Page 2 - Table of Contents
Table of Contents Product Overview....................................................................................................................1 Introduction ...................................................................................................................... 1Package Content...
Page 5 - section; Product Overview; Introduction; • Data-path security by means of SSH or Web/SSL; Package Contents
1 section Product Overview Introduction Thank you for purchasing the Belkin OmniView Serial Console Server (Console Server). This device provides administrators secure monitoring and control of servers, routers, switches, and other serial devices from anywhere on the corporate TCP/IP network, over t...
Page 6 - Console Server Features; mainframe, and Windows
2 Product Overview Console Server Features • In-band and out-of-band management Console port management solutions offer remote, reliable, and secure access to serial-console ports through in-band networks and out-of-band connectivity options, such as serial terminal access and dial-up modem. • Manag...
Page 7 - Equipment Requirements; Web browser; Browser
3 section Product Overview Equipment Requirements • Universal Connectivity Kit (included) • RJ45-RJ45 CAT5 Cable (included) System Requirements Web browser Java Plug-In The Console Server’s web interface requires installing JRE (Java Runtime Environment) v6.0 and above. You can get the latest Java s...
Page 8 - Unit Display Diagrams
4 Product Overview Unit Display Diagrams Front/Rear Panel Fig. 1 Front View Fig. 2 Rear View Ready LED Power LED Link LED Reset but- ton IEC power LAN port Local console port Port LEDs Device ports
Page 9 - Other
5 section Product Overview LED Indicators, Button, and Connectors • RESET button: Quickly press and release the button to reboot the Console Server. Press and hold the “Reset” button for more than five seconds to set the unit to its default configuration settings. • ETHERNET RJ45 connector: Ethernet...
Page 10 - Specifications; Specifications are subject to change without notice.
6 Product Overview Specifications Note: Specifications are subject to change without notice. Feature Specification General LEDs Power (red) Ready (green, normally blinking),Link/Act/10/100Mbps (Ethernet orange: 10Mbps, green: 100Mbps) Activity (blue for each serial port) Push button for reset, or re...
Page 11 - Local Installation; Where to place the Console Server:; • the location of your target devices in relation to your console; Cables and Adapters; Refer to Appendix B on page 54 for pin-out guide.; Belkin Serial Adapter:
7 section Local Installation Where to place the Console Server: The enclosure of the Console Server is designed for stand-alone or rack-mount configuration. The Console Server can be mounted to a standard 19-inch server rack using the included rack-mount brackets and screws. Consider the following w...
Page 12 - Desktop or Rack-Mounting
8 Local Installation Desktop or Rack-Mounting The Console Server can be placed on desktops or rack-mounted on 19-inch/1U racks. Note: Before you begin, locate the MAC address and serial number on the back of the Console Server. You may need these numbers later in the installation process, so it is h...
Page 13 - Connecting the Target Devices to the Console Server; —This diagram depicts sample cable connections for
9 section Local Installation Connecting the Target Devices to the Console Server 1. Power down the target device(s) that will be connected to your Console Server.2. Connect the Ethernet cable to the port labeled LAN.3. Locate the included power cord and plug the appropriate end into the power socket...
Page 14 - Network Configuration; Web-Browser Interface
10 Network Configuration Before you can connect to a target device, you will need to configure the network settings. The Console Server offers two methods of setting the network: via web-browser interface or through the local console port. The Console Server offers support for both Dynamic Host Conf...
Page 15 - Login Page
11 section Network Configuration Note: HTTPS can be used for communication over an encrypted secure socket layer (SSL). When first connecting to the Console Server’s HTTPS configuration page, two browser security warnings may appear. Click “Yes” on both warnings. Login Page Type in the following def...
Page 16 - Click . The web interface will open at the “Connect” page (see below).; Step 3 Network Configuration; If the user leaves the web browser idle for more than; Login
12 Network Configuration Click . The web interface will open at the “Connect” page (see below). Main-Connect Page Step 3 Network Configuration Click on “Network” to open the Network-Configuration page (see below). Network-Configuration Page Here you can assign a static IP and other network settings....
Page 17 - following parameters:
13 section Network Configuration Assigning IP from the Console Port—VT-100 (Console, Telnet, SSH) The Console Server also offers a user-friendly, menu-driven command-line interface. You can simply connect a VT-100 terminal to the local console port to access the Console Server. This is useful when y...
Page 18 - The following figure depicts the structure of the interface.; The Menu Layout; Software version
14 Network Configuration The following figure depicts the structure of the interface. The Menu Layout Tier 2 menu Tier 1 menu Product name Software version Configuration input Navigation input Tier 3 menu
Page 19 - IP mode
15 section Network Configuration Network > IP Config The page to the left shows the IP configuration items. 1. For IP mode — You can press the SPACE bar to select Static mode or DHCP mode. 2. For IP Address, Subnet Mask, Default Gateway, Primary DNS, and Secondary DNS — You can change these netwo...
Page 20 - Only the; admin; user has the privilege to log in to VT-100. All the other users are not; Web-Browser Management Interface
16 Network Configuration Note: Only the admin user has the privilege to log in to VT-100. All the other users are not authorized to make configuration with VT-100. Web-Browser Management Interface The Console Server supports both HTTP and HTTPS (HTTP over SSL) protocols. Users must authenticate them...
Page 22 - Network Settings; IP Configuration; There are two types of IP assignments you can choose from:
18 Network Settings You can configure the network IP settings via VT-100 or web interface. This section describes configuration through the web interface. IP Configuration The Console Server requires a valid IP address to operate within the user’s network environment. If the IP address is not readil...
Page 23 - IP Filtering; The table below provides examples of IP address/mask settings.; Chain Rule; access allowed; Specified host range; Any host
19 section Network Settings IP Filtering The IP filtering function keeps unauthorized hosts from accessing the Console Server by specifying rules. The IP address/mask specifies the host range by entering the base host IP address followed by “/” and the subnet mask (“/” is a required separator betwee...
Page 24 - Fig. 4 Chain Rule of IP Filter; In the example above, the rules applied in the following order:
20 Network Settings When the Console Server receives a TCP packet, it will process the packet with the chain rule depicted below. The process order is important—the packet will enter the chain rule 1 first. If it meets the rule, then it will take action; otherwise, it will go on to chain rule 2. Fig...
Page 25 - Web-Server Configuration
21 section Network Settings After these rules are applied, only the hosts that belong to the subnet 192.168.2.x can access the Console Server (through http port 80). In addition to the IP filter chain rule mentioned above, the web interface also provides a convenient way to enable/disable telnet (po...
Page 26 - Dynamic DNS; Ethernet
22 Network Settings Dynamic DNS If a user connects the Console Server to a DSL line or uses a DHCP configuration to get a dynamic IP address from the network, the IP address might change. This can make it difficult to know if an IP address has changed, or what the new IP address is. Fig. 5 Dynamic D...
Page 27 - RADIUS; RADIUS Serve
23 section Network Settings RADIUS Authentication is the process of identifying an individual, usually based on a user name and password. The Console Server supports various authentication options, such as “Local” and “RADIUS”, to authenticate the users who access the serial port. When the authentic...
Page 28 - RADIUS-Server Configuration; The following steps should be used for HTTPS protocol:; Note
24 Network Settings RADIUS-Server Configuration HTTPS/SSL The Console Server supports both HTTP and HTTPS (HTTP over SSL) services simultaneously. You can enable or disable security function of each port individually. HTTPS provides a secure, encrypted web interface over SSL (secure sockets layer). ...
Page 29 - Serial Ports; Configuration
25 section Serial Ports Configuration Under the “Serial” menu heading, click “Configuration” to show the port summary list. Note that if the “Serial Port” is disabled, the “Serial port configuration” panel will display the port in a dark gray font. An enabled serial port will be displayed in a white...
Page 30 - Port Title
26 Serial Ports Port Enable/Disable Each serial port can be individually enabled or disabled. A disabled serial port cannot be accessed by a user. Users can reset the serial port to default settings by clicking the “Set to default” button. Port Title Users can enter descriptive information for each ...
Page 31 - Operation Modes
27 section Serial Ports Operation Modes The Console Server unit provides four types of operation modes. These are described below. Console-Server Mode Configuring a serial port as a console server creates a TCP socket on the unit that listens to a telnet or SSH client connection. When you connect to...
Page 32 - Listening TCP Port Number
28 Serial Ports The following parameters are configurable in console-server mode: Listening TCP Port Number You can also access a serial port through the IP address of the Console Server and the listening TCP port number of the serial port. If the IP address of the Console Server and the serial port...
Page 33 - Serial-Port Parameters
29 section Serial Ports In order to terminate a telnet/SSH/RawTCP session in terminal-server mode, you may use these three control-key sequences (Ctrl-Z / Ctrl-X / Ctrl-C). Dial-in Modem Mode In this mode, the Console Server assumes an external modem is attached to the serial port and waits for a di...
Page 34 - Port Logging
30 Serial Ports Port Logging While in console-server mode, the data received from the tracking serial port will be buffered in the unit’s memory. The “Port logging” feature is valid and visible only if the operation mode of the serial port is configured to console-server mode. If the “Port logging” ...
Page 35 - Click “Port event handling”.; Break Function
31 section Serial Ports Click “Port event handling”. The memory buffer size for logging data is 192K per port. If the log data grows larger than the memory size, the new data will overwrite the old data. Break Function In console-server mode, the Console Server is capable of sending a “break” signal...
Page 36 - Telnet Java Applet
32 Serial Ports Use the hyperlink located at the bottom of the Connect Page to test your Java compatibility. Or use the link below to download the latest Java version. Make sure that you enable your browser’s Java support option and also check your Java Runtime Environment version (known as JRE vers...
Page 37 - indicator will also appear on the lower-right side of the window.
33 section Serial Ports 2. Enter the user name and password to log in, so you can start to use it as if you were running a telnet client program (e.g., Telnet DOS program, PuTTY). Note: The active serial port’s name will appear on the window bar. A connection-status indicator will also appear on the...
Page 38 - Installation; bar to select “ENABLE”. Confirm the change to auto-reboot the system.
34 Serial Ports Serial-to-Serial Function The serial-to-serial function allows you to use a simple terminal device (video display and keyboard) to access and control any device connected to the Console Server on ports 1 through 15. You may also use an external terminal converter, like the Belkin F1D...
Page 41 - System Status and Log; System Status
37 section System Status and Log System Status The “System Status” page lists current system information such as name, serial number, firmware versions, MAC address, current time, and the network settings. Data cannot be changed from this page. This page refreshes automatically every 10 seconds.
Page 42 - System Logging
38 System Status and Log System Logging You may enable or disable the system-logging process and set the log buffer size. The system log buffer’s default value is 50K bytes and can be allocated to up to 300KB maximum. If the logged data grows larger than the pre-allocated buffer size, the new data w...
Page 43 - System Administration; User Administration
39 section System Administration User Administration At start-up, the system will prompt the user to enter the password to access the system. The administrator can add or remove a user easily via the web pages. There are two levels of access privileges: An “Access Deny” page will display if the user...
Page 44 - The figure below shows the “Add User” screen.; Remove User; • Check the users on the “User administration” screen.
40 System Administration The figure below shows the “Add User” screen. The new user will now appear under the “User Name” list. Remove User To remove a user: • Check the users on the “User administration” screen. • Click the “Remove” button
Page 46 - Change Password
42 System Administration Change Password To change the parameters of the user account, open the “Edit user” screen by selecting the user name on the “User Configuration” screen and then edit the parameters of the user account such as adding a user. Date and Time (NTP) The Console Server maintains cu...
Page 47 - Firmware Upgrade; Refer to web page “System > Firmware Upgrade”.; • If you repeatedly lose the date/time information, please replace
43 section System Administration Firmware Upgrade Firmware can be easily upgraded via a web page. This section describes the upgrade procedures. The latest firmware version is available from www.belkin.com/support. Upgrade from the Web Interface Refer to web page “System > Firmware Upgrade”. Clic...
Page 48 - disconnect the power or the Ethernet cable during this; SSL Certificate
44 System Administration Warning!!! DO NOT disconnect the power or the Ethernet cable during this upgrading process. Doing so may cause upgrade failure and destroy the image in memory. The Console Server will automatically initiate a self-reboot upon completion of the upgrade process to activate the...
Page 49 - Secure HTTP Certificate; • Appendix E details the way to create CA files from scratch.
45 section System Administration Once all certificate files are uploaded, users shall initiate a reboot command manually to make the new certificate effective. Browse prepared CA files (follow the procedure in Appendix E to prepare correctly the three CA files with the same assigned file names), and...
Page 53 - Reset to Factory-Default Settings
49 section System Administration Reset to Factory-Default Settings To roll back to factory-default settings, click on “Apply”. Reboot You can trigger the Console Server to perform a software reboot via the network. The reboot function is mandatory when the CA-certificate upload is complete.
Page 54 - Technical Data; Default Settings; Current firmware version number and date; User Name
50 Technical Data 50 Default Settings Server NameDHCPIP AddressNet MaskGateway BelkinSCEnabled192.168.2.156255.255.255.0192.168.2.1 Serial NumberMAC Address xxxxxxxxx (printed on bottom of unit)xx:xx:xx:xx (printed on bottom of unit) Version and Date Current firmware version number and date User Nam...
Page 57 - RJ45 Male Adapter
53 Appendix A: Adapters F1D124ea (RJ45F–RJ45M CISCO) RJ45 Male Adapter Applications: Sun devices Part No: F1D124ea - Single Pack F1D124ea8PK - 8 Pack Adapter Signal RJ45 RJ45M DSR 1 2 RTS 2 8 GND 3 4 5 TxD 4 6 RxD 5 3 CTS 7 1 DTR 8 7
Page 58 - NC
54 54 54 Appendix B: Ethernet Pin-Outs (RJ45) Standard Ethernet Cable RJ45 Pin-Out Pin Description 1 Tx+ 2 Tx- 3 Rx+ 4 NC 5 NC 6 Rx- 7 NC 8 NC
Page 60 - Appendix D: Protocol Glossary; CHAP (Challenge Handshake Authentication Protocol); A protocol for accessing directory information.
56 56 Appendix D: Protocol Glossary BOOTP (Bootstrap Protocol) Similar to DHCP, but for smaller networks. Automatically assigns the IP address for a specific duration of time. CHAP (Challenge Handshake Authentication Protocol) A secure protocol for connecting to a system; it is more secure than the ...
Page 61 - SNMP (Simple Network Management Protocol); TCP/IP protocol for sending email between servers.; Telnet
57 57 Appendix D: Protocol Glossary NTP (Network Time Protocol) A protocol used to synchronize time on networked computers and equipment. PAP (Password Authentication Protocol) A method of user authentication in which the user name and password are transmitted over a network and compared to a table ...
Page 62 - Appendix E: Creating CA Files
58 58 58 Appendix E: Creating CA Files The Console Server supports secure web-page configuration (aka https). There are two types of certificate files for server-side authentication. • Self-signed: Users can create the certificate files by themselves. The downside is that the client will be prompted...
Page 63 - openssl genrsa –des3 –out cakey.pem 1024
59 59 59 Appendix E: Creating CA Files ii) Strip passphrase: openssl rsa -in cakey.pem -out cakey-nopassword.pem iii) Combine the key and X.509 certificate files into server.pem: cat cakey-nopassword.pem cacert.pem > server.pem iv) Collect all 3 PEM files and prepare to upload to IPCS server: ser...
Page 64 - Information; FCC Statement; Belkin warrants the Belkin product for two years.
60 Information FCC Statement DECLARATION OF CONFORMITY WITH FCC RULES FORELECTROMAGNETIC COMPATIBILITY We, Belkin International, Inc., of 501 West Walnut Street, Compton CA 90220, declare under our sole responsibility that the product: F1DP116S, to which this declaration relates: Complies with Part ...
Page 65 - What will we do to correct problems?; a. The part number of the Belkin product.
61 Information What will we do to correct problems? Product Warranty.Belkin will repair or replace, at its option, any defective product free of charge (except for shipping charges for the product). What is not covered by this warranty? All above warranties are null and void if the Belkin product is...
Page 66 - How state law relates to the warranty.
62 Information How state law relates to the warranty. THIS WARRANTY CONTAINS THE SOLE WARRANTY OF BELKIN. THERE ARE NO OTHER WARRANTIES, EXPRESSED OR, EXCEPT AS REQUIRED BY LAW, IMPLIED, INCLUDING THE IMPLIED WARRANTY OR CONDITION OF QUALITY, MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE, AND ...
Page 68 - Free Tech Support; Belkin GmbH
© 2008 Belkin International, Inc. All rights reserved. All trade names are registered trademarks of respective manufacturers listed. Windows is either a registered trademark or trademark of Microsoft Corporation in the United States and/or other countries. P75598ea OmniView ® Serial Console Server F...
