1. DL manuals
  2. Raritan
  3. Switch
  4. EMX2-888
  5. User Manual

Raritan EMX2-888 User Manual

Other manuals for EMX2-888: User Manual

Summary of EMX2-888

  • Page 1

    Copyright © 2016 raritan, inc. Emx-0j-v3.2.10-e march 2016 255-80-6107-00 raritan emx user guide release 3.2.10

  • Page 2

    This document contains proprietary information that is protected by copyright. All rights reserved. No part of this document may be photocopied, reproduced, or translated into another language without express prior written consent of raritan, inc. © copyright 2016 raritan, inc. All third-party softw...

  • Page 3

    Iii contents what's new in the emx user guide xii chapter 1 introduction 1 overview ........................................................................................................................................1 product models ..................................................................

  • Page 4

    Contents iv connecting environmental sensor packages .............................................................................39 dpx sensor packages ......................................................................................................40 dpx2 sensor packages ........................

  • Page 5

    Contents v naming the emx .............................................................................................................110 modifying the network configuration...............................................................................110 modifying network service settings............

  • Page 6

    Contents vi managing event logging ...........................................................................................................232 viewing the local event log ...........................................................................................232 viewing the wireless lan diagno...

  • Page 7

    Contents vii network diagnostics ..................................................................................................................293 pinging a host .................................................................................................................293 tracing the netwo...

  • Page 8

    Contents viii blade extension strip settings ........................................................................................330 event log.........................................................................................................................331 wireless lan diagnostic log ....

  • Page 9

    Contents ix retrieving previous commands ................................................................................................438 automatically completing a command......................................................................................439 logging out of cli....................

  • Page 10

    Contents x firmware upgrade via usb .......................................................................................................453 appendix c bulk configuration or firmware upgrade via dhcp/tftp 454 bulk configuration/upgrade procedure........................................................

  • Page 11

    Contents xi step b: configure connection request policies .............................................................505 step c: configure a vendor-specific attribute ................................................................520 ad-related configuration..........................................

  • Page 12

    Xii important: raritan disables ssl 3.0 and uses tls for releases 3.0.4, 3.0.20 and later releases due to published security vulnerabilities in ssl 3.0. Make sure your network infrastructure, such as ldap and mail services, uses tls rather than ssl 3.0. The following sections have changed or informa...

  • Page 13

    What's new in the emx user guide xiii ipv4 address (on page 72) mac address (on page 73) usb-cascaded device's position (on page 74) emx2-888 contact closure sensor termination (on page 76) connecting contact closure sensors to emx2-888 (on page 77) emx2-888 contact closure sensor leds (on page 81) ...

  • Page 14

    Chapter 1: what's new in the emx user guide xiv specifying the device altitude (on page 340) enabling or disabling peripheral device auto management (on page 341) determining the ssh authentication method (on page 361) customizing the date and time (on page 368) all privileges (on page 403) setting ...

  • Page 15: Chapter 1

    1 in this chapter overview....................................................................................................1 product models..........................................................................................2 package contents ....................................................

  • Page 16

    Chapter 1: introduction 2 email messages, log events, syslog messages, webcam snapshots, snmp traps and sms messages can be triggered when the events you define occur. In addition, images captured by the webcam can be emailed to users in response to a specific event. Integration with schroff ® lhx/s...

  • Page 17

    Chapter 1: introduction 3 emx2-888 emx2-888 has the following ports and components: 8 sensor ports 8 feature ports 8 rs-485 ports 3 usb ports (2 usb-a and 1 usb-b) 1 rs-232 port 1 ethernet port 1 lcd display control buttons contact closure sensor termination for details on each port, see connection ...

  • Page 18

    Chapter 1: introduction 4 apipa and link-local addressing the emx supports automatic private internet protocol addressing (apipa) as of release 3.2.0. With apipa, your emx automatically configures a link-local ip address and a link-local host name when it cannot obtain a valid ip address from any dh...

  • Page 19

    Chapter 1: introduction 5 retrieval of the link-local ipv4 address: see ipv4 address (on page 72)..

  • Page 20: Chapter 2

    6 depending on the model you purchased, the way to mount an emx device varies. In this chapter mounting a zero u emx ............................................................................6 mounting a 1u emx ..................................................................................7 mou...

  • Page 21

    Chapter 2: rack mounting an emx 7 4. After both l-brackets are installed, you can choose either of the following ways to mount the device in the rack. Using rack screws, fasten the device to the rack through two identical holes near the edge of each l-bracket. Mount the device by screwing a mounting...

  • Page 22

    Chapter 2: rack mounting an emx 8 3. Secure with the provided end cap screws. 4. Fasten the rackmount brackets' ears to the rack using your own fasteners..

  • Page 23: Chapter 3

    9 in this chapter before you begin ......................................................................................9 connecting the emx to a power source...................................................9 configuring the emx .......................................................................

  • Page 24

    Chapter 3: installation and configuration 10 3. Connect the other end of the power cord to an appropriate power source. Configuring the emx you can initially configure the emx by connecting it to a computer, or to a tcp/ip network that supports dhcp. Configuration over a dhcp-enabled network: 1. Con...

  • Page 25

    Chapter 3: installation and configuration 11 connecting the emx to a computer the emx can be connected to a computer for configuration via one of the following ports. Ethernet port (female) usb-b port (male) rs-232 serial port (male) emx2-111: emx2-888: to use the command line interface (cli) for co...

  • Page 26

    Chapter 3: installation and configuration 12 usb connection: 1. A usb-to-serial driver is required in windows ® . Install this driver before connecting the usb cable. See installing the usb-to-serial driver (optional) (on page 12). 2. Connect a usb cable between the emx device's usb-b port and a com...

  • Page 27

    Chapter 3: installation and configuration 13 3. Connect the emx to the computer via a usb cable. The driver is automatically installed. Manual driver installation in windows ® : 1. Make sure the emx has been connected to the computer via a usb cable. 2. The computer detects the new device and the "f...

  • Page 28

    Chapter 3: installation and configuration 14 connecting the emx to your network to remotely administer the emx, you must connect the emx to your local area network (lan). The emx can be connected to a wired or wireless network. Note: if your emx will be used as a master device in the usb-cascading c...

  • Page 29

    Chapter 3: installation and configuration 15 wi-fi lan adapters supported 802.11 protocols zyxel nwd271n b/g edimax ew-7722und a/b/g/n tp-link tl-wdn3200 v1 a/b/g/n raritan usb wifi a/b/g/n note: to use the edimax ew-7722und or raritan usb wifi wireless lan adapter to connect to an 802.11n wireless ...

  • Page 30

    Chapter 3: installation and configuration 16 stop bits = 1 parity = none flow control = none tip: for a usb connection, you can determine the com port by choosing control panel > system > hardware > device manager, and locating the "dominion emx serial console" under the ports group. 3. In the commu...

  • Page 31

    Chapter 3: installation and configuration 17 tip: you can combine multiple commands to configure multiple parameters at a time. For example, network interface laninterfacespeed laninterfaceduplexmode c. For the wireless network mode, you must configure the service set identifier (ssid) parameter. To...

  • Page 32

    Chapter 3: installation and configuration 18 to set use this command eap passord network wireless eappassword when prompted to enter the password for eap authentication, type the password. Eap ca certificate network wireless eapcacertificate when prompted to enter the ca certificate, open the certif...

  • Page 33

    Chapter 3: installation and configuration 19 to set use this command ip protocol network ip proto = v4only, v6only or both ip address returned by the dns server network ip dnsresolverpreference = preferv4 or preferv6 e. After enabling the ipv4 or ipv6 protocol in the earlier step, configure the ipv4...

  • Page 34

    Chapter 3: installation and configuration 20 for static ip configuration, configure these parameters. To set use this command static ipv4 or ipv6 address network ipaddress address> = static ip address ipv4 subnet mask network ipv4 subnetmask = subnet mask ipv4 or ipv6 gateway network gateway address...

  • Page 35

    Chapter 3: installation and configuration 21 tip: you can type "show network wireless" to display a shortened version of wireless settings. 11. If all are correct, type exit to log out of the emx. If any are incorrect, repeat steps 7 to 10 to change network settings. The ip address configured may ta...

  • Page 36

    Chapter 3: installation and configuration 22 cascading the emx via usb you can use usb cables to cascade up to eight raritan devices. All devices in the usb-cascading chain share the ethernet connectivity. Different raritan models can be cascaded as long as they are running an appropriate firmware. ...

  • Page 37

    Chapter 3: installation and configuration 23 4. Connect the usb-a port of the master device to the usb-b port of an additional emx via a usb cable. This additional device is slave 1. 5. Connect slave 1's usb-a port to the usb-b port of an additional emx via a usb cable. The second additional device ...

  • Page 38

    Chapter 3: installation and configuration 24 number device role 2 slave 1 3 slave 2 note: to remotely identify the master and slave devices and their positions in the usb-cascading configuration, see identifying cascaded devices (on page 107). Tip: the usb-cascading configuration can be a combinatio...

  • Page 39: Chapter 4

    25 more features are available if you connect raritan's or third-party external equipment to your emx. In this chapter connecting asset management sensors ................................................25 connecting environmental sensor packages .........................................39 connectin...

  • Page 40

    Chapter 4: connecting external equipment (optional) 26 combining regular asset sensors each tag port on the regular asset sensor corresponds to a rack unit and can be used to locate it devices in a specific rack (or cabinet). For each rack, you can attach asset sensors up to 64u long, consisting of ...

  • Page 41

    Chapter 4: connecting external equipment (optional) 27 make sure that the u-shaped sheet metal adjacent to the male din connector is inserted into the rear slot of the master asset sensor. Screw up the u-shaped sheet metal to reinforce the connection. 2. Connect another 8u slave asset sensor to the ...

  • Page 42

    Chapter 4: connecting external equipment (optional) 28 introduction to asset tags you need both asset sensors and asset tags for tracking it devices. Asset tags provide an id number for each it device. The asset tags are adhered to an it device at one end and plugged in to an asset sensor at the oth...

  • Page 43

    Chapter 4: connecting external equipment (optional) 29 emx2-111 connection the feature port of emx2-111 supports 5 volts of power only, which is insufficient for connecting an asset sensor at a distance between 1 and 10 meters. Therefore, the use of a raritan x cable is required for emx2-111 to conn...

  • Page 44

    Chapter 4: connecting external equipment (optional) 30 6. Plug the male rj-45 connector at the shorter end of the x cable into the feature port on the emx2-111. (a) master asset sensor (b) asset tags (c) it devices (d) raritan x cable note: to connect raritan's environmental sensor packages to emx2-...

  • Page 45

    Chapter 4: connecting external equipment (optional) 31 emx2-888 connection unlike emx2-111, emx2-888 does not need to use a raritan x cable because its feature port supports 12 volts of power. To connect a regular asset sensor assembly to emx2-888: 1. Assemble regular asset sensors according to your...

  • Page 46

    Chapter 4: connecting external equipment (optional) 32 connecting blade extension strips for blade servers, which are contained in a single chassis, you can use a blade extension strip to track individual blade servers. Raritan's blade extension strip functions similar to a raritan asset sensor but ...

  • Page 47

    Chapter 4: connecting external equipment (optional) 33 tag ports f cable socket(s) for connecting the tag connector cable note: each tag port on the blade extension strip is labeled a number, which is displayed as the slot number in the emx device's web interface. To install a blade extension strip:...

  • Page 48

    Chapter 4: connecting external equipment (optional) 34 a. Affix the adhesive part of the asset tag to one side of a blade server through the tag's tape. B. Plug the tag connector of the asset tag into a tag port on the blade extension strip. 4. Repeat the above step until all blade servers in the ch...

  • Page 49

    Chapter 4: connecting external equipment (optional) 35 connecting composite asset sensors (ams-mx-z) a composite asset sensor is named ams-mx-z, where x is a number, such as ams-m2-z or ams-m3-z. It is a type of asset sensor that functions the same as regular master asset sensors except for the foll...

  • Page 50

    Chapter 4: connecting external equipment (optional) 36 3. If necessary, daisy chain the same type of composite asset sensors to track more it devices. A. Get a standard network patch cable that is within 2 meters. B. Connect one end of the network cable to the rj-45 connector labeled "output" on the...

  • Page 51

    Chapter 4: connecting external equipment (optional) 37 raritan devices maximum sensors per chain px2 pdus, bcm1 (not bcm2 series) are supported. Emx2-888, px3 pdus, px3ts transfer switches pmc (bcm2 series) up to 6 composite asset sensors are supported. Tip: to increase the maximum number of composi...

  • Page 52

    Chapter 4: connecting external equipment (optional) 38 2. Plug the male phone connector of the x cable into the rj-12 sensor port of the emx device. This step is required for enhancing the power supply to asset sensors. 3. Plug the male rj-45 connector at the longer end of the x cable into the rj-45...

  • Page 53

    Chapter 4: connecting external equipment (optional) 39 4. Connect any raritan environmental sensor package or sensor hub to the female rj-12 sensor port of the x cable if environmental sensor packages are needed. Note that a dx or dpx3 sensor requires an rj-12 to rj-45 adapter to connect the x cable...

  • Page 54

    Chapter 4: connecting external equipment (optional) 40 model supported maximum number of sensors/actuators emx2-111 this model has only one sensor port so it can manage up to 32 sensors and/or actuators. Emx2-888 this model has 8 sensor ports, which can manage up to 128 sensors and/or actuators in t...

  • Page 55

    Chapter 4: connecting external equipment (optional) 41 for the cabling length restrictions, see supported maximum dpx sensor distances (on page 45). Warning: for proper operation, wait for 15-30 seconds between each connection operation or each disconnection operation of environmental sensor package...

  • Page 56

    Chapter 4: connecting external equipment (optional) 42 using an optional dpx-envhub4 sensor hub optionally, you can connect a raritan dpx-envhub4 sensor hub to the emx. This allows you to connect up to four dpx sensor packages to the emx via the hub. The dpx-envhub4 sensor hub supports dpx sensor pa...

  • Page 57

    Chapter 4: connecting external equipment (optional) 43 using an optional dpx-envhub2 cable a raritan dpx-envhub2 cable doubles the number of connected environmental sensors per sensor port. This cable supports dpx sensor packages only. Do not connect dpx2, dpx3 or dx sensor packages to it. To connec...

  • Page 58

    Chapter 4: connecting external equipment (optional) 44 2. The cable has two rj-12 sensor ports. Connect dpx sensor packages to the cable's sensor ports. 3. Repeat the above steps if there are additional sensor ports on your emx..

  • Page 59

    Chapter 4: connecting external equipment (optional) 45 supported maximum dpx sensor distances when connecting the following dpx sensor packages to the emx, you must follow two restrictions. Dpx-cc2-tr dpx-t1 dpx-t3h1 dpx-af1 dpx-t1dp1 sensor connection restrictions: connect a dpx sensor package to t...

  • Page 60

    Chapter 4: connecting external equipment (optional) 46 emx2-111 33' (10 m) cable up to 1 hub 16' (5 m) cable up to 4 dpx-t3h1 sensor packages dpx2 sensor packages a dpx2 sensor cable is shipped with a dpx2 sensor package. This cable is made up of one rj-12 connector and one to three head connectors....

  • Page 61

    Chapter 4: connecting external equipment (optional) 47 the following procedure illustrates a dpx2 sensor cable with three head connectors. Your sensor cable may have fewer head connectors. Warning: if there are free head connectors between a dpx2 sensor cable's rj-12 connector and the final attached...

  • Page 62

    Chapter 4: connecting external equipment (optional) 48 3. Plug the rj-12 connector of the dpx2 sensor cable into the rj-12 sensor port on the emx. Or you can directly connect the dpx2 sensor package to a dx sensor chain without using any rj-12 to rj-45 adapter. See connecting a dpx2 sensor package t...

  • Page 63

    Chapter 4: connecting external equipment (optional) 49 to connect dpx3 sensor packages to the emx: 1. Connect an rj-12 to rj-45 adapter cable to the dpx3 sensor package. Connect the adapter's rj-45 connector to either rj-45 port of the dpx3 sensor package. 2. If you want to cascade dpx3 sensor packa...

  • Page 64

    Chapter 4: connecting external equipment (optional) 50 connecting a dpx2 sensor package to dpx3 you can connect only one dpx2 sensor package to the "end" of a dpx3 sensor chain. It is strongly recommended to use an rj-12 to rj-45 adapter for connecting the dpx2 to the final dpx3 in the chain. The ma...

  • Page 65

    Chapter 4: connecting external equipment (optional) 51 dx sensor packages most dx sensor packages contain terminals for connecting detectors or actuators. For information on connecting actuators or detectors to dx terminals, refer to the environmental sensors guide or online help on raritan website'...

  • Page 66

    Chapter 4: connecting external equipment (optional) 52 2. If you want to cascade dx packages, get an additional standard network patch cable (cat5e or higher) and then: a. Plug one end of the cable into the remaining rj-45 port on the prior dx package. B. Plug the other end into either rj-45 port on...

  • Page 67

    Chapter 4: connecting external equipment (optional) 53 when connecting a dpx2 sensor package containing two dpx2 sensors: a maximum of ten dx sensor packages can be cascaded because 12-2=10. When connecting a dpx2 sensor package containing one dpx2 sensor: a maximum of eleven dx sensor packages can ...

  • Page 68

    Chapter 4: connecting external equipment (optional) 54 an rj-12 to rj-45 adapter is required for connecting a dpx or dpx2 sensor package to the hub. This diagram illustrates a configuration with a sensor hub connected. The emx rj-12 to rj-45 adapter cable dpx3-envhub4 sensor hub any raritan sensor p...

  • Page 69

    Chapter 4: connecting external equipment (optional) 55 mixing diverse sensor types you can mix dpx, dpx2, dpx3 and dx sensor packages on any sensor port of the emx2-888 or emx2-111 according to the following sensor combinations. In some scenarios, the dpx3-envhub4 sensor hub is required. When mixing...

  • Page 70

    Chapter 4: connecting external equipment (optional) 56 an rj-12 to rj-45 adapter is recommended to connect a dpx or dpx2 sensor package to dpx3-envhub4. In the following diagrams, the sensor package in "green" can be replaced by a dpx2 sensor package. The sensor package in "blue" can be one dpx2, dp...

  • Page 71

    Chapter 4: connecting external equipment (optional) 57.

  • Page 72

    Chapter 4: connecting external equipment (optional) 58 mix dpx3 and dx in a sensor chain: any dx sensor package in a chain can be replaced by a dpx3 sensor package. For example, the following diagram shows a sensor chain comprising both dx and dpx3 sensor packages. The total number of sensor package...

  • Page 73

    Chapter 4: connecting external equipment (optional) 59 connecting a logitech webcam connect webcams to emx in order to view videos or snapshots of the webcam's surrounding area. The following uvc-compliant webcams are supported: logitech ® webcam ® pro 9000, model 960-000048 logitech quickcam deluxe...

  • Page 74

    Chapter 4: connecting external equipment (optional) 60 connecting a gsm modem a cinterion ® mc52it or mc55it gsm modem can be connected to the emx in order to send sms messages containing event information. See creating actions (on page 188) for more information on sms messages. Note: emx cannot rec...

  • Page 75

    Chapter 4: connecting external equipment (optional) 61 you need to enable the modem dial-in support to take advantage of this feature, see configuring the serial port (on page 135). Connecting an external beeper the emx supports the use of an external beeper for audio alarms. External beepers that a...

  • Page 76

    Chapter 4: connecting external equipment (optional) 62 to connect an shx-30 heat exchanger: 1. Plug one end of the schroff adapter cable into the rs-485 port on the schroff shx heat exchanger. 2. Plug the other end of the adapter cable into one of available rs-485 ports on your emx. To connect an lh...

  • Page 77

    Chapter 4: connecting external equipment (optional) 63 connecting the schneider electric powerlogic pm710 the schneider electric powerlogic ® pm710 power meter is connected to the emx2-111 rs485 port. Once it is connected and the emx detects it, the pm710 is viewed under the auxiliary port folder in...

  • Page 78: Chapter 5

    64 in this chapter power switch...........................................................................................64 connection ports .....................................................................................64 lcd display panel .......................................................

  • Page 79

    Chapter 5: using the emx 65 emx2-888 no. Port used for... 1 sensor (rj-12) connection to one of the following devices: raritan's environmental sensor package(s). Raritan's sensor hub, which expands the number of a sensor port to four ports. 2 rs-485 connection to an electrical device with the rs-485...

  • Page 80

    Chapter 5: using the emx 66 no. Port used for... 6 ethernet connecting the emx to your company's network. Connect a standard cat5e/6 utp cable to this port and connect the other end to your network. This connection is necessary to administer or access the emx device remotely using the web interface....

  • Page 81

    Chapter 5: using the emx 67 overview of the lcd display different types of information are shown in different sections of the character lcd display. The diagram indicates the sections. Section information shown the selected mode and target, such as sensor 8, sensor 36, 1 sensor 28, ca (cascading mod...

  • Page 82

    Chapter 5: using the emx 68 control buttons there are four control buttons. Up and down buttons for selecting a specific target, which can be an environmental sensor's id number or an asset sensor's port number mode button for switching between various modes, including: - sensor mode - asset sensor ...

  • Page 83

    Chapter 5: using the emx 69 number example information the selected environmental sensor's reading is 22 . The word "master" indicates the emx is the master device in a usb-cascading configuration. See cascading the emx via usb (on page 22). Note: for a standalone emx, this word is not displayed. Fo...

  • Page 84

    Chapter 5: using the emx 70 states description on the actuator is turned on. Off the actuator is turned off. Note: numeric sensors show both numeric readings and sensor states to indicate environmental or internal conditions while discrete (on/off) sensors show sensor states only to indicate state c...

  • Page 85

    Chapter 5: using the emx 71 note: some alphabets cannot be properly displayed due to the lcd display restriction. For example, q looks like 9, z looks like 2, and m looks like . Check the sensor's label or the web interface when you have doubts. Asset sensor information the lcd display can show the ...

  • Page 86

    Chapter 5: using the emx 72 if no asset sensor is physically connected to the selected feature port, the term "na" appears. 3. Press the func button. When a blinking double-arrow symbol appears to the left of the lcd display, press the up or down button to select the desired rack unit on the asset s...

  • Page 87

    Chapter 5: using the emx 73 if you connect your emx to the wireless network, a wi-fi icon is displayed at the bottom-right corner. To display the ipv4 address: 1. Press the mode button to enter the device mode, indicated by an alphabet "d" at the top left of the display. 2. The lcd display cycles be...

  • Page 88

    Chapter 5: using the emx 74 section example information the word "master" indicates the emx is the master device in a usb-cascading configuration. See cascading the emx via usb (on page 22). Note: for a standalone emx, this word is not displayed. For a slave device, it shows "slave" instead. The lcd...

  • Page 89

    Chapter 5: using the emx 75 section example information "d" means the lcd display has entered the device mode. "ca" indicates that the usb-cascading information is being displayed. "slave" indicates that this emx is a slave device. Note: for a master device, it shows the word "master" instead. The n...

  • Page 90

    Chapter 5: using the emx 76 emx2-888 contact closure sensor termination an emx2-888 model contains two built-in contact closure (cc) sensor channels, each of which comprises two termination points. Emx2-888 is designed to use a detachable terminal module for cc sensor termination, which makes instal...

  • Page 91

    Chapter 5: using the emx 77 numbers components 3 two buttons to configure the normal settings of the built-in cc sensor channels. The upper button is for cc2. The lower button is for cc1. To adjust the normal settings: to set to normally closed (n.C), press the button to turn it down. To set to norm...

  • Page 92

    Chapter 5: using the emx 78 the two termination points to the right are associated with channel 1 (cc1 as indicated in the panel), and the two to the left are associated with channel 2 (cc2). With this design, there are two ways to plug discrete detectors/switches: connect the discrete detectors/swi...

  • Page 93

    Chapter 5: using the emx 79 3. Use a screwdriver with a 2.5 mm wide shaft to tighten the screws above each termination point to secure the wires, using a torque of 0.196 n·m (2 kgf·cm). To make connections when the terminal module is separated from the emx: 1. Loosen the two screws on each side of t...

  • Page 94

    Chapter 5: using the emx 80 3. Strip the insulation and insert each wire of both detectors/switches into each termination point. 4. Use a screwdriver with a 2.5 mm wide shaft to tighten the screws above each termination point to secure the wires, using a torque of 0.196 n·m (2 kgf·cm). 5. Plug the t...

  • Page 95

    Chapter 5: using the emx 81 6. Tighten the two screws on two sides of the module to secure it. Emx2-888 contact closure sensor leds two leds that show the states of corresponding cc sensor channels are located on the leftmost of the emx2-888 panel. The upper led is for cc2. The lower led is for cc1....

  • Page 96

    Chapter 5: using the emx 82 for raritan's dpx water sensors, the normal state must be set to normally open (n.O). The following is the correct led behavior based on proper dip switch settings. Led sensor state off no water detected lit water detected reset button the reset button is located inside a...

  • Page 97: Chapter 6

    83 this chapter explains how to use the web interface to administer a emx. In this chapter supported web browsers........................................................................83 logging in to the web interface ..............................................................84 logout............

  • Page 98

    Chapter 6: using the web interface 84 logging in to the web interface to log in to the web interface, you must enter a user name and password. The first time you log in to the emx, use the default user name (admin) and password (raritan). For details, see the quick setup guide accompanying the produ...

  • Page 99

    Chapter 6: using the web interface 85 3. Type your user name in the user name field, and password in the password field. Both the user name and password are case sensitive. Note: if needed, click clear to clear either the inputs or any error message that appears. 4. If a security agreement is displa...

  • Page 100

    Chapter 6: using the web interface 86 note: the ip address to access a slave device in the usb-cascading configuration where the port forwarding mode is applied is a combination of the ip address and the port number. See port forwarding examples (on page 141). Password change request for first login...

  • Page 101

    Chapter 6: using the web interface 87 changing your password you must have the change own password permission to change your own password. See setting up roles (on page 154). You must have administrator privileges to change other users' passwords. See modifying a user profile (on page 152). To chang...

  • Page 102

    Chapter 6: using the web interface 88 close the web browser by clicking the close button ( ) on the top-right corner of the browser. Close the web browser by choosing file > close, or file > exit. The command varies according to the version of the browser you use. Choose the refresh command or click...

  • Page 103

    Chapter 6: using the web interface 89 data pane dashboard * the setup button is not available on some pages, such as the dashboard page. For detailed information about these web interface elements, see the sections that follow. Menus user management contains user profiles, permissions, and password ...

  • Page 104

    Chapter 6: using the web interface 90 first level second level third level auxiliary ports (rs-485) if one of the following is connected: lhx-20 shx-30 lhx-40 powerlogic pm710 **webcam snapashots snapshots webcam.

  • Page 105

    Chapter 6: using the web interface 91 *the emx folder is named "emx" by default. The name can be customized. See naming the emx (on page 110). ** a webcam icon appears only when a supported logitech ® webcam is connected to the emx. See connecting a logitech webcam (on page 59)..

  • Page 106

    Chapter 6: using the web interface 92 expanding the tree the icons representing all components implemented on or connected to the emx device are expanded by default. If they are hidden, you may expand the tree manually to show all component icons. To expand the tree: 1. By default, the emx folder ha...

  • Page 107

    Chapter 6: using the web interface 93 3. Repeat step 2 for other component groups you want to expand. The expanded tree looks similar to this image..

  • Page 108

    Chapter 6: using the web interface 94 collapsing the tree you can collapse the whole tree structure or a specific component group to hide all or partial tree items. To collapse the whole tree: click the black, gradient arrow prior to the emx folder icon, or double-click the folder. Note: this folder...

  • Page 109

    Chapter 6: using the web interface 95 2. Select the number of the port that you want to configure, and click setup. Or you can simply double-click that port number. The feature port setup dialog for the selected port appears. 3. In the detection mode field, select the way to display connected asset ...

  • Page 110

    Chapter 6: using the web interface 96 3. In the detection mode field, select the way to display connected lhx/shx heat exchangers. Disabled: when applied, disables to port and nothing connected to the port is detected. Auto: an icon is displayed for this port only when the emx device detects the phy...

  • Page 111

    Chapter 6: using the web interface 97 login name: this is the user name you used to log in to the web interface. Last login time: this shows the date and time this login name was used to log in to this emx device last time. When the mouse pointer hovers over the last login time, detailed information...

  • Page 112

    Chapter 6: using the web interface 98 2. Click a tree item whose data page you want to open. The data of the selected tree item is then displayed on the blank page. 3. To open more data pages, repeat the above steps. All tabs representing opened pages are shown across the top of the page. The follow...

  • Page 113

    Chapter 6: using the web interface 99 2. When the mouse pointer turns into a two-way arrow, drag the border horizontally to widen or shrink the pane. More information this section explains additional web interface elements or operations that are useful. Warning icon if the value you entered in a spe...

  • Page 114

    Chapter 6: using the web interface 100 the yellow- or red-highlighted sensors when a numeric sensor's reading enters the warning or critical range, the background color of the sensor row turns to yellow or red for alerting you. For a discrete (on/off) sensor, the row changes the background color whe...

  • Page 115

    Chapter 6: using the web interface 101 to find the exact meaning of the alert, read the information shown in the state (or status) column: below lower critical: the numeric sensor's reading drops below the lower critical threshold. Below lower warning: the numeric sensor's reading drops below the lo...

  • Page 116

    Chapter 6: using the web interface 102 browser-defined shortcut menu a shortcut menu, which is built in the web browser, may appear when right-clicking anywhere in the emx web interface. The shortcut menu functions are defined by the browser. For example, the back command on the internet explorer ® ...

  • Page 117

    Chapter 6: using the web interface 103 dashboard when you log in to the web interface, the dashboard page is displayed by default. This page provides an overview of the emx device's status..

  • Page 118

    Chapter 6: using the web interface 104 the page is divided into several sections according to connected equipment, such as asset sensors and environmental sensors. Double-clicking any item on the dashboard page opens the data page specific to the selected item. Note: if a sensor reading row is color...

  • Page 119

    Chapter 6: using the web interface 105 alarms list you can create event rules that request users to acknowledge certain alerts, and resend alert notifications if the acknowledgment action is not taken yet. See creating actions (on page 188). If any of these alerts has not been acknowledged since its...

  • Page 120

    Chapter 6: using the web interface 106 column description details click "details" to trigger a dialog showing both the alarm details and the acknowledgment button. Only users who have the acknowledge alarms permission can manually acknowledge an alarm. To acknowledge an alarm: 1. Double-click the al...

  • Page 121

    Chapter 6: using the web interface 107 tab information shown asset strips each asset sensor's id, boot version, application version and protocol version. 2. Enlarge the dialog if necessary. 3. You can re-sort the list or change the columns displayed. 4. Click close to quit the dialog. Tip: the firmw...

  • Page 122

    Chapter 6: using the web interface 108 fields description cascade position indicates the position of the emx in the usb-cascading configuration. 0 (zero) represents the master device. A non-zero number represents a slave device. 1 is slave 1, 2 is slave 2, 3 is slave 3 and so on. This field is not a...

  • Page 123

    Chapter 6: using the web interface 109 the following diagram shows 1, indicating it is the first slave - slave 1. The final slave device shows a non-zero number which indicates its position in the cascade position field and no in the cascaded device connected field..

  • Page 124

    Chapter 6: using the web interface 110 the following diagram shows 2, indicating it is the second slave - slave 2. The cascaded device connected field shows no, indicating that it is the final one in the chain. Naming the emx to change the device name: 1. In the left pane, click the emx folder. The ...

  • Page 125

    Chapter 6: using the web interface 111 modifying network interface settings the emx supports two types of network interfaces: wired and wireless. You should configure the network interface settings according to the networking mode that applies. See connecting the emx to your network (on page 14). Wi...

  • Page 126

    Chapter 6: using the web interface 112 wireless network settings wireless ssid, psk and bssid parameters were set during the installation and configuration process. You can change them later. Note for usb-cascading configuration: port forwarding mode over wireless lan is supported as of release 3.1....

  • Page 127

    Chapter 6: using the web interface 113 options description eap - peap peap stands for protected extensible authentication protocol. Enter the following authentication data: inner authentication: only microsoft's challenge authentication protocol version 2 (mschapv2) is supported, allowing authentica...

  • Page 128

    Chapter 6: using the web interface 114 modifying network settings the emx was configured for network connectivity during the installation and configuration process. See configuring the emx (on page 10). If necessary, you can modify any network settings later. Selecting the internet protocol the emx ...

  • Page 129

    Chapter 6: using the web interface 115 modifying ipv4 settings you must enable the ipv4 protocol before you can modify the ipv4 network settings. See selecting the internet protocol (on page 114). To modify ipv4 settings: 1. Choose device settings > network. The network configuration dialog appears....

  • Page 130

    Chapter 6: using the web interface 116 option description mask using the format "ip address/subnet mask." next hop: ip address of the next hop router. See static route examples (on page 118) for illustrations. 4. Click ok. Note: the emx supports a maximum of 3 dns servers. If two ipv4 dns servers an...

  • Page 131

    Chapter 6: using the web interface 117 option description ip address default gateway primary dns server secondary dns server (optional) dns suffix (optional) if your local network contains two subnets and ip forwarding has been enabled, you can click append to add static routes so that your emx can ...

  • Page 132

    Chapter 6: using the web interface 118 static route examples this section has two static route examples: ipv4 and ipv6. Both examples assume that two network interface controllers (nic) have been installed in one network server, leading to two available subnets, and ip forwarding has been enabled. A...

  • Page 133

    Chapter 6: using the web interface 119 in this example, nic-2 (192.168.100.88) is the next hop router for your emx to communicate with any device in the other subnet 192.168.200.0. In the ipv4 "append new route" dialog, you should specify: destination: 192.168.200.0/24 next hop: 192.168.100.88 ipv6 ...

  • Page 134

    Chapter 6: using the web interface 120 in this example, nic-2 (fd07:2fa:6cff:2405::80) is the next hop router for your emx to communicate with any device in the other subnet fd07:2fa:6cff:1111::0. In the ipv6 "append new route" dialog, you should specify: destination: fd07:2fa:6cff:2405::0/64 next h...

  • Page 135

    Chapter 6: using the web interface 121 https uses transport layer security (tls) technology to encrypt all traffic to and from the emx device so it is a more secure protocol than http. By default, any access to the emx device via http is automatically redirected to https. You can disable this redire...

  • Page 136

    Chapter 6: using the web interface 122 configuring snmp settings you can enable or disable snmp communication between an snmp manager and the emx device. Enabling snmp communication allows the manager to retrieve information or configure the emx. Besides, you may need to configure the snmp destinati...

  • Page 137

    Chapter 6: using the web interface 123 to configure snmp notification destinations: 1. Click the notifications tab in the same snmp dialog. 2. Select the enabled checkbox. 3. Select an snmp notification type - snmp v2c trap, snmp v2c inform, snmp v3 trap, and snmp v3 inform. 4. Specify the snmp noti...

  • Page 138

    Chapter 6: using the web interface 124 changing telnet settings you can enable or disable the telnet access to the command line interface, or change the default tcp port for the telnet service. To change telnet service settings: 1. Choose device settings > network services > telnet. The telnet setti...

  • Page 139

    Chapter 6: using the web interface 125 c. Connect the rs232-to-usb adapter to the usb-a port on the emx. Note: do not connect the modbus rtu device or modbus bus to the rs485 ports on the emx, which is not supported. 2. On the emx, enable and properly configure the modbus gateway feature. See modbus...

  • Page 140

    Chapter 6: using the web interface 126 tcp port - required use the default port 503, or assign a different port. Valid range is 1 to 65535. Port 502 is the default modbus/tcp port for emx, so you cannot use that port for the modbus gateway. Parity and line speed - required use the default settings, ...

  • Page 141

    Chapter 6: using the web interface 127 enabling service advertisement the emx advertises all enabled services that are reachable using the ip network. This feature uses dns-sd (domain name system-service discovery) and mdns (multicastdns). The advertised services are discovered by clients that have ...

  • Page 142

    Chapter 6: using the web interface 128 if the daylight saving time rules are not available for the selected time zone, the checkbox is not configurable. 4. Choose one of the methods to set the date and time: to customize the date and time, select the user specified time radio button, and then enter ...

  • Page 143

    Chapter 6: using the web interface 129 how to use the calendar the calendar icon next to the date field is a convenient tool to quickly change the year, month and date. To select a date using the calendar: 1. To change the year shown in the calendar, do either of the following: press ctrl+up arrow o...

  • Page 144

    Chapter 6: using the web interface 130 click or on the top of the calendar to switch between months. Click , which is adjacent to the year, to show a list of years and months. Select the desired month from the list to the left and click ok. 3. To select a date, click that date on the calendar. Click...

  • Page 145

    Chapter 6: using the web interface 131 setting default measurement units default measurement units are applied to the emx web and cli interfaces across all users, including users accessing the device via external authentication servers. Default units apply before users set their own preferred measur...

  • Page 146

    Chapter 6: using the web interface 132 configuring the feature port the emx device supports connecting one of the following devices to its feature port: raritan asset management sensors (asset sensors). See connecting asset management sensors (on page 25). External beeper. See connecting an external...

  • Page 147

    Chapter 6: using the web interface 133 device type description lhx 20 schroff ® lhx-20 heat exchanger. All schroff ® shx/lhx device types are available only after the lhx/shx support is enabled. See enabling and disabling schroff lhx/shx heat exchanger support (on page 273). Shx 30 schroff ® shx-30 ...

  • Page 148

    Chapter 6: using the web interface 134 lhx-20 shx-30 lhx-40 powerlogic pm710

  • Page 149

    Chapter 6: using the web interface 135 configuring the serial port you can change the bit-rate of the serial port labeled console / modem on the emx device. The default bit-rate for both console and modem operation is 115200 bps. The emx supports the use of one of the following devices via the seria...

  • Page 150

    Chapter 6: using the web interface 136 to configure the analog modem settings: 1. Click the analog modem tab. 2. Select the "answer incoming calls" checkbox to enable the remote access via a modem. Otherwise, deselect this checkbox. 3. Specify the number of rings the emx must wait before answering t...

  • Page 151

    Chapter 6: using the web interface 137 3. Verify that the "position in cascaded chain" field shows 0 (master), indicating that this emx is the master device. 4. Select the preferred cascading mode in the "cascading mode" field. Bridging: each device in the usb-cascading configuration is accessed wit...

  • Page 152

    Chapter 6: using the web interface 138 overview of the cascading modes you must apply a cascading mode to the usb-cascading configuration. See setting the cascading mode (on page 136). Overview: the bridging mode supports the wired network only while the port forwarding mode supports both wired and ...

  • Page 153

    Chapter 6: using the web interface 139 "port forwarding" mode: the dhcp server communicates with the master device only and assigns one ip address. All slave devices use the same ip address as the master device. You must specify a 5xxxx port number (where x is a number) when remotely accessing any s...

  • Page 154

    Chapter 6: using the web interface 140 position xx slave 2 02 slave 3 03 slave 4 04 slave 5 05 slave 6 06 slave 7 07 for example, to access the slave 4 device via modbus/tcp, the port number is 50604. See port forwarding examples (on page 141) for further illustrations. Tip: the full list of each ca...

  • Page 155

    Chapter 6: using the web interface 141 port forwarding examples to access a cascaded device in the port forwarding mode, assign a port number to the ip address. Master device: assign proper 5nnxx port numbers or standard tcp/udp ports. See port number syntax (on page 139) for details. Slave device: ...

  • Page 156

    Chapter 6: using the web interface 142 slave 1 device: position code for slave 1 is 01 so each port number is 5nn01 as shown below. Protocols port numbers https 50001 http 50101 ssh 50201 telnet 50301 snmp 50501 modbus 50601 examples: to access slave 1 via https, the ip address is: https://192.168.8...

  • Page 157

    Chapter 6: using the web interface 143 to access slave 2 via ssh, the command is: ssh -p 50202 192.168.84.77 specifying the device altitude you must specify the emx device's altitude above sea level if a raritan's dpx differential air pressure sensor is attached. This is because the device's altitud...

  • Page 158

    Chapter 6: using the web interface 144 setting data logging the emx can store 120 measurements for each sensor in a memory buffer. This memory buffer is known as the data log. Sensor readings in the data log can be retrieved using snmp. You can configure how often measurements are written into the d...

  • Page 159

    Chapter 6: using the web interface 145 select the checkboxes of the desired sensors in the logging enabled column, or use the enable all and disable all buttons to select or clear all. 5. Click ok. Information about update interval raritan environmental sensors can be divided into two categories acc...

  • Page 160

    Chapter 6: using the web interface 146 7. If your smtp server requires password authentication, do this: a. Select the server requires authentication checkbox. B. Type a user name in the user name field. C. Type a password in the password field. 8. If your smtp server supports the transport layer se...

  • Page 161

    Chapter 6: using the web interface 147 configuring data push settings if any raritan asset sensors have been connected to emx, you can push the asset sensor data to a remote server for data synchronization. The data will be sent in json format using http post requests. You need to set up the destina...

  • Page 162

    Chapter 6: using the web interface 148 to remove the asset sensor, select it in the selected list box and click (remove) or (remove all). 7. Click ok. Checking the internal beeper state the internal beeper of the emx always turns off if there are no event rules that involve this beeper. If intended,...

  • Page 163

    Chapter 6: using the web interface 149 user and role management the emx is shipped with one built-in user profile: admin, which is used for initial login and configuration. This profile has full system permissions, and should be reserved for the system administrator. It cannot be deleted and its per...

  • Page 164

    Chapter 6: using the web interface 150 field type this... Case sensitive 4. Select the enabled checkbox. Enabled users can log in to the emx device. 5. Select the "force password change on next login" checkbox if you prefer a password change by the user when the user logs in for the first time after...

  • Page 165

    Chapter 6: using the web interface 151 field description printable characters. Confirm authentication pass phrase re-type the same authentication pass phrase for confirmation. Use authentication pass phrase as privacy pass phrase this checkbox is configurable only if authpriv is selected. When the c...

  • Page 166

    Chapter 6: using the web interface 152 if no roles meet your needs, you can: modify the permissions of an existing role: to modify the permissions of any role, double-click the role or highlight it and then click edit role. See modifying a role (on page 155). Create a new role by clicking the manage...

  • Page 167

    Chapter 6: using the web interface 153 5. To change the snmpv3 access permissions, click the snmpv3 tab and make necessary changes. For details, see step 6 of creating a user profile (on page 149). 6. To change the permissions, click the roles tab and do one of these: select or deselect any role's c...

  • Page 168

    Chapter 6: using the web interface 154 note: the measurement unit change only applies to the web interface and command line interface. Setting your preferences does not change the default measurement units, which apply to all users before any individual user or the administrator sets preferred measu...

  • Page 169

    Chapter 6: using the web interface 155 creating a role create a new role when you need a new combination of permissions. To create a role: 1. Choose user management > roles. The manage roles dialog appears. Tip: you can also access the manage roles dialog by clicking the manage roles button in the e...

  • Page 170

    Chapter 6: using the web interface 156 4. Modify the text shown in the description field if necessary. 5. To change the permissions, click the privileges tab. Note: you cannot change the admin role's permissions. 6. To delete any permissions, do this: a. Select the permission you want to remove by c...

  • Page 171

    Chapter 6: using the web interface 157 2. Select the role you want to delete by clicking it. To make multiple selections, press ctrl+click or shift+click to highlight multiple ones. 3. Click delete. 4. A message appears, prompting you to confirm the operation. Click yes to confirm the deletion. Acce...

  • Page 172

    Chapter 6: using the web interface 158 enabling the firewall the firewall rules, if any, take effect only after the firewall is enabled. To enable the emx firewall: 1. Choose device settings > security > ip access control. The configure ip access control settings dialog appears. 2. To enable the ipv...

  • Page 173

    Chapter 6: using the web interface 159 b. Ensure the enable ipv6 access control checkbox is selected. C. Locate the default policy field in the inbound rules section. D. The default policy is shown in the default policy field. To change it, select a different policy from the drop-down list. Accept: ...

  • Page 174

    Chapter 6: using the web interface 160 note: valid ipv4 addresses range from 0.0.0.0 through 255.255.255.255. Make sure the ipv4 addresses entered are within the scope. To create firewall rules: 1. Choose device settings > security > ip access control. The configure ip access control settings dialog...

  • Page 175

    Chapter 6: using the web interface 161 action procedure insert a rule between two existing rules select the rule above which you want to insert a new rule. For example, to insert a rule between rules #3 and #4, select #4. Click insert. The "insert new rule" dialog appears. Type an ip address and sub...

  • Page 176

    Chapter 6: using the web interface 162 6. When finished, the rules appear in the configure ip access control settings dialog. 7. Click ok. The rules are applied. Editing firewall rules when an existing firewall rule requires updates of ip address range and/or policy, modify them accordingly. To modi...

  • Page 177

    Chapter 6: using the web interface 163 2. To modify the ipv4 firewall rules, click the ipv4 tab. To modify the ipv6 firewall rules, click the ipv6 tab. 3. Ensure the enable ipv4 access control checkbox is selected on the ipv4 tab, or the enable ipv6 access control checkbox is selected on the ipv6 ta...

  • Page 178

    Chapter 6: using the web interface 164 3. Ensure the enable ipv4 access control checkbox is selected on the ipv4 tab, or the enable ipv6 access control checkbox is selected on the ipv6 tab. 4. Select the rule that you want to delete. To make multiple selections, press ctrl+click or shift+click to hi...

  • Page 179

    Chapter 6: using the web interface 165 x min: this type of option sets the time limit to x minutes, where x is a number. X h: this type of option sets the time limit to x hours, where x is a number. 1 d: this option sets the time limit to 1 day. Tip: if the desired time option is not listed, you can...

  • Page 180

    Chapter 6: using the web interface 166 enabling strong passwords use of strong passwords makes it more difficult for intruders to crack user passwords and access the emx device. By default, strong passwords should be at least eight characters long and contain upper- and lower-case letters, numbers, ...

  • Page 181

    Chapter 6: using the web interface 167 tip: if the desired time option is not listed, you can manually type the desired time in this field. For example, you can type "9 d" to set the password aging time to 9 days. 4. Click ok. Enabling and editing the security banner use the emx restricted service a...

  • Page 182

    Chapter 6: using the web interface 168 if the restricted service agreement feature is enabled, the restricted service agreement is displayed when any user logs in to the emx. Do either of the following, or you cannot successfully log in to the emx: in the web interface, select the checkbox labeled "...

  • Page 183

    Chapter 6: using the web interface 169 changing the default policy the default policy is to accept all traffic from all ip addresses regardless of the role applied to the user. To change the default policy: 1. Choose device settings > security > role based access control. The configure role based ac...

  • Page 184

    Chapter 6: using the web interface 170 3. Ensure the "enable role based access control for ipv4" checkbox is selected on the ipv4 tab, or the "enable role based access control for ipv6" checkbox is selected on the ipv6 tab. 4. Create specific rules: action do this... Add a rule to the end of the rul...

  • Page 185

    Chapter 6: using the web interface 171 action do this... Role click ok. The system inserts the rule and automatically renumbers the following rules. 5. Click ok. Editing role-based access control rules you can modify existing rules when these rules do not meet your needs. To modify a role-based acce...

  • Page 186

    Chapter 6: using the web interface 172 6. Click ok. Deleting role-based access control rules when any access control rule becomes unnecessary or obsolete, remove it. To delete a role-based access control rule: 1. Choose device settings > security > role based access control. The configure role based...

  • Page 187

    Chapter 6: using the web interface 173 having an x.509 digital certificate ensures that both parties in an tls connection are who they say they are. To obtain a certificate for the emx, create a certificate signing request (csr) and submit it to a certificate authority (ca). After the ca processes t...

  • Page 188

    Chapter 6: using the web interface 174 field type this information common name the fully qualified domain name (fqdn) of your emx device. Email address an email address where you or another administrative user can be reached. Note: all fields in the subject section are mandatory, except for the orga...

  • Page 189

    Chapter 6: using the web interface 175 installing a ca-signed certificate after the ca provides a signed certificate according to the csr you submitted, you must install it on the emx device. To install the certificate: 1. Choose device settings > security > ssl certificate. The manage ssl certifica...

  • Page 190

    Chapter 6: using the web interface 176 field type this information key length select the key length (bits) from the drop-down list in this field. A larger key length enhances the security, but slows down the emx device's response. Self sign ensure this checkbox is selected, which indicates that you ...

  • Page 191

    Chapter 6: using the web interface 177 installing existing key and certificate files if the tls certificate and private key files are already available, you can install them directly without going through the process of creating a csr or a self-signed certificate. Note: if you are using a tls certif...

  • Page 192

    Chapter 6: using the web interface 178 setting up external authentication for security purposes, users attempting to log in to the emx must be authenticated. The emx supports the access using one of the following authentication mechanisms: local database of user profiles on the emx device lightweigh...

  • Page 193

    Chapter 6: using the web interface 179 gathering the ldap information it requires knowledge of your ldap server and directory settings to configure the emx for ldap authentication. If you are not familiar with the settings, consult your ldap administrator for help. To configure ldap authentication, ...

  • Page 194

    Chapter 6: using the web interface 180 adding authentication servers add all external aa servers that you want to use to the emx. Later you can use the sequence of the server list to control the aa servers' access priority. Adding ldap server settings to activate and use external ldap/ldaps server a...

  • Page 195

    Chapter 6: using the web interface 181 none 7. Port (none/starttls) - the default port is 389. Either use the standard ldap tcp port or specify another port. 8. Port (tls) - the default is 636. Either use the default port or specify another port. This field is enabled only when "tls" is selected in ...

  • Page 196

    Chapter 6: using the web interface 182 16. Base dn for search - enter the name you want to bind against the ldap/ldaps (up to 31 characters), and where in the database to begin searching for the specified base dn. An example base search value might be: cn=users,dc=raritan,dc=com. Consult your aa ser...

  • Page 197

    Chapter 6: using the web interface 183 note: if the emx clock and the ldap server clock are out of sync, the installed tls certificates, if any, may be considered expired. To ensure proper synchronization, administrators should configure the emx and the ldap server to use the same ntp server(s). Mor...

  • Page 198

    Chapter 6: using the web interface 184 10. To verify if the authentication configuration is set correctly, you may click test connection to check whether the emx can connect to the remote authentication server successfully. Tip: you can also do this by using the test connection button in the authent...

  • Page 199

    Chapter 6: using the web interface 185 editing authentication server settings if the configuration of any external authentication server has been changed, such as the port number, you must modify the authentication settings on the emx device accordingly, or the authentication fails. To modify the ex...

  • Page 200

    Chapter 6: using the web interface 186 enabling external and local authentication services to make authentication function properly all the time - even when external authentication is not available, you can enable both the local and remote authentication services. When both authentication services a...

  • Page 201

    Chapter 6: using the web interface 187 event rules and actions a benefit of the product's intelligence is its ability to notify you of and react to a change in conditions. This event notification or reaction is an "event rule." the emx is shipped with four built-in event rules, which cannot be delet...

  • Page 202

    Chapter 6: using the web interface 188 creating an event rule the best way to create a new set of event rules in sequence is to: create actions for responding to one or multiple events create rules to determine what actions are taken when these events occur creating actions the emx comes with three ...

  • Page 203

    Chapter 6: using the web interface 189 action function execute an action group creates a group of actions comprising existing actions. See action group (on page 190). Alarm requires the user to acknowledge the alert when it is generated. If needed, you can have the alert notifications regularly gene...

  • Page 204

    Chapter 6: using the web interface 190 action function switch lhx/shx switches on or off the lhx/shx device. See switch lhx/shx (on page 205). This option is available only when the schroff lhx/shx support has been enabled. Record snapshots to webcam storage makes a connected webcam start or stop ta...

  • Page 205

    Chapter 6: using the web interface 191 7. To remove an action from the action group, select it from the used actions list box, and click to move it to the available actions list box. To make multiple selections, press ctrl+click or shift+click to highlight multiple ones. To remove all actions, click...

  • Page 206

    Chapter 6: using the web interface 192 b. Click to add the selected method to the alarm notifications list box. C. Repeat the above steps to add more methods if needed. To remove any method from the alarm notifications list box, select that method and click . 6. In the notification options section, ...

  • Page 207

    Chapter 6: using the web interface 193 3. In the "action name" field, type a new name for the action. The default name is new action , where is a sequential number starting at 1. 4. In the action field, click the drop-down arrow and select the desired action: external beeper. 5. From the beeper port...

  • Page 208

    Chapter 6: using the web interface 194 push out sensor readings if you have connected raritan's asset sensors to the emx, you can configure the emx to push asset sensor data to a remote server after a certain event occurs. Before creating this action, make sure that you have properly defined the des...

  • Page 209

    Chapter 6: using the web interface 195 request lhx/shx maximum cooling if schroff lhx/shx support is enabled, the lhx/shx-related actions will be available. See enabling and disabling schroff lhx/shx heat exchanger support (on page 273). The "request lhx/shx maximum cooling" action applies the maxim...

  • Page 210

    Chapter 6: using the web interface 196 to use a different smtp server, select the use custom smtp settings checkbox. If the smtp server settings are not configured yet, click configure. See configuring smtp settings (on page 145) for the information of each field. 8. Select the webcam that is captur...

  • Page 211

    Chapter 6: using the web interface 197 4. In the "action name" field, type a new name for the action. The default name is new action , where is a sequential number starting at 1. 5. In the action field, click the drop-down arrow and select the desired action: send email. 6. In the "recipients email ...

  • Page 212

    Chapter 6: using the web interface 198 5. In the action field, click the drop-down arrow and select the desired action: send snmp notification. 6. Select the type of snmp notification. See either procedure below according to your selection. To send snmp v2c notifications: 1. From the notification ty...

  • Page 213

    Chapter 6: using the web interface 199 b. In the number of retries field, enter the number of times you want to resend the inform communication if it fails. For example, inform communications are resent up to 5 times when the initial communication fails. 4. For both snmp traps and informs, enter the...

  • Page 214

    Chapter 6: using the web interface 200 syslog message use this action to automatically forward event messages to the specified syslog server. Determine the syslog transmission mechanism you prefer when setting it up - udp, tcp or tls over tcp. The emx may or may not detect the syslog message transmi...

  • Page 215

    Chapter 6: using the web interface 201 transport protocol types next steps if a tls certificate is required, select the "enable secure syslog over tls" checkbox, and then do the following: a. Specify an appropriate port number in the "tcp port (tls)" field. Default is 6514. B. In the ca certificate ...

  • Page 216

    Chapter 6: using the web interface 202 4. In the "action name" field, type a new name for the action. The default name is new action , where is a sequential number starting at 1. 5. In the action field, click the drop-down arrow and select the desired action: send sensor report. 6. In the destinatio...

  • Page 217

    Chapter 6: using the web interface 203 10. To save this action, click ok. Note: when intending to send a sensor report using custom messages, use the placeholder [sensorreport] to report sensor readings. See email and sms message placeholders (on page 224). Send sms message you can configure emails ...

  • Page 218

    Chapter 6: using the web interface 204 note: only the 7-bit ascii charset is supported for sms messages. 8. Click ok. Internal beeper you can have the built-in beeper of the emx turned on or off when a certain event occurs. To switch the internal beeper: 1. Click the actions tab. 2. Click new. 3. In...

  • Page 219

    Chapter 6: using the web interface 205 turn on: turns on the selected actuator. Turn off: turns off the selected actuator. 6. To select the actuator where this action will be applied, select it from the available actuators list and click to add it to the switched actuators list box. To make multiple...

  • Page 220

    Chapter 6: using the web interface 206 record snapshots to webcam storage this option allows you to define an action that starts or stops a specific webcam from taking snapshots. To configure a record snapshot to webcam storage action: 1. Choose device settings > event rules. The event rules setting...

  • Page 221

    Chapter 6: using the web interface 207 creating rules after required actions are available, you can create event rules to determine what actions are taken to respond to specific events. By default, the emx provides the following built-in event rules: system event log rule system snmp notification ru...

  • Page 222

    Chapter 6: using the web interface 208 event types radio buttons numeric sensor threshold-crossing events, or the occurrence of the selected event -- true or false available radio buttons include "asserted," "deasserted" and "both." asserted: the emx takes the action only when the event occurs. This...

  • Page 223

    Chapter 6: using the web interface 209 event types radio buttons network interface link state available radio buttons include "link state is up," "link state is down" and "both." link state is up: the emx takes the action only when the network link state changes from down to up. Link state is down: ...

  • Page 224

    Chapter 6: using the web interface 210 event types radio buttons server monitoring event available radio buttons include "monitoring started," "monitoring stopped," and "both." monitoring started: the emx takes the action only when the monitoring of any specified server starts. Monitoring stopped: t...

  • Page 225

    Chapter 6: using the web interface 211 11. Click close to quit the dialog. Note: asset management sensor event rules must be recreated after an emx firmware upgrade. Scheduling an action an action can be regularly performed at a preset time interval instead of being triggered by a specific event. Fo...

  • Page 226

    Chapter 6: using the web interface 212 time options frequency settings minutes the frequency in minutes ranges from every minute, every 5 minutes, every 10 minutes and so on until every 30 minutes. Hourly the hourly option sets the timing to either of the following: the minute field is set to 0 (zer...

  • Page 227

    Chapter 6: using the web interface 213 to remove all actions, click . 9. Click ok. Send sensor report example below is an example of a scheduled action set to send a temperature sensor report via email hourly. In this example, a. Define a 'send email' destination action that is name send sensor temp...

  • Page 228

    Chapter 6: using the web interface 214 you must create the destination action as illustrated below prior to creating the 'send hourly temperature sensor readings' action. For details, see send email (on page 196). 2. Create the 'send sensor report' action -- send hourly temperature sensor readings ....

  • Page 229

    Chapter 6: using the web interface 215 type the action's name -- send hourly temperature sensor readings . Select the 'send sensor report' action. Select the destination action 'send sensor temp report email'. Add the desired temperature sensor(s) from the available sensors list to the report sensor...

  • Page 230

    Chapter 6: using the web interface 216 type the timer name -- hourly sensor temperature readings. Select the enabled checkbox. Select hourly, and set the minute to 30. Select the 'send hourly temperature sensor readings' action. C. Click ok. For details, see scheduling an action (on page 211). Then ...

  • Page 231

    Chapter 6: using the web interface 217 event/context default assertion message when the event = true default assertion message when the event = false* asset management > rack unit > * > tag connected asset tag with id '[tagid]' connected at rack unit [rackunit], slot [rackslot] of asset strip [strip...

  • Page 232

    Chapter 6: using the web interface 218 event/context default assertion message when the event = true default assertion message when the event = false* device > firmware validation failed firmware validation failed by user '[username]' from host '[userip]'. Device > firmware update started firmware u...

  • Page 233

    Chapter 6: using the web interface 219 event/context default assertion message when the event = true default assertion message when the event = false* device > sending snmp inform failed or no response sending snmp inform to manager [snmpmanager]:[snmpmanager port] failed or no response. [errordesc]...

  • Page 234

    Chapter 6: using the web interface 220 event/context default assertion message when the event = true default assertion message when the event = false* peripheral device slot > * > numeric sensor > below lower warning peripheral device '[extsensorname]' in slot '[extsensorslot]' asserted 'below lower...

  • Page 235

    Chapter 6: using the web interface 221 event/context default assertion message when the event = true default assertion message when the event = false* power logic device > * > sensor > * > above upper warning sensor '[plsensorname]' on power logic device at [porttype] port '[portid]' asserted 'above...

  • Page 236

    Chapter 6: using the web interface 222 user administration > user modified user '[targetuser]' modified by user '[username]' from host '[userip]'. User administration > user deleted user '[targetuser]' deleted by user '[username]' from host '[userip]'. User administration > password changed password...

  • Page 237

    Chapter 6: using the web interface 223 lhx / shx > * > sensor > below lower warning threshold sensor '[lhxsensorid]' on lhx at [porttype] port '[portid]' asserted 'below lower warning'. Sensor '[lhxsensorid]' on lhx at [porttype] port '[portid]' deasserted 'below lower warning'. Lhx / shx > * > sens...

  • Page 238

    Chapter 6: using the web interface 224 lhx / shx > * > threshold air outlet the air outlet temperature threshold on lhx at [porttype] port '[portid]' was crossed. The air outlet temperature on lhx at [porttype] port '[portid]' is within thresholds. Lhx / shx > * > threshold water inlet the water inl...

  • Page 239

    Chapter 6: using the web interface 225 placeholder description [amsrackunitposition] the (vertical) rack unit position, an action applies to [amsstate] the human readable state of an asset strip [amstagid] the asset tag id [configparam] the name of a configuration parameter [configvalue] the new val...

  • Page 240

    Chapter 6: using the web interface 226 placeholder description [sensorreadingunit] the unit of a sensor reading [sensorreading] the value of a sensor reading [sensorreport] the formatted sensor report contents [sensorstatename] the human readable state of a sensor [smtprecipients] the list of recipi...

  • Page 241

    Chapter 6: using the web interface 227 3. From the event drop-down, select device > "network interface link state is up". These selections indicate we are specifying an event regarding asset sensor management, and we want the emx to respond to the event related to physical connections and/or disconn...

  • Page 242

    Chapter 6: using the web interface 228 3. Select "numeric sensor" to indicate the sensor is a numeric sensor. Note: a numeric sensor uses numeric values to indicate the environmental condition while a discrete (on/off) sensor uses alphabetical characters to indicate the sensor state. 4. Select "" be...

  • Page 243

    Chapter 6: using the web interface 229 example 1 this example illustrates an event rule which continuously causes the emx to send out email messages. Event selected action included device > sending smtp message failed send email example 2 this example illustrates an event rule which continuously cau...

  • Page 244

    Chapter 6: using the web interface 230 for example, in a user activity event rule for the "admin" user, you can click the "admin" tab to display a pull-down submenu showing all user names, and then select a different user name or all users (shown as ). 5. If the "trigger condition" field is availabl...

  • Page 245

    Chapter 6: using the web interface 231 modifying an action an existing action can be changed so that all event rules where this action is involved change their behavior accordingly. Exception: the built-in actions "system event log action" and "system tamper alarm" are not user-configurable. To modi...

  • Page 246

    Chapter 6: using the web interface 232 c. Click delete. D. Click yes on the confirmation message. 4. Click close to quit the dialog. A note about untriggered rules in some cases, a measurement exceeds a threshold causing the emx to generate an alert. The measurement then returns to a value within th...

  • Page 247

    Chapter 6: using the web interface 233 note: sometimes when the dialog is too narrow, the icon takes the place of the show details button. In that case, click and select show details to view details. Click to view the latest events. View a specific type of events only by selecting an event type in t...

  • Page 248

    Chapter 6: using the web interface 234 2. Click yes on the confirmation message. Clearing event entries if it is not necessary to keep existing event history, you can remove all of it from the local log. To delete all event entries: 1. Choose maintenance > view event log. The event log dialog appear...

  • Page 249

    Chapter 6: using the web interface 235 column description idle time the length of time for which a user remains idle. The unit "min" represents minutes. 2. To disconnect any user, click the corresponding disconnect button. A. A dialog appears, prompting you to confirm the operation. B. Click yes to ...

  • Page 250

    Chapter 6: using the web interface 236 2. Click new. The add new server dialog appears. 3. By default, the "enable ping monitoring for this server" checkbox is selected. If not, select it to enable this feature. 4. Provide the information required. Field description ip address/hostname ip address or...

  • Page 251

    Chapter 6: using the web interface 237 example: ping monitoring and snmp notifications in this illustration, it is assumed that a significant pdu (ip address: 192.168.84.95) shall be monitored by your emx to make sure that pdu is properly operating all the time, and the emx must send out snmp notifi...

  • Page 252

    Chapter 6: using the web interface 238 3. In the "rule name" field, type "send snmp notifications for pdu (192.168.84.95) inaccessibility." 4. Select the enabled checkbox to enable this new rule. 5. In the event field, choose server monitoring > 192.168.84.95 > unreachable. 6. In the "trigger condit...

  • Page 253

    Chapter 6: using the web interface 239 4. Click yes on the confirmation message. 5. Click close to quit the dialog. Checking server monitoring states server monitoring results are available in the server reachability dialog after specifying it devices for the emx device to monitor their network acce...

  • Page 254

    Chapter 6: using the web interface 240 3. Identify each sensor and actuator. See identifying environmental sensors and actuators (on page 240). 4. The emx should automatically manage the detected sensors and actuators. Verify whether detected sensors and actuators are managed. If not, have them mana...

  • Page 255

    Chapter 6: using the web interface 241 matching the serial number a dpx environmental sensor package includes a serial number tag on the sensor cable. A dpx2, dpx3 or dx sensor has a serial number tag attached to its rear side. The serial number for each sensor or actuator appears listed in the web ...

  • Page 256

    Chapter 6: using the web interface 242 matching the position dpx2, dpx3 and dx sensor packages can be daisy chained. The emx can indicate each sensor or actuator's position by showing the sensor port where the environmental sensor package is connected as well as its sequence in a sensor daisy chain....

  • Page 257

    Chapter 6: using the web interface 243 for example, if a dpx sensor package is connected to the sensor port numbered 1, its position column only shows "port 1" no matter a dpx3-envhub4 sensor hub is used or not. Note: for the emx devices with only one sensor port, it always shows "port 1." dpx2, dpx...

  • Page 258

    Chapter 6: using the web interface 244 managing environmental sensors or actuators the emx starts to retrieve an environmental sensor's reading and/or state and records the state transitions after the environmental sensor is managed. To control an actuator, you also need to have it managed. The emx ...

  • Page 259

    Chapter 6: using the web interface 245 tip: the information in parentheses following each id number indicates whether the number has been assigned to any sensor or actuator. If it has been assigned to a sensor or actuator, it shows its serial number. Otherwise, it shows the word "unused." the manual...

  • Page 260

    Chapter 6: using the web interface 246 configuring environmental sensors or actuators you can change the default name to easily identify the managed sensor or actuator, and describe its location with x, y and z coordinates. To configure environmental sensors or actuators: 1. Click peripheral devices...

  • Page 261

    Chapter 6: using the web interface 247 5. If the selected sensor is a numeric sensor, its threshold settings are displayed in the dialog. See sensor threshold settings (on page 529) for detailed information. There are two types of thresholds: sensor-specific thresholds and default thresholds. To use...

  • Page 262

    Chapter 6: using the web interface 248 2. Click setup on the settings page. The setup dialog appears. 3. In the peripheral device z coordinate format field, click the drop-down arrow and select an option from the list. Rack units: the height of the z coordinate is measured in standard rack units. Wh...

  • Page 263

    Chapter 6: using the web interface 249 changing default thresholds the default thresholds are the initial threshold values that automatically apply to numeric environmental sensors. These values are configured on a sensor type basis, which include: temperature sensors humidity sensors (both relative...

  • Page 264

    Chapter 6: using the web interface 250 6. Click ok. Setting thresholds for multiple sensors you can configure thresholds for multiple environmental sensors of the same type at a time. For example, if you want all temperature sensors to have identical upper and lower thresholds, follow the procedure ...

  • Page 265

    Chapter 6: using the web interface 251 to select all of those listed on the peripheral devices page, simply select the checkbox in the header row. 3. Click setup. Note that the setup button is disabled if any of the selected sensors belongs to a different type. 4. Configure the thresholds as describ...

  • Page 266

    Chapter 6: using the web interface 252 information of each managed sensor and actuator, including: - name - position - reading (for numeric sensors) - state to view both managed and unmanaged ones: click peripheral devices in the left pane. Detailed information for each connected sensor or actuator ...

  • Page 267

    Chapter 6: using the web interface 253 sensor state applicable to below lower warning numeric sensors above upper warning numeric sensors above upper critical numeric sensors "unavailable" state the unavailable state means the connectivity or communications with the sensor is lost. The emx pings all...

  • Page 268

    Chapter 6: using the web interface 254 "normal" state this state indicates the sensor is in the normal state. For a contact closure sensor, usually this state is the normal state you have set. If the normal state is set to normally closed, the normal state means the contact closure switch is closed....

  • Page 269

    Chapter 6: using the web interface 255 "below lower critical" state this state means a numeric sensor's reading is below the lower critical threshold as indicated below: reading "below lower warning" state this state means a numeric sensor's reading is below the lower warning threshold as indicated ...

  • Page 270

    Chapter 6: using the web interface 256 unmanaging environmental sensors or actuators when it is unnecessary to monitor a particular environmental factor, you can unmanage or release the corresponding environmental sensor so that the emx device stops retrieving the sensor's reading and/or state. This...

  • Page 271

    Chapter 6: using the web interface 257 disabling the automatic management function the factory default is to enable the automatic management feature for environmental sensors and actuators. Therefore, when the total number of managed sensors and actuators has not reached 32 yet, the emx automaticall...

  • Page 272

    Chapter 6: using the web interface 258 asset management configure the asset management settings only when an asset sensor is physically connected to the emx device. Note: to set up an asset management system, see connecting asset management sensors (on page 25). Configuring the asset sensor the emx ...

  • Page 273

    Chapter 6: using the web interface 259 bottom-up: the rack units are numbered in the descending order from the highest to the lowest rack unit. 9. In the numbering offset field, select the starting number. For example, if you select 3, the first rack unit is numbered 3, the second is numbered 4, the...

  • Page 274

    Chapter 6: using the web interface 260 12. Click ok. Setting asset sensor led colors each led on the asset sensor indicates the presence and absence of a connected asset tag by changing its color. By default the led color of the tag ports with tags connected is green, and the color of the tag ports ...

  • Page 275

    Chapter 6: using the web interface 261 note: you can also access this dialog by double-clicking the asset sensor shown on the dashboard page. 3. Click setup on the asset sensor page. The setup dialog for that asset sensor appears. 4. To change the led color denoting the presence of a tag, either cli...

  • Page 276

    Chapter 6: using the web interface 262 led mode: select on to have the led stay lit, off to have it stay off, "slow blinking" to have it blink slowly, or "fast blinking" to have it blink quickly. Led color: if you select on, "slow blinking" or "fast blinking" in the led mode field, select an led col...

  • Page 277

    Chapter 6: using the web interface 263 3. Double-click that rack unit or click the white arrow prior to the folder icon. The arrow then turns into a black, gradient arrow , and all tag ports of the blade extension strip appear below the folder. To collapse a blade extension strip: double-click the b...

  • Page 278

    Chapter 6: using the web interface 264 webcam management with a logitech ® webcam connected to the emx device, you can visually monitor the environment around the emx via snapshots or videos captured by the webcam. To view snapshots and videos, you need the permission of either "change webcam config...

  • Page 279

    Chapter 6: using the web interface 265 a. Video - the webcam is in video mode. Set the framerate (frames per second) rate. B. Snapshot - the webcam displays images from the webcam. Set the "time between snapshots" rate as measured in seconds. 7. Click ok. The image or video from the webcam is now av...

  • Page 280

    Chapter 6: using the web interface 266 3. By default, local, meaning the emx, is the designated default storage. 4. Select cifs/samba as the storage location. 5. Enter the server where to store the images. 6. If needed, enter the share drive/folder to store the images in. 7. Enter the username and p...

  • Page 281

    Chapter 6: using the web interface 267 viewing webcam snapshots or videos you can switch between snapshots or live videos being captured by a webcam. The snapshot or video is displayed either in the emx web interface or in a primary standalone live preview window that you open. You can open a maximu...

  • Page 282

    Chapter 6: using the web interface 268 to change any image settings, click setup . See configuring webcams (on page 264) or adjusting image properties (on page 266). To save the snapshot being displayed, click the "store snapshot to webcam storage" icon . See saving snapshots (on page 268). 3. To sw...

  • Page 283

    Chapter 6: using the web interface 269 3. Click on the snapshots icon in the navigation tree to verify that those snapshots are successfully saved and listed on the snapshots page. Tip: to store snapshots on a remote server rather than the emx, see configuring webcam storage (on page 265). Sending s...

  • Page 284

    Chapter 6: using the web interface 270 neither the primary standalone live preview window nor any remote session based on the same url remains open, but the idle timeout period has not expired yet since the last live preview window session was closed. For information on idle timeout, see enabling lo...

  • Page 285

    Chapter 6: using the web interface 271 snapshot: displays the image of the snapshot being selected. Details: shows the information which had been entered when the snapshot was saved, including resolution and location settings. Tip: to save more than 10 snapshots, save snapshots onto a remote server....

  • Page 286

    Chapter 6: using the web interface 272 managing the schroff lhx/shx heat exchanger the emx supports monitoring and administering the schroff ® lhx-20, lhx-40 and shx-30 heat exchanger if this device is connected to the emx. From the emx, you can do the following remotely: name a connected lhx heat e...

  • Page 287

    Chapter 6: using the web interface 273 enabling and disabling schroff lhx/shx heat exchanger support by default, schroff lhx/shx heat exchanger support is disabled. As such, support needs to be enabled before the device appears in the navigation tree or on the dashboard. Additionally, schroff lhx/sh...

  • Page 288

    Chapter 6: using the web interface 274 configuring the lhx/shx after enabling the lhx/shx support on the emx, the emx should automatically detect the connected lhx/shx device and display it under the auxiliary ports or the feature ports folder, depending on the port it is connected to. After this de...

  • Page 289

    Chapter 6: using the web interface 275 setting up an lhx/shx once a schroff lhx/shx heat exchanger is connected, you can set up the device by giving it a name, and configure its setpoint air outlet and default fan speed. To set up the lhx/shx: 1. Expand the auxiliary ports or feature ports folder as...

  • Page 290

    Chapter 6: using the web interface 276 7. Click ok. Configuring temperature and fan thresholds an lhx/shx heat exchanger is implemented with various sensors for detecting the air temperature, water temperature, and fan speed. You can set thresholds for these sensors so that the emx alerts you when a...

  • Page 291

    Chapter 6: using the web interface 277 4. Adjust the threshold and deassertion hysteresis settings. The upper critical and lower critical values are points at which the emx considers the operating environment critical and outside the range of the acceptable threshold. To enable any threshold, select...

  • Page 292

    Chapter 6: using the web interface 278 2. Locate the lhx/shx heat exchanger section where the lhx/shx summary is shown. Lhx/shx summary on the ports page: click the auxiliary ports folder in the emx explorer pane. - or - click the feature ports folder. The port page opens in the right pane, showing ...

  • Page 293

    Chapter 6: using the web interface 279 viewing details an lhx/shx heat exchanger page shows detailed information, including: device information and settings, such as the lhx/shx device name the air outlet temperature the default fan speed readings and states of all lhx/shx built-in sensors alerts an...

  • Page 294

    Chapter 6: using the web interface 280 2. Click the desired lhx/shx device. Its page opens in the right pane. Device states and icon variations the emx web interface changes icons to represent different statuses of the connected lhx/shx heat exchanger. Icons device status the heat exchanger is turne...

  • Page 295

    Chapter 6: using the web interface 281 to identify the cause of a critical state, refer to:  viewing the summary (on page 277)  alert states and lhx event log (on page 281) alert states and lhx event log remote alert acknowledgment is supported by the lhx-20 and lhx-40. The shx-30 does not support...

  • Page 296

    Chapter 6: using the web interface 282 operating hours operating hours are the accumulative time since the lhx/shx heat exchanger is first connected to the emx device and turned on. The emx web interface displays the operating hours both for the heat exchanger and its fans. Operating hour informatio...

  • Page 297

    Chapter 6: using the web interface 283 in the information section, click either switch off or switch on. 3. If you clicked switch off, a dialog appears, prompting you to confirm the operation. Click yes to turn it off or no to abort the operation. The heat exchanger's icon changes after being turned...

  • Page 298

    Chapter 6: using the web interface 284 requesting maximum cooling for an shx-30 the emx allows you to remotely activate the schroff shx-30's maximum cooling feature. The lhx-20 and lhx-40 do not support remote activation of maximum cooling. When you click request maximum cooling on the emx web inter...

  • Page 299

    Chapter 6: using the web interface 285 managing schneider electric powerlogic pm710 configuring the pm710 and configuring threshold settings all settings are configured on a per port basis. If you disconnect a pm710 from one emx port and connect it to another, you must reconfigure the settings. Howe...

  • Page 300

    Chapter 6: using the web interface 286 resetting the pm710 minimum and maximum values the pm710 saves readings when they reach their highest and lowest value. The highest value and lowest value are the minimum and maximum values, which can be reset as needed. Review your pm710 documentation for addi...

  • Page 301

    Chapter 6: using the web interface 287 bulk configuration the bulk configuration feature lets you save the settings of a configured emx device to your pc. You can use this configuration file to copy that configuration to other emx devices of the same model and firmware version. You must have the adm...

  • Page 302

    Chapter 6: using the web interface 288 saving the emx configuration a source device is an already configured emx device that is used to create a configuration file containing the settings that can be shared between emx devices. These settings include user and role configurations, event rules, securi...

  • Page 303

    Chapter 6: using the web interface 289 copying the emx configuration a target device is the emx device that loads another emx device's configuration file. Copying a source emx device's configuration to a target device adjusts the target emx device's settings to match those of the source emx device. ...

  • Page 304

    Chapter 6: using the web interface 290 backup and restore of emx device settings different from the bulk configuration file, the backup file contains device-specific data like network settings. To back up or restore emx device settings, you should perform the backup/restore feature. All emx informat...

  • Page 305

    Chapter 6: using the web interface 291 firmware upgrade you may upgrade your emx device to benefit from the latest enhancements, improvements and features. Firmware files are available on raritan website's support page ( http://www.Raritan.Com/support/ ). Updating the emx firmware you must be the sy...

  • Page 306

    Chapter 6: using the web interface 292 7. When the update is complete, a message appears, indicating the update is successful. 8. The emx resets, and the login page re-appears. You can now log in and resume your operation. Note 1: the other logged-in users are also logged out when the firmware updat...

  • Page 307

    Chapter 6: using the web interface 293 full disaster recovery if the firmware upgrade fails, causing the emx device to stop working, you can recover it by using a special utility rather than returning the device to raritan. Contact raritan technical support for the recovery utility, which works in w...

  • Page 308

    Chapter 6: using the web interface 294 3. In the number of requests field, type a number up to 20 or adjust the value by clicking either arrow. This number determines how many packets are sent for pinging the host. 4. Click run ping to start pinging the host. A dialog appears, displaying the ping re...

  • Page 309

    Chapter 6: using the web interface 295 you can download the diagnostic file from the emx device to a client machine. The file is compressed into a .Tgz file and should be sent to raritan technical support for interpretation. This feature is accessible only by users with administrative privileges or ...

  • Page 310

    Chapter 6: using the web interface 296 accessing the help the help menu provides: current firmware and software packages information a link to the emx help retrieving software packages information you can check the current firmware version and the information of all open source packages embedded in ...

  • Page 311

    Chapter 6: using the web interface 297 to collapse any expanded topic, click the black, gradient arrow prior to the topic, or double-click the expanded topic. The arrow then turns into a white arrow , and all sub-topics below that topic disappear. 5. To search for specific information, type the key ...

  • Page 312: Chapter 7

    298 this snmp section helps you set up the emx for use with an snmp manager. The emx can be configured to send traps or informs to an snmp manager, as well as receive get and set commands in order to retrieve status and configure some basic settings. In this chapter enabling snmp ......................

  • Page 313

    Chapter 7: using snmp 299 2. Select the "enable" checkbox in the "snmp v1 / v2c" field to enable communication with an snmp manager using snmp v1 or v2c protocol. Type the snmp read-only community string in the read community string field. Usually the string is "public." type the read/write communit...

  • Page 314

    Chapter 7: using snmp 300 5. Click ok. The user is now set up for encrypted snmp v3 communication. Configuring snmp notifications the emx automatically keeps an internal log of events that occur. See event rules and actions (on page 187). These events can also be used to send snmp v2c or v3 notifica...

  • Page 315

    Chapter 7: using snmp 301 snmpv2c notifications to configure the emx to send snmp notifications: 1. Choose device settings > network services > snmp. The snmp settings dialog appears. 2. On the notifications tab, select the enabled checkbox to enable the snmp notification feature..

  • Page 316

    Chapter 7: using snmp 302 3. From the notification type drop-down, select the type of snmp notification. 4. For snmp inform communications, leave the resend settings at their default or: a. In the timeout (sec) field, enter the interval of time, in seconds, after which a new inform communication is ...

  • Page 317

    Chapter 7: using snmp 303 snmpv3 notifications to configure the emx to send snmpv3 notifications: 1. Choose device settings > network services > snmp. The snmp settings dialog appears. 2. On the notifications tab, select the enabled checkbox to enable the snmp notification feature..

  • Page 318

    Chapter 7: using snmp 304 3. From the notification type drop-down, select the type of snmp notification. 4. For snmp traps, the engine id is prepopulated. 5. For snmp inform communications, leave the resend settings at their default or: a. In the timeout (sec) field, enter the interval of time, in s...

  • Page 319

    Chapter 7: using snmp 305 security level description "noauthnopriv" select this if no authorization or privacy protocols are needed. "authnopriv" select this if authorization is required but no privacy protocols are required. Select the authentication protocol - md5 or sha enter the authentication p...

  • Page 320

    Chapter 7: using snmp 306 the emx mib the snmp mib file is required for using your emx device with an snmp manager. An snmp mib file describes the snmp functions. Downloading snmp mib the snmp mib file for the emx can be easily downloaded from the web interface. There are two ways to download the sn...

  • Page 321

    Chapter 7: using snmp 307 layout opening the mib reveals the custom objects that describe the emx system. As standard, these objects are first presented at the beginning of the file, listed under their parent group. The objects then appear again individually, defined and described in detail. For exa...

  • Page 322

    Chapter 7: using snmp 308 a note about enabling thresholds when enabling previously disabled thresholds via snmp, make sure you set a correct value for all thresholds that are supposed to be enabled prior to actually enabling them. Otherwise, you may get an error message..

  • Page 323: Chapter 8

    309 this section explains how to use the command line interface (cli) to administer a emx device. In this chapter about the interface ................................................................................309 logging in to cli ...................................................................

  • Page 324

    Chapter 8: using the command line interface 310 logging in to cli logging in via hyperterminal over a local connection is a little different than logging in using ssh or telnet. If a security login agreement has been enabled, you must accept the agreement in order to complete the login. Users are au...

  • Page 325

    Chapter 8: using the command line interface 311 5. Type a password and press enter. The password is case sensitive. After properly entering the password, the # or > system prompt appears. See different cli modes and prompts (on page 313) in the user guide for more information. Tip: the "last login" ...

  • Page 326

    Chapter 8: using the command line interface 312 tip: the "last login" information, including the date and time, is also displayed if the same user profile was used to log in to this product's web interface or cli. 6. You are now logged in to the command line interface and can begin administering the...

  • Page 327

    Chapter 8: using the command line interface 313 different cli modes and prompts depending on the login name you use and the mode you enter, the system prompt in the cli varies. User mode: when you log in as a normal user, who may not have full permissions to configure the emx device, the > prompt ap...

  • Page 328

    Chapter 8: using the command line interface 314 help command the help (?) command shows a list of main cli commands available for the current mode. This is helpful when you are not familiar with cli commands. Help command under the administrator mode: # ? Help command under the configuration mode: c...

  • Page 329

    Chapter 8: using the command line interface 315 querying available parameters for a command if you are not sure what commands or parameters are available for a particular type of cli command or its syntax, you can have the cli show them by adding a space and the help command (?) to the end of that c...

  • Page 330

    Chapter 8: using the command line interface 316 network configuration this command shows all network configuration, such as the ip address, networking mode, and mac address. # show network ip configuration this command shows the ip-related configuration only, such as ipv4 and ipv6 configuration, add...

  • Page 331

    Chapter 8: using the command line interface 317 networking mode this command shows whether the current networking mode is wired or wireless. # show network mode note: if the emx is a slave device connected to the lan via the master emx device, the show network mode command displays wired(usb) instea...

  • Page 332

    Chapter 8: using the command line interface 318 option description https only displays the tcp port for the https service. Telnet only displays the settings of the telnet service. Ssh only displays the settings of the ssh service. Snmp only displays the snmp settings. Modbus only displays the settin...

  • Page 333

    Chapter 8: using the command line interface 319 default measurement units this command shows the default measurement units applied to the emx web and cli interfaces across all users, especially those users authenticated through remote authentication servers. # show user defaultpreferences note: if a...

  • Page 334

    Chapter 8: using the command line interface 320 environmental sensor information this command syntax shows the environmental sensor's information. # show externalsensors to show detailed information, add the parameter "details" to the end of the command. # show externalsensors details external senso...

  • Page 335

    Chapter 8: using the command line interface 321 * the environmental sensor number is the id number assigned to the sensor, which can be found on the peripheral devices page of the emx web interface. Displayed information: without the parameter "details," only the sensor id, sensor type and reading a...

  • Page 336

    Chapter 8: using the command line interface 322 environmental sensor package information different from the "show externalsensors" commands, which show the reading, status and configuration of an individual environmental sensor, the following command shows the information of all connected environmen...

  • Page 337

    Chapter 8: using the command line interface 323 actuator information this command syntax shows an actuator's information. # show actuators to show detailed information, add the parameter "details" to the end of the command. # show actuators details variables: is one of the options: all, or a number....

  • Page 338

    Chapter 8: using the command line interface 324 environmental sensor threshold information this command syntax shows the specified environmental sensor's threshold-related information. # show sensor externalsensor to show detailed information, add the parameter "details" to the end of the command. #...

  • Page 339

    Chapter 8: using the command line interface 325 variables: is the environmental sensor number. The environmental sensor number is the id number assigned to the sensor, which can be found on the peripheral devices page of the emx web interface. Displayed information: without the parameter "details," ...

  • Page 340

    Chapter 8: using the command line interface 326 displayed information: without the parameter "details," only the default upper and lower thresholds, deassertion hysteresis and assertion timeout settings of the specified sensor type are displayed. With the parameter "details," the threshold range is ...

  • Page 341

    Chapter 8: using the command line interface 327 existing user profiles this command shows the data of one or all existing user profiles. # show user to show detailed information, add the parameter "details" to the end of the command. # show user details variables: is the name of the user whose profi...

  • Page 342

    Chapter 8: using the command line interface 328 existing roles this command shows the data of one or all existing roles. # show roles variables: is the name of the role whose permissions you want to query. The variable can be one of the following options: option description all this option shows all...

  • Page 343

    Chapter 8: using the command line interface 329 asset sensor settings this command shows the asset sensor settings, such as the total number of rack units (tag ports), asset sensor state, numbering mode, orientation, available tags and led color settings. # show assetstrip variables: is one of the o...

  • Page 344

    Chapter 8: using the command line interface 330 option description a specific number displays the settings of the specified rack unit on the specified asset sensor. Use the index number to specify the rack unit. The index number of each rack unit is available on the asset strip page of the web inter...

  • Page 345

    Chapter 8: using the command line interface 331 event log the command used to show the event log begins with show eventlog. You can add either the limit or class parameters or both to show specific events. Show the last 30 entries: # show eventlog show a specific number of last entries in the event ...

  • Page 346

    Chapter 8: using the command line interface 332 event type description assetmanagement raritan asset management events, such as asset tag connections or disconnections. Lhx schroff ® lhx/shx heat exchanger events. Modem modem-related events. Timerevent scheduled action events. Webcam events for webc...

  • Page 347

    Chapter 8: using the command line interface 333 server reachability information for a specific server to show the server reachability information for a certain it device only, use the following command. # show serverreachability server to show detailed information, add the parameter "details" to the...

  • Page 348

    Chapter 8: using the command line interface 334 command history this command syntax shows the command history for current connection session. # show history displayed information: a list of commands that were previously entered in the current session is displayed. History buffer length this command ...

  • Page 349

    Chapter 8: using the command line interface 335 option description a specific integer number displays the specified number of last entries in the reliability error log. Examples this section provides examples of the show command. Example 1 - basic security information the diagram shows the output of...

  • Page 350

    Chapter 8: using the command line interface 336 example 2 - in-depth security information more information is displayed when typing the show security details command. Clearing information you can use the clear commands to remove unnecessary data from the emx. After typing a "clear" command, press en...

  • Page 351

    Chapter 8: using the command line interface 337 clearing event log this command removes all data from the event log. # clear eventlog -- or -- # clear eventlog /y if you entered the command without "/y," a message appears, prompting you to confirm the operation. Type y to clear the event log or n to...

  • Page 352

    Chapter 8: using the command line interface 338 entering configuration mode configuration commands function in configuration mode only. To enter configuration mode: 1. Ensure you have entered administrator mode and the # prompt is displayed. Note: if you enter configuration mode from user mode, you ...

  • Page 353

    Chapter 8: using the command line interface 339 device configuration commands a device configuration command begins with emd. You can use the device configuration commands to change the settings that apply to the whole emx device. Configuration commands are case sensitive so ensure you capitalize th...

  • Page 354

    Chapter 8: using the command line interface 340 setting data logging measurements per entry this command defines the number of measurements accumulated per log entry. Config:# emd measurementsperlogentry variables: is an integer between 1 and 600. The default is 60 samples per log entry. For more in...

  • Page 355

    Chapter 8: using the command line interface 341 option description freeform any alphanumeric string can be used for specifying the z coordinate. Note: after determining the format for the z coordinate, you can set a value for it. See setting the z coordinate (on page 410). Enabling or disabling peri...

  • Page 356

    Chapter 8: using the command line interface 342 setting the networking mode if your emx device is implemented with both wired and wireless networking mechanisms, you must determine which mechanism is enabled for network connectivity before further configuring networking parameters. This command enab...

  • Page 357

    Chapter 8: using the command line interface 343 mode description v6only enables ipv6 only on all interfaces. Both enables both ipv4 and ipv6 on all interfaces. Selecting ipv4 or ipv6 addresses this command determines which ip address is used when the dns server returns both of ipv4 and ipv6 addresse...

  • Page 358

    Chapter 8: using the command line interface 344 setting the ssid this command specifies the ssid string. Config:# network wireless ssid variables: is the name of the wireless access point, which consists of: - up to 32 ascii characters - no spaces - ascii codes 0x20 ~ 0x7e setting the authentication...

  • Page 359

    Chapter 8: using the command line interface 345 setting eap parameters when the wireless authentication method is set to eap, you must configure eap authentication parameters, including outer authentication, inner authentication, eap identity, password, and ca certificate. Determine the outer authen...

  • Page 360

    Chapter 8: using the command line interface 346 config:# network wireless allowconnectionwithincorrectclock variables: the value of is peap because emx only supports protected extensible authentication protocol (peap) as the outer authentication. The value of is mschapv2 because emx only supports mi...

  • Page 361

    Chapter 8: using the command line interface 347 eap ca certificate example this section provides a ca certificate example only. Your ca certificate contents should be different from the contents displayed in this example. To provide a ca certificate: 1. Make sure you have entered the configuration m...

  • Page 362

    Chapter 8: using the command line interface 348 miicjtccafigawibagiemaygrzalbgkqhkig9w0baqqwrtelmak ga1uebhmcvvmxnja0bgnvbaotlu5hdglvbmfsieflcm9uyxv0aw nzigfuzcbtcgfjzsbbzg1pbmlzdhjhdglvbjamfxe5nja1mjgxm zq5mdurmdgwmbcrotgwnti4mtm0ota1kza4mdawzzelmakga1ue bhmcvvmxnja0bgnvbaotlu5hdglvbmfsieflcm9uyxv0...

  • Page 363

    Chapter 8: using the command line interface 349 setting the ipv4 configuration mode this command determines the ip configuration mode. Config:# network ipv4 ipconfigurationmode variables: is one of the modes: dhcp or static. Mode description dhcp the ipv4 configuration mode is set to dhcp. Static th...

  • Page 364

    Chapter 8: using the command line interface 350 setting the ipv4 subnet mask after selecting the static ip configuration mode, you can use this command to define the subnet mask. Config:# network ipv4 subnetmask variables: is the subnet mask address. The value ranges from 0.0.0.0 to 255.255.255.255....

  • Page 365

    Chapter 8: using the command line interface 351 setting the ipv4 secondary dns server after selecting the static ip configuration mode, you can use this command to specify the secondary dns server. If you have selected the dhcp configuration mode, you still can manually specify dns servers with this...

  • Page 366

    Chapter 8: using the command line interface 352 setting ipv4 static routes if the ipv4 network mode is set to static ip and your local network contains two subnets, you can configure static routes to enable or disable communications between the emx and devices in the other subnet. These commands are...

  • Page 367

    Chapter 8: using the command line interface 353 setting the ipv6 configuration mode this command determines the ip configuration mode. Config:# network ipv6 ipconfigurationmode variables: is one of the modes: automatic or static. Mode description automatic the ipv6 configuration mode is set to autom...

  • Page 368

    Chapter 8: using the command line interface 354 setting the ipv6 gateway after selecting the static ip configuration mode, you can use this command to specify the gateway. Config:# network ipv6 gateway variables: is the ip address of the gateway. This value uses the ipv6 address format. Setting the ...

  • Page 369

    Chapter 8: using the command line interface 355 overriding the ipv6 dhcp-assigned dns server after specifying the primary/secondary dns server, you can use this command to override the dhcp-assigned dns server with the one you specified. Config:# network ipv6 overridedns variables: is one of the opt...

  • Page 370

    Chapter 8: using the command line interface 356 config:# network ipv6 staticroutes modify variables: is the ip address and prefix length of the subnet where the emx belongs. The format is ip address/prefix length. Is the ip address of the next hop router. Is the id number of the route setting which ...

  • Page 371

    Chapter 8: using the command line interface 357 changing the lan duplex mode this command determines the lan interface duplex mode. Config:# network interface laninterfaceduplexmode variables: is one of the modes: auto, half or full. Option description auto the emx selects the optimum transmission m...

  • Page 372

    Chapter 8: using the command line interface 358 setting the http port the commands used to configure the http port settings begin with network services http . Change the http port: config:# network services http port enable or disable the http port: config:# network services http enabled variables: ...

  • Page 373

    Chapter 8: using the command line interface 359 setting the https port the commands used to configure the https port settings begin with network services https . Change the https port: config:# network services https port enable or disable the https access: config:# network services https enabled va...

  • Page 374

    Chapter 8: using the command line interface 360 changing the telnet port this command changes the telnet port. Config:# network services telnet port variables: is a tcp port number between 1 and 65535. The default telnet port is 23. Changing the ssh configuration you can enable or disable the ssh se...

  • Page 375

    Chapter 8: using the command line interface 361 determining the ssh authentication method this command syntax determines the ssh authentication method. Config:# network services ssh authentication variables: is one of the options: passwordonly, publickeyonly or passwordorpublickey . Option descripti...

  • Page 376

    Chapter 8: using the command line interface 362 enabling or disabling snmp v3 this command enables or disables the snmp v3 protocol. Config:# network services snmp v3 variables: is one of the options: enable or disable. Option description enable the snmp v3 protocol is enabled. Disable the snmp v3 p...

  • Page 377

    Chapter 8: using the command line interface 363 setting the sysname value this command sets the snmp mib-ii sysname value. Config:# network services snmp sysname variables: is a string comprising 0 to 255 alphanumeric characters. Setting the syslocation value this command sets the snmp mib-ii sysloc...

  • Page 378

    Chapter 8: using the command line interface 364 enabling or disabling the read-only mode this command enables or disables the read-only mode for the modbus agent. Config:# network services modbus readonly variables: is one of the options: true or false. Option description true the read-only mode is ...

  • Page 379

    Chapter 8: using the command line interface 365 examples this section illustrates several network configuration examples. Example 1 - networking mode the following command enables the wired networking mode. Config:# network mode wired example 2 - enabling both ip protocols the following command dete...

  • Page 380

    Chapter 8: using the command line interface 366 mode description ntp the date and time settings synchronize with a specified ntp server. Setting ntp parameters a time configuration command that is used to set the ntp parameters begins with time ntp. Specifying the primary ntp server this command spe...

  • Page 381

    Chapter 8: using the command line interface 367 overriding dhcp-assigned ntp servers this command determines whether the customized ntp server settings override the dhcp-specified ntp servers. Config:# time ntp overridedhcpprovidedserver variables: is one of these options: true or false. Mode descri...

  • Page 382

    Chapter 8: using the command line interface 368 customizing the date and time if intending to manually configure the date and time, use the following cli commands to specify them. Note: you shall set the time configuration method to "manual" prior to customizing the date and time. See determining th...

  • Page 383

    Chapter 8: using the command line interface 369 examples this section illustrates several time configuration examples. Example 1 - time setup method the following command sets the date and time settings by using the ntp servers. Config:# time method ntp example 2 - primary ntp server the following c...

  • Page 384

    Chapter 8: using the command line interface 370 security configuration commands a security configuration command begins with security. Firewall control you can manage firewall control features through the cli. The firewall control lets you set up rules that permit or disallow access to the emx devic...

  • Page 385

    Chapter 8: using the command line interface 371 config:# security ipaccesscontrol ipv6 defaultpolicyin determine the default ipv6 firewall control policy for outbound traffic: config:# security ipaccesscontrol ipv6 defaultpolicyout variables: is one of the options: true or false. Option description ...

  • Page 386

    Chapter 8: using the command line interface 372 config:# security ipaccesscontrol ipv4 rule add add a new ipv4 rule by inserting it above or below a specific rule: config:# security ipaccesscontrol ipv4 rule add -- or -- config:# security ipaccesscontrol ipv4 rule add ipv6 commands add a new rule to...

  • Page 387

    Chapter 8: using the command line interface 373 is the combination of the ip address and subnet mask values (or prefix length), which are separated with a slash. For example, an ipv4 combination looks like this: 192.168.94.222/24. Is one of the options: accept, drop or reject. Policy description acc...

  • Page 388

    Chapter 8: using the command line interface 374 config:# security ipaccesscontrol ipv4 rule modify ipmask policy ipv6 commands modify an ipv6 rule's ip address and/or prefix length: config:# security ipaccesscontrol ipv6 rule modify ipmask modify an ipv6 rule's policy: config:# security ipaccesscont...

  • Page 389

    Chapter 8: using the command line interface 375 option description reject discards traffic from/to the specified ip address(es), and an icmp message is sent to the source or destination host for failure notification. Deleting a firewall rule the following commands remove a specific ipv4 or ipv6 rule...

  • Page 390

    Chapter 8: using the command line interface 376 enabling or disabling the restricted service agreement this command activates or deactivates the restricted service agreement. Config:# security restrictedserviceagreement enabled variables: is one of the options: true or false. Option description true...

  • Page 391

    Chapter 8: using the command line interface 377 if the content is successfully entered, the cli displays this message "successfully entered restricted service agreement" followed by the total number of entered characters in parentheses. Note: the new content of restricted service agreement is saved ...

  • Page 392

    Chapter 8: using the command line interface 378 password aging this command enables or disables the password aging feature, which controls whether the password should be changed at a regular interval: config:# security loginlimits passwordaging variables: is one of the options: enable or disable. Op...

  • Page 393

    Chapter 8: using the command line interface 379 user blocking there are different commands for changing different user blocking parameters. These commands begin with security userblocking. You can combine multiple commands to modify the user blocking parameters at a time. See multi-command syntax (o...

  • Page 394

    Chapter 8: using the command line interface 380 enabling or disabling strong passwords this command enables or disables the strong password feature. Config:# security strongpasswords enabled variables: is one of the options: true or false. Option description true enables the strong password feature....

  • Page 395

    Chapter 8: using the command line interface 381 config:# security strongpasswords enforceatleastonelowercasecharacter variables: is one of the options: enable or disable. Option description enable at least one lowercase character is required. Disable no lowercase character is required. Uppercase cha...

  • Page 396

    Chapter 8: using the command line interface 382 special character requirement this command determines whether a strong password includes at least a special character. Config:# security strongpasswords enforceatleastonespecialcharacter variables: is one of the options: enable or disable. Option descr...

  • Page 397

    Chapter 8: using the command line interface 383 config:# security rolebasedaccesscontrol ipv4 enabled determine the ipv4 role-based access control policy: config:# security rolebasedaccesscontrol ipv4 defaultpolicy ipv6 commands enable or disable the ipv6 role-based access control feature: config:# ...

  • Page 398

    Chapter 8: using the command line interface 384 managing role-based access control rules you can add, delete or modify role-based access control rules. An ipv4 role-based access control command for managing rules begins with security rolebasedaccesscontrol ipv4 rule. An ipv6 role-based access contro...

  • Page 399

    Chapter 8: using the command line interface 385 config:# security rolebasedaccesscontrol ipv6 rule add variables: is the starting ip address. Is the ending ip address. Is the role for which you want to create an access control rule. Is one of the options: allow or deny. Policy description allow acce...

  • Page 400

    Chapter 8: using the command line interface 386 config:# security rolebasedaccesscontrol ipv4 rule modify role modify an ipv4 rule's policy: config:# security rolebasedaccesscontrol ipv4 rule modify policy modify all contents of an existing ipv4 rule: config:# security rolebasedaccesscontrol ipv4 ru...

  • Page 401

    Chapter 8: using the command line interface 387 config:# security rolebasedaccesscontrol ipv6 rule modify startipaddress endipaddress role policy variables: is the number of the existing rule that you want to modify. Is the starting ip address. Is the ending ip address. Is one of the existing roles....

  • Page 402

    Chapter 8: using the command line interface 388 config:# security ipaccesscontrol ipv4 enabled true defaultpolicyin accept defaultpolicyout accept results: the ipv4 access control feature is enabled. The default policy for inbound traffic is set to "accept." the default policy for outbound traffic i...

  • Page 403

    Chapter 8: using the command line interface 389 example 4 - adding an ipv4 role-based access control rule the following command creates a newipv4 role-based access control rule and specifies its location in the list. Config:# security rolebasedaccesscontrol ipv4 rule add 192.168.78.50 192.168.90.100...

  • Page 404

    Chapter 8: using the command line interface 390 is a role or a list of comma-separated roles assigned to the specified user profile. Modifying a user profile a user profile contains various parameters that you can modify. Tip: you can combine all commands to modify the parameters of a specific user ...

  • Page 405

    Chapter 8: using the command line interface 391 modifying a user's personal data you can change a user's personal data, including the user's full name, telephone number, and email address. Various commands can be combined to modify the parameters of a specific user profile at a time. See multi-comma...

  • Page 406

    Chapter 8: using the command line interface 392 enabling or disabling a user profile this command enables or disables a user profile. A user can log in to the emx device only after that user's user profile is enabled. Config:# user modify enabled variables: is the name of the user whose settings you...

  • Page 407

    Chapter 8: using the command line interface 393 modifying snmpv3 settings there are different commands to modify the snmpv3 parameters of a specific user profile. You can combine all of the following commands to modify the snmpv3 parameters at a time. See multi-command syntax (on page 431). Enable o...

  • Page 408

    Chapter 8: using the command line interface 394 config:# user modify userpasswordasauthenticationpassphrase variables: is the name of the user whose settings you want to change. Is one of the options: true or false. Option description true authentication passphrase is identical to the password. Fals...

  • Page 409

    Chapter 8: using the command line interface 395 determine the privacy passphrase: config:# user modify privacypassphrase variables: is the name of the user whose settings you want to change. Is a string used as a privacy passphrase, comprising 8 to 32 ascii printable characters. Determine the authen...

  • Page 410

    Chapter 8: using the command line interface 396 changing the role(s) this command changes the role(s) of a specific user. Config:# user modify roles variables: is the name of the user whose settings you want to change. Is a role or a list of comma-separated roles assigned to the specified user profi...

  • Page 411

    Chapter 8: using the command line interface 397 set the preferred length unit: config:# user modify preferredlengthunit variables: is the name of the user whose settings you want to change. Is one of the options: meter or feet. Option description meter this option displays the length or height in me...

  • Page 412

    Chapter 8: using the command line interface 398 d. Press enter. To remove an existing ssh public key: 1. Type the same command as shown above. 2. When the system prompts you to input the contents, press enter without typing or pasting anything. Example the following procedure illustrates how to chan...

  • Page 413

    Chapter 8: using the command line interface 399 2. Type the following command and press enter. Config:# password 3. Type the existing password and press enter when the following prompt appears. Current password: 4. Type the new password and press enter when the following prompt appears. Enter new pa...

  • Page 414

    Chapter 8: using the command line interface 400 config:# user defaultpreferences preferredlengthunit variables: is one of the options: meter or feet. Option description meter this option displays the length or height in meters. Feet this option displays the length or height in feet. Set the default ...

  • Page 415

    Chapter 8: using the command line interface 401 example 1 - creating a user profile the following command creates a new user profile and sets two parameters for the new user. Config:# user create may enable admin results: a new user profile "may" is created. The new user profile is enabled. The admi...

  • Page 416

    Chapter 8: using the command line interface 402 config:# user defaultpreferences preferredtemperatureunit f preferredlengthunit feet preferredpressureunit psi results: the default temperature unit is set to fahrenheit. The default length unit is set to feet. The default pressure unit is set to psi. ...

  • Page 417

    Chapter 8: using the command line interface 403 config:# role create :,...; :,...; :,...; ... Variables: is a string comprising up to 32 ascii printable characters. , , and the like are names of the privileges assigned to the role. Separate each privilege with a semi-colon. See all privileges (on pa...

  • Page 418

    Chapter 8: using the command line interface 404 privilege description changeusersettings change local user management changewebcamsettings change webcam configuration clearlog clear local event log firmwareupdate firmware update performreset reset (warm start) switchactuator** switch actuator viewev...

  • Page 419

    Chapter 8: using the command line interface 405 modifying a role you can modify diverse parameters of an existing role, including its privileges. Modify a role's description: config:# role modify description "" variables: is a string comprising up to 32 ascii printable characters. Is a description c...

  • Page 420

    Chapter 8: using the command line interface 406 config:# role modify addprivileges :,...; :,...; :,...; ... Variables: is a string comprising up to 32 ascii printable characters. , , and the like are names of the privileges assigned to the role. Separate each privilege with a semi-colon. See all pri...

  • Page 421

    Chapter 8: using the command line interface 407 deleting a role this command deletes an existing role. Config:# role delete example - creating a role the following command creates a new role and assigns privileges to the role. Config:# role create tester firmwareupdate;vieweventsetup results: a new ...

  • Page 422

    Chapter 8: using the command line interface 408 changing the sensor name this command names an environmental sensor. Config:# externalsensor name "" variables: is the id number of the environmental sensor that you want to configure. The id number is available in the emx web interface or using the co...

  • Page 423

    Chapter 8: using the command line interface 409 type description vibration the connected detector/switch is for detection of the vibration. Setting the x coordinate this command specifies the x coordinate of an environmental sensor. Config:# externalsensor xlabel "" variables: is the id number of th...

  • Page 424

    Chapter 8: using the command line interface 410 setting the z coordinate this command specifies the z coordinate of an environmental sensor. Config:# externalsensor zlabel "" variables: is the id number of the environmental sensor that you want to configure. The id number is available in the emx web...

  • Page 425

    Chapter 8: using the command line interface 411 using default thresholds this command determines whether default thresholds, including the deassertion hysteresis and assertion timeout, are applied to a specific environmental sensor. Config:# externalsensor usedefaultthresholds variables: is the id n...

  • Page 426

    Chapter 8: using the command line interface 412 example 1 - environmental sensor naming the following command assigns the name "cabinet humidity" to the environmental sensor with the id number 4. Config:# externalsensor 4 name "cabinet humidity" example 2 - sensor threshold selection the following c...

  • Page 427

    Chapter 8: using the command line interface 413 config:# defaultthresholds lowerwarning set the default deassertion hysteresis for a specific sensor type: config:# defaultthresholds hysteresis set the default assertion timeout for a specific sensor type: config:# defaultthresholds assertiontimeout v...

  • Page 428

    Chapter 8: using the command line interface 414 example - default upper thresholds for temperature it is assumed that your preferred measurement unit for temperature is set to degrees celsius. Then the following command sets the default upper warning threshold to 20 and upper critical threshold to 2...

  • Page 429

    Chapter 8: using the command line interface 415 config:# sensor externalsensor lowerwarning set the deassertion hysteresis for an environmental sensor: config:# sensor externalsensor hysteresis set the assertion timeout for an environmental sensor: config:# sensor externalsensor assertiontimeout var...

  • Page 430

    Chapter 8: using the command line interface 416 example the following command sets the upper critical threshold of the environmental "temperature" sensor with the id number 2 to 40 degrees celsius. It also enables the upper critical threshold if this threshold has not been enabled yet. Config:# sens...

  • Page 431

    Chapter 8: using the command line interface 417 actuator configuration commands an actuator configuration command begins with actuator. You can configure the name and location parameters of an individual actuator. You can configure various parameters for one actuator at a time. See multi-command syn...

  • Page 432

    Chapter 8: using the command line interface 418 note: to specify the z coordinate using the rack units, see setting the z coordinate format for environmental sensors (on page 340). Is a sentence or paragraph comprising up to 64 ascii printable characters, and it must be enclosed in quotes. Example -...

  • Page 433

    Chapter 8: using the command line interface 419 is the number of successful pings for declaring the monitored device "reachable." valid range is 0 to 200. Is the number of consecutive unsuccessful pings for declaring the monitored device "unreachable." valid range is 1 to 100. Is the wait time to se...

  • Page 434

    Chapter 8: using the command line interface 420 config:# serverreachability modify ipaddress enable or disable the ping monitoring feature for the device: config:# serverreachability modify pingmonitoringenabled modify the number of successful pings for declaring "reachable": config:# serverreachabi...

  • Page 435

    Chapter 8: using the command line interface 421 config:# serverreachability modify numberoffailurestodisable variables: is a number representing the sequence of the it device in the server monitoring list. Is the ip address or host name of the it device whose settings you want to modify. Is one of t...

  • Page 436

    Chapter 8: using the command line interface 422 usb-cascading configuration commands a usb-cascading configuration command begins with cascading. You can set the cascading mode on the master device. Note: you cannot change the cascading mode on slave devices. Configuring the cascading mode this comm...

  • Page 437

    Chapter 8: using the command line interface 423 naming an asset sensor this command syntax names or changes the name of an asset sensor connected to the emx device. Config:# assetstrip name "" variables: is the number of the feature port where the selected asset sensor is physically connected. For t...

  • Page 438

    Chapter 8: using the command line interface 424 specifying the rack unit numbering mode this command syntax specifies the numbering mode of rack units on the asset sensors connected to the emx device. The numbering mode changes the rack unit numbers. Config:# assetstrip rackunitnumberingmode variabl...

  • Page 439

    Chapter 8: using the command line interface 425 specifying the asset sensor orientation this command syntax specifies the orientation of the asset sensors connected to the emx device. Usually you do not need to perform this command unless your asset sensors do not come with the tilt sensor, causing ...

  • Page 440

    Chapter 8: using the command line interface 426 setting led colors for disconnected tags this command syntax sets the led color for all rack units on the connected asset sensor(s) to indicate the absence of a connected asset tag. Config:# assetstrip ledcolorfordisconnectedtags variables: is the hexa...

  • Page 441

    Chapter 8: using the command line interface 427 setting the led operation mode this command syntax determines whether a specific rack unit on the specified asset sensor follows the global led color settings. Config:# rackunit ledoperationmode variables: is the number of the feature port where the se...

  • Page 442

    Chapter 8: using the command line interface 428 setting an led color for a rack unit this command syntax sets the led color for a specific rack unit on the specified asset sensor. You need to set a rack unit's led color only when the led operation mode of this rack unit has been set to "manual." con...

  • Page 443

    Chapter 8: using the command line interface 429 mode description blinkfast this mode has the led blink quickly. Examples this section illustrates several asset management examples. Example 1 - asset sensor led colors for disconnected tags this command syntax sets the led color for all rack units on ...

  • Page 444

    Chapter 8: using the command line interface 430 setting the baud rates the following commands set the baud rate (bps) of the serial port labeled console / modem on the emx device. Change the baud rate before connecting it to the desired device, such as a computer, a raritan's p2cim-ser, or a modem, ...

  • Page 445

    Chapter 8: using the command line interface 431 option description forcegsmmodem the port enters the gsm modem state. Example the following command sets the console baud rate of the emx device's serial port to 9600 bps. Config:# serial consolebaudrate 9600 setting the history buffer length this comm...

  • Page 446

    Chapter 8: using the command line interface 432 config:# network ipv4 ipaddress 192.168.84.225 subnetmask 255.255.255.0 gateway 192.168.84.0 results: the ip address is set to 192.168.84.225. The subnet mask is set to 255.255.255.0. The gateway is set to 192.168.84.0. Example 2 - combination of ssid ...

  • Page 447

    Chapter 8: using the command line interface 433 switching on an actuator this command syntax turns on one actuator. # control actuator on to quicken the operation, you can add the parameter "/y" to the end of the command, which confirms the operation. # control actuator on /y variables: is an actuat...

  • Page 448

    Chapter 8: using the command line interface 434 if you entered the command without "/y", a message appears, prompting you to confirm the operation. Then: type y to confirm the operation, or type n to abort the operation example - turning on a specific actuator the following command turns on the actu...

  • Page 449

    Chapter 8: using the command line interface 435 restarting the device this command restarts the emx device. It is not a factory default reset. To restart the emx device: 1. Ensure you have entered administrator mode and the # prompt is displayed. 2. Type either of the following commands to restart t...

  • Page 450

    Chapter 8: using the command line interface 436 entering diagnostic mode diagnostic commands function in the diagnostic mode only. To enter the diagnostic mode: 1. Enter either of the following modes: administrator mode: the # prompt is displayed. User mode: the > prompt is displayed. 2. Type diag a...

  • Page 451

    Chapter 8: using the command line interface 437 showing network connections this command syntax displays network connections and/or status of ports. Diag> netstat variables: is one of the options: ports or connections. Option description ports shows tcp/udp ports. Connections shows network connectio...

  • Page 452

    Chapter 8: using the command line interface 438 options description timeout determines the waiting period before timeout. Is an integer number in seconds ranging from 1 to 600. The command looks like the following when it includes all options: diag> ping count size timeout tracing the route this com...

  • Page 453

    Chapter 8: using the command line interface 439 automatically completing a command a cli command always consists of several words. You can easily enter a command by typing first word(s) or letter(s) and then pressing tab or ctrl+i instead of typing the whole command word by word. To have a command c...

  • Page 454: Appendix A  Specifications

    440 in this chapter maximum ambient operating temperature ..........................................440 emx2-111 feature rj-45 port pinouts.................................................440 emx2-888 feature rj-45 port pinouts.................................................441 sensor rj-12 port pi...

  • Page 455

    Appendix a: specifications 441 emx2-888 feature rj-45 port pinouts rj-45 pin/signal definition pin no. Signal direction description 1 dtr output reserved 2 gnd ― signal ground 3 +5v ― fuse protected warning: pin 3 is only intended for use with raritan devices. 4 txd output transmit data (data out) 5...

  • Page 456

    Appendix a: specifications 442 rs-232 pin/signal definition pin no. Signal direction description 1 dcd input data 2 rxd input receive data (data in) 3 txd output transmit data 4 dtr output data terminal ready 5 gnd ― signal ground 6 dsr input data set ready 7 rts output request to send 8 cts input c...

  • Page 457: With A Usb Drive

    443 you can accomplish part or all of the following tasks simultaneously by plugging a usb flash drive which contains one or several special configuration files into the emx. Configuration changes firmware upgrade downloading diagnostic data tip: you can also accomplish the same tasks via the tftp s...

  • Page 458

    Appendix b: configuration or firmware upgrade with a usb drive 444 tip: you can remove the usb drive and plug it into another emx for performing the same task(s) once the happy smiley or the firmware upgrade message displays. If nothing is shown on the display and no task is performed after plugging...

  • Page 459

    Appendix b: configuration or firmware upgrade with a usb drive 445 raritan provides a mass deployment utility, which helps you to quickly generate all configuration files for your emx. See creating configuration files via mass deployment utility (on page 452)..

  • Page 460

    Appendix b: configuration or firmware upgrade with a usb drive 446 fwupdate.Cfg the configuration file, fwupdate.Cfg, is an ascii text file containing key-value pairs, one per line. Each value in the file must be separated by a single = character, without any surrounding spaces. Keys are not case se...

  • Page 461

    Appendix b: configuration or firmware upgrade with a usb drive 447 if this option is set to true, the firmware upgrade is always performed even though your emx is running the same firmware version as the specified firmware file. This option cannot break other constraints like the minimum downgrade v...

  • Page 462

    Appendix b: configuration or firmware upgrade with a usb drive 448 the emx utters a short beep when writing the diagnostic data to the usb drive. Factory_reset supported as of release 3.0.0. If this option is set to true, the emx will be reset to factory defaults. If the device configuration will be...

  • Page 463

    Appendix b: configuration or firmware upgrade with a usb drive 449 config.Txt to perform device configuration using a usb drive, you must: copy the device configuration file "config.Txt" to the root directory of the usb drive. Reference the "config.Txt" file in the config option of the "fwupdate.Cfg...

  • Page 464

    Appendix b: configuration or firmware upgrade with a usb drive 450 special configuration keys: there are 3 special configuration keys that are prefixed with magic:. A special key that sets a user account's password without knowing the firmware's internal encryption/hashing algorithms is implemented ...

  • Page 465

    Appendix b: configuration or firmware upgrade with a usb drive 451 devices.Csv if there are device-specific settings to configure, you must create a device list configuration file - devices.Csv, to store unique data of each emx. This file must be: an excel file in the csv format. Copied to the root ...

  • Page 466

    Appendix b: configuration or firmware upgrade with a usb drive 452 creating configuration files via mass deployment utility the mass deployment utility is an excel file that lets you fill in basic information required for the three configuration files, such as the admin account and password. After e...

  • Page 467

    Appendix b: configuration or firmware upgrade with a usb drive 453 7. Verify that at least 3 configuration files are created - fwupdate.Cfg, config.Txt and devices.Csv. You are ready to configure or upgrade any emx with these files. See configuration or firmware upgrade with a usb drive (on page 443...

  • Page 468: Upgrade Via Dhcp/tftp

    454 if a tftp server is available, you can use it and appropriate configuration files to perform any or all of the following tasks for a large number of emx devices in the same network. Initial deployment configuration changes firmware upgrade downloading diagnostic data this feature is drastically ...

  • Page 469

    Appendix c: bulk configuration or firmware upgrade via dhcp/tftp 455 config.Txt devices.Csv note: supported syntax of "fwupdate.Cfg" and "config.Txt" may vary based on different firmware versions. If you have existing configuration files, it is suggested to double check with raritan technical suppor...

  • Page 470

    Appendix c: bulk configuration or firmware upgrade via dhcp/tftp 456 all required configuration files are available in the tftp root directory. See bulk configuration/upgrade procedure (on page 454). If you are going to upload any emx diagnostic file or create a log file in the tftp server, the firs...

  • Page 471

    Appendix c: bulk configuration or firmware upgrade via dhcp/tftp 457 the vendor class is named "raritan pdu" in this illustration. 2. Define one dhcp standard option - vendor class identifier. A. Right-click the ipv4 node in dhcp to select set predefined options..

  • Page 472

    Appendix c: bulk configuration or firmware upgrade via dhcp/tftp 458 b. Select dhcp standard options in the "option class" field, and vendor class identifier in the "option name" field. Leave the string field blank. 3. Add three options to the new vendor class "raritan pdu" in the same dialog..

  • Page 473

    Appendix c: bulk configuration or firmware upgrade via dhcp/tftp 459 a. Select raritan pdu in the "option class" field. B. Click add to add the first option. Type "pdu-tftp-server" in the name field, select ip address as the data type, and type 1 in the code field..

  • Page 474

    Appendix c: bulk configuration or firmware upgrade via dhcp/tftp 460 c. Click add to add the second option. Type "pdu-update-control-file" in the name field, select string as the data type, and type 2 in the code field. D. Click add to add the third one. Type "pdu-update-magic" in the name field, se...

  • Page 475

    Appendix c: bulk configuration or firmware upgrade via dhcp/tftp 461 the policy is named "pdu" in this illustration. C. Click add to add a new condition..

  • Page 476

    Appendix c: bulk configuration or firmware upgrade via dhcp/tftp 462 d. Select the vendor class "raritan pdu" in the value field, click add and then ok. E. Click next..

  • Page 477

    Appendix c: bulk configuration or firmware upgrade via dhcp/tftp 463 f. Select dhcp standard options in the "vendor class" field, select "060 vendor class identifier" from the available options list, and type "raritan pdu 1.0" in the "string value" field..

  • Page 478

    Appendix c: bulk configuration or firmware upgrade via dhcp/tftp 464 g. Select the "raritan pdu" in the "vendor class" field, select "001 pdu-tftp-server" from the available options list, and type your tftp server's ipv4 address in the "ip address" field..

  • Page 479

    Appendix c: bulk configuration or firmware upgrade via dhcp/tftp 465 h. Select "002 pdu-update-control-file" from the available options list, and type the filename "fwupdate.Cfg" in the "string value" field. I. Select "003 pdu-update-magic" from the available options list, and type any string in the...

  • Page 480

    Appendix c: bulk configuration or firmware upgrade via dhcp/tftp 466 important: the magic cookie is transmitted to and stored in emx at the time of executing the "fwupdate.Cfg" commands. The dhcp/tftp operation is triggered only when there is a mismatch between the magic cookie in dhcp and the one s...

  • Page 481

    Appendix c: bulk configuration or firmware upgrade via dhcp/tftp 467 a. Right-click the ipv6 node in dhcp to select define vendor classes. B. Click add to add a new vendor class. C. Specify a unique name for the vendor class, type "13742" in the "vendor id (iana)" field, and type the binary codes of...

  • Page 482

    Appendix c: bulk configuration or firmware upgrade via dhcp/tftp 468 2. Add three options to the "raritan pdu 1.0" vendor class. A. Right-click the ipv6 node in dhcp to select set predefined options..

  • Page 483

    Appendix c: bulk configuration or firmware upgrade via dhcp/tftp 469 b. Select raritan pdu 1.0 in the "option class" field. C. Click add to add the first option. Type "pdu-tftp-server" in the name field, select ip address as the data type, and type 1 in the code field..

  • Page 484

    Appendix c: bulk configuration or firmware upgrade via dhcp/tftp 470 d. Click add to add the second option. Type "pdu-update-control-file" in the name field, select string as the data type, and type 2 in the code field. E. Click add to add the third one. Type "pdu-update-magic" in the name field, se...

  • Page 485

    Appendix c: bulk configuration or firmware upgrade via dhcp/tftp 471 c. Select "raritan pdu 1.0" in the "vendor class" field, select "00001 pdu-tftp-server" from the available options list, and type your tftp server's ipv6 address in the "ipv6 address" field..

  • Page 486

    Appendix c: bulk configuration or firmware upgrade via dhcp/tftp 472 d. Select "00002 pdu-update-control-file" from the available options list, and type the filename "fwupdate.Cfg" in the "string value" field. E. Select "00003 pdu-update-magic" from the available options list, and type any string in...

  • Page 487

    Appendix c: bulk configuration or firmware upgrade via dhcp/tftp 473 important: the magic cookie is transmitted to and stored in emx at the time of executing the "fwupdate.Cfg" commands. The dhcp/tftp operation is triggered only when there is a mismatch between the magic cookie in dhcp and the one s...

  • Page 488

    Appendix c: bulk configuration or firmware upgrade via dhcp/tftp 474 configure the same option in dhcp accordingly. The emx accepts the configuration or firmware upgrade only when this value in dhcp matches. 3. Set the following three sub-options in the "vendor-encapsulated-options" (option 43). Cod...

  • Page 489

    Appendix c: bulk configuration or firmware upgrade via dhcp/tftp 475 ipv4 illustration example in dhcpd.Conf: dhcp ipv6 configuration in linux modify the "dhcpd6.Conf" file for ipv6 settings when your dhcp server is running linux. Required linux ipv6 settings in dhcp: 1. Locate and open the "dhcpd6....

  • Page 490

    Appendix c: bulk configuration or firmware upgrade via dhcp/tftp 476 code 2 (pdu-update-control-file) = the name of the control file "fwupdate.Cfg" code 3 (pdu-update-magic) = any string this third option/code is the magic cookie to prevent the fwupdate.Cfg commands from being executed repeatedly. I...

  • Page 491

    477 you can use either the reset button or the command line interface (cli) to reset the emx. Important: exercise caution before resetting the emx to its factory defaults. This erases existing information and customized settings, such as user profiles, threshold values, and so on. Only firmware upgr...

  • Page 492

    Appendix d: resetting to factory defaults 478 3. Press (and release) the reset button of the emx device while pressing the esc key of the keyboard several times in rapid succession. A prompt (=>) should appear after about one second. 4. Type defaults to reset the emx to its factory defaults. 5. Wait...

  • Page 493

    Appendix d: resetting to factory defaults 479 to reset to factory defaults without logging in to the cli: the emx provides an easier way to reset the product to factory defaults in the cli prior to login. 1. Connect to the emx and launch a terminal emulation program as described in the above procedu...

  • Page 494

    480 you can perform a secure copy (scp) command to update the emx firmware, do bulk configuration, or back up and restore the configuration. In this chapter firmware update via scp .....................................................................480 bulk configuration via scp ......................

  • Page 495

    Appendix e: available scp commands 481 scp command example: scp emx-ecx-030200-42396.Bin admin@192.168.87.50:/fwupdate tip: the pscp works in a similar way to the scp so the pscp syntax is similar. Pscp @:/fwupdate bulk configuration via scp like performing bulk configuration via the web interface, ...

  • Page 496

    Appendix e: available scp commands 482 3. The system copies the configuration included in the file "bulk_config.Xml" to another emx, and displays the following message. Starting restore operation. The connection will be closed now. Scp command examples: save operation's example: scp admin@192.168.87...

  • Page 497

    Appendix e: available scp commands 483 scp backup_settings.Xml @ ip>:/settings_restore is the "admin" or any user profile with the administrator privileges. Is the ip address of the emx that you want to update. 2. Type the password when the system prompts you to type it. 3. The system copies the con...

  • Page 498

    484 this section provides an ldap example for illustrating the configuration procedure using microsoft active directory ® (ad). To configure ldap authentication, four main steps are required: a. Determine user accounts and roles (groups) intended for the emx b. Create user groups for the emx on the ...

  • Page 499

    Appendix f: ldap configuration illustration 485 step b. Configure user groups on the ad server you must create the groups (roles) for the emx on the ad server, and then make appropriate users members of these groups. In this illustration, we assume: the groups (roles) for the emx are named emx_admin...

  • Page 500

    Appendix f: ldap configuration illustration 486 3. Add the emxuser and userb accounts to the emx_admin group. 4. Verify whether each group comprises correct users..

  • Page 501

    Appendix f: ldap configuration illustration 487 step c. Configure ldap authentication on the emx device you must enable and set up ldap authentication properly on the emx device to use external authentication. In the illustration, we assume: the dns server settings have been configured properly. See...

  • Page 502

    Appendix f: ldap configuration illustration 488 base dn for search - type dc=techadssl,dc=com as the starting point where your search begins on the ad server. Login name attribute - ensure the field is set to samaccountname because the ldap server is microsoft active directory. User entry object cla...

  • Page 503

    Appendix f: ldap configuration illustration 489 5. Click ok. The ldap server is saved. 6. Click ok. The ldap authentication is activated. Note: if the emx clock and the ldap server clock are out of sync, the installed tls certificates, if any, may be considered expired. To ensure proper synchronizat...

  • Page 504

    Appendix f: ldap configuration illustration 490 c. Click add. 6. Click ok. The emx_user role is created. 7. Keep the manage roles dialog opened to create the emx_admin role. To create the emx_admin role with full permissions assigned: 1. Click new. The create new role dialog appears. 2. Type emx_adm...

  • Page 505

    Appendix f: ldap configuration illustration 491 3. Type a description for the emx_admin role in the description field. In this example, we type "the role includes all privileges" to describe the role. 4. Click the privileges tab to select the administrator permission. The administrator permission al...

  • Page 506

    Appendix f: ldap configuration illustration 492 5. Click ok. The emx_admin role is created. 6. Click close to quit the dialog..

  • Page 507

    493 in this chapter returning user group information ........................................................493 setting the registry to permit write operations to the schema ...........494 creating a new attribute .......................................................................494 adding att...

  • Page 508

    Appendix g: updating the ldap schema 494 setting the registry to permit write operations to the schema to allow a domain controller to write to the schema, you must set a registry entry that permits schema updates. To permit write operations to the schema: 1. Right-click the active directory ® schem...

  • Page 509

    Appendix g: updating the ldap schema 495 3. Click new and then choose attribute. When the warning message appears, click continue and the create new attribute dialog appears. 4. Type rciusergroup in the common name field. 5. Type rciusergroup in the ldap display name field. 6. Type 1.3.6.1.4.1.13742...

  • Page 510

    Appendix g: updating the ldap schema 496 2. Scroll to the user class in the right pane and right-click it. 3. Choose properties from the menu. The user properties dialog appears. 4. Click the attributes tab to open it. 5. Click add..

  • Page 511

    Appendix g: updating the ldap schema 497 6. Choose rciusergroup from the select schema object list. 7. Click ok in the select schema object dialog. 8. Click ok in the user properties dialog. Updating the schema cache to update the schema cache: 1. Right-click active directory ® schema in the left pa...

  • Page 512

    Appendix g: updating the ldap schema 498 3. Go to the directory where the support tools were installed. Run adsiedit.Msc. The adsi edit window opens. 4. Open the domain..

  • Page 513

    Appendix g: updating the ldap schema 499 5. In the left pane of the window, select the cn=users folder. 6. Locate the user name whose properties you want to adjust in the right pane. Right-click the user name and select properties..

  • Page 514

    Appendix g: updating the ldap schema 500 7. Click the attribute editor tab if it is not already open. Choose rciusergroup from the attributes list. 8. Click edit. The string attribute editor dialog appears. 9. Type the user role (created in the emx) in the edit attribute field. Click ok..

  • Page 515

    501 this section provides illustrations for configuring radius authentication. One illustration is based on the microsoft ® network policy server (nps), and the other is based on a non-windows radius server, such as freeradius. The following steps are required for any radius authentication: 1. Confi...

  • Page 516

    Appendix h: radius configuration illustration 502 step a: add your emx as a radius client the radius implementation on a emx follows the standard radius internet engineering task force (ietf) specification so you must select "radius standard" as its vendor name when configuring the nps server. In th...

  • Page 517

    Appendix h: radius configuration illustration 503 2. Right-click nps (local), and select properties. Verify the authentication and accounting port numbers shown in the properties dialog are the same as those specified on your emx. In this example, they are 1812 and 1813. Then close this dialog..

  • Page 518

    Appendix h: radius configuration illustration 504 3. Under "radius clients and servers," right-click radius client and select new radius client. The new radius client dialog appears. 4. Do the following to add your emx to nps: a. Verify the "enable this radius client" checkbox is selected. B. Type a...

  • Page 519

    Appendix h: radius configuration illustration 505 f. Type the shared secret in the "shared secret" and "confirm shared secret" fields. The shared secret must be the same as the one specified on your emx. 5. Click ok. Step b: configure connection request policies you need to configure the following f...

  • Page 520

    Appendix h: radius configuration illustration 506 b. Connection request forwarding method c. Authentication method(s) d. Standard radius attributes in the following illustration, we assume: local nps server is used ip address of your emx: 192.168.56.29 radius protocol selected on your emx: chap exis...

  • Page 521

    Appendix h: radius configuration illustration 507 2. Right-click connection request policies and select new. The new connection request policy dialog appears. 3. Type a descriptive name for identifying this policy in the "policy name" field..

  • Page 522

    Appendix h: radius configuration illustration 508 you can leave the "type of network access server" field to the default -- unspecified..

  • Page 523

    Appendix h: radius configuration illustration 509 4. Click next to show the "specify conditions" screen. Click add. 5. The "select condition" dialog appears. Click add..

  • Page 524

    Appendix h: radius configuration illustration 510 6. The nas ipv4 address dialog appears. Type the emx ip address -- 192.168.56.29 , and click ok. 7. Click next in the new connection request policy dialog. 8. Select "authenticate requests on this server" because a local nps server is used in this ex...

  • Page 525

    Appendix h: radius configuration illustration 511 note: connection request forwarding options must match your environment. 9. When the system prompts you to select the authentication method, select the following two options: override network policy authentication settings chap -- the emx uses "chap"...

  • Page 526

    Appendix h: radius configuration illustration 512 note: if your emx uses pap, then select "pap.".

  • Page 527

    Appendix h: radius configuration illustration 513 10. Select standard to the left of the dialog and then click add..

  • Page 528

    Appendix h: radius configuration illustration 514 11. Select filter-id from the list of attributes and click add..

  • Page 529

    Appendix h: radius configuration illustration 515 12. In the attribute information dialog, click add. 13. Select string, type raritan:g{admin} in the text box, and then click ok..

  • Page 530

    Appendix h: radius configuration illustration 516 admin inside the curved brackets {} is the existing role on the emx. It is recommended to use the admin role to test this configuration. The role name is case sensitive..

  • Page 531

    Appendix h: radius configuration illustration 517 14. The new attribute is added. Click ok..

  • Page 532

    Appendix h: radius configuration illustration 518 15. Click next to continue..

  • Page 533

    Appendix h: radius configuration illustration 519 16. A summary showing connection request policy settings is displayed. Click finish to close the dialog..

  • Page 534

    Appendix h: radius configuration illustration 520 step c: configure a vendor-specific attribute you must specify a vendor-specific attribute (vsa) for raritan on windows 2008 nps. Raritan's vendor code is 13742. In the following illustration, we assume: there are three roles available on your emx: a...

  • Page 535

    Appendix h: radius configuration illustration 521 a. Type 26 in the "vendor-assigned attribute number" field. B. Select string in the "attribute format" field. C. Type raritan:g{admin user systemtester} in the "attribute value" field. In this example, three roles are specified inside the curved brac...

  • Page 536

    Appendix h: radius configuration illustration 522 ad-related configuration when radius authentication is intended, make sure you also configure the following settings related to microsoft active directory (ad): register the nps server in ad configure remote access permission for users in ad the nps ...

  • Page 537

    Appendix h: radius configuration illustration 523 3. Click ok, and then ok again. To grant emx users remote access permission: 1. Open active directory users and computers. 2. Open the properties dialog of the user whom you want to grant the access permission..

  • Page 538

    Appendix h: radius configuration illustration 524 3. Click the dial-in tab and select the "allow access" checkbox. To enable reversible encryption for chap authentication: 1. Open active directory users and computers. 2. Open the properties dialog of the user that you want to configure..

  • Page 539

    Appendix h: radius configuration illustration 525 3. Click the account tab and select the "store password using reversible encryption" checkbox. Non-windows radius server for a non-windows radius server, such as freeradius, a vendor-specific dictionary file is required. Dictionary file create a vend...

  • Page 540

    Appendix h: radius configuration illustration 526 # -*- text -*- # # dictionary.Raritan # # # version: $id$ # vendor raritan 13742 # # standard attribute # begin-vendor raritan attribute raritan-vendor-specific 26 string end-vendor raritan note that "string" in the above contents must be replaced by...

  • Page 541

    Appendix h: radius configuration illustration 527 therefore, in raritan's dictionary file, the attribute line is like the following: attribute raritan-vendor-specific 26 raritan:g{admin user systemtester}.

  • Page 542

    528 in this chapter reserving ip addresses in windows dhcp servers............................528 sensor threshold settings ....................................................................529 pdview app for viewing the emx.........................................................536 altitude corr...

  • Page 543

    Appendix i: additional emx information 529 field description mac address enter the ascii codes of the emx serial number. Do not contain spaces in the ascii codes. In this example, enter 50454731413030303033 other fields configure them according to your needs. Sensor threshold settings this section e...

  • Page 544

    Appendix i: additional emx information 530 thresholds and sensor states a numeric sensor has four threshold settings: lower critical, lower warning, upper warning and upper critical. The threshold settings determine how many sensor states are available for a certain sensor and the range of each sens...

  • Page 545

    Appendix i: additional emx information 531 when a sensor only has the upper critical threshold enabled, it has two sensor states: normal and above upper critical. When a sensor has both the upper critical and upper warning thresholds enabled, it has three sensor states: normal, above upper warning, ...

  • Page 546

    Appendix i: additional emx information 532 "to assert" and assertion timeout if multiple sensor states are available for a specific sensor, the emx asserts a state for it whenever a bad state change occurs. To assert a state: to assert a state is to announce a "worse" new state. Below are bad state ...

  • Page 547

    Appendix i: additional emx information 533 note: for most sensors, the measurement unit in the "assertion timeout" field is sample. Because the emx measures each sensor every second, timing of a sample is equal to a second. How "assertion timeout" is helpful: if you have created an event rule that i...

  • Page 548

    Appendix i: additional emx information 534 "to de-assert" and deassertion hysteresis after the emx asserts a worse state for a sensor, it may de-assert the same state later on. To de-assert a state: to de-assert a state is to announce the end of the previously asserted worse state. Below are good st...

  • Page 549

    Appendix i: additional emx information 535 this function is similar to a thermostat, which instructs the air conditioner to turn on the cooling system when the temperature exceeds a pre-determined level. "deassertion hysteresis" instructs the emx to de-assert the worse state for a sensor only when t...

  • Page 550

    Appendix i: additional emx information 536 assumption: upper warning threshold is enabled. Upper warning = 20 (degrees celsius) deassertion hysteresis = 3 (degrees celsius) "deassertion" level = 20-3 = 17 (degrees celsius) when the emx detects that a temperature sensor's reading drops below 20 degre...

  • Page 551

    Appendix i: additional emx information 537 2. After installing the pdview, launch it. Below illustrates the pdview for android devices. 3. Connect your mobile device to the usb port of the emx. Your mobile device type determines which usb port on the emx shall be used to connect the mobile device. T...

  • Page 552

    Appendix i: additional emx information 538 the pdview shows a "connected" message when it detects the physical connection to the emx. 4. Log in to the pdview app at the login prompt. Now you can view limited emx information or even change some settings. Tip: to skip the final login step, you can cli...

  • Page 553

    Appendix i: additional emx information 539 altitude correction factors if a raritan differential air pressure sensor is attached to your device, the altitude you enter for the device can serve as an altitude correction factor. That is, the reading of the differential air pressure sensor will be mult...

  • Page 554

    Appendix i: additional emx information 540 truncated data in the web interface some fields of the emx web interface can accommodate data entry up to 256 characters. When the data entered is too long, it may be truncated due to some or all of the following factors: screen resolution font size font ty...

  • Page 555

    Appendix i: additional emx information 541 connecting contact closure sensors to old emx2-888 follow the steps below to connect raritan's or third-party contact closure detectors/switches to the termination points labeled contact sensor if your emx is the old emx2-888 with a built-in spring-loaded t...

  • Page 556

    Appendix i: additional emx information 542 4. Release the tiny rectangular buttons after inserting the wires properly. 5. Verify that these wires are firmly fastened. 6. By default, the open status of the detector/switch is considered normal. To set the "normal" setting to "closed" , press down the ...

  • Page 557: Sensors With Other Products

    543 in this chapter asset management sensors and raritan pdus ...................................543 asset management sensors and dctrack ............................................543 asset management sensors and raritan pdus asset sensors also work with the following raritan power distribution un...

  • Page 558

    Appendix j: integrating asset management sensors with other products 544 each it item connected to the asset sensor via an asset tag must exist in dctrack. You do not need to manually enter the asset tag ids for it items that already exist in dctrack as long as these items are in the installed statu...

  • Page 559: Index

    545 a a note about enabling thresholds • 308 a note about infinite loop • 228 a note about untriggered rules • 232 about the interface • 309 access security control • 157 accessing the help • 296 action group • 189, 190 actuator configuration commands • 407, 408, 417 actuator control operations • 43...

  • Page 560

    Index 546 checking the accessibility of ntp servers • 369 checking the internal beeper state • xiii, 82, 148 clearing event entries • 234 clearing event log • 337 clearing information • 336 clearing the pm710 energy accumulators • 286 clearing wlan log • xiii, 337 closing a local connection • 313 co...

  • Page 561

    Index 547 customizing the date and time • xiv, 368 d daisy-chain limitations of composite asset sensors • xii, 36, 37 dashboard • 103 data pane • 98 date and time settings • 318 deassertion hysteresis example for temperature sensors • 536 default log messages • xiii, 167, 197, 216 default measuremen...

  • Page 562

    Index 548 enabling or disabling ssh • 360 enabling or disabling strong passwords • 380 enabling or disabling telnet • 359 enabling or disabling the read-only mode • 364 enabling or disabling the restricted service agreement • 376 enabling or disabling the service advertisement • 364 enabling passwor...

  • Page 563

    Index 549 g gathering the external authentication information • 178 gathering the ldap information • 179 gathering the radius information • 179 h help command • 314 history buffer length • 334 how to display asset sensors • 94 how to display lhx/shx heat exchangers • 95 how to use the calendar • 129...

  • Page 564

    Index 550 monitoring the lhx/shx • 272, 277 more information • 99 more information about ad or radius configuration • 183 mounting a 1u emx • 7 mounting a zero u emx • 6 multi-command syntax • 371, 377, 379, 383, 390, 391, 393, 396, 399, 412, 414, 417, 419, 431 n naming a rack unit • 426 naming an a...

  • Page 565

    Index 551 sample event rules • 226 sample sensor-level event rule • 227 sample user-activity-level event rule • 228 saving snapshots • 264, 268, 270 saving the emx configuration • 288, 448 scheduling an action • xiii, 147, 194, 211, 216 security configuration commands • 370 security settings • 326 s...

  • Page 566

    Index 552 setting up your preferred measurement units • 131, 152, 153 setting wireless parameters • 343 setup button • 96 showing information • 315 showing network connections • 437 single login limitation • 377 snmp gets and sets • 305 snmp sets and thresholds • 307 snmpv2c notifications • 123, 301...

  • Page 567

    Index 553 using an optional dpx-envhub4 sensor hub • 42 using an x cable • 30, 37 using default thresholds • 411 using snmp • 292, 298 using the cli command • 435, 478 using the command line interface • 120, 248, 309, 478 using the emx • 64 using the reset button • 477 using the web interface • 83 v...

  • Page 568

    U.S./canada/latin america monday - friday 8 a.M. - 6 p.M. Et phone: 800-724-8090 or 732-764-8886 for commandcenter noc: press 6, then press 1 for commandcenter secure gateway: press 6, then press 2 fax: 732-764-8887 email for commandcenter noc: tech-ccnoc@raritan.Com email for all other products: te...