Opengear ACM7000 - User Manual

User Manual
ACM7000 Remote Site Gateway
ACM7000-L Resilience Gateway
IM7200 Infrastructure Manager
CM7100 Console Servers
Version 4.6 2019-09-11

Summary

Safety

Alerts, Auto-Response & Logging

System Configuration

Management Console Connection

Details how to connect to the console server's Management Console via a web browser.

Administrator Set Up

Change default root System Password

Instructions for changing the default root system password for security.

Set up a new administrator

Network Configuration

Dynamic DNS (DDNS) configuration

Service Access and Brute Force Protection

Brute Force Protection

Management Network Configuration

Enable the Management LAN

Steps to configure the second Ethernet port as a management LAN gateway.

Configure the DHCP server

Wi-Fi Wireless LAN

WAP configuration

SERIAL PORT, HOST, DEVICE & USER CONFIGURATION

Configure Serial Ports

Setting up common settings and operating modes for serial ports.

Common Settings

Console Server Mode

Telnet

SSH

Encrypt Traffic; Authenticate

SDT Mode

Device (RPC, UPS, Environmental) Mode

Terminal Server Mode

Serial Bridging Mode

Add and Edit Users

Users

Set up new group

Set up new users

Add a Username

Network Hosts

Add Host

Permitted Services

Trusted Networks

Add Rule

Serial Port Cascading

Generate SSH keys automatically

Manually generate and upload SSH keys

Configure the slaves and their serial ports

Serial Port Redirection (PortShare)

Managed Devices

IPsec VPN

Enable the VPN gateway

Select the Authentication Method

OpenVPN

Enable the OpenVPN

Select the authentication method

Configure as Server or Client

Manage OpenVPN Files

Windows OpenVPN Client and Server set up

PPTP VPN

Enable the PPTP VPN server

Steps to enable and configure the PPTP VPN server on the Opengear appliance.

Minimum Authentication Required

Add a PPTP user

Set up a remote PPTP client

Call Home

Set up Call Home candidate

Accept Call Home candidate as Managed Console Server on CMS

IP Passthrough

IP Passthrough Configuration

Configuration over DHCP (ZTP)

Prepare a USB drive and create the X.509 certificate and private key

FIREWALL, FAILOVER & OOB ACCESS

Dialup Modem Connection

Configure Dial-In PPP

Select the Authentication Type required

Using SDT Connector client

Set up Windows XP or later client

Always-on dial-out

Failover dial-out

OOB Broadband Ethernet Access

Broadband Ethernet Failover

Cellular Modem Connection

Connecting to a GSM HSUPA;UMTS carrier network

Enter the carrier’s APN

Connecting to a CDMA EV-DO carrier network

OTASP Activation

Manual Activation

Verifying the cellular connection

Cellular modem watchdog

Dual SIM failover

Configure dual SIM failover

Multi-carrier cellular support

Download and apply new cellular firmware

Cellular router mode

OOB mode

Failover mode

Cellular failover setup

Firewall & Forwarding

Network Forwarding

IP Masquerading

Firewall Rules

Configuring network forwarding and IP masquerading

Configuring client devices

DHCP Configuration (IM;ACM families only)

Port; Protocol forwarding

Firewall rules

SSH TUNNELS & SDT CONNECTOR

Configuring the console server for SSH tunneled access

Setting up SSH tunneled access to network attached hosts and configuring services.

Setting up the SDT Connector client

Detailed steps for installing and configuring the SDT Connector client software.

Configuring for SSH Tunneling to Hosts

SDT Connector Client Configuration

Configuring a new gateway in the SDT Connector client

Auto-configure SDT Connector client with the user’s access privileges

Make an SDT connection through the gateway to a host

Manually adding hosts to the SDT Connector gateway

Manually adding new services to the new hosts

Select which Client application is associated with the new service

Adding a client program to be started for the new service

Dial-in configuration

SDT Connector to Management Console

SDT Connector: Telnet or SSH connect to serially attached devices

Using SDT Connector for out-of-band connection to the gateway

SDT Connector Public Key Authentication

Setting up SDT for Remote Desktop access

Enable Remote Desktop on the target Windows computer to be accessed

Configure the Remote Desktop Connection client

SDT SSH Tunnel for VNC

Using SDT to IP connect to hosts that are serially attached to the gateway

Establish a PPP connection between the host COM port and console server

Select Set up an advanced connection

Specify TCP;IP addresses

Set up SDT Serial Ports on console server

SSH Tunneling using other SSH clients (e.g. PuTTY)

Destination IP details

ALERTS, AUTO-RESPONSE & LOGGING

Configure Auto-Response

Configuring general parameters for Auto-Responses, including trigger conditions and actions.

Configure a new Auto-Response

Check Conditions

Environmental Check

Alarms and Digital Inputs

UPS;Power Supply

UPS Status

ICMP Ping

Custom Check

Trigger Actions

Send Email

Send SMS

Perform RPC Action

Run Custom Script

Resolve Actions

Configure SMTP, SMS, SNMP and;or Nagios service for alert notifications

Send Email alerts

SMTP Server

Send SMS alerts

SMS via Email Gateway

SMS via Cellular Modem

Send SNMP Trap alerts

Manager Address

Logging

Serial port logging

Network TCP and UDP port logging

Auto-Response event logging

POWER, ENVIRONMENT & DIGITAL I;O

Remote Power Control (RPC)

Managing and controlling Remote Power Control devices like PDUs and IPMI devices.

RPC connection

Enter the Username and Password

RPC access privileges and alerts

User power management

RPC status

Uninterruptible Power Supply(UPS) Control

Managed UPS connections

Select the Serial & Network > UPS Connections menu

When you select a network UPS connection

Select the action to take when UPS battery power becomes critical

Remote UPS management

Controlling UPS powered computers

UPS alerts

UPS status

Overview of Network UPS Tools (NUT)

Environmental Monitoring

Connecting the EMD and its sensors

Connecting Environmental Monitor Devices (EMDs) and their sensors to console server serial ports.

Digital I;O Output Configuration

Adding EMDs and configuring the sensors

Environmental alerts

Environmental status

Digital I;O Ports

AUTHENTICATION

Authentication Configuration

Configuring authentication methods (Local, RADIUS, TACACS+, LDAP, Kerberos).

Local authentication

TACACS authentication

RADIUS authentication

LDAP authentication

LDAP Username Attribute

Server Protocol

RADIUS;TACACS user configuration

Use Remote Groups

Remote groups with LDAP authentication

LDAP Console Server Group DN

Remote groups with TACACS+ authentication

Kerberos authentication

PAM (Pluggable Authentication Modules)

SSL Certificate

System > SSL Certificate

Generate CSR

NAGIOS INTEGRATION

Configuring Nagios distributed monitoring

Enable Nagios on the console server

Enable NRPE monitoring

Enable NSCA monitoring

Configure selected Serial Ports for Nagios monitoring

Configure selected Network Hosts for Nagios monitoring

Configure the upstream Nagios monitoring host

Advanced Distributed Monitoring Configuration

Distributed Monitoring Usage Scenarios

SYSTEM MANAGEMENT

System Administration and Reset

Procedures for rebooting or resetting the gateway to factory default settings.

Upgrade Firmware

Configure Date and Time

Configuration Backup

Remote backup

Local backup

Delayed Configuration Commit

FIPS Mode

STATUS REPORTS

Port Access and Active Users

Statistics

Support Reports

Syslog

Dashboard

Configuring the Dashboard

Configure Widgets

Creating custom widgets for the Dashboard

MANAGEMENT

Device Management

Displaying managed devices and their grouped serial, network, and power connections.

Port and Host Logs

Terminal Connection

Web Terminal to Serial Device

Power Management

TCP;UDP Port Numbers

Opengear ACM7000 Specifications

General

RS-232 ports	8
SIM card slot	Yes
USB 2.0 ports quantity	4
Number of simultaneous SIM cards	2
Certification	EN 55022:2010, CISPR 22:2008, FCC Part 15 B:2015, ICES-003 5 (2014), AS/NZS CISPR 22:2009+A1:2010, EN 61000-3-2:2006/A2:2009, EN 61000-3-3:2008 EN 55024:2010, CISPR 24:2010, EN 61000-4-2:2009, EN 61000-4-3:2006+A2:2010, EN 61000-4-4:2004+A1:2010, EN 61000-4-5:2006, EN 61000-4-6:2009, EN 61000-4-8:2010, EN 61000-4-11:2004 CE, UL 1950, TUV, C-Tick, RoHS
Mounting type	Rack mounting
Product color	Black, Red
Antenna connector type	SMA
Flash memory	32 MB
Internal memory	256 MB
Processor frequency	800 MHz
Control display unit	No
Internal memory type	DDR3
Input voltage	110 - 240 V
DC input voltage	12 V
Storage temperature (T-T)	-40 - 75 °C
Operating temperature (T-T)	-25 - 60 °C
Operating relative humidity (H-H)	5 - 90 %
Security algorithms	IPSec, SSH-2, SSL/TLS

Weight and Dimensions

Depth	120 mm
Width	130 mm
Height	35 mm
Weight	6000 g