Tripp Lite 0 Idades Manual

221
Chapter 15: Advanced Configuration
The pmshell help message is NOT updated with the extra control command keys that ma\
y be configured. For example, to 
configure the Ctrl+p command to open the power menu when using serial port 3, enter the foll\
owing in the console server’s 
command shell:
     config -s config.ports.port3.power=16
     killall -HUP portmanager
The first command sets the power menu command to listen for Ctrl+p (d\
ecimal 16 is the character code sent when you press 
Ctrl+p in the...

222
Chapter 15: Advanced Configuration
pmchat
The pmchat command acts similar to the standard chat command, but all serial port access is directed via the portmanager.
Example: To run a chat script via the portmanager:
# pmchat -v -f /etc/config/scripts/port08.chat < /dev/port08 
For more information on using chat (and pmchat) you should consult the UNIX man pages:
http://techpubs.sgi.com/library/tpl/cgibin/getdoc.cgi?coll=linux&db=man&\
fname=/usr/share/catman/man8/chat.8.html
pmusers
The pmusers...

223
Chapter 15: Advanced Configuration
    # pmusers --disconnect -n 5 
    Disconnect all users from port 5 (BranchRouter01)? (y/n) 
    y 
    2 sessions were disconnected
    # pmusers --disconnect -u robertw -u pchunt -n 4 -n 6 
    Disconnect users robertw, pchunt from ports 4, 6? (y/n) 
    y 
    10 sessions were disconnected
    # pmusers --disconnect -u tester --no-prompt 
    No sessions were disconnected
portmanager daemon
There is normally no need to stop and restart the daemon.  To restart...

224
Chapter 15: Advanced Configuration
• Here is a more complex script which reads from configuration to displa\
y the port label if available and denies access to the 
root user:

#!/bin/sh
PORT="$1"
USER="$2"
LABEL=$(config -g config.ports.port$PORT.label | cut -f2- -d' ')
if [ "$USER" == "root" ]; then
    echo "Permission denied for Super User"
   exit 1
fi
if [  -z  "$LABEL" ]; then
echo "Welcome $USER, you are connected to Port $PORT"...

225
Chapter 15: Advanced Configuration
15.4  IP- Filtering
The Console Server uses the iptables utility to provide a stateful firewall of LAN traffic. By default r\
ules are automatically 
inserted to allow access to enabled services, and serial port access via enabled protocols. The commands which add these 
rules are contained in configuration files:
/etc/config/fw.rules
This is an executable shell script which is run whenever the LAN interfa\
ce is brought up and whenever modifications are made 
to...

226
Chapter 15: Advanced Configuration
15.5.3 Enable SNMP service
Note: For firmware versions 3.10.2 and above, a new SNMP status and trap MIB\
S were created to provide more and better 
structured SNMP status and traps from console servers. There is an option in the SNMP menu to Use Legacy Notifications 
for the SNMP traps. In setting this option, the console server will send\
 SNMP traps that are compatible with those sent from 
older firmware versions before new MIBS were added. This ensures that the...

227
Chapter 15: Advanced Configuration
• Complete the Location and Contact fields.  The Location field should describe the physical location o\
f the Console Server 
and will be used in response to requests for the SNMPv2-MIB::sysLocation\
.0 of the device.  The Contact field refers to the 
person responsible for the Console Server such as the System Administrat\
or and will be used in response to requests as 
follows: SNMPv2-MIB::sysContact.0.
• Enter the Read-Only Community and Read-Write Community....

228
Chapter 15: Advanced Configuration
• Using the snmpwalk and snmpget commands, the status information can be retrieved from any console serv\
er. For 
example:
 snmpwalk -Oa -v1 -M .:/usr/share/snmp/mibs -c public b095 STATUS-MIB::ogStatus
 snmpget -Oa -v1 -M .:/usr/share/snmp/mibs -c public b095 OG-STATUSMIB::
 ogSerialPortStatusSpeed.2
noauth 
snmpwalk -Oa –v3 –l noAuthNoPriv –u readonlyusername -M .:/usr/\
share/snmp/mibs b095 STATUS-MIB::Status
auth 
snmpwalk -Oa –v3 –l authNoPriv –u...

229
Chapter 15: Advanced Configuration
15.5.4  /etc/config/snmpd.conf
The net-snmpd is an extensible SNMP which includes built-in support for a wide range \
of MIB information modules, and can 
be extended using dynamically loaded modules, external scripts and comma\
nds. snmpd when enabled should run with a 
default configuration. Its behavior can be customized via the options \
in /etc/config/snmpd.conf. 
Note: If the SNMP Service is enabled through the Web Based Management Console this configuration...

230
Chapter 15: Advanced Configuration
To set the SNMP Manager v3 Auth. Protocol and password fields: 
  config –set="config.system.snmp.authprotocol3=SHA" or 
  config --set="config.system.snmp.authprotocol3=MD5"
  config --set="config.system.snmp.authpassword3=password 1" 
To set the SNMP Manager v3 Privacy Protocol and password fields: 
  config –set="config.system.snmp.privprotocol3=AES" or
  config –set="config.system.snmp.privprotocol3=DES"
  config...