Avocent Cyclades ACS Manuel de service

590-814-501BCYCLADES® ACS 5000Command Reference GuideFor Technical Support:www.avocent.com/support

2 Cyclades ACS 5000 Advanced Console Server Command Reference GuideRemote users may access the console server CLI through SSH, by using a termi

92 Cyclades ACS 5000 Advanced Console Server Command Reference GuideTo set up which servers the users may access:1. Enter the following command

Chapter 5: Administration 93SUDO Configuration GroupSUDO configuration group allows users belonging to the administrator (admin) group, by way

94 Cyclades ACS 5000 Advanced Console Server Command Reference GuideSyntaxEnter the following at the shell prompt to see the syntax for the opt

Chapter 5: Administration 95 Restore from SSH server : restoreconf ssh <FILE> <SSH_SERVER> <USER>Saving or restor

96 Cyclades ACS 5000 Advanced Console Server Command Reference Guide• Status - Active or inactive. The script does not execute if inactive.• Us

Chapter 5: Administration 97Clustering Using Ethernet InterfaceClustering allows cascading multiple console servers so that one master may be

98 Cyclades ACS 5000 Advanced Console Server Command Reference GuideTo configure clustering:1. Execute the following commands to configure slav

99Power ManagementA Cyclades PM IPDU enables you to remotely control and manage power to target devices attached to the console server. When used in c

100 Cyclades ACS 5000 Advanced Console Server Command Reference Guide2. Configure the connection type SSH, Telnet or both for users to connect

Chapter 6: Power Management 101• An IPDU appliance should have a unique name, referred to as an IPDU ID. • If the IPDU ID is not defined or is

Chapter 1: Using the Command Line Interface 3Modes of operationThe following table describes the three modes of executing commands using the C

102 Cyclades ACS 5000 Advanced Console Server Command Reference Guide4. Activate and save your configuration.cli> config runconfigcli> co

Chapter 6: Power Management 103Cycle cycle <outlet list> Turn an outlet Off and On again (recycle power). Prompts you to enter a list of

104 Cyclades ACS 5000 Advanced Console Server Command Reference GuideCurrent Protection (Avocent PM PDU and Cyclades IPDU)currentprotection {st

Chapter 6: Power Management 105Wake Up State(SPC and ServerTech)wakeup <outlet list> [on | off | last]Set the outlet state after a cold

106 Cyclades ACS 5000 Advanced Console Server Command Reference GuidepmCommandAlternatively, you can use the pmCommand to manage IPDU appliance

Chapter 6: Power Management 107It was impossible to start a Power Management Session You can't access any Power Management functionality.

108 Cyclades ACS 5000 Advanced Console Server Command Reference GuideIPDU passwordAlthough you may not be required to change an IPDU password,

Chapter 6: Power Management 109To upgrade IPDU firmware:1. From http://www.avocent.com, click Resources-Updates and Documentation.2. From the

110 Cyclades ACS 5000 Advanced Console Server Command Reference Guide• The number of IPDU units connected to a serial port in a daisy-chain con

111AppendicesAppendix A: Additional Features and ApplicationsWindows 2003 server managementEmergency Management Services (EMS) is a new feature in the

4 Cyclades ACS 5000 Advanced Console Server Command Reference GuideCLI NavigationAutocompletionAutocompletion may be used to find out what comm

112 Cyclades ACS 5000 Advanced Console Server Command Reference GuideWith the EMS service enabled in Windows, configure the console server as c

Appendices 113Example of sample encodingIn the SAC command line, each time you enter the cmd command you create a channel. A channel is the C

114 Cyclades ACS 5000 Advanced Console Server Command Reference GuideThe following elements are included in the <channel-switch> tag.Tabl

Appendices 115A sample encoding of the SAC channel tag follows.A sample encoding of the CMD channel tag follows.A sample encoding of the GUI

116 Cyclades ACS 5000 Advanced Console Server Command Reference GuideThe <BP> tag is emitted when the Windows server system halts such th

Appendices 117filter f_windows_bluescreen { facility(local<conf.DB_facility>) and level(info)nd match("XML_MONITOR") and matc

118 Cyclades ACS 5000 Advanced Console Server Command Reference GuideFor the f_windows_boot, the following macros are available.Table A.6: f_wi

Appendices 119An example on how to use the macrosIn the following example, the console server sends an email to the administrator whenever a

120 Cyclades ACS 5000 Advanced Console Server Command Reference GuideIntelligent Platform Management Interface (IPMI)IPMI is a service-level pr

Appendices 121IPMI configurationThis program lets you manage IPMI enabled devices locally remotely. These functions include printing FRU info

Chapter 1: Using the Command Line Interface 5Saving CLI changesConfiguration changes made in any of the CLI modes are temporary. Changes are n

122 Cyclades ACS 5000 Advanced Console Server Command Reference GuideExpressionsTo Configure IPMI:1. Enter the following command to enable IPMI

Appendices 1233. Activate and save your configuration.Table A.10: IPMI CLI Configuration Parameters Parameter Value Descriptionadd <alias

124 Cyclades ACS 5000 Advanced Console Server Command Reference GuideLine printer daemonThis feature implements the UNIX Line Printer Daemon (L

Appendices 1257. Execute saveconf command to save the configuration in Flash.8. Check the console server configuration by entering the follow

126 Cyclades ACS 5000 Advanced Console Server Command Reference GuideAlternately, you may access ttyS1 through the pool using TCP port 3000, IP

Appendices 127BillingThe console server family of products may be used as an intermediate buffer to collect serial data (like billing tickets

128 Cyclades ACS 5000 Advanced Console Server Command Reference GuideTo configure billing:1. Open the /etc/portslave/pslave.conf file and confi

Appendices 129-T timeout-i ip-n netmask-R route-u uploadAny parameter that is not specified remains unchanged. The following parameters are c

130 Cyclades ACS 5000 Advanced Console Server Command Reference GuideAppendix B: Upgrades and TroubleshootingUpgradesBelow are the six files ad

Appendices 131For example, the <zImage_filename.md5> text file contains information similar to the following.5bcc7d9b3c61502b5c9269cbec

6 Cyclades ACS 5000 Advanced Console Server Command Reference GuideNOTE: The command history buffer is only available for the last 500 commands

132 Cyclades ACS 5000 Advanced Console Server Command Reference Guide12. When the “Fast Ethernet” prompt appears, press Enter.Fast Ethernet ((A

Appendices 133To set a limit of bytes received by the interface per second:1. Run bootconf. 2. Press Enter for all fields but the Maximum rat

134 Cyclades ACS 5000 Advanced Console Server Command Reference GuideNOTE: The Ethernet error mentioned in the previous table occurs automatica

Appendices 135Boot configurationTo configure boot parameters:1. Use the following command to configure the boot parameters of the console ser

136 Cyclades ACS 5000 Advanced Console Server Command Reference GuideSession Managementcli> administration sessions [parameter] <value>

Appendices 137Firmware upgradeTo upgrade the firmware on the console server:1. Enter the following command at the CLI prompt.cli> administ

138 Cyclades ACS 5000 Advanced Console Server Command Reference GuideAppendix C: Linux File StructureThe Linux file system is organized hierarc

Appendices 139mkdir directory_name• mkdir spot• mkdir /tmp/snugglesCreates a directory named directory_name. • Creates the directory spot in

140 Cyclades ACS 5000 Advanced Console Server Command Reference GuideAppendix D: The vi EditorTo edit a file using the vi editor:# vi file_name

Appendices 141Once you have completed your file modification, enter the line mode by typing colon (:) and one of the following commands.Table

Chapter 1: Using the Command Line Interface 7CLI command argumentsCommand arguments are used when CLI is invoked in the command line mode in t

142 Cyclades ACS 5000 Advanced Console Server Command Reference GuideAppendix E: Technical SupportOur Technical Support staff is ready to assis

FCC Warning StatementThe Cyclades ACS advanced console server has been tested and found to comply with the limits for Class A digital devices, pursuan

590-814-501BCYCLADES® ACS 5000Command Reference GuideFor Technical Support:www.avocent.com/support

8 Cyclades ACS 5000 Advanced Console Server Command Reference Guide

9Network ConfigurationNetwork SettingsThe following instructions assume you are installing a new console server or you have reset an existing unit to

10 Cyclades ACS 5000 Advanced Console Server Command Reference Guide-or-If you enter y, you will be prompted to save your configuration after t

Chapter 2: Network Configuration 11NOTE: If services not supporting IPv6 are needed, select Dual Stack (IPv4 and IPv6) and those services will

FCC Warning StatementThe Cyclades ACS 5000 advanced console server has been tested and found to comply with the limits for Class A digital devices, pu

12 Cyclades ACS 5000 Advanced Console Server Command Reference Guide• Virtual portsTo enable IPv6 network addressing:1. From the shell prompt o

Chapter 2: Network Configuration 13To configure a static primary IP address in IPv6 mode, enter the following:cli> config network hostsetti

14 Cyclades ACS 5000 Advanced Console Server Command Reference GuideNOTE: If the gateway address is IPV6 link_local (range identified by the fi

Chapter 2: Network Configuration 15Security ProfilesA security advisory appears the first time the console server is turned on, or when the un

16 Cyclades ACS 5000 Advanced Console Server Command Reference Guide2. Enable or disable desired protocols or services. Refer to Table 2.5 for

Chapter 2: Network Configuration 172. Activate and save your configuration.VPN ConfigurationYou can set up VPN connections to establish an enc

18 Cyclades ACS 5000 Advanced Console Server Command Reference GuideSNMPSimple Network Management Protocol (SNMP) works by sending messages cal

Chapter 2: Network Configuration 19To configure SNMP v1/v2 (example):1. The following command configures SNMP v1/v2 with the following paramet

20 Cyclades ACS 5000 Advanced Console Server Command Reference Guidecli> config network snmp v3 add username john password john1234 oid .1 p

Chapter 2: Network Configuration 21Structure of the iptablesThe iptables are structured in three levels: table, chain and rule. A table may co

Cyclades® ACS 5000Advanced Console ServerCommand Reference GuideAvocent, the Avocent logo, The Power of Being There, DSView and Cyclades are registere

22 Cyclades ACS 5000 Advanced Console Server Command Reference GuideConfiguring IP tablesIPv4 Syntax# iptables -command chain rule-specificatio

Chapter 2: Network Configuration 23Rule specificationThe following parameters define a rule specification as used in the add, delete, insert,

24 Cyclades ACS 5000 Advanced Console Server Command Reference Guide-d - -destination[!]address[/mask]Destination specification. See the descri

Chapter 2: Network Configuration 25Match extensionsIptables may use extended packet matching modules. These are loaded in two ways: implicitly

26 Cyclades ACS 5000 Advanced Console Server Command Reference GuideUDP extensionsThese extensions are loaded if the protocol udp is specified

Chapter 2: Network Configuration 27Multiport extensionThis module matches a set of source or destination ports. Up to 15 ports may be specifie

28 Cyclades ACS 5000 Advanced Console Server Command Reference Guideuser-defined chains which are only called from those chains. Several option

Chapter 2: Network Configuration 29the packet should be modified (and all future packets in this connection are also mangled) and rules should

30 Cyclades ACS 5000 Advanced Console Server Command Reference GuideTo configure firewall:fwset scriptIptables rules are stored in /etc/network

Chapter 2: Network Configuration 31Use the following command to configure static routes. Refer to Table 2.22 for the list of parameters and th

InstructionsThis symbol is intended to alert the user to the presence of important operating and maintenance (servicing) instructions in the literatur

32 Cyclades ACS 5000 Advanced Console Server Command Reference Guide

33CHAPTER3SecurityThis chapter describes the procedures for configuring authentication service(s) that the console server and its connected devices us

34 Cyclades ACS 5000 Advanced Console Server Command Reference Guidecli> config physicalports <'all' or range/list[1-xx]> ac

Chapter 3: Security 35To configure authentication servers:1. Execute the following command to configure authentication server parameters. Refe

36 Cyclades ACS 5000 Advanced Console Server Command Reference GuideUser access to serial portsTo add groups and users:1. Enter the following c

Chapter 3: Security 37• Load a key for the local “root” user accessed by [email protected]/home/key.security> loadkey username <username&

38 Cyclades ACS 5000 Advanced Console Server Command Reference Guideypserver 192.168.160.1103. Edit the /etc/nsswitch.conf file to include the

Chapter 3: Security 39The following examples illustrate the use of NIS to authenticate users.• Authenticate the user in the local database; if

40 Cyclades ACS 5000 Advanced Console Server Command Reference GuideThe login program or kinit decrypts the TGT using the user's key, whic

Chapter 3: Security 41kadmin: ktadd host/acs48-2.cyclades.comkadmin: qTo list all configured hosts in the Kerberos server, run the following c

iiiTable of ContentsChapter 1: Using the Command Line Interface... 1Overview ...

42 Cyclades ACS 5000 Advanced Console Server Command Reference Guide# klist5. Connect from the client to the console server through SSH.# ssh j

Chapter 3: Security 436. Save your changes.# saveconfLDAP AuthenticationTo configue LDAP authentication on the console server:1. Execute the f

44 Cyclades ACS 5000 Advanced Console Server Command Reference GuideTo configure a TACACS+ authentication server:1. On the server, add raccess

Chapter 3: Security 453. On the console server, use the CLI utility to edit the parameters described in the following table.cli> config sec

46 Cyclades ACS 5000 Advanced Console Server Command Reference GuideTo configure a RADIUS authentication server:1. On the Radius server, edit /

Chapter 3: Security 47To configure RADIUS authorization on the console server to access the serial ports:1. In CLI mode, enter the following s

48 Cyclades ACS 5000 Advanced Console Server Command Reference Guide• The main memory on the console server• NFS-mounted directory• Configure O

Chapter 3: Security 49Re-enter new password: users_passwd3. Execute the opiepasswd command to register a user and generate a default OPIE key.

50 Cyclades ACS 5000 Advanced Console Server Command Reference GuideTo generate OTP passwords:1. Execute the command opiekey to generate passwo

Chapter 3: Security 51The Certificate Signing Request (CSR) generated by the command contains some personal or corporate information and its p

iv Cyclades ACS 5000 Advanced Console Server Command Reference GuideAuthentication...

52 Cyclades ACS 5000 Advanced Console Server Command Reference GuideTo generate a self-signed certificate:1. Open the /etc/req_key file and upd

Chapter 3: Security 53To configure an X.509 certificate for SSH:1. Enter the following command to configure an X.509 certificate. See Table 3.

54 Cyclades ACS 5000 Advanced Console Server Command Reference Guide

55Accessing Connected DevicesThis chapter describes set up and configuration parameters for accessing serial ports and connected devices. Connection P

56 Cyclades ACS 5000 Advanced Console Server Command Reference GuideSerial ports general parameters To configure general parameters:1. Execute

Chapter 4: Accessing Connected Devices 57To configure other configuration parameters:1. Execute the following command for one or multiple seri

58 Cyclades ACS 5000 Advanced Console Server Command Reference GuideTo open and close a Telnet session to a serial port:# telnet [hostname] [TC

Chapter 4: Accessing Connected Devices 59Calling ts_menu with specific parameters# ts_menu -u <user> [-l[c]] [-ro] [-s] [-auth] <cons

60 Cyclades ACS 5000 Advanced Console Server Command Reference GuideTo close the session from ts_menu (local):1. Enter the escape character sho

Chapter 4: Accessing Connected Devices 61Configuration examplesConsole Access Server (CAS) profileWith the console server set up as a CAS prof

Table of Contents vDate and Time, Timezone and Daylight Saving ...

62 Cyclades ACS 5000 Advanced Console Server Command Reference GuideFigure 4.1: Example of CAS Configuration with Local AuthenticationFigure 4.

Chapter 4: Accessing Connected Devices 63Figure 4.2: Example of CAS Configuration with Local and Remote AuthenticationTo test a CAS configura

64 Cyclades ACS 5000 Advanced Console Server Command Reference Guide# passwd <username>2. Make sure the physical connection between the c

Chapter 4: Accessing Connected Devices 65Figure 4.3: Example of TS Configuration ProfileTo test a TS configuration:1. Create a new user in the

66 Cyclades ACS 5000 Advanced Console Server Command Reference Guide4. Confirm that terminal communication parameters are set to the same as th

Chapter 4: Accessing Connected Devices 67Figure 4.4: Example of Dial-in Access ProfileTable 4.12: Example of Dial-in Access Profile Descriptio

68 Cyclades ACS 5000 Advanced Console Server Command Reference Guide

69AdministrationProcess MonitoringThe command “w” displays information about the currently logged-in users and their processes. It calls two commands,

70 Cyclades ACS 5000 Advanced Console Server Command Reference GuideThe Process TableThe process table displays which processes are running. Ty

Chapter 5: Administration 71Syslog-ngSyslog-ng daemon reads log system console messages and log files on remote syslog servers as specified by

vi Cyclades ACS 5000 Advanced Console Server Command Reference Guide

72 Cyclades ACS 5000 Advanced Console Server Command Reference Guide2. Define Sourcessource <identifier> { source-driver([params]); sourc

Chapter 5: Administration 73source s_kernel { file(‘/proc/kmsg’); };• Receive messages from local syslogd clients. source sysl {unix-stream(‘/

74 Cyclades ACS 5000 Advanced Console Server Command Reference Guide• To filter by level. filter f_level { level(<level name>);};Examples

Chapter 5: Administration 75Table 5.5: Destination Drivers Parameters (Syslog-ng Configuration) Option Description file (filename[options])Thi

76 Cyclades ACS 5000 Advanced Console Server Command Reference GuideThe following is an example of how to send an email.destination <ident&g

Chapter 5: Administration 77The following example displays an email sent to [email protected] (SMTP's IP address 10.0.0.2) from the email addres

78 Cyclades ACS 5000 Advanced Console Server Command Reference Guide• 0 : specific trap• \"\" : host-uptime• .1.3.6.1.2.1.2.2.1.2.1 :

Chapter 5: Administration 79log { source(sysl); source(s_udp); filter(f_messages); destination(d_messages); };• To send an email if message re

80 Cyclades ACS 5000 Advanced Console Server Command Reference GuideSyslog MessagesThe console server may generate syslog messages to enable sy

Chapter 5: Administration 81Notifications and AlarmsSystem notifications allow an administrator to manage servers by filtering the messages ge

1Using the Command Line InterfaceOverviewThe Cyclades® ACS 5000 advanced console server command line interface (CLI) may be used for administration an

82 Cyclades ACS 5000 Advanced Console Server Command Reference GuideTo configure notifications:The following example demonstrates configuring t

Chapter 5: Administration 83add Email>smtpport 25 add Email>subject "Testing Config"4. Activate and save your configuration.Du

84 Cyclades ACS 5000 Advanced Console Server Command Reference Guidecli> config administration date/time [parameter] <value>Enter the

Chapter 5: Administration 85The following are examples of configuring timezones.cli> config administration timezone custom acronym PDTcli&g

86 Cyclades ACS 5000 Advanced Console Server Command Reference GuideNOTE: To deactivate the NTP service you need to configure date by issuing t

Chapter 5: Administration 87NOTE: Typing all.escape_char or sN.escape_char from the sniff session or send message mode makes the console serve

88 Cyclades ACS 5000 Advanced Console Server Command Reference Guidethe parameter s1.data_buffering, though the value cannot be zero since a ze

Chapter 5: Administration 89Menu ShellThis application allows you to customize a menu presented to users when they connect to the console serv

90 Cyclades ACS 5000 Advanced Console Server Command Reference GuideType menush_cfg and use the available options to define a menu title and me

Chapter 5: Administration 91Where <x> is the port number being configured.4. Activate and save the configuration changes.# runconf# save