Avocent Network Card CCM1640 User Manual

CCM840/ 1640

Installer/ User Guide

Download from Www.Somanuals.com. All Manuals Search And Download.

CCM840/ 1640

Installer/ User Guide

Avocent, Equinox and AVWorks are tradem arks or registered

tradem arks of Avocent Corporation or its affiliates. All other

m arks are the property of their respective owners.

Download from Www.Somanuals.com. All Manuals Search And Download.

USA Notification

Warning: Changes or m odifications to this unit not expressly approved by the party

responsible for com pliance could void the user's authority to operate the equipm ent.

Note: This equipm ent has been tested and found to com ply with the lim its for a Class A

digital device, pursuant to Part 15 of the FCC Rules. These lim its are designed to provide

reasonable protection against harm ful interference when the equipm ent is operated

in a com m ercial environm ent. This equipm ent generates, uses and can radiate radio

frequency energy and, if not installed and used in accordance with the instruction

m anual, m ay cause harm ful interference to radio com m unications. Operation of this

equipm ent in a residential area is likely to cause harm ful interference in which case the

user will be required to correct the interference at his own expense.

Canadian Notification

This digital apparatus does not exceed the Class A lim its for radio noise em issions

from digital apparatus set out in the Radio Interference Regulations of the Canadian

Departm ent of Com m unications.

Le présent appareil num érique n’ém et pas de bruits radioélectriques dépassant les

lim ites applicables aux appareils num ériques de la classe A prescrites dans le Règlem ent

sur le brouillage radioélectrique édicté par le Ministère des Com m unications du Canada.

Japanese Notification

Agency Approvals

FCC P 15 Class A, EN55022, EN61000-3-2, EN61000-3-3, EN60950, EN55024, ETL

(UL 1950), CSA 22.2 No. 950

Download from Www.Somanuals.com. All Manuals Search And Download.

Ta ble of Conte nts

Chapter 1: Product Overview

Features and Benefits . . . . . . . . . . . . . . . . . . . . . . . . . 3

Safety Precautions . . . . . . . . . . . . . . . . . . . . . . . . . . . 4

Using AVWorks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5

Chapter 2: Installation and Configuration

Hardware Overview . . . . . . . . . . . . . . . . . . . . . . . . . . 9

Installing the CCM . . . . . . . . . . . . . . . . . . . . . . . . . . 10

Configuring the CCM . . . . . . . . . . . . . . . . . . . . . . . 10

Reinitializing the CCM . . . . . . . . . . . . . . . . . . . . . . 14

Chapter 3: Operations

Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17

Configuring Serial Port Settings . . . . . . . . . . . . . . . 17

Connecting to Serial Devices . . . . . . . . . . . . . . . . . . 18

Managing User Accounts . . . . . . . . . . . . . . . . . . . . 28

Using Authentication Modes . . . . . . . . . . . . . . . . . . 31

Using Security Lock-out . . . . . . . . . . . . . . . . . . . . . 33

Managing the Port History Buffer . . . . . . . . . . . . . 34

Managing the CCM Using SNMP . . . . . . . . . . . . . 37

Chapter 4: Using CCM Commands

Accessing the CLI . . . . . . . . . . . . . . . . . . . . . . . . . . . 43

Entering Commands . . . . . . . . . . . . . . . . . . . . . . . . 43

Understanding Conventions . . . . . . . . . . . . . . . . . . 44

Command Summary . . . . . . . . . . . . . . . . . . . . . . . . 46

Chapter 5: CCM Commands

Connect Command . . . . . . . . . . . . . . . . . . . . . . . . . 53

Disconnect Command . . . . . . . . . . . . . . . . . . . . . . . 53

Help Command . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53

Port Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . 54

Quit Command . . . . . . . . . . . . . . . . . . . . . . . . . . . . 60

Resume Command . . . . . . . . . . . . . . . . . . . . . . . . . . 60

Server Commands . . . . . . . . . . . . . . . . . . . . . . . . . . 60

Show Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . 71

SPC Command . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 77

User Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . 77

Appendices

Appendix A: Technical Specifications . . . . . . . . . . 85

Appendix B: Device Cabling . . . . . . . . . . . . . . . . . . 86

Appendix C: Ports Used . . . . . . . . . . . . . . . . . . . . . . 90

Appendix D: Technical Support . . . . . . . . . . . . . . . 91

Download from Www.Somanuals.com. All Manuals Search And Download.

Product Ove rvie w

Con ten ts

Features and Benefits . . . . . . . . . . . . . . . . . . . . . . . . . 3

Safety Precautions . . . . . . . . . . . . . . . . . . . . . . . . . . . 4

Using AVWorks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5

Download from Www.Somanuals.com. All Manuals Search And Download.

Chapter 1: Product Overview

Cha pte r 1: Product Ove rvie w

Features and Benefits

Overview

The CCM840 and CCM1640 serial over IP network appliances provide non-

blocked access and control for serial devices such as routers, power management

devices and firewalls.

You m ay connect up to 8 serial devices to a CCM840, and up to 16 serial

devices to a CCM1640. A single 10/100 Ethernet port provides network

connectivity on each CCM. Two CCM appliances m ay be m ounted in 1U of

vertical space in a standard 19 inch rack.

Serial device access options

You m ay choose from am ong several available Telnet options to access the

CCM and its attached serial devices:

•

The AVWorks™ m ultiplatform graphic m anagem ent interface that offers a

built-in enhanced Telnet client and a Secure Shell (SSH) client

•

Third-party Telnet clients

Third-party SSH clients

Access to attached serial devices is also possible via a serial Com m and Line

Interface (CLI) connection, a PPP (Point to Point Protocol) dial-in connection to

a serial CLI m odem or from a third-party SSH client.

User authentication and data security

The CCM user database supports up to 64 user accounts, which include

usernam es, passwords and/or keys, plus specifications of access rights to CCM

ports and com m ands. User definitions m ay be changed at any tim e. You m ay

choose to have user access authenticated locally at the CCM user database or

at one or m ore RADIUS (Rem ote Access Dial-In User Service) servers. Data

security m ay be enhanced via industry-standard SSH encryption.

Extensive command set

The CCM offers a wide range of com m ands that allow adm inistrators to

easily configure, control and display inform ation about the CCM operating

environm ent, including its ports, user accounts and active sessions. The user

interface also offers descriptive error m essage data and built-in com m and help

inform ation. On-board Trivial File Transfer Protocol (TFTP) support allows

adm inistrators to upload new functionality to CCM units in the field.

Download from Www.Somanuals.com. All Manuals Search And Download.

CCM840/1640 Installer/User Guide

Port history

Each CCM port has a buffer that holds the m ost recent 64K bytes of online and

offline serial data. A separate history com m and m ode lets you navigate within

a port’s current history file and conduct tailored searches.

Safety Precautions

To avoid potential device problems, if the building has 3-phase AC power, ensure

that a computer and its monitor (if used) are on the same phase. For best results,

they should be on the same circuit.

To avoid potentially fatal shock hazard and possible dam age to equipm ent,

please observe the following precautions:

•

Do not use a 2-wire extension cord in any product conﬁguration.

•

Test AC outlets at the com puter and m onitor (if used) for proper polarity

and grounding.

•

Use only with grounded outlets at both the com puter and m onitor. When

using a backup Uninterruptible Power Supply (UPS), power the com puter,

the m onitor and the CCM unit off the supply.

NOTE: The AC inlet is the main disconnect.

Rack mount safety considerations

•

Elevated Ambient Tem perature: If installed in a closed rack assembly, the

operation tem perature of the rack environm ent m ay be greater than room

ambient. Use care not to exceed the rated m axim um ambient tem perature

of the unit.

•

Reduced Airﬂow : Installation of the equipm ent in a rack should be such

that the am ount of airﬂow required for safe operation of the equipm ent is

not com prom ised.

Mechanical Loading: Mounting of the equipm ent in the rack should be

such that a hazardous condition is not achieved due to uneven

m echanical loading.

Circuit Overloading: Consideration should be given to the connection

of the equipm ent to the supply circuit and the effect that overloading of

circuits m ight have on overcurrent protection and supply wiring. Consider

equipm ent nam eplate ratings for m axim um current.

•

Reliable Earthing: Reliable earthing of rack m ounted equipm ent should

be m aintained. Pay particular attention to supply connections other than

direct connections to the branch circuit (for exam ple, use of power strips).

Download from Www.Somanuals.com. All Manuals Search And Download.

Chapter 1: Product Overview

Using AVWorks

The AVWorks graphical m anagem ent interface m ay be used to m anage

CCM840/1640 appliances and access attached devices. Using AVWorks, you m ay

perform m ost of the operations that are described in this m anual. This m anual

describes how to m anage a CCM840/1640 by entering com m ands using the CLI.

The AVWorks Installer/User Guide describes how to m anage a CCM840/1640

using the graphical interface.

Download from Www.Somanuals.com. All Manuals Search And Download.

CCM840/1640 Installer/User Guide

Download from Www.Somanuals.com. All Manuals Search And Download.

Ins ta lla tion a nd

Configura tion

Con ten ts

Hardware Overview . . . . . . . . . . . . . . . . . . . . . . . . . 9

Installing the CCM . . . . . . . . . . . . . . . . . . . . . . . . . . 10

Configuring the CCM . . . . . . . . . . . . . . . . . . . . . . . 10

Reinitializing the CCM . . . . . . . . . . . . . . . . . . . . . . 14

Download from Www.Somanuals.com. All Manuals Search And Download.

Chapter 2: Installation and Configuration

Cha pte r 2: Ins ta lla tion a nd Configura tion

Hardware Overview

Figure 2.1 shows the front of a CCM1640.

Figure 2.1: CCM1640 Front View

The lower left area of the front panel contains the following LEDs and buttons:

•

The POWER LED illuminates when the CCM is connected to a power source.

The ONLINE LED illum inates steadily (not blinking) when the CCM

self-test and initialization procedures com plete successfully.

•

The LINK LED illum inates when the CCM establishes a connection to

the network.

•

The TRAFFIC LED blinks when there is network trafﬁc.

The 100MBps LED illum inates when the CCM is connected to a 100

MBps LAN.

•

The RESET button, when pressed, reboots the CCM.

The INIT button, when pressed, restores the CCM to factory defaults. See

Reinitializing the CCM in this chapter.

Figure 2.2 shows the back panel of a CCM1640.

Figure 2.2: CCM1640 Back Panel

The back panel contains:

• 8 (CCM840) or 16 (CCM1640) RJ-45 connectors for serial cabling

• A LAN connector for a 10BaseT or 100BaseT interface cable

• The AC line cord connector

Download from Www.Somanuals.com. All Manuals Search And Download.

1 0

CCM840/1640 Installer/User Guide

Installing the CCM

WARNING: The power outlet should be installed near the equipment and should be

easily accessible.

To install the CCM hardware:

1. Locate the CCM where you can connect cables between the serial devices

and the CCM serial ports, and where you can connect a LAN interface

cable between the Ethernet hub or switch and the CCM LAN connector.

If you are using a rack m ount kit, follow the instructions included with

the kit.

2. Connect serial devices to the CCM serial ports; see Appendix B for

cabling inform ation. Connect each serial device to its appropriate power

source, following the device’s docum entation.

3. Attach a 10BaseT or 100BaseT LAN interface cable to the LAN connector on

the back of the CCM. A CAT 5 cable is required for 100BaseT operation.

4. Insert the power cord into the back of the CCM. Insert the other end of the

power cord into a grounded electrical receptacle.

5. Check that the POWER LED on the front of the CCM is illum inated. If not,

check the power cable to ensure that it is inserted snugly into the back of

the unit. The ONLINE LED will illum inate within one m inute to indicate

that the unit self-test is com plete. If the ONLINE LED blinks, contact

Equinox Technical Support for assistance.

6. Check that the LINK LED is illum inated. If not, check the Ethernet cable

to ensure that both ends are correctly inserted into their jacks. If the unit is

connected to a 100 MB Ethernet hub, the 100MBps LED will be illum inated.

7. Once the POWER, ONLINE and LINK LEDs are illum inated, rem ove

power from the CCM and proceed with the conﬁguration process.

WARNING: The CCM840/1640 and all attached devices should be powered down before

servicing the unit. Always disconnect the power cord from the wall outlet.

Configuring the CCM

To configure the CCM840/1640, you m ust enter a unique IP address and

the network’s subnet m ask. This inform ation will be stored in the unit’s

configuration database. During initial login, you will specify a password for the

Adm in user.

Download from Www.Somanuals.com. All Manuals Search And Download.

Chapter 2: Installation and Configuration

1 1

Configuring the IP address and subnet mask

You m ay use any of four m ethods to configure the CCM IP address and subnet

m ask: AVWorks, BootP, Telnet Com m and Line Interface (CLI) or the serial

CLI on port 1.

These m ethods work as docum ented on m ost Windows^®and UNIX^®system s;

however, the actual im plem entation on your system m ay differ from the

instructions provided. Refer to your system adm inistrator guide, or use

AVWorks to sim plify CCM configuration.

To conﬁgure the IP address and subnet mask using AVWorks:

Using the AVWorks installation wizard is the easiest m ethod to configure the

CCM IP address and subnet m ask. See the AVWorks Installer/User Guide for

instructions. After the IP address and subnet m ask are configured, see Initial

CCM login in this chapter.

To conﬁgure the IP address and subnet mask using BootP:

1. Ensure that there is a BootP server on your network that is conﬁgured to

correctly respond to a BootP request from the CCM. BootP servers require

the Ethernet MAC address of network devices. The CCM Ethernet MAC

address is located on the back of the unit. See your BootP server’s system

adm inistrator guide for inform ation about conﬁguring the BootP server.

2. After you have conﬁgured your network’s BootP server with the CCM

Ethernet MAC address, IP address and subnet m ask, restore power to the

CCM and wait for the ONLINE LED to illum inate. Once this occurs, the

CCM has com pleted the BootP protocol, obtained its IP address and subnet

m ask and stored these in FLASH.

3. You m ay verify that the BootP process was successful with a ping com m and,

which tests network connectivity. The ping com m and is entered as:

ping <ip_address>

For exam ple, the following com m and tests the network connectivity of a

CCM with the IP address 192.168.0.5.

ping 192.168.0.5

4. If the CCM com pletes the BootP successfully, you will see a display sim ilar

to the following.

Pinging 192.168.0.5 with 32 bytes of data:

Reply from 192.168.0.5: bytes=32 time<10ms TTL=128

Download from Www.Somanuals.com. All Manuals Search And Download.

1 2

CCM840/1640 Installer/User Guide

If the CCM did not successfully obtain its IP address with the BootP

protocol, you will see a display sim ilar to the following.

Pinging 192.168.0.5 with 32 bytes of data:

Request timed out.

In this case, check the MAC address and IP address provided to the BootP

server to conﬁrm they are correct. Verify that the Ethernet LAN adaptor

cable is correctly installed on the CCM and the Ethernet hub.

After the IP address is configured successfully, launch a Telnet session to the

CCM IP address. Then, see Initial CCM login in this chapter.

To conﬁgure the IP address and subnet mask using a Telnet CLI:

1. Ensure that your server or workstation has a Telnet client and is located

on the sam e LAN segm ent as the CCM.

2. Use the arp com m and to update the server or workstation with the CCM

IP address and Ethernet MAC address. The CCM Ethernet MAC address is

located on the back panel above the LAN connector. The arp com m and is

entered as:

arp -s <ip_address> <mac_address>

For exam ple, the following com m and assigns the IP address 192.168.0.5

and the Ethernet MAC address 00-80-7d-54-01-54 to the CCM.

arp -s 192.168.0.5 00-80-7d-54-01-54

On a UNIX platform , the MAC address m ay require colons (:) instead of

dashes (-), for exam ple, 00:80:7d:54:01:54.

3. You m ay verify that you entered the inform ation correctly by using an arp

com m and with the -a option.

arp -a

This com m and shows all arp entries for the server or workstation. See

your system adm inistrator guide if you need additional help w ith the

arp com m and.

4. After the above arp com m and is entered correctly, launch a Telnet

client to the assigned IP address. Then, continue w ith Initia l CCM login

in this chapter.

To conﬁgure the CCM using the serial CLI:

1. By factory default, port 1 of the CCM is conﬁgured for the serial CLI. To

access the serial CLI, attach a com patible device to port 1. The com patible

device types are: ASCII, VT52, VT100, VT102, VT220 and VT320.

Download from Www.Somanuals.com. All Manuals Search And Download.

Chapter 2: Installation and Configuration

1 3

Appendix B lists the required cables and adaptors. You m ay also use any

term inal em ulation program that is available on your system .

2. Conﬁgure your term inal or term inal em ulation program as follows.

Baud rate

Bits per character

Parity

9600

None

Stop bits

Flow control

None

3. Press the Return or Enter key until a prom pt appears, requesting your

usernam e. If you do not receive a prom pt after pressing the key ﬁve tim es,

check your cable and serial settings to be sure that they are correct.

4. Proceed to Initial CCM login in this chapter.

After you com plete the CCM configuration, you m ay reconfigure the CLI on

another port or disable it com pletely and use port 1 with an attached device.

For m ore inform ation, see Connecting to devices from the serial CLI port in

Chapter 3.

Initial CCM login

The CCM ships with a single user defined in its user database. The first tim e you

connect to the CCM via Telnet or serial CLI, you are prom pted for a usernam e.

To log in to the CCM for the ﬁrst time:

1. At the Usernam e prom pt, type Admin. There is no factory default

password for the Adm in user. At the Password prom pt, press Return.

Username: Admin

Password:

Authentication Complete

CCM configuration is required.

2. Once authentication com pletes, the CCM prom pts for any m issing

conﬁguration values that are required for operation.

If you already provided the IP address and subnet m ask, you will not be

prom pted for those values again.

If you have not already provided the IP address and subnet m ask, you will

be prom pted for them . Enter the CCM IP address and subnet m ask using

standard dot notation.

CCM configuration is required

Enter CCM IP address > 192.168.0.5

Enter CCM Subnet mask > 255.255.255.0

Download from Www.Somanuals.com. All Manuals Search And Download.

1 4

CCM840/1640 Installer/User Guide

3. You are prom pted for a new Adm in password. Passwords are case

sensitive and m ust contain 3-16 alphanum eric characters. You m ust enter

the new password twice to conﬁrm that you entered it correctly.

Enter CCM New Admin Password > *****

Confirm New Admin Password > *****

After you have provided the required configuration inform ation, a

confirm ation m essage appears while the CCM stores the values in its

configuration database.

You have now com pleted the initial login, and you m ay enter additional

com m ands at the CLI prom pt (>). To configure CCM ports, see Configuring

Serial Port Settings in Chapter 3.

Reinitializing the CCM

Reinitializing the CCM rem oves configured inform ation. This m ay be useful

when reinstalling the CCM at another location in your network.

The CCM stores configuration inform ation in FLASH databases. During

reinitialization, the FLASH erase has two phases. The first phase erases the

CCM configuration database, which contains all nonvolatile data except the IP

address. The second phase erases the IP address and restores the CCM to its

factory default settings.

To reinitialize the CCM:

1. Locate the recessed INIT button on the front of the CCM. You will need a

tool that ﬁts inside the recess, such as an opened paper clip.

2. Insert the tool in the recess, then depress and hold the button. The

ONLINE LED will blink, indicating a CCM initialization has been

requested. You have approxim ately seven seconds to release the button

before any action is taken.

After seven seconds, the ONLINE LED will blink m ore rapidly to conﬁrm

that the CCM conﬁguration database has been erased. Continuing to hold

the INIT button for a few m ore seconds will erase the IP address as well.

The ONLINE LED will blink faster to conﬁrm the deletion.

If any portion of FLASH is erased, the CCM reboots when the INIT button

is released.

Download from Www.Somanuals.com. All Manuals Search And Download.

Ope ra tions

Con ten ts

Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17

Configuring Serial Port Settings . . . . . . . . . . . . . . . 17

Connecting to Serial Devices . . . . . . . . . . . . . . . . . . 18

Managing User Accounts . . . . . . . . . . . . . . . . . . . . 28

Using Authentication Modes . . . . . . . . . . . . . . . . . . 31

Using Security Lock-out . . . . . . . . . . . . . . . . . . . . . 33

Managing the Port History Buffer . . . . . . . . . . . . . 34

Managing the CCM Using SNMP . . . . . . . . . . . . . 37

Download from Www.Somanuals.com. All Manuals Search And Download.

Chapter 3: Operations

1 7

Cha pte r 3: Ope ra tions

Overview

The CCM and its ports m ay be easily configured and m anaged to m eet your

requirem ents for device connection, user authentication, access control, power

status m onitoring, port history inform ation display and SNMP com pliance for

use with third-party network m anagem ent products.

Configuring Serial Port Settings

By default, CCM ports are configured with the following settings.

Target device

Nam e

Console

xx-xx-xx Pn (last 3 octets of MAC address

plus the port num ber)

Baud rate

9600

Bits per character

Parity

None

Stop bits

Flow control

Tim e-out

None

15 m inutes

CLI access character

Power

Use Server CLI setting (^ D)

None

Most of these settings are standard serial port operating characteristics.

The CLI access character param eter specifies how you access the CLI. For

m ore inform ation, see CLI mode in this chapter.

The Power param eter instructs the CCM to m onitor the state of a specified

control signal. Signal transitions m ay be configured to trigger SNMP alerts. The

param eter value indicates an inbound control signal (CTS, DCD or DSR) and

the state of that signal (low or high). When the defined signal is true, the CCM

interprets it as a power on condition for the attached device; when the signal is

false, a power off condition for the device is assum ed. The signal specified for

flow control cannot be used for power control, and vice versa.

To conﬁgure serial console port settings:

Issue a Port Set com m and. You m ay specify settings for one or all ports.

PORT [<port>|ALL] SET [NAME=<name>] [BAUD=<baud>]

[SIZE=<size>] [PARITY=<parity>] [STOP=<stop_bits>]

[FLOW=<ﬂow_ctrl>] [TIMEOUT=<time-out>] [SOCKET=<socket>]

[CHAR=^ <cli_char>] [TOGGLE=NONE|DTR] [POWER=<signal>] . . .

Download from Www.Somanuals.com. All Manuals Search And Download.

1 8

CCM840/1640 Installer/User Guide

For m ore inform ation and descriptions of all valid param eters, see Port Set

command in Chapter 5.

To display serial port settings:

Issue a Show Port com m and.

SHOW PORT [<port>|ALL|NAMES]

When you request inform ation about a port, the display includes configuration

inform ation, current power status (if power status m onitoring has been

enabled), plus transm it, receive and error counts. When you request

inform ation about a single port and a user is currently accessing that port, the

display also includes the usernam e, access rights and other inform ation about

the current session.

When you request inform ation about port nam es, the display includes the port

num bers and nam es. If a port’s nam e has not been changed with a Port Set

com m and, the logical nam e is displayed.

For m ore inform ation, see Show Port command in Chapter 5.

Connecting to Serial Devices

The CCM offers several m ethods for connecting to attached serial devices:

Telnet, serial CLI, PPP and SSH.

Preemption

Depending on configured access levels, a user who is connecting to a port (the

connecting user) m ay disconnect another user of equal or lower access (the

current user).

If the connecting user’s access level is lower than the current user’s access

level, the connecting user will receive an In Use m essage and the connection

will be dropped.

If the connecting user’s access level is equal to or higher than the owning

user’s access level, an In Use by owning user m essage will be displayed. The

connecting user m ay then choose to preem pt the current user’s session. If the

current user’s session is preem pted, an appropriate m essage is displayed.

For m ore inform ation about access levels, see Access rights a nd levels in

this chapter.

Download from Www.Somanuals.com. All Manuals Search And Download.

Chapter 3: Operations

1 9

Connecting to devices using Telnet

Each CCM serial port is directly addressable via a unique TCP port num ber

that provides a connection to the attached serial device.

Plain text (non-encrypted) Telnet connections are enabled by default. For

inform ation about enabling both plain text Telnet and SSH connections, see

Enabling plain text Telnet and SSH connections in this chapter.

To connect to a device using Telnet:

Type telnet, followed by the CCM IP address and the appropriate TCP port

num ber, which by default is 3000 plus the physical port num ber, in decim al

form at. (The TCP port num ber m ay be changed for any CCM port.)

For exam ple, the following Telnet com m and connects to the serial device

attached to physical port 14 of a CCM1640.

telnet 192.168.0.5 3014

If an authentication m ethod other than None has been configured for the

CCM, you will be prom pted for credentials (usernam e and password). Once

authentication com pletes, your connection is confirm ed. When you successfully

connect to the serial device, you will see a display sim ilar to the following.

Username: Myname

Password: ******

Authentication Complete

Connected to Port: 14 9600,8,N,1,XON/XOFF

If the authentication m ethod is configured as None, you m ay Telnet and

connect to a serial device without entering credentials; however, credentials

are always required when connecting to the CCM CLI.

Data entered at the Telnet client is written to the attached serial device. Any

data received by the CCM from the serial device is output to your Telnet client.

You m ay access the CCM and its ports using Equinox-provided or third-party

Telnet client applications. A cross-platform Telnet client is bundled with the

AVWorks application. Third-party Telnet client applications m ay be used in

com bination with AVWorks or standalone.

You m ay connect using either SSH (AVWorks provides built-in support for SSH2)

or plain text.

AVWorks Telnet

AVWorks is a cross-platform client application provided with each CCM.

AVWorks provides a convenient way to select a CCM or attached device and

launch a Telnet session to m anage it.

Download from Www.Somanuals.com. All Manuals Search And Download.

2 0

CCM840/1640 Installer/User Guide

AVWorks includes a built-in Serial Console Viewer Telnet application that

offers several features not found in other Telnet clients. For m axim um

flexibility, AVWorks allows you to associate a unique Telnet client with each

CCM port.

You m ay specify the built-in Telnet client or a third-party Telnet client. For

m ore inform ation, see the AVWorks Installer/User Guide.

Standalone third-party Telnet clients

You m ay use third-party Telnet clients to access the CCM directly without

AVWorks m anagem ent software.

Connecting to devices from the serial CLI port

By factory default, port 1 of the CCM is configured with the serial CLI, which

prohibits the use of port 1 with an attached serial device. You m ay configure

the CLI on a different port, but only one port m ay be configured as the serial

CLI port at one tim e. For exam ple, when you enable the CLI interface on port

n, and it is already active on port p, then the CLI will autom atically be disabled

on port p.

You m ay connect to one serial device at a tim e through the serial CLI port

using a local term inal or a local PC using a term inal em ulation program . If you

connect an external m odem to the serial CLI port, you m ay also access devices

through a rem ote term inal or PC that can dial into the CCM external m odem .

For inform ation about m odem connections, see Configuring and using dial-in

connections in this chapter and Server CLI command in Chapter 5.

To conﬁgure a port for the serial CLI:

1. Issue a Server CLI com m and, using the Port param eter to specify the CLI

port and the Type param eter to specify the term inal type.

SERVER CLI PORT=<port> TYPE=<type>

2. To disable the CLI that was previously conﬁgured on a port, issue a Server

CLI com m and, indicating Type=Off.

For m ore inform ation, see Server CLI command in Chapter 5.

To display CLI port information:

Issue a Show Server CLI com m and.

SHOW SERVER CLI

The display includes the CLI port num ber and term inal type, plus the CLI

access character. For m ore inform ation, see Show Server CLI command in

Chapter 5.

Download from Www.Somanuals.com. All Manuals Search And Download.

Chapter 3: Operations

2 1

To connect to a device from the serial CLI port:

1. Issue a Server CLI com m and, using the Connect param eter to enable the

use of the Connect com m and from the serial CLI port.

SERVER CLI CONNECT=ON

2. Issue a Connect com m and to the desired port.

CONNECT <port>

3. To end a device session that was initiated with a Connect com m and, issue

a Disconnect com m and.

DISCONNECT

For m ore inform ation, see Server CLI command, Connect Command and

Disconnect Command in Chapter 5.

Configuring and using dial-in connections

You m ay attach an external m odem to the serial CLI port for dial-in serial CLI

access to the CCM. This m ay be used as a backup connection if the unit is not

accessible from the network. It m ay also be used as a prim ary connection at

rem ote sites that do not have Ethernet network capability. The m odem m ust

be Hayes com patible.

To specify a modem initialization string:

1. Issue a Show Server CLI com m and to ensure that the port where the

m odem is connected has been deﬁned as the serial CLI port.

SHOW SERVER CLI

2. Issue a Server CLI com m and, using the Modem init param eter to specify

the m odem initialization string.

SERVER CLI MODEMINIT=“<string>”

The string m ust be enclosed in quotes and m ust include at least the

com m and settings ATV1 and SO=1, which cause the m odem to issue

verbose response strings and auto-answer the phone on the ﬁrst ring. For

m ore inform ation, see Server CLI command in Chapter 5.

The m odem initialization string is sent to the cabled m odem when any of

the following conditions occur:

•

CCM initialization

Detection of a transition of DSR from low to high

Com pletion of a call when DCD changes from high to low

3. Upon successful m odem connection, press the Enter key until the login

prom pt appears.

Download from Www.Somanuals.com. All Manuals Search And Download.

2 2

CCM840/1640 Installer/User Guide

To display modem conﬁguration information:

Issue a Show Server CLI com m and.

SHOW SERVER CLI

For m ore inform ation, see Show Server CLI command in Chapter 5.

Connecting to devices using PPP

The CCM supports rem ote PPP access using an auto-answer m odem that

answers calls. A dial-in client and the CCM establish the PPP protocol.

The PPP dial-in m ay be used to access a rem ote CCM that does not warrant a

WAN (Wide Area Network) link to the Ethernet interface. In this case, the PPP

connection allows a rem ote PC with Telnet capability to dial the CCM and then

establish a Telnet connection to a CCM port.

The PPP dial-in m ay also be used to access a subnet containing rem ote CCM

devices in the event of a WAN link failure. In this case, the PPP provides an

alternate path to one or m ore rem ote CCM devices.

Once the PPP connection is established, you m ust launch an application

that connects to the CCM or to one of its ports. The PPP connection is only a

com m unications interface to the CCM.

The CCM im plem ents a PPP server that uses CHAP (Challenge Authentication

Protocol). Passwords are not accepted in the clear on PPP connections.

PPP is disabled by default.

To enable or disable a PPP server on the serial CLI port:

1. To enable a PPP server on the serial CLI port, issue a Show Server CLI

com m and to ensure that a serial CLI port has been deﬁned.

SHOW SERVER CLI

2. Issue a Server PPP com m and with the Enable param eter.

SERVER PPP ENABLE LOCALIP=<local_ip> REMOTEIP=<rem_ip>

[MASK=<subnet>]

You m ust specify local and rem ote IP addresses to be used for the CCM

and client ends of the PPP connection respectively. You are prom pted to

conﬁrm or cancel the changes. Enter Y to conﬁrm or N to cancel.

3. To disable a PPP server, issue a Server PPP com m and with the

Disable param eter.

SERVER PPP DISABLE

Download from Www.Somanuals.com. All Manuals Search And Download.

Chapter 3: Operations

2 3

For m ore inform ation, see Show Server CLI command and Server PPP

command in Chapter 5.

To display PPP conﬁguration information:

Issue a Show Server PPP com m and.

SHOW SERVER PPP

For m ore inform ation, see Show Server PPP command in Chapter 5.

Connecting to devices using SSH

The CCM supports version 2 of the SSH protocol (SSH2). The CCM SSH server

operates on the standard SSH port 22. The shell for this connection provides a

CLI prom pt as if you had established a Telnet connection on port 23. The shell

request for this connection is for CLI access.

Additional CCM SSH servers operate on TCP ports that are num bered with

values 100 greater than the standard 30xx Telnet ports for the CCM. For

exam ple, if port 7 is configured for Telnet access on port 3007, then port

3107 will be a direct SSH connection for port 7. When SSH is enabled, Telnet

port 23 connections will be accepted from other clients if the Server Security

com m and includes Encrypt=SSH,None. Connecting to Telnet port 23 m ay be

tunneled via a connection to SSH port 22.

SSH server keys

When SSH is enabled for the first tim e, the CCM generates an SSH server key.

The key generation process m ay take up to ten m inutes. The key is com puted

at random and is stored in the CCM configuration database.

In m ost cases, the SSH server key should not be m odified because m ost SSH

clients will associate the key with the IP address of the CCM. During the first

connection to a new SSH server, the client will display the fingerprint of the

SSH server key and prom pt you to indicate if you wish to store it on the SSH

client. After the first connection, m ost SSH clients will validate the key when

connecting to the CCM. This provides an extra layer of security because the

SSH client can verify the key sent by the server each tim e it connects.

If you disable SSH and later reenable it, you m ay either use the existing server

key or com pute a new one. If you are reenabling the sam e server at the sam e

IP address, it is recom m ended that you use the existing key, as SSH clients m ay

be using it for verification. If you are m oving the CCM to another location and

changing the IP address, you m ay wish to generate a new SSH server key.

Download from Www.Somanuals.com. All Manuals Search And Download.

2 4

CCM840/1640 Installer/User Guide

Authenticating an SSH user

SSH is enabled and disabled with the Server SSH com m and. When you enable

SSH, you m ay specify the authentication m ethod(s) that will be used for SSH

connections. The m ethod m ay be a password, an SSH key or both. A user’s

password and SSH key are specified with a User Add or User Set com m and. All

SSH keys m ust be RSA keys. DSA keys are not supported.

The following table lists and describes the valid SSH authentication m ethods

that m ay be specified with a Server SSH com m and.

SSH Authentication Methods

Method

Description

PW (default)

SSH connections will be authenticated with a username/

password. With this method, a user’s deﬁnition must include

a valid password in order for that user to authenticate an SSH

session. A password may authenticate to a RADIUS server or to

the local user database.

KEY

SSH connections will be authenticated with an SSH key. With this

method, a user’s deﬁnition must include valid SSH key information

in order for that user to authenticate an SSH session. Key

authentication is always local; RADIUS is not supported. For more

information, see SSH user keys in this chapter.

PW|KEY or KEY|PW

SSH connections will be authenticated with either a username/

password or an SSH key. If a user has only a password deﬁned, that

user must authenticate an SSH session with a username/password.

If a user has only an SSH key deﬁned, that user must authenticate

an SSH session using the key. If a user has both a password and an

SSH key deﬁned, that user may use either a username/password or

the SSH key to authenticate an SSH session. This method allows the

CCM administrator to deﬁne how each user will authenticate an SSH

session based on information provided in the User Add/Set command.

PW authentication will be local or RADIUS as speciﬁed in the Auth

parameter of the Server Security command. Key authentication is

always local.

PW&KEY or KEY&PW SSH connections will be authenticated using both a username/

password and an SSH key. With this method, a user’s deﬁnition

must include a password and SSH key information for that user to

authenticate an SSH session.

PW authentication will be local or RADIUS as speciﬁed in the Auth

parameter of the Server Security command. Key authentication is

always local.

A user’s access rights are determ ined from the authentication m ethod used.

SSH key authentication always uses the access rights from the local user

database. Depending on the server authentication m ode specified with the

Download from Www.Somanuals.com. All Manuals Search And Download.

Chapter 3: Operations

2 5

Server Security com m and, SSH password authentication will use either

the access rights from the local user database or the values returned by the

RADIUS server.

With either of the “or” m ethods (PW|KEY and KEY|PW), the user access rights

are determ ined from the m ethod used to authenticate the user.

With either of the “and” m ethods (PW&KEY and KEY&PW), the user access

rights are determ ined from the first m ethod specified. If PW&KEY is specified,

the access rights from the password authentication will be used. If KEY&PW is

specified, the access rights from the key authentication will be used.

For m ore inform ation, see Using Authentica tion Modes in this chapter.

SSH user keys

A user’s SSH key is specified in a User Add or User Set com m and. You m ay

define a key even if SSH is not currently enabled. The key m ay be specified in

one of two ways:

•

When using the SSHKEY and FTPIP keyword pair to deﬁne the network

location of a user’s SSH key ﬁle, the SSHKEY param eter speciﬁes the

nam e of the uuencoded (UNIX to UNIX encoded) public key ﬁle on an

FTP server. The m axim um ﬁle size that can be received is 4K bytes. The

FTPIP param eter speciﬁes the FTP server’s IP address.

When this m ethod is speciﬁed, the CCM initiates an FTP client request to

the speciﬁed IP address. The CCM then prom pts the user for an FTP user-

nam e and password for connection. When connected, the CCM will GET

the speciﬁed key ﬁle and the FTP connection will be closed. The CCM

then stores the SSH key with the usernam e in the CCM user database.

•

When using the KEY keyword to specify the SSH key, the KEY param -

eter speciﬁes the actual uuencoded SSH key. This is for conﬁgurations

that do not im plem ent an FTP server. The CCM stores the speciﬁed key

in the CCM user database.

The CCM processes a uuencoded SSH2 public key file with the form at

described in the IETF docum ent draft-ietf-secshpublickeyfile-02. The key m ust

follow all form at requirem ents. The UNIX ssh-keygen2 generates this file

form at. The CCM also processes a uuencoded SSH1 public key file. The UNIX

ssh-keygen generates this file form at.

You m ay also generate SSH user keys via AVWorks. See the AVWorks Installer/

User Guide.

Download from Www.Somanuals.com. All Manuals Search And Download.

2 6

CCM840/1640 Installer/User Guide

To enable SSH session access to the CCM:

1. Issue a Show Server Security com m and to ensure that you are using an

authentication m ethod other than None.

SHOW SERVER SECURITY

2. Issue a Server SSH com m and with the Enable param eter. You m ay also

specify an authentication m ethod.

SERVER SSH ENABLE AUTH=<auth>

If an authentication m ethod is not speciﬁed, the previous authentication

param eter will be used. The default value is AUTH=PW.

3. If you are enabling SSH for the ﬁrst tim e, you are advised that all other

CCM sessions will be term inated. Enter Y to continue or N to cancel.

4. If you are reenabling SSH, you are prom pted to use the existing SSH server

key or generate a new key. Enter Y to use the existing key or N to generate

a new key.

For m ore inform ation, see Server SSH command in Chapter 5.

To disable SSH session access to the CCM:

Issue a Server SSH com m and with the Disable param eter.

SERVER SSH DISABLE

When SSH is disabled, the CCM operates in plain text mode.

To display SSH information:

Issue a Show Server Security com m and.

SHOW SERVER SECURITY

If SSH is enabled, the display will include SSH2. Regardless of whether SSH is

enabled, the display will indicate the authentication m ethod that was speciﬁed

with the Server SSH com m and.

Enabling plain text Telnet and SSH connections

Plain text (non-encrypted) Telnet connections are enabled by default.

If you enable SSH connections using the Server Security com m and and the

Encrypt=SSH param eter, plain text Telnet connections will be disabled.

However, if you enable SSH connections with the Server SSH com m and, both

plain text and SSH connections will be allowed.

Download from Www.Somanuals.com. All Manuals Search And Download.

Chapter 3: Operations

2 7

To enable both Telnet and SSH connections:

Issue a Server Security com m and, indicating Encrypt=SSH,None.

Telnet CLI mode

While you are connected to an attached serial device, you m ay enter CLI m ode

and enter CCM com m ands.

To enter or exit CLI mode when connected to a serial device:

1. To enter CLI m ode, type the CLI access character, which is Ctrl-D by

default. At the CLI prom pt (>), you m ay enter CCM com m ands.

2. To exit CLI m ode and return to the session with the attached device, issue

a Resum e com m and.

RESUME

For m ore inform ation, see Resume Command in Chapter 5.

To change the CLI access character:

Issue a Server CLI com m and or a Port Set com m and, using the Char param eter

to specify the CLI access character.

SERVER CLI CHAR=^ <char>

- or -

PORT SET CHAR=^ <char>

If you issue a Port Set com m and with Char=None, then the CLI access

character specified in the Server CLI com m and will be used. The Port Set

com m and m ay be used to override the Server CLI access character on a

per-port basis. For m ore inform ation, see Server CLI command and Port Set

command in Chapter 5.

To display CLI access character information:

Issue a Show Server CLI com m and.

SHOW SERVER CLI

For m ore inform ation, see Show Server CLI command in Chapter 5.

Ending device sessions

To end your device session:

Enter CLI m ode and issue a Quit com m and or a User Logout com m and.

QUIT

Download from Www.Somanuals.com. All Manuals Search And Download.

2 8

CCM840/1640 Installer/User Guide

- or -

If you initiated the device session with a Connect com m and, enter CLI m ode

and issue a Disconnect com m and.

DISCONNECT

- or -

Allow the port to tim e-out due to inactivity. In this case, a notification m essage

is issued and the serial CLI session returns to CLI m ode. This tim e-out m ay

occur while you are in CLI m ode.

- or -

For m odem connections, if a carrier drop occurs, the serial CLI session is

autom atically logged off.

Session time-outs

The CCM m onitors data traffic when you are connected to an attached serial

device. You m ay specify a tim e-out value with the Server CLI com m and. You

m ay also specify a tim e-out value for each port with the Port Set com m and.

When no data is received from the connected user for the configured num ber

of m inutes, the connection is term inated.

The following tim e-out values are used:

•

For a Telnet session, the Server CLI tim e-out value is used.

For a serial port session, if the port’s conﬁgured tim e-out value is Ø, the

Server CLI tim e-out value is used, even if it is also Ø.

•

For a serial port session, if the port’s conﬁgured tim e-out value is non-Ø,

that value is used.

Managing User Accounts

The CCM user database m ay store inform ation for up to 64 user accounts.

To add a user:

Issue a User Add com m and.

USER ADD <username> [PASSWORD=<pwd>] [SSHKEY=<keyﬁle>]

[FTPIP=<ftpadd>] [KEY=<sshkey>] [ACCESS=<access>]

You m ust specify a usernam e. You m ust also specify a password or SSH user

key inform ation, or you m ay specify both. You m ay also include an access

level or access rights. For m ore inform ation, see Connecting to devices using

SSH and Access rights and levels in this chapter and User Add command in

Chapter 5.

Download from Www.Somanuals.com. All Manuals Search And Download.

Chapter 3: Operations

2 9

To change a user’s conﬁguration information:

Issue a User Set com m and.

USER SET <username> [PASSWORD=<pwd>] [SSHKEY=<keyﬁle>]

[FTPIP=<ftpadd>] [KEY=<sshkey>] [ACCESS=<access>]

You m ay change your own password at any tim e. You m ust have USER access

rights to change another user’s password or to change any user’s SSH user key

inform ation and access rights.

To rem ove an SSH user key or password, specify Key=“” or Password=“”.

You cannot rem ove both the password and the SSH key from a user’s

definition; one m ust rem ain in the user database. Also, you cannot rem ove a

user’s key or password if that rem oval would result in no valid users having

USER access rights.

For m ore inform ation, see Connecting to devices using SSH and Access rights and

levels in this chapter and User Set command in Chapter 5.

To end another user’s CCM session:

Issue a User Logout com m and.

USER LOGOUT <username>

A m essage is sent and the Telnet or SSH connection is dropped. For m ore

inform ation, see User Logout command in Chapter 5.

To delete a user:

Issue a User Delete com m and.

USER DELETE <username>

If the specified user is currently logged in, a m essage is sent to the user

indicating that access is no longer perm itted, and the user’s Telnet session is

term inated. For m ore inform ation, see User Delete command in Chapter 5.

To display user conﬁguration information:

1. To display inform ation about one user, issue a Show User com m and,

specifying the usernam e.

SHOW USER <username>

2. To display inform ation about all users, issue a Show User com m and with

the All param eter.

SHOW USER ALL

Download from Www.Somanuals.com. All Manuals Search And Download.

3 0

CCM840/1640 Installer/User Guide

For m ore inform ation, see Show User command in Chapter 5.

Access rights and levels

Most CCM com m ands require the user to have access rights to use the

com m ands. The access rights for each CCM com m and are listed in Chapter 4.

The following table describes the access rights a user m ay be given.

Access Rights

Access Right

Description

PCON

The Port Conﬁguration access right should be given to users who

must modify port settings. Grant PCON access rights only to users

who need to issue the Port Set command.

SCON

SMON

USER

BREAK

The Server Conﬁguration access right should be given to users

who must change the CCM conﬁgurations, including setting the

IP address and updating the CCM program load in FLASH. Grant

SCON access only to users who need to administer the CCM.

The Server Monitor access right should be given to users who need

to view CCM status and monitor serial port activity. Grant SMON

access only to users who need to assist other users in accessing

attached serial devices.

The User access right should be given to users who need to modify

the user database. Grant USER access only to users who must add,

change or delete user accounts. At least one user must have USER

access rights; otherwise, the user database cannot be changed.

The Break access right allows users to send a serial break sequence

to the attached serial device. On certain devices, this sequence has

a special meaning. Grant BREAK access only to users who need to

use the Port Break command.

The Port access right gives users access to one or more serial ports.

This confers the right to access that serial port and connect to the

attached serial device. You may grant Port access rights to speciﬁc

ports (Pn), a range of ports (Px-y) or all ports (PALL).

The Adm in user is preconfigured in the user database with all access rights.

Access levels

When you specify a user’s access rights, you m ay either specify the

individual rights or you m ay use a shortcut that specifies an access level. The

APPLIANCEADMIN and ADMIN levels (which are used in AVWorks in lieu

of individual specifications other than port access rights) are equivalent to the

following individual specifications:

•

The APPLIANCEADMIN level is equivalent to PALL, USER, SCON, SMON,

PCON and BREAK.

•

The ADMIN level is equivalent to PALL, USER, SMON, PCON and BREAK.

Download from Www.Somanuals.com. All Manuals Search And Download.

Chapter 3: Operations

3 1

A user’s access level m ay be used for preem ption. For exam ple, assum e User A

is connected to a port. User B tries to connect to the sam e port. If User B has an

access level equal to or greater than User A’s access level, then User B will be

given the option of preem pting User A.

To manage a user’s access rights/ level:

1. To conﬁgure a user’s access rights/level, issue a User Add com m and,

using the Access param eter to specify the rights or a level.

USER ADD <username> ACCESS=<access>

2. To change a user’s access rights/level, issue a User Set com m and, using

the Access param eter to specify the rights or a level.

USER SET <username> ACCESS=<access>

3. To display the access rights and level for one or all users, issue a Show

User com m and.

SHOW USER <username>|ALL

For m ore inform ation, see Managing Users in this chapter, plus User Add

command, User Set command and Show User command in Chapter 5.

Using Authentication Modes

The CCM supports several m ethods for authenticating users: RADIUS, local

and none. Multiple connection and authentication m ethods m ay operate

concurrently. By default, authentication is done at the local CCM user database.

Local authentication

Local authentication uses the CCM internal user database to authenticate users.

RADIUS authentication

RADIUS authentication uses an external third-party RADIUS server containing

a user database to authenticate CCM users. The CCM, functioning as a RADIUS

client, sends usernam es and passwords to the RADIUS server. If a usernam e

and password do not agree with equivalent inform ation on the RADIUS server,

the CCM is inform ed and the user is denied CCM access. If the usernam e and

password are successfully validated on the RADIUS server, the RADIUS server

returns an attribute that indicates the access rights defined for that usernam e.

To use RADIUS authentication, you m ust specify inform ation about the

prim ary RADIUS server and optionally, a secondary RADIUS server to be used

as a backup.

Download from Www.Somanuals.com. All Manuals Search And Download.

3 2

CCM840/1640 Installer/User Guide

The RADIUS server definition values specified in CCM com m ands m ust m atch

corresponding values configured on the RADIUS server. On the RADIUS server,

you m ust include CCM-specific inform ation: the list of valid users and their

access rights for the CCM. Each user-rights attribute in the RADIUS server’s

dictionary m ust be specified as a string containing the user’s access rights for

the CCM, exactly m atching the syntax used in the CCM User Add com m and.

Consult your RADIUS adm inistrator’s m anual for inform ation about specifying

users and their attributes. The exact process depends on the RADIUS server

you are using.

No authentication

When authentication is disabled, users are not authenticated. Telnet sessions

to serial ports are accepted im m ediately, and users are not prom pted for a

usernam e or password. In this case, users are granted access only to the port

to which they are connected, including Break access.

Connections to the Telnet port (23), serial CLI and PPP are still authenticated,

even when authentication is expressly disabled. Generally, these

com m unications paths are used only by adm inistrators, and authentication is

enforced in order to establish appropriate access rights.

Authentication m ay not be disabled when SSH session access is enabled.

Authentication summary

The CCM allows concurrent use of m ultiple authentication m odes. This allows

Telnet and SSH clients to all access a single CCM as long as the appropriate

values are enabled.

You m ay optionally specify both RADIUS and local authentication, in either

order. In this case, authentication will be attem pted initially on the first m ethod

specified. If that fails, the second m ethod will be used for authentication.

For exam ple, if you enable local and RADIUS authentication (in that order),

authentication uses the CCM user database. If that fails, authentication goes to

the defined RADIUS servers. If you enable RADIUS and local authentication

(in that order), authentication goes first to the defined RADIUS servers. If that

fails, the local user database is used.

To specify the authentication mode:

1. For RADIUS authentication, issue a Server RADIUS com m and.

SERVER RADIUS PRIMARY|SECONDARY IP=<radius_ip>

SECRET=<secret> USER-RIGHTS=<attr> [AUTHPORT=<udp>]

[TIMEOUT=<time-out>] [RETRIES=<retry>]

Download from Www.Somanuals.com. All Manuals Search And Download.

Chapter 3: Operations

3 3

You m ust specify the server’s IP address, the UDP port to be used and a

“secret” to be used. You m ust also specify a user-rights attribute value that

m atches a value in the RADIUS server’s dictionary.

You m ay also use this com m and to delete a RADIUS server deﬁnition.

SERVER RADIUS PRIMARY|SECONDARY DELETE

For m ore inform ation, see Server RADIUS command in Chapter 5.

2. Issue a Server Security command, using the Authentication parameter to

specify the authentication mode. Use the Encrypt parameter to enable plain

text Telnet connections, SSH connections or both.

SERVER SECURITY AUTHENTICATION=<auth_mode>

ENCRYPT=<conns>

3. You are prompted to save the information. Enter Y to conﬁrm or N to cancel.

To display authentication conﬁguration information:

1. Issue a Show Server Security com m and.

SHOW SERVER SECURITY

The display includes the current CCM authentication settings that were

conﬁgured with the Server Security com m and. If SSH access has been

enabled, the display indicates SSH2. Regardless of whether SSH is enabled,

the display includes the authentication m ethod speciﬁed with the Server

SSH com m and.

2. To display CCM RADIUS settings that were conﬁgured with the Server

RADIUS com m and, issue a Show Server RADIUS com m and.

SHOW SERVER RADIUS

For m ore inform ation, see Server Security command, Show Server Security

command and Show Server RADIUS command in Chapter 5, plus Connecting

to devices using SSH and Enabling plain text Telnet and SSH connections in

this chapter.

Using Security Lock-out

When the Security Lock-out feature is enabled, a user will be locked-out after

five consecutive authentication failures. A successful authentication will

reset the counter to zero. You m ay configure a lock-out period of from 1-99

hours. Specifying a lock-out period of Ø disables the feature; that is, users

will not be locked-out.

Download from Www.Somanuals.com. All Manuals Search And Download.

3 4

CCM840/1640 Installer/User Guide

A locked-out user will rem ain locked-out until the specified tim e elapses, the

CCM is power-cycled or the user is unlocked by an adm inistrator with the

User Unlock com m and.

A user with the ADMIN access level m ay unlock all users except a user with

the APPLIANCEADMIN level. A user with the APPLIANCEADMIN level m ay

unlock all users.

To enable or disable Security Lock-out:

1. To enable Security Lock-out, issue a Server Security com m and, using the

Lockout param eter with a value between 1-99.

2. To disable Security Lock-out, issue a Server Security com m and, using the

Lockout=Ø param eter.

To unlock a locked-out user:

Issue a User Unlock com m and with the usernam e.

Managing the Port History Buffer

Each CCM serial port has a circular history buffer that contains the latest 64K

bytes of data received from the attached serial device. This inform ation m ay be

helpful in analyzing attached device anom alies.

The history buffer begins filling with received data upon com pletion of CCM

initialization, even if no user is connected. When you connect to a serial

port, the data that was received from the attached serial device prior to the

connection is available in the buffer. Once online, new data continues to be

stored in the buffer. You m ay choose whether to display the history buffer’s

content autom atically when you connect and whether to keep or discard the

history buffer’s content at the end of a session.

When m ore than 64K bytes of data are sent to the history buffer, data at the top

of the buffer is discarded to m ake room for the new data. As a result, the buffer

always contains the m ost recent 64K bytes of port history.

Using port history mode commands

Once you issue a Port History com m and to enter port history m ode, you m ay

issue the com m ands listed in the following table. Only the first letter of the

com m and is required.

Download from Www.Somanuals.com. All Manuals Search And Download.

Chapter 3: Operations

3 5

Port History Mode Commands

Command

Description

Bottom

B sets the view location to the bottom of the ﬁle minus 23 history

display lines, if available.

Clear

C clears the port history buffer.

N increments the current history display line by the number of lines

per page and outputs a new history display page.

P decrements the current history display line by the number of lines

per page and outputs a new history display page.

Quit

Q returns to the normal CLI.

Resume

R leaves port history mode and CLI mode and resumes the session

with the attached serial device. This single command is equivalent to

sequentially using the Quit and Resume commands.

S searches the port history buffer for a speciﬁed text string. Search

strings with embedded spaces must be enclosed in quotes.

By default, the search is case sensitive. To ignore case, enter -i before

the string. To specify direction, type -u to search up from the current

line toward the top of the buffer or -d to search down from the current

line toward the bottom of the buffer. The search direction remains in

effect for subsequent searches until you change the search direction.

If the string is found, the current history display line is set to the line

containing the string, and the CCM outputs a history display page. If the

string is not found, an error message is displayed, no other information

is output and the current history display line is not changed.

Entering the Search command with no parameters searches again

for the previous string in the same direction as the previous search.

Top

T sets the current history display line to one and outputs a history

display page.

The following exam ples assum e the user is in port history m ode.

The following com m and searches the history buffer in the upward direction

for the string Abort Process.

PORT HISTORY> s -u “Abort Process”

The following com m and searches the history buffer for the string Process,

ignoring case.

PORT HISTORY> s -i Process

For m ore inform ation, see Server CLI command and Port History command in

Chapter 5.

Download from Www.Somanuals.com. All Manuals Search And Download.

3 6

CCM840/1640 Installer/User Guide

To access port history mode:

Issue a Port History com m and.

PORT HISTORY

The PORT HISTORY > prom pt appears.

To control the port history buffer display when you connect:

Issue a Server CLI com m and, using the History param eter to specify the Hold

or Auto option:

SERVER CLI HISTORY=HOLD|AUTO

•

If Hold is speciﬁed, the number of bytes in the history buffer is displayed,

but none of the history data is output. In this case, you m ust access the

CLI and use the Port History com m and to view the port’s history buffer

content. This is the default m ode.

If Auto is speciﬁed, the number of bytes in the history buffer is displayed

and the entire content of the buffer is output to the Telnet session. In this

m ode, the history buffer’s content m ay be reviewed in the Telnet client’s

scrolling window. You m ay also use the Port History com m and to view the

port’s history buffer content.

To control the port history buffer content when you end a session:

Issue a Server CLI com m and, using the History param eter to specify the Clear

or Keep option:

SERVER CLI HISTORY=CLEAR|KEEP

•

If Clear is speciﬁed, the port history buffer is cleared and all data is

discarded at the end of a session.

If Keep is speciﬁed, the port history buffer’s content is retained at the end

of a session.

To clear and discard all data in a port history buffer:

Issue a Clear com m and while you are in port history m ode.

CLEAR

- or -

Issue a Server CLI com m and, indicating History=Clear.

SERVER CLI HISTORY=CLEAR

In this case, the port’s history buffer is cleared at the end of each device session.

Download from Www.Somanuals.com. All Manuals Search And Download.

Chapter 3: Operations

3 7

Managing the CCM Using SNMP

The CCM provides a set of com m ands that create and m anage SNMP

structures for use by third-party network m anagem ent products. These

com m ands cover the following operations:

•

Enabling and disabling SNMP UDP port 161 SNMP processing

Deﬁning read, write and trap com m unity nam es

Deﬁning and deleting up to four SNMP m anagem ent entity IP addresses

Enabling and disabling SNMP traps

Deﬁning and deleting up to four trap destination IP addresses

Deﬁning, copying and deleting up to ten alert strings for each port

SNMP is disabled by default.

To enable or disable SNMP processing:

1. To enable SNMP processing, issue a Server SNMP com m and with the

Enable param eter. This is the default setting.

SERVER SNMP ENABLE

2. To disable SNMP processing, issue a Server SNMP com m and with the

Disable param eter.

SERVER SNMP DISABLE

For m ore inform ation, see Server SNMP command in Chapter 5.

To specify SNMP community names:

Issue a Server SNMP Com m unity com m and, using the Readcom m , Writecom m

and Trapcom m param eters to specify com m unity nam es.

NOTE: The default community names are “public”; if you enable SNMP, you are encouraged to

change the community values to prevent access to the MIB.

SERVER SNMP COMMUNITY READCOMM=<name>

WRITECOMM=<name> TRAPCOMM=<name>

Although all three com m unity nam es default to public, if you specify a trap

com m unity nam e with this com m and, it m ust be different from the read and

write com m unity nam es.

For m ore inform ation, see Server SNMP Community command in Chapter 5.

Download from Www.Somanuals.com. All Manuals Search And Download.

3 8

CCM840/1640 Installer/User Guide

To add or delete SNMP management entity addresses:

1. To add an SNMP m anagem ent entity address, issue a Server SNMP

Manager com m and with the Add param eter and the m anagem ent

entity’s IP address. You m ay deﬁne up to four SNMP m anagem ent entity

addresses, using separate com m ands.

SERVER SNMP MANAGER ADD <ip_address>

When you deﬁne at least one SNMP m anager, SNMP requests are processed

if they are from one of the deﬁned SNMP m anagers. If a request is not from

one of the deﬁned SNMP m anagers, the SNMP request is discarded.

2. To delete an SNMP m anagem ent entity address, issue a Server SNMP

Manager com m and with the Delete param eter and the m anagem ent

entity’s IP address.

SERVER SNMP MANAGER DELETE <ip_address>

If no m anagem ent entities are defined, any SNMP m anager m ay access the

MIB. For m ore inform ation, see Server SNMP Manager command in Chapter 5.

To enable or disable SNMP traps:

1. To enable SNMP traps, issue a Server SNMP Trap com m and with the

Enable param eter.

SERVER SNMP TRAP ENABLE

The CCM will display a numbered list of traps that are currently disabled

with a prom pt requesting you to select trap(s) to enable. Indicate the traps

to be enabled by entering a trap’s list number, several numbers separated

by com m as, a range of numbers separated by a dash or a combination

of numbers with com m as and dashes. To enable all traps, type ALL. To

cancel the com m and, press Enter.

- or -

To enable all SNMP traps, issue a Server SNMP Trap com m and with the

Enable and All param eters. In this case, the numbered list is not displayed.

SERVER SNMP TRAP ENABLE ALL

2. To disable SNMP traps, issue a Server SNMP Trap com m and with the

Disable param eter.

SERVER SNMP TRAP DISABLE

The CCM will display a numbered list of traps that are currently enabled

with a prom pt requesting you to select trap(s) to disable. Indicate the traps

to be disabled by entering a trap’s list number, several numbers separated

by com m as, a range of numbers separated by a dash or a combination

of numbers with com m as and dashes. To disable all traps, type ALL. To

cancel the com m and, press Enter.

Download from Www.Somanuals.com. All Manuals Search And Download.

Chapter 3: Operations

3 9

- or -

To disable all SNMP traps, issue a Server SNMP Trap com m and with the

Disable and All param eters. In this case, the numbered list is not displayed.

SERVER SNMP TRAP DISABLE ALL

For more information, see Server SNMP Trap command in Chapter 5. The

Equinox web site www.equinox.com/support describes the supported traps.

To add or delete SNMP trap destination addresses:

1. To add an SNMP trap destination address, issue a Server SNMP Trap

Destination com m and w ith the Add param eter and the destination’s

IP address. You m ay deﬁne up to four destination addresses, using

separate com m ands.

SERVER SNMP TRAP DESTINATION ADD <ip_address>

2. To delete an SNMP trap destination address, issue a Server SNMP Trap

Destination com m and w ith the Delete param eter and the destination ’s

IP address.

SERVER SNMP TRAP DESTINATION DELETE <ip_address>

For more information, see Server SNMP Trap Destination command in Chapter 5.

To add, copy or delete port alert strings:

1. To add a port alert string, issue a Port Alert Add com m and, specifying the

port number and a 3-32 character string. You m ay deﬁne up to ten strings

for each port, using separate com m ands. The alert string will only generate

a trap if the portAlert trap is enabled with a Server SNMP Trap com m and.

PORT <port> ALERT ADD “<string>”

2. To delete a port alert string, issue a Port Alert Delete com m and, specifying

a port number.

PORT <port> ALERT DELETE

The CCM displays a numbered list of alert strings that have been deﬁned

for the speciﬁed port with a prom pt requesting you to select alert string(s)

to delete. Indicate the alert strings to be deleted by entering an alert

string’s list number, several numbers separated by com m as, a range of

numbers separated by a dash or a combination of numbers with com m as

and dashes. To delete all alert strings, type ALL. To cancel the com m and,

press Enter.

3. To copy the deﬁned alert strings from one port to another port, issue a Port

Alert Copy com m and, specifying the port numbers to be copied to and from .

PORT <to_port> ALERT COPY <from_port>

Download from Www.Somanuals.com. All Manuals Search And Download.

4 0

CCM840/1640 Installer/User Guide

At the conﬁrm ation prom pt, press Y to conﬁrm or N to cancel. When the

copy operation occurs, all previously deﬁned strings on the port to which

you are copying will be replaced.

For m ore inform ation, see Port Alert Add command, Port Alert Copy command

and Port Alert Delete command in Chapter 5.

To display SNMP conﬁguration information:

Issue a Show Server SNMP com m and.

SHOW SERVER SNMP

The display includes inform ation specified with the Server SNMP, Server

SNMP Com m unity, Server SNMP Manager, Server SNMP Trap and Server

SNMP Trap Destination com m ands.

For m ore inform ation, see Show Server SNMP command in Chapter 5.

To display port alert string information:

Issue a Show Port Alert com m and, specifying a port num ber.

SHOW PORT <port> ALERT

The display lists all the port’s defined alert strings.

For m ore inform ation, see Show Port Alert command in Chapter 5.

Download from Www.Somanuals.com. All Manuals Search And Download.

Us ing CCM Comma nds

Con ten ts

Accessing the CLI . . . . . . . . . . . . . . . . . . . . . . . . . . . 43

Entering Commands . . . . . . . . . . . . . . . . . . . . . . . . 43

Understanding Conventions . . . . . . . . . . . . . . . . . . 44

Command Summary . . . . . . . . . . . . . . . . . . . . . . . . 46

Download from Www.Somanuals.com. All Manuals Search And Download.

Chapter 4: Using CCM Com m ands

4 3

Cha pte r 4: Us ing CCM Comma nds

Accessing the CLI

You m ay access the CLI in three ways: using the Telnet CLI, using the serial CLI

or entering the CLI access character during a session to a serial device. When

the CLI is accessed, its prom pt appears (>), indicating you m ay type a com m and.

Entering Commands

At the com m and prom pt, type a com m and and then press Return or Enter.

When the key is pressed, the com m and line com prises all characters to the left

of the cursor. The character at the cursor and any characters to the right of the

cursor are ignored. The following table lists the line editing operations for VT100

compatible devices.

Line Editing Operations for VT100 Compatible Devices

Operation

Backspace

Action

The character immediately before the cursor is erased and all text at

and to the right of the cursor moves one character to the left.

Left Arrow

Right Arrow

Up Arrow

If the cursor is not at the beginning of the line, the cursor moves one

character to the left. If the cursor is at the beginning of the line, no

action is taken.

If the cursor is not at the end of the line, the cursor moves one

character to the right. If the cursor is at the end of the line, no

action is taken.

The CLI maintains a buffer containing the last 16 typed command

lines. If there is a previous command line, it will be output as the

current command line and may be edited. If there is no previous

command line in the command line buffer, the command line is set to

blanks and you may enter a new command.

Down Arrow

Delete

The next command in the CLI command line buffer is made available

for edit. If there is no next command line, the command line is set to

blanks and you may enter a new command.

The character at the cursor position is deleted and all characters to

the right of the cursor position are moved left one character.

The following table lists the line editing operations for ASCII TTY devices.

There is no com m and line buffer available on an ASCII TTY device.

Line Editing Operations for ASCII TTY Devices

Operation

Backspace

Esc

Action

Erases the last character typed.

Erases the current command line.

Download from Www.Somanuals.com. All Manuals Search And Download.

4 4

CCM840/1640 Installer/User Guide

When commands take effect

Each command is completely processed before the next command may be

entered. Som e com m ands prom pt for confirm ation before they are processed.

In these cases, you m ust confirm or cancel by entering Y or N respectively.

If you enter a Server FLASH command or if you change the CCM IP address with

a Server Set command, a CCM reboot is required before the change becomes

effective. In these cases, the CCM database is updated when you enter the

command and you are prompted that the change will not take effect until the CCM

reboots. You may choose to reboot at that time, or you may decline. When the

CCM reboots, your session and all other sessions on the CCM are terminated.

Understanding Conventions

This section describes the parts of a CCM com m and and the conventions used

in this docum ent to describe a com m and’s syntax.

Command syntax

A com m and m ay have four types of syntax: positional com m ands, positional

param eters, keyword param eters and keyword values. The following exam ples

dem onstrate the syntax types.

The following Set Port com m and changes the baud rate and flow control

settings for port 2.

> PORT 2 SET BAUD=57600 FLOW=XONXOF

Command Syntax Types in Example Command

Value

PORT

Syntax

Positional command.

Positional parameter that indicates the port number for the command.

Positional command that indicates port settings are to be changed.

Keyword parameter, which is always followed by an equal (=) sign.

SET

BAUD

57600

Keyword value indicating the baud rate value for the BAUD

keyword parameter.

FLOW

Keyword parameter, which is always followed by an equal (=) sign.

Keyword value.

XONXOF

Not every com m and will contain all syntax types. For exam ple, the following

com m and reboots the CCM.

>SERVER REBOOT

Download from Www.Somanuals.com. All Manuals Search And Download.

Chapter 4: Using CCM Com m ands

4 5

In this case, both SERVER and REBOOT are positional com m ands.

In m ost cases, one or m ore spaces separate positional com m ands, positional

param eters and keyword param eters.

For m ost positional com m ands, positional param eters or keyword param eters,

you only need to enter the first three characters. The exceptions are:

•

When you specify a term inal type with the Type param eter in the Server

CLI com m and, you m ust enter all characters.

When you specify an authentication m ethod with the Auth param eter in

the Server SSH com m and, you m ust enter all characters.

When you specify control signal m onitoring with the Power param eter in

the Port Set com m and, you m ust enter all characters.

With the exception of usernam es and passwords, com m ands are not case

sensitive; they m ay be entered in uppercase, lowercase or a com bination. For

exam ple, all of the following com m ands are correct.

> PORT 2 SET BAUD=57600 FLOW=XON

> POR 2 SET BAU=57600 FLOW=XON

> por 2 Set Baud=57600 flow=xon

> port 2 set baud=57600 flow=xon

NOTE: Usernames and passwords are case sensitive. These values are stored exactly as

you enter them. For example, the username “Ann” must be entered with an uppercase “A”

and all other letters lowercase. The username “ANN” will not be accepted by the CCM as the

username “Ann.” Usernames and passwords must contain 3 -16 alphanumeric characters.

Any syntax errors are displayed, and where applicable, the error is underlined.

In the following exam ple, the keyword param eter “baud” is m isspelled. Even if

m ore than three characters are entered, they m ust all be correct.

> port 2 Set Baux=57600 flow=xon

----

ERR 26 - SET keyword parameter invalid

In the following exam ple, the keyword value “576” is not valid. Num eric

keyword values m ust be fully specified and m ay not be shortened to

three characters.

> POR 2 SET BAUD=576 FLOW=XON

---

ERR 27 - SET keyword value invalid

Download from Www.Somanuals.com. All Manuals Search And Download.

4 6

CCM840/1640 Installer/User Guide

In the following exam ple, there are spaces between BAUD, the equal sign and

the value 57600. Spaces are not perm itted between keyword param eters and

their values.

> POR 2 SET BAUD = 57600 FLOW=XON

------------

ERR 26 - SET keyword parameter invalid

Syntax conventions

This m anual uses the following com m and syntax conventions:

•

Brackets [ ] surround optional keywords and values.

Angle brackets < > surround user-supplied positional param eters and

keyword param eter values.

•

In m ost cases, choices are separated by a vertical bar |. The description

indicates if you m ay specify m ore than one of the choices and how to

separate m ultiple values. The exception is the Server SSH com m and. In

this case, the vertical bar is speciﬁed on the com m and line when you

enable the “password or key” m ethod (PW|KEY) or the “key or password”

m ethod (KEY|PW).

Command Summary

The following table lists the CCM com m ands, including a brief description

plus the required access rights and level.

CCM Command Summary

Command

Description, Access Right and Access Level

Connect

Accesses devices from the serial CLI port.

Access right: port-speciﬁc

Access level: ADMIN or APPLIANCEADMIN **

Disconnect

Help

Ends a device session initiated with Connect command.

Access right: port-speciﬁc

Access level: ADMIN or APPLIANCEADMIN **

Displays information about commands.

Access right: none needed

Access level: all

Port Alert Add

Port Alert Copy

Adds a port alert string.

Access right: SCON or PCON

Access level: ADMIN or APPLIANCEADMIN

Copies a port’s alert strings to another port.

Access right: SCON or PCON

Access level: ADMIN or APPLIANCEADMIN

** Users who do not have the ADMIN or APPLIANCEADMIN level must have the appropriate

port access conﬁgured to issue this command.

Download from Www.Somanuals.com. All Manuals Search And Download.

Chapter 4: Using CCM Com m ands

4 7

CCM Command Summary (Continued)

Command

Description, Access Right and Access Level

Port Alert Delete

Deletes one or more port alert strings.

Access right: SCON or PCON

Access level: ADMIN or APPLIANCEADMIN

Port Break

Port History

Port Logout

Port Set

Sends a break signal to the attached device.

Access right: BREAK

Access level: ADMIN or APPLIANCEADMIN

Accesses the port history buffer.

Access right: none needed

Access level: all

Terminates the CCM session on a speciﬁed port.

Access right: USER

Access level: ADMIN or APPLIANCEADMIN

Changes port settings.

Access right: SCON or PCON

Access level: ADMIN or APPLIANCEADMIN

Quit

Terminates the current CCM session.

Access right: none needed

Access level: all

Resume

Resumes device connection after being in CLI mode.

Access right: none needed

Access level: all

Server CLI

Speciﬁes the serial CLI port, port type and access

character; enables/disables device connection from the CLI

port; speciﬁes a modem initialization string; speciﬁes port

history mode operations and a port time-out value.

Access right: SCON

Access level: APPLIANCEADMIN

Server FLASH

Server PPP

Updates the CCM FLASH.

Access right: SCON

Access level: APPLIANCEADMIN

Enables/disables a PPP server on the serial CLI port.

Access right: SCON

Access level: APPLIANCEADMIN

Server RADIUS

Server Reboot

Server Security

Speciﬁes RADIUS server parameters.

Access right: SCON

Access level: APPLIANCEADMIN

Reboots the CCM.

Access right: SCON

Access level: APPLIANCEADMIN

Speciﬁes user authentication mode, allowed access

methods and security lock-out.

Access right: SCON

Access level: APPLIANCEADMIN

Download from Www.Somanuals.com. All Manuals Search And Download.

4 8

CCM840/1640 Installer/User Guide

CCM Command Summary (Continued)

Command

Description, Access Right and Access Level

Server Set

Changes CCM addresses.

Access right: SCON

Access level: APPLIANCEADMIN

Server SNMP

Enables/disables UDP port 161 SNMP processing.

Access right: SCON

Access level: APPLIANCEADMIN

Server SNMP Community

Server SNMP Manager

Server SNMP Trap

Deﬁnes read, write and trap SNMP community strings.

Access right: SCON

Access level: APPLIANCEADMIN

Deﬁnes/deletes SNMP management entities.

Access right: SCON

Access level: APPLIANCEADMIN

Enables/disables SNMP traps.

Access right: SCON

Access level: APPLIANCEADMIN

Server SNMP Trap Destination Deﬁnes/deletes destinations for enabled SNMP traps.

Access right: SCON

Access level: APPLIANCEADMIN

Server SSH

Enables/disables SSH session access to the CCM and

speciﬁes the SSH authentication method.

Access right: SCON

Access level: APPLIANCEADMIN

Show Port

Displays port conﬁguration information and statistics.

Access right: SMON

Access level: ADMIN or APPLIANCEADMIN

Show Port Alert

Show Server

Displays a port’s alert strings.

Access right: SMON

Access level: ADMIN or APPLIANCEADMIN

Displays CCM conﬁguration, statistics and session information.

Access right: SMON

Access level: ADMIN or APPLIANCEADMIN

Show Server CLI

Show Server PPP

Show Server RADIUS

Show Server Security

Displays information speciﬁed with the Server CLI command.

Access right: SMON

Access level: ADMIN or APPLIANCEADMIN

Displays PPP settings.

Access right: SMON

Access level: ADMIN or APPLIANCEADMIN

Displays RADIUS settings.

Access right: SMON

Access level: ADMIN or APPLIANCEADMIN

Displays authentication, encryption and lock-out settings.

Access right: SMON

Access level: ADMIN or APPLIANCEADMIN

Download from Www.Somanuals.com. All Manuals Search And Download.

Chapter 4: Using CCM Com m ands

4 9

CCM Command Summary (Continued)

Command

Description, Access Right and Access Level

Show Server SNMP

Displays SNMP conﬁguration information.

Access right: SMON

Access level: ADMIN or APPLIANCEADMIN

Show User

Displays user conﬁguration and session information.

Access right: SMON

Access level: ADMIN or APPLIANCEADMIN

SPC

Reserved for future functionality.

User Add

Adds a new user.

Access right: USER

Access level: ADMIN or APPLIANCEADMIN

User Delete

User Logout

User Set

Deletes a user.

Access right: USER

Access level: ADMIN or APPLIANCEADMIN

Terminates a user’s session.

Access right: USER

Access level: ADMIN*** or APPLIANCEADMIN

Changes a user’s conﬁguration information.

Access right: USER

Access level: ADMIN or APPLIANCEADMIN

User Unlock

Unlocks a locked-out user.

Access right: USER

Access level: ADMIN*** or APPLIANCEADMIN

** Users who do not have the ADMIN or APPLIANCEADMIN level must have the appropriate

port access conﬁgured to issue this command.

*** A user with ADMIN level may issue a User Logout or User Unlock command for users with

any level other than APPLIANCEADMIN.

Download from Www.Somanuals.com. All Manuals Search And Download.

5 0

CCM840/1640 Installer/User Guide

Download from Www.Somanuals.com. All Manuals Search And Download.

CCM Comma nds