Western Telematic AFS-16-1 User Manual

WTI Part No. 14069 Rev. BAFS-16-1RJ45 Fallback SwitchUser's Guide

1-2IntroductionEnvironmental Monitoring and Management:The AFS-16 can constantly monitor temperature levels, ping response and other factors. If the

13-113. Operation via SNMPIf SNMP Access Parameters have been defined as described in Section 5.9.6, then you will be able to manage user accounts, c

13-2Operation via SNMP• userTable::userCircuitAccess – A string of up to 16 characters, with one character for each of the 16 possible Circuit Module

13-3Operation via SNMP13.4. Circuit Control via SNMP13.4.1. Controlling CircuitsA/B Switching and Default commands can be issued for circuits via SN

13-4Operation via SNMP13.5. Viewing AFS-16 Status via SNMPStatus of various components of the AFS-16 can be retrieved via SNMP. Circuit Status, and

13-5Operation via SNMP13.7. Sending Traps via SNMPTraps that report various unit conditions can be sent to an SNMP Management Station from the AFS-16

14-114 Setting Up SSL EncryptionThis section describes the procedure for setting up a secure connection via an https web connection to the AFS-16.Not

14-2Setting Up SSL Encryption14.1. Creating a Self Signed CertificateTo create a Self Signed certificate, access the Text interface via Telnet or SSH

14-3Setting Up SSL Encryption4. After you have defined parameters 5 through 11, type 12 and press [Enter] (Create CSR) to create a Certificate Signin

14-4Setting Up SSL Encryption3. UploadtheSignedCertificatetotheAFS-16: After the "signed" certificate is returned from the security

15-115. Saving and Restoring Configuration ParametersOnce the AFS-16 is properly configured, parameters can be downloaded and saved as an ASCII text

2-1ONIOPOWER MODULEAFS-161Figure 2.1: The Power Supply Module2. Unit DescriptionThe AFS-16 consists of a frame unit, one Dual Power Supply Module, o

15-2Saving and Restoring Configuration Parameters15.2. Restoring Saved ParametersThis section describes the procedure for using your terminal emulati

15-3Saving and Restoring Configuration Parameters15.3. Restoring Previously Saved ParametersIf you make a mistake while configuring the AFS-16 unit,

16-116. Upgrading AFS-16 FirmwareWhen new, improved versions of the AFS-16 firmware become available, the "Upgrade Firmware" function can be

16-2Upgrading RSM-8R4 Firmware4. To proceed with the upgrade, select either option 1 or option 2. The AFS-16 will display a message that indicates t

17-117. Command Reference Guide17.1. Command ConventionsMost commands described in this section conform to the following conventions:• TextInterface

17-2Command Reference Guide17.2. Command SummaryFunction Command SyntaxCommand Access LevelAdmin. SuperUser User ViewOnlyDisplayCircuit Status /S [En

17-3Command Reference Guide17.3. Command SetThis Section provides information on all Text Interface commands, sorted by functionality17.3.1. Display

17-4Command Reference Guide/L Log FunctionsProvides access to a menu which allows you to display the Audit Log, Alarm Log and Temperature Log. For m

17-5Command Reference Guide/TA Toggle to "A" PositionToggles a Circuit or a Circuit Group to the "A" position. Note:Whenthis

17-6Command Reference Guide/T Toggle CommandThis command can be used to toggle any Circuit or Circuit Group to either the "A" position or t

2-2Unit Description2.2. The Control ModuleThe Control Module, shown in Figure 2.2, coordinates switching of the individual Circuit Modules. The Cont

17-7Command Reference Guide/K Send SSH KeyInstructs the AFS-16 to provide you with a public SSH key for validation purposes. This public key can the

17-8Command Reference Guide/SSH Outbound SSHCreates an outbound SSH connection as described in Section 10.3.Notes:• Inorderforthe/SSHcommandto

17-9Command Reference Guide/G Circuit Group ParametersDisplays a menu that is used to View, Add, Modify or Delete Circuit Groups. For more informati

17-10Command Reference Guide/I Reboot System (Default)Reinitializes the AFS-16 unit and offers the option to keep user-defined parameters or reset to

Apx-1RJ-45Pin No.12345678CTSDCDRXDTXDGNDDTRRTS Request to SendReady OutData OutGroundData InCarrier DetectClear to SendPin 8Pin 1Control ModuleRS232 S

Apx-2Appendix B. SpecificationsSwitchCard: Up to 16 ModulesInterface: RJ45-3, Three Jacks, 8 Pins Switched Common Jack to A or B Jack. Contacts:

Apx-3Appendix C. Customer ServiceCustomer Service hours are from 8:00 AM to 5:00 PM, PST, Monday through Friday. When calling, please be prepared to

Apx-4AppendicesTrademark and Copyright InformationWTI and Western Telematic are trademarks of Western Telematic Inc.. All other product names mention

Index-1IndexAA/B Gang Switch 2-2A/B Switch 2-4Jumper 2-4A/B SwitchingText Interface 9-4 to 9-6Web Browser Interface 9-1 to 9-3Accept BreakNe

Index-2IndexCircuit Status Screen 8-2Text Interface 9-4, 17-3Circuits to SwitchMonitor/Alarm Input 7-11CLI 5-1 to 5-2Clock and Calendar 5-5,

2-3Unit Description ResetSwitch: To reinitialize the AFS-16, hold the Reset Switch in the "down" position for approximately five seconds

Index-3IndexFFallback 5-36Fallback LocalRADIUS 5-40TACACS 5-38Fallback TimerRADIUS 5-40TACACS 5-38Firmware Upgrade 16-1 to 16-2, 17-10Firm

Index-4IndexLocal Control Device 4-2Locality 14-2Local PCAccess 5-1Lockout Attempts 5-9Lockout Duration 5-9Lockout Enable 5-9Log Configura

Index-5IndexNotify Upon ClearInvalid Access Lockout Alarm 7-7Over Temperature Alarms 7-3Ping No Answer Alarm 7-5NTPEnable 5-7NTP Timeout 5-7

Index-6IndexPrivacySNMPv3 5-33Product Information 17-4Product Status Screen 8-1Public Key 10-1QQuick Start Procedure 3-1 to 3-4RRADIUSAccoun

Index-7IndexSNMPAdding Users 13-2Circuit Status 13-4Configuration 12-1Configuration Via 13-1 to 13-5Controlling Circuit Groups 13-3Controlli

Index-8IndexTTACACSAccess Level 5-38Authentication Port 5-38Configuration 5-38Default User Access 5-38Enable 5-38Fallback Local 5-38Fallba

2-4Unit Description2.3. The Circuit ModuleThe AFS-16 can accept up to sixteen Circuit Modules. Each Circuit Module includes a common jack, jacks for

3-13. Getting StartedThis section describes a simplified installation procedure for the AFS-16 hardware, which will allow you to communicate with the

3-2Getting Started3.3. Communicating with the AFS-16When properly installed and configured, the AFS-16 will allow command mode access via Telnet, Web

3-3Getting Started3. ReviewHelpMenu: If you are communicating with the AFS-16 via the text interface (SSH, Telnet or Modem), type /H and press [En

3-4Getting Started3.4.2. Fallback Switching - Web Browser InterfaceIn the default state, the Web Browser Interface will not be available until you ha

4-14. Hardware Installation4.1. Connecting the Power Supply Cable(s)Refer to the cautions listed below and at the beginning of this User's Guid

iWarnings and Cautions:Installation InstructionsSecure RackingIf Secure Racked units are installed in a closed or multi-unit rack assembly, they may r

4-2Hardware Installation4.3. Connecting a Local Control DeviceUse the supplied Ethernet cable and adapter to connect your PC COM port to the RS232 Co

4-3Hardware InstallationE DEnableDisableFigure4.3:CircuitModuleJumper4.5. Module Set Up4.5.1. Circuit Module Set UpThe A/B Switch Jumper on the

5-15. Basic ConfigurationThis section describes the basic configuration procedure for AFS-16 units. For information on Alarm Functions, please refer

5-2Basic ConfigurationTo access command mode via the Text Interface, proceed as follows:Note:Whencommunicatingwiththeunitforthefirsttime,yo

5-3Basic Configuration5.1.3. Access Via PDAIn addition to the Web Browser Interface and Text Interface, the AFS-16 command mode can also be accessed

5-4Basic Configuration5.2. Configuration MenusAlthough the Web Browser Interface and Text Interface provide two separate means for selecting paramete

5-5Basic Configuration5.3. Defining System ParametersThe System Parameters menus are used to define the Site ID Message, set the system clock and cal

5-6Basic Configuration• LogConfiguration: In the Text Interface, this item provides access to a submenu which is used to configure the Audit Log, A

5-7Basic Configuration5.3.1. The Real Time Clock and CalendarThe Real Time Clock menu is used to set the AFS-16's internal clock and calendar.

5-8Basic Configuration5.3.2. The Invalid Access Lockout FeatureWhen properly configured and enabled, the Invalid Access Lockout feature will watch al

iiWarnings and CautionsTwo Power Supply CablesNote that the AFS-16 features two separate power inputs, and a separate power supply cable for each powe

5-9Basic ConfigurationIn the Text Interface, the Invalid Access Lockout configuration menu is accessed via the System Parameters menu. In the Web Bro

5-10Basic Configuration5.3.3.1. The Audit Log and Alarm LogThe System Parameters menu allows you to select three different configuration parameters f

5-11Basic ConfigurationTo erase log data, access command mode via the Text Interface, using an account that permits Administrator level commands, then

5-12Basic ConfigurationIn both the Text Interface and Web Browser Interface, the Callback Security Menu offers the following options:• CallbackEnabl

5-13Basic Configuration5.3.5. Scripting OptionsThe Scripting Options submenu provides access to parameters that are used to set up the AFS-16 unit fo

5-14Basic Configuration5.3.5.1. Automated ModeThe Automated Mode allows the AFS-16 to execute A/B switching commands, without displaying menus or gen

5-15Basic Configuration5.4. User AccountsEach time you attempt to access command mode, you will be prompted to enter a username and password. The us

5-16Basic Configuration5.4.2. Granting Circuit Module AccessEach account can be granted access to a different selection of Circuit Modules. Note als

5-17Basic Configuration5.5. Managing User AccountsThe User Directory function is employed to create new accounts, display parameters for existing acc

5-18Basic Configuration• CircuitAccess: Determines which AFS-16 Circuit Modules this account will be allowed to access. (Defaults; Administrator &

iiiTable of Contents1. Introduction. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

5-19Basic Configuration• CallbackNumber: Assigns a number that will be called when this account attempts to access command mode via modem, and the

5-20Basic Configuration5.6. Circuit ConfigurationThe Circuit Parameters menu allows you to select parameters for the AFS-16 Circuit Modules. This al

5-21Basic Configuration5.7. The Circuit Group DirectoryThe Circuit Group Directory allows you to designate "groups" of circuits that are de

5-22Basic Configuration5.7.2. Adding Circuit GroupsThe "Add Circuit Group to Directory" option allows you to create new Circuit Groups and

5-23Basic Configuration5.8. Serial Port ConfigurationThe Serial Port Configuration menus allow you to select parameters for the AFS-16 Control Module

5-24Basic Configuration• SequenceDisconnect: Enables/Disables and configures the Resident Disconnect command. This offers the option to disable th

5-25Basic Configuration5.9. Network ConfigurationThe Network Parameters Menus are used to select parameters and options for the Network Port and also

5-26Basic Configuration5.9.1. Network Port ParametersIn the Text Interface, these parameters are found in the main Network Configuration menu. In th

5-27Basic Configuration5.9.2. Network ParametersIn the Text Interface, these parameters are accessed via the Network Configuration menu (Figure 5.9.)

5-28Basic Configuration• HTTPSPort: Selects the TCP/IP port number that will be used for HTTPS connections. (Default = 443.)Notes:• IntheTextI

Table of Contentsiv5. BasicConfiguration(continued) 5.7. The Circuit Group Directory . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

5-29Basic Configuration5.9.3. IP SecurityThe IP Security feature allows the AFS-16 to restrict unauthorized IP addresses from establishing inbound Te

5-30Basic Configuration5.9.3.1. Adding IP Addresses to the Allow and Deny ListsTo add an IP Address to the Allow or Deny list, and begin configuring

5-31Basic Configuration5.9.3.2. Linux Operators and Wild CardsIn addition to merely entering a specific IP address or partial IP address in the Allow

5-32Basic Configuration2. MostlyOpen: Access is granted by default, and the only clients denied access, are those explicitly listed in the Deny lis

5-33Basic Configuration5.9.6. SNMP Access ParametersThese menus are used to select access parameters for the SNMP feature. The SNMP Access Parameter

5-34Basic Configuration• AuthenticationProtocol: Determines which authentication protocol will be used. The AFS-16 supports both MD5 and SHA1 auth

5-35Basic Configuration5.9.8. LDAP ParametersThe AFS-16 supports LDAP (Lightweight Directory Access Protocol,) which allows authentication via the &q

5-36Basic Configuration• SearchBindPassword: Sets the Password for the user who is allowed to search the LDAP directory. (Default = undefined.)•

5-37Basic Configuration5.9.8.2 Viewing LDAP GroupsIf you need to examine an existing LDAP group definition, the "View LDAP Groups" function

5-38Basic Configuration5.9.9. TACACS ParametersThe TACACS Configuration Menus offer the following options:• Enable: Enables/disables the TACACS fea

Table of Contentsv8. TheStatusScreens. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

5-39Basic Configuration CircuitAccess: Selects the default Circuit Access setting for new TACACS users. The Circuit Access setting determines whi

5-40Basic Configuration5.9.10. RADIUS ParametersThe RADIUS Configuration Menus offer the following options:• Enable: Enables/disables the RADIUS fe

5-41Basic Configuration5.9.10.1. Dictionary Support for RADIUSThe RADIUS dictionary file can allow you to define a user and assign command access rig

5-42Basic Configuration5.9.11. Email Messaging ParametersThe Email Messaging menu is used to define parameters for email messages that the AFS-16 can

5-43Basic Configuration5.10. Save User Selected ParametersIt is strongly recommended to save all user-defined parameters to an ASCII file as describe

6-16. Ping-No-Answer Fallback SwitchingThe Ping-No-Answer function can be used to automatically switch one or more circuit modules when an attached d

6-2Ping-No-Answer Fallback Switching• ConsecutiveFailures: Determines how many consecutive failures of the Ping command must be detected in order t

6-3Ping-No-Answer Fallback Switching6.2. Viewing Ping-No-Answer ProfilesAfter you have defined one or more Ping-No-Answer profiles, you can review th

7-17. Alarm ConfigurationThe AFS-16 can generate alarms when temperature readings exceed user-defined trigger levels, when input voltage is lost and

7-2Alarm Configuration7.1. The Output ContactsIn addition to providing notification when an alarm is generated, the Over Temperature Alarms, Ping-No-

Table of Contentsvi16.UpgradingAFS-16Firmware . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16-117.

7-3Alarm Configuration7.2. The Over Temperature AlarmsThe Over Temperature Alarms are designed to inform you when the temperature level inside your e

7-4Alarm Configuration• EmailMessage: Enables/Disables email notification for this alarm. (Default = On.)Note:Ifeitherofthe"CopytoAll

7-5Alarm Configuration7.3. The Ping-No-Answer AlarmThe Ping-No-Answer Alarm is intended to provide notification when one of the IP addresses defined

7-6Alarm Configuration• EmailMessage: Enables/Disables email notification for this alarm. (Default = On.)Note:Ifeitherofthe"CopytoAll

7-7Alarm Configuration7.4. The Invalid Access Lockout AlarmThe Invalid Access Lockout Alarm can provide notification when the AFS-16 has locked a por

7-8Alarm Configuration• EmailMessage: Enables/Disables email notification for this alarm. (Default = On.)Note:Ifeitherofthe"CopytoAll

7-9Alarm Configuration7.5. The Power Cycle AlarmThe Power Cycle Alarm can provide notification when input power to the AFS-16 unit is lost and then r

7-10Alarm Configuration7.6. Monitor/Alarm InputThe Monitor/Alarm Input feature allows the AFS-16 to monitor Pin 4 on the Control Module's AUX co

7-11Alarm Configuration• ContactOutputEnable: Activates/deactivates the Output Contacts on the Control Module AUX Connector. When the Contact Out

7-12Alarm Configuration7.6.1. Monitor Input Level SettingsWhen the Monitor/Alarm Input feature is properly configured, the AFS-16 can trigger an alar

Table of ContentsviiList of Figures2.1. The Power Supply Module . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

7-13Alarm Configuration7.6.1.1. Monitor Input Signal - Trigger When LowTo set up the Monitor/Alarm Input feature to trigger an alarm when the signal

8-18. The Status ScreensThe Status Screens are used to display status information about the AFS-16 hardware and firmware, Network Port, Circuit Modul

8-2The Status Screens8.3. The Circuit Status ScreenThe Circuit Status Screen shows the current status of the AFS-16's Circuit Modules, and also

8-3The Status Screens8.4. The Circuit Group Status ScreenThe Circuit Group Status screen shows the configuration details and A/B switching status for

8-4The Status Screens8.5. The Event Logs8.5.1. The Audit LogThe Audit Log provides a record of most command activity at the AFS-16 unit, including A

8-5The Status Screens8.5.2. The Alarm LogThe Alarm Log provides a record of all alarm events that were initiated by the Over Temperature Alarms, Ping

9-19. OperationAs discussed in Section 5, the AFS-16 offers two separate command interfaces; the Web Browser Interface and the Text Interface (also k

9-2Operation3. A/BSwitching: From the Circuit Control Menu, click the down arrow in the "Action" column for the desired circuit(s), then

9-3Operation3. A/BSwitching-CircuitGroups: From the Circuit Group Control Menu, click the down arrow for the desired Circuit Group(s), then sele

9-4Operation9.2. A/B Switching - Text InterfaceWhen using the Text Interface, all A/B switching functions are performed by invoking simple, ASCII com

1-11. IntroductionThe AFS-16-1 is a versatile switching system, designed for applications that require routing of analog or digital signals between a

9-5Operation9.2.2. A/B Switching Commands - Text InterfaceThese commands can be used to switch AFS-16’s circuit modules, and can also be used to set

9-6Operation4. The"Toggle"Command: As an alternative to the /TA and /TB commands, the /T (Toggle) command can also be used to perform A/

9-7Operation9.3. Manual OperationIn addition to the command driven A/B switching functions that are available via the Web Browser Interface and Text

10-110. Telnet & SSH Functions10.1. SSH EncryptionIn addition to standard Telnet protocol, the AFS-16 also supports SSH connections, which provide

10-2Telnet & SSH Functions10.2. Creating an Outbound Telnet ConnectionThe AFS-16 includes a /TELNET command, that can be used to create an outboun

10-3Telnet & SSH Functions10.3. Creating an Outbound SSH ConnectionThe AFS-16's /SSH command can be used to create an outbound SSH connection

11-111. Syslog MessagesThe Syslog feature can create log records of each Alarm Event. As these event records are created, they are sent to a Syslog

11-2Syslog Messages11.2. Testing Syslog ConfigurationAfter you have configured the AFS-16 as described in Section 11.1, the /TEST command can be used

12-112. SNMP TrapsSNMP is an acronym for "Simple Network Management Protocol". The SNMP Trap function allows the AFS-16 to send Alarm Noti

12-2SNMP Traps12.2. Testing the SNMP Trap FunctionAfter you have finished setting up the SNMP Trap function, it is recommended to test the configurat