Page 2
FCC Warning Statement The Cyclades ACS advanced console server has been tested and found to comply with the limits for Class A digital devices, pursuant to Part 15 of the FCC rules. These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a commercial environment.
Page 4
Instructions This symbol is intended to alert the user to the presence of important operating and maintenance (servicing) instructions in the literature accompanying the appliance. Dangerous Voltage This symbol is intended to alert the user to the presence of uninsulated dangerous voltage within the product’s enclosure that may be of sufficient magnitude to constitute a risk of electric shock to persons.
T A B L E O F C ON T E N T S Table of Contents List of Figures ........................ vii List of Tables ........................ix Chapter 1: Using Command Line Interface ..............1 Overview ............................1 Understanding the CLI Utility ....................1 Accessing the CLI ........................
LIST OF FIGU RES List of Figures Figure 4.1: Example of CAS Configuration with Local Authentication.......... 72 Figure 4.2: Example of CAS Configuration with Local and Remote Authentication..... 73 Figure 4.3: Example of TS Configuration Profile ................74 Figure 4.4: Example of Dial-in Access Profile................76 Figure 5.1: An Example on Using the Clustering Feature............
Page 10
viii ACS Advanced Console Server Command Reference Guide...
LIST OF TABLES List of Tables Table 1.1: Modes of Operation......................3 Table 1.2: CLI Commands for Saving Configuration Changes............4 Table 1.3: Cursor Movement Keys ....................5 Table 1.4: Command History Keys....................5 Table 1.5: Text Modification Keys..................... 5 Table 1.6: CLI Global Commands.....................
Using Command Line Interface Overview The Cyclades ACS advanced console server command line interface (CLI) may be used for administration and maintenance of the ACS console server. CLI is comprised of a set of keywords nested in a hierarchy format. CLI allows the ACS console server administrator to perform the same configuration tasks available through the Web Manager Interface (WMI).
ACS Advanced Console Server Command Reference Guide Remote users may access the ACS console server CLI through SSH, by using a terminal emulation program to dial into an external modem or by creating a PPP connection with an external modem or a PCMCIA modem. •...
Chapter 1: Using Command Line Interface Modes of operation The following table describes the three modes of executing commands using the CLI utility. Table 1.1: Modes of Operation Mode Description Command Line CLI is invoked in the Linux shell with commands and parameters. For example: [root@CAS root]# bin/CLI config network hostsettings hostname <parameter>...
ACS Advanced Console Server Command Reference Guide CLI Navigation Autocompletion Autocompletion may be used to find out what commands and parameters are available. • Pressing the key twice displays all the commands at the top level. For example: cli> <Tab> <Tab> administration info return...
Chapter 1: Using Command Line Interface Using CLI hot keys The CLI hot keys may be used to perform the following types of actions: • Move the cursor on the command line. • Move through the list of commands in the command history. •...
For example: To display the current value for domain and edit it. cli> config network hostsettings hostsettings> domain [press <Esc> <Tab>] hostsettings> domain avocent.com CLI Global commands CLI global commands may be entered at any level of the CLI hierarchy.
Page 21
Chapter 1: Using Command Line Interface Table 1.7: CLI Command Arguments (Continued) Activate changes. This is the same as runconfig command. batch mode only -f <filename> Executes the commands in the file <filename>.
Page 22
ACS Advanced Console Server Command Reference Guide...
CHAPTER Network Configuration Network Settings The following instructions assume you are installing a new ACS console server or you have reset an existing unit to factory default parameters. To configure initial network parameters using the wiz command: From your terminal emulation application, log into the console port as root. The default password is tslinux.
ACS Advanced Console Server Command Reference Guide Security Profiles A security advisory appears the first time the ACS console server is powered on, or when the unit is reset to factory default parameters. Once you have configured the basic network settings, a security profile must be selected in order to proceed to further configuration procedures.
ACS Advanced Console Server Command Reference Guide Host settings To configure host settings: Enter the following string at the CLI prompt. Refer to Table 2.3 for host settings parameters and values. cli> config network hostsettings <parameter> <value> Activate and save your configuration. Table 2.3: Host Settings Parameters and Values Parameter Level1 Parameter Level2 Value Description...
Chapter 2: Network Configuration PCMCIA Management The ACS console server’s PCMCIA slots support a number of interface cards such as Ethernet, modem (V.90, GSM, CDMA and ISDN), wireless LAN and storage cards. Go to http:// www.cyclades.com/products/3/alterpath_acs for a list of supported cards. PCMCIA configuration and monitoring commands During the ACS console server’s boot process, the cardmgr daemon monitors PCMCIA sockets, loads client drivers and runs user-level scripts in response to card insertion and removal.
Chapter 2: Network Configuration The following example shows the usage of wireless LAN configuration parameters. cli>config network pcmcia 1 wireless ip 192.168.11.11 mask 255.255.255.0 channel 6 essid mylocation encrypt yes key 421536615 cli>config savetoflash cli>config runconfig Modem PC cards In order to configure a modem PCMCIA card, enter the following command. Refer to Table 2.7 for parameter descriptions.
ACS Advanced Console Server Command Reference Guide GSM PCMCIA cards In order to configure a GSM PCMCIA card, enter the following command. Refer to Table 2.8 for parameter descriptions. cli> config network pcmcia <slot number[1-2]> gsm localip <n.n.n.n> remoteip <n.n.n.n> enablecallback [yes|no] callbacknum <string> pin <string>...
Chapter 2: Network Configuration CDMA card configuration In order to configure a CDMA PCMCIA card, enter the following command. Refer to Table 2.9 for parameter descriptions. cli> config network pcmcia <slot> cdma addinit <additional initialization> speed <modem speed> localip <n.n.n.n> remoteip <n.n.n.n>...
ACS Advanced Console Server Command Reference Guide ISDN PC cards In order to configure an ISDN PCMCIA card, enter the following command. Refer to Table 2.10 for parameter descriptions. cli> config network pcmcia <slot> isdn localip <n.n.n.n> remoteip <n.n.n.n> enablecallback [yes|no] callbacknum <string> Table 2.10: ISDN PCMCIA Configuration Parameters Parameter Value...
ACS Advanced Console Server Command Reference Guide The following example shows the usage of the PCMCIA card parameters. Enable the Compact Flash or PCMCIA hard drive. cli> config network pcmcia 1 cflash enable yes Enable data buffering on this device. cli>...
Page 35
Chapter 2: Network Configuration Table 2.12: Configuration Parameters for /etc/generic-dial.conf (Continued) Parameter Description inPort.stopbits <1> The number of stop bits. inPort.flowctrl [ none | hw | sw ] Gateway or interface address used for the route. outPort.name <name> A label for the outgoing port to be used in log messages. outPort.pppcall <filename>...
Page 36
ACS Advanced Console Server Command Reference Guide To configure the /etc/generic-dial-out.conf file: Configure the desired port with generic_dial protocol in /etc/portslave/pslave.conf. s<N>.protocol generic_dial To enable dial-out for the selected port configure the file /etc/generic-dial.conf with the parameters described in Table 2.12. Configure the PPP options (pppd) in /etc/ppp/peers/<name>...
Page 37
Chapter 2: Network Configuration The following example displays the /etc/ppp/peers/wireless file. In this example, note that the connect script initiates the connection. The file wireless executes using the chat automated modem communication script with the parameters -v (verbose mode) -t (timeout) and -f (read the chat script from the /etc/chatscripts/wireless file).
Page 38
ACS Advanced Console Server Command Reference Guide The following example illustrates the AT commands. • An ATD command to dial the *99# number • An AT+CGDCONT=1,"IP","claro.com.br" to contact a local GPRS broadband service (GSM wireless network) in Brazil ABORT BUSY ABORT VOICE ABORT...
Chapter 2: Network Configuration To configure dial-out automatic restart: Enable the default feature in the /etc/daemon.d/gendial.sh file to automatically restart the dial- out function after a reboot. Execute the saveconf command to save the gendial.sh file. Activate dial-out by restarting the GDF daemon. # daemon.sh restart GDF A message similar to the following displays, confirming the GDF daemon restart.
ACS Advanced Console Server Command Reference Guide Table 2.13: VPN Parameters Parameter Value Description <connection name> A name to identify the connection. authmethod <rsapubkey|sharesecret> Authentication method used. Either RSA Public Key or Shared Secret. authprotocol <ah|esp> Authentication protocol used. Either Encapsulating Security Payload (ESP) or Authentication Header (AH).
(read only) • source (allowed host): 192.168.0.200 cli> config network snmp v1v2 add community avocent oid .1 permission ro source 192.168.0.200 Run the following commands to activate and save the configuration. In order to configure SNMP v3, enter the following command. Refer to Table 2.15 for a list of parameters.
ACS Advanced Console Server Command Reference Guide Table 2.15: SNMP v3 Parameters Parameter Value Description syscontact <string> The email address of the ACS console server administrator. syslocation <string> The physical location of the ACS console server. <string> Object Identifier. Each managed object has a unique identifier. password <string>...
Chapter 2: Network Configuration To configure bonding: Enable / disable bonding. cli> config network hostsettings bonding enabled [no|yes] NOTE: This parameter is disregarded when DHCP is enabled. Configure the interval, in milliseconds, to verify if the primary interface is still active. bonding>...
ACS Advanced Console Server Command Reference Guide TCP keepalive The objective of this feature is to allow the ACS console server to recognize when the socket client, SSH or Telnet goes down without closing the connection properly. The TCP engine of the ACS console server sends a TCP keepalive message (ACK) to the client.
Page 45
Chapter 2: Network Configuration Chain Each table contains a number of built-in chains and may also contain user-defined chains. The built-in chains are called according to the type of packet. User-defined chains are called when a rule, matched by the packet, points to the chain. Each table has a specific set of built-in chains. For the filter table: •...
ACS Advanced Console Server Command Reference Guide Command Only one command may be specified on the command line unless otherwise specified in Table 2.16. Table 2.16: iptables Commands Options Command Description -A - - append Append one or more rules to the end of the selected chain. When the source and/or destination names resolve to more than one address, a rule is added for each possible address combination.
Chapter 2: Network Configuration Rule specification The following parameters define a rule specification as used in the add, delete, insert, replace and append commands. Table 2.17: iptables Rules Specifications Parameter Description - -protocol[!]protocol The protocol of the rule or of the packet to check. The specified protocol may be one of tcp, udp, icmp, or all, or it may be a numeric value, representing one of these protocols or a different one.
ACS Advanced Console Server Command Reference Guide Table 2.17: iptables Rules Specifications (Continued) Parameter Description - -out-interface[!][name] Optional name of an interface via which a packet is going to be sent (for packets entering the FORWARD and OUTPUT chains). When the ! argument is used before the interface name, the sense is inverted.
Chapter 2: Network Configuration TCP extensions These extensions are loaded if the protocol specified is tcp or -m tcp is specified. It provides the following options. Table 2.18: TCP Extensions TCP extension Description - -source-port [!] [port[:port]] Source port or port range specification. This may either be a service name or a port number.
ACS Advanced Console Server Command Reference Guide ICMP extension This extension is loaded if the protocol icmp is specified or -m icmp is specified. It provides the following option. Table 2.20: ICMP Extensions ICMP extension Description - -icmp-type [!] typename This allows specification of the ICMP type, which may be a numeric ICMP type, or one of the ICMP type names shown by the command iptables p icmp -h...
Chapter 2: Network Configuration Table 2.22: LOG Extensions (Continued) LOG extension Description - -log-ip-options Log options from the IP packet header. REJECT (filter table only) This is used to send back an error packet in response to the matched packet, otherwise it is equivalent to DROP.
ACS Advanced Console Server Command Reference Guide DNAT (NAT table only) This target is only valid in the nat table, in the PREROUTING and OUTPUT chains and user- defined chains which are only called from those chains. It specifies that the destination address of the packet should be modified (and all future packets in this connection are also mangled) and rules should cease being examined.
Chapter 2: Network Configuration To configure firewall: fwset script Iptables rules are stored in /etc/network/firewall. The fwset script saves the iptables rules in /etc/ network/firewall and saves it to Flash memory. fwset restore Restores the iptables’ rules previously saved in /etc/network/firewall to their original configuration. This command is executed at boot to invoke the last saved configuration.
ACS Advanced Console Server Command Reference Guide Use the following command to configure static routes. Refer to Table 2.29 for the list of parameters and the descriptions. cli> config network stroutes add [parameter] <value> Table 2.29: Static Routes Parameters and Values Parameter Value Description...
CHAPTER Security This chapter describes the procedures for configuring authentication service(s) that the ACS console server and its connected devices use. Authentication is the process by which the system, or more specifically, an authentication service such as Kerberos, LDAP or TACACS+, verifies the identity of users as well as confirm receipt of communication to authorized recipients.
ACS Advanced Console Server Command Reference Guide Table 3.1: Authentication Methods and Fallback Mechanisms Authentication type Parameter Description None none Not a valid option when the serial port is configured for Power Management protocol. The system defaults to Local if no authentication type is selected. Local local Authentication performed locally.
Chapter 3: Security Table 3.2: ACS Console Server Authentication Parameters Authentication Type Parameter Description Local local Authentication performed locally. An NIS, TACACS+ or localnis Radius is used if the local authentication fails. localradius localtacacs DSView dsview Authentication is performed using DSView management dsviewdownlocal software.
Chapter 3: Security Table 3.4: User Access Parameters Parameter Level1 Parameter Level2 Value Description addgroup groupname <group name> Add group and user members to usernames <list of user names manage access to connected servers. separated by commas> delgroup groupname <groupname> Delete group.
# domainname [NIS domain name] Show or set the system's NIS/YP domain name, for example: # domainname avocent mycompany-nis Edit the /etc/yp.conf file. Configure the NIS server. For example, if the NIS server has the IP address 192.168.160.110 add the following line to the file.
Chapter 3: Security To test the configuration: Start with the following command. # /usr/sbin/ypbind Display the NIS server name by running the following comman. # /usr/bin/ypwhich Display the all users entry by running the following command. # /usr/bin/ypcat -t passwd.byname Display the user's entry in the NIS passwd file.
ACS Advanced Console Server Command Reference Guide The following examples illustrate the use of NIS to authenticate users. • Authenticate the user in the local database; if the user is not found, then use NIS. passwd: files nis shadow: files nis group: files nis •...
Chapter 3: Security When the user needs access to a network service, the client uses the TGT to request a ticket for the service from the Ticket Granting Service (TGS), which runs on the KDC. The TGS issues a ticket for the desired service, which is used to authenticate the user.
Page 64
ACS Advanced Console Server Command Reference Guide To list all configured hosts in the Kerberos server, run the following command, which displays all hosts added through the ktadd command in the Kerberos server. # klist -k Configure hostname and domain name. # hostname acs48-2 # domainname cyclades.com To access the ACS console server through rlogin and Telnet:...
Chapter 3: Security Connect from the client to the ACS console server through SSH. # ssh john@acs48-2.cyclades.com Open an SSH session to one of the ACS console server’s ports. # ssh john:7001@acs48-2.cyclades.com RLOGIN to the ACS console server with forwardable tickets. # rlogin -l john acs48-2.cyclades.com -F Telnet to the ACS console serverwith forwardable tickets.
ACS Advanced Console Server Command Reference Guide Save your changes. # saveconf LDAP Authentication To configue LDAP authentication on the ACS console server: Execute the following command. Refer to Table 3.7 for authentication parameters. cli> config security authentication [parameter] <value> Activate and save your configuration.
Chapter 3: Security To configure a TACACS+ authentication server: On the server, add raccess service to the user configuration. Define to which group or groups the user belong. user = <username>{ service = raccess{ group_name = <Group1>[,<Group2,...,GroupN>]; To configure user permission on the TACACS+ server: On the TACACS+ server, open the file /etc/tacacs/tac_plus.cfg.
ACS Advanced Console Server Command Reference Guide Table 3.8: Parameters for Specifying User Authorization on a TACACS+ Server (Continued) Parameter Description port<#> = <ACS>/<Port> Specify which serial ports on the ACS console server the user has authorization to access. port# is a sequential label used by the ACS console server. <ACS>...
Chapter 3: Security To configure a RADIUS authentication server: On the Radius server, edit /etc/raddb/users and add a new string attribute (ATTRIBUTE Framed-Filter-Id) similar to the following example. groupuser1 Auth-Type= Local, Password =”xxxx” Service-Type=Callback-Framed-User, Callback-Number=”305”, Framed-Protocol=PPP, Framed-Filter- Id=”:group_name=<Group1>[,<Group2>,...,<GroupN>]”, Fall-Through=No If the Frame-Filter-Id already exists, add the group_name to the string starting with a colon (:). On the ACS console server, use the CLI utility to edit the parameters described in the following table.
ACS Advanced Console Server Command Reference Guide To configure RADIUS authorization on the ACS console server to access the serial ports: In CLI mode, enter the following string. cli>config physicalports <serial port number> access users/groups <list of users or group names separated by commas> Activate and save your configuration.
Chapter 3: Security • Configure a PCMCIA modem card for OTP authentication. You may use WMI or the CLI utility to configure a modem for OTP. To set up and configure an OTP database: Open a console window and log in to the ACS console server as root. Execute the following command to configure the OTP database.
Page 72
ACS Advanced Console Server Command Reference Guide Using from the console opiepasswd The following information displays when you execute the opiepasswd command from the console with a -c option. The system prompts you to enter a new secret pass phrase and proceeds to generate default OPIE sequence number 499 and a key from the first two letters of the hostname (kv), a pseudo random number (6178) and a password comprised of six words.
Chapter 3: Security The following example uses MD5 (-5 option) to verify data integrity. The -n <count> option followed by the sequence number 498 generates 5 passwords ending with number 498. # opiekey -5 -n 5 498 KV6178 Using the MD5 algorithm to compute response. Reminder: Don’t use opiekey from telnet or dial-in sessions.
ACS Advanced Console Server Command Reference Guide Digital Certificates Certificate for HTTP security The following procedure enables you to obtain a Signed Digital Certificate. A certificate for the HTTP security is created by a Certification Authority (CA). Certificates are most commonly obtained through generating public and private keys using a public key algorithm like RSA or X.509.
Page 75
Chapter 3: Security To install the certificate on the web server: Log in to the ACS console server. Join the certificate with the private key into the file /web/server.pem. #cat Cert.cer private.key > /web/server.pem Copy the certificate to the file /web/cert.pem. #cp Cert.cer /web/cert.pem Include the files /web/server.pem and /web/cert.pem in /etc/config_files.
ACS Advanced Console Server Command Reference Guide User configured digital certificate The ACS console server generates its own self-signed SSL certificate for HTTPs using OpenSSL. It is highly recommended that you use the “openssl” tool to generate a self-signed certificate and replace the ACS console server’s generated certificate.
Chapter 3: Security X.509 certificate on SSH The OpenSSH software included with the ACS console server has support for X.509 certificates. The administrator must activate and configure SSH to use X.509. To configure X.509 certificate for SSH: Enter the following command to configure X.509 certificate. See Table 3.13 for the list of parameters.
Page 78
ACS Advanced Console Server Command Reference Guide...
CHAPTER Accessing Connected Devices This chapter describes set up and configuration parameters for accessing serial ports and connected devices. Connection Profiles and Protocols The following table describes each connection profile and supported protocols. Table 4.1: Connection Profiles and Protocols Connection Supported Profile Protocol...
ACS Advanced Console Server Command Reference Guide Serial ports general parameters To configure general parameters: Execute the following command for one or multiple serial ports. Refer to Table 4.2 for port configuration parameters. cli> config physicalports <'all' or range/list[1-4] general [parameter] <value>...
Chapter 4: Accessing Connected Devices To configure other configuration parameters: Execute the following command for one or multiple serial ports. Refer to Table 4.3 for configuration parameters. cli> config physicalports <'all' or range/list[1-4] other [parameter] <value> Activate and save your configuration. Table 4.3: Other Serial Port Configuration Parameters Parameter Value...
ACS Advanced Console Server Command Reference Guide To open and close a telnet session to a serial port: # telnet [hostname] [TCP port number] Table 4.4: Telnet Session Configuration Parameters Parameter Description hostname Workstation name or its IP address. TCP port number TCP port number assigned to the serial port.
Chapter 4: Accessing Connected Devices Calling ts_menu with specific parameters ts_menu -u <user> [-l[c]] [-ro] [-s] [-auth] <console port> Table 4.6: ts_menu Parameters Parameter Description Invokes ts_menu as the user named by <user>. This requires a password to be -u <user> entered.
ACS Advanced Console Server Command Reference Guide To close the session from ts_menu (local): Enter the escape character shown when you connect to the port. In character/text mode, the Escape character is Ctrl+] Console escape commands are displayed. Table 4.7: Console Escape Commands Command Description go to line mode...
Chapter 4: Accessing Connected Devices Table 4.8: ts_menu Configuration Parameters Parameter Value Description consolename <consolename> Name of the serial port to which you need to connect. list To display a list of the available serial ports. readonly To connect to the console of a server in read-only mode. Add the serial port name parameter: cli>...
Socket Port 7002 192.168.1.102 Socket Port 7008 Socket Port 192.168.1.108 7001 192.168.1.101 Serial Serial Serial Cyclades ACS AlterP ath Advanced Console Server A C S LINUX INSIDE Advanced Console Server IP Address with Local Authentication 200.200.200.1 10/100BT Internet 10/100BT...
Server Remote Data Buffering Server Server Serial Serial AlterP ath Advanced Console Server A C S LINUX INSIDE Cyclades ACS Advanced Console Server with Local Authorization 10/100BT Ethernet Switch Internet 10/100BT 10/100BT Router 10/100BT Access Methods Telnet...
IP Address: PC Running Terminal 200.200.200.3 Application (VT-100) VT-100 Terminal Serial Serial AlterP ath Advanced Console Server A C S LINUX INSIDE Cyclades ACS Advanced Console Server 10/100BT Internet 10/100BT Ethernet Switch Router Figure 4.3: Example of TS Configuration Profile...
Page 89
Chapter 4: Accessing Connected Devices To test a TS configuration: Create a new user in the local database. # adduser <username> # passwd <username> Create a new test user and password on the server. From the console, ping the server to make sure it is reachable. Confirm that terminal communication parameters are set to the same as the ACS console server.
Syslog Servers IP Address IP Address 200.200.200.3 200.200.200.2 Modem Modem Serial Serial AlterP ath Advanced Console Server A C S LINUX INSIDE Cyclades ACS Advanced Console Server 10/100BT Internet 10/100BT Ethernet Switch Router Figure 4.4: Example of Dial-in Access Profile...
CHAPTER Administration Process Monitoring The command “w” displays information about the currently logged-in users and their processes. It calls two commands, w_ori and w_cas. The w_ori is the new name of the original command -w and the w_cas displays the CAS session’s information. The header of w_ori displays the current time, how long the system has been running, how many users are currently logged on (excluding the CAS users) and the system load averages for the past one, five and fifteen minutes.
ACS Advanced Console Server Command Reference Guide The Process Table The process table displays which processes are running. Type to see a table similar to ps -a the following. Table 5.1: Process Table VmSize State Command root /sbin/inetd root /sbin/inetd root /sbin/cy_ras root...
Chapter 5: Administration Syslog-ng Syslog-ng daemon reads log system console messages and log files on remote syslog servers as specified by its configuration file. In addition, syslog-ng may filter messages based on its content and perform an action, for example send an email or pager message. The /etc/syslog-ng/syslog- ng.conf file is used to perform specific configurations.
Chapter 5: Administration Table 5.5: Destination Drivers Parameters (Syslog-ng Configuration) Option Description file This is one of the most important destination drivers in syslog-ng. It allows (filename[options]) you to output log messages to the named file. The destination filename may include macros (by prefixing the macro name with a '$' sign) which gets expanded when the message is written.
ACS Advanced Console Server Command Reference Guide The following is an example of how to send an email. destination <ident> { pipe(‘/dev/cyc_alarm’ template(‘sendmail <pars>’));}; where <ident> uniquely identifies the destination. Table 5.6: Send Email Parameters Email field Parameter To address -t <name>[,<name>] CC address [-c <name>[,<name>]]...
Page 99
Chapter 5: Administration The following example displays an email sent to z@none.com (SMTP's IP address 10.0.0.2) from the email address a@none.com with subject “ALARM”. The message carries the current date, hostname of the ACS console server and the message received from the source. destination d_mail1 { pipe('/dev/cyc_alarm' template('sendmail -t z@none.com -f a@none.com -s \”ALARM\”...
Page 100
ACS Advanced Console Server Command Reference Guide • 0 : specific trap • \"\" : host-uptime • .1.3.6.1.2.1.2.2.1.2.1 :interfaces.iftable.ifentry.ifdescr.1 • s : the type of the next field (it is a string) • \"<message - max. size 250 characters>\" The following example sends a Link Down trap to a server at 10.0.0.1 with message carrying the current date, the hostname ACS console server and the message received from the source.
Page 101
Chapter 5: Administration log { source(sysl); source(s_udp); filter(f_messages); destination(d_messages); }; • To send an email if message received from local syslog client has the string kernel panic. log { source(sysl); filter(f_kpanic); destination(d_mail1); }; • To send an email and pager if message received from local syslog client has the string “root”...
ACS Advanced Console Server Command Reference Guide Syslog Messages The ACS console server may generate syslog messages to enable system administrators to monitor system changes. Syslog messages are generated when specific actions are performed or certain conditions are met through user entered commands. The system generates and sends messages to a syslog server using the following format.
Page 103
Chapter 5: Administration Table 5.8: ACS Console Server Syslog Messages Format (Continued) Level Text alert [PMD]-Serial Port p Outlet X has been turned OFF by user <username>. alert [PMD]-Serial Port p Outlet X has been turned ON by user <username>. alert [PMD]-Serial Port p OVER CURRENT on PM IPDU #X (current: <current...
ACS Advanced Console Server Command Reference Guide NOTE: To disable PMD syslog messages, the file /etc/pmd.sh has to be edited. The parameter DPARM must be changed from "" to "-s." After this, the command saveconf and daemon restart PMD must be run. DCD ON/OFF Syslog Messages The ACS console server may generate an alert when a serial console cable is removed from the ACS console server or when the serially attached server is powered down.
Chapter 5: Administration Configuring alarm notification cli> config administration notifications [parameter] <value> Table 5.9: System Notifications Parameters Parameter Level1 Parameter Level2 Value Description addemail <trigger string> Sends a message to the configured email address if the defined string appears. add Email> from subject body...
ACS Advanced Console Server Command Reference Guide Table 5.9: System Notifications Parameters (Continued) Parameter Level1 Parameter Level2 Value Description alarm yes|no Activate or deactivate the alarm feature. If you don't enable it, syslog messages won’t be generated when there is incoming data from the ports. delete Delete any previously configured string.
Chapter 5: Administration effective even after future reboots, create a line with /bin/ex_wdt_led.sh in /etc/config_files, save and quit the file and run saveconf. NOTE: This section applies only to the dual power supply model of the ACS console server. Date and Time, Timezone and Daylight Savings To adjust the date and time, use the date command.
ACS Advanced Console Server Command Reference Guide Table 5.11: Timezone Configuration Parameters Parameter Parameter Level1 Level2 Value Description Custom zonelabel Timezone name May be any custom name you choose (such as, “London,” “ChicagoOffice,” or “Sydney”), or may be a numerical value. acronym The abbreviated name for the zonelabel.
Chapter 5: Administration The following are examples of configuring timezones. cli> config administration timezone custom acronym PDT cli> config runconfig cli> config savetoflash cli> config administration timezone standard 08h_west_GMT cli> config runconfig cli> config savetoflash cli> config administration timezone custom dst on dstacronym PDT dststartday 04/30 dstendday 09/30 cli>...
Page 110
ACS Advanced Console Server Command Reference Guide —————————————————————————————————————————————————————— * * * ttySN is being used by (<first_user_name>) !!! 1 - Initiate a regular session 2 - Initiate a sniff session 3 - Send messages to another user 4 - Kill session(s) 5 - Quit Enter your option: ——————————————————————————————————————————————————————...
Chapter 5: Administration Table 5.12: Session Sniffing parameters Parameter Value Description hotkey <^(character)> To configure the escape character. The selected character must be preceded by the ‘^’ character. For example, ^k. notifyusers yes|no To configure multiuser notification. multisessions no | ro | rw | yes To configure multiple sessions.
ACS Advanced Console Server Command Reference Guide Ramdisks Data buffering files are created in the directory /var/run/DB. If the parameter s<nn>.alias is configured for the port <nn>, this name is used. For example, if the alias is called fremont_server, the data buffering file is named fremont_server.data. Linear vs.
Chapter 5: Administration Table 5.13: Data Buffering Configuration Parameters (Continued) Parameter Value Description syslogfacility local0 - local7 Defines the facility number for messages generated by the ACS console server to be sent to the Syslog server. timestamp no|yes Choose YES to enable timestamp and NO to disable it. Menu Shell This application allows you to customize a menu presented to users when they connect to the ACS console server from a terminal.
Page 114
ACS Advanced Console Server Command Reference Guide Choose Add Menu Option and complete the requested fields. The following question defines the action that must be taken. Enter the command for the new menu option: Select option 5 to save the configuration changes to Flash. NOTE: Action may be telnet host_ip or ssh -l username host_ip where host_ip is the IP address of the target server.
Chapter 5: Administration To set up which servers the users may access: Enter the following command to set up a menu, which is prompted when you connect from a dumb terminal. Refer to Table 5.14 for configuration parameters. cli> config applications terminalmenu add [parameter] <value> Activate and save your configuration.
ACS Advanced Console Server Command Reference Guide SUDO Configuration Group SUDO configuration group allows users belonging to the administrator (admin) group, by way of commands from the shell command line, to configure the ACS console server’s features provided by the WMI and CLI. NOTE: As supplied, the ACS console server (version 2.6.1 and up) provides a user admin from the admin group with the password cyclades.
Chapter 5: Administration Syntax # saveconf [media <media parameters>] Table 5.15: Saveconf Utility and Storage Device Parameters Media Description <none> Save the configuration to internal Flash. local <remote Path and filename> Save the configuration to the local file. ftp <remote Path and filename> <IP address of Save the configuration to a remote FTP server.
ACS Advanced Console Server Command Reference Guide Saving or restoring configuration files using CLI Use the following commands to save or restore configuration files. • Save to Flash cli> config savetoflash • Save to PCMCIA cli> administration backupconfig saveto sd [default] [replace] •...
Page 119
Chapter 5: Administration The /etc/crontab_files file may point to any desired file that calls the scripts to be run. The ACS console server has example file for it (/etc/tst_cron.src). The file that is pointed out in the /etc/ crontab_files file must follow the following structure. PATH=/usr/bin:/bin SHELL=/bin/sh HOME=/...
Server A C S A C S A C S LINUX LINUX LINUX INSIDE INSIDE INSIDE Ethernet LAN Cyclades ACS Cyclades ACS Cyclades ACS Advanced Console Server Advanced Console Server Advanced Console Server Management Slave 2 Slave 1 Master Workstation...
Chapter 5: Administration Table 5.17: Clustering Configuration Parameters Parameter Value Description numports <list> Set the total number of ports of the slave unit. firstlocalportnum <number[17-1024]> This parameter act as the numbering continuation in the slave. If the master unit has 16-ports, the first port of the slave unit is the first local port number, which in this case is port 17.
Page 122
ACS Advanced Console Server Command Reference Guide...
CHAPTER Power Management Through a serial port, you may use an IPDU to control the power outlets of the attached target devices. An IPDU enables you to remotely control and manage power to target devices attached to the ACS console server. When used in conjunction with the ACS console server, the IPDU delivers management capabilities that integrate the ACS console server and power management into a single interface.
Alt erP ath Advanc ed Console Server A C S LINUX INSIDE Cyclades ACS Advanced Console Server Managed Server Figure 6.1: IPDU and ACS Console Server Integration Power Management Protocol The serial port(s) configured with the pm protocol allows you to connect and configure IPDU appliances using an enabled serial port.
Chapter 6: Power Management enable> outletList ipudA[1], ipduB[2,5-7] Configure user permission to access an IPDU appliance. enable> pmusers <‘all’ or list of users separated by commas> Define the hotkey used to open the IPDU menu. The format is Ctrl (^) plus a character. The default is ^i.
Page 126
ACS Advanced Console Server Command Reference Guide pmCommand > id <current IPDU ID> <new IPDU ID> NOTE: Issuing a pmCommand without an IPDU ID may apply the changes to all IPDU appliances connected to the ACS console server, or it may generate an error message. Make sure to add the IPDU ID to a pmCommand. IPDU appliances may also be referenced by the location of the IPDU.
Chapter 6: Power Management Activate and save your configuration. cli> config runconfig cli> config savetoflash pmMenu To manage IPDU appliances through pmMenu: Enter at the shell prompt to open the power management menu. Table 6.1 provides pmMenu explanation for each menu item. Select an option from the menu.
Page 128
ACS Advanced Console Server Command Reference Guide Table 6.1: pmMenu and pmCommand Commands (Continued) Menu Item Command Syntax Description Current current {display|reset} Display the amount of current that is running through the [<IPDU ID> IPDU, or reset the maximum detected current in a single [<sensor name>]] or all IPDU appliances.
Minimum On Time minimumon Set the minimum time an outlet stays On before it is <outlet list> [<interval>] turned Off (Avocent SPC power control devices only). Minimum Off Time minimumoff Set the minimum time an outlet stays turned Off before it <outlet list>...
ACS Advanced Console Server Command Reference Guide To manage power through the ACS console server: From the ACS console server, open a Telnet or SSH session to the serial port where your server is connected. Access the IPDU by enetering the preconfigured hotkey. The default is ^i. If you have permission to access the server outlet(s), the IPDU appliance menu appears.
Chapter 6: Power Management To manage other outlets: Perform the following procedures if you need to access other outlets. Type to select Status to view the outlets you are authorized to manage. Type to select Other, and select the outlet you want to manage. You should have authorization to the manage the outlets entered.
ACS console server. To upgrade IPDU firmware: Download the new firmware from http://www.avocent.com/support/, the Avocent support web site. It is recommended to download the new firmware to a /tmp directory since files in this directory are deleted during the boot process.
Page 133
Chapter 6: Power Management • The instantaneous RMS current being drawn from each of the IPDU connected to a serial port. • The software version of the IPDU connected to a serial port. • The temperature of the IPDU connected to a serial port. •...
Page 134
ACS Advanced Console Server Command Reference Guide...
APP ENDICE S Appendices Appendix A: Additional Features and Applications Windows 2003 server management Emergency Management Services (EMS) is a new feature in the Windows 2003 Server that allows out-of-band remote management and system recovery tasks. All Emergency Management Services output is accessible using a terminal emulator connected to the server serial port.
ACS Advanced Console Server Command Reference Guide Table 7.1: EMS Configuration Parameters and Switches (Continued) Parameter and Switches Description /baud_rate Specifies the baud rate to be used for redirection. Do not use if remotely administered output is being disabled. Valid values are: 9600, 19200, 38400, 57600, 115200.
Page 137
Appendices Table 7.2: Machine Info Tags (Continued) Element Description <os-build-number> Is a numeric string that identifies a successive Windows Build. <os-product> Is the name of the Windows Server 2003 product currently running on this server. It is one of the following. •...
ACS Advanced Console Server Command Reference Guide The following elements are included in the <channel-switch> tag. Table 7.3: Elements in the <channel-switch> Tag Element Description <application-type> Is a hexadecimal GUID signifying the application or tool that is running on the Windows Server platform and communicating via this active channel.
Page 139
Appendices Table 7.3: Elements in the <channel-switch> Tag (Continued) Element Description <name> Is the system name of the active channel. For the GUI-mode Setup tool, they are the filenames where the data is written. • Debug Log (setuplog.txt) • Error Log (setuperr.log) •...
ACS Advanced Console Server Command Reference Guide The <BP> tag is emitted when the Windows server system halts such that only elements of the kernel are the most recently operating logic. Table 7.4: <BP> Tags Description Element Description <INSTANCE CLASSNAME=> Is the type of break point. Currently, there is only one type emitted such as Blue Screen which indicates the system was halted prematurely.
Appendices filter f_windows_bluescreen { facility(local<conf.DB_facility>) and level(info)nd match("XML_MONITOR") and match("BLUESCREEN"); } ; - and - filter f_windows_boot { facility(local<conf.DB_facility>) and level(info) and match("XML_MONITOR") and not match("BLUESCREEN") and match("machine-info"); } ; Once the desired message is filtered, define which actions we would like to take. Syslog-ng creates macros that may give easy access for the administrators to access the xml information.
ACS Advanced Console Server Command Reference Guide For the f_windows_boot, the following macros are available. Table 7.6: f_windows_boot Available Macros Macro Description Value to replace macro $<name> Machine name MY_WIN_SERVER $<guid> GUID that uniquely identifies this server. If 4c4c4544-8e00-4410-8045- no such value is available, all 0’s GUID 80c04f4c4c20 string is used.
Appendices An example on how to use the macros In the following example, the ACS console server sends an email to the administrator whenever a crash happens. The email should have the information about the reason of the crash, machine name and windows version information.
Page 144
Baseboard Management Controller (BMC) that may respond to IPMI commands out-of-band. The Cyclades ACS advanced console server has an implementation of IPMI over LAN, which allows the console server to control power on servers, and also to obtain sensor readings such as CPU temperature or fan speed.
Appendices IPMI configuration This program lets you manage IPMI enabled devices locally remotely. These functions include printing FRU information, LAN configuration, sensor readings and remote chassis power control. IPMI [ipmitool] Syntax ipmitool [-hvV] -I interface -H hostname [-L privlvl] [-A authType] [- P password] <expression>...
ACS Advanced Console Server Command Reference Guide Expressions Table 7.9: IPMI Commands Expression Description Send a RAW IPMI request and print response Send an I2C Master Write-Read command and print response Configure LAN Channels chassis Get chassis status and set power state event Send pre-defined events to MC Management Controller status and global enables...
Appendices Table 7.10: IPMI CLI Configuration Parameters Parameter Value Description <alias> Add and configure an IPMI device. edit <alias> Edit the parameters of an IPMI enabled device. delete <alias> Remove an IPMI device. authtype Add an authentication method. none password password <password>...
Page 148
ACS Advanced Console Server Command Reference Guide Line printer daemon This feature implements the UNIX Line Printer Daemon (LPD) in the ACS console server and may be used with local serial printers. It enables the ACS console server to receive network print requests and service them using locally attached serial printers.
Page 149
Appendices Execute saveconf command to save the configuration in Flash. Check the ACS console server configuration by entering the following command at your workstation. # lpr -P lp@<ACS IP address> <file that you want printer> CAS port pool CAS port pooling allows you to access a free serial port from a pool in addition to the original feature where you could access a specific serial port.
Page 150
ACS Advanced Console Server Command Reference Guide Alternately, you may access ttyS1 through the pool using TCP port 3000, IP 10.1.0.1 or alias pool- 1. If it is not free ttyS2 is automatically allocated. If ttyS2 is not free, then the connection is dropped.
Page 151
Appendices Billing The ACS console server family of products may be used as an intermediate buffer to collect serial data (like billing tickets from a PBX), making them available for a posterior file transfer. Different ports may have simultaneous billing sessions. General feature description The ACS console server reads the serial port and saves the information to Ramdisk files, which is limited to the maximum number of records per file.
Page 152
ACS Advanced Console Server Command Reference Guide To configure billing: Open the /etc/portslave/pslave.conf file and configure the following parameter according to your application. all.protocol - billing In the data buffering section of pslave.conf file configure the following parameters. all.billing_records - 50 all.billing_timeout - 60 min all.billing_eor - "\n"...
Page 153
Appendices -Ttimeout -i ip -n netmask -R route -u upload Any parameter that is not specified remains unchanged. The following parameters are configured by default for billing. sxx.authtype none sxx.protocol billing sxx.flow none sxx.dcd 0 sxx.sniff_mode no Select the -u option to execute the billing_upload_files.sh script. The script presents the following sequential menu where the upload options may be configured.
ACS Advanced Console Server Command Reference Guide Appendix B: Upgrades and Troubleshooting Upgrades Below are the six files added to the standard Linux files in the /mnt/flash directory when an upgrade is needed. • boot_alt - alternate boot code • boot_conf - active boot code •...
Appendices For example, the zImage zvmppccs.1005_qa.acs-k26.md5 text file contains the following information. 5bcc7d9b3c61502b5c9269cbecd20317 /tftpboot/zvmppccs.1005_qa.acs-k26 If the alphanuemeric string matches the downloaded file, execute the reboot command. After reboot, the ACS console server is updated with the new firmware. Confirm by issuing the following command.
Page 156
ACS Advanced Console Server Command Reference Guide 12. When the “Fast Ethernet” prompt appears, press Enter Fast Ethernet ((A)uto Neg, 100 (B)tH, 100 Bt(F), 10 B(t)F, 10 Bt(H)) [A] : The ACS console server should begin to boot off the network and the new image is downloaded. At this point, follow the upgrade process to save the new zImage file into Flash again.
Appendices To set a limit of bytes received by the interface per second: Run bootconf. Current configuration MAC address assigned to Ethernet [00:60:2e:00:16:b9] IP address assigned to Ethernet interface [192.168.160.10] Watchdog timer ((A)ctive or (I)nactive) [A] Firmware boot from ((F)lash or (N)etwork) [F] Boot type ((B)ootp,(T)ftp or Bot(H)) [T] Boot File Name [zvmppcts.bin] Server's IP address [192.168.160.1]...
Page 158
ACS Advanced Console Server Command Reference Guide Table 7.11: CPU LED Code Interpretation (Continued) Event CPU LED Morse code Flash Memory Error - Configuration S, L Ethernet Error S, S, L No Interface Card Detected S, S, S, L Network Boot Error S, S, S, S, L Real-Time Clock Error S, S, S, S, S, L...
Appendices Boot configuration To configure boot parameters: Use the following command to configure the boot parameters of the ACS console server. Refer to Table 7.12 for the description of parameters. cli> config administration bootconfig [parameter] <value> Table 7.12: CLI Boot Configuration Parameters Parameter Value Description...
ACS Advanced Console Server Command Reference Guide Session Management cli> administration sessions [parameter] <value> Table 7.13: CLI Session Management Parameters Parameter Value Description Kill <Serial Port To cancel a connection to the serial port <n> Number[1-1024]> LIst Lists the current sessions Backup configuration Save or restore configuration to an FTP server cli>...
Appendices Firmware upgrade To upgrade the firmware on the ACS console server: Enter the following command at the CLI prompt. cli> administration upgradefw ftpsite <n.n.n.n> username <name> password <password> filepathname <path> checksum <yes|no> As an example, the following parameters are used to show the command usage. FTP Server: 192.168.100.111 Path: /images/zImage User: john...
ACS Advanced Console Server Command Reference Guide Appendix C: Linux File Structure The Linux file system is organized hierarchically, with the root directory represented by the forward slash (/) symbol. All folders and files are nested within each other below this base directory.
Page 163
Appendices Table 7.16: File Manipulation Commands (Continued) mkdir directory_name Creates a directory named directory_name. • mkdir spot • Creates the directory spot in the current directory. • mkdir /tmp/snuggles • Creates the directory snuggles in the directory tmp. rmdir directory_name Removes the directory indicated by directory_name.
ACS Advanced Console Server Command Reference Guide Appendix D: The vi Editor To edit a file using the vi editor: #vi file_name The vi editor is a three-state line editor with command, line and editing modes. If in doubt as to which mode you are in, press the key, which brings you to the command mode.
Appendices Once you have completed your file modification, enter the line mode by typing colon ( ) and one of the following commands. Table 7.20: vi Line Mode Commands Command Description Saves the file (w is for write). Saves and closes the file (q is for quit). Closes the file without saving.
Appendix E: Technical Support Our Technical Support staff is ready to assist you with any installation or operating problems you encounter with your Avocent product. If an issue should develop, follow the steps below for the fastest possible service: Check the pertinent section of the manual to see if the issue can be resolved by following the procedures outlined.
Page 168
For Technical Support: www.avocent.com/support Avocent International Ltd. Avocent Corporation Avocent House, Shannon Free Zone 4991 Corporate Drive Shannon, County Clare, Ireland Huntsville, Alabama 35805-6201 USA Tel: +353 61 715 292 Tel: +1 256 430 4000 Fax: +353 61 471 871...
Need help?
Do you have a question about the Cyclades ACS and is the answer not in the manual?
Questions and answers