Western Telematic RSM-16 User Manual

WTI Part No. 13662 Rev. DRSM SeriesRemote Site ManagersModels Covered:RSM-8 RSM-16 RSM-16DC RSM-32 RSM-32DCUser's GuideFor Firmware Version 2.16

1-2IntroductionConfiguration BackupOnce you have configured the RSM to fit your application, parameters and options can be saved to an ASCII text file

11-2Saving and Restoring Configuration Parameters11.2. Restoring Saved ParametersThis section describes the procedure for using your terminal emulatio

12-112. Upgrading RSM FirmwareWhen new, improved versions of the RSM firmware become available, the "Upgrade Firmware" function can be used

12-2Upgrading SCM Firmware5. Open your FTP/SFTP application and login to the RSM unit, using a username and password that permit access to Supervisor

13-113. Command Reference Guide13.1. Command ConventionsMost commands described in this section conform to the following conventions:• Text Interface

13-2Command Reference Guide13.2. Command Summary Function Command SyntaxCommand AvailabilitySupervisor Non-Super.Resident Disconnect^XX XDisplay Audi

13-3Command Reference Guide13.3. Command SetThis Section provides information on all Text Interface commands, sorted alphabetically by command.^X Res

13-4Command Reference Guide/C ConnectEstablishes a bidirectional connection between two ports. For more information, see Section 7.1. There are two

13-5Command Reference Guide/D Third Party DisconnectInvoke the /D command at your resident port to disconnect two other ports. Note that the /D comm

13-6Command Reference Guide/F Set System ParametersDisplays a menu which is used to define the Site ID message, create user accounts, set the system

13-7Command Reference Guide/K Send SSH KeyInstructs the RSM to provide you with a public SSH key for validation purposes. This public key can then b

2-1CLEARSETONRDYCONNECTIONS12 34567 8www.wti.comRSM-8Remote Site Manager12345Figure 2.1: Instrument Front Panel (Model RSM-8 Shown)2. Unit Descripti

13-8Command Reference Guide/PW Change PasswordWhen enabled, the /PW command can be invoked by a user/account in order to change their own password.

13-9Command Reference Guide/TEST Test Network ParametersDisplays a menu which is used to test configuration of the Syslog and SNMP Trap functions and

13-10Command Reference Guide/W Display Port Parameters (Who)Displays configuration information for an individual port, but does not allow the user to

Apx-1Figure A.1: RS232 Port Interface Appendix A. RS232 Port InterfaceDCD and DTR hardware lines function as follows:1. When connected:a) If eithe

Apx-2Appendix B. SpecificationsNetwork Interface: 10/100Base-T Ethernet, RJ45, multi-session Telnet.RS232 Port Interface: Connectors: • Model RSM

Apx-3Appendix C. Customer ServiceCustomer Service hours are from 8:00 AM to 5:00 PM, PST, Monday through Friday. When calling, please be prepared to

Apx-4AppendicesTrademark and Copyright InformationWTI and Western Telematic are trademarks of Western Telematic Inc.. All other product names mention

Index-1IndexAAccept BreakNetwork Port 5-28Serial Port 5-20Access Level 5-41Accounting Port 5-50Activity LEDs 2-1AC Powered Units 4-1Add Us

Index-2IndexGGateway Address 5-26General Parameters 5-5 to 5-7Group Membership Attribute 5-40Group Membership Value Type 5-40HHandshake ModeSe

Index-3IndexPParitySerial Port 5-19Passive Mode 5-17, 7-6Password 5-12 to 5-17, 5-15, 13-8Password on Dialback 5-10Periodic Reset Value 5-21

2-2Unit DescriptionOIPHONELINE10/100BaseTLINKACTIVITY SYSTEM SETUP PORTS(DTE)1 2 3 4 5 6 7 812345Figure 2.2: Instrument Back Panel (Model R

Index-4IndexSyslog 5-9, 5-22, 9-1 to 9-3Configuration 9-1 to 9-2Facility 5-23Level 5-23Message Criteria 9-2Syslog IP Address 5-26Testing C

2-3Unit Description RS232 Serial Ports: For connection to console ports on target devices. Standard DB9 connectors configured as DTE ports. The R

3-13. Getting StartedThis section describes a simplified installation procedure for our RSM-8, RSM-16, RSM-16DC, RSM-32 and RSM-32DC models, which w

3-2Getting Started3.2. Communicating with the RSMWhen properly installed and configured, the RSM will allow command mode access via Telnet, Web Brows

3-3Getting Started3. Review Help Menu: If you are communicating with the RSM via the text interface (SSH, Telnet or Modem), type /H and press [Enter

3-4Getting Startedb) Third Party Connection: Your resident port (e.g. Port 1) issues a /C command to create a connection between two other ports.i.

4-1-48V 0.1A0-48VA-48VBGROUNDSCREWFigure 4.1: Terminal Block Assembly (DC Units Only)4. Hardware Installation4.1. Connecting Power to the RSM UnitT

4-2Hardware Installation4.2. Connecting the Network CableThe Network Port is an RJ45, 10/100BaseT Ethernet Jack, for connection to a TCP/IP network.

iWarnings and Cautions:Installation InstructionsSecure RackingIf Secure Racked units are installed in a closed or multi-unit rack assembly, they may r

5-15. Configuration5.1. Communicating with the RSM UnitIn order to configure the RSM, you must first connect to the unit, and access command mode.

5-2ConfigurationTo access command mode via the Text Interface, proceed as follows:Note: Command mode cannot be accessed via a Buffer Mode Port, Passi

5-3Configuration3. If a valid username and password are entered, the RSM will display the Port Status Screen, shown in Figure 5.1.Note: If the Telne

5-4Configuration5.2. System SetUp PortsSerial Ports 1 and 2 are reserved as SetUp Ports, and will always permit password protected access to Supervis

5-5ConfigurationSYSTEM PARAMETERS: 1. User Directory 2. Site-ID: 3. Real Time Clock: 01/09/2007 00:26:06 4. Invalid Access Lockout: On 5.

5-6ConfigurationIn the Text Interface, the System Parameters menu is also used to create and manage user accounts and passwords. Note however, that w

5-7Configuration5.4.1. The Real Time Clock and CalendarThe Real Time Clock menu is used to set the RSM's internal clock and calendar. To access

5-8Configuration• Secondary NTP Address: Defines the IP address or domain name (up to 64 characters long) for the secondary, fallback NTP Server. (

5-9ConfigurationThe Invalid Access menus allow you to select the following:• Lockout Enable: Enables/Disables the Invalid Access Lockout feature. (

5-10Configuration5.4.4. Callback SecurityThe Callback function provides an additional layer of security when callers attempt to access command mode v

iiWarnings and CautionsDisconnect PowerIf any of the following events are noted, immediately disconnect the unit from the outlet and contact qualified

5-11Configuration◆ On - Callback ONLY (Without Password Prompt): Callbacks will be performed for user accounts that include a Callback Number, and t

5-12Configuration5.5. User AccountsPrior to accessing command mode or establishing a Telnet Direct Connection, you will be prompted to enter a userna

5-13Configuration5.6. Managing User AccountsThe User Directory function is employed to create new accounts, display parameters for existing accounts,

5-14Configuration5.6.2. Adding User AccountsThe "Add Username" option allows you to create new accounts and assign usernames, passwords, co

5-15ConfigurationTo create new user accounts, proceed as follows:• Text Interface: From the User Directory menu, type 2 and press [Enter]. The Add

5-16Configuration5.6.3. Modifying User AccountsThe "Edit User Directory" function allows you to edit existing user accounts in order to mod

5-17Configuration5.7. RS232 Port ConfigurationWhen responding to prompts, invoking commands, and selecting items from port configuration menus, note

5-18ConfigurationPORT PARAMETERS #03:COMMUNICATION SETTING PORT MODE PARAMETERS 1. Baud Rate: 9600 21. Port Name: 2.

5-19Configuration5.7.2. RS232 Port Configuration MenusThe Port Configuration Menus are used to select communications parameters and enable/disable op

5-20ConfigurationGeneral Parameters:• Supervisor Mode: Permits/denies port access to supervisor commands. When enabled (Permit), the port will be a

iiiAgency ApprovalsFCC Part 15 RegulationThis equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to

5-21ConfigurationPort Mode Parameters:• Port Mode: The operation mode for this port. Ports 1 and 2 cannot be configured as Passive or Buffer Mode p

5-22ConfigurationNetwork Services:• Direct Connect: Direct Connect allows users to access the RSM and automatically create a connection between the

5-23Configuration The Port Parameters menu also offers two additional items used to set the priority of Syslog messages generated by this port:◆ Fac

5-24ConfigurationNETWORK PARAMETERS:COMMUNICATION SETTING SERVERS AND CLIENTS1. IP Address: 192.168.168.168 21. Telnet Acce

5-25ConfigurationTo access the Network Parameters Menus, proceed as follows:• Text Interface: Type /N and press [Enter]. The Network Parameters Men

5-26Configuration5.8.1. Network ParametersIn the Text Interface, these parameters are accessed via the Network Configuration menu (Figure 5.9.) In t

5-27Configuration5.8.2. Network Port ParametersIn the Text Interface, these parameters are found in the main Network Configuration menu (Figure 5.9.)

5-28Configuration• Inactivity Timeout: Enables and selects the Inactivity Timeout period for the Network Port. If enabled, and the port does not re

5-29Configuration5.8.3. IP SecurityThe RSM can restrict unauthorized IP addresses from establishing an inbound Telnet connection to the unit. This a

5-30ConfigurationThe IP Security Function employs a TCP Wrapper program which allows the use of standard, Linux operators, wild cards and net/mask pai

ivTable of Contents1. Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

5-31Configuration1. Access the IP Security Configuration Menu.a) Text Interface: Type /N [Enter] to display the Network Configuration Menu. From

5-32Configuration5.8.3.2. Linux Operators and Wild CardsIn addition to merely entering a specific IP address or partial IP address in the Allow or De

5-33Configuration5.8.3.3. IP Security Examples1. Mostly Closed: Access is denied by default and the only clients allowed, are those explicitly list

5-34Configuration5.8.4. Static RouteThe Static Route menu allows you to type in Linux routing commands that will be automatically executed each time

5-35Configuration5.8.5. Domain Name ServerThe Domain Name Server menu is used to select IP addresses for the Domain Name Servers. When web and netwo

5-36Configuration5.8.6. SNMP ParametersThese menus are used to select parameters that will be used when an SNMP trap is generated. To define or chan

5-37ConfigurationIn the Text Interface SNMP parameters are defined via two separate menus, The SNMP Access Menu and the SNMP Trap Menu. In the Web Br

5-38Configuration5.8.7. LDAP ParametersThe RSM supports LADP (Lightweight Directory Access Protocol,) which allows authentication via the "Activ

5-39ConfigurationIn order to apply the LDAP feature, you must first define User Names and associated Passwords and group membership via your LDAP serv

5-40Configuration• User Search Base DN: Sets the directory location for user searches. (Default = undefined.)• User Search Filter: Selects the a

Table of Contentsv5. Configuration (continued) 5.8.7. LDAP Parameters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

5-41ConfigurationThe Add LDAP Group menus allow the following parameters to be defined:• LDAP Group: Note that this name must match the LDAP Group n

5-42Configuration5.8.7.2 Viewing LDAP GroupsIf you want to examine an existing LDAP group definition on an RSM unit, the "View LDAP Groups"

5-43Configuration5.8.7.3. Modifying LDAP GroupsIf you want to modify an existing LDAP Group in order to change command access rights or port access r

5-44ConfigurationFigure 5.31: Delete LDAP Group Menu (Web Browser Interface)5.8.7.4. Deleting LDAP GroupsThe Delete LDAP Group function is used to d

5-45Configuration5.8.7.5. LDAP Kerberos Set UpKerberos is a network authentication protocol, which provides a secure means of identity verification f

5-46ConfigurationTo access the LDAP Kerberos Set Up menu, access the command mode using a port and password that permit access to Supervisor Level com

5-47Configuration5.8.8. TACACS ParametersTo access the TACACS Configuration Menus, proceed as follows:• Text Interface: Type /N and press [Enter] t

5-48Configuration• Secret Word: Defines the shared TACACS Secret Word for both TACACS servers. (Default = undefined.)• Fallback Timer: Determines

5-49Configuration5.8.9. RADIUS ParametersTo access the RADIUS Configuration Menus, proceed as follows:• Text Interface: Type /N and press [Enter] t

5-50Configuration• Secondary Address: Defines the IP address or domain name (up to 64 characters long) for your secondary, fallback RADIUS server (i

Table of ContentsviAppendices:A. RS232 Port Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

5-51Configuration5.9. Copying Parameters to Several RS-232 Ports (Text Interface Only)When the /CP command (Copy Port Parameters) is invoked, the uni

5-52Configuration2. Invoke the /CP command at the command prompt; the menu shown in Figure 5.38 will be displayed. The following options are availab

6-16. The Status ScreensThe Status Screens display connection status and communication parameters for the RS232 ports and the Network Port. There ar

6-2The Status Screens6.1. The Port Status Screen (/S)The Port Status Screen lists the general status of the RSM’s sixteen RS-232 ports. To display t

6-3The Status Screens6.2. The Port Diagnostics Screen (/SD)The Port Diagnostics Screen provides more detailed information about each port. To displa

6-4The Status Screens6.3. The Network Status Screen (/SN)This screen lists current conditions for the Network Port. To display the Network Status S

6-5The Status Screens6.4. The Port Parameters Screens (/W)The /W (Who) command displays more detailed information about an individual RSM port. Rat

6-6The Status ScreensThe /W command uses the following format:/W xx [Enter]Where xx is the desired port number. If the /W command is invoked at a se

7-17. OperationThis section discusses the procedures for connecting and disconnecting ports, and describes the various port modes.Note: The Web Brow

7-2OperationTo Connect ports, proceed as follows:1. Access command mode via the Text Interface.2. Invoke the /C command to connect the desired ports

Table of ContentsviiList of Figures2.1. Instrument Front Panel (Model RSM-8 Shown) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

7-3Operation7.1.1.2. Disconnecting PortsThere are three different methods for disconnecting ports, the Resident Disconnect, the Third Party Disconnec

7-4Operationc) The /D command can specify both connected ports, or either of the two ports. For example, if Port 1 is your resident port, any of the

7-5Operation7.1.2. Defining Hunt GroupsA Hunt Group creates a situation where the RSM will scan a group of similarly named ports and connect to the f

7-6Operation7.2. Passive ModePassive Mode Ports function the same as Any-to-Any Mode Ports, but do not allow access to command mode. A Passive Mode

7-7Operation7.3. Buffer ModeThe Buffer Mode allows collection of data from various devices without the requirement that all devices use the same comm

7-8OperationTo clear data from any port buffer (with or without reading it first), access command mode via the text interface, using an account and po

7-9Operation7.4. Modem ModeThe Modem Mode provides features specifically related to modem communication. A Modem Mode Port can perform all functions

8-18. Telnet & SSH Functions8.1. Network Port NumbersWhenever an inbound Telnet or SSH session connects to an RSM RS232 Port, the Port Status Sc

8-2Telnet & SSH Functions8.3. The Direct Connect Feature The Direct Connect feature allows you to initiate a Telnet, SSH or Raw Socket session wi

8-3Telnet & SSH Functions3. Direct Connect ON - PASSWORD: The Direct Connect feature is enabled at this port, but a password must be entered bef

1-11. IntroductionThe RSM-8, RSM-16, RSM-16DC, RSM-32 and RSM-32DC Remote Site Managers provide in-band and out-of-band access to RS-232 console port

8-4Telnet & SSH Functions8.3.3. Connecting to an RS232 Port using Direct ConnectDirect Connect TCP port numbers are as follows: 1. Standard Teln

8-5Telnet & SSH Functions4. Raw Socket Direct Connection (with Password):a) RSM-8:• Serial Ports: TCP port numbers 3101 through 3108.• Intern

8-6Telnet & SSH Functions8.3.4. Terminating a Direct Connect SessionTo terminate a Direct Connect session, use the client program’s "disconn

9-19. The Syslog FeatureThe Syslog feature can create time-stamped log records of each buffer event. As these event records are created, they are se

9-2The Syslog Feature4. Network Parameters Menu: Access the Network Parameters Menu as described in Section 5.8, then set the following parameters:a

9-3The Syslog Feature9.3. Testing Syslog ConfigurationAfter you have configured the RSM as described in Section 9.1, the /TEST command can be used to

10-110. SNMP TrapsSNMP is an acronym for "Simple Network Management Protocol". The SNMP Trap function allows Buffer Mode Ports to send a me

10-2SNMP Traps3. Network Parameters Menu: Access the Network Parameters Menu as described in Section 5.8. Set the following:a) Enable: SNMP Acces

10-3SNMP Traps10.4. Testing the SNMP Trap FunctionAfter you have finished setting up the SNMP Trap function, it is recommended to test the configurati

11-111. Saving and Restoring Configuration ParametersOnce the RSM is properly configured, parameters can be downloaded and saved as an ASCII text file