Black Box SW551A Podręcznik Użytkownika

CUSTOMERSUPPORTINFORMATIONOrder toll-free in the U.S.: Call 877-877-BBOX (outside U.S. call 724-746-5500)FREE technical support 24 hours a day, 7 da

SECURE SITE MANAGERS 89. The Syslog Feature . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 92 9.1. Co

SECURE SITE MANAGERS 9810.3. How and When SNMP Traps are Sent:1. When the buffer port reaches the trigger level, SNMP Traps are immediately sent to

CHAPTER 11: Saving and Restoring Configuration Parameters 9911. Saving and Restoring Configuration ParametersOnce the Secure Site Manager is proper

SECURE SITE MANAGERS 1004. The Secure Site Manager will send a series of ASCII command lines which specify currently selected parameters. The last l

CHAPTER 12: Upgrading Firmware 10112. Upgrading FirmwareWhen new, improved versions of the Secure Site Manager firmware become available, the “Upgrad

SECURE SITE MANAGERS 1024. To proceed with the upgrade, select either option 1 or option 2. The Secure Site Manager will display a message that indi

CHAPTER 13: Command Reference Guide 10313. Command Reference Guide13.1. Command ConventionsMost commands described in this section conform to the f

SECURE SITE MANAGERS 10413.2. Command Summary Function Command SyntaxCommand AvailabilitySupervisor Non-Super.Resident Disconnect^XX XDisplay Audit

CHAPTER 13: Command Reference Guide 10513.3. Command SetThis Section provides information on all Text Interface commands, sorted alphabetically by c

SECURE SITE MANAGERS 106/C ConnectEstablishes a bidirectional connection between two ports. For more information, see Section 7.1. There are two ty

CHAPTER 13: Command Reference Guide 107/D Third Party DisconnectInvoke the /D command at your resident port to disconnect two other ports. Note tha

CHAPTER 1: Specifications 91. SpecificationsNetwork Interface: 10/100Base-T Ethernet, RJ45, multi-session Telnet.RS232 Port Interface: Connectors:

SECURE SITE MANAGERS 108/F Set System ParametersDisplays a menu which is used to define the Site ID message, create user accounts, set the system cloc

CHAPTER 13: Command Reference Guide 109/J Display Site IDDisplays the Site I.D. message.Availability: Supervisor / Non-SupervisorFormat: /J [Ente

SECURE SITE MANAGERS 110/P Set RS232 Port ParametersDisplays a series of menus used to select options and parameters for the RS232 ports. Note that

CHAPTER 13: Command Reference Guide 111/S Display Port StatusDisplays the Port Status Screen (Figure 6.1), which summarizes conditions and parameter

SECURE SITE MANAGERS 112/U Save ParametersSends Secure Site Manager configuration parameters to an ASCII text file as described in Section 11.Availabil

CHAPTER 13: Command Reference Guide 113/W Display Port Parameters (Who)Displays configuration information for an individual port, but does not allow

SECURE SITE MANAGERS 114Appendix A: TroubleshootingA.1. Calling Black BoxIf you determine that your Secure Site Manager is malfunctioning, do not at

© Copyright 2006. Black Box Corporation. All rights reserved.1000 Park Drive • Lawrence, PA 15055-1018 • 724-746-5500 • Fax 7

SECURE SITE MANAGERS 102. Quick Start GuideThis section describes a simplified installation procedure for the Secure Site Managers, which will allow y

CHAPTER 2: Quick Start Guide 112.2. Communicating with the Secure Site ManagerWhen properly installed and configured, the Secure Site Manager will al

SECURE SITE MANAGERS 12Figure 2-2: The Home Screen - Web InterfacePORT STATUS:Site ID: (undefined) 11/20/2006 23:18:34 GMT (GMT+0

CHAPTER 2: Quick Start Guide 13d) Via Telnet: Make certain that Telnet access is enabled as described in Section 5.7.3. Start your Telnet client,

SECURE SITE MANAGERS 14iii. Issue a Third Party Disconnect command to disconnect Ports 2 and 3; type /D 2 [Enter]. The unit will display the “Are yo

CHAPTER 3: Overview 153. OverviewThe Secure Site Managers provide in-band and out-of-band access to RS-232 console ports and maintenance ports on UN

SECURE SITE MANAGERS 16Configuration BackupOnce you have configured the Secure Site Manager to fit your application, parameters and options can be saved

CHAPTER 3: Overview 173.1. Front Panel Components CLEAR: Restarts the Secure Site Manager without changing user-selected parameter settings.Note:

SECURE SITE MANAGERS 18OIPHONELINE10/100BaseTLINKACTIVITY SYSTEM SETUP PORTS(DTE)1 2 3 4 5 6 7 812345Figure 3-2: Back Panel Components - SW

CHAPTER 4: Installation 194. Hardware Installation4.1. Connecting Power to the Secure Site Manager UnitThe Secure Site Manager is available in both

SECURE SITE MANAGERS 204.3. Connecting Devices to the Secure Site Manager1. Determine which Secure Site Manager port will be used for connection to

CHAPTER 5: Configuration 215. Configuration5.1. Communicating with the Secure Site ManagerIn order to configure the Secure Site Manager, you must fir

SECURE SITE MANAGERS 22To access command mode via the Text Interface, proceed as follows:Note:Command mode cannot be accessed via a Buffer Mode Port,

CHAPTER 5: Configuration 233. If a valid username and password are entered, the Secure Site Manager will display the Port Status Screen, shown in Fi

SECURE SITE MANAGERS 245.1.2. The Web Browser InterfaceThe Web Browser Interface consists of a series of web forms, which can be used to select config

CHAPTER 5: Configuration 252. Username / Password Prompt: A message box will prompt you to enter your username and password. The default username

SECURE SITE MANAGERS 26SYSTEM PARAMETERS: 1. User Directory 2. Site-ID: 3. Real Time Clock: 11/21/2006 20:15:40 4. Invalid Access Lockout:

CHAPTER 5: Configuration 275.4. Defining System ParametersThe System Parameters menus are used to define the Site ID Message, set the system clock an

FCC AND IC RFI STATEMENTS/CE NOTICE 1FEDERAL COMMUNICATIONS COMMISSION AND INDUSTRY CANADA RADIO FREQUENCY INTERFERENCE STATEMENTSThis equipment gener

SECURE SITE MANAGERS 28• Real Time Clock: This prompt provides access to the Real Time Clock menu, which is used to set the clock and calendar, and

CHAPTER 5: Configuration 29• Time Zone: Sets the time zone, relative to Greenwich Mean Time. Note that the Time Zone setting will function differe

SECURE SITE MANAGERS 305.4.2. The Invalid Access Lockout FeatureWhen properly configured and enabled, the Invalid Access Lockout feature will watch al

CHAPTER 5: Configuration 31Notes:• Invalid Access Lockout parameters, defined via the System Parameters menu, will apply to all Secure Site Manager

SECURE SITE MANAGERS 325.4.3. The Audit LogThis feature allows you to create a record of command activity at all Secure Site Manager ports. Audit Lo

CHAPTER 5: Configuration 335.4.4. Callback SecurityThe Callback function provides an additional layer of security when callers attempt to access com

SECURE SITE MANAGERS 34 On - Callback ONLY (Without Password Prompt): Callbacks will be performed for user accounts that include a Callback Number,

CHAPTER 5: Configuration 355.5. User AccountsPrior to accessing command mode or establishing a Telnet Direct Connection, you will be prompted to ent

SECURE SITE MANAGERS 36In most cases, a password with Supervisor Access can be entered at any port, allowing the user to invoke Supervisor level comma

CHAPTER 5: Configuration 375.6.1. Viewing User AccountsThe “View User Directory” option allows you to view details about each account, including the

SECURE SITE MANAGERS 2NORMAS OFICIALES MEXICANAS (NOM) ELECTRICAL SAFETY STATEMENTINSTRUCCIONES DE SEGURIDAD1. Todas las instrucciones de seguridad y

SECURE SITE MANAGERS 38ADD USERNAME TO DIRECTORY:1. Username:2. Password: (undefined)3. Supervisor Access: Off4. Port Access: PORT# P

CHAPTER 5: Configuration 39The Add Username Menu can be used to define the following parameters for each new account:• Username: Up to sixteen chara

SECURE SITE MANAGERS 405.6.3. Modifying User AccountsThe “Edit User Directory” function allows you to edit existing user accounts in order to modify

CHAPTER 5: Configuration 415.7. Port ConfigurationWhen responding to prompts, invoking commands, and selecting items from port configuration menus, n

SECURE SITE MANAGERS 42PORT PARAMETERS #03:COMMUNICATION SETTING PORT MODE PARAMETERS 1. Baud Rate: 9600 21. Port Na

CHAPTER 5: Configuration 435.7.2. RS232 Port Configuration MenusThe Port Configuration Menus are used to select communications parameters and enable/d

SECURE SITE MANAGERS 44General Parameters:• Supervisor Mode: Permits/denies port access to supervisor commands. When enabled (Permit), the port wil

CHAPTER 5: Configuration 45• Inactivity Timeout: Enables and selects the Timeout Period for this port. If enabled, the port will disconnect when n

SECURE SITE MANAGERS 46Depending on the Port Mode selected, the Secure Site Manager will also display the additional prompts listed in this section.

CHAPTER 5: Configuration 47Network Services:• Direct Connect: Direct Connect allows users to access the Secure Site Manager and automatically creat

NOM STATEMENT 312. Precaución debe ser tomada de tal manera que la tierra fisica y la polarización del equipo no sea eliminada.13. Los cables de la f

SECURE SITE MANAGERS 48• Syslog: The Syslog feature is used to create records of each buffer event. As event records are created, they are sent to

CHAPTER 5: Configuration 495.7.2.1. Configuring the Internal ModemThe Secure Site Manager’s internal modem can be configured via the Text Interface or

SECURE SITE MANAGERS 505.7.3. Network Port Configuration MenusThe Network Parameters Menus are used to select parameters and options for the Network P

CHAPTER 5: Configuration 51NETWORK PARAMETERS:COMMUNICATION SETTING SERVERS AND CLIENTS1. IP Address: 207.212.30.80 21.

SECURE SITE MANAGERS 52Network ParametersIn the Text Interface, these parameters are accessed via the Network Configuration menu (Figure 5-9.) In the

CHAPTER 5: Configuration 53• DHCP: Enables/Disables Dynamic Host Configuration Protocol. When this option is “On”, the Secure Site Manager will pe

SECURE SITE MANAGERS 54Network Port ParametersIn the Text Interface, these parameters are found in the Network Configuration menu (Figure 5-9.) In the

CHAPTER 5: Configuration 55• Sequence Disconnect: Enables/Disables and configures the Resident Disconnect command. Offers the option to either disa

SECURE SITE MANAGERS 56IP SecurityAs described in Section 5.7.4, the IP Security function allows you to restrict command mode access based on the user

CHAPTER 5: Configuration 57SNMP ParametersIn the Text Interface, SNMP parameters are found in the Network Configuration menu (Figure 5-9.) In the Web

SECURE SITE MANAGERS 4TRADEMARKS USED IN THIS MANUALBLACK BOX and the Double Diamond logo are registered trademarks of BB Technologies, Inc.ProComm is

SECURE SITE MANAGERS 58TACACS ParametersTo access the TACACS Configuration Menus, proceed as follows:• Text Interface: Type /N and press [Enter] to a

CHAPTER 5: Configuration 59• Secret Word: Defines the shared TACACS Secret Word for both TACACS servers. (Default = undefined.)• Fallback Local: D

SECURE SITE MANAGERS 60RADIUS ParametersTo access the RADIUS Configuration Menus, proceed as follows:• Text Interface: Type /N and press [Enter] to a

CHAPTER 5: Configuration 61• Primary Secret Word: Defines the RADIUS Secret Word for the primary RADIUS server. (Default = undefined.)• Secondary I

SECURE SITE MANAGERS 625.7.4. Implementing IP SecurityThe Secure Site Manager can restrict unauthorized IP addresses from establishing an inbound Tel

CHAPTER 5: Configuration 63IP SECURITY:CLIENT LIST FOR “hosts.allow” FILE:1.2.3.4.5.6.7.8.CLIENT LIST FOR “hosts.deny” FILE:9.10.11.12.13.14.15.16.En

SECURE SITE MANAGERS 645.7.4.1. Adding IP Addresses to the Allow and Deny ListsTo add an IP Address to the Allow or Deny list, and begin configuring t

CHAPTER 5: Configuration 655.7.4.2. Linux Operators and Wild CardsIn addition to merely entering a specific IP address or partial IP address in the A

SECURE SITE MANAGERS 665.7.4.3. IP Security Examples1. Mostly Closed: Access is denied by default and the only clients allowed, are those explicitl

CHAPTER 5: Configuration 675.8. Copying Parameters to Several RS-232 Ports (Text Interface Only)When the /CP command (Copy Port Parameters) is in

WARNINGS AND CAUTIONS 5WARNINGS AND CAUTIONSSecure RackingIf secure racked units are installed in a closed or multi-unit rack assembly, they may requi

SECURE SITE MANAGERS 682. Invoke the /CP command at the command prompt; the menu shown in Figure 5-18 will be displayed. The following options are a

CHAPTER 6: The Status Screens 696. The Status ScreensThe Status Screens display connection status and communication parameters for the RS232 ports a

SECURE SITE MANAGERS 70The Port Status Screen lists the following items:• Port: The Port Number.• Name: The user-defined name for each port.• User

CHAPTER 6: The Status Screens 71• Status: The connect status for each port. When the port is connected, this column will list the number of the o

SECURE SITE MANAGERS 726.3. The Network Status Screen (/SN)This screen lists current conditions for the Network Port. To display the Network Status

CHAPTER 6: The Status Screens 73• Status: The status for each TCP port. If the Status Column reads “Active,” this indicates the port has accessed

SECURE SITE MANAGERS 74The /W command uses the following format:/W xx [Enter]Where xx is the desired port number. If the /W command is invoked at a s

CHAPTER 7: Operation 757. OperationThis section discusses the procedures for connecting and disconnecting ports, and describes the various port mode

SECURE SITE MANAGERS 76To Connect ports, proceed as follows:1. Access command mode via the Text Interface.2. Invoke the /C command to connect the de

CHAPTER 7: Operation 777.1.1.2. Disconnecting PortsThere are three different methods for disconnecting ports, the Resident Disconnect, the Third Par

SECURE SITE MANAGERS 6Contents1. Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

SECURE SITE MANAGERS 782. Third Party Disconnect: (Supervisors Only) The /D command is issued from your resident port to disconnect two other ports.

CHAPTER 7: Operation 793. No Activity Timeout: Providing the Timeout feature is enabled at either connected port, the No Activity Timeout can disco

SECURE SITE MANAGERS 807.1.2. Defining Hunt GroupsA Hunt Group creates a situation where the Secure Site Manager will scan a group of similarly named

CHAPTER 7: Operation 81Hunt Group Example 1:1. Ports 1 and 2 are Modem Mode ports, and modems are installed at both ports. Port 1 is named “MODEM1”

SECURE SITE MANAGERS 827.3. Buffer ModeThe Buffer Mode allows collection of data from various devices without the requirement that all devices use th

CHAPTER 7: Operation 83If the buffer contains data, the Secure Site Manager will display a prompt that offers the following options:• Display One Sc

SECURE SITE MANAGERS 847.3.2. Port BuffersThe Status Screen lists the amount of Buffer Memory currently used by each port. The Secure Site Manager us

CHAPTER 7: Operation 857.4. Modem ModeThe Modem Mode provides features specifically related to modem communication. A Modem Mode Port can perform al

SECURE SITE MANAGERS 868. Telnet & SSH Functions8.1. Network Port NumbersWhenever an inbound Telnet or SSH session connects to one of the Secure

CHAPTER 8: Telnet & SSH Functions 878.3. The Direct Connect FeatureThe Direct Connect feature allows you to initiate a Telnet, SSH or Raw Socket

CONTENTS 7 5.7. Port Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41 5.7.1. Port Modes . .

SECURE SITE MANAGERS 888.3.2. ConfigurationThe Direct Connect Function is configured on a per port basis using the Port Configuration Menus (/P nn), ite

CHAPTER 8: Telnet & SSH Functions 89Notes:• If you intend to use SSH to establish direct connections to the Secure Site Manager, the “Direct Con

SECURE SITE MANAGERS 903. SSH Direct Connection (with Password):a) 8-Port Units:• Serial Ports: TCP port numbers 2201 through 2208.• Internal Mod

CHAPTER 8: Telnet & SSH Functions 91Connection Example:1. Assume that Port 8 is configured as described in Section 8.3.2. If the Secure Site Man

SECURE SITE MANAGERS 929. The Syslog FeatureThe Syslog feature can create time-stamped log records of each buffer event. As these event records are

CHAPTER 9: The Syslog Feature 933. Port Parameters Menu: Access the Port Parameters Menu for the desired port as described in Section 5.7.2, and th

SECURE SITE MANAGERS 949.2. Criteria for Generating a Syslog MessageOnce the Secure Site Manager is properly configured, Syslog messages will be gener

CHAPTER 9: The Syslog Feature 959.3. Testing Syslog ConfigurationAfter you have configured the Secure Site Manager as described in Section 9.1, the /T

SECURE SITE MANAGERS 9610. SNMP TrapsSNMP is an acronym for “Simple Network Management Protocol”. The SNMP Trap function allows Buffer Mode Ports to

CHAPTER 10: SNMP Traps 973. Network Parameters Menu: Access the Network Parameters Menu as described in Section 5.7.3. Set the following:a) Enable