Tripp Lite B092-016 - Page 27

27
The Services Access settings specify which services the Administrator can use over which network interface to access the
consoleserver.ItalsonominatestheenabledservicesthattheAdministratorandtheUsercanusetoconnectthroughthe
Console Server to attached serial and network connected devices.
• Thefollowinggeneralserviceaccessoptionscanbespecied:
HTTPS
This ensures the Administrator has secure browser access to all the Management Console menus on the Console
Server.ItalsoallowsappropriatelyconguredUserssecurebrowseraccesstoselectedManage menus. For
information on certificate and user client software configuration refer Chapter 9 - Authentication. By default
HTTPSisenabled,anditisrecommendedthatonlyHTTPSaccessbeusediftheConsoleServeristobe
managedoveranypublicnetwork(e.g.theInternet).
HTTP
The HTTP service allows the Administrator basic browser access to the Management Console. It is recommended
the HTTP service be disabled if the Console Server is to be remotely accessed over the Internet.
Telnet
ThisgivestheAdministratortelnetaccesstothesystemcommandlineshell(Linuxcommands).Whilethismay
besuitableforalocaldirectconnectionoveramanagementLAN,itisrecommendedthisservicebedisabledif
the Console Server is to be remotely administered. This service may also be useful for local Administrator and the
User access to selected serial consoles
SSH
This service provides secure SSH access. It is recommended you choose SSH as the protocol where the
Administrator connects to the Console Server over the Internet or any other public network. This will provide
authenticated communications between the SSH client program on the remote PC/workstation and the SSH sever
in the Console Server. For more information on SSH configuration refer Chapter 9 - Authentication.
• Therearealsoanumberofrelatedserviceoptionsthatcanbeconguredatthisstage:
SNMP
This will enable netsnmpintheConsoleServer,whichwillkeeparemotelogofallpostedinformation.SNMPis
disabledbydefault.TomodifythedefaultSNMPsettings,theAdministratormustmaketheeditsatthecommand
line as described in Chapter 15 – Advanced Configuration
TFTP/
FTP
IfaUSBashcardorinternalashisdetectedontheConsoleServer,thenenablingthisservicewillsetup
default tftp and ftpserversontheUSBash.Theseserverareusedtostorecongles,maintainaccessand
transaction logs etc. Files transferred using tftp will be stored under /var/tmp/usbdisk/tftpboot
Ping
ThisallowstheConsoleServertorespondtoincomingICMPechorequests.Pingisenabledbydefault,however
for security reasons this service should generally be disabled post initial configuration
Nagios
AccesstotheNUTUPSmonitoringandNagiosNRPEmonitoringdaemons
NUT
AccesstotheNUTUPSmonitoringandNagiosNRPEmonitoringdaemons
• Andtherearesomeserialportaccessparametersthatcanbeconguredonthismenu:
Base
TheConsoleServerusesspecicdefaultrangesfortheTCP/IPportsforthevariousaccessservicesthatUsers
andAdministratorscanusetoaccessdevicesattachedtoserialports(ascoveredinChapter 4 – Configuring
Serial Ports).TheAdministratorcanalsosetalternaterangesfortheseservices,andthesesecondaryportswill
then be used in addition to the defaults.
The default TCP/IP base port address for telnetaccessis2000,andtherangefortelnetisIPAddress:Port(2000
+serialport#)i.e.2001–2048.SoiftheAdministratorweretoset8000asasecondarybasefortelnetthen
serialport#2ontheConsoleServercanbetelnetaccessedatIPAddress:2002andatIPAddress:8002.The
defaultbaseforSSHis3000;forRawTCPis4000;andforRFC2217itis5000
RAW/
Direct
YoucanalsospecifythatserialportdevicescanbeaccessedfromnominatednetworkinterfacesusingRawTCP,
directTelnet/SSH,unauthenticatedTelnetservicesetc
• ClickApply.Asyouapplyyourservicesselections,thescreenwillbeupdatedwithaconrmationmessage:
Message Changes to configuration succeeded
Chapter 3: Initial System Configuration