APC AP7900 - Manual

® USER’S GUIDE Switched Rack PDU 2 • Four levels of user access accounts—Administrator, Device Manager, Read Only User, and Outlet User • Event and data logging—the event log is accessible by Telnet, Secure CoPy (SCP), File Transfer Protocol (FTP), serial connection, or Web browser (using HTTPS acce...

® USER’S GUIDE Switched Rack PDU 3 Access Procedures Overview The Switched Rack PDU has two internal interfaces (control console and Web interface) that allow you to manage the Rack PDU. The SNMP interface also allows you to use an SNMP browser with the PowerNet ® Management Information Base (MIB) t...

® USER’S GUIDE Switched Rack PDU 4 Types of user accounts The Rack PDU has four levels of access (Administrator, Device Manager, Read-Only User, and Outlet User), all of which are protected by password and user name requirements. • An Administrator can use all of the management menus available in th...

® USER’S GUIDE Switched Rack PDU 6 How to Recover From a Lost Password You can use a local computer, a computer that connects to the Rack PDU or other device through the serial port to access the control console. 1. Select a serial port at the local computer, and disable any service that uses that p...

® USER’S GUIDE Switched Rack PDU 7 7. From the Control Console menu, select System , then User Manager . 8. Select Administrator , and change the User Name and Password settings, both of which are now defined as apc . 9. Press C TRL -C , log off, reconnect any serial cable you disconnected, and rest...

® USER’S GUIDE Switched Rack PDU 8 Upgrading Firmware through a Serial Connection You can use a local computer that connects to the Rack PDU through the serial port on the front panel of the unit. 1. Select a serial port at the local computer, and disable any service which uses that port. 2. Use the...

® USER’S GUIDE Switched Rack PDU 9 9. In the terminal program, send the file using the XMODEM protocol. When the transfer finishes, the console will prompt you to restore the baud rate to normal. The Rack PDU will restart when the download is complete. Caution Do not interrupt the download. Upgradin...

® USER’S GUIDE Switched Rack PDU 10 Front Panel Single-phase Three-phase Three-phase Switched Rack PDUs have one of the following two front panels:

® USER’S GUIDE Switched Rack PDU 12 Link-RX/TX (10/100) LED This LED indicates the network status.  Digital Display Displays the current (amps) for the phase or bank indicated by the illuminated Load Indicator LED. On 3-phase units, the Digital Display will cycle through the phases or banks, displa...

® USER’S GUIDE Switched Rack PDU 13 Status LED This LED indicates the network status of the Rack PDU. Load indicator LED The load indicator LED identifies overload and warning conditions for the displayed phase or bank. Condition Description Off The Rack PDU has no power. Solid Green The Rack PDU ha...

® USER’S GUIDE Switched Rack PDU 14 Watchdog Features Overview To detect internal problems and recover from unanticipated inputs, the Rack PDU uses internal, system-wide watchdog mechanisms. When it restarts itself to recover from an internal problem, a System: Warmstart event is recorded in the eve...

® USER’S GUIDE Switched Rack PDU 15 Control Console How to Log On Overview You can use either a local (serial) connection, or a remote (Telnet or SSH) connection to access the control console. Use case-sensitive User Name and Password entries to log on (by default, apc and apc for an Administrator, ...

® USER’S GUIDE Switched Rack PDU 16 Remote access to the control console You can access the control console through Telnet or Secure SHell (SSH), depending on which is enabled. (An Administrator can enable these access methods through the Telnet/SSH option of the Network menu.) By default, Telnet is...

® USER’S GUIDE Switched Rack PDU 17 Local access to the control console You can use a local computer that connects to the Rack PDU through the serial port on the front panel of the unit. 1. Select a serial port at the local computer, and disable any service which uses that port. 2. Use the supplied ...

® USER’S GUIDE Switched Rack PDU 18 Main Screen Example main screen The main screen that is displayed when you log on to the control console of a Rack PDU: User Name : apcPassword : *** American Power Conversion Network Management Card AOS v2.6.4(c) Copyright 2002 All Rights Reserved Rack PDU APP v2...

® USER’S GUIDE Switched Rack PDU 19 Information and status fields Main screen information fields. • Two fields identify the APC operating system (AOS) and application (APP) firmware versions. The application firmware uses a name that identifies the type of device that connects to the network. In the...

® USER’S GUIDE Switched Rack PDU 20 Main screen status fields. • A Stat field reports the Rack PDU status. Stat : P+ N+ A+ • A Rack PDU model and name field reports the status of the Rack PDU. For example: Switched Rack PDU: Communication Established P+ The APC operating system (AOS) is functioning ...

® USER’S GUIDE Switched Rack PDU 21 Control Console Menus Menu structure The menus in the control console list options by number and name. To use an option, type the corresponding number and press E NTER , then follow any on-screen instructions. For menus that allow you to change a setting, you must...

® USER’S GUIDE Switched Rack PDU 22 Main menu The main control console menu has options that provide access to the management features of the control console: 1- Device Manager 2- Network 3- System 4- Logout s Device Manager option This option accesses the Device Manager menu. Select the components ...

® USER’S GUIDE Switched Rack PDU 23 Network option To do any of the following tasks, see Network Menu : • Configure the TCP/IP settings for the Rack PDU or, when the Rack PDU will obtain its TCP/IP settings from a server, configure the settings for the type of server (DHCP or BOOTP) to be used. • Us...

® USER’S GUIDE Switched Rack PDU 24 Web Interface How to Log On Overview You can use the DNS name or System IP address of the Switched Rack PDU for the URL address of the Web interface. Use your case-sensitive user name and password settings to log on. The default user name differs by account type: ...

® USER’S GUIDE Switched Rack PDU 25 Supported Web browsers As your browser, you can use Microsoft ® Internet Explorer (IE) 5.0 (and higher) or Netscape ® 4.0.8 (and higher, except Netscape 6. x ) to access the Rack PDU through its Web interface. Other commonly available browsers also may work but ha...

® USER’S GUIDE Switched Rack PDU 26 URL address formats Type the Rack PDU’s DNS name or IP address in the Web browser’s URL address field and press E NTER . Except when you specify a non-default web server port in Internet Explorer, http:// or https:// is automatically added by the browser. • For a ...

® USER’S GUIDE Switched Rack PDU 27 Summary Page When you log on to the Web interface at the Switched Rack PDU, the status view is at the right side of the screen, the quick status tab is at the upper right, and the navigation menu is at the left. Status The Status view has three sections: • The Dev...

® USER’S GUIDE Switched Rack PDU 28 Quick status tab The quick status tab is displayed at the upper right on every page in the Web interface. The tab shows active alarms and warnings and a link to the online help. Click the help icon to access the online help for the displayed page. Click the green ...

® USER’S GUIDE Switched Rack PDU 29 Navigation Menu Overview On the Web interface, the navigation menu (left frame) has the following elements: • IP address of the Rack PDU• Menus to manage the Rack PDU and its components: – Switched Rack PDU menu with Configuration and Scheduling as options – Outle...

® USER’S GUIDE Switched Rack PDU 30 Selecting a menu to perform a task • To do the following, see Switched Rack PDU Settings : – Configure the overload and low load thresholds for each phase or bank. – Configure the Overload Outlet Restriction for each phase or bank. – Set the Name , Location , and ...

® USER’S GUIDE Switched Rack PDU 31 • To do the following, see Network Menu : – Configure new TCP/IP settings for the Rack PDU.– Identify the Domain Name System (DNS) Server, test its network connection, and enable or disable DNS Reverse Lookup Event Logging (which logs the domain name of the device...

® USER’S GUIDE Switched Rack PDU 32 Links menu Provides three user-definable URL link options. By default, these links access the following APC Web pages: • APC’s Web Site accesses the APC home page. • Testdrive Demo accesses a demonstration page where you can use samples of APC Web-enabled products...

® USER’S GUIDE Switched Rack PDU 33 Device and Outlet Management Menus How to Configure and Control Outlet Groups Outlet group terminology An outlet group consists of outlets that are logically linked together on the same Switched Rack PDU. Outlets that are in an outlet group turn on, turn off, and ...

® USER’S GUIDE Switched Rack PDU 34 Purpose and benefits of outlet groups By using groups of synchronized outlets on Switched Rack PDUs, you can ensure that outlets turn on, turn off, and reboot in a synchronized manner. Synchronizing control group actions through outlet groups provides the followin...

® USER’S GUIDE Switched Rack PDU 35 System requirements for outlet groups To set up and use synchronized outlet control groups: • You need a 10/100Base-T TCP/IP network, with an Ethernet hub or switch that has a power source not shared by the computers or other devices being synchronized. • If outle...

® USER’S GUIDE Switched Rack PDU 36 Rules for configuring outlet groups For a system that uses outlet groups, the following rules apply: • A Switched Rack PDU can have more than one outlet group, but an outlet can belong to only one outlet group. • A local outlet group, which has no global outlet, m...

® USER’S GUIDE Switched Rack PDU 37 How to enable outlet groups From the Outlets menu in the Web interface, select Outlet Groups , configure the following parameters, and click Apply . Enable creation of outlet groups. Enable support for global outlet groups (linked groups). How to create a local ou...

® USER’S GUIDE Switched Rack PDU 38 How to create multiple global outlet groups (Web interface) To set up multiple global outlet groups that link to outlet groups on other Switched Rack PDUs: 1. From the Outlets menu in the Web interface, select Outlet Groups . 2. Make sure outlet groups are enabled...

® USER’S GUIDE Switched Rack PDU 39 Typical outlet group configurations The following configuration shows two Switched Rack PDUs, each with eight outlet groups. Each outlet group consists of a single global outlet. Each outlet group  on the first Switched Rack PDU is linked to the outlet group  in...

® USER’S GUIDE Switched Rack PDU 41 Verify your setup and configuration for global outlet groups To ensure that your setup meets all system requirements for outlet group and that you have configured the outlet groups correctly, select Outlet Groups from the Outlets menu in the Web interface to view ...

® USER’S GUIDE Switched Rack PDU 42 Outlet Settings for Outlets and Outlet Groups How to initiate a control action Web interface. To control the outlets on your Switched Rack PDU 1. Select Outlets , and then Control on the navigation menu. 2. Mark the check-boxes for each individual outlet or outlet...

® USER’S GUIDE Switched Rack PDU 43 Control actions you can select. t Option Description No Action (Web interface only) Do nothing. On Immediate Apply power to the selected outlets. On Delayed Apply power to each selected outlet according to its value for Power On Delay . † Off Immediate Remove powe...

® USER’S GUIDE Switched Rack PDU 44 How to configure outlet settings and outlet name Settings that you can configure. The following settings are available in both the Web interface and control console unless otherwise indicated: Setting Description Power On Delay Set the number of seconds that the R...

® USER’S GUIDE Switched Rack PDU 46 Switched Rack PDU Settings Configure Load Thresholds Web interface. 1. Select Switched Rack PDU from the navigation menu. 2. Click Configure in the Load Management section. 3. Set Overload Alarm Threshold , Near Overload Warning Threshold , Low Load Warning Thresh...

® USER’S GUIDE Switched Rack PDU 47 How to configure Device Settings Web interface. Select Configuration on the Switched Rack PDU menu. Then, under Device Settings, click the Configure button and configure the Name and Location fields for the Rack PDU, and set the Coldstart Delay . Control console. ...

® USER’S GUIDE Switched Rack PDU 48 Power Supply Status (control console only) Select Power Supply Status from the Device Manager menu to display the status of the power supplies of the Switched Rack PDU. Setting Description Name Set the name of the Rack PDU. Location Set the location of the Rack PD...

® USER’S GUIDE Switched Rack PDU 49 Scheduling Outlet Actions (Web Interface Only) Actions you can schedule For any outlets you select, you can schedule any of the following actions to occur daily; at intervals of one, two, four, or eight weeks; or only once. To configure values for Power On Delay ,...

® USER’S GUIDE Switched Rack PDU 51 How to schedule an outlet event 1. From the menus of the Web interface, select Switched Rack PDU and then Scheduling . 2. On the Outlet Scheduling page, select how often the event will occur: Daily , Weekly , or One-Time . 3. On the scheduling page, in the Name of...

® USER’S GUIDE Switched Rack PDU 53 Event-Related Menus Introduction Overview The Events menu provides access to the options that you use to do the following tasks: • Access the event log• Define the actions to be taken when an event occurs, based on the severity level of that event: – Event logging...

® USER’S GUIDE Switched Rack PDU 54 In the control console, access the available events-related options as follows: • Use the Email option in the Network menu to define the SMTP server and e-mail recipients. • Use the SNMP option in the Network menu to define the SNMP trap receivers. • Use C TRL -L ...

® USER’S GUIDE Switched Rack PDU 56 Logged events By default, any event which causes an SNMP trap will be logged, except for SNMP authentication failures. Additionally, the Rack PDU will log its abnormal internal system events. However, you can use the Actions option in the Web interface’s Events me...

® USER’S GUIDE Switched Rack PDU 57 How to use FTP or SCP to retrieve a log file If you have Administrator or Device Manager access, you can use SCP or FTP to retrieve a tab-delineated event log file ( event.txt ) or data log file ( data.txt ) that you can import into a spreadsheet application. • Th...

® USER’S GUIDE Switched Rack PDU 58 Secure CoPy (SCP). To use SCP to retrieve the e vent.txt file, use the following command: scp username@hosthame_or_ip_address:event.txt ./event.txt To use SCP to retrieve the data.txt file, use the following command: scp username@hosthame_or_ip_address:data.txt ./...

® USER’S GUIDE Switched Rack PDU 59 3. Use the get command to transmit the text version of the event or data log to your local drive. ftp>get event.txt or ftp>get data.txt 4. You can use the del command to clear the contents of the event or data log. ftp>del event.txt or ftp>del data.txt...

® USER’S GUIDE Switched Rack PDU 61 Severity levels Except for some System (embedded management card) events that do not have a severity level, events are assigned a default severity level based on their seriousness: • Informational: Indicates an event that requires no action, such as a notification...

® USER’S GUIDE Switched Rack PDU 62 Syslog action By default, the Syslog action is enabled for all events that have a severity level. However, before you can use this feature to send Syslog messages when events occur, you must configure it. SNMP traps action By default, the SNMP Traps action is enab...

® USER’S GUIDE Switched Rack PDU 63 Event Recipients Overview The Web interface and control console both have options that allow you to define up to four trap receivers and up to four e-mail addresses to be used when an event occurs that has SNMP traps or e-mail enabled. Trap Receiver settings To ac...

® USER’S GUIDE Switched Rack PDU 64 E-mail Feature Overview You can use the Simple Mail Transfer Protocol (SMTP) to send e-mail to up to four recipients when an event occurs. To use the e-mail feature, you must define the following settings: • The IP addresses of the primary and secondary Domain Nam...

® USER’S GUIDE Switched Rack PDU 65 DNS servers The Rack PDU cannot send any e-mail messages unless the IP address of the primary DNS server is defined. The Rack PDU will wait a maximum of 15 seconds for a response from the primary or (if specified) the secondary DNS server. If the Rack PDU does not...

® USER’S GUIDE Switched Rack PDU 68 How to Configure Individual Events Event List page The Actions option in the Events menu opens the “Event Action Configuration” page on the Web interface. Use the Details button in this page to access a complete list of the events that can be reported by your Swit...

® USER’S GUIDE Switched Rack PDU 69 Data Menu (Web Interface Only) Log Option Use this option to access a log that stores information about the Switched Rack PDU: • Iout: The power being output by the Rack PDU. • Ioutmax: The maximum power output by the Rack PDU since its output power was last recor...

® USER’S GUIDE Switched Rack PDU 70 Configuration Option Use this option to access the “Data Log Configuration” page. which reports how much data can be stored in the data log. If you change the Log Interval setting, which defines how often data will be sampled and recorded in the data log, the repo...

® USER’S GUIDE Switched Rack PDU 71 Network Menu Introduction Overview Use the Network menu to do the following tasks: • Define TCP/IP settings, including DHCP or BOOTP server settings, when one of those types of servers is used to provide the required TCP/IP values • Use the Ping utility• Define an...

® USER’S GUIDE Switched Rack PDU 73 Option Settings TCP/IP This option accesses the following settings: • A Boot mode setting selects the method used to define the TCP/IP values that a Rack PDU needs to operate on the network: – The IP address of the Rack PDU– The subnet mask value– The IP address o...

® USER’S GUIDE Switched Rack PDU 76 – On Retry Failure : Defines what TCP/IP settings will be used by the Rack PDU when it fails to discover a BOOTP server ( Use Prior Settings , by default). DNS Configure Domain Name System Settings fields. Use these fields to define the IP addresses of the primary...

® USER’S GUIDE Switched Rack PDU 77 – For Host , identify the URL – For IP , identify the IP address – For FQDN , identify the fully qualified domain name, formatted as myserver.mydomain.com . – For MX , identify the Mail Exchange address • Enable or disable Reverse DNS Lookup , which is disabled by...

® USER’S GUIDE Switched Rack PDU 79 – Do not enable both versions of SSH unless you require that both be activated at the same time. (Security protocols use extensive processing power.) • Configure the port settings for Telnet and SSH.• Select one or more data encryption algorithms for SSH version 1...

® USER’S GUIDE Switched Rack PDU 82 SSH Server Configuration SSHv1 Encryption Algorithms Enables or disables DES , and displays the status (always enabled) of Blowfish , two encryption algorithms (block ciphers) compatible with SSH, version 1, clients.• DES : The key length is 56 bits. • Blowfish : ...

® USER’S GUIDE Switched Rack PDU 84 SNMP An Access option (the Settings option in the control console) enables (by default) or disables SNMP. When SNMP is enabled, the Access Control settings allow you to control how each of the four available SNMP channels is used. SSH Host Key Fingerprint SSH v1: ...

® USER’S GUIDE Switched Rack PDU 85 Email Use this option to define two SMTP settings ( SMTP Server and From Address ) used by the e-mail feature of the Switched Rack PDU. NMS IP/Domain Name Limits access to the NMS specified by a domain name or to the NMSs specified by the format used for the IP ad...

® USER’S GUIDE Switched Rack PDU 86 An Access option (the Settings option in the control console) enables (by default) or disables SNMP. When SNMP is enabled, the Access Control settings allow you to control how each of the four available SNMP channels is used. Syslog By default, the Rack PDU can se...

® USER’S GUIDE Switched Rack PDU 87 Syslog test (Web interface). This option allows you to send a test message to the Syslog servers configured in the Syslog Server section. Syslog Server Settings Server IP/Domain Name Uses specific IP addresses or domain names to identify which of up to four server...

® USER’S GUIDE Switched Rack PDU 88 1. For Priority , select the priority to assign to the test message. 2. For Test Message, use any text that meets the format described in Syslog message format — for example, APC: Test message . 3. Click Apply to have the Rack PDU send a Syslog message that uses t...

® USER’S GUIDE Switched Rack PDU 89 • Configure the ports that each of the two protocols will use.• Select the encryption ciphers that SSL will use.• Identify whether a server certificate is installed on the Rack PDU. If a certificate has been created with the APC Security Wizard but is not installe...

® USER’S GUIDE Switched Rack PDU 95 WAP Use this option to disable (the default) or enable the Wireless Application Protocol (WAP). WAP is a standard for providing cellular phones, pagers and other handheld devices with secure access to e-mail and text-based Web pages. WAP runs on all major wireless...

® USER’S GUIDE Switched Rack PDU 96 System Menu Introduction Overview Use the System menu to do the following tasks: • Configure system identification, date and time settings, and Administrator, Read-Only User, Device manager, and Outlet User access • Centrally administer remote access for each Rack...

® USER’S GUIDE Switched Rack PDU 97 Menu options Unless noted, the following menu options are available in the control console and Web interface: • User Manager • Outlet User Manager • RADIUS • Identification • Date & Time • Tools • Links (Web interface) • Modem (not supported) • About System Th...

® USER’S GUIDE Switched Rack PDU 99 Outlet User Manager Use the Outlet User Manager option to set up user accounts that have access only to specified outlets. Web interface. Choose a user name, or choose Add New User to edit accounts. Setting Definition User Name The name of this user account. N OTE...

® USER’S GUIDE Switched Rack PDU 100 Control console. Select System from the Control Console menu. Then select Manage Outlet Users from the User Manager menu. Setting Definition Add Outlet User Account or Edit Outlet User Account User Name: The user name for logging on to this user account. Password...

® USER’S GUIDE Switched Rack PDU 101 RADIUS RADIUS (Remote Authentication Dial-In User Service) is an authentication, authorization, and accounting service. APC supports the authentication and authorization functions of RADIUS. Use this option to centrally administer remote access for each Rack PDU....

® USER’S GUIDE Switched Rack PDU 102 Configuring the Rack PDU. RADIUS Setting Definition Access Local Only : RADIUS is disabled. Local authentication is enabled. RADIUS then Local : RADIUS is enabled, and local authentication is enabled. Authentication is requested from the RADIUS server first; loca...

® USER’S GUIDE Switched Rack PDU 103 Configuring the RADIUS server. You must configure your RADIUS server to work with the Rack PDU. The following example shows how to configure a RADIUS server for use with a Rack PDU. APC supports authentication and authorization of users by various RADIUS servers ...

® USER’S GUIDE Switched Rack PDU 104 3. Vendor specific attributes (VSA) can also be used. This requires some dictionary entries. VSAs take precedence over standard RADIUS attributes. Example: (RADIUS, dictionary.apc) Example: (RADIUS users file with VSAs) For more information on user permission lev...

® USER’S GUIDE Switched Rack PDU 105 Identification Use this option to define the System Name , Contact , and Location values used by the SNMP agent for the Rack PDU. The option’s settings provide the values used for the MIB-II sysName , sysContact , and sysLocation Object Identifications (OIDs). . ...

® USER’S GUIDE Switched Rack PDU 106 Synchronize with Network Time Protocol (NTP) Server. Use this option on the Web interface, or Network Time Protocol (NTP) on the control console, to have an NTP Server automatically update the Date and Time settings for the Switched Rack PDU. In the control conso...

® USER’S GUIDE Switched Rack PDU 107 Tools Use this option to perform the following actions. Action Definition No Action (Web Interface only) No change to the Rack PDU. Reboot Management Interface Restarts the user interface of the Rack PDU. Reset to Defaults Resets all configuration settings. This ...

® USER’S GUIDE Switched Rack PDU 108 Links (Web interface) Use this option to modify the links to APC Web pages. . Modem (not supported) This option, shown only in the control console, is not supported for Rack PDUs. About System This option identifies the following hardware information for the Rack...

® USER’S GUIDE Switched Rack PDU 111 DHCP & BOOTP boot process When Boot mode is set to its default DHCP & BOOTP setting, the following occurs when the Switched Rack PDU is started or reset: 1. The Rack PDU makes up to five requests for its network assignment from any BOOTP server. If a vali...

® USER’S GUIDE Switched Rack PDU 112 DHCP Configuration Settings Switched Rack PDU settings The TCP/IP option in the Network menu of the Web interface and control console accesses the network settings for the Switched Rack PDU. Three settings ( Ethernet Port Speed , Host Name , and Domain Name ) are...

® USER’S GUIDE Switched Rack PDU 113 When Boot mode is set to DHCP Only, two options are available: • DHCP Cookie Is in the control console (or Require vendor specific cookie to accept DHCP Address in the Web interface): By default, this option requires that the DHCP responses include the APC cookie...

® USER’S GUIDE Switched Rack PDU 114 DHCP response options Each valid DHCP response contains options that provide the TCP/IP settings that the Switched Rack PDU needs to operate on a network, and other information that affects the operation of the Rack PDU. The Rack PDU uses the Vendor Specific Info...

® USER’S GUIDE Switched Rack PDU 116 TCP/IP options. The Switched Rack PDU uses the following options within a valid DHCP response to define its TCP/IP settings: • IP Address (from the yiaddr field of the DHCP response): Provides the IP address that the DHCP server is leasing to the Rack PDU. • Subn...

® USER’S GUIDE Switched Rack PDU 117 Security Security Features Planning and implementing security features As a network device that passes information across the network, the Switched Rack PDU is subject to the same exposure as other devices on the network. Use the information in this section to pl...

® USER’S GUIDE Switched Rack PDU 118 SNMP. File transfer protocols. Security Access Description Available methods:• Community Name• Domain Name• NMS IP filters• Agent Enable/Disable• 4 access communities with read/write/disable capability The domain name restricts access only to the NMS as that loca...

® USER’S GUIDE Switched Rack PDU 119 Web Server. RADIUS. Changing default user names and passwords immediately As soon as you complete the installation and initial configuration of the Rack PDU, immediately change the default user names and passwords. Configuring unique user names and passwords is e...

® USER’S GUIDE Switched Rack PDU 121 To ensure that data and communication between the Switched Rack PDU and the client interfaces, such as the control console and the Web interface, cannot be intercepted, you can provide a greater level of security by using one or more of the following encryption-b...

® USER’S GUIDE Switched Rack PDU 122 Encryption Secure SHell (SSH) and Secure CoPy (SCP) The Secure SHell (SSH) protocol provides a secure mechanism to access computer consoles or shells remotely. The protocol authenticates the server (in this case, the Switched Rack PDU) and encrypts all transmissi...

® USER’S GUIDE Switched Rack PDU 123 Secure CoPy (SCP) is a secure file transfer application that you can use instead of FTP. SCP uses the SSH protocol as the underlying transport protocol for encryption of user names, passwords, and files. • When you enable and configure SSH, you automatically enab...

® USER’S GUIDE Switched Rack PDU 124 Secure Sockets Layer (SSL)/Transport Layer Security (TLS) For secure Web communication, you enable Secure Sockets Layer (SSL) and Transport Layer Security (TLS) by selecting HTTPS (SSL/TLS) as the protocol mode to use for access to the Web interface of the Switch...

® USER’S GUIDE Switched Rack PDU 125 You can use the APC Security Wizard, provided on the APC Rack Power Distribution Unit Utility CD that came with your Rack PDU, to create a certificate signing request to an external Certificate Authority, or if you do not want to use an existing Certificate Autho...

® USER’S GUIDE Switched Rack PDU 126 Creating and Installing Digital Certificates Purpose For network communication that requires a higher level of security than password encryption, the Web interface of the Switched Rack PDU supports the use of digital certificates with the Secure Sockets Layer (SS...

® USER’S GUIDE Switched Rack PDU 127 Choosing a method for your system Using the Secure Sockets Layer (SSL) protocol, you can choose any of the following methods for using digital certificates. Method 1: Use the auto-generated default certificate. When you enable SSL, you must reboot the Rack PDU. D...

® USER’S GUIDE Switched Rack PDU 128 PDU can control access to its Web interface by user name, password, and account type (e.g., Administrator , Device Manager , or Read Only User ), the browser cannot authenticate what Rack PDU is sending or receiving data. – The length of the public key (RSA key) ...

® USER’S GUIDE Switched Rack PDU 129 Method 2: Use the APC Security Wizard to create a CA certificate and a server certificate. You use the APC Security Wizard to create two digital certificates: • A CA root certificate (Certificate Authority root certificate) that the APC Security Wizard uses to si...

® USER’S GUIDE Switched Rack PDU 130 – The server certificate that you upload to the Rack PDU enables SSL to authenticate that data are being received from and sent to the correct Rack PDU. This provides an extra level of security beyond the encryption of the user name, password, and transmitted dat...

® USER’S GUIDE Switched Rack PDU 131 Method 3: Use the APC Security Wizard to create a certificate-signing request to be signed by the root certificate of an external Certificate Authority and to create a server certificate. Use the APC Security Wizard to create a request (a .csr file) to send to a ...

® USER’S GUIDE Switched Rack PDU 133 Firewalls Although some methods of authentication provide a higher level of security than others, complete protection from security breaches is almost impossible to achieve. Well-configured firewalls are an essential element in an overall security scheme.

® USER’S GUIDE Switched Rack PDU 134 Using the APC Security Wizard Overview Authentication Authentication verifies the identity of a user or a network device (such as an APC Switched Rack PDU). Passwords typically identify computer users. However, for transactions or communications requiring more st...

® USER’S GUIDE Switched Rack PDU 135 Authentication of the server (in this case, the Rack PDU) occurs each time a connection is made from the browser to the server. The browser checks to be sure that the server’s certificate is signed by a Certificate Authority known to the browser. For this authent...

® USER’S GUIDE Switched Rack PDU 136 – A server certificate signed by a custom CA root certificate also created with the APC Security Wizard. Use this method if your company or agency does not have its own Certificate Authority and you do not want to use an external Certificate Authority to sign the...

® USER’S GUIDE Switched Rack PDU 137 Create a Root Certificate & Server Certificates Summary Use this procedure if your company or agency does not have its own Certificate Authority and you do not want to use a commercial Certificate Authority to sign your server certificates. • Create a CA root...

® USER’S GUIDE Switched Rack PDU 138 The procedure Create the CA root certificate. Perform these steps. (Click Next to move from screen to screen.) 1. If the APC Security Wizard is not already installed on your computer, install it by running the installation program APC Security Wizard.exe from the...

® USER’S GUIDE Switched Rack PDU 139 7. The last screen verifies that the certificate has been created and instructs you on the next tasks. – This screen displays the location and name of the .p15 file that you will use to sign the server certificates. – This screen also displays the location and na...

® USER’S GUIDE Switched Rack PDU 140 Create an SSL Server User Certificate. Perform these steps. (Click Next to move from screen to screen.) 1. On the Windows Start menu, select Programs , then APC Security Wizard , to start the Wizard program. 2. On the screen labeled Step 1, select SSL Server Cert...

® USER’S GUIDE Switched Rack PDU 141 7. The last screen verifies that the certificate has been created and instructs you on the next task, to load the server certificate to the Switched Rack PDU. It displays the location and name of the Server Certificate, which has a .p15 file extension and contain...

® USER’S GUIDE Switched Rack PDU 142 Create a Server Certificate and Signing Request Summary Use this procedure if your company or agency has its own Certificate Authority or if you plan to use a commercial Certificate Authority to sign your server certificates. • Create a Certificate Signing Reques...

® USER’S GUIDE Switched Rack PDU 144 8. Send the certificate signing request to an external Certificate Authority, either a commercial Certificate Authority or, if applicable, a Certificate Authority managed by your own company or agency. Import the signed certificate. When the external Certificate ...

® USER’S GUIDE Switched Rack PDU 145 7. The last screen verifies that the certificate has been created and instructs you on the next task, to load the server certificate to the Switched Rack PDU. It displays the location and name of the server certificate, which has a .p15 file extension and contain...

® USER’S GUIDE Switched Rack PDU 146 Create an SSH Host Key Summary This procedure is optional. If you select SSH encryption, but do not create a host key, the Switched Rack PDU generates a 768-bit RSA key when it reboots. Host keys for SSH that are created with the APC Security Wizard are 1024-bit ...

® USER’S GUIDE Switched Rack PDU 147 the correct host key was uploaded by verifying that the fingerprints displayed here match the SSH fingerprints on the Rack PDU, as displayed by your SSH client program. 7. The last screen verifies that the host key has been created and instructs you on the next t...

® USER’S GUIDE Switched Rack PDU 148 APC Device IP Configuration Wizard Purpose and Requirements Purpose: configure basic TCP/IP settings You can use the APC Device IP Configuration Wizard to configure the basic TCP/IP settings (IP address, subnet mask, and default gateway) of the following: • Netwo...

® USER’S GUIDE Switched Rack PDU 149 Install the Wizard Automated installation If autorun is enabled on your CD-ROM drive, the installation program starts automatically when you insert the CD. Manual installation If autorun is not enabled on your CD-ROM drive, run setup.exe in the Wizard directory o...

® USER’S GUIDE Switched Rack PDU 150 Use the Wizard Launch the Wizard The installation creates a shortcut link in the Start menu that you can use to launch the Wizard. Configure the basic TCP/IP settings remotely Prepare to configure the settings. Before you run the Wizard, be sure that you have the...

® USER’S GUIDE Switched Rack PDU 151 Run the Wizard to perform the configuration. To discover and configure, over the network, installed or embedded Network Management Cards that are not configured: 1. From the Start menu, launch the Wizard. The Wizard automatically detects the first Network Managem...

® USER’S GUIDE Switched Rack PDU 152 Configure or reconfigure the TCP/IP settings locally To configure a single Network Management Card through a serial connection: 1. Contact your network administrator to obtain valid TCP/IP settings.2. Connect the serial configuration cable that came with the Netw...

® USER’S GUIDE Switched Rack PDU 153 How to Export Configuration Settings Retrieving and Exporting the .ini File Summary of the procedure As an Administrator, you can retrieve a dynamically generated .ini file of a Switched Rack PDU’s current configuration and export that file to another Switched Ra...

® USER’S GUIDE Switched Rack PDU 154 Contents of the .ini file The config.ini file that you retrieve from a Switched Rack PDU contains the following: • section headings , which are category names enclosed in brackets ([ ]), and under each section heading, keywords, which are labels describing specif...

® USER’S GUIDE Switched Rack PDU 155 Detailed procedures Use the following procedures to retrieve the settings of one Switched Rack PDU and export them to one or more other Switched Rack PDUs. Retrieving. To set up and retrieve an .ini file to export: 1. Configure a Rack PDU with the settings you wa...

® USER’S GUIDE Switched Rack PDU 156 Customizing. You must customize the file to change at least the TCP/IP settings before you export it. 1. Use a text editor to customize the file. – Section headings, keywords, and pre-defined values are not case- sensitive, but string values that you define are c...

® USER’S GUIDE Switched Rack PDU 157 Exporting the file to a single Rack PDU. To export the .ini file to another Switched Rack PDU, use any of the file transfer protocols supported by Switched Rack PDUs (including FTP, FTP Client, SCP, and TFTP). The following example uses FTP: 1. From the folder co...

® USER’S GUIDE Switched Rack PDU 158 The Upload Event and Error Messages The event and its error messages The following system event occurs when the receiving Switched Rack PDU completes using the .ini file to update its settings. Configuration file upload complete, with number valid values This eve...

® USER’S GUIDE Switched Rack PDU 159 Messages in config.ini A feature might not be supported for the device from which you retrieve the configuration settings or might not be supported for the device to which you export the configuration settings. In this case, the user configuration file contains, ...

® USER’S GUIDE Switched Rack PDU 160 Using the APC Device IP Configuration Wizard On Windows operating systems, instead of using the preceding procedure for exporting .ini files, you can choose to update the basic TCP/IP settings of Rack PDUs by using the APC Device IP Configuration Wizard. See APC ...

® USER’S GUIDE Switched Rack PDU 161 File Transfers Introduction Overview The Switched Rack PDU automatically recognizes binary firmware files. Each of these files contains a header and one or more Cyclical Redundancy Checks (CRCs) to ensure that the data contained in the file is not corrupted befor...

® USER’S GUIDE Switched Rack PDU 162 Upgrading Firmware: Methods and Tools Benefits of upgrading firmware Upgrading the firmware on the Switched Rack PDU has the following benefits: • New firmware has the latest bug fixes and performance improvements.• New features become available for immediate use...

® USER’S GUIDE Switched Rack PDU 163 Obtain the latest firmware version Automated upgrade tool for Microsoft Windows systems. An automated self-extracting executable tool combines the firmware modules that you need to automate your upgrades on any supported Windows operating system • The version of ...

® USER’S GUIDE Switched Rack PDU 164 Manual upgrades, primarily for Linux systems. If all computers on your network are running Linux, you must upgrade the firmware of your Rack PDUs manually, i.e., by using the separate APC firmware modules (AOS module and application module). You can obtain the in...

® USER’S GUIDE Switched Rack PDU 165 Firmware file transfer methods To upgrade the firmware of a Switched Rack PDU: • From a networked computer running a Microsoft Windows operating system, you can use the automated firmware upgrade tool on your CD or downloaded from the APC Web site. • From a netwo...

® USER’S GUIDE Switched Rack PDU 166 Use FTP or SCP to upgrade one Rack PDU Instructions for using FTP. For you to be able to use FTP to upgrade a single Switched Rack PDU over the network: • The Switched Rack PDU must be connected to the network.• The FTP server must be enabled at the Switched Rack...

® USER’S GUIDE Switched Rack PDU 167 21000 , you would use the following command for a Windows FTP client transferring a file to a Rack PDU with an IP address of 150.250.6.10. ftp> open 150.250.6.10 21000 4. Log on using the Administrator user name and password. ( apc is the default for both.) 5....

® USER’S GUIDE Switched Rack PDU 168 Use FTP or SCP to upgrade multiple Rack PDUs. To upgrade multiple Switched Rack PDUs using an FTP client or using SCP, write a script which automatically performs the procedure. For FTP, use the steps in Use FTP or SCP to upgrade one Rack PDU . Use XMODEM to upgr...

® USER’S GUIDE Switched Rack PDU 169 2. Select a serial port at the local computer and disable any service which uses that port. 3. Connect the smart-signaling cable that came with the Rack PDU to the selected port and to the serial port at the Rack PDU. 4. Run a terminal program (such as HyperTermi...

® USER’S GUIDE Switched Rack PDU 170 Verifying Upgrades and Updates Overview To verify that the firmware upgrade was successful, see the Last Transfer Result message, available through the FTP Server option of the Network menu (in the control console only), or use an SNMP GET to the mfiletransferSta...

® USER’S GUIDE Switched Rack PDU 171 Product Information Warranty and Service Limited warranty APC warrants the Switched Rack PDU to be free from defects in materials and workmanship for a period of two years from the date of purchase. Its obligation under this warranty is limited to repairing or re...

® USER’S GUIDE Switched Rack PDU 172 Obtaining service To obtain support for problems with your Switched Rack PDU: 0 1. Note the serial number and date of purchase. For the serial number, see the About System menu option or the label on the bottom of the unit. 2. Contact Customer Support at a phone ...

® USER’S GUIDE Switched Rack PDU 173 Life-Support Policy General policy American Power Conversion (APC) does not recommend the use of any of its products in the following situations: • In life-support applications where failure or malfunction of the APC product can be reasonably expected to cause fa...

® USER’S GUIDE Switched Rack PDU 174 Index A About System 31Access FTP Server 77 limiting NMS SNMP access by IP ad- dress 85 security options for each interface 117 Access setting for RADIUS 102Access Type setting 85Actions 60Advanced settings Client ID 75, 112 Domain Name 74, 112 Ethernet Port Spee...

® USER’S GUIDE Switched Rack PDU 182 APC Worldwide Customer Support Customer support for this or any other APC product is available at no charge in any of the following ways: • Visit the APC Web site to access documents in the APC Knowledge Base and to submit customer support requests. – www.apc.com...

® USER’S GUIDE Switched Rack PDU 183 Copyright Entire contents © 2005 American Power Conversion. All rights reserved. Reproduction in whole or in part without permission is prohibited. APC, the APC logo, InfraStruXure, and PowerNet are trademarks of American Power Conversion Corporation and may be r...