Contents Introduction--1 Product Description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1 Access Procedures . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3 Recover From a Lost Password . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5 Upgrading Firmware through a Serial Connection . . . . . . . . . . . . . . . . 6 Front Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Administration: Network Features--58 TCP/IP and Communication Settings . . . . . . . . . . . . . . . . . . . . . . . . . 58 DNS (Administration>Network>DNS>options) . . . . . . . . . . . . . . . . . . 63 Web (Administration>Network>Web>options) . . . . . . . . . . . . . . . . . . 65 Console (Administration>Network>Console>options) . . . . . . . . . . . . 67 SNMP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Product Information--113 Two-Year Factory Warranty . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Introduction Product Description Features of the Switched Rack PDU You can manage a Switched Rack PDU through its Web interface, its control console, the InfraStruXure® Manager, or SNMP: Switched Rack PDU USER’S GUIDE The American Power Conversion (APC®) Switched Rack Power Distribution Unit (PDU) is a stand-alone, network-manageable device that monitors current and allows programmable control of eight, sixteen, or twenty-four power outlets (depending on the model).
• Four levels of user access accounts—Administrator, Device User, Read-Only User, and Outlet User. • Event and data logging—the event log is accessible by Telnet, Secure CoPy (SCP), File Transfer Protocol (FTP), serial connection, or Web browser (using HTTPS access with SSL, or using HTTP access).
To use a DHCP server to configure the TCP/IP settings at a Rack PDU, see TCP/IP and Communication Settings. Access Procedures Overview For more information about the internal user interfaces, see Control Console and Web Interface. The SNMP interface also allows you to use a SNMP browser with the PowerNet Management Information Base (MIB) to manage the Rack PDU.
Types of user accounts The Rack PDU has four levels of access (Administrator, Device User, Read-Only User, and Outlet User), which are protected by user name and password requirements. • An Administrator can use all of the menus in the Web interface and control console. The default user name and password are both apc. • A Device User can access only the following: – In the control console, the equivalent features and options.
To set User Name and Password values for Administrator, Device User, and Read-Only Users accounts, see Setting user access (Administration>Security>Local Users>options). You must use the Web interface to configure values for the Read-Only User and Outlet User. You can use a local computer, a computer that connects to the Rack PDU or other device through the serial port, to access the control console. 1 . Select a serial port at the local computer, and disable any service that uses that port.
7 . From the Control Console menu, select System, then User Manager. 8 . Select Administrator, and change the User Name and Password settings, both of which are now defined as apc. 9 . Press CTRL+C, log off, reconnect any serial cable you disconnected, and restart any service you disabled. For a complete description of how to download a firmware upgrade for your Rack PDU, see Upgrading Firmware: Methods and Tools.
8 . The system will then prompt you to choose a transfer rate and to change your terminal settings to match the transfer rate. Press ENTER to set the Switched Rack PDU to accept the download. 9 . In the terminal program, send the file using the XMODEM protocol. When the transfer finishes, the console will prompt you to restore the baud rate to normal. Do not interrupt the download. Upgrading the firmware will not interfere with the operation of the outlets.
Front Panel Single-phase - OK - Warning - Overload Link - Rx/Tx 10 /100 Press and hold to invert display Serial Port B1 - OK - Warning - Overload B2 TOTAL Link - Rx/Tx 10 /100 Status Amps Switched Rack PDU Reset Amps USER’S GUIDE Status Amps Switched Rack PDU Reset Serial Port ® 8
Three-phase Three-phase Switched Rack PDUs have one of the following front panels: - OK - Warning - Overload L1 L2 Press to select line. Press and hold to invert display. L3 Link - Rx/Tx 10 /100 Amps - OK - Warning - Overload Serial Port B3 B2 Press to select bank. Press and hold to invert display.
Item Function Input Selector On 3-phase models, press the input selector to monitor the current of the next phase or bank. Switched Rack PDU USER’S GUIDE For either 1- or 3-phase units, press and hold the input selector to display the IP address of the Rack PDU or to invert the display. At five seconds, the IP address is displayed; at ten seconds, the displayed numbers invert. 10/100 Base-T Connector Connects the Rack PDU to the network. Status LED See Status LED.
Link-RX/TX (10/100) LED Switched Rack PDU USER’S GUIDE This LED indicates the network status. Condition Description Off The device that connects the Rack PDU to the network is off or not operating correctly. Flashing Green The Rack PDU is receiving data packets from the network at 10 Megabits per second (Mbps). Flashing Orange The Rack PDU is receiving data packets from the network at 100 Megabits per second (Mbps). Solid Green or Orange The Rack PDU is not receiving any network traffic.
Load indicator LED Switched Rack PDU USER’S GUIDE The load indicator LED identifies overload and warning conditions for the displayed phase or bank. Condition Description Solid Green The current of the displayed phase or bank is under normal conditions and is between Near Lowload and Near Overload thresholds. Yellow The displayed phase or bank is in a Near Overload Warning condition. The current is above the Near Overload Warning threshold.
Resetting the network timer Switched Rack PDU USER’S GUIDE To ensure that the Rack PDU does not restart if the network is quiet for 9.5 minutes, the Rack PDU attempts to contact the Default Gateway every 4.5 minutes. If the gateway is present, it responds to the Rack PDU, and that response restarts the 9.5-minute timer. If your application does not require or have a gateway, specify the IP address of a computer that is running on the network most of the time and is on the same subnet.
Control Console Log On Overview Use case-sensitive User Name and Password entries to log on (by default, apc and apc for an Administrator, or device and apc for a Device User). A Read-Only User has no access to the control console. Switched Rack PDU USER’S GUIDE You can use either a local (serial) connection, or a remote (Telnet or SSH) connection to access the control console. ® If you cannot remember your user name or password, see Recover From a Lost Password.
If the PDU uses a non-default port number (from 5000 to 32768), you must include a colon or a space, depending on your Telnet client, between the IP address (or DNS name) and the port number. 2 . Enter the user name and password (by default, apc and apc for an Administrator, or device and apc for a Device User). Local access to the control console Switched Rack PDU USER’S GUIDE SSH for high-security access.
Main Screen Example main screen The main screen that is displayed when you log on to the control console of a Rack PDU: American Power Conversion Network Management Card AOS vx.x.x (c) Copyright 2006 All Rights Reserved Rack PDU APP vx.x.
Information and status fields Main screen information fields. • Two fields identify the APC operating system (AOS) and application (APP) firmware versions. The application firmware name identifies the type of device that connects to the network. In the preceding example, the application firmware for the Rack PDU is displayed. Network Management Card AOS Rack PDU APP vx.x.x vx.x.
Main screen status fields. • A Stat field reports the Rack PDU status. Switched Rack PDU USER’S GUIDE Stat : P+ N+ A+ P+ The APC operating system (AOS) is functioning properly. N+ The network is functioning properly. N? A BOOTP request cycle is in progress. N– The Rack PDU failed to connect to the network. N! Another device is using the IP address of the Rack PDU. A+ The application is functioning properly. A– The application has a bad checksum. A? The application is initializing.
Control Console Menus How to use control console menus Switched Rack PDU USER’S GUIDE The menus in the control console list options by number and name. To use an option, type the option’s number, press ENTER, and follow any on-screen instructions. If you use an option that changes a setting or value, select Accept Changes to save your change before you exit the menu.
Device Manager option Select the Device Manager menu then select the components to manage from this menu. To perform any of the following tasks, see Device and Outlet Management Menus: • Configure the load thresholds for each phase or bank. • Configure and control the outlets. • View the status of the power supply.
– Upload an initialization file (.ini file) that has been downloaded from another Rack PDU. The current Rack PDU then uses the values in that .ini file to configure its own settings. • Access and configure RADIUS information. Switched Rack PDU USER’S GUIDE • Access system information about the Rack PDU.
Web Interface Introduction You can use Microsoft® Internet Explorer (IE) 5.5 and higher (on Windows® operating systems only), Firefox, version 1.x, by Mozilla Corporation (on all operating systems), or Netscape® 7.x and higher (on all operating systems) to access the Rack PDU through its Web interface. Other commonly available browsers also may work but have not been fully tested by APC. Switched Rack PDU USER’S GUIDE Supported Web browsers In addition, the Rack PDU cannot work with a proxy server.
See Web (Administration>Network>Web>options) to select, enable, and disable the protocols that control access to the Web interface and to define the Web-server ports for the protocols. Switched Rack PDU USER’S GUIDE There is no default password for Outlet User accounts. (An Administrator must define the password and other account characteristics for an Outlet User.) If you are using HTTPS as your access protocol, your login credentials are compared with information in a server certificate.
Error Message “The connection was refused...” “This page cannot be displayed.” Cause of the Error Browser Web access is disabled, or the URL was not correct Netscape “Unable to connect.” Internet Explorer Firefox URL format examples. –http://Web1 if HTTP is your access mode –https://Web1 if HTTPS (HTTP with SSL) is your access mode Switched Rack PDU USER’S GUIDE • For a DNS name of Web1, the entry would be one of the following: • For a System IP address of 139.225.6.
Tabs, Menus, and Links Tabs In addition to the tab for the Home page, the following tabs are displayed. Click a tab to display a set of menu options: • Logs: View and configure event and data logs. • Administration: Configure security, network connection, notification, and general settings.
Quick Links Switched Rack PDU USER’S GUIDE See Configure Links (Administration>General>Quick Links) to access the menu to three configurable links that are shown at the lower left on each page of the Web interface.
Home Page Overview On the Home page of the interface, displayed when you log on, you can view active alarm conditions and the most recent events recorded in the event log. Quick status icons Critical: A critical alarm exists, which requires immediate action.
Active Alarms The Active Alarms section displays any alarms present. If no alarms are present, “No Device-Level Alarms Present” will be displayed. If an alarm is present, the alarm and its description will be displayed. Click the displayed alarm to view the Device Alarm Status page, which includes a description and severity level for each alarm present. The Device Alarm Status page can also be accessed through the Home page top menu bar.
Additional information on Home page The IP address displays in the upper left corner. A context-sensitive Help link and Log off link are displayed in the upper right corner of every page. Selecting a menu to perform a task • To do the following, see Configure Load Thresholds: – Configure the overload thresholds for each phase or bank. – Set the names and associated Web links for the outlets. • To do the following, see Configure and Control Outlet Groups – Apply power to and remove power from the outlets.
– Identify the Domain Name System (DNS) Server, test its network connection, and enable or disable DNS Reverse Lookup Event Logging (which logs the domain name of the device associated with each event). – Define settings for FTP, Telnet, SSH, HTTP and HTTPS, SNMP, and e-mail. – Configure the Rack PDU’s Syslog message feature. • To do the following, see Administration: General Options: – Control Administrator, Device User, Outlet User, and Read-Only User access.
Control console. 1 . Select Phase Management from the Device Manager menu. 2 . Select Overload Alarm Threshold (amps), Near Overload Warning Threshold (amps), or Low Load Warning Threshold (amps). 3 . Select Accept Changes. Switched Rack PDU USER’S GUIDE To set the overload outlet restriction, select Outlet Restriction Configuration on the Device Manager menu. For 3-phase units, select a phase or bank to display and change the Outlet Phase/Bank Restriction.
Configure Device Settings Web interface. Select the Administration tab and select General from the top menu bar. Select Identification from the left navigation menu to configure the Device Name, Device Contact, and Device Location fields for the Rack PDU (which are equivalent to the Name and Location fields in the control console). Control console.
Device and Outlet Management Menus Device Manager Tab The Device Manager tab contains load and outlet configurations and settings for your Rack PDU. The Load Management option is selected by default. The top menu bar option Load Management displays the current load status and configurable fields to set the Load Thresholds for the banks or phases of the Rack PDU. Switched Rack PDU USER’S GUIDE Load management The current load of the Rack PDU is displayed as a graph.
Configure and Control Outlet Groups Outlet group terminology An outlet group consists of outlets that are logically linked together on the same Switched Rack PDU. Outlets that are in an outlet group turn on, turn off, and reboot in a synchronized manner: • A global outlet group consists of one or more outlets on a Switched Rack PDU. One outlet is configured as a global outlet, which logically links the outlet group to outlet groups on up to three other Switched Rack PDUs.
Purpose and benefits of outlet groups By using groups of synchronized outlets on Switched Rack PDUs, you can ensure that outlets turn on, turn off, and reboot in a synchronized manner. Synchronizing control group actions through outlet groups provides the following benefits. • Synchronized shutdown and startup of the power supplies of dual-corded servers prevents erroneous reporting of power supply failures during a planned system shutdown or reboot.
System requirements for outlet groups To set up and use synchronized outlet control groups: • You need a 10/100Base-T TCP/IP network, with an Ethernet hub or switch that has a power source not shared by the computers or other devices being synchronized. • If outlet groups are to be synchronized across multiple Switched Rack PDUs, those Switched Rack PDUs must meet the following requirements: – They must be on the same subnet.
Rules for configuring outlet groups For a system that uses outlet groups, the following rules apply: • A Switched Rack PDU can have more than one outlet group, but an outlet can belong to only one outlet group. • A local outlet group, which has no global outlet, must consist of two or more outlets. – In a global outlet group, you can designate only one outlet to be a global outlet, linking to outlet groups on other Switched Rack PDUs for the purpose of synchronization.
Enable outlet groups Click the Device Manager tab and select Group Configuration from the Outlet Groups left navigation menu. Configure the following parameters, and click Apply. Enable creation of outlet groups. Parameter Description Device Level Outlet Group To create an outlet group, you must enable this parameter. It is disabled by default.
Setting outlet group port. Parameter Description Outlet Group Port The port number on which the device will communicate with other devices. Create a local outlet group (Web interface) Switched Rack PDU USER’S GUIDE Devices wishing to synchronize with Outlet Groups on other devices must all have the same Authentication Phrase, Encryption Phrase, and Group Port number. The values are hidden to the user. 1 . From the Device Manager tab, select Information from the Outlet Groups left navigation menu.
IP address) are the same for all Rack PDUs to be linked. See Enable outlet groups. 3 . Click Create Global Outlet Groups. 4 . For each global outlet group you create, select an outlet by clicking on its checkbox. Then click Apply. For example, select five outlets to create five outlet groups, each consisting of one global outlet. Edit or delete an outlet group Switched Rack PDU USER’S GUIDE 5 . To add outlets to any of the global outlet groups you created, see Edit or delete an outlet group. 1 .
Typical outlet group configurations The following configuration shows two Switched Rack PDUs, each with eight outlet groups. Each outlet group consists of a single global outlet. Each outlet group on the first Switched Rack PDU is linked to the outlet group in the same location on the second Switched Rack PDU.
The following configuration shows three sets of synchronized outlets. Global outlets are shown in black. Outlet groups are enclosed in red rectangles. These four global outlet groups synchronize a total of 19 outlets. These two global outlet groups synchronize 6 outlets, 2 in one group and 4 in the other. This local outlet group synchronizes 3 outlets on the same Switched Rack PDU.
Verify your setup and configuration for global outlet groups To ensure that your setup meets all system requirements for outlet groups and that you have configured the outlet groups correctly, select Information from the Outlet Groups left navigation menu in the Web interface to view the groups and their connections: • The Configured Outlet Groups section displays the following: – All configured outlet groups on the current Switched Rack PDU.
Outlet Settings for Outlets and Outlet Groups Initiate a control action If you apply an outlet control action to outlets or outlet groups, the following delays are used for the action: • For an individual outlet (not in an outlet group), the action uses the delay periods and reboot duration configured for that outlet. • For a local outlet group, the action uses the delay periods configured for the lowest-numbered outlet in the group. Web interface.
Switched Rack PDU USER’S GUIDE Control actions you can select. Option Description No Action (Web interface only) Do nothing. On Immediate Apply power to the selected outlets. On Delayed Apply power to each selected outlet according to its value for Power On Delay.† Off Immediate Remove power from the selected outlets. Off Delayed Remove power from each selected outlet according to its value for Power Off Delay.† Reboot Immediate Remove power from each selected outlet.
Configure outlet settings and the outlet name Settings that you can configure. The following settings are available in both the Web interface and control console unless otherwise indicated: Setting Description Name (Web interface) Set the name for one or more outlets. The name is displayed next to the outlet number on status screens. Switched Rack PDU USER’S GUIDE Outlet Name (control console) Link (Web interface) Define an HTTP or HTTPS link to a Web site or IP address. • http://www.apc.
Web interface. To configure the outlet settings or outlet names, select the Device Manager tab and then Configuration from the left navigation menu. Click the Configure Multiple Outlets button in the Outlet Configuration section or click on the outlet name. • Configure outlet settings for multiple outlets: – Select the checkboxes next to the numbers of the outlets you want to modify, or select the All Outlets checkbox. – Enter values for Name and Link, and click the Apply button immediately below the list.
Scheduling Outlet Actions (Web Interface Only) Actions you can schedule Switched Rack PDU USER’S GUIDE To configure values for Power On Delay, Power Off Delay, and Reboot Duration for each outlet, see Configure outlet settings and the outlet name. Although you must use the Web interface to schedule outlet actions, you can set these values in either the Web or control console interfaces.
Option Description Reboot PDU Immediate Remove power from each selected outlet. Then apply power to each of these outlets according to its value for Reboot Duration.† Reboot PDU Delayed Remove power from each selected outlet according to its value for Power Off Delay. Wait until all outlets are off (the highest value for Reboot Duration), and then apply power to each outlet according to its value for Power On Delay.
Schedule an outlet event 1 . At the Web interface, select the Device Manager tab and then Scheduling from the left navigation menu. 2 . On the Outlet Scheduling page, select how often the event will occur (One-Time, Daily, or Weekly), and click the Next button. 3 . On the Schedule a Daily Action page, in the Name of event text box, replace the default name, Outlet Event, with a name that will identify your new event. 4 . Use the drop-down lists to select the type of event and when it will occur.
Edit, disable, enable, or delete a scheduled outlet event 1 . At the Web interface, select the Device Manager tab and then Scheduling from the left navigation menu. 2 . In the event list in the Scheduled Outlet Action section of the Scheduling page, click on the name of the event. 3 . On the Daily/Weekly scheduled action detail page, you can do any of the following: – Change details of the event, such as the name of the event, when it is scheduled to occur, and which outlets are affected.
3 . Type in the information for the following options and click Apply to confirm the changes. Option Description User Name Set the outlet user name. "New User" is reserved and is not allowed. Password Set the outlet user password. User Description Set identification/description of outlet user. Account Status Enable, disable, or delete outlet user's account. Device outlet access Select the outlets the user can access.
Administration: Security Local Users Setting user access (Administration>Security>Local Users>options) For information on the permissions granted to each account type (Administrator, Device User, Outlet User, and Read-Only User), see Types of user accounts. Switched Rack PDU USER’S GUIDE You set the case-sensitive user name and password for each account type in the same manner. Maximum length of each is 10 characters.
APC supports the authentication and authorization functions of RADIUS (Remote Authentication Dial-In User Service). • When a user accesses the Switched Rack PDU or another network-enabled device that has RADIUS enabled, an authentication request is sent to the RADIUS server to determine the user’s permission level. • RADIUS user names used with the Switched Rack PDU are limited to 32 characters. Select one of the following: • RADIUS, then Local Authentication: RADIUS and local authentication are enabled.
RADIUS (Administration>Security>Remote Users>RADIUS) Use this option to do the following: • List the RADIUS servers (a maximum of two) available to the Switched Rack PDU, and the time-out period for each. • Click Add Server, and configure the parameters for authentication by a new RADIUS server. RADIUS Setting Definition RADIUS Server The server name or IP address of the RADIUS server. NOTE: RADIUS servers use port 1812 by default to authenticate users.
See also For examples of the RADIUS users file with Vendor Specific Attributes (VSAs) and an example of an entry in the dictionary file on the RADIUS server, see the APC Security Handbook. 1 . Add the IP address of the Rack PDU to the RADIUS server client list (file). 2 . Users must be configured with Service-Type attributes unless Vendor Specific Attributes (VSAs) are defined. If no Service-Type attributes are configured, users will have read-only access (on the Web interface only).
Supported RADIUS servers APC supports FreeRADIUS, Microsoft Windows 2000 Server®, and Microsoft Windows 2000 RADIUS Server. Other commonly available RADIUS applications may work but have not been fully tested by APC. Inactivity Timeout (Administration>Security>Auto Log Off) Note Switched Rack PDU USER’S GUIDE Use this option to configure the time (3 minutes by default) that the system waits before logging off an inactive user. If you change this value, you must log off for the change to take effect.
Administration: Network Features TCP/IP and Communication Settings TCP/IP settings (Administration>Network>TCP/IP) On the same page, TCP/IP Configuration provides the following options for how the TCP/IP settings will be configured when the Switched Rack PDU turns on, resets, or restarts: Manual, BOOTP, DHCP, and DHCP & BOOTP.
Switched Rack PDU USER’S GUIDE Setting Description Manual The IP address, subnet mask, and default gateway must be configured manually. Click Next>>, and enter the new values. BOOTP A BOOTP server provides the TCP/IP settings. At 32-second intervals, the Rack PDU requests network assignment from any BOOTP server: • If it receives a valid response, it starts the network services.
Setting Description DHCP & BOOTP The default setting. The Switched Rack PDU tries to obtain its TCP/IP settings from a BOOTP server first, and then, if it cannot discover a BOOTP server, from a DHCP server. If it obtains its TCP/IP settings from either server, it switches this setting to BOOTP or DHCP, depending on the type of server that supplied the TCP/IP settings to the Switched Rack PDU. 1.
Following, in hexadecimal format, is an example of a Vendor Specific Information option that contains the APC cookie: Option 43 = 0x01 0x04 0x31 0x41 0x50 0x43 • Boot Mode Transition. Tag 2, Len 1, Data 1/2 This option 43 setting enables or disables the option Remain in DHCP & BOOTP mode after accepting TCP/IP settings, which, by default, is disabled. Switched Rack PDU USER’S GUIDE – A data value of 1 enables the option Remain in DHCP & BOOTP mode after accepting TCP/IP settings.
• Rebinding Time, T2 (option 59): The time that the Rack PDU must wait after an IP address lease is assigned before it can seek to rebind that lease. Other options. The Rack PDU also uses these options within a valid DHCP response. All of these options except the last are described in RFC2132. • Network Time Protocol Servers (option 42): Up to two Network Time Protocol Servers (NTP) servers (primary and secondary) that the Rack PDU can use.
DNS (Administration>Network>DNS>options) Use the options under DNS on the left navigation menu to configure and test the Domain Name System (DNS): • The Switched Rack PDU waits up to 15 seconds for a response from the primary DNS server or the secondary DNS server (if a secondary DNS server is specified). If the Rack PDU does not receive a response within that time, e-mail cannot be sent.
Test.
Switched Rack PDU USER’S GUIDE Web (Administration>Network>Web>options) Option Description access To activate changes to any of these selections, log off from the Rack PDU: • Disable: Disables access to the Web interface. (You must use the control console to re-enable access. Select Network and Web/SSL/TLS. Then for HTTP, select Access and Enabled. For HTTPS access, also select Web/SSL and Enabled.
Switched Rack PDU USER’S GUIDE Option Description ssl certificate Add, replace, or remove a security certificate. Status: • Not installed: A certificate is not installed, or was installed by FTP or SCP to an incorrect location. Using Add or Replace Certificate File installs the certificate to the correct location, /sec on the Switched Rack PDU. • Generating: The Switched Rack PDU is generating a certificate because no valid certificate was found.
Switched Rack PDU USER’S GUIDE Console (Administration>Network>Console>options) Option Description access Choose one of the following for access by Telnet or SSH: • Disable: Disables all access to the control console. • Enable Telnet (the default): Telnet transmits user names, passwords, and data without encryption. • Enable SSH v1 and v2: Do not enable both versions 1 and 2 of SSH unless you require both. They use extensive processing power.
Option Description ssh host key Status indicates the status of the host key (private key): • SSH Disabled: No host key in use: When disabled, SSH cannot use a host key. • Generating: The Rack PDU is creating a host key because no valid host key was found. • Loading: A host key is being activated on the Rack PDU.
ISX Protocol (control console only) Use this option to enable (the default) or disable the APC InfraStruXure (ISX) Protocol. The APC InfraStruXure (ISX) Protocol allows the Switched Rack PDU to communicate with other APC devices, including the InfraStruXure Manager, if your system includes one. SNMP All user names, passwords, and community names for SNMP are transferred over the network as plain text.
Switched Rack PDU USER’S GUIDE Option Description access control You can configure up to four access control entries to specify which NMSs have access to this device. The opening page for access control, by default, assigns one entry to each of the four available SNMPv1 communities, but you can edit these settings to apply more than one entry to any community to grant access by several specific IP addresses, host names, or IP address masks.
SNMPv3 (Administration>Network>SNMPv3>options) For SNMP GETs, SETs, and trap receivers, SNMPv3 uses a system of user profiles to identify users. An SNMPv3 user must have a user profile assigned in the MIB software program to perform GETs and SETs, browse the MIB, and receive traps. To use SNMPv3, you must have a MIB program that supports SNMPv3. Switched Rack PDU USER’S GUIDE The Switched Rack PDU supports only MD5 authentication and DES encryption.
Description access control You can configure up to four access control entries to specify which NMSs have access to this device. The opening page for access control, by default, assigns one entry to each of the four user profiles, but you can edit these settings to apply more than one entry to any user profile to grant access by several specific IP addresses, host names, or IP address masks.
You can change the Port setting to the number of any unused port from 5001 to 32768 for added security. Users must then use a colon (:) to specify the non-default port number. For example, for port 5001 and IP address 152.214.12.114, the command would be ftp 152.214.12.114:5001. FTP transfers files without encryption. For higher security, disable the FTP server, and transfer files with SCP. Selecting and configuring SSH enables SCP automatically.
Administration: Notification and Logging Event Actions (Administration>Notification>Event Actions>options) Types of notification You can configure event actions to occur in response to an event or group of events. These actions notify users of the event in any of several ways: –E-mail notification –SNMPv1 and SNMPv3 traps –Syslog notification Switched Rack PDU USER’S GUIDE • Active, automatic notification. The specified users or monitoring devices are contacted directly.
Configuring event actions Switched Rack PDU USER’S GUIDE Notification Parameters. For events that have an associated clearing event, you can also set the following parameters as you configure events individually or by group, as described in the next two sections. To access the parameters, click the receiver or recipient name. Parameter Description Delay x time before sending If the event persists for the specified time, notification is sent.
When viewing details of an event’s configuration, you can change the configuration, enable or disable event logging or Syslog, or disable notification for specific e-mail recipients, trap receivers, or paging recipients, but you cannot add or remove recipients or receivers.
Active, Automatic, Direct Notification E-mail notification Overview of setup. Use the Simple Mail Transfer Protocol (SMTP) to send e-mail to up to four recipients when an event occurs. To use the e-mail feature, you must define the following settings: • The IP addresses of the primary and, optionally, the secondary Domain Name System (DNS) servers. • The IP address or DNS name for SMTP Server and From Address. . Switched Rack PDU USER’S GUIDE See DNS (Administration>Network>DNS>options).
Setting Description Local SMTP Server The IP address or DNS name of the local SMTP server. From Address The contents of the From field in e-mail messages sent by the Rack PDU: • In the format user@ [IP_address] (if an IP address is specified as Local SMTP Server). • In the format user@domain (if a DNS is configured and the DNS name is specified as Local SMTP Server) in the e-mail messages. NOTE: This definition is required only when SMTP Server is set to Local.
E-mail recipients (Administration>Notification>E-mail>recipients). Identify up to four e-mail recipients. Setting Description To Address The user and domain names of the recipient. To use e-mail for paging, use the e-mail address for the recipient’s pager gateway account (for example, myacct100@skytel.com). The pager gateway will generate the page. To bypass the DNS lookup of the mail server’s IP address, use the IP address in brackets instead of the e-mail domain name, e.g., use jsmith@[xxx.xxx.x.
SNMP traps Trap Receivers (Administration>Notification>SNMP Traps>trap receivers). This option lists, by NMS IP/Host Name, up to the maximum number (six) of trap receivers allowed. • To open the page for configuring a new trap receiver, click Add Trap Receiver. • To specify the trap type for a trap receiver, select either the SNMPv1 or SNMPv3 radio button. For a NMS to receive both types of traps, you must configure two trap receivers for that NMS, one for each trap type.
SNMP Trap Test (Administration>Notification>SNMP Traps>test) Last Test Result. The result of the most recent SNMP trap test. A successful SNMP trap test verifies only that a trap was sent; it does not verify that the trap was received by the selected trap receiver. A trap test succeeds if of the following are true: • The SNMP version (SNMPv1 or SNMPv3) configured for the selected trap receiver is enabled on this device. • The trap receiver is enabled.
Syslog (Logs>Syslog>options) The Rack PDU can send messages to up to four Syslog servers when an event occurs. The Syslog servers record events that occur at network devices in a log that provides a centralized record of events. This user’s guide does not describe Syslog or its configuration values in detail. For more information about Syslog, see RFC3164. See also Switched Rack PDU USER’S GUIDE Identifying Syslog Servers (Logs>Syslog>servers).
Setting Definition Severity Mapping Maps each severity level of Rack PDU events to available Syslog priorities. You should not need to change the mappings. Following are the default settings for the Local Priority settings: • Severe is mapped to Critical. • Warning is mapped to Warning. • Informational is mapped to Info.
Indirect Notification Through Logs or Queries Event log (Logs>Events>options) Displaying and using the event log (Logs>Events>log). View or delete the event log. The log displays events recorded since it was last deleted, in reverse chronological order. By default, all events are logged: You can also use FTP or SCP to view the event log. See How to use FTP or SCP to retrieve log files.
With reverse lookup enabled, when a network-related event occurs, both the IP address and the domain name for the networked device associated with the event are logged in the event log. If no domain name entry exists for the device, only its IP address is logged with the event. Since domain names generally change less frequently than IP addresses, enabling reverse lookup can improve the ability to identify addresses of networked devices that are causing events.
Switched Rack PDU USER’S GUIDE Configuring data log rotation (Logs>Data>rotation). Set up a password-protected data log repository on a specified FTP server. Enabling rotation causes the contents of the data log to be appended to the file you specify by name and location. Updates to this file occur at the upload interval you specify. Parameter Description Data Log Rotation Enable or disable (the default) data log rotation.
The Rack PDU uses a four-digit year for log entries. You may need to select a four-digit date format in your spreadsheet application to display all four digits. If you are using the encryption-based security protocols for your system, use SCP to retrieve the log file. See also Switched Rack PDU USER’S GUIDE If you are using unencrypted authentication methods for the security of your system, use FTP to retrieve the log file.
2 . Use the case-sensitive User Name and Password for Administrator or Device User to log on. For Administrator, apc is the default for User Name and Password. For the Device User, the defaults are device for User Name and apc for Password. 3 . Use the get command to transmit the text of a log to your local drive. ftp>get event.txt or ftp>get data.txt 4 . You can use the del command to clear the contents of either log. ftp>del event.txt ftp>del data.
Administration: General Options Identification (Administration>General>Identification) For more information about MIB-II OIDs, see the PowerNet® SNMP Management Information Base (MIB) Reference Guide, available on the Switched Rack PDU Utility CD and the APC Web site, www.apc.com. Switched Rack PDU USER’S GUIDE Define values for Name (the device name), Location (the physical location), and Contact (the person responsible for the device) used by the Rack PDU’s SNMP agent.
Setting Definition Time Zone Select a time zone. The number of hours preceding each time zone in the list is the offset from Coordinated Universal Time (UTC), formerly Greenwich Mean Time. Update Interval Define how often, in hours, the Rack PDU accesses the NTP Server for an update. Minimum: 1; Maximum: 8760 (1 year). Update Using NTP Now Initiate an immediate update of date and time by the NTP Server.
Use an .ini File (Administration>General>User Config File) Status Reports the progress of the upload. The upload succeeds even if the file contains errors, but a system event reports the errors in the event log. Upload Browse to the customized file and upload it so that the current Rack PDU can use it to set its own configuration. To retrieve and customize the file of a configured Rack PDU, see Retrieving and Exporting the .ini File.
Action Definition Reboot Management Interface Restarts the interface of the Rack PDU. Reset All1 Checkmark Include TCP/IP to reset all configuration values; unmark Include TCP/IP to reset all values except TCP/IP. Reset Only1 TCP/IP settings: Set TCP/IP Configuration to DHCP & BOOTP, its default setting, requiring that the Rack PDU receive its TCP/IP settings from a DHCP or BOOTP server. See TCP/IP settings (Administration>Network>TCP/IP).
About the Rack PDU (Administration>General>About) The hardware information is especially useful to APC Customer Support to troubleshoot problems with the Rack PDU. The serial number and MAC address are also available on the Rack PDU itself. Firmware information for the Application Module and APC OS (AOS) indicates the name, the firmware version, and the date and time each firmware module was created.
APC Device IP Configuration Wizard Capabilities, Requirements, and Installation How to use the Wizard to configure TCP/IP settings • Remotely over your TCP/IP network to discover and configure unconfigured Network Management Cards or devices on the same network segment as the computer running the Wizard.
Use the Wizard Most software firewalls must be temporarily disabled for the Wizard to discover unconfigured Rack PDUs. Launch the Wizard The installation creates a shortcut link in the Start menu to launch the Wizard. Prepare to configure the settings. Before you run the Wizard: 1 . Contact your network administrator to obtain valid TCP/IP settings. Switched Rack PDU USER’S GUIDE Configure the basic TCP/IP settings remotely ® 2 .
on the Transmit Current Settings Remotely screen, if you checkmark Start a Web browser when finished, the default Web browser connects to the Network Management Card or device after the Wizard transmits the settings. 4 . Click Finish to transmit the settings. If the IP address you entered is in use on the network, the Wizard prompts you to enter an IP address that is not in use. Enter a correct IP address, and click Finish. 5 .
How to Export Configuration Settings Retrieving and Exporting the .ini File Summary of the procedure As an Administrator, you can retrieve a dynamically generated .ini file of a Switched Rack PDU’s current configuration and export that file to another Switched Rack PDU or to multiple Switched Rack PDUs. 2 . Retrieve the .ini file from that Rack PDU. 3 . Customize the .ini file (to change at least the TCP/IP settings) and make a copy to export. Switched Rack PDU USER’S GUIDE 1 .
Contents of the .ini file The config.ini file that you retrieve from a Switched Rack PDU contains the following: • Section headings, which are category names enclosed in brackets ([ ]), and under each section heading, keywords, which are labels describing specific Rack PDU settings. • Each keyword is followed by an equals sign and the current value for that parameter’s setting, either the default value (if the value has not been specifically configured) or the configured value.
Detailed procedures Use the following procedures to retrieve the settings of one Switched Rack PDU and export them to one or more other Switched Rack PDUs. Retrieving. To set up and retrieve an .ini file to export: 1 . Configure a Rack PDU with the settings you want to export. To avoid errors, configure the Rack PDU by using its Web interface or control console whenever possible. Directly editing the .ini file risks introducing errors. a. Open a connection to the Rack PDU, using its IP Address.
Customizing. You must customize the file to change at least the TCP/IP settings before you export it. 1 . Use a text editor to customize the file. – Section headings, keywords, and pre-defined values are not case-sensitive, but string values that you define are case-sensitive. – To define values, opening and closing quotation marks are optional, except to enclose values that contain leading or trailing spaces or values which are already enclosed in quotation marks.
Exporting the file to a single Rack PDU. To export the .ini file to another Switched Rack PDU, use any of the file transfer protocols supported by Switched Rack PDUs (including FTP, FTP Client, SCP, and TFTP). The following example uses FTP: 1 . From the folder containing the customized .ini file and its copy, use FTP to log in to the Rack PDU to which you are exporting the .ini file. For example: ftp> open 158.165.4.135 2 . Export the copy of the customized .ini file.
The export to and the subsequent upload by the receiving Rack PDU succeeds even if there are errors. Event text Description Configuration file warning: Invalid keyword on line number. A line with an invalid keyword or value is ignored. Switched Rack PDU USER’S GUIDE Configuration file warning: Invalid value on line number. Configuration file warning: Invalid section on line number. If a section name is invalid, all keyword/value pairs in that section are ignored.
See Contents of the .ini file for information about which values are overridden. The overridden values are device-specific and not appropriate to export to other Rack PDUs. Therefore, you can ignore these error messages. To prevent these error messages from occurring, you can delete the lines that contain the Override keyword and the lines that contain the values that they override. Do not delete or change the line containing the section heading.
File Transfers Introduction Overview To transfer a firmware file to a Rack PDU, see Upgrading Firmware: Methods and Tools. Switched Rack PDU USER’S GUIDE The Switched Rack PDU automatically recognizes binary firmware files. Each of these files contains a header and one or more Cyclical Redundancy Checks (CRCs) to ensure that the data contained in the file is not corrupted before or during the transfer operation. To verify a file transfer, see Verifying Upgrades and Updates.
The APC Operating System (AOS) and application module files used with the Switched Rack PDU share the same basic format: apc_hw0x_type_version.bin • apc: Indicates that this is an APC file. • hw0x: Identifies the version of the Switched Rack PDU that will run this binary file. • type: Identifies whether the file is for the APC Operating System (AOS) or the application module (APP) for the Switched Rack PDU. • version: The version number of the application file.
Manual upgrades, primarily for Linux systems. If all computers on your network are running Linux, you must upgrade the firmware of your Rack PDUs manually, i.e., by using the separate APC firmware modules (AOS module and application module). You can obtain the individual firmware modules you need for a manual firmware upgrade from the support section of the APC Web site, www.apc.com/tools/ download.
Firmware file transfer methods To upgrade the firmware of a Switched Rack PDU: • From a networked computer running a Microsoft Windows operating system, you can use the automated firmware upgrade tool downloaded from the APC Web site. • From a networked computer on any supported operating system, you can use FTP or SCP to transfer the individual AOS and application firmware modules.
Use FTP or SCP to upgrade one Rack PDU Instructions for using FTP. For you to be able to use FTP to upgrade a single Switched Rack PDU over the network: • The Switched Rack PDU must be connected to the network. • The FTP server must be enabled at the Switched Rack PDU. • The Switched Rack PDU must have its TCP/IP settings (System IP, Subnet Mask, and Default Gateway addresses) configured. 1 . Open an MS-DOS command prompt window on a computer that is connected to the network.
address of 150.250.6.10. ftp> open 150.250.6.10 21000 4 . Log on using the Administrator user name and password. (apc is the default for both.) 5 . Upgrade the AOS. For example: ftp> bin ftp> put apc_hw02_aos_XXX.bin 6 . When FTP confirms the transfer, type Quit to close the session. Instructions for using SCP. To use Secure CoPy (SCP) to upgrade the firmware for one Rack PDU: Switched Rack PDU USER’S GUIDE 7 .
Use FTP or SCP to upgrade multiple Rack PDUs. To upgrade multiple Switched Rack PDUs using an FTP client or using SCP, write a script which automatically performs the procedure. For FTP, use the steps in Use FTP or SCP to upgrade one Rack PDU. Use XMODEM to upgrade one Rack PDU 1 . Obtain the individual firmware modules (the AOS module and the application module) from the support section of the APC Web site www.apc.com/tools/ download. 2 .
For information about the format used for application modules, see Firmware files (Switched Rack PDU). Upgrading the firmware will not interfere with the operation of the outlets. The Rack PDU will restart when the download is complete.
Verify the version numbers of installed firmware Switched Rack PDU USER’S GUIDE Use the Web interface to verify the versions of the upgraded firmware modules by selecting the Administration tab, General on the top menu bar, and About on the left navigation menu, or use an SNMP Get to the MIB II sysDescr OID.
Product Information Two-Year Factory Warranty This warranty applies only to the products you purchase for your use in accordance with this manual. Switched Rack PDU USER’S GUIDE Terms of warranty APC warrants its products to be free from defects in materials and workmanship for a period of two years from the date of purchase. APC will repair or replace defective products covered by this warranty.
Exclusions Switched Rack PDU USER’S GUIDE APC shall not be liable under the warranty if its testing and examination disclose that the alleged defect in the product does not exist or was caused by end user’s or any third person’s misuse, negligence, improper installation or testing.
Switched Rack PDU USER’S GUIDE IN NO EVENT SHALL APC, ITS OFFICERS, DIRECTORS, AFFILIATES OR EMPLOYEES BE LIABLE FOR ANY FORM OF INDIRECT, SPECIAL, CONSEQUENTIAL OR PUNITIVE DAMAGES, ARISING OUT OF THE USE, SERVICE OR INSTALLATION, OF THE PRODUCTS, WHETHER SUCH DAMAGES ARISE IN CONTRACT OR TORT, IRRESPECTIVE OF FAULT, NEGLIGENCE OR STRICT LIABILITY OR WHETHER APC HAS BEEN ADVISED IN ADVANCE OF THE POSSIBILITY OF SUCH DAMAGES.
Index A Configuring RADIUS authentication 55 About options for information about the Management Card 93 About System 32 Access enabling or disabling methods of access Administration 67 65 D General menu 89 Network menu 58 Notification menu 74 Security menu 53 Switched Rack PDU USER’S GUIDE to the control console to the Web interface Contact identification (whom to contact) 89 Control console configuring access 67 Device Manager menu 20 navigating menus 19 refreshing menus 19 Customizing user con
using FTP del command 88 using FTP or SCP to retrieve 86 Disable e-mail to a recipient 79 encryption algorithms for SSH 67 reverse lookup 84 SSL cipher suites 65 Telnet 67 DNS defining host and domain names 63 query types 64 specifying DNS servers by IP address 63 contents 86 importing into spreadsheet 86 F Facility Code (Syslog setting) 82 Firmware benefits of upgrading 104 file transfer methods 107 FTP or SCP 108 XMODEM 110 files for Network Management Card 104 obtaining the latest version 105 upgrad
status 68 status 18 Up Time 17 User access identification 17 Host name of trap receivers 80 I Menus Data 29 Device Manager 20 Events 29 General 89 Help 30 Logs 74 Network 29, 58 Notification 74 Security 53 System 30 top menu bar 25 Identification (Name, Location, and Contact) in Web interface 89 Identification fields on main screen 17 Inactivity timeout 57 ini files, See User configuration files Initiator outlet groups 34 keywords user configuration file 98 Message Generation (Syslog setting) 82 L S
typical configurations 41 Outlet Name 46 Outlet settings configuring 46 controlling outlets 44 Outlets global 34 Override keyword, in user configuration file 98 P Paging S by using e-mail 79 Passwords default for each type of account 22 defining for each account type 53 Switched Rack PDU USER’S GUIDE Reboot Management Interface 92 Recent Events Device Events on home page 28 Recipient SMTP server 79 Remote Monitoring Service 92 Remote Users authentication 54 setting user access 53 Reset All 92 Rese
without using a utility 104 Synchronize with NTP Server, (Date & Time) 89 Syslog 82 identifying the Syslog server 82 mapping event severity to Syslog priorities 83 settings 82 test 83 URL address formats 23 User access identification, control console interface 17 User configuration files contents 98 customizing 100 exporting system time separately 100 overriding device-specific values 98 retrieving and exporting 97 system event and error messages 101 using the APC utility to retrieve and transfer the fil
Customer support for this or any other APC product is available at no charge in any of the following ways: • Visit the APC Web site to access documents in the APC Knowledge Base and to submit customer support requests. – www.apc.com (Corporate Headquarters) Connect to localized APC Web sites for specific countries, each of which provides customer support information. – www.apc.com/support/ Global support searching APC Knowledge Base and using e-support.
Copyright 990-1368E-001 02/2007 Switched Rack PDU USER’S GUIDE Entire contents copyright 2007 American Power Conversion Corporation. All rights reserved. Reproduction in whole or in part without permission is prohibited. APC, the APC logo, InfraStruXure, and PowerNet are trademarks of American Power Conversion Corporation. All other trademarks, product names, and corporate names are the property of their respective owners and are used for informational purposes only.
