Belkin OmniView Serial Console Server User Manual V1.
P75598- Belkin OmniView Serial Console Contents 1. Product Overview .................................................................................................. 5 1.1 Introduction......................................................................................................... 5 1.2 Main Feature ...................................................................................................... 5 1.3 2. Hardware Setup .......................................................................
P75598- Belkin OmniView Serial Console 5.1.7 Break Function......................................................................................... 36 5.2 Connection ....................................................................................................... 37 5.2.1 Telnet Java Applet ................................................................................... 38 5.3 Serial-to-Serial Function ................................................................................... 41 6.
P75598- Belkin OmniView Serial Console Figures Figure 1 Figure 2 Figure 3 Figure 4 Figure 5 Figure 6 Front Panel......................................................................................................... 8 Rear Panel ......................................................................................................... 8 Cabling Setup................................................................................................... 13 Chain Rule of IP Filter ...............................
P75598- Belkin OmniView Serial Console 1. Product Overview 1.1 Introduction Thank you for purchasing the Belkin OmniView Serial IP Console Server (Console Server). This device provides administrators secure monitoring and control of servers, routers, switches, and other serial devices from anywhere on the corporate TCP/IP network, over the Internet, or through dial-up modem connections, even when the server is unavailable through the network.
P75598- Belkin OmniView Serial Console Simple ASCII or VT100 terminal emulation is not sufficient to manage these wide-ranging device types. Today's data centers contain a broad mix of Unix, Linux, RISC, mainframe, and Windows servers, as well as other serially managed devices such as router, gateway, firewall, PBX, UPS, SAN and NAS devices, and intelligent power strips.
P75598- Belkin OmniView Serial Console Java Plug in The Serial Console web interface requires installing JRE (Java Runtime Environment) v6.0 and above. You can get the latest Java Software from the website http://www.java.com/en/download/manual.
P75598- Belkin OmniView Serial Console 2. Unit Display Diagrams 2.
P75598- Belkin OmniView Serial Console 2.
P75598- Belkin OmniView Serial Console Dial-in modem Serial-to-serial (on port 16 only) TCP, UDP, IP, ARP, ICMP, HTTP/HTTPS, Telnet, DHCP/BOOTP, PPP SMTP, DNS, NTP Protocols Protocol Relative Function Dynamic DNS TCP Inactivity Time (TCP keep-alive time) Serial Inactivity Time Port Monitoring Password Access IP Filtering SSHv2 Security HTTPS / SSL Local user database PAP/CHAP (for modem dial-in) Authentication RADIUS Local Console (menu or command line) SSH, Telnet Web pages (HTTP/HTTPS) Firmware upgra
P75598- Belkin OmniView Serial Console • the power source - Connect only to the power source specified on the unit. When multiple electrical components are installed in a rack, ensure that the total component power ratings does not exceed circuit capabilities Cable-Length Requirements (for CAT5) Serial binary data signals (RS-232) transmit best up to distances of 50 feet (15m). Beyond that length, the probability of signal degradation increases.
P75598- Belkin OmniView Serial Console MAC Address Serial Number The Switch includes adjustable mounting brackets ideal for installation in 19-inch racks. The mounting brackets feature three adjustment positions that allow you to set the Switch’s face flush with the ends of the rails, or to extend the Switch past the front of the rails. Please follow these simple steps to achieve the desired adjustment. Rack Mounting 1.1 Determine how far you would like the Serial Console to protrude from the rack.
P75598- Belkin OmniView Serial Console 1. Power down the target device(s) the will be connected to your Serial Console 2. Connect the Ethernet cable to the to the port labeled LAN 3. Locate the included power cord and plug the appropriate end into the power socket on the rear of the Serial Console. Plug the other end into an appropriate AC wall outlet. Note: Allow about 100 seconds for the Serial Console to complete the bootup process. 4.
P75598- Belkin OmniView Serial Console or through the local console port. The Serial Console offers support for both Dynamic Host Configuration Protocol (DHCP) and static IP addressing. Belkin recommends that IP address be reserved for the Serial Console and that it remains static while connected to the network. Web Browser Interface The web interface provides an easy way to configure the Serial Console. The administrator can configure all features through the web.
P75598- Belkin OmniView Serial Console (SSL). When first connecting to the Switch’s HTTPS configuration page, two browser security warnings may appear. Click “Yes” on both warnings. Fig.
P75598- Belkin OmniView Serial Console Fig. 3 Main-Connect Page Step 3 Network Configuration Click on Network to go to open the Network-Configuration page (see Fig. 4). Fig. 4 Network Configuration Page Here you can assign a static IP and other network settings.
P75598- Belkin OmniView Serial Console will time-out and terminate the session. Assigning IP from the Local Console Port - VT-100 (Console, Telnet, SSH) The Serial Console also offers a user-friendly menu-driven Command Line interface. You can simply connect a VT-100 terminal to the local console port to access to the Serial Console. This is useful when you do not know the network settings of the Serial Console, and can not access it.
P75598- Belkin OmniView Serial Console The following figure depicts the structure of the interface.
P75598- Belkin OmniView Serial Console Network > IP Config The following page shows the IP configuration items. 1. For IP mode -- you can press SPACE bar to select Static mode or DHCP mode. 2. For IP Address, Subnet mask, Default Gateway, Primary DNS, and Secondary DNS -- you can change these network settings. 3. After changing the settings, the final enter, the Serial Console will prompt to confirm YES or NO. If select YES, the Serial Console will reboot and save the settings into the Flash memory.
P75598- Belkin OmniView Serial Console Note: Only the admin user has the privilege to login to VT100. All the other users are not authorized to make configuration with VT100. 2.5 Web Browser Management Interface The Serial Console supports both HTTP and HTTPS (HTTP over SSL) protocols.
P75598- Belkin OmniView Serial Console Where available the page will allow the user to Apply or Cancel their actions. To apply all changes, select Apply and the new values will be applied to the configuration. If you do not want to save the new values, then simply click Cancel and all changes made will be removed and the previous values restored. 3. Network You can configure the network IP settings via VT-100 or web interface. This section describes configuration through the web interface. 3.
P75598- Belkin OmniView Serial Console There are two types of IP assignments you can choose from: Static IP DHCP (Dynamic Host Configuration Protocol) The unit ships with DHCP set to default. If no DHCP server is found on your network, the Switch will boot with the following static IP address: 192.168.2.156. The new IP configuration setting can be saved by clicking Save & Reboot. 3.
P75598- Belkin OmniView Serial Console The IP address/Mask specifies the host range by entering base host IP address followed by / and subnet mask. The host IP addresses to be filtered based on the rule defined. The table below provides examples of IP address/Mask settings. Specified host range Any host 192.168.2.120 192.168.2.1 ~ 192.168.2.254 192.168.0.1 ~ 192.168.255.254 192.168.2.1 ~ 192.168.1.126 192.168.2.129 ~ 192.168.2.254 Base Host IP address 0.0.0.0 192.168.2.120 192.168.2.0 192.168.0.
P75598- Belkin OmniView Serial Console Figure 2 Chain Rule of IP Filter You can add a new IP filtering rule by setting the properties at adding line and then clicking the button Add. You can remove a rule by clicking the button Remove. In the example above, the rules applied in the following order: #1. Those hosts belonging to subnet 192.168.2.x are allowed to access to the Serial Console (through http port 80). #2. All hosts are not allowed to access to the Serial Console (through http port 80).
P75598- Belkin OmniView Serial Console services simultaneously. You can select user authentication method for the web login. The Serial Console currently provides authentication methods of Local and RADIUS. 3.3.1 Local The Serial Console by default points to the local database for the web server login user authentication. 3.3.2 RADIUS and Local The Serial Console refers to RADIUS server for user account authentication first.
P75598- Belkin OmniView Serial Console Figure 3 Dynamic DNS Dynamic DNS service is provided by various ISPs and organizations to deal with the above issue. By using a Dynamic DNS service, you can access the Serial Console through the hostname registered in the Dynamic DNS Server regardless of any IP address change. By default, the Serial Console only supports Dynamic DNS service offered at Dynamic DNS Network Services, LLC (www.dyndns.org).
P75598- Belkin OmniView Serial Console set to Local, the unit will use its own user list to authenticate a user. If configured otherwise, the Serial Console will request authentication from the external authentication servers (i.e. RADIUS) Figure below shows conceptually the user authentication process when using an external authentication server. Figure 4 RADIUS Radius server configuration Note: In order to make RADIUS service effective, a RADIUS server must be installed prior use.
P75598- Belkin OmniView Serial Console 3.6 HTTPS/SSL The Serial Console supports both HTTP and HTTPS (HTTP over SSL) services simultaneously. You can to enable or disable security function of each port individually. HTTPS provides a secure, encrypted web interface over SSL (secure sockets layer). The following steps should be used for HTTPS protocol: 1. Change the URL from “http://xxx.xxx.xxx/” to “https://xxx.xxx.xxx/”. 2. After the connection is established, your browser will display a “Lock” icon.
P75598- Belkin OmniView Serial Console 4. Serial 4.1 Configuration Under the Serial menu heading, click Configuration to show the port summary list. Note that if the Serial Port is disabled, Serial port configuration panel will display the port in dark grey font. An enabled serial port will be displayed in white bold font. 4.1.1 Port Authentication Authentication is the process of identifying an individual, usually based on a username and password.
P75598- Belkin OmniView Serial Console 4.1.2 Port Enable/Disable Each serial port can be individually enabled or disabled. A disabled serial port cannot be accessed by user. User can reset the serial port to default settings by clicking the button Set to default. 4.1.3 Port Title Users can enter descriptive information for each port based on the device attached to it.
P75598- Belkin OmniView Serial Console We can use the shortcut --Jump to-- on the upper-right corner to select and configure a different port. 4.1.4 Operation Modes The Serial Console unit provides four types of operation modes. These are described below. Notes: The last port (e.g., Port #16) can also be used as External ESP (Entry Serial Port) in Serial-to-Serial operation mode. Refer to the section Serial-to-Serial Function for details.
P75598- Belkin OmniView Serial Console 4.1.4.1 Console Server Mode Configuring a serial port as a console server creates a TCP socket on the unit that listens to a Telnet or SSH client connection. When you connect to the TCP socket, you have access to the device attached to the serial port as if the device were connected directly to the network. Data stream can be sent back and forth between the device and the Telnet/SSH client program. RawTCP is also supported with the Console Server Mode.
P75598- Belkin OmniView Serial Console Protocol Select Telnet, SSH or Raw TCP as the protocol. If the users are using a Telnet client program, select Telnet. If the users are using an SSH client program, select SSH. When Raw TCP is selected, direct TCP socket communication is available between the Serial Console and the remote host. Inactivity timeout Enable this feature to avoid a client holding on to a TCP connection while there has been no activity on a serial port for a long period of time.
P75598- Belkin OmniView Serial Console In order to terminate a Telnet/SSH/RawTCP session in Terminal Server Mode, you may use these three control key sequences (Ctrl-Z / Ctrl-X / Ctrl-C). 4.1.4.3 Dial-in Modem Mode In this mode, the Serial Console assumes an external modem is attached to the serial port and waits for a dial-in connection from a remote site.
P75598- Belkin OmniView Serial Console 4.1.6 Port Logging While in Console Server mode, the data received from the tracking serial port will be buffered in the unit’s memory. The Port logging feature is valid and visible only if the operation mode of the serial port is configured to console server mode.
P75598- Belkin OmniView Serial Console keyword from the port logging data and send an email to an administrator by Port event handling configurations. Each reaction can be configured individually upon each keyword. Reaction can be an email delivery. Click Port event handling The memory buffer size for logging data is 192K per port. If the log data grows larger than the memory size, the new data will overwrite the old data. 4.1.
P75598- Belkin OmniView Serial Console 4.2 Connect The Serial Console provides web-based access to a target serial device without requiring a separate Telnet client program. This is done through a Java. A Java applet is used to provide the text-based user interface to access the serial port. This Java applet supports only Telnet in Console Server mode. The user cannot access the serial port via the web when the host mode of the port is set to Raw TCP connection.
P75598- Belkin OmniView Serial Console 4.2.1 Telnet Java Applet 1. Select Telnet protocol under Serial > Configuration > Operation mode. Select the Connect from the top menu and click on the terminal icon on the left. The Terminal emulation application will pop in a new window and prompt you to login. If you see a blank window check your System for Java version compatibility.
P75598- Belkin OmniView Serial Console 2. Enter user name and password to log in, so can start to use it as if running a Telnet client program (e.g., Telnet DOS program, PuTTY).
P75598- Belkin OmniView Serial Console Note: The active Serial port’s name will appear on the window bar. A connection status indicator will also appear on the lower right side of the window.
P75598- Belkin OmniView Serial Console 4.3 Serial-to-Serial Function The Serial-to-Serial function allows you to use a simple terminal device (video display and keyboard) to access and control any device connected to the Serial Console on ports 1 through 15. You may also use an external Terminal Converter like the Belkin F1D084E, to connect your Serial Console to a KVM switch and consolidate the control 4.3.1 Installation To install, connect our terminal device to port 16 of the Serial console.
P75598- Belkin OmniView Serial Console timeout, and press SPACE bar to select the setting for the other items. Note: In order to show the following Serial-to-Serial configuration screen, you need to be sure to Enable the Serial-to-Serial function. The default baud rate is fixed as 9600 8N1 (not re-configurable) in order to get the best compatibility with third party terminal monitor device. 5. Confirm the choice the screen below will appear.
P75598- Belkin OmniView Serial Console 6. Type in user name and password. Then the data channel connection between port 16 and the selected serial port will be built. So the administrator can control the serial device or server. 7. Press Cntl and C keys to get out of Serial-to-Serial function and back to main console screen. The web page also gives read-only settings of Serial-to-Serial function, it will automatically changed according to the setting change on VT100 console.
P75598- Belkin OmniView Serial Console firmware versions, MAC address, current time, and the network settings. Data cannot be changed from this page. This page refreshes automatically every 10 seconds. 5.2 System Logging You may enable or disable system logging process and set the log buffer size. The system log buffer‘s default value is 50K bytes and can be allocated up top 300KB maximum. If the logged data grows larger than the pre-allocated buffer size, the new data will overwrite the old data.
P75598- Belkin OmniView Serial Console The following system events are logged in volatile storage cyclically: i) SYS (system startup, idle timeout, login account authentication) ii) SNTP (network time synchronization) iii) LOG (clear system event log) iv) PORT (serial port access authentication) v) DDNS (register dynamic IP address event) 45 / 66
P75598- Belkin OmniView Serial Console 6. System Administration 6.1 User Administration At startup of the AP, the system will prompt user to enter the password to access to the system. The administrator can add or remove a user easily via the web pages.
P75598- Belkin OmniView Serial Console Figure below shows the Add User screen. The new user will now appear under the User Name list. 6.1.
P75598- Belkin OmniView Serial Console Check the users at the User administration screen Click the button Remove 6.1.3 Edit the Access Control list (ACL) The Serial Console Provides ACL (Access Control List) security where you can specify user access discretely by individual ports only, instead of all ports.
P75598- Belkin OmniView Serial Console 6.1.4 Change password To change the parameters of the user account, open the edit user screen by selecting the user name at the User Configuration screen and then edit the parameters of user account like adding user. 6.2 Date and Time (NTP) The Serial Console maintains current date and time information. The clock and calendar settings are backed up by an internal battery. The user can change the current date and time.
P75598- Belkin OmniView Serial Console is maintained by the internal battery backup. By convention, weather scientists use one time zone, Greenwich Mean Time (GMT). This time is also known as Universal Time (UTC). You may set the time zone and the time offset from UTC depending on the user location to set system date and time exactly, and the time offset from UTC. The Time offset value x could be positive or negative integer. Please refer to the website http://time_zone.tripod.
P75598- Belkin OmniView Serial Console Click Browse to search the firmware file from the explorer window. Navigate through your PC and select firmware file. Click Open to confirm your selection. Once the appropriate firmware file is selected, click Upgrade to initiate the firmware upgrade process. The web interface will display the progress bar to indicate the proceeding of the file transfer.
P75598- Belkin OmniView Serial Console 6.4 SSL Certificate A SSL certificate is a digital identification which contains information to attest that certificate belongs to specific person, organization, server or other entity noted in the certificate. The Serial Console supports secure HTTP (a.k.a https) to make configuration change via web page. The server side SSL certificate identifies the Serial Console so that you can rely on the certificate and make the configuration change confidently.
P75598- Belkin OmniView Serial Console Browse prepared CA files (follow procedure in Appendix E to prepare exactly the three CA files with same assigned filenames) and upload these files to the Serial Console. Please double check each files before uploading. A false CA file suite may disable secure HTTP function. Notes: If CA files are damaged, users can roll back the CA files to factory default by System Æ Reset to Factory Default Setting. The old CA files will be recovered.
P75598- Belkin OmniView Serial Console The other way to tell a secure web connection from unsafe one is by looking up a lock symbol on your browser (bottom-right of IE browser). You can double click on the symbol to examine the detail information of server side certificate.
P75598- Belkin OmniView Serial Console Once you have prepared a publicly signed CA suite of files, upload them from the SSL Certificate page. A system reboot is required to take into effect. The following example demonstrates a publicly signed certificate and information registered to certificate authority (VeriSign).
P75598- Belkin OmniView Serial Console 56 / 66
P75598- Belkin OmniView Serial Console 6.5 Reset to Factory Default Settings To roll back to factory default settings, click on Apply . 6.6 Reboot You can trigger the Serial Console to perform a software reboot via network.
P75598- Belkin OmniView Serial Console function is mandatory when CA certificate upload is complete.
P75598- Belkin OmniView Serial Console 7. Technical Data 7.1 Default Settings Server Name DHCP IP Address Net Mask Gateway BelkinSC Enabled 192.168.2.156 255.255.255.0 192.168.2.
P75598- Belkin OmniView Serial Console F1D123 (RJ45F – DB25M DCE) (Insert Pin out table here) F1D124 (RJ45F – RJ45M CISCO) (Insert Pin out table here) Appendix B: Ethernet pin-outs (RJ-45) Standard Ethernet Cable RJ-45 Pin-out 60 / 66
P75598- Belkin OmniView Serial Console Appendix C: Well-Known TCP/UDP Port Numbers Port numbers are divided into three ranges: Well Known Ports, Registered Ports, and Dynamic and/or Private Ports. Well Known Ports are those from 0 through 1023. Registered Ports are those from 1024 through 49151. Dynamic and/or Private Ports are those from 49152 through 65535. Well Known Ports are assigned by IANA, and on most systems, can only be used by system processes or by programs executed by privileged users.
P75598- Belkin OmniView Serial Console Appendix D: Protocol Glossary BOOTP (Bootstrap Protocol) Similar to DHCP, but for smaller networks. Automatically assigns the IP address for a specific duration of time. CHAP (Challenge Handshake Authentication Protocol) A secure protocol for connecting to a system; it is more secure than the PAP. DHCP (Dynamic Host Configuration Protocol) Internet protocol for automating the configuration of computers that use TCP/IP.
P75598- Belkin OmniView Serial Console computer using SNMP. NTP (Network Time Protocol) A protocol used to synchronize time on networked computers and equipment. PAP (Password Authentication Protocol) A method of user authentication in which the username and password are transmitted over a network and compared to a table of name-password pairs. PPP (Point-to-Point Protocol) A protocol for creating and running IP and other network protocols over a serial link.
P75598- Belkin OmniView Serial Console Appendix E: Creating CA files The Serial Console server supports secure web page configuration (a.k.a. https). There are two types of certificate files for server side authentication. self-signed : Users can create the certificate files by themselves. The downside is that the client will be prompted to accept a certificate signed by an authority not known to the browser.
P75598- Belkin OmniView Serial Console Here is an example prompt: Country Name State or Province Name City or Locality Organization Name Prolix Organizational Unit Common Name (SERVER HOST NAME) Server Admin's email address ii) Strip pass phrase openssl rsa -in cakey.pem -out cakey-nopassword.pem iii) Combine the key and X.509 certificate files into server.pem cat cakey-nopassword.pem cacert.pem > server.
P75598- Belkin OmniView Serial Console openssl toolkit will prompt user with message to guide user to fill out a registration form. Once it is complete users can submit the CSR file to www.verisign.com for testing or refer to http://www.hitrust.com.tw/hitrustexe/frontend/default_tw.asp (located in Taiwan) to apply for a signed certificate. Get the certificate and name the file as cacert.pem iii) Strip pass phrase openssl rsa –in cakey.pem –out cakey-nopassword.pem iv) Combine the key and X.
