MRV Communications LX-4000 Series Informacje Techniczne

LX Series Configuration GuideVersion 5.1.0

x Table of ContentsLX-Series Configuration GuideGenerating the SSH Key... 8-29Changing the SSH Key Pas

Setting Up Remote Console ManagementConfiguring Modems for the RAS Dial Feature 3-9 Modem Caller ID Troubleshooting TipsIf you are having trouble co

3-10 Setting Up Security for a Console PortLX Series Configuration GuideL The symbols in the initialization string may be different for your type o

Setting Up Remote Console ManagementSetting Up TACACS+ Authentication 3-11 X To enable RADIUS authentication on a console port 1. Access the Asynch

3-12 Setting Up RSA SecurID AuthenticationLX Series Configuration GuideSetting Up RSA SecurID AuthenticationUnder RSA SecurID authentication, a use

Setting Up Remote Console ManagementVerifying Serial Port Connections 3-13 The LX unit will make three attempts to log in the user by using LDAP, RA

3-14 Verifying Serial Port ConnectionsLX Series Configuration GuideX To validate cable configurations:Execute the following command to test the con

Setting Up Remote Console ManagementVerifying Serial Port Connections 3-15 This option generates 15 lines of 50 characters each of a printable seque

3-16 Verifying Serial Port ConnectionsLX Series Configuration GuideWhen you enter any of these commands, the test port output is displayed automati

Setting Up Remote Console ManagementCreating Subscribers for Remote Console Management 3-17 Creating Subscribers for Remote Console ManagementL The

3-18 Specifying Access MethodsLX Series Configuration Guide 6. To create a login password for the subscriber, execute the password command:Example

LX-Series Configuration GuideTable of Contents xi Enabling the Factory Reset Button... 10-10Configuring the Authenticati

Setting Up Remote Console ManagementConnect Port Escape Character 3-19 Connect Port Escape CharacterYou can configure an escape character in the loc

3-20 Connect Port Escape CharacterLX Series Configuration GuideX To display the Subscriber Characteristics ScreenUse the following command syntax:s

System AdministrationSystem Administration 4-1 CHAPTER 4 System AdministrationThis chapter describes backup and recovery, applying default configura

4-2 Backup and RecoveryLX Series Configuration GuideBackup and RecoveryThis section explains how to save, edit, and load the configuration file.Sav

System AdministrationSaving the Configuration to the Network 4-3 Saving the Configuration to the NetworkThe TFTP/SFTP protocol is used to save the L

4-4 Editing the Files in WindowsLX Series Configuration Guide 2. The filenames within the .zip file are displayed as they are extracted, including

System AdministrationEditing the Files in Windows 4-5 • PPP configurations• Broadcast Groups• Interface configurations• LDAP, RADIUS, RSA Se

4-6 Editing the Files in WindowsLX Series Configuration GuideL You must define an LX address in the ppciboot menu before loading a saved configurat

System AdministrationLoading the Configuration from Network 4-7 Loading the Configuration from NetworkYou can load a configuration .zip file that wa

4-8 Applying Default Configurations to Other UnitsLX Series Configuration Guide 4. If you enter y, the LX reboots, loading the new configuration fr

xii Table of ContentsLX-Series Configuration GuideSharing and Unsharing the Telnet Client 13-25Configuring a Remote Cluster Member 13-26GUI Cluster

System AdministrationConfiguring SFTP 4-9 Configuring SFTPSecure File Transfer Protocol (SFTP) allows you to securely update images and load/save co

4-10 Configuring SFTPLX Series Configuration GuideExample Config:0 >>sftp password ottos_secretX To generate an SFTP Public/Private KeyThis c

System AdministrationConfiguring SFTP 4-11 2. Enter a new passphrase (this will not appear on the screen). The following message appears:Enter the

4-12 Configuring Telnet ServerLX Series Configuration GuideConfiguring Telnet ServerYou can enable telnet server and configure telnet server to sen

System AdministrationScripting On External Units 4-13 Scripting On External UnitsThe LX unit supports Expect scripting. Expect is a common, simple,

4-14 Upgrading Software and ppciboot using the Command-Line InterfaceLX Series Configuration GuideUpgrading Software and ppciboot using the Command

System AdministrationUpgrading Software and ppciboot using the Command-Line Interface 4-15 By default, the software stores in memory the IP address

4-16 ppciboot Factory Default SettingsLX Series Configuration GuideL You can load a default configuration file from a TFTP/SFTP server while the un

System AdministrationUpgrading Software with the ppciboot Main Menu 4-17 Upgrading Software with the ppciboot Main MenuThis section explains how to

4-18 Booting from the NetworkLX Series Configuration GuideBooting from the NetworkThe Boot from network option lets you boot your software image fi

LX-Series Configuration GuideTable of Contents xiii SNMP MIB Support 14-28References 14-28CHAPTER 15 Configuring Alarming with LX-7204T/7304T Senso

System AdministrationSaving the Image to Flash When Booting from the Network 4-19 2. Press B to boot the system. Do this only after you have made a

4-20 Setting the Timeout in SecondsLX Series Configuration GuideSetting the Timeout in SecondsThe Time Out, in seconds option lets you set the amou

System AdministrationSetting the Speed and Duplex Mode of the Ethernet Network Link 4-21 3. Press B to boot the system.Setting the Speed and Duplex

4-22 Changing the ppciboot PasswordLX Series Configuration GuideChanging the ppciboot PasswordThe Change ppciboot Password option lets you change t

System AdministrationEM316LX Configuration Menu 4-23 X To enable or disable FIPS security 1. Press the number 7 (FIPS 140-2 Security). The following

4-24 Entering a Software Image NameLX Series Configuration GuideX To enter a ppciboot image name 1. Press the number 9 (ppciboot image name). The E

System AdministrationResetting System Defaults 4-25 Resetting System DefaultsThe Reset to System Defaults option lets you reset the unit to system d

4-26 Booting the SystemLX Series Configuration GuideBooting the SystemThe Boot System option lets you boot the system. Be sure to save the configur

System AdministrationUsing the IP Configuration Menu 4-27 Figure 4.4 IP Configuration Menu Welcome to LX ppciboot Version x.x IP Config

4-28 Choosing an IP Assignment MethodLX Series Configuration GuideChoosing an IP Assignment MethodThe IP Assignment Method option lets you set the

xiv Table of ContentsLX-Series Configuration GuideResetting the Analog Name to its Default ... 15-28Enabling and Disabling the Ana

System AdministrationChanging the Network Mask 4-29 Changing the Network MaskThe Network Mask option lets you change the Network Mask (this applies

4-30 Changing the TFTP Server IP AddressLX Series Configuration GuideChanging the TFTP Server IP AddressThe TFTP Server IP Address option lets you

System AdministrationUsing EM316LX Configuration Menu 4-31 Using EM316LX Configuration MenuThe EM316LX Configuration Menu option lets you control an

4-32 Disabling the External I2C BusLX Series Configuration GuideX To enable the management port 1. Press the number 1 (Management Enable) to enable

System AdministrationConfiguring Image Names 4-33 Configuring Image NamesThese commands allow you to configure and default ppciboot and software ima

4-34 Updating the Software Image NameLX Series Configuration GuideX To default the software image nameUse the following command to default the conf

System AdministrationUpdating the ppciboot via a specific image name 4-35 X To update the software using the software image name and host IP address

4-36 Updating the ppciboot via a specific image nameLX Series Configuration GuideL A Host TFTP/SFTP server must be configured for this update to wo

System AdministrationUpdating the ppciboot via a specific image name 4-37 ExampleThe software image name and the ppciboot image name are displayed i

4-38 Booting from DefaultsLX Series Configuration GuideBooting from DefaultsWhen you boot a unit from defaults, it can take up to four minutes beca

LX-Series Configuration GuideTable of Contents xv CHAPTER 19 Alarm Input/Control Output PointsConfiguring Control Output 19-2Configuring Alarm Inpu

System AdministrationDefaulting from CLI 4-39 Defaulting from CLIWhen you default from the CLI, only the configuration (Config.prm) is erased. The S

4-40 ppciboot/linuxito DowngradeLX Series Configuration Guideppciboot/linuxito DowngradeThis feature allows you to downgrade to previous versions o

System AdministrationDowngrading ppciboot/linuxito 4-41 1. Save your configuration to a network tftp server (see "Saving the Configuration to

4-42 Downgrading ppciboot/linuxitoLX Series Configuration Guide 12.Type "r" to return to the main menu screen and make sure the Boot from

System AdministrationSystem and Status Screens 4-43 System and Status ScreensOther system characteristics screens and system status screens display

4-44 System and Status ScreensLX Series Configuration GuideUse the show system ip status command to display the System IP Status screen. An example

PART 2Configuring the LX Series UnitPart 2

Setting Up the Notification FeatureSetting Up the Notification Feature 5-1 CHAPTER 5 Setting Up the Notification FeatureThe Notification Feature is

5-2 Overview of the Notification FeatureLX Series Configuration GuideOverview of the Notification FeatureThe Notification Feature uses the syslog d

Setting Up the Notification FeatureConfiguring the Notification Feature 5-3 Configuring the Notification FeatureIn order to use the Notification Fea

xvi Table of ContentsLX-Series Configuration GuideConfiguring the Notification Feature with Multi-Level Commands...

5-4 Creating Service ProfilesLX Series Configuration GuideYou can create more than one Service Profile for each method of sending event messages.

Setting Up the Notification FeatureCreating Service Profiles 5-5 X To create a Service Profile 1. Access the Notification Command Mode. 2. Use the p

5-6 Creating Service ProfilesLX Series Configuration GuideX To configure a LOCALSYSLOG service profile 1. Execute the profile service command. The

Setting Up the Notification FeatureCreating Service Profiles 5-7 3. Execute the server command to specify the SNPP server to which notifyd will sen

5-8 Creating Service ProfilesLX Series Configuration Guide 3. Use the smsc command to specify the provider SMSC that will be used to send the event

Setting Up the Notification FeatureCreating Service Profiles 5-9 External Modem SettingsFor an internal modem, the default configuration is usually

5-10 Creating Service ProfilesLX Series Configuration Guide US Robotics Courier V. Everything modem:• The port needs CTS flow control.• The po

Setting Up the Notification FeatureCreating Service Profiles 5-11 3. In ASYNC Protocol command mode, execute the port command to specify the async

5-12 Creating Service ProfilesLX Series Configuration Guide 7. Optionally, the SYSLOG Notification Source Interface allows you to configure which c

Setting Up the Notification FeatureCreating Service Profiles 5-13 L If you specify a symbolic name (such as mrv.com) as the SMTP server, the LX firs

LX-Series Configuration GuideTable of Contents xvii Using Comment Lines in the Menu File K-11General Guidelines...

5-14 Overview of User ProfilesLX Series Configuration GuideOverview of User ProfilesA User Profile filters event messages by the type (facility) an

Setting Up the Notification FeatureOverview of User Profiles 5-15 The contact field specifies the destination (such as pager or cell phone) for User

5-16 User Profile Name RestrictionsLX Series Configuration GuideUser Profile Name RestrictionsThe following characters can not be included in a Use

Setting Up the Notification FeatureConfiguration Examples 5-17 Figure 5.2 shows an example of the User Profile Screen. Figure 5.2 User Profile Scre

5-18 syslogd Message Configuration ExampleLX Series Configuration Guidesyslogd Message Configuration ExampleThis example shows how to change the te

Setting Up the Notification FeatureLocalsyslog Example 5-19 Localsyslog ExampleThe following commands are used to configure the logging of events to

5-20 SNPP ExampleLX Series Configuration GuideCreate an empty log file as follows:#touch /tftpboot/log/user.warning.log#chmod 777 /tftpboot/log/use

Setting Up the Notification FeatureEmail Example 5-21 Email ExampleThe following commands configure the logging of events to an email address:Exampl

5-22 TAP ExampleLX Series Configuration GuideTAP ExampleThe following sequence of commands could be used to configure the logging of events via a w

Setting Up the Notification FeatureSNMP Example 5-23 Table 5.3, “Wireless SMSC Phone Numbers” is provided for your convenience.SNMP ExampleThe follo

xviii Table of ContentsLX-Series Configuration Guide

5-24 SSHD and DNSLX Series Configuration GuideSSHD and DNSSSHD uses DNS to resolve the IP address of an incoming connection. In the previous relea

Configuring IP InterfacesConfiguring IP Interfaces 6-1 CHAPTER 6 Configuring IP InterfacesAn IP interface is a logical interface for accessing the L

6-2 Configuring IP InterfacesLX Series Configuration GuideFor example, you could have an LX unit with an IP address of 117.19.23.5, a Broadcast add

Configuring IP InterfacesConfiguring IP Interfaces 6-3 It is possible for a subscriber with superuser privileges to log into the interface using SSH

6-4 Setting Up IP InterfacesLX Series Configuration GuideSetting Up IP InterfacesIP interfaces are created and configured in the Interface Command

Configuring IP InterfacesRe-Using IP Addresses 6-5 See the following sections to configure optional parameters for an IP interface: “Specifying SSH

6-6 Specifying Socket NumbersLX Series Configuration GuideSpecifying Socket NumbersIP interfaces have a default SSH Socket Number of 22 and a defau

Configuring IP InterfacesSpecifying Maximum Transmission Units (MTU) 6-7 X To specify an SSH socket number for a serial portExecute the serial comma

6-8 Configuring Local Authentication on an IP InterfaceLX Series Configuration GuideConfiguring Local Authentication on an IP InterfaceLocal authen

Configuring IP InterfacesConfiguring RADIUS Accounting on an Interface 6-9 X To enable LDAP authentication on the IP interfaceExecute the authentica

About This BookAbout This Book xix About This BookThis guide describes how to manage and configure the LX unit and provides support information for

6-10 Configuring TACACS+ Accounting on an InterfaceLX Series Configuration GuideRADIUS accounting can be used when a subscriber logs in to an async

Configuring IP InterfacesConfiguring a Rotary 6-11 LDAP, RADIUS, TACACS+, or RSA SecurID must be enabled on an IP interface in order for Fallback to

6-12 Configuring a RotaryLX Series Configuration GuideFigure 6.1 illustrates a rotary on an LX unit.Figure 6.1 Rotary Connections on an IP Interfa

Configuring IP InterfacesConfiguring a Rotary 6-13 In the preceding example, Rotary 1 is created and the LX asynchronous ports 1, 2, and 3 are assig

6-14 Removing Ports from a RotaryLX Series Configuration GuideRemoving Ports from a RotaryX To remove ports from a rotary 1. Execute the rotary por

Configuring IP InterfacesSetting Maximum Telnet Connections 6-15 X To verify that a rotary has been disabledExecute the monitor/show interface rotar

6-16 Displaying Interface InformationLX Series Configuration GuideX To display the interface characteristics of all IP interfacesUse the following

Configuring IP InterfacesDisplaying Interface Information 6-17 X To display interface port mappingUse the monitor/show interface port mapping comman

6-18 Displaying Interface InformationLX Series Configuration GuideX To display interface status for an IP interfaceUse the monitor/show interface s

Configuring IP InterfacesTelnet Client 6-19 X To display rotary information for an IP interfaceUse the monitor/show interface rotary command. In the

LX Series Configuration Guide April 2007All rights reserved. No part of this publication may be reproduced without the prior writtenconsent of MRV Com

xx How This Book is OrganizedLX Series Configuration GuideThis book also contains 12 appendixes:Part 2 (Cont.)Chapter 15 Configure the LX-7204T/730

6-20 Setting the BannerLX Series Configuration GuideSetting the BannerThis feature allows the administrator to configure a warning banner upon logi

Configuring IP InterfacesMessage of the Day Commands 6-21 Message of the Day CommandsThe Message of the Day allows you to display a message to the u

6-22 Message of the Day CommandsLX Series Configuration Guide

Configuring the Data Broadcast FeatureConfiguring the Data Broadcast Feature 7-1 CHAPTER 7 Configuring the Data Broadcast FeatureAll Slave Ports and

7-2 Setting Up Broadcast GroupsLX Series Configuration GuideSetting Up Broadcast GroupsX To set up a Broadcast Group 1. Access the Configuration Co

Configuring the Data Broadcast FeatureGuidelines for Adding Ports 7-3 BrGroups 4:0 >>mode line 7. Use the exit command to return to the Interf

7-4 Specifying Port OptionsLX Series Configuration GuideSpecifying Port OptionsYou can specify that a timestamp will be appended to each line of da

Configuring the Data Broadcast FeatureSpecifying Port Options 7-5 X To echo incoming data at slave portsUse the localecho option in the slave port c

7-6 Specifying Port OptionsLX Series Configuration GuideBrGroups 4:0 >>virtual authentication radius enableBrGroups 4:0 >>virtual authe

Configuring the Data Broadcast FeatureSpecifying Port Options 7-7 X To display Broadcast Group characteristics for a single Broadcast GroupUse the m

About This BookConventions xxi ConventionsThe following conventions are used throughout this guide:Online HelpThe question mark character (?), and t

7-8 Specifying Port OptionsLX Series Configuration GuideX To display a Broadcast Group summary for all Broadcast GroupsUse the monitor/show interfa

Configuring Subscriber AccountsConfiguring Subscriber Accounts 8-1 CHAPTER 8 Configuring Subscriber AccountsIn order for a user (subscriber) to use

8-2 Configuring Subscriber AccountsLX Series Configuration GuideConfiguring Subscribers with the Default TemplateUsers who connect to the LX and ar

Configuring Subscriber AccountsConfiguring Subscriber Accounts 8-3  When using a connect port async NUMBER from the CLI, if the Outbound authentica

8-4 Configuring Subscriber AccountsLX Series Configuration GuideFigure 8.1 Subscriber Default Characteristics ScreenYou can modify most of the def

Configuring Subscriber AccountsCreating Subscriber Accounts and Entering Subscriber Command Mode 8-5 Creating Subscriber Accounts and Entering Subsc

8-6 Subscriber Account SettingsLX Series Configuration GuideL When you create a new subscriber with the copy subscriber command, all subscriber cha

Configuring Subscriber AccountsSpecifying the Subscriber Access Methods 8-7 Specifying the Subscriber Access MethodsYou can specify up to four metho

8-8 Specifying the Subscriber Access MethodsLX Series Configuration GuideThe preceding example of the ssh log level command specifies that SSH mess

Configuring Subscriber AccountsSpecifying the Subscriber Access Methods 8-9 When a subscriber has a unique SSH key, he/she can log on to the LX unit

xxii Online HelpLX Series Configuration GuideFor example, the following is displayed when you type the ? character at the User mode command prompt:

8-10 Specifying the Subscriber Access MethodsLX Series Configuration GuideX To configure a subscriber account for outlet access 1. Execute the secu

Configuring Subscriber AccountsDialback Access 8-11 Dialback AccessThe LX unit supports Dialback as an access method for LX subscribers. Under Dial

8-12 Setting Up Session and Terminal ParametersLX Series Configuration GuideX To create a Modem Pool 1. Access the Modem Command Mode for the modem

Configuring Subscriber AccountsSetting Up Session and Terminal Parameters 8-13 X To enable the screen pause feature for a subscriberUse the pause en

8-14 Setting Up the Session Switch CharactersLX Series Configuration GuideX To set the Inactivity TimeoutUse the idletime command to set the Inacti

Configuring Subscriber AccountsSetting Up the Session Switch Characters 8-15 X To configure session switch characters for a subscriberUse the follow

8-16 Configuring the Subscriber PasswordLX Series Configuration GuideConfiguring the Subscriber PasswordThe default password for the LX InReach sub

Configuring Subscriber AccountsWarning Banner 8-17 X To add Superuser privileges to a subscriber accountUse the security level superuser command:Exa

8-18 Specifying Escape CharactersLX Series Configuration GuideSpecifying Escape CharactersYou can configure an SSH or Telnet escape character in th

Configuring Subscriber AccountsSpecifying a Dedicated Service 8-19 Specifying a Dedicated ServiceYou can permanently assign the subscriber to a dedi

About This BookAdditional Help xxiii  Type the ? character (or press the Tab key) after the displayed keyword to list the options for that keyword.

8-20 Specifying a Security LevelLX Series Configuration GuideSpecifying a Security LevelThe Security Level specifies the privileges that the subscr

Configuring Subscriber AccountsEnabling the Menu Feature 8-21 X To display the contents of the audit logExecute the show audit log command in Superu

8-22 Displaying Subscriber InformationLX Series Configuration GuideDisplaying Subscriber InformationThis section describes how to display subscribe

Configuring Subscriber AccountsDisplaying Subscriber Information 8-23 Figure 8.2 Subscriber Characteristics ScreenSee the monitor/show subscriber c

8-24 Displaying Subscriber InformationLX Series Configuration GuideX To display the subscriber statusUse the monitor/show subscriber status command

Configuring Subscriber AccountsDisplaying Subscriber Information 8-25 X To display subscriber TCP information for all subscribersUse the following c

8-26 Displaying the Audit Log for a SubscriberLX Series Configuration GuideSee the monitor/show subscriber summary command in the LX Series Command

Configuring Subscriber AccountsAssigning a Public Key to a Subscriber 8-27 X To display the command log for a subscriberUse the monitor/show command

8-28 Assigning a Public Key to a SubscriberLX Series Configuration GuideL In the preceding example, the attribute -f is for filename and the attrib

Configuring Subscriber AccountsGenerating the Key and Assigning it to a Subscriber 8-29 This should allow the subscriber gina to connect straight in

xxiv Additional HelpLX Series Configuration GuideIf you have used help to list all the configured menu names, you can complete the menu names by ty

8-30 Changing the SSH Key PassphraseLX Series Configuration GuideTo create a new passphrase, do the following: 1. Enter ssh keygen passphrase and p

Configuring Async Port FeaturesConfiguring Async Port Features 9-1 CHAPTER 9 Configuring Async Port FeaturesYou can configure ports to act as temper

9-2 Configuring Sensor Access for LX PortsLX Series Configuration GuideConfiguring Sensor Access for LX PortsYou need to configure an LX port’s acc

Configuring Async Port FeaturesDisplaying Sensor Summaries 9-3 Figure 9.1 shows an example of the Device Status Screen for a Sensor port. Figure 9

9-4 Configuring the IdleBufferLX Series Configuration GuideConfiguring the IdleBufferThe IdleBuffer is enabled by default. Therefore, the async por

Configuring Async Port FeaturesConfiguring the IdleBuffer 9-5 Figure 9.3, “Port Characteristics Screen for IdleBuffer” shows this screen with the Id

9-6 Customizing Asynchronous Port SettingsLX Series Configuration GuideCustomizing Asynchronous Port SettingsThe default settings for an LX asynchr

Configuring Async Port FeaturesCustomizing Asynchronous Port Settings 9-7 2. Access the Asynchronous Command Mode for the asynchronous ports for wh

9-8 Configuring Asynchronous Ports for Data BufferingLX Series Configuration GuideConfiguring Asynchronous Ports for Data BufferingThis example sho

Configuring Async Port FeaturesConfiguring Asynchronous Ports for Data Buffering 9-9 4. Specify that a timestamp will be added to every line of dat

PART 1Before You Configure the LX Series UnitPart 1

9-10 Configuring Asynchronous Ports for Data BufferingLX Series Configuration GuideFigure 9.4, “Port Databuffer Characteristics Screen” shows the h

Configuring Async Port FeaturesRS-485 CLI Support 9-11 RS-485 CLI SupportThe LX-1004 Series supports an RS-485 option. Commands and show screens hav

9-12 RS-485 CLI SupportLX Series Configuration GuideAsync1:0 >>rs485 transmitter rts enableX To view RS-485 informationUse the show port asyn

Configuring Async Port FeaturesTelnet Serial-Over-IP (RFC2217) Support 9-13 Telnet Serial-Over-IP (RFC2217) SupportTelnet Serial-Over-IP (RFC2217) a

9-14 Default TCP Transmit ModeLX Series Configuration GuideX To view RFC2217 informationUse the show port async <port_number> rfc2217 command

Configuring Async Port FeaturesPort Mirroring 9-15 Port MirroringThe Port Mirroring feature allows multiple subscribers to connect to the same port

9-16 Port MirroringLX Series Configuration GuideX To enable mirroring on async portsUse the max mirror connections command to determine the maximum

Configuring Async Port FeaturesPort Mirroring 9-17 X To display the Port Async Characteristics screenUse the show port async <port_number> cha

9-18 Port MirroringLX Series Configuration GuideX To display the Subscriber Characteristics screenUse the show subscriber <subscriber_name> c

Configuring Async Port FeaturesDisplaying Port Async Summaries 9-19 Displaying Port Async SummariesUse the show port async summary command to displa

Using the Command-Line InterfaceUsing the Command-Line Interface 1-1 CHAPTER 1 Using the Command-Line InterfaceThe LX Series Command-Line Interface

9-20 Port Async ConnectLX Series Configuration GuidePort Async ConnectPreviously, the Port Async connect command would connect automatically when i

Configuring Async Port FeaturesSetting the Banner 9-21 Setting the BannerThis feature allows the administrator to configure a warning banner that ap

9-22 Setting the BannerLX Series Configuration GuideUse the show port async <port_number> characteristics command to display the Show Port As

Configuring Async Port FeaturesSetting the Banner 9-23 The Inbound and Outbound Banner Display fields appear in the lower left side of the screen if

9-24 Setting the BannerLX Series Configuration GuideUse the show port async <port_number> login command to display the Port Async Login scree

Configuring Async Port FeaturesInbound and Outbound Authentication 9-25 Inbound and Outbound AuthenticationA command has been added to simplify sett

9-26 Message of the Day CommandsLX Series Configuration GuideMessage of the Day CommandsThe Message of the Day allows you to display a message to t

Configuring Async Port FeaturesMessage of the Day Commands 9-27 Use the show port async <port_number> characteristics command to display the P

9-28 Message of the Day CommandsLX Series Configuration GuideThe Inbound and Outbound MOTD Display fields appear in the lower left side of the scre

Configuring Async Port FeaturesDSR Wait 9-29 DSR WaitThis feature allows you to proceed with port connection without waiting until DSR is up. There

1-2 Using the Command-Line InterfaceLX Series Configuration GuideFigure 1.1 LX Command ModesTrigger-ActionConfigurationNotificationInterfaceBroadc

9-30 DSR WaitLX Series Configuration GuideUse the monitor/show port async <port_number> characteristics command to display the Show Port Asyn

Configuring Power Control UnitsConfiguring Power Control Units 10-1 CHAPTER 10 Configuring Power Control UnitsThe Power Control Units (5250, 5150, a

10-2 Configuring Power Control UnitsLX Series Configuration GuideX To configure an LX asynchronous port as a POWER portUse the access power command

Configuring Power Control UnitsDefault Name for an Outlet 10-3 Default Name for an OutletThe default name for an outlet is derived from its POWER po

10-4 Specifying the Off TimeLX Series Configuration GuideThe Power Control unit must be serially attached to the LX asynchronous port when you crea

Configuring Power Control UnitsNaming an Outlet 10-5 Naming an OutletYou can assign a descriptive name of up to 15 alphanumeric characters to an out

10-6 Rebooting or Turning Outlets On or OffLX Series Configuration GuideRebooting or Turning Outlets On or OffThis section describes how to reboot

Configuring Power Control UnitsDisabling the Off Option for Power Outlets 10-7 Disabling the Off Option for Power OutletsMission-critical outlets ar

10-8 Accessing the 5250/5150/4800 CLILX Series Configuration GuideAccessing the 5250/5150/4800 CLIIn order to access the 5250/5150/4800 CLI from an

Configuring Power Control UnitsConfiguring Unique 5250, 5150 and 4800 Features 10-9 Configuring Unique 5250, 5150 and4800 FeaturesThis section descr

Using the Command-Line InterfaceAbout Command Modes 1-3 About Command ModesEach command mode uses a unique command prompt (for example, Config:0 >

10-10 Enabling the Factory Reset ButtonLX Series Configuration GuideEnabling the Factory Reset ButtonThe 5250/5150/4800 unit includes a Factory Res

Configuring Power Control UnitsSpecifying the 5250/5150/4800 Admin Name 10-11 X To specify the 5250/5150/4800 Admin Name 1. Access the Asynchronous

10-12 Specifying the Password for the 5250/5150/4800 UnitLX Series Configuration GuideSpecifying the Password for the 5250/5150/4800 UnitThe Passwo

Configuring Power Control UnitsEnabling 5250/5150/4800 Authentication 10-13 Enabling 5250/5150/4800 AuthenticationAfter you have specified the 5250/

10-14 Enabling SCPLX Series Configuration GuideEnabling SCPIf you are unable to communicate to the Power unit, SCP may be disabled on the unit. X T

Configuring Power Control UnitsDisplaying Information on Power Control Units 10-15 Displaying Information on Power Control UnitsThis section describ

10-16 Displaying Information on Power Control UnitsLX Series Configuration GuideFigure 10.2 shows an example of the Device Status Screen for a 5250

Configuring Power Control UnitsDisplaying Information on Power Control Units 10-17 Figure 10.2 shows an example of the Device Status Screen for a 51

10-18 Displaying Information on Power Control UnitsLX Series Configuration GuideFigure 10.3 shows an example of the Device Status Screen for a 4800

Configuring Power Control UnitsDisplaying Information on Power Control Units 10-19 X To display status information for outlet groupsUse the monitor/

1-4 About Command ModesLX Series Configuration GuideX To enter a nested command modeEnter the appropriate command from the previous command mode.

10-20 Displaying Information on Power Control UnitsLX Series Configuration GuideL The monitor/show device summary command displays summary informat

Configuring the Trigger-Action FeatureConfiguring the Trigger-Action Feature 11-1 CHAPTER 11 Configuring the Trigger-Action FeatureThe Trigger-Actio

11-2 Configuring the Trigger-Action FeatureLX Series Configuration GuideThe following events can be configured as triggering events (for example, t

Configuring the Trigger-Action FeatureGreenwich Time Display 11-3 Greenwich Time DisplayMRV uses POSIX-style signs in the Zone names and the output

11-4 Guidelines for Creating or Modifying ActionsLX Series Configuration GuideGuidelines for Creating or Modifying ActionsKeep the following in min

Configuring the Trigger-Action FeatureGuidelines for Creating or Modifying Actions 11-5 After you have specified an LX command for the Action, you c

11-6 Guidelines for Creating or Modifying ActionsLX Series Configuration GuideX To configure an alarm trigger 1. Execute the alarm type command to

Configuring the Trigger-Action FeatureGuidelines for Creating or Modifying Actions 11-7 The Alarm Condition is true if the state of the faulted stat

11-8 Guidelines for Creating or Modifying ActionsLX Series Configuration GuideX To configure a clock-based durationExecute the duration time comman

Configuring the Trigger-Action FeatureGuidelines for Creating or Modifying Actions 11-9 X To configure a humidity triggerExecute the humidity comman

iii FCC NoticeBSMI NoticeCAUTIONThis equipment has been tested and found to comply with the limits for a Class Adigital device, pursuant to Part 15

Using the Command-Line InterfaceCommand Mode Descriptions 1-5 Command Mode DescriptionsThe following sections describe the LX command modes and the

11-10 Guidelines for Creating or Modifying ActionsLX Series Configuration GuideX To configure a day-based triggerExecute the instant day command to

Configuring the Trigger-Action FeatureGuidelines for Creating or Modifying Actions 11-11 X To configure a ping trigger 1. Execute the ping address c

11-12 Guidelines for Creating or Modifying ActionsLX Series Configuration GuideX To configure a power port async lost contact triggerL This command

Configuring the Trigger-Action FeatureGuidelines for Creating or Modifying Actions 11-13 X To monitor the power threshold based on the sum of the lo

11-14 Guidelines for Creating or Modifying ActionsLX Series Configuration GuideX To configure a power input voltage threshold triggerExecute the po

Configuring the Trigger-Action FeatureGuidelines for Creating or Modifying Actions 11-15 X To configure a CTS signal triggerExecute the signal port

11-16 Guidelines for Creating or Modifying ActionsLX Series Configuration GuideX To configure a temperature onboard triggerExecute the onboard temp

Configuring the Trigger-Action FeatureGuidelines for Creating or Modifying Actions 11-17 X To display information about triggersUse the show trigger

11-18 Disabling RulesLX Series Configuration Guide 4. Execute the action command to specify an Action for the Rule:Example Rule_ACTurnOnRule7:0 >

Configuring the Trigger-Action FeatureDisabling Rules 11-19 X To display information about rulesUse the show trigger-action rule characteristics com

1-6 Command Mode DescriptionsLX Series Configuration GuideL If you change a parameter in the Configuration Mode, and then exit this mode, the follo

11-20 Disabling RulesLX Series Configuration Guide 6. Execute the following command at the Trigger-action:0 >> prompt:Example Trigger-action:

Configuring the Trigger-Action FeatureDisabling Rules 11-21 X To display information about power input:Use the show system power command:Example InR

11-22 Disabling RulesLX Series Configuration Guide

Configuring iptables and ip6tablesConfiguring iptables and ip6tables 12-1 CHAPTER 12 Configuring iptables and ip6tablesThis chapter describes how t

12-2 IP FirewallLX Series Configuration GuideIP FirewallThe MRV Graphical User Interface (GUI) provides a simple, limited method for configuring ip

Configuring iptables and ip6tablesIP Firewall 12-3 Figure 12.1 shows the confirmation window that appears in a blank input table.Figure 12.1 Blank

12-4 IP FirewallLX Series Configuration GuideFigure 12.2 shows a “loaded” input table.Figure 12.2 Loaded input table

Configuring iptables and ip6tablesIP Firewall 12-5 Figure 12.3 shows a “loaded” output table.Figure 12.3 Loaded output tableAfter you are in the Fi

12-6 IP FirewallLX Series Configuration GuideX To create a firewall and rules 1. Set the policy for both Input and Output by selecting one option f

Configuring iptables and ip6tablesIP Firewall 12-7 5. Optionally, click the question mark button in the upper-right corner of the screen to display

Using the Command-Line InterfaceCommand Mode Descriptions 1-7 Contains commands for configuring asynchronous ports on the LX unit.Accessed by Execut

12-8 IP FirewallLX Series Configuration GuideX To modify a rule 1. Select one entry (rule) from the Firewall table and press the Modify button. The

Configuring iptables and ip6tablesUpdating the Firewall 12-9 Updating the FirewallAll the preceding operations are first changed locally; nothing ha

12-10 Configuring Packet Filters Using the iptables and ip6tables CommandsLX Series Configuration GuideA chain consists of a series of rules that s

Configuring iptables and ip6tablesConfiguring Packet Filters Using the iptables and ip6tables Commands 12-11 whereX To create a rule allow outbound

12-12 Configuring Packet Filters Using the iptables and ip6tables CommandsLX Series Configuration GuideX To create a rule that prevents Telnet requ

Configuring iptables and ip6tablesUsing iptables and ip6tables Command Options 12-13 Using iptables and ip6tables Command OptionsYou can use the -I

12-14 Using iptables and ip6tables Command OptionsLX Series Configuration GuideX To save changes to a ruleExecute the save configuration command in

Configuring the Cluster Configuration and Control FeatureConfiguring the Cluster Configuration and Control Feature 13-1 CHAPTER 13 Configuring the C

13-2 What is a Cluster?LX Series Configuration GuideEach LX unit can get a software update from the TFTP server and write it to flash. The reboot i

Configuring the Cluster Configuration and Control FeatureHow the Protocol Works 13-3 How the Protocol WorksCluster Configuration and Control uses Di

1-8 Command Mode DescriptionsLX Series Configuration GuideContains commands for configuring modems on LX asynchronous ports.Accessed byExecuting th

13-4 Cluster Configuration and Control RulesLX Series Configuration GuideCluster Configuration and Control Rules Your cluster can have only one ma

Configuring the Cluster Configuration and Control FeatureCreating a Cluster Secret 13-5  Select a unit with the highest density port count in the c

13-6 Creating a Cluster SecretLX Series Configuration Guide 2. If the unit has loaded from defaults, the following message displays:The unit has lo

Configuring the Cluster Configuration and Control FeatureCreating a Cluster Secret 13-7 9. Press y (yes) and press <Enter>. The word Configur

13-8 Creating a Cluster SecretLX Series Configuration GuideX To create a cluster 1. In Cluster Command Mode, enter the address of all LX units (inc

Configuring the Cluster Configuration and Control FeatureSharing Attributes with Other Nodes Within the Cluster 13-9 Sharing Attributes with Other N

13-10 Sharing Attributes with Other Nodes Within the ClusterLX Series Configuration GuideFigure 13.2 Attributes tablesSystem Attributes Primary D

Configuring the Cluster Configuration and Control FeatureSharing Attributes with Other Nodes Within the Cluster 13-11 X To unshare an attribute loca

13-12 Sharing Attributes with Other Nodes Within the ClusterLX Series Configuration GuideFigure 13.3 shows a Cluster Characteristics Screen. Figure

Configuring the Cluster Configuration and Control FeatureUpdating the Software 13-13 Updating the SoftwareYou can update the software on an individu

Using the Command-Line InterfaceCommand Mode Descriptions 1-9 Contains commands for configuring IP interfaces on the LX unit.Accessed byExecuting th

13-14 Updating the ppcibootLX Series Configuration Guide 2. To run the new image, you must perform a reboot. Enter the following command:Example In

Configuring the Cluster Configuration and Control FeatureUser Graphical User Interface (GUI) 13-15 2. To run the new image, you must perform a rebo

13-16 User Graphical User Interface (GUI)LX Series Configuration GuideL Set the Web Access Mode to “Menu” if the subscriber wants to access the de

Configuring the Cluster Configuration and Control FeatureUser Graphical User Interface (GUI) 13-17 5. Access the LX GUI via the web and login with

13-18 User Graphical User Interface (GUI)LX Series Configuration GuideSelect Cluster from the View menu at the top right side of the window to view

Configuring the Cluster Configuration and Control FeatureUser Graphical User Interface (GUI) 13-19 X To enable or disable generating debug informati

13-20 User Graphical User Interface (GUI)LX Series Configuration GuideX To search a cluster for a port name or access methodUse the cluster search

Configuring the Cluster Configuration and Control FeatureSharing and Unsharing Interfaces 13-21 X To name a clusterIn Superuser Command Mode, use th

13-22 Sharing and Unsharing SubscribersLX Series Configuration GuideX To view which interfaces are shared or unsharedType show cluster characterist

Configuring the Cluster Configuration and Control FeatureSharing and Unsharing the Authenticate Image 13-23 Sharing and Unsharing the Authenticate

1-10 Command Mode DescriptionsLX Series Configuration GuideContains commands for configuring the LX Notification Feature.Accessed byExecuting the n

13-24 Sharing and Unsharing the MessageLX Series Configuration GuideSharing and Unsharing the MessageYou can share the message with any or all othe

Configuring the Cluster Configuration and Control FeatureSharing and Unsharing the Telnet Client 13-25 Sharing and Unsharing the Telnet ClientYou ca

13-26 Configuring a Remote Cluster MemberLX Series Configuration GuideConfiguring a Remote Cluster MemberYou can issue a CLI command to any remote

Configuring the Cluster Configuration and Control FeatureGUI Cluster 13-27 GUI ClusterThe LX GUI displays information on nodes, port types, and port

13-28 Launching the GUI Cluster ExplorerLX Series Configuration Guide 3. You can right-click on any host, port, or group of ports in the list and s

Configuring the Cluster Configuration and Control FeatureCluster Automatic Discovery and Setup 13-29 Cluster Automatic Discovery and SetupThis ease

13-30 Cluster Automatic DiscoveryLX Series Configuration GuideIf you attempt to add an address to the cluster, but it was already a cluster member,

Configuring the Cluster Configuration and Control FeatureCluster Automatic Discovery 13-31 5. Click the Add Known Unit button (to open the Add Sing

13-32 Cluster Automatic DiscoveryLX Series Configuration Guide 7. All LX units that Cluster Automatic Discovery finds within the range you specifie

Configuring the Cluster Configuration and Control FeatureCluster Automatic Setup 13-33 Cluster Automatic SetupThe Cluster Automatic Setup feature au

Using the Command-Line InterfaceCommand Mode Descriptions 1-11 Contains the port command for specifying the asynchronous port parameter for a Servic

13-34 Cluster Automatic SetupLX Series Configuration Guidewhere <username> is the username used to log into the remote systems, <password&

SNMP ConfigurationSNMP Configuration 14-1 CHAPTER 14 SNMP ConfigurationThis chapter provides information about SNMP and MIBs, and includes procedure

14-2 Network Management SystemLX Series Configuration GuideNetwork Management SystemNetwork Management Systems monitor and control network elements

SNMP ConfigurationManagement Information 14-3 A managed object is one of any number of characteristics of a managed device. Managed objects are comp

14-4 OID Structure ExampleLX Series Configuration GuideMIBs are organized into MIB modules. A MIB module is a file defining managed MIB objects. In

SNMP ConfigurationOID Structure Example 14-5 Table 14.1 Standard MIBsRFC Number DescriptionRFC 1213 MIB-2RFC 1658 Character MIBRFC 2465 IPv6 MIBRFC

14-6 OID Structure ExampleLX Series Configuration GuideTable 14.4 LX Enterprise-Specific SNMP TrapsIDNameIndicates that1irNotifyEvent A text mess

SNMP ConfigurationLX Fault/Cleared Alarm SNMP Trap Pairings 14-7 LX Fault/Cleared Alarm SNMP Trap PairingsTable 14.5 shows the pairings of a fault a

14-8 SecurityLX Series Configuration GuideSecurityAdditional security is provided by only allowing SNMP requests from hosts that are configured in

SNMP ConfigurationAdding or Removing an SNMP GET Client 14-9 X To configure a source interface on SNMPOptionally, the SNMP Interface allows you to i

1-12 Command Mode DescriptionsLX Series Configuration GuideContains the server command for configuring the server for a Service Profile of the SMTP

14-10 Adding or Removing an SNMP SET ClientLX Series Configuration GuideExamplesL A community string can be up to 32 characters long.Adding or Remo

SNMP ConfigurationAdding and Removing SNMP Trap Clients 14-11 Adding and Removing SNMP Trap ClientsA Trap Client is a specific NOC to which the devi

14-12 Adding and Removing SNMP V3 Group EntriesLX Series Configuration Guidewhere X To remove an SNMP V3 user entryUse the following command:Exampl

SNMP ConfigurationAdding and Removing SNMP V3 Access Entries 14-13 ExamplesAdding and Removing SNMP V3 Access EntriesYou can configure up to 10 V3 A

14-14 Adding and Removing SNMP V3 View EntriesLX Series Configuration GuideAdding and Removing SNMP V3 View EntriesUse this command to configure an

SNMP ConfigurationMIB-II System Group Configuration 14-15 MIB-II System Group ConfigurationThis section describes how to configure the MIB-II sysCon

14-16 AccessLX Series Configuration GuideAccessThis defines the abilities available to a GROUP that is bound to a specific access entry. Access de

SNMP ConfigurationSNMP V3 Commands 14-17 SNMP V3 CommandsThe LX supports SNMP V3. The SNMP V3 commands are:monitor/show snmp v3 accessmonitor/show

14-18 SNMP V3 CommandsLX Series Configuration GuideX To configure SNMP V3 for No Authentication and No Privacy 1. Configure the user:Example Snmp:0

SNMP ConfigurationSNMP V3 Commands 14-19 6. Configure access:Example Snmp:0 >>v3 access 2 name groupallSnmp:0 >>v3 access 2 readview vi

Using the Command-Line InterfaceCommand Mode Descriptions 1-13 Contains the service command for specifying a Service Profile for a User Profile.Acce

14-20 SNMP V3 CommandsLX Series Configuration Guide 5. Configure protocols and passwords:Example Snmp:0 >>v3 user 1 privproto desSnmp:0 >&

SNMP ConfigurationConfiguring a Trap Client User Index 14-21 Configuring a Trap Client User IndexThe trap client user index command has been added.L

14-22 Displaying SNMP InformationLX Series Configuration GuideDisplaying SNMP InformationThe following sections explain how to access the SNMP Show

SNMP ConfigurationDisplaying SNMP Information 14-23 X To show SNMP clientsUse the show snmp client command syntax to display the SNMP client informa

14-24 Show the SNMP V3 SettingsLX Series Configuration GuideShow the SNMP V3 SettingsThe following sections explain how to access the SNMP V3 Show

SNMP ConfigurationShow the SNMP V3 Settings 14-25 X To show all SNMP V3 viewUse the snmp v3 view all command:Example InReach:0 >>show snmp v3

14-26 Show the SNMP V3 SettingsLX Series Configuration GuideX To show the SNMP V3 group settingsUse the following command syntax:Syntax In-Reach:0

SNMP ConfigurationShow the SNMP V3 Settings 14-27 X To show the SNMP V3 user settingsUse the following command:Syntax In-Reach:0 >>show snmp v

14-28 Dual Power Supply SNMP TrapsLX Series Configuration GuideDual Power Supply SNMP TrapsSNMP traps notify you of a Power Supply state change (on

Configuring Alarming with LX-7204T/7304T Sensor Manager and LDAMConfiguring Alarming with LX-7204T/7304T Sensor Manager and LDAM 15-1 CHAPTER 15 Con

1-14 Command Mode DescriptionsLX Series Configuration GuideContains commands for enabling, disabling, and specifying Actions and Triggers for Rules

15-2 Configuring the HDAM PortLX Series Configuration GuideConfiguring the HDAM PortThe LX-7204T and Option Modules are managed from a port on the

Configuring Alarming with LX-7204T/7304T Sensor Manager and LDAMUpdating the LX-7204T/7304T Firmware 15-3 The LX-7204T/7304T reboots automatically a

15-4 Using the Alarm Input CommandsLX Series Configuration GuideUsing the Alarm Input CommandsThis section explains how to configure the alarm inpu

Configuring Alarming with LX-7204T/7304T Sensor Manager and LDAMEnabling and Disabling Audible Alarms 15-5 X To configure a descriptive name for any

15-6 Enabling and Disabling Audible AlarmsLX Series Configuration Guide 2. Use the following command syntax to enable and disable the audible alarm

Configuring Alarming with LX-7204T/7304T Sensor Manager and LDAMConfiguring an Alarm Input Description String 15-7 Configuring an Alarm Input Descri

15-8 Defaulting the Description for an Alarm InputLX Series Configuration GuideDefaulting the Description for an Alarm InputUse the following comma

Configuring Alarming with LX-7204T/7304T Sensor Manager and LDAMEnabling and Disabling SNMP Traps for Alarm State Changes 15-9 Enabling and Disablin

15-10 Configuring the Debounce Interval for an AlarmLX Series Configuration GuideExampleConfiguring the Debounce Interval for an AlarmAn Alarm Inpu

Configuring Alarming with LX-7204T/7304T Sensor Manager and LDAMConfiguring the Fault State for Alarm Inputs 15-11 whereExampleConfiguring the Faul

iv LX Series Configuration GuideVCCI NoticeThis is a Class A product based on the standard of the Voluntary Control Council for Interference by Inf

Using the Command-Line InterfaceCommand Mode Descriptions 1-15 Contains commands for specifying the conditions for triggers.Accessed byExecuting the

15-12 Configuring the Fault State for Alarm InputsLX Series Configuration GuideX To configure the fault state for alarm inputs for multiple alarmsU

Configuring Alarming with LX-7204T/7304T Sensor Manager and LDAMConfiguring a Severity Level for Alarm Inputs 15-13 Configuring a Severity Level for

15-14 Resetting the Alarm Input Name to Its DefaultLX Series Configuration GuideExampleResetting the Alarm Input Name to Its DefaultUse the followi

Configuring Alarming with LX-7204T/7304T Sensor Manager and LDAMResetting Alarm Inputs to the Defaults 15-15 ExampleResetting Alarm Inputs to the De

15-16 Using the Control Output CommandsLX Series Configuration GuideExampleUsing the Control Output CommandsThis section explains how to configure

Configuring Alarming with LX-7204T/7304T Sensor Manager and LDAMNaming Control Outputs 15-17 Example X To configure a name for a control output for

15-18 Setting Control Output as Open or ClosedLX Series Configuration GuideSetting Control Output as Open or ClosedUse the following commands to se

Configuring Alarming with LX-7204T/7304T Sensor Manager and LDAMConfiguring a Control Output Description String 15-19 Configuring a Control Output D

15-20 Defaulting the Description for a Control OutputLX Series Configuration GuideExampleDefaulting the Description for a Control OutputUse the fol

Configuring Alarming with LX-7204T/7304T Sensor Manager and LDAMSetting the Active State of a Named Control 15-21 ExampleSetting the Active State of

1-16 Using the Function KeysLX Series Configuration GuideUsing the Function KeysThe LX Command Line Interface (CLI) supports the following function

15-22 Resetting Control Outputs to the DefaultsLX Series Configuration GuideExamplesResetting Control Outputs to the DefaultsUse the following comm

Configuring Alarming with LX-7204T/7304T Sensor Manager and LDAMResetting the Control Output Name to its Default 15-23 ExamplesResetting the Control

15-24 Using the Analog Input CommandsLX Series Configuration GuideUsing the Analog Input CommandsThis section explains how to configure the analog

Configuring Alarming with LX-7204T/7304T Sensor Manager and LDAMConfiguring an Analog Input Description String 15-25 L All names across the Master L

15-26 Defaulting the Description for an Analog InputLX Series Configuration GuideExamplesDefaulting the Description for an Analog InputUse the foll

Configuring Alarming with LX-7204T/7304T Sensor Manager and LDAMResetting Analog Inputs to the Defaults 15-27 ExamplesResetting Analog Inputs to the

15-28 Resetting the Analog Name to its DefaultLX Series Configuration GuideExamplesResetting the Analog Name to its DefaultUse the following comman

Configuring Alarming with LX-7204T/7304T Sensor Manager and LDAMEnabling and Disabling the Analog State 15-29 ExamplesEnabling and Disabling the Ana

15-30 Enabling and Disabling the Analog StateLX Series Configuration GuideX To calibrate analog inputsUse the following command syntax:Syntax hdam

Configuring Alarming with LX-7204T/7304T Sensor Manager and LDAMEnabling and Disabling the Analog State 15-31 ExamplesX To send a user-generated mes

Performing the Initial SetupPerforming the Initial Setup 2-1 CHAPTER 2 Performing the Initial Setup This chapter describes the initial setup of the

15-32 Displaying HDAM InformationLX Series Configuration GuideDisplaying HDAM InformationThis section explains how to display HDAM show screens.X T

Configuring Alarming with LX-7204T/7304T Sensor Manager and LDAMDisplaying HDAM Information 15-33 X To view HDAM port characteristics informationUse

15-34 Displaying HDAM InformationLX Series Configuration GuideX To view HDAM control name informationUse the show hdam control <control_name>

Configuring Alarming with LX-7204T/7304T Sensor Manager and LDAMDisplaying HDAM Information 15-35 Figure 15.6 shows an example of the HDAM Analog Na

15-36 Displaying HDAM InformationLX Series Configuration GuideFigure 15.8 shows an example of the HDAM Mapping Screen.Figure 15.8 HDAM Mapping Scr

Configuring Alarming with LX-7204T/7304T Sensor Manager and LDAMDisplaying HDAM Information 15-37 Figure 15.10, “HDAM Port/Slot/Point Characteristic

15-38 Displaying HDAM InformationLX Series Configuration GuideFigure 15.11, “HDAM Port/Slot/Point Characteristics Analog Card Screen” shows an exam

Configuring Alarming with LX-7204T/7304T Sensor Manager and LDAMDisplaying HDAM Information 15-39 Figure 15.13 shows an example of the HDAM Port/Slo

15-40 Displaying HDAM InformationLX Series Configuration GuideX To view HDAM status informationUse the show hdam <port_number> status command

Configuring Alarming with LX-7204T/7304T Sensor Manager and LDAMConfiguring the LDAM Port 15-41 Configuring the LDAM PortAll ports on an LX-Series u

2-2 Configuring TCP/IPLX Series Configuration GuideConfiguring TCP/IPYou can let the LX unit obtain its TCP/IP parameters from the network, or you

15-42 Naming Alarm InputsLX Series Configuration GuideNaming Alarm InputsThe default name for an alarm input is canonically derived from the port n

Configuring Alarming with LX-7204T/7304T Sensor Manager and LDAMNaming Alarm Inputs 15-43 X To configure an alarm input description string for a spe

15-44 Naming Alarm InputsLX Series Configuration GuideExampleX To enable and disable sending SNMP traps for alarm state changesUse the following co

Configuring Alarming with LX-7204T/7304T Sensor Manager and LDAMNaming Alarm Inputs 15-45 where ExamplesX To configure a severity level for alarm in

15-46 Naming Alarm InputsLX Series Configuration GuideX To reset the alarm input name to default for a specific alarm or multiple alarmsUse the fol

Configuring Alarming with LX-7204T/7304T Sensor Manager and LDAMUsing the Control Output Commands 15-47 Using the Control Output CommandsThis sectio

15-48 Naming Control OutputsLX Series Configuration GuideX To set the energize state of a named control to assert or deassert for a specific contro

Configuring Alarming with LX-7204T/7304T Sensor Manager and LDAMNaming Control Outputs 15-49 X To configure control output signal to assert or deass

15-50 Naming Control OutputsLX Series Configuration GuideX To configure a control output description string for a specific controlUse the following

Configuring Alarming with LX-7204T/7304T Sensor Manager and LDAMNaming Control Outputs 15-51 X To default a control output default description for a

Performing the Initial SetupObtaining TCP/IP Parameters from the Network 2-3 3. Enter the superuser password system. The Quick Configuration menu

15-52 Naming Control OutputsLX Series Configuration GuideX To reset a control output point to its default settings for a specific controlUse the fo

Configuring Alarming with LX-7204T/7304T Sensor Manager and LDAMDisplaying LDAM Information 15-53 Displaying LDAM InformationThis section explains h

15-54 Displaying LDAM InformationLX Series Configuration GuideX To display alarm characteristics for a specific alarm name or port/pointUse the fol

Configuring Alarming with LX-7204T/7304T Sensor Manager and LDAMDisplaying LDAM Information 15-55 Figure 15.18 shows an example of the LDAM Alarm Al

15-56 Displaying LDAM InformationLX Series Configuration GuideX To display all LDAM control output characteristicsUse the following command syntax:

Configuring Alarming with LX-7204T/7304T Sensor Manager and LDAMDisplaying LDAM Information 15-57 Figure 15.21 shows an example of the LDAM Control

15-58 Displaying LDAM InformationLX Series Configuration GuideX To display control status using a specific control name or port/pointUse the follow

Configuring PPPConfiguring PPP 16-1 CHAPTER 16 Configuring PPP This chapter describes how to configure PPP features.

16-2 Configuring an IP Interface for PPPLX Series Configuration GuideConfiguring an IP Interface for PPPYou can bind an IP interface to PPP and spe

Configuring PPPRe-binding an IP Interface to Eth0 16-3 Example Ppp 2-2:0 >>authentication chap 5. Execute the outbound secret command to speci

2-4 DHCP ClientLX Series Configuration Guide 8. Press y (yes) and press <Enter>. The following message displays:Save this information to fla

16-4 Setting Optional PPP ParametersLX Series Configuration GuideSetting Optional PPP ParametersThe LX supports several optional parameters for PPP

Configuring PPPIPCP Accept Address 16-5 IPCP Accept AddressYou can configure the PPP link to accept negotiation of local or remote addresses.X To en

16-6 IPCP Failure LimitLX Series Configuration GuideIPCP Failure LimitThe IPCP Failure Limit is the number of attempts at IPCP option negotiation t

Configuring PPPLCP Compression 16-7 LCP CompressionBy default, an IP interface will not try to negotiate the use of LCP compression over a PPP link.

16-8 LCP Echo IntervalLX Series Configuration GuideLCP Echo IntervalThe LCP Echo Interval is the interval between the sending of LCP echo requests.

Configuring PPPPPP Routing on the LX 16-9 PPP Routing on the LXPPP Routing makes it possible to access remote LX units that do not have Ethernet con

16-10 PPP Routing on the LXLX Series Configuration GuideX To implement PPP Routing 1. Configure an IP interface for PPP as described in “Configurin

Configuring PPPPPP Routing on the LX 16-11 Figure 16.2 shows an example of the PPP Characteristics Screen. Figure 16.2 PPP Characteristics ScreenX

16-12 Configuring PPP Dial-On-DemandLX Series Configuration GuideFigure 16.3 shows an example of the PPP Status Screen. Figure 16.3 PPP Status Sc

Configuring PPPConfiguring PPP Dial-On-Demand 16-13 Figure 16.4 illustrates the sample used in the following procedure.Figure 16.4 PPP Dial-On-Dema

Performing the Initial SetupDHCP Client 2-5 There is no DHCP enable/disable flag in Config mode. DHCP is sensed on or off based on whether ppciboot

16-14 Configuring PPP Dial-On-DemandLX Series Configuration Guide 5. Put the port into Dial on Demand mode using the existing mode. When you do thi

Configuring PPPPPP Backup 16-15 PPP BackupPPP Backup allows an LX to dial a “backup” PPP connection if contact to a given host is lost. The PPP conn

16-16 PPP BackupLX Series Configuration GuideThe appropriate settings for the diagram shown in Figure 16.5 are as follows:LX A SettingsInReach:0 &g

Configuring PPPPPP Backup 16-17 X To activate the ping backup link when both ping targets are lostUse the following command:InReach:0 >>config

16-18 Displaying PPP Backup InformationLX Series Configuration GuideDisplaying PPP Backup InformationUse the show interface <interface_number>

Configuring PPPPPP Dialback 16-19 X To display the PPP Status ScreenUse the show interface <interface_number> ppp status command. An example

16-20 PPP DialbackLX Series Configuration GuideFigure 16.9 shows an example of this screen:Figure 16.9 PPP Characteristics Screen with PPP Dialbac

Configuring PPPRSA SecurID PPP Fallback 16-21 RSA SecurID PPP FallbackThe LX PPP connection required you to type your username/password prior to dia

16-22 Sample ConfigurationLX Series Configuration GuideSample ConfigurationL Make sure you have a local user configured with which to authenticate.

Configuring PPPSample Configuration 16-23 X To configure any form of authentication as if it were a Local portUse the following commands:Async3:0 &g

2-6 DHCP ClientLX Series Configuration GuideThe following information is returned from Vendor Options: 1 - Subnet Mask 3 - Gateway IP address 6

16-24 Sample ConfigurationLX Series Configuration GuideX To display the Port Async Characteristics ScreenUse the show port async <port_number>

Configuring Redundant EthernetConfiguring Redundant Ethernet 17-1 CHAPTER 17 Configuring Redundant Ethernet This chapter describes how to configure

17-2 Redundant EthernetLX Series Configuration GuideRedundant EthernetMRV supports use of the Ethernet 2 port on a LX-8000 or LX-4000T series unit.

Configuring Redundant EthernetConfiguring Ethernet 2 as a Redundant Ethernet Link for Ethernet 1 17-3 X To configure Ethernet 2 as a second Ethernet

17-4 Configuring Ethernet 2 as a Redundant Ethernet Link for Ethernet 1LX Series Configuration GuideL Because only one link is active at one time,

Configuring Redundant EthernetBonding Link 17-5 Bonding LinkThis command monitors the physical link of the primary ethernet port if it goes down and

17-6 Bonding Link ARP IntervalLX Series Configuration GuideBonding Link ARP IntervalUse the bonding link arp interval command to configure an ARP i

Configuring Redundant EthernetDefaulting the Binding 17-7 L The second Ethernet port is inactive during boot, whether it is being used as a second s

17-8 Defaulting the BindingLX Series Configuration Guide

Internal ModemInternal Modem 18-1 CHAPTER 18 Internal ModemThis chapter describes how to configure the internal modem.

Performing the Initial SetupDHCP Client 2-7 where renew requests that the DHCP client renew the current lease.L You can use this command only on DHC

18-2 Configuring the Internal Modem for Dial-OutLX Series Configuration GuideConfiguring the Internal Modem for Dial-OutL When configuring ports fo

Internal ModemConfiguring the Internal Modem for Dial-Out 18-3 8. Enter an outbound PAP secret:Ppp 10-10:0 >>outbound pap secret <passwor

18-4 Viewing Internal Modem CharacteristicsLX Series Configuration GuideViewing Internal Modem CharacteristicsL The following fields appear on the

Alarm Input/Control Output PointsAlarm Input/Control Output Points 19-1 CHAPTER 19 Alarm Input/Control Output PointsThis chapter describes how to co

19-2 Configuring Control OutputLX Series Configuration GuideConfiguring Control OutputYou can configure exclusive control over DTR and/or RTSoutput

Alarm Input/Control Output PointsConfiguring Control Output 19-3 X To display the Port Async Characteristics screenUse the show port async <port_

19-4 Configuring Control OutputLX Series Configuration GuideX To view DTR/RTS StatesUse the show port async <port_number> status command to d

Alarm Input/Control Output PointsConfiguring Alarm Inputs via Trigger Action Rules 19-5 Configuring Alarm Inputs via Trigger Action RulesYou can con

19-6 Configuring Alarm Inputs via Trigger Action RulesLX Series Configuration Guide 3. Create rules to bind the trigger and the action:Example InRe

Alarm Input/Control Output PointsConfiguring Alarm Inputs via Trigger Action Rules 19-7 L See the LX-Series Configuration Guide for more information

2-8 Setting the TCP/IP Parameters in the IP Configuration MenuLX Series Configuration GuideSetting the TCP/IP Parameters in the IP Configuration Me

19-8 Using Signal Notice to Set Up a Trigger-Action-RuleLX Series Configuration GuideUsing Signal Notice to Set Up a Trigger-Action-RuleThe Trigger

Alarm Input/Control Output PointsLX Signal Notice Ease-of-Use 19-9 The substitution is translated into the correct command message for the applicabl

19-10 Port Async Signal Notice GUI ConfigurationLX Series Configuration GuidePort Async Signal Notice GUI ConfigurationSeveral changes were made to

Configuring IPv6Configuring IPv6 20-1 CHAPTER 20 Configuring IPv6This chapter describes how to configure IPv6.L The minimum MTU (Maximum Transmissio

20-2 Configuring IPv6 Internet ProtocolLX Series Configuration GuideConfiguring IPv6 Internet ProtocolThe major changes from IPv4 to IPv6 fall prim

Configuring IPv6Configuring IPv6 Internet Protocol 20-3 X To configure the number of duplicate address detection probes to sendUse the following com

20-4 Configuring IPv6 Internet ProtocolLX Series Configuration GuideX To configure or delete a routeUse the following command syntax to configure o

Configuring IPv6Configuring IPv6 Internet Protocol 20-5 X To configure standard on-link tunnelingUse the following command syntax to configure Stand

20-6 Configuring IPv6 Internet ProtocolLX Series Configuration GuideX To configure a remote tunnel via a tunnel brokerUse the following command syn

Configuring IPv6Configuring IPv6 Internet Protocol 20-7 X To delete a tunnelUse the following command syntax to delete a tunnel, or to delete all tu

LX-Series Configuration GuideTable of Contents v LX Series Configuration GuideAbout This Book xixHow This Book is Organized...

Performing the Initial SetupSaving the Configuration to the Network 2-9 Saving the Configuration to the NetworkThe TFTP/SFTP protocol is used to per

20-8 Configuring IPv6 Internet ProtocolLX Series Configuration GuideX To configure IPv6 on Network Time Protocol (NTP)Use the following command syn

Configuring IPv6Configuring IPv6 Internet Protocol 20-9 ExampleX To configure a service name and addressUse the following command syntax to configur

20-10 Configuring IPv6 Internet ProtocolLX Series Configuration GuideX To configure a RADIUS Secondary Accounting Server IPv6 addressUse the follow

Configuring IPv6Configuring IPv6 Internet Protocol 20-11 Syntax AAA:0>> radius secondary authentication server ipv6 address <ipv6_address&g

20-12 Viewing IPv6 StatusLX Series Configuration GuideX To view IPv6 characteristicsUse the show interface <interface_number> ipv6 characteri

Configuring IPv6Viewing the IPv6 NTP Address 20-13 X To view IPv6 tunnel informationUse the show ipv6 tunnel all|<tunnel_name> command to disp

20-14 Viewing IPv6 RoutesLX Series Configuration GuideViewing IPv6 RoutesUse the show ipv6 routes device <interface_name> command to display

Configuring IPv6Viewing IPv6 Routes 20-15 X To view the Primary and Secondary Radius IPv6 addressesUse the show radius characteristics command to di

20-16 Viewing IPv6 RoutesLX Series Configuration GuideX To view the Primary and Secondary DNS IPv6 server addressesUse the show system ip character

Configuring IPv6IPv6 Additions to Ping, SSH, and Telnet 20-17 IPv6 Additions to Ping, SSH, and TelnetThis section describes the syntax for the User

2-10 Setting Up Local (Onboard) SecurityLX Series Configuration GuideSetting Up Local (Onboard) SecurityLocal security is the default security meth

20-18 Web Browser Support for IPv6LX Series Configuration GuideWeb Browser Support for IPv6The following web browsers have been validated to suppor

PART 3Additional InformationPart 3

A-1 APPENDIX A RADIUS AuthenticationRADIUS authentication occurs through a series of communications between the LX unit and the RADIUS server. Aft

A-2 RADIUS Authentication ProcessLX Series Configuration GuideRADIUS Authentication ProcessThe following example describes the steps in the RADIUS

RADIUS Authentication Process A-3 If at any point in the authentication process conditions are not met, the RADIUS server sends an authentication re

A-4 RADIUS Authentication AttributesLX Series Configuration GuideRADIUS Authentication AttributesFigure A.1 lists the RADIUS Authentication Attribu

RADIUS Authentication Attributes A-5 No-Service-Type Allows local port access for interactive sessions, user is prohibited from accessing the Superu

A-6 RADIUS Authentication AttributesLX Series Configuration Guide24 State (challenge/response)Sent by the server to the client in an Access-Challen

RADIUS Access Request Packet Service Type A-7 RADIUS Access Request Packet Service TypeIf you telnet or SSH to a remote port, the service type is:

A-8 RADIUS Access Request Packet Service TypeLX Series Configuration Guide

Performing the Initial SetupChanging the Password Defaults 2-11 X To change the User-level password of the InReach User 1. Access the Configuration

B-1 APPENDIX B About RADIUS and TACACS+ AccountingRADIUS Accounting, and TACACS+ Accounting, are client/server account logging schemes that allow y

B-2 RADIUS Accounting Client OperationLX Series Configuration GuideRADIUS Accounting Client OperationIf a user is validated under RADIUS, an accoun

RADIUS Accounting Attributes B-3 RADIUS Accounting AttributesTable 1 lists the RADIUS Accounting Attributes that are supported on the LX unit.Table

B-4 TACACS+ Accounting Client OperationLX Series Configuration GuideTACACS+ Accounting Client OperationIf a user is validated under TACACS+, an acc

TACACS+ Accounting Attributes B-5 TACACS+ Accounting AttributesTable 2 lists the TACACS+ Accounting Attributes that are supported on the LX unit. Ta

B-6 TACACS+ Accounting AttributesLX Series Configuration Guide

C-1 APPENDIX C TACACS+ Authentication and Authorization TACACS+ authentication occurs through a series of communications between the LX unit and th

C-2 TACACS+ Authentication ExampleLX Series Configuration GuideThe TACACS+ superuser request attribute is independent from the TACACS+ login. The

TACACS+ Authentication Attributes C-3 TACACS+ Authentication AttributesTable 1 lists the TACACS+ Authentication Attributes that are supported on the

C-4 TACACS+ Authorization AttributesLX Series Configuration GuideThe LX implementation of TACACS+ supports the use of TACACS+ secondary servers. T

2-12 Setting Up Server-Based Authentication and AccountingLX Series Configuration GuideSetting Up Server-Based Authentication and AccountingYou can

Privilege Level C-5 Privilege LevelL You must configure an authorization server address to access this privilege level. Refer to “Installing and Con

C-6 Privilege LevelLX Series Configuration Guide

D-1 APPENDIX D Linux Man Pages for iptables and ip6tables CommandsThis appendix contains the Linux man pages for the iptables command and the ip6

D-2 iptables man PagesLX Series Configuration Guideiptables man PagesIPTABLES(8) IPTABLES(8)NAME ip

iptables man Pages D-3 drop the packet on the floor. QUEUE means to pass the packet to userspace (if supported by the kernel). R

D-4 iptables man PagesLX Series Configuration Guide into several different groups. COMMANDS These options specify the specific act

iptables man Pages D-5 the chain(s) will be atomically listed and zeroed. The exact output is affected by the other argu

D-6 iptables man PagesLX Series Configuration Guide the command syntax. PARAMETERS The following parameters make up a rule spe

iptables man Pages D-7 a user-defined chain (other than the one this rule is in), one of the special builtin targets

D-8 iptables man PagesLX Series Configuration Guide -c, --set-counters PKTS BYTES This enables the administrater to initiali

Performing the Initial SetupSetting Up LDAP 2-13 L The LDAP Version 3 clock must keep in sync with the LDAP server.X To download the valid client ce

iptables man Pages D-9 command to load any necessary modules (targets, match extensions, etc).MATCH EXTENSIONS

D-10 iptables man PagesLX Series Configuration Guide ine, written as a comma-separated list, and the second argument

iptables man Pages D-11 --icmp-type [!] typename This allows specification of the ICMP type, which can be a numer

D-12 iptables man PagesLX Series Configuration Guide --destination-port [port[,port]] Match if the destination port is one of t

iptables man Pages D-13 --sid-owner sessionid Matches if the packet was created by a process in the given session

D-14 iptables man PagesLX Series Configuration Guide are included in the standard distribution. LOG Turn on kernel logging of matchi

iptables man Pages D-15 error packet returned: --reject-with type The type given can be icmp-net-unreachable, icmp-

D-16 iptables man PagesLX Series Configuration Guide POSTROUTING chain. It specifies that the source address of the packet should be

iptables man Pages D-17 querading is equivalent to specifying a mapping to the IP address of the interface the packet is going out, bu

D-18 iptables man PagesLX Series Configuration Guide This target is used to modify the time to live field in the IP header. It is o

2-14 Installing and Configuring the LDAP Server on a Network-based HostLX Series Configuration GuideA message is displayed, alerting you to issue t

iptables man Pages D-19 DIAGNOSTICS Various error messages are printed to standard error. The exit code is 0 for correct functioning

D-20 iptables man PagesLX Series Configuration Guide exit code is 0 for correct functioning. Errors which appear to be caused

iptables man Pages D-21 Rusty Russell wrote iptables, in early consultation with Michael Neuling. Marc Boucher made Rusty aband

D-22 iptables man PagesLX Series Configuration Guide restrict output to only one table. If not specified, output includes all avai

ip6tables man Pages D-23 AUTHOR Harald Welte <[email protected]>SEE ALSO iptables-restore(8), iptables(8) The iptables-HO

D-24 ip6tables man PagesLX Series Configuration Guideof built-in chains and may also contain user-defined chains. Each chain is a list of rules whi

ip6tables man Pages D-25 routed through the box), and OUTPUT (for locally-generated pack-ets). mangle: This table is used for specialized packet al

D-26 ip6tables man PagesLX Series Configuration Guiderule number is specified. -R, --replace chain rulenum rule-specificationReplace a rule

ip6tables man Pages D-27 -P, --policy chain targetSet the policy for the chain to the given target. See the section TARGETS for the leg

D-28 ip6tables man PagesLX Series Configuration Guide -d, --destination [!] address[/mask]Destination specification. See the description

Performing the Initial SetupInstalling and Configuring the LDAP Server on a Network-based Host 2-15 X To specify the LDAP server settings on the LX

ip6tables man Pages D-29 interface name, the rule options (if any), and the TOS masks. The packet and byte counters are also listed, with the

D-30 ip6tables man PagesLX Series Configuration Guide tcpThese extensions are loaded if “--protocol tcp” is specified. It provides the followin

ip6tables man Pages D-31 udpThese extensions are loaded if “--protocol udp” is specified. It provides the following options: --source-po

D-32 ip6tables man PagesLX Series Configuration Guidedefault is 3/hour. --limit-burst numberMaximum initial number of packets to match: th

ip6tables man Pages D-33 --uid-owner useridMatches if the packet was created by a process with the given effective user id. --gid-

D-34 ip6tables man PagesLX Series Configuration GuideLog TCP sequence numbers. This is a security risk if the log is readable by users. --l

ip6tables man Pages D-35 otherwise). DIAGNOSTICSVarious error messages are printed to standard error. The exit code is 0 for correct functioning.

D-36 ip6tables man PagesLX Series Configuration Guide Marc Boucher made Rusty abandon ipnatctl by lobbying for a generic packet selection fr

E-1 APPENDIX E Advanced Features

E-2 Multi-Level Command ExecutionLX Series Configuration GuideMulti-Level Command ExecutionMulti-Level Command Execution is the ability to execute

2-16 Installing and Configuring the LDAP Server on a Network-based HostLX Series Configuration Guide 6. Specify the maximum number of retries that

Executing Multi-Level Commands from the User Command Mode E-3 Executing Multi-Level Commands from the User Command ModeYou can execute multi-level c

E-4 Configuring the Notification Feature with Multi-Level CommandsLX Series Configuration GuideThe restart notification command regenerates the not

Multi-Level Commands Examples E-5 The following are examples of multi-level commands in which the Service-Profile type (protocol) is specified befor

E-6 Multi-Level Commands ExamplesLX Series Configuration GuideMulti-Level Commands in Configuration Command ModeConfig:0 >>interface 1 broadc

F-1 APPENDIX F Enabling and Disabling TCP and IR Listener Ports

F-2 Open Ports on the LXLX Series Configuration GuideOpen Ports on the LXTable 1 lists the ports that can be open on the LX. An asterisk (*) indica

Changing the Default TCP Listener Ports F-3 Changing the Default TCP Listener PortsX To change the default async TCP listener port settingsType the

F-4 Changing the Default TCP Listener PortsLX Series Configuration Guide

G-1 APPENDIX G RADIUS Vendor Dictionary FilesThe RADIUS server uses a dictionary file to convert between the numeric attributes and values used in

G-2 LX Series Configuration GuideTo get started, you must have your vendor's ID, and the list of attributes with possible values. X To edit th

Performing the Initial SetupLDAP Command Examples 2-17 LDAP Command ExamplesThis section provides examples of all of the commands that are used to s

G-3 Figure G.1 Sample MRV.dict file## dictionary.mrv## Version:$Id: dictionary.mrv,v 1.0 2002/11/12 15:44:38 Exp $#VENDOR MRV 33ATTR

G-4 RADIUS Vendor-Specific Attribute SettingsLX Series Configuration GuideRADIUS Vendor-Specific Attribute SettingsThe possible settings for RADIUS

RADIUS Vendor-Specific Attribute Settings G-5 L Radius Accounting must be configured on the serial port for the new vendor specific attributes “MRV-

G-6 RADIUS Vendor-Specific Attribute SettingsLX Series Configuration Guide#ATTRIBUTE MRV-Remote-Access-List"bob" User-Password == "b

RADIUS Vendor-Specific Attribute Settings G-7 #ATTRIBUTE MRV-Login-Mode "bob" User-Password == "bob"Service-Type = Administrati

G-8 RADIUS Vendor-Specific Attribute SettingsLX Series Configuration Guide

H-1 APPENDIX H Configuring rlogin Supportrlogin establishes a remote login session from your terminal on the LX to a remote machine named hostname.

H-2 LX Series Configuration GuideFigure H.1 Connecting to a Host through rloginThe user enters the domain name or IP address of the host system, a

Considerations H-3 ConsiderationsEach user must have an account on the remote host. Additionally, setting up the rlogin feature on the host may requ

H-4 Defining rlogin Dedicated ServicesLX Series Configuration GuideDefining rlogin Dedicated Services L With dedicated rlogin service, you can’t sp

2-18 LDAP Local Subscriber FeatureLX Series Configuration GuideLDAP Local Subscriber FeatureUnder the LDAP Local Subscriber Feature, a subscriber c

rlogin Transparent Mode H-5 rlogin Transparent Mode Use this feature to enable the LX to complete a ZMODEM binary file transfer using the rlogin fea

H-6 rlogin Transparent ModeLX Series Configuration Guide

References I-1 APPENDIX I FIPS 140-2 SupportThis appendix describes how to configure your LX-Series software to run in FIPS 140-2 mode of operation.

I-2 FIPS 140-2 StandardLX Series Configuration GuideFIPS 140-2 StandardFIPS 140-1 and its successor FIPS 140-2 are U.S. Government standards that p

Prerequisites I-3 The FIPS 140-2 approval is tied to both the specific Hardware platform and Software version. All LX-Series platforms such as the

I-4 Applying Tamper Evident LabelsLX Series Configuration Guide If using an SNMP NMS or SNMP MIB browser, the application must support SNMPV3 and

Applying Tamper Evident Labels I-5 2. Apply two labels each to the bottom left and right sides of the unit, as shown in Figure I-I.1.Figure I.1 Lo

I-6 Enabling FIPS 140-2 Mode of OperationLX Series Configuration GuideThe Show Version screen appears, with the relevant fields highlighted.Figure

Enabling FIPS 140-2 Mode of Operation I-7  Config ppciboot Radius Secret TACACS+ Secret PAP/CHAP Outgoing Secret SSH Public Key must be at lea

I-8 Changing the Default ppciboot PasswordLX Series Configuration Guide 4. Press B to Boot the system. Do this only after you have configured the p

vi Table of ContentsLX-Series Configuration GuideModular Adapters (RJ-45 to DB-25 and RJ-45 to DB-9)...

Performing the Initial SetupSetting Up RADIUS 2-19 Setting Up RADIUSThe LX can implement RADIUS authentication and RADIUS accounting at the server l

Changing the Default Subscriber Password I-9 Changing the Default Subscriber PasswordIt is widely known that the default password for the InReach us

I-10 FIPS 140-2 Mode Console AccessLX Series Configuration GuideX To change the Configuration password for the LX unit 1. Access the Configuration

Applications Unsupported in FIPS 140-2 Mode of Operation I-11 Web GUI unencrypted Disabled Only AES encryption mode will be supported, customer is r

I-12 Upgrading SoftwareLX Series Configuration GuideUpgrading SoftwareThe ppciboot.img.sign and linuxito.img.sign digital signature files are used

Configuring a Web Server FIPS 140-2 JCE Module Name I-13 Configuring a Web Server FIPS 140-2 JCE Module NameUse the following command to configure a

I-14 Viewing the Web Server FIPS 140-2 JCE Module NameLX Series Configuration Guide

J-1 APPENDIX J NTP Client OverviewFor NTP to function, an LX Series NTP client must be able to access an NTP timeserver on the network. NTP runs o

J-2 How NTP WorksLX Series Configuration GuideHow NTP WorksAfter a Primary Time Server address and the (optional) Alternate Time Server target addr

How NTP Works J-3 The LX Series syslog can be displayed when it polls the configured servers and notes time adjustments. This is seen in the log li

J-4 How NTP WorksLX Series Configuration Guide

2-20 Installing and Configuring the RADIUS Server on a Network-Based LX Series Configuration GuideThe daemon uses a list of clients and associated

K-1 APPENDIX K Using Nested MenusThis section explains how to use the Nested Menu feature. It covers the following topics: About the Nested Menu

K-2 About the Nested Menu FeatureLX Series Configuration GuideAbout the Nested Menu FeatureThe Nested Menu Feature enables you to create menus, in

About the Nested Menu Feature K-3 Figure K.1 shows a eight-level menu structure. The top level menu is Menu 1. Each menu level can include individu

K-4 How a Subscriber Obtains the MenusLX Series Configuration GuideFigure K.2 shows what Menu 1 might look like:Figure K.2 Sample MenuYou can type

Creating the Menu File K-5 Creating the Menu FileL Depending on which version of Windows Hyperterminal you are running, extra characters may appear

K-6 Creating the Menu FileLX Series Configuration GuideTable K.1 lists the commands used within the menu file itself for creating nested menus:The

%menu_file K-7 %menu_fileThe menu file must begin with %menu_file or the LX will not recognize it as a menu file.%menu_start n headerThis command in

K-8 %menu nLX Series Configuration GuideThe command-string can include up to 135 characters. If you include more than one command, separate the co

%menu_eof K-9 %menu_eofIndicates the end of a file. You can begin another file after this command appears, or use other menu commands.%menu_prompt

K-10 %menu_logout x text-stringLX Series Configuration Guide%menu_logout x text-stringThis command specifies the menu key character that the user t

Performing the Initial SetupInstalling and Configuring the RADIUS Server on a Network-Based Host 2-21 5. Use the radius primary authentication serv

Using Comment Lines in the Menu File K-11 Using Comment Lines in the Menu FileBegin a comment line with an exclamation point (!) and follow it with

K-12 Enabling the Menu FeatureLX Series Configuration GuideEnabling the Menu FeatureA Subscriber Menu is a preconfigured menu that displays for a s

Enabling the Menu Feature K-13 You can also have menu access if you login to the LX via the GUI. 1. Configure the menu name you will need to gai

K-14 Enabling the Menu FeatureLX Series Configuration Guide%menu_entry 2Connect to Hostsconnect #Defines Menu Entry number 2, and assigns the name

Sample File 2 K-15 Sample File 2%menu_file!----------------------------------------------------------! Level 1 Main Menu!---------------------------

K-16 Sample File 2LX Series Configuration Guide%menu_entry 14Access Remote Devices%menu 7!%menu_entry 15Power Outlet Control%menu 8!%menu_entry 17S

Sample File 2 K-17 !----------------------------------------------------------! Level 2 Menu 3 Server Information!----------------------------------

K-18 Sample File 2LX Series Configuration Guideshow port async 5 users%menu_entry 30logout port 10ena system logout port async 10%menu_entry 34show

Sample File 2 K-19 Connect port async 3%menu_entry 3Telnet port 3 on LX 3telnet 1.2.3.4 2300%menu_entry 4ssh to remote LX-4ssh 1.2.3.4 InReach%menu_

K-20 Sample File 2LX Series Configuration Guide!!----------------------------------------------------------!Level 2 menu 9 Set/Show PPP Parameters!

2-22 RADIUS Command ExamplesLX Series Configuration Guide RADIUS Command ExamplesThis section provides examples of all of the commands that are u

L-1 APPENDIX L Using LXPORTDThis section explains how to use the LXPORTD feature. It covers the following topics: About LXPORTD LXPORTD man Page

L-2 About LXPORTDLX Series Configuration GuideAbout LXPORTDLXPORTD is a host utility that provides you with TCP connectivity between the IP/IPv6 ho

LXPORTD man Pages L-3 3. Password: - this is the standard Linux password prompt the connection partner should present to Lxportd.4. password - this

L-4 LXPORTD man PagesLX Series Configuration Guide-k Use the keepalive function to detect the loss of the connection to the Remote Access Server.

LXPORTD man Pages L-5 does not alter data in any way (transparent(raw) mode). Note that with pipes, a FIFO opened for reading will be in a pending

L-6 Applications ExamplesLX Series Configuration GuideApplications ExamplesLXPORTD configuration uses the existing LX CLI configuration commands. T

Basic LXPORTD Application L-7 Figure L.1 Basic LXPORTD ApplicationX To configure the basic LXPORTD application:L It is assumed that there is IP con

L-8 Advanced LXPORTD ApplicationLX Series Configuration GuideConfig:0>>port async 7 no autohangup - This is needed if the device on the port

Advanced LXPORTD Application L-9 Figure L.2 LXPORTD Application with RADIUS Security and Broadcast Groups CapabilityLX 32 port master unit #1 confi

L-10 Advanced LXPORTD ApplicationLX Series Configuration GuideConfig:0>>port async 1-32 no authentication outboundConfig:0>>port async

Performing the Initial SetupRADIUS Command Examples 2-23 RADIUS Secondary Authentication Server CommandsAAA:0 >>radius secondary authenticatio

Advanced LXPORTD Application L-11 Config:0>>port async 1 no authentication inboundConfig:0>>port async 1 no authentication outboundConfi

L-12 Advanced LXPORTD ApplicationLX Series Configuration GuideConfig:0>>interface 1 broadcast group 1 slave port async 2-32 - ports 2-32 will

M-1 APPENDIX M Using LPDMRV supports the Line Printer Daemon (LPD) for network to serial port printing.

M-2 Line Printer Daemon (LPD) Protocol SupportLX Series Configuration GuideLine Printer Daemon (LPD) Protocol SupportThe LX supports LPD based on R

Line Printer Daemon (LPD) Protocol Support M-3 X To configure standard LPD print queuesUse this command to create a standard, non-load balancing pri

M-4 Line Printer Daemon (LPD) Protocol SupportLX Series Configuration GuideWhen disabled, this command does not perform any linefeed conversions wh

Line Printer Daemon (LPD) Protocol Support M-5 The following command deletes a slave print queue named <queue_name> for <port_number> an

M-6 Line Printer Daemon (LPD) Protocol SupportLX Series Configuration GuideExample Async1:0 >> lpd no queue slave <queue_name> lf->l

Line Printer Daemon (LPD) Protocol Support M-7 Example Config:0 >> lpd queue <queue_name>|all spooling disableThe following sample comma

M-8 Line Printer Daemon (LPD) Protocol SupportLX Series Configuration GuideUse the following example to enable printing and queueing on all print q

2-24 Specifying the RADIUS PeriodLX Series Configuration GuideSpecifying the RADIUS PeriodThe RADIUS period is the interval at which the LX unit wi

Line Printer Daemon (LPD) Protocol Support M-9 Use the following example to redirect the print jobs from a print queue named lxprinter to a print qu

M-10 Line Printer Daemon (LPD) Protocol SupportLX Series Configuration GuideX To display LPD information for a specific print queue or all print qu

Line Printer Daemon (LPD) Protocol Support M-11 Use the show lpd queue all alternate characteristics command to display the LPD Queue Alternate Char

M-12 Line Printer Daemon (LPD) Protocol SupportLX Series Configuration GuideUse the show lpd queue all status command to display the LPD Queue Stat

N-1 APPENDIX N Semicolons Embedded within Data StringsThe LX is ideal for making serial devices available for network access and service. Devices s

N-2 LX Series Configuration GuideL You must have a script file prepared prior to using the script command. The script files must be in /config.Exam

Setting Up Your Environment to Work with LDAP Version 3 O-1 APPENDIX O LDAP Version 3 Environment Setup and TroubleshootingSetting Up Your Environme

O-2 Setting Up Your Environment to Work with LDAP Version 3LX Series Configuration GuideIn the /usr/local/etc/openldap directory, there is a slapd.

Sample Slapd.conf File O-3 Sample Slapd.conf FileThis section shows part of a slapd.conf file, and explains at a minimum what the LX requires. Each

O-4 Sample Slapd.conf FileLX Series Configuration GuideIn the following screen, HIGH means "all ciphers using key lengths greater than 128 bit

Performing the Initial SetupSetting Up TACACS+ 2-25 X To set the RADIUS Local Subscriber Feature to onlyUse the radius local subscriber only command

Troubleshooting LDAP Connections O-5 The following screen is an example of a database (which was used for testing with the LX). Yours may be differ

O-6 Troubleshooting LDAP ConnectionsLX Series Configuration GuideIf the issue is not resolved by information provided in these logs, then you must

LX Series Configuration GuideList of Procedures 1 Alphabetical List of ProceduresX To display the PPP status of all IP interfaces...

2 List of ProceduresLX Series Configuration GuideX To cancel a redirection of print jobs on a print queue to another print queue...

LX Series Configuration GuideList of Procedures 3 X To configure a date-based trigger...11-9X To configure a

4 List of ProceduresLX Series Configuration GuideX To configure a service name and address ...20-9X To configure a sever

LX Series Configuration GuideList of Procedures 5 X To configure an SFTP Server IPv4 Address...4-9X To configure an SFT

6 List of ProceduresLX Series Configuration GuideX To configure RS-485 duplex mode ...9-11X To configure RS-48

LX Series Configuration GuideList of Procedures 7 X To configure the LXPORTD application with RADIUS security and Broadcast Groups:...

8 List of ProceduresLX Series Configuration GuideX To default a control output default description for a specific control...

2-26 Installing and Configuring a TACACS+ Server on a Network-Based HostLX Series Configuration GuideInstalling and Configuring a TACACS+ Server on

LX Series Configuration GuideList of Procedures 9 X To disable an SNMP agent ...14-8X To disable CC

10 List of ProceduresLX Series Configuration GuideX To display control status information using a specific control name ...

LX Series Configuration GuideList of Procedures 11 X To display summary information for all power control units ... 10-19X To display summary info

12 List of ProceduresLX Series Configuration GuideX To display the subscriber status ...8-24X To display th

LX Series Configuration GuideList of Procedures 13 X To enable or disable accepting and sending of Forwardable Tickets ...

14 List of ProceduresLX Series Configuration GuideX To enter a ppciboot image name ...4-24X To enter a softw

LX Series Configuration GuideList of Procedures 15 X To remove Master Ports from a Broadcast Group ...7-5X To remove ports from

16 List of ProceduresLX Series Configuration GuideX To save the configuration ...4-30X To save the

LX Series Configuration GuideList of Procedures 17 X To set the terminal type for a subscriber ...8-12X To set the time

18 List of ProceduresLX Series Configuration GuideX To specify a Telnet socket number for a serial port ...6-6X To specify a unique

Performing the Initial SetupInstalling and Configuring a TACACS+ Server on a Network-Based Host 2-27 4. Use the tacacs+ primary authentication serv

LX Series Configuration GuideList of Procedures 19 X To specify the TACACS+ period...2-33X To specify the

20 List of ProceduresLX Series Configuration GuideX To update the software using the software image name and host name...

LX Series Configuration GuideList of Procedures 21 X To view whether the authenticate image is shared or unshared 13-23X To view whether the message

22 List of ProceduresLX Series Configuration Guide

Index-1 LX Series Configuration GuideIndex. See IP interfacesSymbols5250 units. See Power control units., 10-1Aaccess power, 10-2Alarm Input Namesde

Index-2 LX Series Configuration Guide15-24, 15-47creating a default configuration file, 2-8, 4-8DData Broadcast featurebroadcast groups, 7-2broadca

Index-3 LX Series Configuration Guideconfiguring a name for a control output, 15-17configuring analog input description string, 15-25, 15-26configur

Index-4 LX Series Configuration Guideconfiguring, 18-2IP configurationacquiring, 4-39IP Configuration menuchanging the gateway address, 4-29changin

Index-5 LX Series Configuration Guideviewing alarm input characteristics, 15-53, 15-54viewing alarm input status, 15-55viewing control all status, 1

Index-6 LX Series Configuration GuideOOnline help, displaying, xxiopen LX ports, F-2outlets, 10-3grouping, 10-3naming, 10-3, 10-5off time, specifyi

2-28 Installing and Configuring a TACACS+ Server on a Network-Based HostLX Series Configuration Guide 3. Use the tacacs+ primary authorization serv

Index-7 LX Series Configuration Guidestrings, N-1Sensors. See Temperature/Humidity sensorsserial port connectionsverifying, 3-13Service Profile type

Index-8 LX Series Configuration Guideviewing SNMP V3 view settings, 14-27SNMP MIB support, 14-28SNMP V3 configuration, 14-15softwareupgrading, 4-13

Index-9 LX Series Configuration Guidesuperuser privileges, 8-16User Profiles. See User Profiles.Vvirtual max connectionssetting, 7-6WWindowsediting

LX-Series Configuration GuideTable of Contents vii Saving the Image to Flash When Booting from the Network...

Performing the Initial SetupTACACS+ Local Subscriber Feature 2-29  “TACACS+ Secondary Authentication Server Commands” on page 2-32 “Specifying the

2-30 TACACS+ Local Subscriber FeatureLX Series Configuration GuideUnder either scenario, the subscriber must have a TACACS+ account on the TACACS+

Performing the Initial SetupTACACS+ Command Examples 2-31 TACACS+ Command ExamplesThis section provides examples of all of the commands that are use

2-32 TACACS+ Command ExamplesLX Series Configuration GuideTACACS+ Secondary Authentication Server CommandsAAA:0 >>tacacs+ secondary authentic

Performing the Initial SetupSpecifying the TACACS+ Period 2-33 Specifying the TACACS+ PeriodThe TACACS+ period is the interval at which the LX unit

2-34 Installing and Configuring the RSA SecurID Server on a Network-based LX Series Configuration GuideX To configure RSA SecurID authentication 1.

Performing the Initial SetupInstalling and Configuring the RSA SecurID Server on a Network-based Host 4. Use the rsa securid authentication port co

2-36 RSA SecurID Command ExamplesLX Series Configuration GuideRSA SecurID Command ExamplesThis section provides examples of all of the commands tha

Performing the Initial SetupRSA SecurID Command Examples 2-37 Table 2.3 describes each setting that you can specify for a RSA SecurID server. * I

2-38 RSA SecurID Local Subscriber FeatureLX Series Configuration GuideRSA SecurID Local Subscriber FeatureUnder the RSA SecurID Local Subscriber Fe

viii Table of ContentsLX-Series Configuration GuideDefaulting from CLI ... 4-39Acquiring the IP

Performing the Initial SetupRSA SecurID sdconf.rec File 2-39 RSA SecurID sdconf.rec FileThe RSA SecurID known replica information displayed on the s

2-40 Setting Up KerberosV5LX Series Configuration GuideSetting Up KerberosV5KerberosV5 is a computer network authentication protocol that allows us

Performing the Initial SetupSetting Up KerberosV5 2-41 X To add or remove a KerberosV5 Realm NameUse the kerberosv5 realm name <realm_name> co

2-42 Setting Up KerberosV5LX Series Configuration GuideUse the no kdc slave command to delete up to two KDC servers (specify an address OR a hostn

Performing the Initial SetupSetting Up KerberosV5 2-43 X To enable or disable accepting and sending of Forwardable TicketsUse the kerberosv5 forward

2-44 KerberosV5 Local Subscriber FeatureLX Series Configuration GuideTo disable this command, enter authentication local enable.KerberosV5 Local Su

Performing the Initial SetupKerberosV5 Local Subscriber Feature 2-45 Use the kerberosv5 local subscriber only command to enable KerberosV5 only on t

2-46 KerberosV5 Local Subscriber FeatureLX Series Configuration GuideX To display KerberosV5 StatusUse the show kerberosv5 status command to displa

Performing the Initial SetupResetting the Unit to Factory Defaults 2-47 Resetting the Unit to Factory DefaultsIf you misconfigure the unit or belie

2-48 Syslog OverviewLX Series Configuration GuideX To reset the unit to factory defaults from a Web browser 1. Browse to the LX unit’s IP address.

LX-Series Configuration GuideTable of Contents ix Configuring Server-Based Authentication on an IP Interface...

Performing the Initial SetupAssigning an Asset Tag 2-49 Assigning an Asset TagThe assettag and no assettag commands allows you to assign a label (up

2-50 Assigning a ContactLX Series Configuration GuideAssigning a ContactThe contact and no contact commands allows you to add a contact name string

Setting Up Remote Console ManagementSetting Up Remote Console Management 3-1 CHAPTER 3 Setting Up Remote Console ManagementNetwork Elements can be m

3-2 Connecting the Console Port to the Network ElementLX Series Configuration GuideConnecting the Console Port to the Network ElementNetwork elemen

Setting Up Remote Console ManagementMaking Straight-through Cables 3-3 Making Straight-through CablesTo make an MRV-supplied crossover cable into a

3-4 Configuring Ports for Remote Console ManagementLX Series Configuration GuideConfiguring Ports for Remote Console ManagementThis section describ

Setting Up Remote Console ManagementExplicitly Setting LX Asynchronous Port Characteristics 3-5 3. In Asynchronous Command Mode, enter the appropri

3-6 Explicitly Setting LX Asynchronous Port CharacteristicsLX Series Configuration GuideX To set up a modem port for remote console management 1. A

Setting Up Remote Console ManagementConfiguring Modem Caller ID 3-7 8. In Modem Command Mode, execute the initstring command to specify the initial

3-8 Configuring Modem Caller IDLX Series Configuration GuideX To specify a caller id security numberExecute the caller id security number <numbe