Opengear ACM5000 - Firewall & Forwarding

To Next Page

To Previous Page

Chapter 5: Firewall, Failover and Out of Band

110 Console Server & RIM Gateway User Manual

5.8 Firewall & Forwarding

Opengear console servers and cellular routers with Version 3.3 firmware (and beyond) have basic routing, NAT (Network

Address Translation), packet filtering and port forwarding support on all network interfaces.

Main Page

Table of Contents4
This Manual12
Installation16
Models16
- IM4208-2, IM4216-2, IM4232-2, IM4248-2 and IM4216-34 Kit Components17
- IM4004-5 Kit Components18
- CM4116, CM4132 and CM4148 Kit Components18
- CM4008 Kit Components19
- CM4001 and SD4002 Kit Components19
- SD4001 Kit Components20
- ACM5000 Kit Components20
- ACM5500 Kit Components21
Power Connection21
- IM4216-34-DAC, IM4208-2-DAC, IM4216-2-DAC, IM4232-2-DAC and IM4248-2-DAC Power21
- CM4116-SAC, CM4132-SAC and CM4148-SAC Power21
- IM4004-5 and CM4008 Power22
- CM4001/ SD4002 and SD4001 Power22
- Acm500X, Acm500X-2, Acm500X-M/W/I/G and Acm500X-SDC Power22
- ACM5508-2-M, ACM5508-2-I, ACM5504-5-G-I, ACM5504-5-GV-I and ACM5504-2-P Power23
- IM4216-34-DDC, IM4208-2-DDC, IM4216-2-DDC, IM4232-2-DDC and IM4248-2-DDC Power23
Network Connection24
Serial Port Connection25
- Opengear Classic RJ45 Pinout (Option -X0)26
- Cisco Rolled (Cyclades) RJ45 Pinout (Option -X1)26
- Cisco RJ45 Pinout (Option -X2)27
USB Port Connection27
Fitting Cellular SIM and Antennas27
- ACM5004-G/G-I and ACM5504-5-G-I SIM28
- ACM5004-G/G-I/GV and ACM5504-5-G-I Antenna28
- Im42Xx-2-DAC-X2-G and Im42Xx-2-DAC-X0-G28
- External USB Cellular Modems29
Digital I/O and Environmental Sensors29
System Configuration30
Management Console Connection30
- Connected Computer Set up30
- Browser Connection31
Administrator Password32
- Set up New Administrator33
Network IP Address34
- Ipv6 Configuration35
- Dynamic DNS (DDNS) Configuration35
System Firewall - Service Access36
Communications Software39
- SDT Connector39
- Putty40
- Sshterm41
Management Network Configuration41
- Enable the Management LAN41
- Configure the DHCP Server43
- Select Failover or Broadband Oob44
- Aggregating the Network Ports45
- Wireless LAN46
- Static Routes48
Configure Serial Ports50
- Common Settings51
- Console Server Mode52
- SDT Mode56
- Device (RPC, UPS, EMD) Mode56
- Terminal Server Mode57
- Serial Bridging Mode57
- Syslog58
- NMEA Streaming58
Serial Port, Host, Device & User Configuration50
Add/ Edit Users59
- Set up New Group60
- Set up New Users61
Authentication63
Network Hosts63
Trusted Networks64
Serial Port Cascading65
- Automatically Generate and Upload SSH Keys66
- Manually Generate and Upload SSH Keys67
- Configure the Slaves and Their Serial Ports68
- Managing the Slaves69
Serial Port Redirection (Portshare)70
Managed Devices71
Ipsec VPN73
- Enable the VPN Gateway73
Openvpn75
- Enable the Openvpn76
- Configure as Server or Client77
- Windows Openvpn Client and Server Set up80
Pptp Vpn84
- Enable the PPTP VPN Server84
- Add a PPTP User86
- Set up a Remote PPTP Client86
Call Home88
- Set up Call Home Candidate88
- Accept Call Home Candidate as Managed Console Server on CMS89
- Calling Home to a Generic Central SSH Server90
FIREWALL, FAILOVER & Oob ACCESS92
Dialup Modem Connection92
Oob Dial-In Access92
- Configure Dial-In PPP92
- Using SDT Connector Client95
- Set up Windows XP/ 2003/Vista/7 Client95
- Set up Earlier Windows Clients95
- Set up Linux Clients96
Dial-Out Access96
- Always-On Dial-Out96
- Failover Dial-Out97
Oob Broadband Ethernet Access99
Broadband Ethernet Failover100
Cellular Modem Connection101
- Connect to the GSM HSUPA/UMTS Carrier Network102
- Connect to the CDMA EV-DO Carrier Network103
- Verify Cellular Connection105
Cellular Operation107
- Oob Access Set up107
- Cellular Failover Setup108
- Cellular Routing109
- Cellular CSD Dial-In Setup109
Firewall & Forwarding110
- Configuring Network Forwarding and IP Masquerading111
- Configuring Client Devices113
- Port / Protocol Forwarding115
- Firewall Rules116
Ssh Tunnels & Sdt Connector120
Configuring for SSH Tunneling to Hosts121
SDT Connector Client Configuration121
- SDT Connector Client Installation121
- Configuring a New Gateway in the SDT Connector Client122
- Auto-Configure SDT Connector Client with the User's Access Privileges124
- Make an SDT Connection through the Gateway to a Host124
- Manually Adding Hosts to the SDT Connector Gateway125
- Manually Adding New Services to the New Hosts126
- Adding a Client Program to be Started for the New Service128
- Dial in Configuration129
SDT Connector to Management Console130
SDT Connector - Telnet or SSH Connect to Serially Attached Devices131
Using SDT Connector for Out-Of-Band Connection to the Gateway132
Importing (and Exporting) Preferences133
SDT Connector Public Key Authentication134
Setting up SDT for Remote Desktop Access134
- Enable Remote Desktop on the Target Windows Computer to be Accessed134
- Configure the Remote Desktop Connection Client136
SDT SSH Tunnel for VNC138
- Install and Configure the VNC Server on the Computer to be Accessed138
- Install, Configure and Connect the VNC Viewer140
Using SDT to IP Connect to Hosts that Are Serially Attached to the Gateway141
- Establish a PPP Connection between the Host COM Port and Console Server142
- Set up SDT Serial Ports on Console Server144
- Set up SDT Connector to Ssh Port Forward over the Console Server Serial Port145
SSH Tunneling Using Other SSH Clients (E.g. Putty)145
Alerts, Automated Response and Logging150
Configure Auto-Response150
Check Conditions152
- Environmental152
- Alarms and Digital Inputs153
- UPS / Power Supply153
- UPS Status154
- Serial Login/Logout154
- ICMP Ping155
- Cellular Data156
- Custom Check156
- SMS Command157
Trigger Actions158
- Send Email158
- Send SMS158
- Perform RPC Action159
- Run Custom Script159
- Send SNMP Trap159
- Send Nagios Event159
Resolve Actions160
Configure SMTP, SMS, SNMP And/Or Nagios Service for Alert Notifications160
- Send Email Alerts160
- Send SMS Alerts161
- Send SNMP Trap Alerts162
- Send Nagios Event Alerts164
Logging164
- Log Storage164
- Serial Port Logging165
- Network TCP and UDP Port Logging166
- Auto-Response Event Logging166
- Power Device Logging167
Power, Environment & Digital I/O168
Remote Power Control (RPC)168
- RPC Connection168
- RPC Access Privileges and Alerts172
- User Power Management172
- RPC Status172
Uninterruptible Power Supply Control (UPS)174
- Managed UPS Connections174
- Remote UPS Management177
- Controlling UPS Powered Computers178
- UPS Alerts179
- UPS Status179
- Overview of Network UPS Tools (NUT)181
Environmental Monitoring183
- Connecting the EMD and Its Sensors183
- Connecting Sensors to ACM5000 and Acm5500S184
- Adding Emds and Configuring the Sensors186
- Environmental Alerts188
- Environmental Status188
Digital I/O Ports189
- Digital I/O Output Configuration189
- Digital I/O Input Configuration190
- High Voltage Outputs190
Authentication192
Authentication Configuration192
- Local Authentication192
- TACACS Authentication192
- RADIUS Authentication193
- LDAP Authentication194
- RADIUS/TACACS User Configuration195
- Group Support with Remote Authentication196
- Remote Groups with RADIUS Authentication197
- Remote Groups with LDAP Authentication198
- Idle Timeout200
- Kerberos Authentication200
- Authentication Testing201
PAM (Pluggable Authentication Modules)201
SSL Certificate202
Nagios Integration206
Nagios Overview206
Central Management and Setting up SDT for Nagios207
- Set up Central Nagios Server208
- Set up Distributed Opengear Console Servers208
- Set up SDT for Nagios on the Central Nagios Server210
- Set up the Clients211
Configuring Nagios Distributed Monitoring212
- Enable Nagios on the Console Server213
- Enable NRPE Monitoring214
- Enable NSCA Monitoring214
- Configure Selected Serial Ports for Nagios Monitoring215
- Configure Selected Network Hosts for Nagios Monitoring216
- Configure the Upstream Nagios Monitoring Host217
Advanced Distributed Monitoring Configuration217
- Sample Nagios Configuration217
- Basic Nagios Plug-Ins220
- Additional Plug-Ins220
- Number of Supported Devices222
- Distributed Monitoring Usage Scenarios223
System Management226
System Administration and Reset226
Upgrade Firmware227
Configure Date and Time228
Configuration Backup229
Delayed Configuration Commit231
FIPS Mode232
Status Reports234
Port Access and Active Users234
Statistics234
Support Reports235
Syslog236
Dashboard236
- Configuring the Dashboard237
- Creating Custom Widgets for the Dashboard238
Management240
Device Management240
Port and Host Logs240
Terminal Connection240
- Web Terminal241
- SDT Connector Access242
Power Management243
Configuration from the Command Line244
Accessing Config from the Command Line244
- Serial Port Configuration246
- Adding and Removing Users249
- Adding and Removing User Groups250
- Authentication251
- Network Hosts251
- Trusted Networks253
- Cascaded Ports253
- UPS Connections254
- RPC Connections255
- Environmental256
- Managed Devices256
- Port Log257
- Alerts257
- Smtp & Sms260
- Snmp260
- Administration261
- IP Settings261
- Date & Time Settings262
- Dial-In Settings262
- DHCP Server263
- Services264
- Nagios264
Advanced Configuration266
Custom Scripting266
- Custom Script to Run When Booting266
- Running Custom Scripts When Alerts Are Triggered266
- Example Script - Power Cycling on Pattern Match267
- Example Script - Multiple Email Notifications on each Alert268
- Deleting Configuration Values from the CLI268
- Power Cycle any Device Upon a Ping Request Failure270
- Running Custom Scripts When a Configurator Is Invoked272
- Backing-Up the Configuration and Restoring Using a Local USB Stick272
- Backing-Up the Configuration Off-Box273
Advanced Portmanager274
- Portmanager Commands274
- External Scripts and Alerts275
Raw Access to Serial Ports276
- Access to Serial Ports276
- Accessing the Console/Modem Port276
IP- Filtering277
SNMP Status Reporting277
- Retrieving Status Information Using SNMP278
- Check Firewall Rules278
- Enable SNMP Service279
- Etc/Config/Snmpd.conf284
- Adding Multiple Remote SNMP Managers285
Secure Shell (SSH) Public Key Authentication286
- SSH Overview286
- Generating Public Keys (Linux)286
- Installing the SSH Public/Private Keys (Clustering)287
- Installing SSH Public Key Authentication (Linux)287
- Generating Public/Private Keys for SSH (Windows)289
- Fingerprinting290
- SSH Tunneled Serial Bridging291
- SDT Connector Public Key Authentication293
Secure Sockets Layer (SSL) Support294
Https294
- Generating an Encryption Key294
- Generating a Self-Signed Certificate with Openssl294
- Installing the Key and Certificate295
- Launching the HTTPS Server295
Power Strip Control295
- The Powerman Tool295
- The Pmpower Tool297
- Adding New RPC Devices297
Ipmitool298
Custom Development Kit (CDK)301
Scripts for Managing Slaves301
SMS Server Tools302
Multicast302
APPENDIX A: Linux Commands & Source Code304
APPENDIX B: Hardware Specification310
APPENDIX C: Safety & Certifications312
Appendix D: Connectivity, TCP Ports & Serial I/O314
Appendix E: Terminology324
Appendix F: End User License Agreements328
Appendix G: Service & Standard Warranty334

Opengear ACM5000 - Firewall & Forwarding

Table of Contents

Related product manuals