264
1. 8 7 7. 8 7 7. 2 26 9 BLACKBOX.COM
NEED HELP?
LEAVE THE TECH TO US
LIVE 24/7
TECHNICAL
SUPPORT
1.877.87 7.2269
Issue the commands below. If the Host is not a PDU or UPS power device or a server with IPMI power control then leave the device
type blank:
# config -s config.sdt.hosts.host4.address=192.168.3.10
# config -s config.sdt.hosts.host4.description=MyPC
# config -s config.sdt.hosts.host4.name=OfficePC
# config -s config.sdt.hosts.host4.device.type=''
# config -s config.sdt.hosts.host4.tcpports.tcpport1=22
# config -s config.sdt.hosts.host4.tcpports.tcpport1.loglevel=1
# config -s config.sdt.hosts.host4.udpports.tcppport2=443
# config -s config.sdt.hosts.host4.udpports.tcpport2.loglevel=1
NOTE: Type should be left blank.
If you want to add the new host as a managed device, make sure to use the current total number of managed devices + 1, for the new
device number.
To get the current number of managed devices:
# config -g config.devices.total
Assuming we already have one managed device, our new device will be device 2. Issue the following commands:
# config -s config. devices.device2.connections.connection1.name=192.168.3.10
# config -s config. devices.device2.connections.connection1.type=Host
# config -s config. devices.device2.name=OfficePC
# config -s config. devices.device2.description=MyPC
# config -s config.devices.total=2
The following command will synchronize the live system with the new configuration:
# config -r hosts
15.1.6 TRUSTED NETWORKS
You can further restrict remote access to serial ports based on the source IP address. To configure this via the command line you
need to do the following:
Determine the total number of existing trusted network rules (if you have no existing rules) you can assume this is 0
# config -g config.portaccess.total
This command should display
config.portaccess.total 1
If you see config.portaccess.total you have 0 rules configured.
Your new rule will be the existing total plus 1. If the previous command gave you 0 start with rule number 1. If you already have 1 rule
your new rule will be number 2. And so on.
Assuming you have a previous rule in place, if you want to restrict access to serial port 5 to computers from a single class C network
(for example, 192.168.5.0) issue the following commands to add a trusted network:
# config -s config.portaccess.rule2.address=192.168.5.0
# config -s "config.portaccess.rule2.description=foo bar"
CHAPTER 15: CONFIGURATION FROM THE COMMAND LINE