CDU device. This will default to a typical
prompt for an SLP or ServerTech CDU. If you are unable to control the SLP or ServerTech CDU
device, verify that the prompt is set to the right value.
[numoutlets ]
[numexpoutlets ]
Enter the number of outlets for a ServerTech CDU main unit or the number of outlets for a Server
Tech CDU expansion unit. This setting is not applicable for an SLP.
sensorsoft lowtemp
Sets the lowest temperature permitted for the port.
sensorsoft hightemp
Sets the hightest temperature permitted for the port.
sensorsoft lowhumidity
Sets the lowest humidity pemitted for the port.
sensorsoft highhumidity
Sets the lowest humidity permitted for the port.
sensorsoft traps
Enables or disables temperature settings as celcius or Fahrenheit.
sensorsoft degrees
Enables or disables traps when specified conditions are met.
sensorsoft status
Displays the status of the port.

Interacting with a Device Port
Once a device port has been configured and connected to an external device such as the console
port of an external server, the data received over the device port can be monitored at the
command line interface with the connect listen command, as follows:
To connect to a device port to monitor it:
connect listen deviceport
In addition, you can send data out the device port (for example, commands issued to an external
server) with the connect direct command, as follows:

SLC™ 8000 Advanced Console Manager User Guide

118

8: Device Ports
To connect to a device port to monitor and/or interact with it, or to establish an outbound
network connection:
connect direct
endpoint is one of:
deviceport
ssh [port ][]
where:
is one or more of:
user
version <1|2>
command
tcp port
telnet [port ]
udp port
hostlist
Note: To escape from the connect direct command when the endpoint of the
command is deviceport, tcp, or udp and return to the command line interface, type the
escape sequence assigned to the currently logged in user. If the endpoint is telnet or
SSH, logging out returns the user to the command line prompt.
Note:

To escape from the connect listen command, press any key.

Setting up a user with an escape sequence is optional. For any NIS, LDAP, RADIUS,
Kerberos, or TACACS+ user, or any local user who does not have an escape sequence
defined, the default escape sequence is Esc+A.

Device Ports - Logging
The SLC products support port buffering of the data on the system's device ports as well as
notification of receiving data on a device port. Port logging is disabled by default. You can enable
more than one type of logging (local, NFS file, email/SNMP, SD card, or USB port) at a time. The
buffer containing device port data is cleared when any type of logging is enabled.

Local Logging
If local logging is enabled, each device port stores 256 Kbytes (approximately 400 screens) of I/O
data in a true FIFO buffer. You may view this data (in ASCII format) at the CLI with the show
locallog command or on the Devices > Device Ports - Logging page. Buffered data is normally
stored in RAM and is lost in the event of a power failure if it is not logged using an NFS mount
solution. If the buffer data overflows the buffer capacity, only the oldest data is lost, and only in the
amount of overrun (not in large blocks of memory).

NFS File Logging
Data can be logged to a file on a remote NFS server. Data logged locally to the SLC 8000
advanced console manager is limited to 256 Kbytes and may be lost in the event of a power loss.
Data logged to a file on an NFS server does not have these limitations. The system administrator
can define the directory for saving logged data on a port-by-port basis and configure file size and
number of files per port.

SLC™ 8000 Advanced Console Manager User Guide

119

8: Device Ports
The directory path must be the local directory for one of the NFS mounts. For each logging file,
once the file size reaches the maximum, a new file opens for logging. Once the number of files
reaches the maximum, the oldest file is overwritten. The file naming convention is: __.log.
Examples:
02_Port-2_1.log
02_Port-2_2.log
02_Port-2_3.log
02_Port-2_4.log
02_Port-2_5.log

USB and SD Card Logging
Data can be logged to a USB flash drive that is loaded into the USB ports or the SD card slot on
the front of the SLC unit and properly mounted. Data logged locally to the SLC advanced console
manager is limited to 256 Kbytes and may be lost in the event of a power loss. Data logged to a
USB flash drive or SD card does not have these limitations. The system administrator can define
the file size and number of files per port. For each logging file, once the file size reaches the
maximum, a new file opens for logging. Once the number of files reaches the maximum, the oldest
file is overwritten. The file naming convention is:
__.log
Examples:
02_Port-2_1.log
02_Port-2_2.log
02_Port-2_3.log
02_Port-2_4.log
02_Port-2_5.log

Email/SNMP Notification
The system administrator can configure the SLC 8000 advanced console manager to send an
email alert message indicating a particular condition detected in the device port log to the
appropriate parties or an SNMP trap to the designated NMS (see Chapter 7: Services on page
75). The email or trap is triggered when a user-defined number of characters in the log from your
server or device is exceeded, or a specific sequence of characters is received.
Use the Device Ports - SLP / ServerTech CDU Device (on page 112) to set logging parameters on
individual ports.

Sylog Logging
Data can be logged to the system log. If this feature is enabled, the data will appear in the Device
Ports log, under the Info level. The log level for the Device Ports log must be set to Info for the data
to be saved to the system log. (See Chapter 7: Services on page 75.)
To set logging parameters:
1. In the top section of the Device Port Settings page, click the Settings link in the Logging field.
The following page displays:

SLC™ 8000 Advanced Console Manager User Guide

120

8: Device Ports

Figure 8-9 Devices > Device Ports - Logging

2. Enter the following:

Local Logging
Local Logging

If you enable local logging, each device port stores 256 Kbytes (approximately 400
screens) of I/O data in a true FIFO buffer. Disabled by default.

Clear Local Log

Select the checkbox to clear the local log.

View Local Log

Click this link to see the local log in text format.

Email/Traps
Email/Traps

Select the checkbox to enable email and SNMP logging. Email logging sends an
email message to pre-defined email addresses or an SNMP trap to the
designated NMS (see Chapter 7: Services on page 75) when alert criteria are
met. Disabled by default.

SLC™ 8000 Advanced Console Manager User Guide

121

8: Device Ports

Send

If you enabled email and SNMP logging, select what type of notification log to
send:




Trigger on

Email (default)
SNMP Trap
Both

Select the method of triggering a notification:



Byte Count: A specific number of bytes of data. This is the default.
Text String Recognition: A specific pattern of characters, which you can
define by a regular expression.

Note: Text string recognition may negatively impact the SLC unit’s performance,
particularly when regular expressions are used.
Byte Threshold

The number of bytes of data the port receives before the SLC unit captures log
data and sends a notification regarding this port. The default is 100 bytes.
In most cases, the console port of your device does not send any data unless
there is an alarm condition. After the SLC 8000 advanced console manager
receives a small number of bytes, it perceives that your device needs some
attention. The SLC unit notifies your technician when that point has been passed,
and the notification includes the logged data.
For example, a threshold preset at 30 characters means that as soon as the SLC
8000 advanced console manager receives 30 bytes of data, it captures log data
and sends an email regarding this port.

Text String

The specific pattern of characters the SLC unit must recognize before sending a
notification to the technician about this port. The maximum is 100 characters. You
may use a regular expression to define the pattern. For example, the regular
expression “abc[def]g” recognizes the strings abcdg, abceg, abcfg.
The SLC 8000 advanced console manager supports GNU regular expressions;
for more information, see:



http://www.gnu.org/software/libc/manual/html_node/Regular-Expressions.html
http://www.delorie.com/gnu/docs/regex/regex.html

Email Delay

A time limit of how long (in seconds), after the SLC unit detects the trigger, that
the device port captures data before closing the log file (with a fixed internal buffer
maximum capacity of 1500 bytes) and sending a notification. The default is 60
seconds.

Restart Delay

The number of seconds for the period after the notification has been sent during
which the device port ignores additional characters received. The data is simply
ignored and does not trigger additional alarms until this time elapses. The default
is 60 seconds.

Email to

The complete email address of the message recipient(s) for each device port(s).
Each device port has its own recipient list. To enter more than one email address,
separate the addresses with a single space. You can enter up to 128 characters.

Email Subject

A subject text appropriate for your site. May have up to 128 characters.
The email subject line is pre-defined for each port with its port number. You can
use the email subject to inform the desired recipients of the problem on a certain
server or location (e.g., server location or other classification of your equipment).
This is helpful if the email message goes to the system administrator’s or service
technician's mobile or wireless device (e.g., text messaging by means of email).
Note: The character sequence %d anywhere in the email subject is replaced
with the device port number automatically.

SLC™ 8000 Advanced Console Manager User Guide

122

8: Device Ports

Log Viewing Attributes
Display

Select to view either the beginning (Head) or end (Tail) of the log.

Number of Lines

Number of lines from the head or tail of the log to display.

NFS File Logging
NFS File Logging

Select the checkbox to log all data sent to the device port to one or more files on an
external NFS server. Disabled by default.

NFS Log to View

Available log files in the selected NFS Directory to view.

Directory to Log to

The path of the directory where the log files will be stored.
Note: This directory must be a directory exported from an NFS server mounted on
the SLC 8000 advanced console manager Specify the local directory path for the
NFS mount.

Max Number of Files

The maximum number of files to create to contain log data to the port. These files
keep a history of the data received from the port. Once this limit is exceeded, the
oldest file is overwritten. The default is 10.

Max Size of Files

The maximum allowable file size in bytes. The default is 2048 bytes. Once the
maximum size of a file is reached, the SLC unit begins generating a new file.

USB / SD Card Logging
USB / SD Card
Logging

Select to enable USB / SD card logging. A USB thumb drive or SD card must be
loaded into one of the ports of the SLC and properly mounted. Disabled by default.

Log to View

Available log files in the selected USB / SD card slot to view.

Log To

Select the USB port or SD card to use for logging.

Max Number of Files

Max Size of Files

The maximum allowable file size in bytes. The default is 2048 bytes. Once the
maximum size of a file is reached, the SLC 8000 advanced console manager
begins generating a new file. The default is 2048 bytes.

Syslog Logging
Syslog Logging

Select to enable system logging.
Note: The logging level for the device ports log must be set to Info to view Syslog
entries for Device Port logging on the Services > SSH/Telnet/Logging page.

Note: Note: To apply the settings to additional device ports, in the Apply settings to
Device Ports field, enter the additional ports, (e.g., 1-3, 5, 6)
3. To apply settings to other device ports in addition to the currently selected port, select the
Apply settings to Device Ports and enter port numbers separated by commas. Indicate a
range of port numbers with a hyphen (e.g., 2, 5, 7-10), and separate ranges with commas.
4. To save, click the Apply button.

SLC™ 8000 Advanced Console Manager User Guide

123

8: Device Ports

Logging Commands
The following CLI commands correspond to the web page entries described above.
To configure logging settings for one or more device ports:
set deviceport port
Note: Local logging must be enabled for a device port for the locallog commands to
be executed. To use the set locallog clear command, the user must have permission to
clear port buffers (see Chapter 11: User Authentication on page 174).
Example:
set deviceport port 2-5,6,12,15-16 baud 2400 locallogging enable
Parameters
emaildelay
emaillogging
emailrestart
emailsend
emailstring
emailsubj
emailthreshold
emailto
filedir
filelogging
filemaxfiles
filemaxsize
locallogging
name
nfsdir
nfslogging
nfsmaxfiles
nfsmaxsize
sysloglogging
usblogging
usbmaxfiles
usbmaxsize
usbport
To view a specific number of bytes of data for a device port:
show locallog [bytes ]
1 Kbyte is the default.
To clear the local log for a device port:
set locallog clear
Note: The locallog commands can only be executed for a device port if local logging is
enabled for the port. The set locallog clear command can only be executed if the user
has permission to clear port buffers (see Chapter 11: User Authentication on page 174).

SLC™ 8000 Advanced Console Manager User Guide

124

8: Device Ports

Console Port
The console port initially has the same defaults as the device ports. Use the Devices > Console
Port page to change the settings, if desired.
To set console port parameters:
1. Click the Devices tab and select Console Port. The following page displays:
Figure 8-10 Devices > Console Port

Change the following as desired:

Baud

Data Bits

Number of data bits used to transmit a character. From the drop-down list, select
the number of data bits. The default is 8 data bits.

Stop Bits

The number of stop bits that indicate that a byte of data has been transmitted.
From the drop-down list, select the number of stop bits. The default is 1.

Parity

Parity checking is a rudimentary method of detecting simple, single-bit errors.
From the drop-down list, select the parity. The default is none.

Flow Control

A method of preventing buffer overflow and loss of data. The available methods
include none, xon/xoff (software), and rts/cts (hardware). The default is none.

Timeout

The number of minutes (1-30) after which an idle session on the console is
automatically logged out. Disabled by default.

Show Lines on
Connecting

If selected, when you connect to the console port with a terminal emulator, you will
see the last lines output to the console, for example, the SLC boot messages or
the last lines output during a CLI session on the console.

SLC™ 8000 Advanced Console Manager User Guide

125

8: Device Ports

Group Access

If undefined, any group can access the console port. If one or more groups are
specified (groups are delimited by the characters ' ' (space), ',' (comma), or ';'
(semicolon)), then any user who logs into the console port must be a member of
one of the specified groups, otherwise access will be denied. Users authenticated
via RADIUS may have a group (or groups) provided by the RADIUS server via the
Filter-Id attribute that overrides the group defined for a user on the SLC 8000
advanced console manager. A group provided by a remote server must be either a
single group or multiple groups delimited by the characters ' ' (space), ',' (comma),
';' (semicolon), or '=' (equals) - for example "group=group1,group2;" or
"group1,group2,group3".

3. Click the Apply button to save the changes.

Console Port Commands
The following CLI commands correspond to the web page entries described above.
To configure console port settings:
set consoleport
Parameters
baud <300-230400>
databits <7|8>
stopbits <1|2>
group
parity
flowcontrol
showlines
timeout
To view console port settings:
show consoleport

Internal Modem Settings
This section describes how to configure an internal modem in the SLC advanced console
manager. The SLC 8000 internal modem is an optional part. If the modem is installed, a message
will be displayed when the SLC unit is booted:
Internal modem installed.
The presence of the modem will also be displayed in the CLI admin version command, the
web About SLC page, and the System Configuration report. The internal modem provides a
subset of the modem functionality available for modems connected to a Device Port and USB
modems. If the internal modem is installed, the Internal Modem web page can be displayed by
selecting the Internal Modem option from the main menu, or by selecting the MD button in the
Port Number Bar on the upper right corner of the web page.
Note:

The internal modem only supports Dial-in, Dial-out and Dial-back.

SLC™ 8000 Advanced Console Manager User Guide

126

8: Device Ports

Setting Up Internal Modem Storage
An internal modem may be configured on the Devices > Internal Modem page and accessed
through the Port Number Bar only if it is installed into the SLC 8000 advanced console manager. .
To set up internal modem storage in the SLC 8000 advanced console manager:
1. Insert an internal modem into the SLC unit according to the instructions in Modem Installation
(on page 33).
Note: Your internal modem will appear in the Port Number Bar in the upper right
hand corner once the SLC unit is reboots.
2. Reboot the SLC 8000 advanced console manager.
3. Log into the SLC unit and click Devices.
4. Click Internal Modem. Figure 8-11 shows the page that displays.

SLC™ 8000 Advanced Console Manager User Guide

127

8: Device Ports

Figure 8-11 Devices > Internal Modem

5. Enter the following fields.
State

Indicates whether the internal is enabled. When enabling, set the modem to
Disabled, Dial-in, Dial-out, and Dial-back. Disabled by default.

SLC™ 8000 Advanced Console Manager User Guide

128

8: Device Ports

Mode

The format in which the data flows back and forth.




With Text selected, the SLC unit assumes that the modem will be used for
remotely logging into the command line. Text mode is only for dialing in. This
is the default.
PPP establishes an IP-based link over the modem. PPP connections can be
used in dial-out mode (e.g., the SLC unit connects to an external network) or
dial-in mode (e.g., the external computer connects to the network that the
SLC unit is part of), dial-back (dial-in followed by dial-out), CBCP server and
CBCP client.

Use Sites

For more information see Sites (on page 149).

Group Access

If undefined, any group can access the modem (text login only). If one or more
groups are specified (groups are delimited by the characters ',' (comma) or ';'
(semicolon)), then any user who logs into the modem must be a member of one
of the specified groups, otherwise access will be denied. Users authenticated
via RADIUS may have a group (or groups) provided by the RADIUS server via
the Filter-Id attribute that overrides the group defined for a user on the SLC unit.
A group provided by a remote server must be either a single group or multiple
groups delimited by the characters ',' (comma), ';' (semicolon), or '=' (equals) for example "group=group1,group2;" or "group1,group2,group3".

Initialization Script

AT S7=45 SO=0 L1 V1 X4 &D2 &c1 E1 Q0
Note: We recommend that the modem initialization script always be prepended with AT and include E1 V1 x4 Q0 so that the SLC unit may properly
control the modem.
Modem Timeout

Timeout for modem connections. Set to No by default.
To configure the modem connection to time out when no traffic is received
choose Yes and enter a value of 1 to 9999 seconds.

Caller ID Logging

Select to enable the SLC unit to log caller IDs on incoming calls. Disabled by
default.

Modem Command

Modem AT command used to initiate caller ID logging by the modem.
Note: For the AT command, use +VCID=1 to enable Caller ID with formatted
presentation, and use +VCID=2 to enable Caller ID with unformatted
presentation. This is subject to subscribing to a Caller ID service for the modem
line.

Check Dial Tone

If set to Yes, the SLC will periodically check the modem for a dial tone while
waiting for a dial in (e.g., if the Modem State is set to Dial-in, or if the Modem
State is set to Dial-back and the SLC unit is in the Dial-in portion of the
sequence). The SLC unit can issue a trap or an event can be setup to notify the
user if no dial tone is detected. Set to Yes by default (every 15 minutes).

Dial-back Number

Users with Dial-back can dial into the SLC unit and enter their login and
password. Once the SLC unit authenticates them, the modem hangs up and
dials them back .
Select the phone number the modem dials back on: a fixed number or a
number associated with their login. If you select Fixed Number, enter the
number (in the format 2123456789).
The dial-back number is also used for CBCP client as the number for a userdefined number. See CBCP Server for more information.

Dial-back Delay

For dial-back and CBCP Server, the number of seconds between the dial-in
and dial-out portions of the dialing sequence.

SLC™ 8000 Advanced Console Manager User Guide

129

8: Device Ports

Dial-back Retries

For dial-back and CBCP Server, the number of times the SLC unit will retry the
dial-out portion of the dialing sequence if the first attempt to dial-out fails.

Timeout Logins

If you selected text mode, you can enable logins to time out after the
connection is inactive for a specified number of minutes. The default is No. This
setting only applies to text mode connections. PPP mode connections stay
connected until either side drops the connection. Disabled by default.

Negotiate IP Address

If the SLC and/or the serial device have dynamic IP addresses (e.g., IP
addresses assigned by a DHCP server), select Yes. This is the default.
If the SLC unit or the modem have fixed IP addresses, select No, and enter the
Local IP (IP address of the internal modem) and Remote IP (IP address of the
modem).

Authentication

Enables PAP or CHAP authentication for modem logins. PAP is the default.
With PAP, users are authenticated by means of the Local Users and any of the
remote authentication methods that are enabled.
With CHAP, the CHAP Handshake fields authenticate the user.

CHAP Handshake

The Host/User Name (for UNIX systems) or
Secret/User Password (for Windows systems) used for CHAP authentication.
May have up to 128 characters.

CHAP Auth Uses

For CHAP authentication, determines what is used to validate the CHAP host/
user sent by the remote peer: either the CHAP Host defined for the modem, or
any of the users in the Local Users list.

Enable NAT

Select to enable Network Address Translation (NAT) for dial-in and dial-out
PPP connections on a per modem (device port, USB port, or internal modem)
basis. Users dialing into the SLC unit access the network connected to Eth1
and/or Eth2.
Note: IP forwarding must be enabled on the Network - Settings page for NAT
to work.

Dial-out Number

Phone number for dialing out to a remote system or serial device. May have up
to 20 characters. Any format is acceptable.

Remote/Dial-out Login

User ID for authentication when dialing out to a remote system, or if a remote
system requests authentication from the SLC module when it dials in. May have
up to 32 characters.

Remote/Dial-out
Password/ Retype

Password for authentication when dialing out to a remote system, or if a remote
system requests authentication from the SLC unit when it dials in. May have up
to 20 characters.

Restart Delay

The number of seconds after the timeout and before the SLC module attempts
another connection. The default is 30 seconds.

6. Click Apply.

Host Lists
A host list is a prioritized list of SSH, Telnet, and TCP hosts available for establishing incoming
modem connections or for the connect direct command on the CLI. The SLC unit cycles
through the list until it successfully connects to one.
To add a host list:
1. Click the Devices tab and select the Host Lists option. The following page displays:

SLC™ 8000 Advanced Console Manager User Guide

130

8: Device Ports

Figure 8-12 Devices > Host Lists

2. Enter the following:
Note:

To clear fields in the lower part of the page, click the Clear Host List button.

Host List Id
Host List Name
Retry Count
Authentication

Displays after a host list is saved.
Enter a name for the host list.
Enter the number of times the SLC advanced console manager should attempt
to retry connecting to the host list.
Select to require authentication when the SLC unit connects to a host.

3. You have the following options:
-

To save the host list without adding hosts at this time, click the Add Host List button.

To add hosts, enter the following:

Host Parameters
Host

Name or IP address of the host.

Protocol

Protocol for connecting to the host (TCP, SSH, or Telnet).

Port

Port on the host to connect to.

SLC™ 8000 Advanced Console Manager User Guide

131

8: Device Ports

Escape Sequence

The escape character used to get the attention of the SSH or Telnet client. It is
optional, and if not specified, Telnet and SSH use their default escape character.
For Telnet, the escape character is either a single character or a two-character
sequence consisting of '^' followed by one character. If the second character is '?',
the DEL character is selected. Otherwise, the second character is converted to a
control character and used as the escape character.
For SSH, the escape character is a single character.

4. Click the right

arrow. The host displays in the Hosts box.

5. Repeat steps 2-4 to add more hosts to the host list.
Note: To clear fields before adding the next host, click the Clear Host Parameters
button.
6. You have the following options:
-

To remove a host from the host list, select the host in the Hosts box and click the
left
arrow.

To give the host a higher precedence, select the host in the Hosts box and click the
up
arrow.

To give the host a lower precedence, select the host in the Hosts box and click the
down
arrow.

7. Click the Add Host List button. After the process completes, a link back to the Device Ports >
Settings page displays.

SLC™ 8000 Advanced Console Manager User Guide

132

8: Device Ports

To view or update a host list:
1. In the Host Lists table, select the host list and click the View Host List button. The list of hosts
display in the Hosts box.
Figure 8-13 View Host Lists

2. View, add, or update the following:
Host List Id

Displays after a host list is saved.

Host List Name

Enter a name for the host list.

Retry Count

Enter the number of times the SLC 8000 advanced console manager should attempt to
retry connecting to the host list.

Authentication

Select to require authentication when the SLC unit connects to a host.

Host Parameters
Host

Name or IP address of the host.

Protocol

Protocol for connecting to the host (TCP, SSH, or Telnet).

Port

Port on the host to connect to SLC advanced console manager

SLC™ 8000 Advanced Console Manager User Guide

133

8: Device Ports

Escape Sequence

3. You have the following options:
-

To add a host to the host list, click the right

arrow. The host displays in the Hosts box.

To remove a host from the host list, select the host in the Hosts box and click the
left
arrow.

To give the host a higher precedence, select the host in the Hosts box and click the
up
arrow.

To give the host a lower precedence, select the host in the Hosts box and click the
down
arrow.

4. Click the Edit Host List button. After the process completes, a link back to the Device Ports >
Settings page displays.
To delete a host list:
1. Select the host list in the Host Lists table.
2. Click the Delete Host List button. After the process completes, a link back to the Device Ports
> Settings page displays.

Host List Commands
The following CLI commands correspond to the web page entries described above.
To configure a prioritized list of hosts to be used for modem dial-in connections:
set hostlist add|edit []
Parameters
name (edit only)
retrycount <1-10>
Default is 3.
auth
To add a new host entry to a list or edit an existing entry:
set hostlist add|edit entry
[]
Parameters
host
protocol
port
escapeseq <1-10 Chars>

SLC™ 8000 Advanced Console Manager User Guide

134

8: Device Ports
To move a host entry to a new position in the host list:
set hostlist edit move position
To delete a host list, or a single host entry from a host list:
set hostlist delete [entry ]
To display the members of a host list:
show hostlist

Scripts
The SLC unit supports two types of scripts:


Interface Scripts which use a subset of the Expect/Tcl scripting language to perform pattern
detection and action generation on Device Port output.



Batch Scripts which are a series of CLI commands. A user can create scripts at the web,
view scripts at the web and the CLI, and utilize scripts at the CLI. For a description of the
syntax allowed in Interface Scripts, see Interface Script Syntax at the end of this page.

All scripts have permissions associated with them; a user who runs a script must have the
permissions associated with the script in order to run the script.
To add a script:
1. Click the Devices tab and select the Scripts option. This page displays.

SLC™ 8000 Advanced Console Manager User Guide

135

8: Device Ports

Figure 8-14 Devices > Scripts

2. Click the Add Scripts button. The page for editing script attributes displays.

SLC™ 8000 Advanced Console Manager User Guide

136

8: Device Ports

Figure 8-15 Adding or Editing New Scripts

3. Enter the following:

Scripts
Script Name

A unique identifier for the script.

Type




Select Interface for a script that utilizes Expect/Tcl to perform pattern detection
and action generation on Device Port output.
Select Batch for a script of CLI commands.

4. In the User Rights section, select the user Group to which NIS users will belong:

SLC™ 8000 Advanced Console Manager User Guide

137

8: Device Ports

User Rights
Group

Select the group to which the NIS users will belong:





Default Users: This group has only the most basic rights. You can specify
additional rights for the individual user .
Power Users: This group has the same rights as Default Users plus Web
Access, Networking, Date/Time, Reboot & Shutdown, and Diagnostics &
Reports.
Administrators: This group has all possible rights.

5. Assign or unassign User Rights for the specific user by checking or unchecking the following
boxes:
Full Administrative

Right to add, update, and delete all editable fields.

Networking

Right to enter Network settings.

Services

Right to enable and disable system logging, SSH and Telnet logins, SNMP, and
SMTP.

Secure Lantronix
Network

Right to view and manage secure Lantronix units (e.g., SLP, Spider, or SLC
devices) on the local subnet.

Date/Time

Right to set the date and time.

Reboot & Shutdown

Right to shut down and reboot the SLC unit.

Local Users

Right to add or delete local users on the system.

Remote
Authentication

Right to assign a remote user to a user group and assign a set of rights to the user.

SSH Keys

Right to set SSH keys for authenticating users.

User Menus

Right to create a custom user menu for the CLI for NIS users.

Web Access

Right to access Web-Manager.

Diagnostics &
Reports

Right to obtain diagnostic information and reports about the unit.

Firmware &
Configuration

Right to upgrade the firmware on the unit and save or restore a configuration (all
settings). Selecting this option automatically selects Reboot & Shutdown.

Internal Modem

Right to configure internal modem settings.

Device Port
Operations

Right to enter device port settings.

Device Port
Configuration

Right to enter device port configurations.

USB

Right to enter modem settings for USB modems and to control USB storage
devices.

SD Card

Right to view and enter settings for SD card.

6. To save, click the Apply button. If the type of script is Interface, the script will be validated
before it is saved. Once the script is saved, the main Scripts page is displayed.
To view or update a script:
1. In the Scripts table, select the script and click the Edit Script button. The page for editing
script attributes displays (see Figure 8-15).
2. Update the script attributes (see To add a script: above).
3. To save, click the Apply button.

SLC™ 8000 Advanced Console Manager User Guide

138

8: Device Ports
To rename a script:
1. In the Scripts table, select the script and enter a new script name in the New Name field.
2. Click the Rename Script button. The script will be renamed and the Devices > Scripts page
redisplays.
To delete a script:
1. In the Scripts table, select the script to delete.
2. Click the Delete Script button. After a confirmation, the script will be deleted and the Devices
> Scripts page redisplays.
To change the permissions for a script:
1. In the Scripts table, select the script and select the new Group and/or Permissions.
2. Click the Change Permissions button. The script updates and the Devices > Scripts page
redisplays.
To use a script at the CLI:
1. To run an Interface Script on a device port for pattern recognition and action generation, use
the connect script

Lantronix SLC 8000 Advanced Console Manager User Manual To The A85d6a67 08f9 4e1d B0cb Fc23a5d0970b

Navigation menu

Versions of this User Manual:

Views

Navigation