Power over Ethernet. Power View Pro 3



Similar documents
HOWTO: How to configure SSL VPN tunnel gateway (office) to gateway

2. When logging is used, which severity level indicates that a device is unusable?

SBClient and Microsoft Windows Terminal Server (Including Citrix Server)

Instructions for Configuring a SAFARI Montage Managed Home Access Expansion Server

McAfee Enterprise Security Manager. Data Source Configuration Guide. Infoblox NIOS. Data Source: September 2, Infoblox NIOS Page 1 of 8

PBX Remote Line Extension using Mediatrix 4104 and 1204 June 22, 2011

Cloud Services MDM. Windows 8 User Guide

Configuring and Monitoring AS400 Servers. eg Enterprise v5.6

Junos Pulse Instructions for Windows and Mac OS X

Traffic monitoring on ProCurve switches with sflow and InMon Traffic Sentinel

Deployment Overview (Installation):

Remote Desktop Tutorial. By: Virginia Ginny Morris

Exercise 5 Server Configuration, Web and FTP Instructions and preparatory questions Administration of Computer Systems, Fall 2008

MaaS360 Cloud Extender

Webalo Pro Appliance Setup

STIOffice Integration Installation, FAQ and Troubleshooting

CenterPoint Accounting for Agriculture Network (Domain) Installation Instructions

ViPNet VPN in Cisco Environment. Supplement to ViPNet Documentation

TECHNICAL BULLETIN. Title: Remote Access Via Internet Date: 12/21/2011 Version: 1.1 Product: Hikvision DVR Action Required: Information Only

Aladdin HASP SRM Key Problem Resolution

Connecting to

Service Desk Self Service Overview

Firewall/Proxy Server Settings to Access Hosted Environment. For Access Control Method (also known as access lists and usually used on routers)

BackupAssist SQL Add-on

Helpdesk Support Tickets & Knowledgebase

How To Upgrade A Crptocard To A 6.4 Migratin Tl (Cpl) For A 6Th Generation Of A Crntl (Cypercoder) On A Crperd (Cptl) 6.

Ten Steps for an Easy Install of the eg Enterprise Suite

ROSS RepliWeb Operations Suite for SharePoint. SSL User Guide

CallRex 4.2 Installation Guide

How To Install An Orin Failver Engine On A Network With A Network Card (Orin) On A 2Gigbook (Orion) On An Ipad (Orina) Orin (Ornet) Ornet (Orn

Exercise 5 Server Configuration, Web and FTP Instructions and preparatory questions Administration of Computer Systems, Fall 2008

Configuring an Client for your Hosting Support POP/IMAP mailbox

ABELMed Platform Setup Conventions

Optimal Payments Extension. Supporting Documentation for the Extension Package v1.1

GETTING STARTED With the Control Panel Table of Contents

SPECIFICATION. Hospital Report Manager Connectivity Requirements. Electronic Medical Records DRAFT. OntarioMD Inc. Date: September 30, 2010

Information Services Hosting Arrangements

Systems Support - Extended

Configuring and Monitoring Network Elements

NASDAQ BookViewer 2.0 User Guide

Software Update Notification

ScaleIO Security Configuration Guide

Wireless Light-Level Monitoring

Implementing ifolder Server in the DMZ with ifolder Data inside the Firewall

Dial Backup for Dedicated T1 Circuits using the ATLAS

FOCUS Service Management Software Version 8.5 for Passport Business Solutions Installation Instructions

Restricted Document. Pulsant Technical Specification

Serv-U Distributed Architecture Guide

Remote Setup and Configuration of the Outlook Program Information Technology Group

Preparing to Deploy Reflection : A Guide for System Administrators. Version 14.1

TaskCentre v4.5 Send Message (SMTP) Tool White Paper

ACTIVITY MONITOR Real Time Monitor Employee Activity Monitor

User Manual Brainloop Outlook Add-In. Version 3.4

Emulation Tech Note 12 Testing XDS560V2 STM Emulator s Ethernet Port on Wi-Fi

How To Install Fcus Service Management Software On A Pc Or Macbook

AvePoint Privacy Impact Assessment 1

How to deploy IVE Active-Active and Active-Passive clusters

HP ExpertOne. HP2-T21: Administering HP Server Solutions. Table of Contents

Using PayPal Website Payments Pro UK with ProductCart

E-Biz Web Hosting Control Panel

BRILL s Editorial Manager (EM) Manual for Authors Table of Contents

FOCUS Service Management Software Version 8.5 for CounterPoint Installation Instructions

Customers FAQs for Webroot SecureAnywhere Identity Shield

Aras Innovator Internet Explorer Client Configuration

Implementing SQL Manage Quick Guide

FINRA Regulation Filing Application Batch Submissions

Introduction LIVE MAPS UNITY PORTAL / INSTALLATION GUIDE Savision B.V. savision.com All rights reserved.

990 e-postcard FAQ. Is there a charge to file form 990-N (e-postcard)? No, the e-postcard system is completely free.

Citrix XenServer from HP Getting Started Guide

Blue Link Solutions Terminal Server Configuration How to Install Blue Link Solutions in a Terminal Server Environment

The Relativity Appliance Installation Guide

Client Application Installation Guide

Intelligent Monitoring Configuration Tool

Aras Innovator Internet Explorer Client Configuration

Software Distribution

SITE APPLICATIONS USER GUIDE:

InfiniTV 4 Installation Instructions

Telelink 6. Installation Manual

Durango Merchant Services QuickBooks SyncPay

GUARD1 /plus. PIPE Utility. User's Manual. Version 2.0

April 3, Release Notes

SaaS Listing CA Cloud Service Management

iphone Mobile Application Guide Version 2.2.2

Safe PST Backup Enterprise Edition Administrator Guide

TaskCentre v4.5 SMTP Tool White Paper

Introduction to Mindjet MindManager Server

Creating a Wired Home Network with a Linksys Router and a Westell 2200 Modem

Readme File. Purpose. Introduction to Data Integration Management. Oracle s Hyperion Data Integration Management Release 9.2.

Configuring and Monitoring NetApp Products

AVG AntiVirus Business Edition

Release Notes. Dell SonicWALL Security firmware is supported on the following appliances: Dell SonicWALL Security 200

Readme File. Purpose. What is Translation Manager 9.3.1? Hyperion Translation Manager Release Readme

Emulated Single-Sign-On in LISTSERV Rev: 15 Jan 2010

Often people have questions about new or enhanced services. This is a list of commonly asked questions and answers regarding our new WebMail format.

Pexip Infinity and Cisco UCM Deployment Guide

LogMeIn Rescue Web SSO via SAML 2.0 Configuration Guide

FAQs for Webroot SecureAnywhere Identity Shield

Transcription:

Pwer ver Ethernet Pwer View Pr 3 User Guide Revisin 1.7 Catalg Number 06-0051-056 2009 Crp. All rights reserved. This dcument is subject t change withut ntice.

Acknwledgements All ther prducts r trademarks are prperty f their respective wners. The prduct described by this manual is a licensed prduct f. Abbreviatins and Terminlgy Abbreviatins are spelled ut in full when first used r are listed in Table 1-1. Only industry-standard terms are used thrughut this manual. Nte: Cvered under U.S patent S/N 6,473,608. Other patents are pending. 2

Table f Cntents 1 Abut this Guide... 6 1.1 Objectives... 6 1.2 Audience... 6 1.3 Organizatin... 6 1.4 Cnventins... 7 1.5 Related Dcumentatin... 7 1.6 Abbreviatins... 7 2 Intrducing the Pwer View Pr... 8 2.1 Features... 8 2.2 System Capabilities... 8 2.3 Cnfiguratin Optins... 9 2.4 Security and User Authenticatin... 10 2.4.1 Web Security... 10 2.4.2 SNMP Security... 10 2.4.3 Telnet/SSH Security... 10 3 Installatin... 11 3.1 System Requirements... 11 3.2 Hardware Setup... 11 3.3 Cnfiguratin Prcedure... 12 3.3.1 Cnnecting t the Unit Using a Web Brwser... 12 3.3.2 Cnnecting t the Unit Using Windw's Telnet... 12 3.3.3 Cnnecting t Unit Using a DB9 RS232 and a Hyper Terminal Applicatin... 12 3.3.4 Cnnecting via USB RS232 Serial Cmmunicatin Virtual Prt... 14 3.3.5 Cnfiguring the System via the HyperTerminal... 14 3.4 Cnfiguring the TFTP Server... 17 4 Web Interface Descriptin... 18 4.1 Overview... 18 4.2 Opening Screen... 18 4.3 View Menu... 18 4.3.1 View Status Screen (65xx, 65xxG, 80xx Midspan Series)... 19 4.3.2 View - Status Screen (70xxG Mid Pwer Midspan Series)... 20 4.3.3 View - Status Screen (90xxG High Pwer Midspan Series)... 20 4.3.4 View - Status Screen Elements... 21 4.3.5 View - Cnfiguratin Summary... 26 4.3.6 View - Prduct Infrmatin... 31 4.3.7 System Cnfiguratin Screen... 31 4.3.8 System Cnfiguratin SNMP... 41 4.3.9 System Cnfiguratin SNMPv3... 44 4.3.10 System Cnfiguratin Security... 45 4.3.11 System Cnfiguratin - RADIUS... 48 4.3.12 System Cnfiguratin - Dynamic UPS Pwer Management... 49 4.3.13 System Cnfiguratin Prduct Parameters - 65xx, 65xxG, 70xxG, 80xx Family... 52 4.3.14 System Cnfiguratin Prduct Parameters - 90xxG Family... 53 4.3.15 System Cnfiguratin Maintenance... 54 4.4 Prt Cnfiguratin Screen... 55 4.4.1 Prt Cnfiguratin Enable/Disable... 55 4.4.2 Prt Cnfiguratin Detailed... 56 4.4.3 Prt Cnfiguratin - Weekly Schedule... 58 5 Midspan 90xxG - Pwer Backup and Pwer Management... 60 5.1 Viewing the Pwer Surce Status... 61 5.2 RPS Pwer Backup... 61 5.3 Dual 90xxG Midspan Pwer Backup... 62 5.3.1 Midspan 90xxG t Midspan 90xxG Pwer Shift... 63 5.3.2 Changing Pwer Limit (%) by SNMP... 63 5.3.3 Activating Dynamic UPS Pwer Management... 64 5.3.4 Pwer Failure and Invalid Midspan t Midspan Pwer Backup Cnnectin Reprt... 65 6 SNMP Mnitring and Cnfiguratin... 66 3

6.1 Enabling Midspan SNMP... 66 6.2 SNMP MIBs... 66 6.3 RFC3621 PE MIB... 67 6.4 Private MIB... 67 7 Sftware Upgrade... 70 7.1 Architecture... 70 7.2 Sftware Upgrade frm Versin 2.xx t 3.xx, r frm 3.xx t 3.xy... 70 7.2.1 General... 70 7.2.2 Upgrade Prcess... 71 8 Trubleshting... 73 List f Figures Figure 2-1: Management Deplyment...9 Figure 3-1: Cnnecting the PE Unit... 11 Figure 3-2: Windws XP Hyper Terminal Specificatins... 13 Figure 3-3: Putty Cnfiguratin Windw... 13 Figure 3-4: PuTTY Serial Cnfiguratin Windw Specificatins... 14 Figure 3-5: Main Menu Screen... 15 Figure 3-6: View Menu Screen... 15 Figure 3-7: Cnfiguratin & Maintenance Menu... 16 Figure 3-8: NBTFTP Server Windw... 17 Figure 4-1: Pwer View Pr Main Windw... 18 Figure 4-2: View Menu... 19 Figure 4-3: View - Status Screen (65xx, 65xxG, 80xx Midspan Series)... 19 Figure 4-4: View - Status Screen (70xxG Mid Pwer Midspan Series)... 20 Figure 4-5: View - Status Screen (90xxG High Pwer Midspan Series)... 21 Figure 4-6: Prts Status Panel... 21 Figure 4-7: Detailed Prt Descriptin Infrmatin... 24 Figure 4-8: Manual Override Deactivatin key... 25 Figure 4-9: Weekly Activated/Deactivated Prts... 26 Figure 4-10: View - Cnfiguratin Summary Screen... 27 Figure 4-11: IP in-use Windw... 27 Figure 4-12: Static Netwrk Cnfiguratin Windw... 28 Figure 4-13: Remte Servers Windw... 28 Figure 4-14: Date and Time Windw... 28 Figure 4-15: Remte Trap SNMP Managers List... 29 Figure 4-16: Remte Access & Security Windw... 29 Figure 4-17: Advanced Features Windw... 30 Figure 4-18: View - Prduct Infrmatin Screen... 31 Figure 4-19: System Cnfiguratin Screen... 32 Figure 4-20: System Cnfiguratin Netwrk Screen... 32 Figure 4-21: Aut Services Cnfiguratin by DHCP... 33 Figure 4-22: Defining Vendr Class... 34 Figure 4-23: Set Vendr Class String... 34 Figure 4-24: Set Predefined Optins... 35 Figure 4-25: Adding Predefined Sub Types... 35 Figure 4-26: SNMP Manager Optin Type... 36 Figure 4-27: Midspan Optin Cde... 36 Figure 4-28: SysLg Optin Type... 36 Figure 4-29: RADIUS Optin Type... 37 Figure 4-30: Scpe Optins Cnfiguratins... 37 Figure 4-31: Midspan Scpe Optins... 38 Figure 4-32: Cnfiguring Scpe Optins... 38 Figure 4-33: Advertised Scpe Optins... 39 Figure 4-34: SNMP Scpe Optins... 39 Figure 4-35: Setting SNMP Manager IP List... 39 Figure 4-36: Midspan Autmatic Service Cnfiguratin... 40 Figure 4-37: Syslg Server Lg Events... 40 Figure 4-38: System Cnfiguratin SNMP Screen... 42 4

Figure 4-39: SNMPv2 Windw... 42 Figure 4-40: Remte Trap SNMP Managers List... 44 Figure 4-41: System Cnfiguratin SNMPv3 Screen... 44 Figure 4-42: System Cnfiguratin Security Screen... 46 Figure 4-43: Web Secure Access & Cnfiguratin Windw... 46 Figure 4-44: Telnet/SSH View & Cnfiguratin Windw... 47 Figure 4-45: Remte Access Windw... 47 Figure 4-46: RADIUS Cnfiguratin Screen... 48 Figure 4-47: Dynamic UPS Pwer Management... 49 Figure 4-48: Dynamic UPS Pwer Management Screen... 50 Figure 4-49: Midspan Enfrced Maximum Pwer Levels... 51 Figure 4-50: UPS-Midspan Cmmunicatin Failure... 51 Figure 4-51: System Cnfiguratin Prduct Parameters Screen... 52 Figure 4-52: System Cnfiguratin Prduct Parameters Screen... 53 Figure 4-53: System Cnfiguratin Maintenance Screen... 54 Figure 4-54: Prt Cnfiguratin Screen... 55 Figure 4-55: Prt Cnfiguratin Enable/Disable Screen... 56 Figure 4-56: Prt Cnfiguratin Detailed Screen (65xx,65xxG, 70xxG, 90xxG Family)... 57 Figure 4-57: Prt Cnfiguratin Detailed Screen (80xx Midspan Family)... 57 Figure 4-58: Prt Cnfiguratin Weekly Schedule... 59 Figure 5-1: External Pwer Backup... 60 Figure 5-2: Secndary Midspan Pwer Backup... 60 Figure 5-3: Pwer Surce Status... 61 Figure 5-4: Pwer Backup Mde... 62 Figure 5-5: View - Status Windw (Pwer Shift Display)... 63 Figure 5-6: Midspan Pwer Limit by SNMP... 64 Figure 6-1: Netwrk Management Tl... 66 Figure 6-2: MIB Tree Structure... 67 Figure 6-3: MIBs Management Functinalities... 68 Figure 7-1: System Sftware Architecture... 70 List f Tables Table 1-1: List f Abbreviatins...7 Table 4-1: Main Status Indicatins... 22 Table 4-2: 65xx, 65xxG, 70xxG and 90xxG Gigabit High Pwer Midspan Prt Status Indicatins... 22 Table 4-3: 80xx High Pwer (Fur Pair) Midspan Prt Status Indicatins... 23 Table 4-4: Midspan Status Table Details... 24 Table 4-5: Detailed Prt Descriptin Infrmatin... 24 Table 4-6: IP in User Parameters... 27 Table 4-7: System Cnfiguratin Netwrk Screen Details... 32 Table 4-8: SNMPv2 Field Details... 43 Table 4-9: System Infrmatin Windw... 43 Table 4-10: RFC3621 PE MIB Parameters... 43 Table 5-1: Pwer Backup Cnnectivity Optins... 60 Table 5-2: SNMP Object IDs Affected by 90xxG Midspan Pwer Backup Mde Cnnectin... 61 Table 5-3: mainpwerusagebudget SNMP OiD Vs Midspan Maximum Pwer... 64 Table 8-1: Trubeshting Guide... 73 5

1 Abut this Guide The fllwing sectins define the manual bjectives, cncepts used, cnventins used and assciated dcumentatin 1.1 Objectives This User Guide intrduces PwerDsine s Pwer View Pr Remte Web Managers used fr managing PwerDsine s Pwer ver Ethernet (PE) prduct line f Midspan devices including: 10/100Mbit Midspans PD 6506/AC/M: 6 prt 10/100Mbit Midspan PD 6512/AC/M: 12 prt 10/100Mbit Midspan PD 6524/AC/M: 24 prt 10/100Mbit Midspan PD 6524/AC/M/F: 24 prt 10/100Mbit full pwer Midspan PD 6548/AC/M: 48 prt 10/100Mbit Midspan 1 Gigabit Midspans PD 6506G/AC/M: 6 prt 1 Gigabit Midspan PD 6512G/AC/M: 12 prt 1 Gigabit Midspan PD 6524G/AC/M: 24 prt 1 Gigabit Midspan PD 6524G/AC/M/F: 24 prt 1Gigabit full pwer Midspan 1 Gigabit Mid Pwer Midspans PD 7006G/AC/M: 6 prt Mid Pwer 1 Gigabit Midspan PD 7012G/AC/M: 12 prt Mid Pwer 1 Gigabit Midspan PD 7024G/AC/M: 24 prt Mid Pwer 1 Gigabit Midspan 10/100Mbit High Pwer (fur-pair) Midspans PD 8006/AC/M: 6 prt 10/100Mbit High Pwer (fur-pair) Midspan PD 8012/AC/M: 12 prt 10/100Mbit High Pwer (fur-pair) Midspan 1 Gigabit High Pwer 802.3at cmpliant Midspans 1.2 Audience PD 9006G/ACDC/M: 6-prt High Pwer 1 Gigabit 802.3at cmpliant Midspan PD 9012G/ACDC/M: 12-prt High Pwer 1 Gigabit 802.3at cmpliant Midspan PD 9024G/ACDC/M: 24-prt High Pwer 1 Gigabit 802.3at cmpliant Midspan PD 9024G/ACDC/M/F: 24-prt Full High Pwer 1Gigabit 802.3at cmpliant Midspan This guide is intended fr netwrk administratrs, supervisrs and installatin technicians wh have a backgrund in: Basic cncepts and terminlgy f netwrking Netwrk tplgy Prtcls Micrsft Windws envirnment 1.3 Organizatin This guide is divided int the fllwing sectins: Sectin 1: Defines the cncepts used, cnventins used and assciated dcumentatin Sectin 2: Pwer View Pr features and capabilities Sectin 3: Cmplete system installatin prcedure 6

Sectin 4: PwerView Pr Web interface detailed descriptin Sectin 5: Midspan 90xxG - Pwer Backup and Management Sectin 6: SNMP Mnitring and Cnfiguratin Sectin 7: Upgrading Midspan sftware Sectin 8: Trubleshting 1.4 Cnventins The varius cnventins used in defining cmmands and examples are given in the fllwing table. CONVENTION bld italics screen Curier text Ntes 1.5 Related Dcumentatin DEFINITION Keywrds and cmmands Represents a Web interface item Displayed Infrmatin Infrmatin t be entered Helpful infrmatin Fr additinal infrmatin, refer t the fllwing dcumentatin: Prduct user guide (included inside the CD) Technical Nte 132: Using RFC3621 PE MIB with PwerDsine Midspans (included inside the CD). Creating SSL Certificate fr Midspan Secured Web Server User Guide (included inside the CD) RFC3621 SNMP MIB, and private MIB (included inside the CD) IEEE Standard 802.3af, DTE Pwer via MDI 1.6 Abbreviatins Table 1-1: List f Abbreviatins PE Pwer ver Ethernet NTP Netwrk Time Prtcl DES Data Encryptin Standard MD5 Message Digest algrithm 5 MDI Media Dependent Interface MIB Management Infrmatin Base PD Pwered Device SNMP Simple Netwrk Management SSL Secure Prtcl Sckets Layer TFTP Trivial File Transfer Prtcl SysLg System Lg SSH Secure Shell RADIUS Remte Authenticatin Dial In RPS User Redundant Service Pwer Surce (Redundan 7

2 Intrducing the Pwer View Pr PwerDsine s Pwer View Pr is a management system used t mnitr and cntrl PwerDsine s Pwer ver Ethernet (PE) Midspans, via a remte netwrk management statin. The system prvides direct n-line pwer supervisin, cnfiguratin, mnitring and diagnstics f PwerDsine prducts via WEB / SNMPv2c / SNMPv3 / Telnet/SSH. 2.1 Features The principle f peratin is similar fr all Midspan mdels described in this manual. The manager prvides a number f unique features alng with multiple access ptins: Access Optins: HTTP: Web based friendly cnfiguratin interface fr managing remte Pwer ver Ethernet device SSL: Secured WEB based cnfiguratin SNMPv2c/v1 and secured plus encrypted SNMPv3 Telnet: Remte terminal ver Ethernet Netwrk SSH: Remte encrypted terminal ver Ethernet Netwrk RFC3621 Pwer ver Ethernet (PE) SNMP MIBs Private MIB extensin fr RFC3621 PE MIB RADIUS: Authenticatin and accunting fr WEB / Telnet./ SSH remte WEB users SysLg Server: Lg events sent t remte SysLg Server Autmatic Service Cnfiguratin by DHCP: Enables DHCP Server t cnfigure autmatically Midspan SNMP Manager's IP address, SysLg Servers IP address, Radius Servers IP address Easy sftware update during run time withut affecting active PE prts Cnfiguratin and real time mnitring using graphical representatins f remte device System status display Autmatic activatin / deactivatin f PE prts based n weekly schedule cnfiguratin Autmatic deactivatin f lw pririty prts when UPS battery is lw Pwer backup by 2nd Midspan r external Pwer Surce (90xxG series nly) 2.2 System Capabilities The manager can be accessed frm any cmputer using any WEB brwser, SNMPv2c/SNMPv3 management statin, Telnet/SSH, RS232 Terminal r USB virtual COM (Midspan 90xxG series). The Pwer View Pr enables mnitring and cntrlling f ver Ethernet IP netwrks as shwn in Figure 2-1. 8

2.3 Cnfiguratin Optins Figure 2-1: Management Deplyment Serial cmmunicatin cnfiguratin shuld be used t define the unit s IP address, uplad / dwnlad unit cnfiguratin, restre unit cnfiguratin t factry default, r update sftware. Any ther cnfiguratin shuld be carried ut via the WEB brwser. Web based: Via a WEB brwser SNMPv1/2c/3: Via an SNMP management applicatin n a remte cmputer Telnet: Via a Telnet applicatin n a remte cmputer SSH: By using SSH client applicatin n a remte cmputer Serial cmmunicatin prt: Via a DB9 prt using Terminal emulatin sftware such as Micrsft Windws Hyper Terminal, r any similar sftware (excluding Midspan 90xxG series). Serial cmmunicatin prt via USB Virtual Cmmunicatin Prt driver (Midspan 90xxG series nly): Simplifies RS232 cmmunicatin whenever laptp is in use Serial cmmunicatin rate must be set t 38400, n hardware flw cntrl and crss cable shuld be used (pin 2 crssed with pin 3). The Midspan default IP address is 192.168.0.50. Make sure that a cmputer netwrk card is cnfigured t the same IP netwrk (fr example 192.168.0.40). The Telnet/SSH and WEB cnfiguratin ptins are passwrd prtected. 9

2.4 Security and User Authenticatin Different security prvisins are available, depending n the type f cnfiguratin used. 2.4.1 Web Security Web interface has tw user access levels, Viewer and Administratr. Viewer: The user has access nly t Web pages which reprt Midspan status f cnfiguratin summary and can nt change the Midspan cnfiguratin. Administratr: The user has full access t all Web pages and can edit the Midspan cnfiguratin. 2.4.2 SNMP Security SSL (https) ffer encryptin and authenticatin prtectin in additin t Viewer & Administratr access levels. SNMP v1/v2: Cmmunity string is utilized fr Get/Set/Trap authenticatin. SNMPv1/v2 is cnsidered an unsecured prtcl since the cmmunity string passwrd can be easily intercepted by any Netwrk sniffer device. SNMP v3: Overcme SNMPv1/v2 security issues by adding authenticating and encryptin t SNMP packets. 2.4.3 Telnet/SSH Security Since Telnet prvides access t varius cnfiguratin parameters, sftware update and data base uplad/dwnlad, it is always passwrd prtected. The Web interface has a dedicated passwrd, while Telnet and SSH utilize the same passwrds. The Pwer View Pr is prvided with the fllwing factry defaults passwrds: WEB/Telnet/SSH: View (usually user) : user name = user, passwrd = passwrd Cnfigure (usually administratr): user name = admin, passwrd = passwrd. SNMP v3: Guest (usually remte SNMP manager) : user name = public View User (usually user) : user name = view, authenticatin passwrd (MD5) = passwrd, : privacy passwrd (DES)= passwrd, Admin User (usually administratr) : user name = admin, authenticatin passwrd (MD5) = passwrd, : privacy passwrd (DES)= passwrd, 10

3 Installatin The fllwing sectins detail the installatin prcess. 3.1 System Requirements The fllwing hardware/sftware items are required t cnfigure and perate the Pwer ver Ethernet (PE) Midspan: Cmputer with Ethernet Netwrk card cnfigured t the fllwing parameters: IP: 192.168.0.40 IP Mask: 255.255.255.0 Ethernet cable. Ethernet switch cnnected t the cmputer and Midspan management RJ-45 prt (user can use crss cable cnnected directly between the cmputer and the Midspan withut needing t use an Ethernet Switch). Telnet applicatin (already prvided by Windws/Linux). A free serial cmmunicatin prt n the cmputer. Null-mdem RS232 crssed cable(fr PD-6548 use the prvided cable) USB cable (90xxG Midspan series). Fr virtual cm driver installatin, refer t sectin 3.4.6. Imprtant: The Midspan is shipped with the default IP set t 192.168.0.50. Befre cnnecting the Midspan t yur netwrk, verify that n ther device has the same IP address. 3.2 Hardware Setup Befre cnfiguring the units, set up yur hardware as fllws: 1. Cnnect an AC pwer cable t the PE unit. 2. Verify that all LEDs are lit (self test). 3. Cnfigure the units (refer t Figure 3-1): Serial prt: Cnnect the crssed null-mdem cable between the management statin COM prt and the PE RS 232 prt. Midspan 90xxG: Use USB cable (virtual cm. prt driver installatin is required). Ethernet netwrk: Cnnect a netwrk cable between the PE unit frnt panel s RJ45 cnnectr (use an Ethernet Hub/Switch r crss cable fr straight cnnectin). If there is any prblem, refer t Trubleshting, Sectin 8. Figure 3-1: Cnnecting the PE Unit 11

3.3 Cnfiguratin Prcedure The fllwing sectins describe hw t install the unit via the cnfiguratin ptins. The fllwing cnnectin ptins are available: Cnnecting t the Unit Using a Web Brwser Cnnecting t the Unit Using Windw's Telnet Cnnecting t Unit Using a DB9 RS232 and a Hyper Terminal Applicatin (fr PD-6548 use the special cable prvided with the unit Cnnecting via USB RS232 Serial Cmmunicatin Virtual Prt, page 14 (90xxG Midspan series) After cnnecting t the unit, the unit must be cnfigured. Cnfiguring the System via the HyperTerminal, page 14 Cnfigure the TFTP server fr ptinal sftware updates and t transfer unit cnfiguratin t and frm the hst. Cnfiguring the TFTP Server, page 17 3.3.1 Cnnecting t the Unit Using a Web Brwser 1. Open the web brwser. 2. In the address field type: 192.168.0.50 3.3.2 Cnnecting t the Unit Using Windw's Telnet 1. In the Start Menu, select Run. 2. Type: cmd. The DOS windw appears. 3. Type: telnet 192.168.0.50. 4. Type the username and passwrd. Use the web brwser t view the System Cnfiguratin->Security web page and make sure that the Telnet is enabled. 3.3.3 Cnnecting t Unit Using a DB9 RS232 and a Hyper Terminal Applicatin When cnfiguring the system via an RS232, the type f cnfiguratin perfrmed depends n the perating system. 3.3.3.1 Windws 2000 and Windws XP 1. In the Start Menu, select: Start >Prgrams >Accessries >Cmmunicatins > HyperTerminal. The Hyper Terminal windw appears (Figure 3-2). 2. Select the fllwing parameters: Bits per secnd: 38400 Data bits: 8 Parity: Nne Stp bits: 1 12

Flw cntrl: Nne 3.3.3.2 Windws Vista Figure 3-2: Windws XP Hyper Terminal Specificatins The HyperTerminal serial cmmunicatin was mitted frm the Windws Vista. Use PuTTY, HyperTerminal freeware serial cmmunicatin sftware r any ther cmmercial serial cmmunicatin sftware tl. 1. Dwnlad PuTTY freeware at: http://www.putty.rg/. 2. Run PuTTY. The Putty Cnfiguratin windw appears (Figure 3-3). 3. Under Cnnectin type, select Serial. Figure 3-3: Putty Cnfiguratin Windw The PuTTY Serial Cnfiguratin Windw appears (Figure 3-4). 13

4. Select: Figure 3-4: PuTTY Serial Cnfiguratin Windw Specificatins Serial line t cnnect t: Required COM prt Speed (baud): 38400 Flw cntrl: Nne 5. Click Open. 3.3.4 Cnnecting via USB RS232 Serial Cmmunicatin Virtual Prt The 90xxG Midspan ffers USB serial cmmunicatin rather than the traditinal RS232 DB-9 interface. This eases the serial cmmunicatin whenever a laptp is used (laptps lack RS232 serial interface). T install the 90xxG driver: 1. Verify that the hst's USB prt is discnnected frm the 90xxG Midspan's USB prt. 2. Install the Virtual Serial Cmmunicatin driver frm the included CD by running: CP210xVCPInstaller.exe' 3. Cnnect the hst USB t the 90xxG Midspan USB prt. 4. In the hst, cnfigure the cnnectin setting. Windws 20000 and Windws XP OS: Run the HyperTerminal applicatin. Refer t Windws Vista OS: Run PuTTY. Select the fllwing settings: Baud rate: 38400 Flw-cntrl: Nne 3.3.5 Cnfiguring the System via the HyperTerminal T cnfigure the system via the HyperTerminal: Click the ESC r space key. There is n passwrd prtectin while using the RS232 serial cmmunicatin prt. Passwrd prtectin is nly applicable fr Telnet, SSH r WEB access. 14

The Main Menu appears: The Main Menu cntains the fllwing functins: Figure 3-5: Main Menu Screen View Menu: View PE prts status, unit IP, sftware versin and release date. Cnfiguratin & maintenance menu: Enable/disable PE prts, cnfigure unit IP, uplad/dwnlad cnfiguratin and sftware update. Ping remte hst: Determine whether a particular IP system n a netwrk is functinal. Use this functin t diagnse IP netwrk r ruter failures. Exit t debug infrmatin screen: Enables n-ging debug infrmatin t be reprted by the terminal. 3.3.5.1 Using the View Menu In the Main Menu, select the View Menu ptin. The View Menu screen appears. The View Menu cntains the fllwing functins: Figure 3-6: View Menu Screen View PE prts status: Shws whether a PE prt is enabled/disabled, if the prt prvides pwer t a PD device, and PD pwer cnsumptin. View netwrk parameters: Displays the Midspan IP address, subnet mask, default gateway and MAC address. While DHCP is in use, DHCP server IP appears as well. View time & system up time: Displays hw many days, hurs, minutes and secnds the unit has been peratinal. View applicatin & Bt sftware versin: Displays the applicatin and bt versin number and creatin date. 15

3.3.5.2 Using the Cnfiguratin & Maintenance Menu In the Main Menu, select the Cnfiguratin & Maintenance Menu. The Cnfiguratin & Maintenance Menu appears. Figure 3-7: Cnfiguratin & Maintenance Menu The Cnfiguratin & Maintenance Menu cntains the fllwing functins: Enable/Disable PE Prt: Enables the user t enable/disable a PE prt (same as frm WEB/SNMP/Telnet/SSH). Set static IP/DHCP: Enables the user t set, save and activate new netwrk parameters. Dwnlad cnfiguratin File frm TFTP Server: Dwnlad a cnfiguratin file frm a remte hst using a TFTP applicatin (hst must run TFTP server applicatin prir t using this ptin; see Sectin 3.4). Upn successful dwnlading, nly the manager mdule will reset itself withut effecting active pwered PD devices. Uplad Cnfiguratin File t TFTP Server: The unit uplads its internal cnfiguratin file t the hst, utilizing a TFTP applicatin (hst must run TFTP server applicatin prir t using this ptin - see Sectin 3.4). Dwnlad WEB SSL Certificate frm the TFTP Server: Dwnlad a valid private key and certificate files fr Web SSL by TFTP. The private key eliminates web brwser security warnings whenever SSL is used. Fr detailed prcedure descriptin and applicable utility files, refer t Web SSL dcumentatin n the CD. Sftware update menu: Enables the user t update management mdule sftware r PE firmware. It is recmmended that yu use the TFTP server applicatin n the CD. Restre WEB user & passwrd t factry default: Restres nly the manager mdule view/cnfigure user name and passwrd t default values (nly the manager mdule resets itself withut effecting active pwered PD devices). Restre the unit t factry default: Restres mst f the unit cnfiguratin parameters t factry default values. Nte that t enable the remte user t access the Midspan after it was restred t factry default, varius IP parameters (fr example the unit IP address) remain the same (nly the manager mdule will reset itself withut effecting active pwered PD devices.). 16

Reset Manager Mdule: Manager mdule resets itself nly, withut effecting active pwered PD devices. Reset unit: Reset the entire unit, which causes all pwered PD devices t be turned ff fr several secnds, and then re-pwered. Enable/Disable aut ping t Default Gateway t ensure Netwrk cnnectivity: Ping default gateway every five secnds. After 10 cnsecutive ping failures, Netwrk Management Mdule will reset itself withut effecting PE prts. ESC: Return t Previus Menu 3.3.5.3 Using the Ping Remte Hst Menu The Ping Remte Hst Menu is utilized t test the TCP/IP cnfiguratin by using the ping cmmand. Ping is useful fr verifying prper netwrk cnfiguratin r a ruting failure. T ping a remte device: 1. In the Main Menu, select Ping Remte Hst Menu. 2. Type the remte IP address. The ping cmmand uses ICMP packet frm type ech-request t ping remte Hst. It then waits fr an ICMP packet frm type ech-reply in rder t determine whether a particular IP system n a netwrk is functinal. 3.4 Cnfiguring the TFTP Server The fllwing sectin describes hw t cnfigure the TFTP server which is utilized fr ptinal sftware updates and transferring unit cnfiguratin t and frm the hst. NOTES: 1. Make sure Firewall is turned ff n the cmputer which runs the TFTP Server (r enable UDP prt 69 t pass thrugh the Firewall). 2. Fr Uplad Cnfiguratin: Make sure Enable Writes checkbx is checked (see Figure 3-8). T cnfigure the TFTP server: 1. Frm the prvided CD, cpy the NBTFTP.exe applicatin t yur server s desktp. 2. Click. The NBTFTP server windw appears (Figure 3-8) 3. Click the Brwse symbl. 4. Brwse t the required file lcatin. 5. Click OK. Figure 3-8: NBTFTP Server Windw The Server utilizes the IP address f the cmputer n which TFTP sftware is running. 17

4 Web Interface Descriptin The Web Interface prvides cmplete mnitring, cntrl and cnfiguratin f PwerDsine s Pwer ver Ethernet (PE) prducts. The Web interface is user friendly and presents graphical elements f the actual device in additin t infrmatin tables. 4.1 Overview The system prvides the fllws features: View Midspan cnfiguratin Midspan cnfiguratin Receive infrmatin n managed PD devices prperties such as pwer cnsumptin, class, etc. The Web Interface has tw authrizatin levels (see System Cnfiguratin Security, page 45): User: A remte user can access nly thse web pages which are lcated under the View menu. Administratr: A remte user has full access t all web pages. 4.2 Opening Screen Brwse t the Midspan IP address. The Main Windw (Opening screen) appears (Figure 4-1). The Opening screen features three main menus: View menu: Used t view status, netwrk cnfiguratin and prduct infrmatin. System Cnfiguratin menu: Enables system cnfiguratin (netwrk, SNMP, security, RADIUS, UPS pwer management, prduct parameters and maintenance (passwrd prtectin). Prt Cnfiguratin menu: Enables enabling/disabling f prts, allcatin f pwer, setting f pririties, and weekly based schedule autmatic PE prts activatin/deactivatin. 4.3 View Menu Figure 4-1: Pwer View Pr Main Windw The View menu is used t view the fllwing categries (see Figure 4-2): System status Cnfiguratin summary Prduct infrmatin The View menu differs accrding t the mdel being used: View Status Screen (65xx, 65xxG, 80xx Midspan Series) View - Status Screen (70xxG Mid Pwer Midspan Series View - Status Screen (90xxG High Pwer Midspan Series 18

Figure 4-2: View Menu 4.3.1 View Status Screen (65xx, 65xxG, 80xx Midspan Series) The View - Status screen is the main mnitring tl. It is made up f several elements (see Figure 4-3): Prt status panel Prt pwer status table General pwer status table UPS pwer management dedicated infrmatin UPS Pwer Management windw fr 65xx, 65xxG, 70xxG, 80xx, 90xxG appears at the bttm right sectin f the screen nly if the UPS Pwer Management ptin is enabled (fr mre details, refer t Sectin 4.3.12). The View - Status screen elements are explained in Sectin 4.3.4, View - Status Screen Elements. Figure 4-3: View - Status Screen (65xx, 65xxG, 80xx Midspan Series) UPS Pwer Management windw fr 65xx, 65xxG, 70xxG, 80xx, 90xxG appears at the bttm right sectin f the screen nly if the UPS Pwer Management ptin is enabled ( fr mre details, refer t Sectin 4.3.12). 19

4.3.2 View - Status Screen (70xxG Mid Pwer Midspan Series) In additin t the infrmatin prvided by the View - Status Screen (65xx, 65xxG, 80xx Midspan Series), the 70xxG Mid Pwer Midspan series View - Status Screen (see Figure 4-4) prvides the fllwing additinal infrmatin: Highlighted PD Devices: Mid Pwer PE PD devices that cnsume mre than 15.4 watts are highlighted. Extended Prt Pwer: PE PD Pwer cnsumptin reprts up t 32 watt. Figure 4-4: View - Status Screen (70xxG Mid Pwer Midspan Series) 4.3.3 View - Status Screen (90xxG High Pwer Midspan Series) In additin t the infrmatin prvided by the View - Status Screen (65xx, 65xxG, 80xx Midspan Series), the 90xxG High Pwer Midspan series View - Status Screen (see Figure 4-5) prvides fllwing additin infrmatin: PE PD detectin methd: Includes IEEE802.3at PE PD in additin t the 802.3af and legacy PE PD devices. Pwer surces: Internal and external pwer surces status (redundancy pwer backup capability was added t 90xxG Midspan series). External redundancy pwer surce status: The 90xxG Midspan supprt redundant pwer supplies. PD pwer cnsumptin: PE PD Pwer cnsumptin reprts up t 30 watts fr IEEE802.3at devices r up t 36W if Extended Pwer Mde is enabled. 20

Figure 4-5: View - Status Screen (90xxG High Pwer Midspan Series) The external pwer surce type must match the Midspan type. PD-RPS-450 backups: * PD-9006/ACDC/M * PD-9012G/ACDC/M * PD-9024G/ACDC/M PD-RPS-1000 backup: * PD-9024G/ACDC/M/F 4.3.4 View - Status Screen Elements The fllwing sectins describe in detail the View - Status Screen elements. 4.3.4.1 Prts Status Panel The display panel includes a number f visual indicatrs (see Figure 4-6). A green clred prt indicates that the PE prt is enabled, and can prvide pwer when a PD device is cnnected t this prt. A green LED n tp f a green clred prt indicates that the PE prt is already prviding pwer t a PD. A red clred prt with an "X" symbl indicates a disabled prt which is nt allwed t prvide pwer. Prt Disabled Prt Enabled Ethernet Link LED Main Pwer LED Figure 4-6: Prts Status Panel 21

4.3.4.2 Midspan LED Indicatins Tw LEDs are lcated n the frnt panel, marked Main (220/110VAC) and "Link" (Ethernet cnnectin plus activity status) as described in Table 4-1. Table 4-1: Main Status Indicatins Indicatr Clr Main Pwer Status Remarks AC LED DC LED (ptinal) Off Green Green blinking Green Green blinking Internal pwer supply unit is unplugged r faulty Indicates AC pwer input active Internal pwer supply vltage is ut f range 90xxG Internal pwer supply is unplugged Indicates nrmal 48VDC pwer supplied t PDs External pwer supply DC vltage is ut f range Internal pwer supply vltage is t lw. All prts are discnnected Internal pwer supply vltage is within limits All prts are discnnected 90xxG unit pwered by external pwer surce Applicable nly fr Midspan unit with 48VDC ptinal mdule LINK LED Green blinking Green Indicates valid Ethernet link, and sme data cmmunicatin flw ver the Ethernet netwrk Indicates valid Ethernet link(n cmmunicatin data) Table 4-2: 65xx, 65xxG, 70xxG and 90xxG Gigabit High Pwer Midspan Prt Status Indicatins Prt LED Clr Off Green Green blinking Slw Green blinking Prt Lad Cnditins Nn-active lad, unplugged prt r disabled prt Active lad is plugged in and cmplies with nrmal lad cnditins Overlad cnditins; r shrt; r frced external vltage feed (cnstant DC) int the prt Prt can't be activated since ttal aggregated pwer exceeds maximum pwer budget Prt Vltage Pwer t the prt is discnnected. N DC vltage present n spare pairs Cntinuus nminal DC vltage is present n the spare pairs Pwer t the prt is discnnected. N DC vltage is present n the spare pairs Pwer t the prt is discnnected. N DC vltage is present n the spare pairs 22

Table 4-3: 80xx High Pwer (Fur Pair) Midspan Prt Status Indicatins Off Prt LED Clr Green Green blinking Orange Orange blinking 4.3.4.3 Midspan Status Table Prt Lad Cnditins Nn-active lad r unplugged prt Active lad is plugged and pwer is prvided bth n the data & spare pairs (PD device may cnsume up t 20Watts n each pair, and up t 40Watts ttal) Pwer is prvided nly n data r spare pairs (max pwer = 20 watts) Overlad cnditins; r shrt; r frced external vltage feed (cnstant DC) int the prt Prt can't be activated since ttal aggregated pwer exceeds maximum pwer budget The Midspan Status Table displays the fllwing parameters: Prt Vltage Pwer t the prt is discnnected. N DC vltage present n spare pairs Cntinuus nminal DC vltage is present n the spare pairs Cntinuus nminal DC vltage is present nly n the data r spare pairs, and nt n bth f them Pwer t the prt is discnnected. N DC vltage is present n the spare pairs Pwer t the prt is discnnected. N DC vltage is present n the spare pairs 23

Parameter Ttal Pwer Cnsumptin Maximum available Pwer System Vltage PD Detectin Methd Midspan Status 4.3.4.4 General Pwer Status Table Table 4-4: Midspan Status Table Details Descriptin Ttal pwer cnsumed by all PDs Maximum available Pwer fr all external PE devices Vltage level supplied t PDs Detectin methd selected by the user frm the System Cnfiguratin - Prduct Parameters menu (see System Cnfiguratin Prduct Parameters - 65xx, 65xxG, 70xxG, 80xx Family, sectin 4.3.13) Midspan status display with the fllwing ptins: Active: nrmal peratin Midspan has n firmware Internal Cmm. Failure Midspan firmware update In the Prt Status Table, an i image appears under each prt. Clicking the i image, r the RJ45 jack image, causes a new ppup web page t appear with detailed prt descriptin infrmatin (see Figure 4-7): Parameter Figure 4-7: Detailed Prt Descriptin Infrmatin Table 4-5: Detailed Prt Descriptin Infrmatin Descriptin Prt Enabled: Prt is enabled Disabled: Prt is disabled Enabled: Delivering Pwer- Prt is enabled and a valid PE PD device is being cnnected and cnsuming pwer Enabled: Failure t pwer a PE Device - Prt is enabled, PE PD device is cnnected, but n pwer is prvided. A pssible cause might be that the PE device cnsumes t much pwer (verlad) r the PE PD device is invalid, etc. Pwer Actual cnsumed pwer by individual PD Max Pwr Maximal allcated pwer per Prt as cnfigured in the Prt Cnfiguratin Pririty Current pririty level set by the user Terminal Type / Descriptin Textual terminal descriptin as cnfigured in the Prt Cnfiguratin Class PD device class (applicable nly fr Midspan family 65xx) 24

4.3.4.5 Manual Override Key Whenever the Weekly Schedule feature is activated, the IT manager can cnfigure ne f the Midspan PE prts t act as a Manual Override Deactivatin key. This enables easy temprary deactivatin f the Weekly Schedule feature, whenever an authrized user arrives at wrk during unexpected hurs. The IT manager selects the verride prt manually via the Web interface and then enables the verride feature; an icn then appears n the selected prt. The Deactivatin key is an ptinal item which may be purchased separately frm. Upn unexpected user arrival t wrk, the user inserts the deactivatin key int the previusly assigned verride prt (Figure 4-8) (usually ruted thrugh the patch panel near the drway entrance). Figure 4-8: Manual Override Deactivatin key As lng as the verride key is inserted, all deactivated PE prts remain active. Upn leaving wrk, the user remves the verride key, which in-turn will causes all Weekly Schedule assigned prts t turn Off (Weekly Schedule time cnfiguratin dependent). In cases where the icn appears but the crrespnding prt LED des nt illuminate, it means that that the prt had been assigned as a bypass prt, but the key has nt been inserted. 4.3.4.6 Weekly Scheduled Activated Prt/s The weekly schedule feature enables (when checked) scheduling f autmatic PE prts activatin/deactivatin as set in the weekly schedule activatin scheme. When the icn appears n a prt, it means that a specific prt had been activated by the Weekly Schedule algrithm, and it can prvide pwer t an external PE device. When the icn appears n a prt, it means that a specific prt was temprary and has been deactivated by the Weekly Schedule algrithm. Nte that PE prt activatin/deactivatin hurs depend n user Weekly Schedule cnfiguratin (see Sectin 4.4.3.1). 25

4.3.5 View - Cnfiguratin Summary Figure 4-9: Weekly Activated/Deactivated Prts The View - Cnfiguratin Summary screen (see Figure 4-10) displays the fllwing parameters: IP in-use: Currently used IP address/mask/gateway (may be acquired by DHCP, r static cnfiguratin) Static Netwrk Cnfiguratin: IP address which is used in cases where static IP cnfiguratin are selected. In cases where Static IP is already in use, IP in-use and Static Netwrk Cnfiguratin will reprt the same infrmatin. Remte Servers: IP address f a remte SysLg Server, IP address f a remte NTP (Netwrk Time Prtcl) Server Remte Trap SNMP Managers List: List f assigned SNMP managers Date & Time: Unit lcal time, as acquired frm the NTP Server (GMT time zne shuld be cnfigured by the user) Remte Access & Security: A list f Midspan remte access and security ptins; SNMP v1/v2 and SNMPv3, Telnet/SSH, RADIUS, and SSL Web encryptin Advanced Features: Indicatin f Autmatic Weekly Schedule PE prts activatin and UPS Pwer Management features activatin. 26

4.3.5.1 IP in-use Figure 4-10: View - Cnfiguratin Summary Screen IP in-use windw displays the current IP address being used with the fllwing parameters (Figure 4-11): Parameter Obtain IP by DHCP IP Address IP Mask Default Gateway 4.3.5.2 Static Netwrk Cnfiguratin Figure 4-11: IP in-use Windw Table 4-6: IP in User Parameters Descriptin Indicates hw the IP is btained as previusly set by the user (see System Cnfiguratin Netwrk Screen, page 32). IP address, numerical address which indicates a particular cmputer within a netwrk The definitin f the netwrk prtin f the IP address. This lcatin must be cnfigured in such a way that all IP addresses up t and including the lcal gateway are allwed. The IP address f the lcal Gateway, which enables cmmunicatin settings t ther LAN segments. The Static Netwrk Cnfiguratin windw (see Figure 4-12) displays netwrk cnfiguratin in cases where Static IP is selected (and nt DHCP). When the unit is cnfigured as a Static IP, bth IP-In Use and Static cnfiguratin tables are identical. 27

Figure 4-12: Static Netwrk Cnfiguratin Windw Parameter IP Address IP Mask Default Gateway MAC Address 4.3.5.3 Remte Servers Descriptin Midspan IP address Netwrk prtin f the IP address. This lcatin must be cnfigured in such a way that all IP addresses up t and including the lcal gateway are accessible. Fr example 255.255.255.0 IP address f the lcal Gateway, which enables cmmunicatin settings t ther LAN segments. Media access cntrl address. A 12-digit hexadecimal address used by the media access cntrl layer f an 802.2 cnnectin with Hst Integratin Server. The Remte Servers windw (see Figure 4-13) displays the IP address f a remte SysLg Servers, Radius Servers and the IP address f a remte NTP Server. Parameter NTP Server 4.3.5.4 Date and Time SysLg Server#1 SysLg Server#2 Radius Server #1 Radius Server #2 Figure 4-13: Remte Servers Windw Descriptin IP address f a remte Netwrk Time Prtcl (NTP) Server. Send SysLg events t Main and Backup SysLg Server via SysLg prtcl. Nte that an IP address 0.0.0.0 prhibits the unit frm sending Lg Events. Send remte username and passwrd t Radius Server fr authenticatin and access level (viewer r administratr). The Date and Time (GMT time zne) windw (see Figure 4-14) displays the unit s lcal time as acquired frm the NTP Time Prtcl Server by the user. The user shuld set the ffset lcal time zne as well. Figure 4-14: Date and Time Windw 28

Parameter Lcal Time (GMT) Date (D/M/Y) Descriptin Time (HH:MM:SS) as acquired frm the NTP Server Date (DD/MM/YYYY) as acquired frm the NTP Server NOTES: 1. When the apprpriate time and date are acquired frm the NTP server, an OK indicatin appears. Alngside the Time Zne Offset frm GMT windw in the System Cnfiguratin - Weekly Schedule Prts Activatin menu (refer t Sectin 4.4.3.1) If the system fails t acquire the apprpriate time and date FAIL indicatin appears instead! 2. If the unit fails t acquire time frm NTP Server, it displays the elapsed time starting frm 1/1/2005 3. If time and date are nt acquired, Weekly Schedule functinality will nt functin! 4. If ffset lcal time zne has been imprperly set by the user the Weekly Schedule feature will functin nt in the apprpriate hurs! 4.3.5.5 Remte Trap SNMP Managers List This list displays all f the user pre-cnfigured SNMP managers (see Figure 4-15). All listed managers receive standard and private traps sent by the Midspan (verify that PE ERF3621 Ntificatin is enabled and that private MIB are installed). 4.3.5.6 Remte Access & Security Figure 4-15: Remte Trap SNMP Managers List The Remte Access & Security windw (see Figure 4-16) displays a list f remte managers that may access the unit (SNMPv1/v2, SNMPv3, Telnet, SSH), whether WEB SSL encryptin is enabled r disabled and whether remte WEB/Telnet/SSH users are authenticated by remte RADIUS Server. Figure 4-16: Remte Access & Security Windw 29

Parameter Telnet/SSH SNMPv2 SNMPv3 Web SSL RADIUS Authenticatin RADIUS Accunting 4.3.5.7 Advanced Features Descriptin Indicates which f the Telnet/SSH remte terminals ver the Netwrk is enabled. The remte terminal may be Telnet, SSH (secure and encrypted remte terminal), r nne. Indicates whether SNMPv1/v2 is enabled (checked) r disabled (nt checked). Indicates whether SNMPv3 is enabled (checked) r disabled (nt checked). It is nt recmmended t enable SNMPv2 while SNMPv3 is in use! Encryptin Indicates whether WEB pages are encrypted by SSL (checked). When checked, indicates that the remte Telnet/SSH/WEB users are authenticated by the RADIUS Server. When checked, indicates that the Midspan sends an accunting reprt t the RADIUS Server whenever the remte Telnet/SSH/WEB user lgs in r lgs ut. The Advanced Features windw (see Figure 4-17) displays which f the Weekly Schedule / UPS Pwer Management advanced features is activated. The weekly schedule feature enables (when checked) scheduling f autmatic PE prts activatin/deactivatin as set in the weekly schedule activatin scheme. The UPS Pwer Management feature enables (when checked) t extend the perid f time the Midspan prvides pwer t high pririty PE devices during a pwer failure. This is accmplished by mnitring the UPS battery level, and autmatically shutting dwn lw pririty PE prts, whenever the UPS battery level drps t a lw level. Figure 4-17: Advanced Features Windw Parameter Weekly Schedule UPS Pwer Management Descriptin Indicates that the weekly schedule feature had been activated via the System Cnfiguratin - Weekly Schedule Prts Activatin menu. Indicates that the Midspan was cnfigured t cmmunicate with UPS SNMP agent t mnitr the UPS battery level and autmatically disable lw pririty PE prts in cases where the UPS battery is lw. 30

4.3.6 View - Prduct Infrmatin The View - Prduct Infrmatin screen displays the fllwing parameters (see Figure 4-18): Parameter Prduct Nickname Part Number Serial Number Prductin Number Sftware Versin Firmware Versin Bt Versin Flash Size 4.3.7 System Cnfiguratin Screen Figure 4-18: View - Prduct Infrmatin Screen Descriptin Unit nickname as cnfigured by netwrk administratr Midspan part number Midspan serial number Unique manufacturing prduct number per each Midspan type (all Midspans f the same type have the same prductin number) Netwrk Manager Mdule sftware versin Firmware versin being used by PE Netwrk Manager Mdule bt versin Reprt flash memry size n Netwrk Management Mdule. System Cnfiguratin Screen has the fllwing cnfiguratins (Figure 4-19): Netwrk Cnfiguratin SNMP Cnfiguratin SNMPv3 Cnfiguratin Security Cnfiguratin RADIUS Cnfiguratin UPS Pwer Management Cnfiguratin Prduct Parameters - Cnfiguratin System Cnfiguratin - Maintenance 31

4.3.7.1 System Cnfiguratin Netwrk Screen Figure 4-19: System Cnfiguratin Screen The Netwrk Cnfiguratin screen (see Figure 4-20) enables cnfiguratin f static/dynamic IP address, static NTP, SysLg lg servers and autmatic SNMP Trap list, SysLg and Radius IP (using a DHCP Server which simplify management whenever many Midspan devices are being managed) (see Sectin 4.3.7.2 fr a detailed descriptin). Figure 4-20: System Cnfiguratin Netwrk Screen Table 4-7: System Cnfiguratin Netwrk Screen Details 32

Parameter Descriptin When checked enables the Midspan t btain IP address frm DHCP Server. Nte that the Static IP Address fields are dimmed! Static IP address t be used in cases where DHCP is disabled. Static IP subnet mask and default gateway t be used in cases where DHCP is disabled. Set Vendr Class ID within DHCP-request message sent by Midspan t DHCP Server. Whenever DHCP is active, Enable/Disable DHCP Server t autmatically cnfigure SNMP Managers IP, SysLg Server IP, and RADIUS Server IP. NTP Server SysLg Server #1 SysLg Server #2 4.3.7.2 Aut Services Cnfiguratin by DHCP IP address f a remte NTP Server Lcal time GMT ffset can be cnfigured via the Weekly Schedule Prt Activatin WEB page. IP address f a remte SysLg server t which the Midspan sends lg events. Nte that an IP address 0.0.0.0 prhibits the unit frm sending lg events. Updates new netwrk parameters. All Prperties and Remte Server parameters becme effective nly after this buttn has been clicked. Cancels current peratin and restres previus values in cases where the Update & Save buttns were nt clicked. DHCP Server can be cnfigured (see Figure 4-21) t autmatically set the Midspan SNMP Manager List, SysLg servers, and Radius Servers. Such a cnfiguratin simplifies multiple Midspans management. The cnfiguratin example shwn belw is based n a Windws 2008 Server. The same cnfiguratin guidelines shuld be used when anther DHCP Server type is in use. Cnfigure Midspan DHCP Vendr Class ID (DHCP ptin 60) n Midspan: Set Vendr Class ID string which will be sent frm the Midspan t DHCP Server in each DHCP-Discver and DHCP-Request message. Figure 4-21: Aut Services Cnfiguratin by DHCP Cnfigure DHCP Vendr Class ID n DHCP Server: Cnfigure same Vendr Class ID n DHCP Server. Whenever DHCP Server detects a knwn Vendr Class ID string, it may be cnfigured t prvide varius IP addresses which are unique fr each pre cnfigured Vendr Class ID string. 1. Right click n DHCP rt and then chse Define Vendr Class (see Figure 4-22). 2. Click Add. 3. Fill in the Display name and Descriptin fields. 33

4. Click n the ASCII sectin and type midpsan_ip_list (Figure 4-23). 5. Click OK t clse the windw. Figure 4-22: Defining Vendr Class Adding Pre Defined Sub types: 1. Right click n DHCP rt. 2. Select the Set Predefined Optins (Figure 4-24). Figure 4-23: Set Vendr Class String 3. Select the new Optin Class - Midspan autmatic IP cnfiguratin (see Figure 4-25). 4. Click OK 5. Click Add. 34

Figure 4-24: Set Predefined Optins In the Optin Type windw (Figure 4-26): 1. Fill in the Name and Descriptin fields. 2. Set Data Type t IP Address. Figure 4-25: Adding Predefined Sub Types 3. Check the array checkbx. The Cde field must be the same as in the Midspan (Figure 4-27). 4. Click OK. 35

Figure 4-26: SNMP Manager Optin Type Cde 180: SNMP Manager IP list Cde 181: SysLg IP list Cde 182: Radius IP list Figure 4-27: Midspan Optin Cde Repeat the same prcedure t create the SysLg Manager List and Radius Manager List Optin Type (Figure 4-28 and Figure 4-29). Figure 4-28: SysLg Optin Type 36

Setting Scpe Optins: 1. Select the apprpriate DHCP, 2. Right Click Scpe Optins. 3. Select Cnfigure Optins (Figure 4-30). 4. Select the Advanced tab (Figure 4-31). Figure 4-29: RADIUS Optin Type 5. In the Vendr Class select the new defined vendr class (Midspan Autmatic IP Cnfiguratin). Figure 4-30: Scpe Optins Cnfiguratins 37

Figure 4-31: Midspan Scpe Optins Check the sub vendr ptins that the DHCP Server shuld advertise s as t autmatically cnfigure the varius IP addresses used by the Midspan. The new cnfigured scpe ptins are added t the Scpe Optins advertised by the DHCP Server (Figure 4-33). Figure 4-32: Cnfiguring Scpe Optins 38

Setting SNMP Manager IP Address List: 1. Select SNMP Manager List. 2. Right click and select Prperties. (Figure 4-34). Figure 4-33: Advertised Scpe Optins 3. Type SNMP Manager IP Address (up t 10 SNMP Managers). 4. Click Add. 5. Repeat same prcess fr SysLg IP list (up t tw addresses) and Radius Servers IP list (Figure 4-35). Figure 4-34: SNMP Scpe Optins Figure 4-35: Setting SNMP Manager IP List Setting Midspan Autmatic Service Cnfiguratin: After cnfiguring the DHCP Server t advertise the SNMP Manager List, SysLg Servers List and Radius Server List, cnfigure which Midspan Netwrk services shuld be cnfigured dynamically, and which ne shuld use Midspan static cnfiguratin. 39

As shwn in Figure 4-36, SNMP Manager IP List and SysLg IP are updated dynamically by the DHCP Server. The Radius Servers IP list is nt updated even if advertised by the DHCP Server. Check Obtain IP by DHCP checkbx and click Update & Save. Figure 4-36: Midspan Autmatic Service Cnfiguratin NOTES: All IP address btained by the Aut Service Cnfiguratin by DHCP will be saved even after Midspan DHCP ptin was disabled Checking the SNMP, SysLg r Radius has n effect if Obtain IP By DHCP is unchecked 4.3.7.3 Lg Server The Midspan can send varius internal event reprts t an external hst running SysLg daemn applicatin (see Figure 4-37) which lgs thse events fr future use. An example f such SysLg server applicatin can be fund at http://www.kiwisyslg.cm/. Figure 4-37: Syslg Server Lg Events 40

SysLg messages are sent whenever the SysLg Server s IP is ther than 0.0.0.0. The fllwing events may be sent by the Midspan: System was restarted PSE prt SNMP status has changed Midspan delivers pwer abve xy% threshld Midspan delivers pwer less then xy% threshld (after exceeded pwer message was sent) Remte user tried t access web view pages using an incrrect passwrd Remte user tried t access web cnfiguratin pages using incrrect passwrd Unit was restred t factry default values Unit cnfiguratin was changed Remte Telnet user failed t lgin (incrrect user r passwrd) Remte SSH user failed t lgin (incrrect user name/ r passwrd) RADIUS Server rejected remte Telnet/SSH/web user N reply frm primary and secndary RADIUS Server Remte Telnet/SSH/web user gt viewing access privilege frm remte RADIUS Server, while trying t access cnfiguratin sectin Weekly Schedule verride key was inserted Weekly Schedule verride key was remved Remte UPS perates n battery Remte UPS switched back t AC Maximum delivered pwer by Midspan was changed by remte SNMP manager r UPS dynamic pwer management algrithm Additinal Midspan 90xxG SysLg messages: Internal Pwer Surce failure. External Pwer Surce is in use Internal Pwer Surce was restred External Pwer Surce failure External Pwer Surce was restred Midspan is cnnected t incmpatible Pwer-Backup surce type. Turn unit ff and discnnect it. 4.3.7.4 NTP Server Each SysLg message cntains a message date and time (GMT). The Midspan acquires date & time frm the Netwrk NTP Server. Whenever a valid NTP Server IP is cnfigured, the Midspan acquires date & time (GMT) frm the Netwrk NTP Server. In cases where n valid IP is set, r in cases where the Midspan fails t acquire time frm the NTP Server, initial Midspan time will be set t 1/1/2005 as default. 4.3.8 System Cnfiguratin SNMP The Unit s SNMP agent (v1/v2/v3) enables a remte SNMP management statin t mnitr a unit, enable/disable PE prts (RFC3621), view PE MIB statistics and MIB-II Netwrk statistics. The Private MIB extends PE functinality beynd the RFC3621 PE MIB. Fr example: Set each individual PE prt maximum pwer Read each individual prt current pwer Limit entire Midspan maximum pwer The SNMPv3 ffers a secured methd fr accessing the Midspan, bth fr cnfiguratin and mnitring. SNMP Netwrk packets may be authenticated by MD5 and encrypted by DES. 41

The System Cnfiguratin SNMP screen enables cnfiguratin f SNMP parameters cmmn t bth SNMPv1/v2 and SNMPv3 (SNMPv1/2 cmmunity string is the nly exceptin). The fllwing parameters can be cnfigured (see Figure 4-38): SNMPv1/v2c Cmmunity Strings MIB-II System Infrmatin Remte Trap SNMPv2c/v3 Managers List PE MIB partial cnfiguratin parameters 4.3.8.1 SNMPv2c Figure 4-38: System Cnfiguratin SNMP Screen The SNMPv2c feature (Figure 4-39) enables/disables an SNMP agent t respnd t SNMPv1/v2c get/set cmmands, generated by remte SNMP Management statin as HP OpenView, IBM Tivli, etc. Cmmunity strings Get/Set/Trap cmmunity strings are actually SNMP passwrds. T enable remte SNMP manager cmmunicatin with the device, yu must cnfigure his cmmunity strings t match thse f the Midspan. Cmmunity Strings windw enables cnfiguratin f the fllwing parameters: Figure 4-39: SNMPv2 Windw 42

Field Enable SNMPv2c Get cmmunity Set cmmunity Trap cmmunity 4.3.8.2 System Infrmatin (MIB-II, v2c/v3) Table 4-8: SNMPv2 Field Details Descriptin Enable/Disable SNMPv1/v2c agent. The System Infrmatin windw enables cnfiguring the fllwing: Buttn/Checkbx SysCntact SysName SysLcatin 4.3.8.3 PE MIB (RFC3621, v2c/v3) Used by remte SNMP NMS statin fr GET cmmands (get infrmatin frm Midspan). Used by remte SNMP NMS statin fr SET cmmands (change cnfiguratin as prt enable/disable, etc.). Each TRAP sent by the Midspan t remte NMS managers cntains Trap cmmunity string. Remte SNMP NMS managers may use it in rder t filter ut unnecessary TRAP events. Table 4-9: System Infrmatin Windw Descriptin SNMP MIB-II 1.3.6.1.2.1.1.4: Textual identificatin f the cntact persn fr this managed nde, jined by infrmatin n hw t cntact this persn. SNMP MIB-II 1.3.6.1.2.1.1.5: Textual identificatin f an administratively-assigned name fr current managed nde. SNMP MIB-II 1.3.6.1.2.1.1.6: Textual identificatin f the physical lcatin f current nde. This windw simplifies the cnfiguratin f tw majr RFC3621 PE MIB parameters as fllws: Buttn/Checkbx Enable Ntificatin Ntify Exceeded Pwer Usage (1-99%) 4.3.8.4 Remte Trap SNMP Managers List Table 4-10: RFC3621 PE MIB Parameters Descriptin Allws/prhibits unit frm sending PE traps (bth SNMPv2c and SNMPv3) The Midspan sends a trap whenever ttal pwer cnsumptin exceeds xy%, in cases where Enable Ntificatin checkbx is checked, This windw enables cnfiguratin f up t 10 remte SNMP managers (see Figure 4-40). Whenever Midspan needs t send a trap message, the trap will be duplicated and sent by the Midspan t all the remte SNMP managers (in cases where bth SNMPv2c and SNMPv3 are set, each trap will be sent twice, nce by SNMPv2c and nce by SNMPv3). 43

Figure 4-40: Remte Trap SNMP Managers List Buttn Descriptin Updates Midspan functinality per the new cnfiguratin. All SNMP parameters becme effective nly after this buttn has been clicked! Cancels current peratin and restres previus values 4.3.9 System Cnfiguratin SNMPv3 SNMPv2C activatin is perfrmed via the Security WEB page. The System Cnfiguratin SNMPv3 screen (see Figure 4-41) enables cnfiguratin f three different SNMPv3 user types and ntificatins (trap) which requires the same parameters as any ther SNMPv3 user. Figure 4-41: System Cnfiguratin SNMPv3 Screen 44

Enable/Disable SNMPv3: Enables/disables SNMPv3 agent t respnd t SNMPv3 GET/SET messages sent by remte SNMP management statin (nte that SNMPv3 wrks independently via SNMPv2c). Guest User: Enables read nly access t the MIB-II System OiD tree. It shuld be used by SNMP managers wh prefer nt t expse their real username and passwrd t pl the device fr "keep alive" reprts. A guest user has n authenticatin r privacy (encryptin) ability. View User: Has read nly (GET) access t all SNMP branches but cannt perfrm any mdificatins (SET). User Name: SNMPv3 user (mandatry field). Authenticatin Passwrd (MD5): Applicable when MD5 r MD5+DES is being used. Privacy Passwrd (DES): Applicable nly when MD5+DES is being used. Authenticatin + Encryptin: Enables selectin f ne f three security levels: Nne: SNMPv3 packets are neither authenticated nr encrypted. MD5: SNMPv3 packets are authenticated but nt encrypted. MD5+DES: SNMPv3 packets are authenticated and encrypted. Admin User: Has full reading (GET) and writing (SET) access t all SNMP branches. User Name: SNMPv3 user (mandatry field). Authenticatin Passwrd (MD5): Applicable when MD5 r MD5+DES is being used. Privacy Passwrd (DES): applicable nly when MD5+DES is being used. Authenticatin + Encryptin: Enables selectin f ne f three security levels: Nne: SNMPv3 packets are nt authenticated nr encrypted. MD5: SNMPv3 packets are authenticated but nt encrypted. MD5+DES: SNMPv3 packets are authenticated and encrypted. Ntificatin Trap: SNMPv3 trap cnfiguratin parameters are identical t SNMPv3 user User Name: SNMPv3 user (mandatry field). Authenticatin Passwrd (MD5): applicable when MD5 r MD5+DES is being used. Privacy Passwrd (DES): Applicable nly when MD5+DES is being used. Authenticatin + Encryptin: Enables selectin f ne f three security levels: Nne: SNMPv3 packets are nt authenticated and neither encrypted MD5: SNMPv3 packets are authenticated but nt encrypted MD5+DES: SNMPv3 packets is authenticated and encrypted 4.3.10 System Cnfiguratin Security The System Cnfiguratin Security screen enables cnfiguratin f the fllwing parameters (see Figure 4-42): WEB Secure Access & Cnfiguratin Telnet/SSH View & Cnfiguratin Remte Access 45

4.3.10.1 Web Secure Access & Cnfiguratin Figure 4-42: System Cnfiguratin Security Screen Web pages are divided int tw sectins, View and Cnfiguratin. View web pages prvide status reprts and cnfiguratin summaries, withut being able t change cnfiguratin. Cnfiguratin web pages (under System Cnfiguratin and Prt Cnfiguratin) enable the user t view and mdify the Midspan cnfiguratin. View web pages and Cnfiguratin web pages use different passwrds. View user name and passwrd prvides access nly t View web pages, while cnfiguratin user name and passwrd prvides access bth t View and Cnfiguratin Web pages (see Figure 4-43). Figure 4-43: Web Secure Access & Cnfiguratin Windw Disabling Web View/Cnfiguratin passwrd prtectin is applicable nly when RADIUS Authenticatin is disabled! 4.3.10.2 Telnet/SSH View & Cnfiguratin The Telnet/SSH remte terminal are always passwrd prtected. The Telnet/SSH menu is divided int View privilege and Cnfiguratin privilege sub menus (see Figure 4-44). View privilege: Can view Telnet/SSH text menus but will be rejected when trying t access the Cnfiguratin text menus. Cnfiguratin privilege: can access bth t View and Cnfiguratin text menus. 46

Figure 4-44: Telnet/SSH View & Cnfiguratin Windw Web, Telnet/SSH username and passwrd are applicable nly in cases where RADIUS Authenticatin is disabled. Remte Terminal view menu example Remte Terminal cnfiguratin menu example 4.3.10.3 Remte Access See Figure 4-45. Figure 4-45: Remte Access Windw Enable Telnet / SSH: Enables/disables remte terminal access by Telnet, SSH r nne f them. Enable Web SSL Encryptin: When checked, enables encryptin f WEB pages between remte WEB client and an n-bard WEB Server. 47

Due t Web brwser Web pages caching, whenever changing the Web SSL encryptin methd (encrypted/nn encrypted), clse the Web brwser and re-pen it. Buttn Descriptin Updates Midspan parameters and saves cnfiguratin. All Remte Access parameters becme effective nly after this buttn has been clicked. Cancels current peratin and restres previus values (in cases where was nt clicked). 4.3.11 System Cnfiguratin - RADIUS Whenever the RADIUS client is enabled (see Figure 4-46), the remte Web/Telnet/SSH username and passwrd are sent t the RADIUS Server fr authenticatin purpses. This in turn can prvide the user with a viewer access level, administratr access level, r reject the remte user. Any invalid activity (e.g. user was rejected, user tried t access the cnfiguratin sectin), is reprted t the SysLg Server Figure 4-46: RADIUS Cnfiguratin Screen Enable RADIUS Authenticatin: When checked, all remte Telnet/SSH/Web users are authenticated by the RADIUS Server. If RADIUS is cnfigured incrrectly, the nly way t deactivate RADIUS is t cnnect t the unit s lcal RS232 terminal and selecting the Restre t factry default ptin. This actin leaves the unit s IP unchanged and restres mst f the unit s cnfiguratin parameters t their default values. Enable RADIUS Accunting Reprt: When enabled, (checked), the Midspan sends an accunting reprt whenever lgin r lgut f remte Web/Telnet/SSH users ccurs. Nte that the Accunting reprt can be enabled nly if RADIUS Authenticatin is enabled. 48

Authenticatin Methd: Determines whether the remte user, username and passwrd is sent t the RADIUS Server via PAP r CHAP (mre secure). Primary and Secndary RADIUS Server IP Address: IP address f the RADIUS Server. In cases where there is n reply frm the primary RADIUS server after 3 retries, the same authenticatin request will be sent t the backup RADIUS Server. Shared Secret: The same string must be cnfigured bth in the RADIUS server and the Midspan RADIUS client. Authenticatin UDP Prt: Shuld nt be changed, unless yu use a RADIUS Server which utilizes UDP prt 1645. Accunting UDP Prt: Shuld nt be changed, unless yu use a RADIUS Server which utilizes UDP prt 1646. Timeut: A perid f time (in secnds) during which the Midspan RADIUS client waits fr a reply frm the RADIUS Server befre resending a request. Nte that the Midspan RADIUS client retries up t 3 times befre accessing the backup RADIUS server. Fr example, if timeut equals tw secnds, the backup server will be accessed nly after 6 secnds. 4.3.11.1 Cnfiguring RADIUS Server t Prvide Viewer/Administratr a Privileged Access T get administratr privileges, RADIUS Server Authenticatin-Reply shuld cntain a 'callback-number' attribute with an 'admin' value. Failing t d s results in prviding viewing access privilege nly! 4.3.11.2 Hw t Differentiate Between Telnet/SSH/Web Users Each Midspan authenticatin-request message includes a 'Calling-Statin-ID' attribute with ne f the fllwing values: 'telnet', 'ssh' r 'web'. The RADIUS server can use it t prvide the apprpriate privilege access level. Whenever RADIUS authenticatin is enabled, Web users will be authenticated regardless f whether r nt the Web username and passwrd validatin was unchecked (disabled). 4.3.12 System Cnfiguratin - Dynamic UPS Pwer Management Dynamic UPS pwer management (Figure 4-47) enables extending UPS peratin time whenever pwer failure ccurs by mnitring the UPS battery level. Whenever the battery level starts t decline, the Midspan autmatically starts shutting dwn lw pririty prts t save verall pwer cnsumptin, which in turn extends the peratin f critical PD devices by extending UPS peratin time. Figure 4-47: Dynamic UPS Pwer Management Parameters t be set by the user are (see Figure 4-48): UPS SNMP Agent Netwrk Parameters Vendr Specific SNMP Parameters 49

Maximum Prvided Pwer Versus UPS Battery Level Whenever Dynamic UPS Pwer Management is enabled, the View - Status screen prvides infrmatin related t the UPS status (battery level, UPS perates n AC/Battery, UPS Battery remaining time). User shuld nt change by SNMP private MIB mainpwerusagebudget OiD while Dynamic UPS Pwer Management is enabled. Figure 4-48: Dynamic UPS Pwer Management Screen In a typical Dynamic Pwer Management cnfiguratin, PE prts pririty and pwer limit must be set. Whenever battery level drps belw 80%, 60%, 40%, etc. (main pwer failure), the Midspan autmatically starts t shut dwn pre-defined lw pririty PE prts. This is dne t reduce UPS pwer cnsumptin. The prts which are deactivated are marked by blinking LEDs which are lcated n tp f each prt. The same reprt can be seen frm remte by brwsing t the Midspan unit and accessing View System Status Web page. Blinking green fr the 65xx, 65xxG, 70xxG and 90xxG series 4.3.12.1 UPS SNMP Agent SysLg reprts and SNMP Traps are sent, per each deactivated PE prt. Enable Midspan Dynamic UPS Pwer Management: Enables/ disables Midspan frm mnitring remte UPS ver the Netwrk by sending SNMP GET messages. IP Address: IP address f the UPS SNMP agent. SNMP Type: Midspan uses either SNMPv1 r SNMPv2c t cmmunicate with the UPS SNMP agent. GET Cmmunity String: Shuld be identical t the cmmunity string set fr the UPS SNMP agent. UPS Vendr: Fr APC and MGE UPS vendrs, there is n need t define a dedicated SNMP Object s ID t be used t cmmunicate with the UPS. In cases where anther vendr is used, select the custm ptin and manually type in the SNMP Object ID's t be used. 50

Whenever APC r MGE UPS vendrs are selected, the Custm UPS Vendr SNMP OiDs sectin is dimmed. It is active nly whenever the custm ptin is selected! Timeut: The perid f time in which the Midspan waits fr reply frm the UPS SNMP agent befre retrying again. 4.3.12.2 Custm UPS Vendr SNMP OIDs Battery charge level (%) OiD: An SNMP bject ID which prvides battery charge percentage level (100% = battery fully charged). UPS n Battery/AC OiD: SNMP bject ID which reprts if the UPS perates n an AC/Battery. UPS n Battery OiD value: Used by the Midspan t prperly interpret UPS n AC/Battery returned value. Nte that any ther returned value is cnsidered as if the UPS wrks n AC. Battery time left OiD: An SNMP bject ID which prvides the amunt f UPS battery time remaining. Time Unit Type (Minute/Secnd): Selected time units (secnds, minutes r time ticks) fr the Timeut parameter. 4.3.12.3 Midspan Max Pwer versus UPS Battery Charge Level Fr each 20% drp in battery level, the user may limit the maximum pwer allcated by the Midspan (Figure 4-49) Figure 4-49: Midspan Enfrced Maximum Pwer Levels NOTES: 1. The user shuld make sure that the Midspan and the Ethernet Switch are cnnected t an AC pwer surce thrugh a UPS! 2. After cnfiguring, the user shuld verify that the Midspan cmmunicates with the UPS ver the Netwrk. This is perfrmed via the View - Status page; UPS Pwer Management windw appears n the screen with the relevant UPS infrmatin. 3 If UPS-Midspan cmmunicatin fails, the screen belw with??? marks appears (see Figure 4-50): Figure 4-50: UPS-Midspan Cmmunicatin Failure 51

4.3.13 System Cnfiguratin Prduct Parameters - 65xx, 65xxG, 70xxG, 80xx Family Figure 4-51: System Cnfiguratin Prduct Parameters Screen This screen (Figure 4-51) is used t cnfigure the fllwing prduct parameters: Midspan Nickname System Detectin Methd Status View Refresh Rate Buttn Descriptin Assists netwrk managers t identify a Midspan by assigning a unique name fr each Midspan device. PD Detectin Methd fr 70xxG Midspan series: IEEE 802.3af + IEEE 802.3at IEEE 802.3af +IEEE 802.3at + Legacy (default) Enables Setting f System Status WEB page refresh rate Updates Midspan prduct based parameters. All the prduct parameters becme effective nly after this buttn has been clicked! Cancels current peratin and restres previus values 52

4.3.14 System Cnfiguratin Prduct Parameters - 90xxG Family Figure 4-52: System Cnfiguratin Prduct Parameters Screen Prduct parameters set by the user include (see Figure 4-52): System Detectin Methd Other vendrs pre 802.3at PD Extended Pwer Mde Pwer Backup Mde Midspan Nickname Status View Refresh Rate Buttn Descriptin PD Detectin Methd fr 90xxG Midspan series: IEEE 802.3af + IEEE 802.3at IEEE 802.3af +IEEE 802.3at + Legacy Pwers pre 802.3at PD devices including Cisc 125X access pints. Extend PD maximum pwer beynd 802.3at 30W t 36W 53

External Pwer Backup mde Redundancy: In this mde the external pwer surce backs up the internal pwer supply f the Midspan. In case the internal pwer supply fails t perate, the external surce will pick up the full lad and all the prts will cntinue t functin nrmally. Maximum Pwer: In this mde the external pwer surce ffers additinal pwer n tp f the pwer delivered by the internal pwer supply. Fr example the PD-9024G/ACDC/M Midspan is using internal pwer supply f 430W, when external pwer surce is cnnected in Max Pwer mde(pd-rps-450) the user available pwer will be 860W (430W internal + 430W external) Assists netwrk managers t identify a Midspan by assigning a unique name fr each Midspan device. Enables Setting f System Status WEB page refresh rate. Updates Midspan prduct based parameters. All the prduct parameters becme effective nly after this buttn has been clicked! Cancels current peratin and restres previus values 4.3.15 System Cnfiguratin Maintenance System Cnfiguratin Maintenance screen (see Figure 4-53) enables maintenance means destined t sustain the Midspan. Reset Manager Mdule Reset Unit Restring Factry Defaults Figure 4-53: System Cnfiguratin Maintenance Screen 54

Buttn/Checkbx Descriptin Resets nly the Manager Mdule withut affecting Midspan PE prts Resets entire unit. All active PE prts mmentarily stp prviding pwer t PE devices (cnfiguratin des nt change) Restre mst Midspan parameters t their default value (IP isn't changed) 4.4 Prt Cnfiguratin Screen Prt Cnfiguratin screen enables the fllwing (Figure 4-54): Prt Cnfiguratin Enable/Disable: Prvides a quick access t prts t enable/disable ne r mre f them. Prt Cnfiguratin Detailed: Enables detailed cnfiguratin f varius PE prt values such as pririty, allcated pwer and prt/pd descriptin. Prt Cnfiguratin Weekly Schedule: Enables the user t cnfigure weekly scheduled prts activatin/deactivatin. Figure 4-54: Prt Cnfiguratin Screen 4.4.1 Prt Cnfiguratin Enable/Disable All prts r Individual prts can be enabled r disabled in ne actin. Disabled prts are marked with a red crss n the RJ-45 prt; refer t Sectin 4.3.4. 55

Figure 4-55: Prt Cnfiguratin Enable/Disable Screen Buttn/Checkbx Descriptin Enabled: Enables all prts Disabled: Disables all prts Nte: Only WEB page is effected Update: Clicking this buttn, activates the new user settings but des nt stre new cnfiguratin (unit reset verrides latest changes) Cancel: Cancels current peratin and restres previus values in cases where Update & Save were nt clicked Update & Save: Activates new setting and save updated cnfiguratin in cases where Midspan restarts. 4.4.2 Prt Cnfiguratin Detailed If nly the Update buttn is pressed, a blinking image appears near the Save & update buttn, reminding the user that latest changes were nt saved. Reversing latest changes and pressing Update, eliminates the blinking image. Saving latest changes eliminates this image as well. The Prt Cnfiguratin Detailed screen (see Figure 4-56) enables the user t cntrl individual prts and set-up parameters as fllws: Activate/shut-dwn individual prts Allcate maximal pwer per prt (nt applicable fr 80xx) Set-up the pririty f each prt Add prt descriptin 56

Figure 4-56: Prt Cnfiguratin Detailed Screen (65xx,65xxG, 70xxG, 90xxG Family) T simplify the cnfiguratin f multiple prts (see Figure 4-57), each parameter can be set by pressing a single buttn (SET), thus applying the selected values t all prts (actin n all prts). Figure 4-57: Prt Cnfiguratin Detailed Screen (80xx Midspan Family) 1. Midspan 70xxG series enables up t 32 watts per prt. 2. Midspan 90xxG series enables up t 30/36 watts per prt. 3. Maximum Pwer setting is nt applicable fr High Pwer fur pair Midspan 80xx series. 4.4.2.1 Prts Activatin Prts activatin/deactivatin is perfrmed by the user accrding t actual requirements. Each prt can be switched t Enable r Disable state. This is dne by checking the clred checkbxes n the left hand side f the screen. 4.4.2.2 Allcating Maximum Pwer ( 65xx, 65xxG Midspan family) Pwer allcatin is perfrmed by selecting the maximum allwed pwer per prt frm the drp-dwn menu, lcated n the Max. Pwer clumn. Available pwer values are: Default: 16.8 W Minimum: 1 W 57

Maximum: 16.8 W 4.4.2.3 Allcating Maximum Pwer (70xxG Midspan family) Pwer allcatin is perfrmed by selecting the maximum allwed pwer per prt frm the drp-dwn menu, lcated n the Max. Pwer clumn. Available pwer values are: Default: 32 W Minimum: 1 W Maximum: 32 W 4.4.2.4 Allcating Maximum Pwer (90xxG Midspan Family) Pwer allcatin is perfrmed by selecting the maximum allwed pwer per prt frm the drp-dwn menu lcated n the Max. Pwer clumn. Available pwer values are: Default: 30 r 36 W if Extended Pwer Mde is set Minimum: 1 W Maximum: 30 W r 36W if Extended Pwer Mde was set 4.4.2.5 Setting Pririty The user can assign pririties t desired PDs in cases where the Midspan is perating with a limited surce f pwer. Pririty selectin is perfrmed frm the drp-dwn menu, lcated n the Pririty clumn; three pririty states are available: Critical High Lw (default) The Midspan allcates all available pwer t the PDs, accrding t the PE prts sequential number, starting frm prt #1 up t prt #24. Critical prts are pwered first, fllwed by High Pririty prts. Lw pririty prts are pwered last. A blinking LED indicates that a prt is nt pwered (due t lack f pwer). 4.4.2.6 Terminal Type / Descriptin In this clumn, the peratr can enter any free text such as: terminal lcatin, name f user, telephne number, etc. representing the crrespnding prt. Nte that the clumn has n effect n pwer itself and it functins as an assistance tl fr the IT manager. 4.4.3 Prt Cnfiguratin - Weekly Schedule The Weekly Schedule feature (see Figure 4-58) perfrms an autmatic activatin/deactivatin f PE prts based n a weekly activatin matrix (24 x 7). Deactivatin f prts may be required due t pwer saving during weekends, r security reasns (fr example turns ff wireless access pints during weekends, discnnect unused IP Phnes, r reduce pwer cnsumptin). Prir t using this feature, the user shuld set the NTP Server IP address (Netwrk Time Prtcl Server), GMT lcal time ffset, update the 24 x 7 hur matrix t match the user specific needs, assign the Midspan PE prts t be autmatically turned On/Off and assign the PE prts that shuld prvide pwer cntinuusly. 58

Figure 4-58: Prt Cnfiguratin Weekly Schedule. NOTES: 1. The Weekly Schedule feature requires a Midspan with an access t the NTP Server (Netwrk Time Prtcl Server). 2. Upn updating the weekly schedule cnfiguratin by pressing the Update & Save buttn, the user shuld wait fr a few secnds, refresh the WEB page and verify that green OK indicatin appears alngside the lcal time sectin (meaning that GMT time had been prperly acquired). 4.4.3.1 Weekly Schedule Prts Activatin Enable Weekly Schedule: Enables/disables the Weekly Schedule feature Enable Manual Override: Enables/disables the Manual Override key and selects the prt assigned as an verride key Remte NTP Server: Remte NTP (Netwrk Time Prtcl) Server IP address GMT Offset: User cnfigured GMT ffset Prts On/Off Weekly Schedule: 24 hurs, 7 days checkbx matrix. The Midspan prvides pwer nly during the selected (checked) hurs T simplify the cnfiguratin f the 24 x 7 matrix, the user can check all 24 prts fr a specific day by checking ne f the ALL checkbxes. Prts Assigned fr Autmatic Weekly Schedule Activatin: Selectin f the prts t be activated/de activated autmatically by the weekly schedule feature. Disabled prts cannt be assigned fr the Weekly Schedule, even if selected by the user. 59

5 Midspan 90xxG - Pwer Backup and Pwer Management Midspan 90xxG series can be cnnected t an external redundant pwer surce (Figure 5-1) r t a secndary 90xxG Midspan (Figure 5-2). The same internal pwer supply unit must be installed in bth units. Figure 5-1: External Pwer Backup Table 5-1 lists the varius cnnectivity ptins. Midspan Type Figure 5-2: Secndary Midspan Pwer Backup Table 5-1: Pwer Backup Cnnectivity Optins Pwer Backup Type PD-RPS-450 PD-RPS-1000 PD-9006G/ACDC/M PD-9012G/ACDC/M PD-9024G/ACDC/M PD-9024G/ACDC/M/F PD- 9006G/ACDC/M PD- 9012G/ACDC/M PD- 9024G/ACDC/M PD- 9024G/ACDC/M/F RFC3621 and private MIB SNMP Object IDs which apply t unit pwer supply capabilities r ttal pwer cnsumptin are reprted as if the tw Midspans are ne. Table 5-2 summarizes the affected SNMP Object IDs 60

Table 5-2: SNMP Object IDs Affected by 90xxG Midspan Pwer Backup Mde Cnnectin SNMP Object ID pethmainpsepwer (RFC3621) pethmainpseoperstatus (RFC3621) pethmainpsecnsumptinpwer (RFC3621) pethmainpseusagethreshld (RFC3621) mainpwerusagebudget (private MIB) mainpse_maxpwer (private MIB) 5.1 Viewing the Pwer Surce Status Pwer Backup Mde 430W/950W (Pwer backup mde = Redundant) 860W/1900W (Pwer backup mde = Maximum Pwer) Fault in case f pwer failure (Midspan is pwered by RPS r 2nd Midspan) Ttal pwer cnsumptin f bth Midspans Sends a trap whenever bth Midspan pwer cnsumptin exceeds xy% ut f pethmainpsepwer OiD (ttal available pwer by bth Midspans) pwer Changing pwer usage budget (%) in ne Midspan will change it in the 2nd Midspan as well Ttal maximum pwer f bth Midspans after it was reduced by pethmainpseusagethreshld (%) View the external pwer surce status (Ok/Fail) and pwer surce type (RPS/Midspan) in the View-Status Web page (Figure 5-3). Refer t Sectin 4.3 fr details n View - Status Screen. 5.2 RPS Pwer Backup Figure 5-3: Pwer Surce Status Cnnecting a Midspan 90xxG t a redundant pwer surce (RPS) prvides pwer backup by enabling the Midspan t be pwered by the unit's internal pwer surce and the RPS pwer surce. Tw pwer backup mdes are available: Redundancy: Maximum pwer that Midspan can prvide remains the same as if n RPS is being used (430 W r 950 W). This mde guarantees that all active PE prts cntinue t deliver same pwer regardless if Midspan is pwered by its internal pwer surce r by RPS. 61

Maximum Pwer: RPS pwer capabilities are added t the Midspan internal pwer surce capabilities. A Midspan with a 430 watt pwer supply can nw prvide 860 watts, and Midspan with a 950 watt pwer supply can nw prvide up t 1800 watts. Figure 5-4 displays the Pwer Backup Mde field fund in the System Cnfiguratin Prduct Parameters windw. Select the required mde in the drp dwn list. Figure 5-4: Pwer Backup Mde Cnfiguring Pwer Backup Mde t Maximum Pwer may cause sme f the PE prts t be shut dwn in case f pwer failure in RPS r Midspan pwer surce, since ttal pwer cnsumptin may exceed Pwer surce capabilities (430W/950W). 5.3 Dual 90xxG Midspan Pwer Backup Cnnecting a Midspan 90xxG t a secnd 90xxG Midspan prvides pwer backup by enabling the Midspan t be pwered by its internal pwer surce and frm 2 nd Midspan pwer surce. Tw pwer backup mdes are available, Redundancy and Maximum Pwer. An added feature, Pwer-Shift, enables mving pwer frm ne Midspan t anther whenever a Midspan requires mre pwer and the secnd unit has spare unused pwer. Redundancy: A Single Midspan internal pwer surce can pwer bth Midspans in case f a pwer failure in ne unit. The pwer sum f bth Midspans can nt exceed 430/950 watts. Each Midspan's initial maximum pwer is set t 430/2 = 215 watts r 950/2 = 475 watts (the maximum pwer may change during nrmal peratin). Maximum Pwer: The 1 st Midspan pwer surce capabilities are added t 2 nd Midspan's internal pwer surce capabilities. Tw Midspans having a 430 watt pwer supply can nw prvide 860 watts, while tw Midspans having a 950 watt pwer supply can prvide up t 1800 watts. 62

1. Changing pwer-backup mde in ne f the Midspan's will cause 2 nd Midspan pwer-backup mde t be changed t same pwer backup mde 2. When tw stand alne Midspans are cnfigured t different pwer-backup mdes, after being cnnected tgether bth Midspans will switch t Redundant pwer-backup mde. 5.3.1 Midspan 90xxG t Midspan 90xxG Pwer Shift Figure 5-5: View - Status Windw (Pwer Shift Display) Whenever tw 90xxG Midspans pwers back up each ther, tw additinal rws are added t the View - Status web page. The 1st additinal rw displays the extended Midspan pwer cnsumptin and maximum pwer. The 2 nd rw reprts ttal pwer cnsumptin and ttal maximum pwer. Figure 5-5 describes tw PD-9024G/ACDC/M Midspans backing up each ther, while in Redundancy Pwer- Backup mde. Ttal pwer f bth Midspans is limited t 430 watts (due t redundant mde cnfiguratin). Lcal Midspan maximum pwer was reduced by the Midspan pwer manager t 143 watts, while external Midspan maximum pwer was increased t 287 watts. Ttal pwer cnsumptin f bth Midspans is 237.8 watts. 5.3.2 Changing Pwer Limit (%) by SNMP Midspan maximum pwer can be limited by SNMP private MIB Object-Id mainpwerusagebudget (see Figure 5-6), r by Midspan itself whenever Dynamic UPS Pwer Management is enabled. Pwer shift between tw 90xxG Midspans pauses whenever the pwer limit (%) is less then 100% and resumes autmatically whenever pwer limit will be restred back t 100%. Changing pwer-limit (%) in ne f the 90xxG Midspan's will change autmatically pwer-limit n 2 nd Midspan t same value. 63

Figure 5-6: Midspan Pwer Limit by SNMP Table 5-3 describes an example f tw 9024G Midspans which back up each ther in Redundant Mde and whse mainpwerusagebudget SNMP OiD is changed frm 100% t 70%. Table 5-3: mainpwerusagebudget SNMP OiD Vs Midspan Maximum Pwer 5.3.3 Activating Dynamic UPS Pwer Management Dynamic UPS Pwer Management feature shuld be cnfigured nly n a single 90xxG Midspan whenever tw 90xxG Midspans pwer backup each ther. When the cnfigured Midspan detects a UPS pwer failure (UPS switched t battery), it will mdify Pwer-Limit % as per the user cnfiguratin. A Pwer-Limit value n the 2 nd 90xxG Midspan autmatically fllws a Pwer-Limit value f the Midspan which mnitrs the UPS ver SNMP.. mainpwerusagebudget SNMP OiD Maximum Pwer (Pwer Limit = 100%) Maximum Pwer (Pwer Limit = 70%) Midspan-1 Max Pwer Midspan-2 Max Pwer Ttal Pwer 287 watts 143 watts 430 watts Enabled Pwer Transfer Between Midspans 200 watts 100 watts 300 watts Pause (Pwer-Limit < 100%) The user shuld nt change by SNMP private MIB mainpwerusagebudget OiD while Dynamic UPS Pwer Management is enabled. 64

5.3.4 Pwer Failure and Invalid Midspan t Midspan Pwer Backup Cnnectin Reprt Pwer failure: In case f a pwer failure in ne 90xxG Midspan units, an SNMP trap (see SNMP private MIB) and SysLg message is sent t the SNMP Manager and SysLg manager, and an errr message appears in View-Status web page. Anther SNMP & SysLg message is sent whenever pwer is restred. Main Pwer LED will blink whenever 90xxG Midspan is being pwered by external Midspan/RPS due t internal pwer supply failure (n AC pwer). Invalid cnnectin: The fllwing behavir ccurs in cases where a 90xxG Midspan having a 450 watt pwer supply is cnnected t anther 90xxG Midspan having 1000 watt pwer supply: Bth Midspans will reduce maximum pwer t 41 watts which shuld stp pwer t mst PE PD devices. A Midspan reprt invalid cnfiguratin by sending SNMP Trap & SysLg message. An errr message appears n the View->Status Web page. A repeating errr message will appear n Terminal/Telnet/SSH screen. 65

6 SNMP Mnitring and Cnfiguratin Multiple Midspan devices management can be perfrmed by using 3rd party standard netwrk management tls such as HP Openview r SNMPc (Figure 6-1). 6.1 Enabling Midspan SNMP Figure 6-1: Netwrk Management Tl The Midspan manager mdule supprts SNMPv1, SNMPv2c, and SNMPv3. T use SNMP: 1. Brwse t the System Cnfiguratin SNMP r SNMPv3 Web page and verify that either ne f them is enabled. Fr SNMPv2c, brwse t the System Cnfiguratin SNMP Web page. Make sure that cmmunity strings match yur SNMP manager cnfiguratin. Fr SNMPv3, brwse t System Cnfiguratin SNMPv3 Web page and make sure username, authenticatin and privacy passwrd and encryptin methd match yur SNMP manager cnfiguratin. 2. Brwse t SNMP Web page. Enable PE MIB traps and set remte manager IP address in the Trap list. 6.2 SNMP MIBs Several MIBs are supprted by Midspan SNMP manager. RFC3621: Pwer Over Ethernet MIB which prvides varius management capabilities (see belw) Private MIB: Enhance PE functinality beynd RFC3621 PE MIB. RFC1213: MIB2 which prvides general netwrk statistics, and infrmatin n the device being managed. Varius SNMPv3 MIBs as RFC3413, RFC3414, RFC3415 66

6.3 RFC3621 PE MIB Fr a detailed PE MIB descriptin, refer t s Technical Nte 132, which describes in detail PE MIB functinality. RFC3621 PE MIB is lcated at 1.3.6.1.2.1.105 tree. The MIB is divided int 3 sectins (see Figure 6-2). The 1st sectin deals with PE prts and prvides functinality as Enable/Disable, read prt status, class, etc. Each OiD is accessed as a tw dimensinal array table. The 2nd sectin deals with pwer surce which is respnsible t prvide pwer t a grup f PE prts. It enables reading ttal pwer cnsumptin, pwer supply status, etc. The 3rd sectin enable/disables PE traps t be sent t remte SNMP managers. 6.4 Private MIB Figure 6-2: MIB Tree Structure Midspan's private MIB extend RFC3621 PE MIB with the fllwing additinal management functinalities (see Figure 6-3): 67

Prt Parameters Figure 6-3: MIBs Management Functinalities Readut f each individual prt's pwer cnsumptin. Set maximum pwer that the PD device may cnsume. System Parameters Reslves MIB-II SysbjID descriptin. Read Pwer Supply vltage. Read/Set detectin methd (802.3af+at r 202.3af+at plus legacy). Read/Set Midspan pwer budget percentage (%). Fr example setting t 50% fr Midspan with 400Watt capacity, limits Midspan pwer t 200 Watt. NOTES: 1. Pwer budget limitatin will be canceled whenever the Midspan manager mdule is restarted, r the Midspan is turned ff and n. 2. 65xx, 65xxG, 70xxG - Midspan pwer budget cannt be set belw 37 Watt. Whenever cnfiguring pwer budget in percentage (%), belw 37 watt (e.g. 18% fr a 200 watt unit), Midspan will reprt 18% regardless f user pwer budget cnfiguratin. Fr 400 watt units lwest pwer budget percentage is 9%. 3. 90xxG - Midspan pwer budget cannt be set belw 41 Watt. Read internal Pwer Supply maximum pwer capabilities (regardless f pwer limitatin). 68

Private MIB Object IDs which are applicable nly fr Midspan 90xxG: Enable/Disable supprt fr varius pre 802.3at PD devices. Enable/Disable extended pwer. Extend PD maximum pwer t 36Watt r limit t 30Watt as per 802.3at specificatin. Reprt pwer backup type (stand alne/rps/2 nd Midspan/Invalid pwer backup device). Reprt internal pwer surce status. Reprt external pwer surce status. 69

7 Sftware Upgrade The fllwing sectins describe hw t upgrade the system sftware. 7.1 Architecture There are tw types f sftware upgrades assciated with the Pwer ver Ethernet (PE) Midspan: Midspan Manager Mdule Sftware: Updates Midspan management applicatin (including all Web pages) that prvide remte Netwrk management capabilities. Midspan Firmware: Update firmware used t manage PE Pwer prts (rarely required). Figure 7-1: System Sftware Architecture 7.2 Sftware Upgrade frm Versin 2.xx t 3.xx, r frm 3.xx t 3.xy 7.2.1 General NOTES: Active PE prts are nt be affected by sftware update. (n intermediate pwer failure t PD devices). A sftware update is required when a newer sftware versin is issued by the vendr, r when a malfunctin ccurs and the current versin must be re-installed. T update the sftware, the user must verify that the TFTP Server applicatin is installed and that an update sftware files package is available (see image belw) Sftware update menu can be accessed nly by Telnet/SSH (remte sftware update) r Cnsle (lcal sftware update). 70

Telnet (using RJ-45): Prvides remte update capabilities, with n need t be in the site Cnsle (RS232 cnnectr): Prvides lcal access t sftware update menus (nt applicable fr PD- 6548). NOTES: 1. In bth cases sftware update is perfrmed by TFTP. The Telnet r Cnsle ptins are utilized t access the apprpriate menu and activate sftware update via TFTP. 2. When accessing the system via Telnet/SSH, the user is prmpted t type user name and passwrd. If upgrading is perfrmed lcally, user name and passwrd are nt required. 7.2.2 Upgrade Prcess T upgrade the sftware: 1. Run the TFTP Server sftware prvided n a CD. 2. Cpy the sftware update files t the required flder n yur TFTP server. It is recmmended that the TFTP server be n the same Ethernet netwrk as the Midspan. 3. Activate the HyperTerminal applicatin. The HyperTerminal main screen appears (empty). 4. Click ENTER r ESC. The main menu appears. 5. Select the Cnfiguratin & Maintenance Menu (2). The fllwing screen appears: 6. Select the Sftware Update Menu. Yu will be asked t type the TFTP Server IP address. 7. Type the apprpriate TFTP server s IP address. The fllwing screen appears: 71

8. Select the Update Midspan Manager Mdule Sftware ptin and click ENTER. The NMS mdule will be laded by the TFTP file update.ini. Then the mdule lads all the WEB pages by TFTP as specified in the update.ini. file. Upn cmpletin f web pages update, the sftware lads the new management applicatin by TFTP, update FLASH, and resets itself. Active PE prts will nt be affected by sftware update. (N intermediate pwer failure t PD devices). 72

8 Trubleshting This paragraph prvides a symptm and reslutin sequence t assist in the trubleshting f perating prblems. If the steps given d nt slve yur prblem, d nt hesitate t call yur lcal dealer fr further assistance. Refer t Table 8-1. Table 8-1: Trubleshting Guide Symptm AC LED des nt illuminate (green). Midspan Ethernet LINK LED is ff. Midspan Ethernet LINK LED is n and n ping reply. Midspan can be pinged frm a lcal Hst but when trying t use the Midspan Ping utility, there is n reply. Crrective Steps 1. Check yur pwer surce. 2. Ensure that a prper Ethernet cable is used. In cases where a Netwrk card (NIC) is cnnected directly t the Midspan s RJ45 cnnectr, make sure yu use a crssed Ethernet cable. 1. Midspan is shipped with the fllwing default IP 192.168.0.50. Change yur Netwrk card IP t 192.168.0.40 and try t Ping again. 2. Cnnect serial cmmunicatin RS232 cnnectr frm the Midspan t the Hst and set Midspan IP t the same IP Netwrk. 3. In case yu switched frm ne Midspan t anther (bth with default IP 192.168.0.50). Erase IP address frm the ARP table. Fr winxp, pen DOS windw (start->run->cmd), and type arp d 192.168.0.50 1. If Windws Service Pack 2 is utilized, turn ff yur Firewall applicatin. 2. If Ping is OK, access the advanced Firewall ptins and enable the Ping ptin and TFTP, SNMP TRAP prts. 73

Symptm Midspan is set t DHCP, but n ping frm the Midspan Crrective Steps 1. Cnnect serial cmmunicatin RS232 cnnectr (using a null mdem cable) prt t Hst COM prt. Select view -> Netwrk menu. In cases where the Midspan was able t get an IP by DHCP, the fllwing display shuld appear: View Netwrk Parameters (in use) Use DHCP --------------------------------------- : Yes DHCP Server : 172.016.001.001 IP Address : 172.016.004.010 (valid fr: 7 Days,21 Hurs,6 Min,10 Sec) Subnet Mask : 255.255.000.000 Default Gateway : 172.016.001.254 MAC Address : 00:05:5A:01:67:6F In cases where Midspan wasn't able t get IP by DHCP, the fllwing display appears: View Netwrk Parameters (in use) --------------------------------------- Use DHCP : Yes Sftware update by TFTP cannt be perfrmed. Unit cannt be accessed via Telnet. When accessing the unit by Telnet, Telnet sessin is terminated each time the Cnfiguratin ptin is pressed. Lg-n t unit via Telnet was perfrmed, but after a while the Telnet sessin is terminated. MAC Address : 00:05:5A:01:67:6F 2. Verify that the Midspan Link LED is ON and that there is a DHCP server n the netwrk. 1. Use the Midspan Ping utility t ping the Hst running the TFTP Server applicatin 2. Turn ff Firewall, r enable UDP prt 69 3. Verify that apprpriate update files package was cpied t the TFTP Server rt flder. Use Web brwser t view System Cnfiguratin->Security WEB page and make sure that the Telnet checkbx is checked (selected). Lg-n t Telnet via the Administratr username & passwrd ptin and nt via the Viewer username & passwrd. Telnet sessin is terminated in cases where n key was pressed and there was n activity fr ver mre than three (3) minutes. 74

Symptm N SNMP TRAP events are received SysLg Server IP was set prperly, but Lg messages are nt received. One f the prts was disabled. After the unit was turned Off and On, it suddenly turned On again. When using a web Brwser and accessing View - Status Web page, all prts are red illuminated and a questin mark appears. Weekly schedule was prperly cnfigured but PE prts d nt turn n/ff in accrdance with the weekly schedule scheme. In cases where UPS perates n battery, Midspan des nt turn ff lw pririty prts. Cisc's 1130AG and Cisc 1242G wireless access pint shut dwn its radi while cnnected thrugh Midspan t L2/L3 Ethernet Switch. Nt all Cisc's 125x wireless access pint radi channels are peratinal. Can't pwer PD devices when cnnecting 90xxG Midspan t 2 nd 90xxG Midspan r RPS fr pwer backup Crrective Steps 1. Use WEB brwser t view System Cnfiguratin->Security WEB page and verify that the SNMP checkbx is checked (selected). 2. Check System Cnfiguratin->SNMP WEB page and verify that the remte SNMP manager IP matches and Trap cmmunity string matches the Remte SNMP manager Trap cnfiguratin. 3. Turn f Firewall n SNMP manager statin, r enable UDP prt 162 t pass thrugh the Firewall. Turn ff Hst Firewall, r enable UDP prt 514 t pass thrugh the Firewall. 1. When changing prt status, verify that the Save & Update buttn is pressed. 2. Verify that the PD is cmpatible t the detectin methd f the system. If the Midspan desn't prvide pwer t PE PDs, try t update the internal firmware. If prblem persists, cntact technical supprt. 1. Verify that NTP Server IP address was cnfigured prperly 2. Verify that the Time Zne Offset frm GMT windw displays k. 3. Verify that the yur cmpany s Firewall des nt blck utging/incming NTP packets (UDP Prt 123) 1. Brwse t View - Status Web page and verify that UPS Pwer Management windw des nt display??? in any ne f the fields. If??? appears, verify that UPS dynamic management parameters are prperly cnfigured. 2. Verify that Midspan SNMP cnfiguratin (SNMP v1 r SNMP v2) matches UPS SNMP agent capabilities. Add t Cisc wireless access pint the fllwing cnfiguratin line: pwer inline negtiatin injectr verride Activate the Pre 802.3at feature (supprted by Midspan 90xxG family). Make sure yu have nt cnnected 90xxG Midspan capable f driving 1000W with 2 nd Midspan/RPS capable f driving 450W. In case f such cnfiguratin, an errr message will be reprted cnstantly n the terminal/telnet/ssh interface f bth Midspan devices. 75

Symptm 90xxG Midspan was cnnected t anther 90xxG Midspan/RPS but perates as stand alne Midspan Crrective Steps Make sure that yu have cnnected pwer cables and cmmunicatin cable between 1 st Midspan t 2 nd Midspan/RPS 76

The infrmatin cntained in the dcument is PROPRIETARY AND CONFIDENTIAL infrmatin f and cannt be cpied, published, upladed, psted, transmitted, distributed r disclsed r used withut the express duly signed written cnsent f If the recipient f this dcument has entered int a disclsure agreement with, then the terms f such Agreement will als apply. This dcument and the infrmatin cntained herein may nt be mdified, by any persn ther than authrized persnnel f. N license under any patent, cpyright, trade secret r ther intellectual prperty right is granted t r cnferred upn yu by disclsure r delivery f the infrmatin, either expressly, by implicatin, inducement, estppels r therwise. Any license under such intellectual prperty rights must be express and apprved by in writing signed by an fficer f. reserves the right t change the cnfiguratin, functinality and perfrmance f its prducts at anytime withut any ntice. This prduct has been subject t limited testing and shuld nt be used in cnjunctin with life-supprt r ther missin-critical equipment r applicatins. assumes n liability whatsever, and disclaims any express r implied warranty, relating t sale and/r use f prducts including liability r warranties relating t fitness fr a particular purpse, merchantability, r infringement f any patent, cpyright r ther intellectual prperty right. The prduct is subject t ther terms and cnditins which can be lcated n the web at http://www.micrsemi.cm/legal/tnc.asp. Revisin Histry Revisin Level / Date Para. Affected 1.5 Whle Dcument 1.6 Whle Dcument 1.7 Whle Dcument Descriptin Frmatting Add 90xxG Midspan Add 65xxG Midspan. Mdify 70xxG Midspan descriptin Cvered under ne r mre f US Patents: #6,473,608; 6,986,071; 7,006,815; 7,254,734; 7,257,724; 7,259,325, 7,305,573; 7,325,150; 7,421,290, 7,437,217. 2009 Crp. All rights reserved. Fr supprt cntact: sales_amsg@micrsemi.cm Visit ur web site at: http://www.micrsemi.cm/pwerdsine/supprt/ Catalg Number: 06-0051-056 77