lantronix slc 8000 lcd panel default password quotation
To get access to your Lantronix SecureLinux Console Manager (SLC), you need the IP of your device, the username and password. You"ll find such information in the Manual of your Lantronix SecureLinux Console Manager (SLC) router. But if you do not have the manual for your router or you do not want to read the whole manual to find the default login information then you can use the quick guide below. To get to the router login page it"s necessary that you are connected to the router.
Try different ID/password combinations that are widely used by Lantronix that you"ll find below. In this list are the most popular default username and password combinations used by Lantronix. Sometimes the username and password doesn"t work that we mentioned in the top of this guide. Then you can try these username/password combinations below to get access to your Lantronix SecureLinux Console Manager (SLC) wireless router.
All you need to do is to reset your SecureLinux Console Manager (SLC) modem. This can be done easily by clicking on the reset button at the back or at the bottom of your router. If you hold down this small button for approximately 20 seconds, (you may have to use a toothpick), then your modem will get restored to the factory settings. What you need to keep in mind is that when you reset your modem, you will lose your connection online. It is therefore better to take an expert"s assistance in this regard. Note: If you have not enough information, it is obviously recommended that you should get help from a person who has all the knowledge about this topic.
Date Rev. Comments (continued) November 2019 Updated the following: Starting with release 8.0.0.0, added support for CLI commands issued from ConsoleFlow in bulk Starting with release 8.1.0.0, added VPN interoperability and configuration. Starting with release 8.3.0.0, newly manufactured factory default SLC units use ...
Modular Expansion for I/O Module Bays ____________________________________ 40 Connecting to Network Ports _____________________________________________41 Connecting Terminals ___________________________________________________ 41 AC Input _____________________________________________________________ 42 Modem Installation _____________________________________________________43 Battery Replacement ___________________________________________________ 46 4: Quick Setup Recommendations ________________________________________________________ 50 Method #1 Using the Front Panel Display _______________________________________51 Front Panel LCD Display and Keypads _____________________________________ 51 Navigating ____________________________________________________________ 51 Entering the Settings ___________________________________________________ 53...
Secure Lantronix Network __________________________________________________ 127 Browser Issues _______________________________________________________ 130 Troubleshooting Browser Issues _____________________________________________131 Web SSH/Telnet Copy and Paste ________________________________________132 Secure Lantronix Network Commands _____________________________________ 133 Date and Time ___________________________________________________________133 Date and Time Commands ______________________________________________135 Web Server _____________________________________________________________ 135 Admin Web Commands ________________________________________________ 137...
Audit Log _______________________________________________________________ 304 Audit Log Commands __________________________________________________ 305 Email Log ______________________________________________________________ 305 Logging Commands ___________________________________________________305 Diagnostics _____________________________________________________________ 306 Diagnostic Commands _________________________________________________ 309 Status/Reports __________________________________________________________309 View Report _________________________________________________________309 Status Commands ____________________________________________________311 Emailing Logs and Reports _________________________________________________ 311 Events _________________________________________________________________314 Events Commands ____________________________________________________315 LCD/Keypad ____________________________________________________________ 316 Administrative LCD/Keypad Commands ___________________________________ 317 Banners ________________________________________________________________317...
Rack _______________________________________________________________ 418 Port Connections _____________________________________________________418 Appendix C: Adapters and Pinouts Appendix D: Protocol Glossary Appendix E: Compliance Information RoHS, REACH and WEEE Compliance Statement ______________________________ 425 SLC™ 8000 Advanced Console Manager User Guide...
Figure 7-7 SSH or Telnet CLI Session _______________________________________________ 129 Figure 7-8 Disabled Port Number Popup Window ______________________________________130 Figure 7-9 Services > Secure Lantronix Network > Search Options_________________________130 Figure 7-10 Services > Date & Time ________________________________________________ 134 Figure 7-11 Services > Web Server ________________________________________________ 136...
Figure 13-11 Emailed Log or Report_________________________________________________ 312 Figure 13-12 About SLC __________________________________________________________313 Figure 13-13 Maintenance > Events _________________________________________________ 314 Figure 13-14 Maintenance > LCD/Keypad ____________________________________________316 Figure 13-15 Maintenance > Banners________________________________________________ 317 Figure 14-1 SLC - Console Manager Configuration _____________________________________ 319 Figure 14-2 Remote User Connected to a SUN Server via the SLC unit _____________________319 Figure 14-3 Dial-in (Text Mode) to a Remote Device ____________________________________ 321 Figure 14-4 Local Serial Connection to Network Device via Telnet _________________________322...
3: Installation Battery Replacement Instructions Warning: RISK OF ELECTRICAL SHOCKS; DISCONNECT ALL POWER AND PHONE LINE BEFORE SERVICING! You will need a medium size Phillips screw driver. 1. Turn off power to the SLC 8000 advanced console manager. 2. Locate the battery/modem door on the top of the SLC unit. 3.
The host name becomes the prompt in the command line interface. Domain If desired, specify a domain name (for example, support.lantronix.com). The domain name is used for host name resolution within the SLC unit. For example, if abcd is specified for the SMTP server, and mydomain.com is specified for the domain, if abcd cannot be resolved, the SLC 8000 advanced console manager attempts to resolve abcd.mydomain.com for the SMTP server.
6: Basic Parameters IPv6 Address Address of the port in IPv6 format. (Static) Note: The SLC 8000 advanced console manager supports IPv6 connections for the following services: the web, SSH, Telnet, remote syslog, SNMP, NTP, LDAP, Kerberos, RADIUS, TACACS+, connections to device ports, and diagnostic ping. IPv6 addresses are written as 8 sets of 4-digit hexadecimal numbers separated by colons.
6: Basic Parameters Note: There is no way to enable or disable individual filters. To enable IP filters: 1. Enter the following: Enable IP Filter Select the Enable IP Filter checkbox to enable all filters, or clear the checkbox to disable all filters. Disabled by default. Packets Dropped Displays the number of data packets that the filter ignored (did not respond to).
6: Basic Parameters ESP Encryption The type of encryption, 3DES , AES, AES192 or AES256, used for encrypting the data sent through the tunnel. Any can be selected if the two sides can negotiate which type of encryption to use. Note: If ESP Encryption, Authentication and DH Group are set to Any, default cipher suite(s) will be used.
6: Basic Parameters Certificate Authority for A certificate can be uploaded to the SLC unit for peer authentication. The Local Peer certificate for the local peer is used to authenticate any remote peer to the SLC, and contains a Certificate Authority file, a public certificate file, and a Certificate File for Local private key file.
6: Basic Parameters XAUTH Client If this is enabled, the SLC unit will send authentication credentials to the remote host if they are requested. XAUTH, or Extended Authentication, can be used as an additional security measure on top of the Pre-Shared Key or RSA Public Key.
6: Basic Parameters Custom ipsec.conf A custom ipsec.conf file can be uploaded to the SLC. This file can include Configuration any of the strongSwan options which are not configurable from the UIs. The ipsec.conf file should include one section which conn
6: Basic Parameters integrity of the cryptographic module, FIPS mode will be disabled and the SLC unit will be rebooted into non-FIPS mode. When the SLC unit is running in FIPS mode, the following protocols are supported: TLS 1.0, TLS 1.1, TLS 1.2, and SSH v2.
6: Basic Parameters TCP Connect Starts the TCP Connect responder on the port configured in TCP Port to reply to Responder TCP connect requests. The SLC TCP Connect responder supports one TCP connect sender. When the TCP Connect responder is enabled, the SLC will verify that the responder TCP port is not being used by any other SLC processes.
6: Basic Parameters 3. Modify the probe settings: Probe Type Select from one of the available probe types: DNS Lookup - Performs a DNS lookup on the hostname specified in the Destination Host using the Name Server. By default port 53 is always used as the Destination Port.
Enables or disables the Simple Network Management Protocol (SNMP) agent, which allows read-only access to the system. Disabled by default. Top Level MIB Click the link to access the top level MIB file for all Lantronix products. (link) SLC MIB (link) Click the link to access the SLC MIB definition file for SLC 8000 advanced console managers and advanced console managers.
The locality or city for the custom certificate, e.g. "Irvine". Must be at least 2 characters long. Organization Name The organization or company name for the custom certificate, e.g. "Lantronix". Must be at least 2 characters long. Organization Unit The unit name for the custom certificate, e.g. "Engineering" or "Sales". Must be at Name least 2 characters long.
7: Services run on the SLC. When the client starts, it will request all probes and scripts that are defined to run on the SLC. The status of the probes and scripts is displayed in the Status of Client. When a script run completes (either for a single manual run or a recurring scheduled run), the status of the script will be retained on the SLC until a new script is initiated from ConsoleFlow and the SLC determines that the maximum number of ConsoleFlow scripts per SLC has been reached;...
Long description that is displayed in the ConsoleFlow server UI. Device ID The unique device identifier. The ID is 32 alphanumeric characters. The ID may be provisioned using Lantronix Provisioning Manager (LPM). Contact Lantronix Tech Support for more information on LPM. View-only field. Displays the serial number.
9: Device Ports Detect Name Tokens If Detect Port Name is enabled, the SLC will attempt to extract a hostname or other identifier from the device prompt, to use as the device port name. The SLC will extract any name between either the start of a line sent from the device up until one of the tokens, or any part of a prompt that does not include the tokens, as the device port name.
9: Device Ports Byte Threshold The number of bytes of data the port will receive before the SLC unit will capture log data and initiate the selected actions. The default is 100 bytes. In most cases, the console port of your device does not send any data unless there is an alarm condition.
9: Device Ports 5. Enter the following fields. State Indicates whether the internal modem is enabled. When enabling, set the modem to Disabled, Dial-in, Dial-out, and Dial-back. Disabled by default. Mode The format in which the data flows back and forth. With Text selected, the SLC unit assumes that the modem will be used for ...
9: Device Ports Dial-back Number Users with Dial-back can dial into the SLC unit and enter their login and password. Once the SLC unit authenticates them, the modem hangs up and dials them back . Select the phone number the modem dials back on: a fixed number or a number associated with their login.
Services Right to enable and disable system logging, SSH and Telnet logins, SNMP, and SMTP. Secure Lantronix Right to view and manage secure Lantronix units (e.g., Spider, or SLC devices) on Network the local subnet. Date/Time Right to set the date and time.
9: Device Ports Scripts that are scheduled to start at a specific time will be restarted when the SLC is rebooted if the script is scheduled to run forever or if the stop time has not expired. After the SLC has booted, there will be a short delay after launching each script before starting ...
7 login: Logging in..sysadmin sysadmin Password: PASS Welcome to the Secure Lantronix Console Manager Model Number: SLC 48 For a list of commands, type "help". [SLC251glenn]> show network port 1 host show network port 1 host...
[slc247glenn]> connect script monport deviceport 7 login: Logging in..sysadmin sysadmin Password: PASS Welcome to the Secure Lantronix Console Manager Model Number: SLC 48 For a list of commands, type "help". [SLC251glenn]> show network port 1 host show network port 1 host...
9: Device Ports show portcounter deviceport 7 show portcounter deviceport 7 Device Port: 7 Seconds since zeroed: 1454136 Bytes input: 0 Bytes output: 0 Framing errors: 0 Flow control errors: 0 Overrun errors: 0 Parity errors: 0 [SLC251glenn]> Port Counter Monitor Script Ending..________________________________________________________________________ Login Out..
9: Device Ports Expect Custom Script - SLC Device Port Session An example of an Expect Custom Script that interacts with a SLC Device Port (in this example a ServerTech PDU is connected to a Device Port): #! expect # Script to get the load of a ServerTech PDU outlet set pduPrompt ">"...
9: Device Ports expect "Password:" send "admn\n" # Wait for the first prompt set loggedIn false while {! $loggedIn} { expect { timeout {myprint "Timeout waiting to login"; abortSession 3} "*CDU: " {set loggedIn true} # Detect the prompt exp_send "\n" expect "are:\r\n"...
9: Device Ports proc myprint {str} { send_user -- "$str\n" proc abortSession {err} { send_user "Error $err. Terminating session.\n" exit $err if {$argc < 2} { myprint "Usage: script_md_cisco.exp
9: Device Ports expect { "*assword: " { send "$enablePassword\r" } ">" { set loggedIn true; set passwordPrompt true; send "enable\r" "#" { set loggedIn true; set execMode true } "Error:*\r\n" { send_user $expect_out(0,string); abortSession 5 } timeout {set cnt [expr {$cnt + 1}] } myprint "Logged in."...
9: Device Ports print("RADIUS command returned: " + s2.split("\\n")[0]) proc.stdin.close() proc.terminate() proc.wait() sys.exit(1) print("RADIUS settings updated and enabled.") proc.stdin.close() proc.terminate() proc.wait() sys.exit(0) Python Custom Script - SLC CLI Session An example of a Python Custom Script that uses the Pexpect module to interact with the CLI session and the device ports to detect the prompt on any devices connected to the SLC, and set the device port name to be the same as the device prompt: #! python...
9: Device Ports print("Timeout waiting to login.") p.terminate(True) sys.exit(1) elif i == 1: # EOF print("Session unexpectedly terminated.") p.terminate(True) sys.exit(1) elif i == 2: # SLC8000 model number model = p.match.group(1) numPorts = int(model) elif i == 3: # SLB882 model number numPorts = 8 elif i == 4: # prompt loggedIn = True...
9: Device Ports continue print("Detected prompt", devPrompt, ".") # Strip characters not allowed in DP names devPromptStrip = re.sub("[^0-9A-Za-z\._\-]", "", devPrompt) devPromptComplete = devPromptStrip + "-" + str(devicePort) pList.append(devPromptComplete) p.terminate(True) p.wait() devicePort = devicePort + 1 # end of while devicePort <= numPorts: # Connect to the SLC CLI and set the device port names p=pexpect.spawn("clisession -U sysadmin") loggedIn = False...
9: Device Ports time.sleep(.500) p.wait() print("Script completed.") sys.exit(0) Tcl Custom Script - SLC CLI Session An example of a Tcl Custom Script that interacts with a CLI session: #! tcl # Script to get the current internal temperature of the SLC # Accepts one optional command line parameter for location set slcTemp "unknown"...
12: User Authentication Enable for Dial-back Select to grant a local user dial-back access. Users with dial-back access can dial into the SLC unit and enter their login and password. Once the SLC 8000 advanced console manager authenticates them, the modem hangs up and dials them back.
Services Right to enable and disable system logging, SSH and Telnet logins, SNMP, and SMTP. Secure Lantronix Right to view and manage Secure Lantronix units (e.g., Spider, or SLC units) on Network the local subnet. Date/Time Right to set the date and time.
Services Right to enable and disable system logging, SSH and Telnet logins, SNMP, and SMTP. Secure Lantronix Right to view and manage secure Lantronix units (e.g., Spider, or SLC units) on the Network local subnet. Date/Time Right to set the date and time.
Attribute use to search for a name (ie, "msmith") or a Distinguished Name (ie, "uid=msmith,ou=People,dc=lantronix,dc=com"). Select either Name or DN as appropriate for the LDAP server. If nothing is specified for the group membership attribute, the SLC unit will use "memberUID" for name and "uniqueMember" for DN.
12: User Authentication Encrypt Messages Select Start TLS or SSL to encrypt messages between the SLC unit and the LDAP server. If Start TLS is selected, the port will automatically be set to 389 and the StartTLS extension will be used to initiate a secure connection; if SSL is selected, the port will automatically be set to 636 and a SSL tunnel will be used for LDAP communication.
Services Right to enable and disable system logging, SSH and Telnet logins, SNMP, and SMTP. Secure Lantronix Right to view and manage Secure Lantronix units (e.g., Spider, or SLC units) on Network the local subnet. Date/Time Right to set the date and time.
12: User Authentication KDC Port Port on the KDC listening for requests. Enter an integer with a maximum value of 65535. The default is 88. Use LDAP Indicate whether Kerberos should rely on LDAP to look up user IDs and Group IDs. This setting is disabled by default. Note: Make sure to configure LDAP if you select this option.
12: User Authentication Authentication The type of service used to pass the authentication tokens (e.g., login and Service password) between the SLC and the TACACS+ server. Options are: ASCII Login (login and password are transmitted in clear, unencrypted text), PPP/PAP (login and password are transmitted in clear, unencrypted text via a PAP protocol packet), and PPP/CHAP (the TACACS+ server sends a challenge that consists of a session ID and an arbitrary challenge string, and the user name and password...
Services Right to enable and disable system logging, SSH and Telnet logins, SNMP, and SMTP. Secure Lantronix Right to view and manage Secure Lantronix units (e.g., Spider, or SLC units) on Network the local subnet. Date/Time Right to set the date and time.
14: Application Examples [SLC]> show deviceport port 2 ___Current Device Port Settings________________________________________________ Number: 2 Name: Port-2 Modem Settings-------------Data Settings----------IP Settings------- Modem State: disabled Baud Rate: 9600 Telnet: disabled Modem Mode: text Data Bits: 8 Telnet Port: 2002 Timeout Logins: disabled Stop Bits: 1 SSH: disabled Local IP: negotiate...
15: Command Reference admin config rename|delete Syntax admin config delete
15: Command Reference
15: Command Reference admin firmware bootcount Syntax admin firmware bootcount <0|1> Description Configures bootcount parameter that control how many times the SLC has failed to boot. If this value reaches Boot Limit, the SLC will switch to the alternate boot bank. The SLC will switch to the alternate boot bank only once.
15: Command Reference admin firmware watchdog Syntax admin firmware watchdog
15: Command Reference Description Sets the FTP server password and prevent it from being echoed. admin ftp server Syntax admin ftp server
15: Command Reference admin keypad show Syntax admin keypad show Description Displays keypad settings. admin lcd reset Syntax admin lcd reset Description Restarts the program that controls the LCD. admin lcd default Syntax admin lcd default Description Restores the LCD screens to their factory default settings. admin lcd screens Syntax admin lcd screens...
15: Command Reference admin lcd line1 Syntax admin lcd line1 <1-24 Chars> line2 <1-24 Chars> Description Sets the strings displayed on the LCD user string screen. admin lcd scrolling Syntax admin lcd scrolling
15: Command Reference admin quicksetup Syntax admin quicksetup Description Runs the quick setup script. admin reboot Syntax admin reboot Description Immediately terminates all connections and reboots the SLC 8000 advanced console manager. The front panel LCD displays the “Rebooting the SLC” message, and the normal boot sequence occurs.
Description Restarts the web server. Warning: The following admin chip commands should only be used under the direction of Lantronix Technical Support. admin chip resetmodem Description Resets the internal modem chip in key system chips. Syntax admin chip resetmodem...
15: Command Reference Note: User Permissions Commands (on page 351) for information on groups and user rights. Description Configures the SLC 8000 advanced console manager to use LDAP to authenticate users who log in via the Web, SSH, Telnet, or the console port. set ldap bindpassword Description Set the LDAP bind password.
15: Command Reference Description Sets whether a complex login password is required. Complex passwords require at least one uppercase character, one lowercase character, one digit, and one non-alphanumeric character. set localusers state Syntax set localusers state
15: Command Reference Description Sets a login password for the local user. set localusers periodlockout Syntax set localusers periodlockout
15: Command Reference Description Sets local users. to console only admin setting. If enabled, the admin user can only log into the SLC via the console, and will be prevented from logging in via the web, SSH or Telnet. show localusers Syntax show localusers [display
15: Command Reference dialbacknumber
15: Command Reference connect global outgoingtimeout Syntax connect global outgoingtimeout
15: Command Reference diag internals Syntax diag internals [email
15: Command Reference Description Runs an iPerf server or client to measure network throughput. You can optionally email the output. The SLC uses iPerf version 3.X, which is incompatible with older versions (2.x). diag lookup Syntax diag lookup
15: Command Reference set network dnsipv4prec Syntax set network dnsipv4prec
15: Command Reference Description Set default & fail-over gateways (the fail-over gateway is used if an IP address usually accessible through the default gateway fails to return 1 or more pings), and configure settings for supported fail-over devices. set network host Syntax set network host
15: Command Reference Description Displays DNS settings. show network gateway Syntax show network gateway Description Displays gateway settings. show network host Syntax show network host Description Displays the network host name of the SLC 8000 advanced console manager. show network port Syntax show network port <1|2>...
15: Command Reference set sshkey server import type Syntax set sshkey server import type
15: Command Reference set usb storage mount Syntax set usb storage mount
Appendix D: Protocol Glossary NTP (Network Time Protocol) A protocol used to synchronize time on networked computers and equipment. PAP (Password Authentication Protocol) A method of user authentication in which the username and password are transmitted over a network and compared to a table of name-password pairs. PPP (Point-to-Point Protocol) A protocol for creating and running IP and other network protocols over a serial link.
AC Input _____________________________________________________________ 40 Modem Installation _____________________________________________________ 41 Battery Replacement ___________________________________________________ 44 4: Quick Setup Recommendations ________________________________________________________ 48 IP Address _______________________________________________________________ 48 Method #1 Using the Front Panel Display _______________________________________ 49 Front Panel LCD Display and Keypads _____________________________________ 49 Navigating ____________________________________________________________ 49 Entering the Settings ___________________________________________________ 51 Restoring Factory Defaults _______________________________________________52 Method #2 Quick Setup on the Web Page ______________________________________ 52...
SMB/CIFS Share _____________________________________________________ 100 NFS and SMB/CIFS Commands _________________________________________ 100 Secure Lantronix Network __________________________________________________ 101 Browser Issues _______________________________________________________ 105 Secure Lantronix Network Commands _____________________________________ 107 Date and Time ___________________________________________________________ 107 Date and Time Commands ______________________________________________109 Web Server _____________________________________________________________ 110 SLC™ 8000 Advanced Console Manager User Guide...
10: Remote Power Managers Devices - RPMs _________________________________________________________ 193 RPMs - Add Device ___________________________________________________ 196 RPMs - Manage Device ___________________________________________________ 199 RPMs - Outlets __________________________________________________________ 202 RPM Shutdown Procedure _________________________________________________ 203 Optimizing and Troubleshooting RPM Behavior _________________________________ 205 RPM Commands _________________________________________________________ 206 11: Connections Typical Setup Scenarios for the SLC Unit ______________________________________ 209 Terminal Server ______________________________________________________ 209...
SLC Network Commands __________________________________________________ 373 SSH Key Commands ____________________________________________________ 374 Status Commands ________________________________________________________ 377 System Log Commands ___________________________________________________ 378 USB Access Commands ___________________________________________________ 379 USB Device Commands ___________________________________________________ 379 USB Storage Commands __________________________________________________ 380 USB Modem Commands __________________________________________________ 382 VPN Commands _________________________________________________________ 383 Appendix A: Security Considerations Security Practice _________________________________________________________ 387 Factors Affecting Security __________________________________________________ 387...
Figure 7-7 SSH or Telnet CLI Session _______________________________________________ 104 Figure 7-8 Disabled Port Number Popup Window ______________________________________ 105 Figure 7-9 Services > Secure Lantronix Network > Search Options_________________________106 Figure 7-10 Services > Date & Time ________________________________________________ 108 Figure 7-11 Services > Web Server ________________________________________________ 110...
Figure 14-4 Local Serial Connection to Network Device via Telnet _________________________306 Figure C-1 RJ45. Receptacle to DB25M DCE Adapter for the SLC unit (PN 200.2066A) ________ 390 Figure C-2 RJ45 Receptacle to DB25F DCE Adapter for the SLC unit (PN 200.2067A) _________ 391 Figure C-3 RJ45 Receptacle to DB9M DCE Adapter for the SLC unit (PN 200.2069A)__________ 391 Figure C-4 RJ45 Receptacle to DB9F DCE Adapter for the SLC unit (PN 200.2070A) __________ 392 Figure C-5 RJ45 Receptacle to DB25M DTE Adapter (PN 200.2073) _______________________ 392...
PHONE LINE BEFORE SERVICING! You will need a medium size Phillips screw driver. 1. Turn off power to the SLC 8000 advanced console manager. 2. Locate the battery/modem door on the top of the SLC unit. 3. Carefully unscrew and lift the door off with the screw driver.
Enabling IP forwarding is required if you enable Network Address Translation (NAT) for any device port modem or USB/ISDN modem. IP forwarding allows a user accessing the SLC 8000 advanced console manager over a modem to access the network connected to Eth1 or Eth2.
To view the host name of the SLC 8000 advanced console manager: show network host To view bonding settings and status of the SLC 8000 advanced console manager: show network bonding To view IPv6 settings of the SLC 8000 advanced console manager: show network ipv6 SLC™...
Local Id How the SLC 8000 advanced console manager should be identified for authentication. The Id is used by the remote host to select the proper credentials for communicating with the SLC advanced console manager.
and shares its public key with the remote host. The RSA Public Key for the SLC 8000 advanced console manager (which has 2192 bits) can be viewed at either the web or CLI. For Pre-Shared Key, each host enters the same passphrase to be used ...
SLC advanced console manager side of the VPN tunnel. XAUTH Client If this is enabled, the SLC 8000 advanced console manager will send authentication credentials to the remote host if they are requested. XAUTH, or Extended Authentication, can be used as an additional security measure on top of the Pre-Shared Key or RSA Public Key.
6: Basic Parameters To enable FIPS: Note: The SSH client keyboard-interactive authentication type is not supported while the SLC unit is in FIPS mode. 1. Check the Enable FIPS Mode check box on the Networks > Security page. 2. Click Apply. The SLC unit will need to be rebooted to initiate FIPS mode. Once the SLC module is running in FIPS mode, the Security page, will display all processes that are running in FIPS mode.
Top Level MIB Click the link to access the top level MIB file for all Lantronix products. SLC MIB Click the link to access the SLC MIB definition file for SLC 8000 advanced console managers and advanced console managers. Enable v1/v2c If checked, SNMP version 1 and version 2 (which use the Read-Only and Read-Write Communities) are enabled.
7: Services 2. Enter the following fields: Timeout Select No to disable Timeout. Select Yes, minutes (5-120) to enable timeout. Enter the number of minutes (must be between 30 and 120 minutes) after which the SLC web session times out. The default is 5. Note: If a session times out, refresh the browser page and login to a new web session.
The locality or city for the custom certificate, e.g. "Irvine". Must be at least 2 characters long. Organization Name The organization or company name for the custom certificate, e.g. "Lantronix". Must be at least 2 characters long. Organization Unit The unit name for the custom certificate, e.g. "Engineering" or "Sales". Must be at Name least 2 characters long.
Select to enable Network Address Translation (NAT) for dial-in and dial-out PPP connections on a per modem (device port or USB port) basis. Users dialing into the SLC 8000 advanced console manager access the network connected to Eth1 and/or Eth2.
8: Device Ports Byte Threshold The number of bytes of data the port will receive before the SLC unit will capture log data and initiate the selected actions. The default is 100 bytes. In most cases, the console port of your device does not send any data unless there is an alarm condition.
8: Device Ports 5. Enter the following fields. State Indicates whether the internal is enabled. When enabling, set the modem to Disabled, Dial-in, Dial-out, and Dial-back. Disabled by default. Mode The format in which the data flows back and forth. With Text selected, the SLC unit assumes that the modem will be used for ...
8: Device Ports Dial-back Number Users with Dial-back can dial into the SLC unit and enter their login and password. Once the SLC unit authenticates them, the modem hangs up and dials them back . Select the phone number the modem dials back on: a fixed number or a number associated with their login.
[slc247glenn]> connect script monport deviceport 7 login: Logging in..sysadmin sysadmin Password: PASS Welcome to the Secure Lantronix Console Manager Model Number: SLC 48 For a list of commands, type "help". [SLC251glenn]> show network port 1 host show network port 1 host...
User ID for authentication when dialing out to a remote system, or when a remote system requests authentication from the SLC 8000 unit when it dials in. May have up to 32 characters. This ID is used for authenticating the SLC 8000 advanced console manager during the dial-out portion of a dial-back (including CBCP server) and dial-on-demand.
Modem Timeout Timeout for dial-in and dial-on-demand PPP connections. Select Yes (default) for the SLC 8000 advanced console manager to terminate the connection if no traffic is received during the configured idle time. Enter a value of from 1 to 9999 seconds.
10: Remote Power Managers Description Set RPM administrative password. show RPM Syntax show rpm [type
Trigger Select the condition that will trigger a connection. Options include: Connect now: Connects immediately, or if you reboot the SLC 8000 advanced console manager, immediately on reboot. Connect at date/time: Connects at a specified date and time. Use the drop-down ...
Enable for Dial-back Select to grant a local user dial-back access. Users with dial-back access can dial into the SLC unit and enter their login and password. Once the SLC 8000 advanced console manager authenticates them, the modem hangs up and dials them back.
Services Right to enable and disable system logging, SSH and Telnet logins, SNMP, and SMTP. Secure Lantronix Right to view and manage Secure Lantronix units (e.g., Spider, or SLC units) on Network the local subnet. Date/Time Right to set the date and time.
NIS here, it automatically displays at the end of the order of precedence on the User Authentication page. NIS Domain The NIS domain of the SLC 8000 advanced console manager must be the same as the NIS domain of the NIS server. Broadcast for NIS...
Services Right to enable and disable system logging, SSH and Telnet logins, SNMP, and SMTP. Secure Lantronix Right to view and manage secure Lantronix units (e.g., Spider, or SLC units) on the Network local subnet. Date/Time Right to set the date and time.
$login the current login. For example, if the Bind Name is , and user uid=$login,ou=People,dc=lantronix,dc=com roberts logs into the SLC 8000 advanced console manager, LDAP will bind with and the password uid=roberts,ou=People,dc=lantronix,dc=com entered by roberts. User Login Attribute The attribute used by the LDAP server for user logins. If nothing is specified for the user filter, the SLC unit will use "uid".
Select to grant a user dial-back access. Users with dial-back access can dial into the SLC unit and enter their login and password. Once the SLC 8000 advanced console manager authenticates them, the modem hangs up and dials them back.
Services Right to enable and disable system logging, SSH and Telnet logins, SNMP, and SMTP. Secure Lantronix Right to view and manage secure Lantronix units (e.g., Spider, or SLC devices) on Network the local subnet. Date/Time Right to set the date and time.
Server #2 Port Number of the TCP port on the RADIUS server used for the RADIUS service. If you do not specify an optional port, the SLC 8000 advanced console manager uses the default RADIUS port (1812). Server #2 Secret Text that serves as a shared secret between a RADIUS client and the server (SLC unit).
VENDOR Lantronix 244 BEGIN-VENDOR Lantronix ATTRIBUTE Lantronix-User-Attributes 1 string END-VENDOR Lantronix Once this is complete, the users file can be updated to include the Lantronix VSA for any user: myuser Auth-Type := Local, User-Password == "myuser_pwd" Reply-Message = "Hello, %u", Lantronix-User-Attributes = "data 1-4 listen 1-6 clear 1-4...
If custom menus have been created, you can assign a default custom menu to RADIUS users. Escape Sequence A single character or a two-character sequence that causes the SLC 8000 advanced console manager to leave direct (interactive) mode. (To leave listen mode, press any key.) A suggested value is Esc+A (escape key, then uppercase "A"...
Services Right to enable and disable system logging, SSH and Telnet logins, SNMP, and SMTP. Secure Lantronix Right to view and manage secure Lantronix units (e.g.,Spider, or SLC units) on the Network local subnet. Date/Time Right to set the date and time.
Select to grant a user Dial-back access. Users with dial-back access can dial into the SLC unit and enter their login and password. Once the SLC 8000 advanced console manager authenticates them, the modem hangs up and dials them back. Disabled by default.
Services Right to enable and disable system logging, SSH and Telnet logins, SNMP, and SMTP. Secure Lantronix Right to view and manage secure Lantronix units (e.g., Spider, or SLC units) on the Network local subnet. Date/Time Right to set the date and time.
Services Right to enable and disable system logging, SSH and Telnet logins, SNMP, and SMTP. Secure Lantronix Right to view and manage Secure Lantronix units (e.g., Spider, or SLC units) on Network the local subnet. Date/Time Right to set the date and time.
12: User Authentication [SLC]> show menu menu1 ___Custom User Menus___________________________________________________________ Menu: menu1 Title: Menu1 Title Show Nicknames: enabled Redisplay Menu: disabled Command 1: connect direct deviceport 1 Nickname 1: connect Port-1 Command 2: connect direct deviceport 2 Nickname 2: connect Port-2 Command 3: showmenu menu2 Nickname...
12: User Authentication Welcome to the SLC-Console Server Model Number: SLC32 For a list of commands, type "help". [Enter 1-4]> help Menu1 Title ------------------------------------------------------------------------ 1) connect Port-1 3) menu2 2) connect Port-2 4) log off [Enter 1-4]> 3 Executing: showmenu menu2 [Enter 1-5]>...
–Device Ports dt – Date/Time –USB Port/SD Card ra - Remote Authentication To restore a saved configuration to the SLC 8000 advanced console manager: admin config restore
13: Maintenance To save the current SLC configuration to a selected location: admin config save
13: Maintenance Host Lookup Select to verify that the SLC 8000 advanced console manager can resolve the host name into an IP address (if DNS is enabled). If selected, also enter a host name in the corresponding Hostname field, Ping Select to verify that the host is up and running.
14: Application Examples [SLC]> show deviceport port 2 ___Current Device Port Settings________________________________________________ Number: 2 Name: Port-2 Modem Settings-------------Data Settings----------IP Settings------- Modem State: disabled Baud Rate: 9600 Telnet: disabled Modem Mode: text Data Bits: 8 Telnet Port: 2002 Timeout Logins: disabled Stop Bits: 1 SSH: disabled Local IP: negotiate...
15: Command Reference admin config rename|delete Syntax admin config delete
Date/Time Local Users Remote Authentication Device Ports USB Port/SD Card Description Restores a saved configuration to the SLC 8000 advanced console manager. admin config save Syntax admin config save
15: Command Reference admin firmware bootcount Syntax admin firmware bootcount <0|1> Description Configures bootcount parameterse that control how many times the SLC has failed to boot. If this value reaches Boot Limit, the SLC will switch to the alternate boot bank. The SLC will switch to the alternate boot bank only once.
Updates SLC firmware to a new revision. You should be able to access the firmware file using the settings admin ftp show displays if FTP, TFTP or SFTP are used to load the firmware file. The SLC 8000 advanced console manager automatically reboots after successful update.
15: Command Reference Description Sets the FTP/TFTP/SFTP server used for firmware updates and configuration save/restore. admin ftp show Syntax admin ftp show Description Displays FTP settings. admin keypad Syntax admin keypad
15: Command Reference Description Restarts the program that controls the LCD. admin lcd default Syntax admin lcd default Description Restores the LCD screens to their factory default settings. admin lcd screens Syntax admin lcd screens
15: Command Reference [scrolldelay
When you use this command to shut down the SLC console manager, the LCD front panel displays the “Shutting down the SLC” message, followed by a pause, and then “Shutdown complete.” When “Shutdown complete” displays, it is safe to power off the SLC 8000 advanced console manager.
15: Command Reference Description Imports an SSL certificate. admin web certificate reset Syntax admin web certificate reset Description Resets the web server to the default SSL certificate. admin web certificate custom Syntax admin web certificate custom Description Generates a custom self-signed SSL certificate. The SHA256 hashing algorithm will be used to generate the certificate.
Remove Escape & Break Sequences for users making raw binary connections to Device Ports. Description Configures local accounts (including sysadmin) who log in to the SLC 8000 advanced console manager by means of the Web, SSH, Telnet, or the console port. set localusers allowreuse Syntax set localusers allowreuse
15: Command Reference Description Deletes a local user. set localusers lifetime Syntax set localusers lifetime
15: Command Reference set localusers periodwarning Syntax set localusers periodwarning
Syntax connect global outgoingtimeout
Tests a device port by transmitting data out the port and verifying that it is received correctly. A special loopback cable comes with the SLC 8000 advanced console manager. To test a device port, plug the cable into the device port and run this command. The command sends the specified Kbytes to the device port and reports success or failure.
15: Command Reference diag top Syntax diag top [parameters] Description Displays CPU usage, memory usage and tasks. Parameters continuous
15: Command Reference set network dnsipv4prec Syntax set network dnsipv4prec
Description Displays gateway settings. show network host Syntax show network host Description Displays the network host name of the SLC 8000 advanced console manager. show network port Syntax show network port <1|2> Description Displays Ethernet port settings and counters. SLC™ 8000 Advanced Console Manager User Guide...
15: Command Reference set nfs unmount Syntax set nfs unmount <1|2|3> Description Unmounts a remote NFS share. set cifs Syntax set cifs
15: Command Reference Description Imports an SLC host key. set sshkey server reset Syntax set sshkey server reset [type
15: Command Reference show vpn Syntax show vpn Description Shows the settings for the IPsec VPN tunnel. Parameters Display all VPN settings and current status: show vpn [email
Appendix D: Protocol Glossary NTP (Network Time Protocol) A protocol used to synchronize time on networked computers and equipment. PAP (Password Authentication Protocol) A method of user authentication in which the username and password are transmitted over a network and compared to a table of name-password pairs. PPP (Point-to-Point Protocol) A protocol for creating and running IP and other network protocols over a serial link.
Lantronix SLC 8000 is the industry"s first advanced modular console manager that provides secure access to IT equipment with RS-232 and USB console, while minimizing deployment headaches and time. Product Features: The industry"s first modular console server offering both RJ45 and USB connectivity with user swappable I/O modules allowing for easy upgrades and scalability to enables custom "mix-and-match" configurations with USB and RS-232 modules.
2 Intellectual Property Warranty Contacts 2019 Lantronix, Inc. All rights reserved. No part of the contents of this publication may be transmitted or reproduced in any form or by any means without the written permission of Lantronix. Lantronix and Lantronix Spider are registered trademarks of Lantronix, Inc. in the United States and other countries. SLC and vslm are trademarks of Lantronix, Inc. Patented: patents.lantronix.com; additional patents pending. Windows and Internet Explorer are registered trademarks of Microsoft Corporation. Firefox is a registered trademark of the Mozilla Foundation. Chrome is a trademark of Google Inc. All other trademarks and trade names are the property of their respective holders. For details on the Lantronix warranty policy, please go to our web site at Lantronix Corporate Headquarters 7535 Irvine Center Drive Suite100 Irvine, CA 92618, USA Toll Free: Phone: Fax: Technical Support Online: Sales Offices For a current list of our domestic and international sales offices, go to the Lantronix web site at GNU General Public License Notice This product includes open source software, including software subject to the GNU General Public Licenses ( GPL ). Lantronix will provide a CD-ROM containing the source files subject to the GPL upon request by mail. To request a CD containing the source files, send a check payable to Lantronix, Inc. for US $50.00 (per product) to the address below. This nominal charge covers Lantronix costs for duplication, media, and postage. Your request should identify the Lantronix product for which source code is desired, and the check must indicate Open Source CD Request. Please allow 6-8 weeks for the CD to be shipped. For GPL source code requests or inquiries please contact write to Lantronix, Inc., Attn: Open Source Request, 7535 Irvine Center Drive, Irvine, CA USA. Any GPL Code made available is for informational purposes only and distributed As is" with no support and/or warranty of any kind intended, implied, or provided. SLC 8000 Advanced Console Manager User Guide 2
3 Disclaimer & Revisions All information contained herein is provided AS IS. Lantronix undertakes no obligation to update the information in this publication. Lantronix does not make, and specifically disclaims, all warranties of any kind (express, implied or otherwise) regarding title, non-infringement, fitness, quality, accuracy, completeness, usefulness, suitability or performance of the information provided herein. Lantronix shall have no liability whatsoever to any user for any damages, losses and causes of action (whether in contract or in tort or otherwise) in connection with the user s access or usage of any of the information or content contained herein. The information and specifications contained in this document are subject to change without notice. Operation of this equipment in a residential area is likely to cause interference, in which case the user, at his or her own expense, will be required to take whatever measures may be required to correct the interference. Note: This equipment has been tested and found to comply with the limits for Class A digital device pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a commercial environment. This equipment generates, uses, and can radiate radio frequency energy and, if not installed and used in accordance with this user guide, may cause interference to radio communications. Operation of this equipment in a residential area is likely to cause interference, in which case the user will be required to correct the interference at his own expense. User Information Class A Equipment (Broadcasting and communication equipments for office work) Seller and user shall be noticed that this equipment is suitable for electromagnetic equipments for office work (Class A) and it can be used outside home. Changes or modifications made to this device that are not explicitly approved by Lantronix will void the user"s authority to operate this device. 声明此为 A 级产品, 在生活环境中, 该产品可能会造成无线电干扰 在这种情况下, 可能需要用户对其干扰采取切实可行的措施 사용자안내문 기종별 A 급기기 ( 업무용방송통신기자재 ) 사용자안내문이기기는업무용 (A 급 ) 전자파적합기기로서판매자또는사용자는이점을주의하시기바라며, 가정외의지역에서사용하는것을목적으로합니다. SLC 8000 Advanced Console Manager User Guide 3
4 Revision History Date Rev. Comments March 2014 A Preliminary release. October 2014 B Initial document for firmware release June 2015 C Updated for firmware release Changes include new operating atmosphere information and warning language in Chinese and Korean. Software changes include additions in Telnet, SSH and TCP timeout directions, number of sessions message, idle timeout message, VBUS enabling, assert DTR, run web server, added mounted column information for NFS Mounts, masked CHAP secret and DOD CHAP secret fields, USB devices in diagnostics and addition of SSH bit option. SSL settings were removed so the SSLv2 protocol option is no longer available. June 2016 D Updated for firmware release January 2017 E Updated power cord information. June 2017 F Updated for firmware release and for new dual SFP transceiver port or dual Ethernet port capability options. Updated the following: IPv6 Neighbor Table, Ethernet Bonding Status links, and IPv6 Forward Flag under Network Settings. IKE v2, x.509 Certificate, Certificate Authority/Certificate File for Remote Peer, Certificate Authority/Certificate File/Key File for Local Peer, SA Lifetime, Remote and Dead Peer settings under Network VPN. Enable v1/v2c, Trap Version, Alarm Delay to SNMP, and Trap User Name, Password and Passphrase under SNMP Services. Added ability change and reset BootCount, BootDelay and BootLimit. September 2017 G Updated part number. February 2018 H Updated for firmware release March 2018 J Updated to include additional SLC hardware and new trap information for firmware release June 2018 K Updated for firmware release R6. August 2018 L Updated fail-over gateway details for Network Settings for firmware release January 2019 M Updated for firmware release Software changes include hostname resolution in local hosts table, extended device port timers range, new user notifications when connecting to a device port, support for iperf3, support for dual channel USB devices, auto enable DTR on device ports, Xmodem support, device port baud rate can be set while connected to a device port, openssh and openssl upgraded, SNMP v3 SHA2 support, expanded support for HSPA+ gateway integration. February 2019 N Updated for firmware release R13. Added support for custom Expect scripts that can be connected to the SLC CLI or a device port. SLC 8000 Advanced Console Manager User Guide 4
5 Table of Contents Intellectual Property 2 Warranty 2 Contacts 2 GNU General Public License Notice 2 Disclaimer & Revisions 3 Revision History 4 Table of Contents 5 List of Figures 15 List of Tables 19 1: About this Guide 20 Purpose and Audience 20 Summary of Chapters 20 Additional Documentation 21 2: Introduction 22 Features 22 Console Management 22 Power 23 Hardware 23 System Features 25 Protocols Supported 26 Access Control 26 Device Port Buffer 26 Configuration Options 26 Device Port and Console Port Interfaces 27 Network Connections 30 Front Panel USB Ports 31 Memory Card Port 31 Internal Modem 32 3: Installation 33 What"s in the Box 33 Customize an SLC Product Label 35 Technical Specifications 35 Physical Installation 37 Connecting to a Device Port 37 Modular Expansion for I/O Module Bays 39 SLC 8000 Advanced Console Manager User Guide 5
6 Connecting to Network Ports 40 Connecting Terminals 40 AC Input 41 Modem Installation 42 Battery Replacement 45 4: Quick Setup 49 Recommendations 49 IP Address 49 Method #1 Using the Front Panel Display 50 Front Panel LCD Display and Keypads 50 Navigating 50 Entering the Settings 52 Restoring Factory Defaults 53 Limiting Sysadmin User Access 53 Method #2 Quick Setup on the Web Page 54 Network Settings 55 Date & Time Settings 56 Administrator Settings 56 Method #3 Quick Setup on the Command Line Interface 57 Next Step 60 5: Web and Command Line Interfaces 61 Web Manager 61 Logging in 63 Logging Out 63 Web Page Help 64 Command Line Interface 64 Logging In 64 Logging Out 64 Command 65 Command Line Help 65 Tips 65 6: Basic Parameters 68 Requirements 68 Network Port Settings 69 Ethernet Interfaces (Eth1 and Eth2) 72 Hostname & Name Servers 74 DNS Servers 74 DHCP-Acquired DNS Servers 74 TCP Keepalive Parameters 74 SLC 8000 Advanced Console Manager User Guide 6
7 Gateway 75 Fail-Over Settings 75 Fail-Over Cellular Gateway Configuration 76 Advanced Cellular Gateway Configuration 77 Fail-Over Cellular Gateway Firmware 77 Load Cellular Gateway Firmware Options 78 Ethernet Counters 78 Network Commands 78 IP Filter 78 Viewing IP Filters 79 Mapping Rulesets 79 Enabling IP Filters 79 Configuring IP Filters 81 Rule Parameters 82 Updating an IP Filter 82 Deleting an IP Filter 83 IP Filter Commands 83 Routing 83 Dynamic Routing 84 Static Routing 84 Routing Commands 84 VPN 84 VPN Commands 89 Security 90 Performance Monitoring 92 Performance Monitoring - Add/Edit Probe 95 Performance Monitoring - Results 97 Performance Monitoring Commands 101 FQDN List 101 7: Services 103 System Logging and Other Services 103 SSH/Telnet/Logging 104 System Logging 105 Audit Log 105 SMTP 105 SSH 106 Telnet 106 Web SSH/Web Telnet Settings 107 Phone Home 107 SSH Commands 107 Logging Commands 107 SNMP 107 SLC 8000 Advanced Console Manager User Guide 7
8 v1/v2c Communities 110 Version V3 User Read-Only 110 V3 User Read-Write 111 V3 User Trap 111 Services Commands 111 NFS and SMB/CIFS 111 SMB/CIFS Share 113 NFS and SMB/CIFS Commands 113 Secure Lantronix Network 114 Browser Issues 117 Troubleshooting Browser Issues 118 Web SSH/Telnet Copy and Paste 119 Secure Lantronix Network Commands 120 Date and Time 120 Date and Time Commands 122 Web Server 122 Ad
Ms.Josey 
Ms.Josey