GE 1-ph, Operating Manual

Page 1: ...ug in adapter P N 1019070 1 ph SNMP Web plug in adapter P N 23954 SP SNMP Web plug in adapter P N 1019071 1 ph SNMP Web external adapter GE Consumer Industrial SA General Electric Company CH 6595 Riazzino Locarno Switzerland T 41 0 91 850 51 51 F 41 0 91 850 51 44 www gedigitalenergy com GE imagination at work ...

Page 2: ...plug in adapters 13 05 2008 1 2 Updated following the introduction of the RCCMD functionality 05 12 2008 COPYRIGHT 2008 by GE Consumer Industrial SA All rights reserved The information contained in this publication is intended solely for the purposes indicated The present publication and any other documentation supplied with the UPS system is not to be reproduced either in part or in its entirety ...

Page 3: ...the highest standards of quality will give you complete satisfaction Please read carefully the Installation Manual which contains all the necessary information about the installation of the adapters Thank you for choosing GE Distributed by Your service contact g GE Digital Energy General Electric Company CH 6595 Riazzino Locarno Switzerland Modifications reserved Page 3 58 OPM_CNT_SNM_BAS_CRD_1GB_...

Page 4: ... 3 1 INTRODUCTION 26 3 1 1 Supported browsers 26 3 1 2 Initial web access 26 3 1 3 Sample page 26 3 1 4 Saving the settings 27 3 2 NAVIGATION BAR 27 3 3 UPS SECTION 27 3 3 1 UPS Identification page 27 3 3 2 Battery page 28 3 3 3 UPS Status page 29 3 3 4 UPS Alarm page 29 3 3 5 UPS PMAD page 3 ph version ONLY 29 3 3 6 UPS Test page 30 3 3 7 UPS Control page 1 ph SP units ONLY 30 3 3 8 UPS Config pa...

Page 5: ...r Management 44 7 1 2 User class 44 7 1 3 Selective service activation 44 7 2 SERVICES ACCESS METHODS 45 7 3 ENCRYPTION 45 7 3 1 SSH and SFTP 45 7 3 2 SSL Certificates 47 7 4 CUSTOMER RESPONSIBILITY 49 7 4 1 Physical security 49 7 4 2 Changing default configuration 49 7 4 3 User Service management 49 7 4 4 Encryption 49 7 4 5 Firewalls 49 8 OTHER FUNCTIONALITIES 50 8 1 SYSTEM TIME 50 8 2 SERIAL BY...

Page 6: ...pter 10 3 54 TROUBLESHOOTING NETWORK CONNECTION 10 4 TROUBLESHOOTING WEB ACCESS 55 10 5 55 TROUBLESHOOTING DATE TIME NTP 10 6 TROUBLESHOOTING E MAIL NOTIFICATION SMTP 56 10 7 TROUBLESHOOTING NETWORK SHUTDOWN 57 11 CUSTOMER SUPPORT 58 11 1 FIRST LINE SUPPORT 58 11 2 INTERNET 58 11 3 WWW SERVER 58 ...

Page 7: ...cation upon UPS alarm Advanced security features 1 2 OVERVIEW 3 ph SNMP Web plug in adapter P N 1018959 Front panel User interface view Site Pro SG Series LP33 Series Reset RS 232 UTP 10 100 Active LAN UPS Reset RS 232 UTP 10 100 Active LAN UPS 1 Reset RS 232 UTP 10 100 Active LAN UPS Reset RS 232 UTP 10 100 Active LAN UPS 1 4 3 2 2 3 4 1 RJ45 Connector Ethernet connection 10Base T or 100Base TX 2...

Page 8: ...or Contact interface open collector output SP SNMP Web plug in adapter P N 23954 1 RJ45 Connector Ethernet connection 10Base T or 100Base TX 2 LEDs Ref specific section 3 RS 232 port Local console connection 115200 N 8 1 4 Reset button HW reset 1 ph SNMP Web external adapter P N 1019071 Net link Fault Active reset Front View 2 4 1 2 View 3 4 5 Reset RS 232 UTP 10 100 Active LAN UPS Reset RS 232 UT...

Page 9: ...S LEDs The various front panel LEDs have the following meaning LAN Netlink Status Meaning No LAN connection detected Off LAN connection established no communication On LAN connection established receive or transmit active Blink UPS Fail Status Meaning OK No Fault Off No UPS Connection On Active Status Meaning Fault of device Off Device OK No fault Blink Modifications reserved Page 9 58 OPM_CNT_SNM...

Page 10: ...apters For more information on the UPS system please refer to the applicable Installation and User Manual Particularly refer to Safety Rules Warnings and Cautions as laid out in the cited document The knowledge of and FULL compliance to the safety instructions and the warning contained in the cited documents are THE ONLY CONDITION to avoid any dangerous situations during installation operation mai...

Page 11: ...terface can be accessed locally serial connection or remotely Telnet SSH 2 1 1 Local connection Local access requires a local computer connected to the adapter serial port using a straight serial cable Connect the SNMP adapter to a computer using a standard 1 1 serial communication cable Run a terminal simulator e g HyperTerminal on a PC running Windows Configure the terminal simulator as follows ...

Page 12: ...ombines user authentication with encryption to provide a higher degree of communication security In any case the user access rights are the same regardless of the service interface used Below is a sample SSH session using a popular SSH client putty Start the SSH client application putty exe o In the Host Name section specify the card hostname or the IP address o In the Connection Type section sele...

Page 13: ...oth username and password are case sensitive and are always specified in lower case By default only one user is defined with username and password set to ge and ge Depending on the user class not all commands and settings may be available 2 1 4 Saving the settings Apart from some network parameters most setting are immediately active However the adapter will revert to the last save settings at reb...

Page 14: ...User logout NOTE Auto logout after 10 min inactivity exit User logout Change current user password passwd NOTE Password length is limited to 8 chars The command line interface may accept longer passwords although only the first 8 characters are significant ping hostname X X X X Ping IP address or hostname hostname fully qualified hostname X X X X IP address nvdefault Reset the configuration to fac...

Page 15: ...at media technologies they support and then select the fastest mutually supported media technology recheck mii tool Running this command shows the negotiated media As most network devices SNMP Web adapters use an auto negotiation protocol to communicate what media technologies they support and then select the fastest mutually supported media technology auto 100baseTx FD 100baseTx HD 10baseT FD 10b...

Page 16: ...ddnssrv Add a DNS Server X X X X DNS server IP address X X X X NOTE In order to replace a DNS server address remove the DNS server first and then add the new one Delete a DNS Server X X X X DNS server IP address X X X X deldnssrv host server Test DNS settings address resolution host hostname server DNS server IP address optional RESULT Successful Server DNS server hostname Address DNS server IP ad...

Page 17: ...ted to 8 chars The command line interface may accept longer passwords although only the first 8 characters are significant deluser name Delete a user name User to be deleted moduser user http telnet ftp access Modify services and access rights for a user user username for the new user telnet 1 access allowed 0 not allowed http 1 access allowed 0 not allowed ftp 1 access allowed 0 not allowed acces...

Page 18: ... on off Enable disable FTP server port 21 on FTP server enabled off FTP server disabled Enable disable Telnet server port 23 telnet server on off on Telnet server enabled off Telnet server disabled makecert Create new digital certificate for the HTTPS server sitename The DNS name IP address of the adapter sitename Show the SSH key fingerprint ssh fingerprint Show the web server digital certificate...

Page 19: ...e NOTE the time zone controls both the time difference with respect to GMT and the daylight saving settings As the time zone is specified as a Region Country pair selecting the correct time zone will ensure that the adapter computes the correct time tmzone settime MMDDhhmm CC YY ss Set the date time MM month DD day hh hour mm minute CC YY year ss seconds By running the tmzone command an interactiv...

Page 20: ...res authentication off E mail server does not require authentication email account user Set email server account user Username for e mail server authentication email passwd pwd Set email server password pwd Password for e mail server authentication smtp sendername Set the mail from header sender E mail address 63 chars max NOTE This may be a critical parameter as some SMTP servers require a valid ...

Page 21: ...e managed node Defines the community name for receiving SNMP information GET community community name community getcommunity NOTE The get community name controls access to the SNMP Agent the community in the request must match the getcommunity parameter The default value is public Defines the community name for writing SNMP information SET community community name NOTE The set community name contr...

Page 22: ...isable send trap GE MIB function on Trap sending enabled off Trap sending disabled on off NOTE 3 ph version ONLY addtraptgt X X X X v1 v2 community port Add a trap address X X X X IP address of the trap target v1 v2 SNMP version optional default v1 community community name optional default public port port to which the trap will be sent optional default 162 NOTE Maximum 20 recipients can be define...

Page 23: ...unt Set retry count 1 ph SP version ONLY count Number of re connection attempts NOTE This parameters is factory set to its ideal value and shall not be changed unless instructed to do so serialbypass on off Enable disable the serialbypass functionality NOTE This command is offered for UPS service access ONLY It use outside of this scope is not recommended enabling this functionality stops the UPS ...

Page 24: ...form the desired operation for both the UPS and the load 2 2 11 Rccmd command group The rccmd command group allows to configure the RCCMD Server embedded in the SNMP Web adapter Command Sub command Parameters Description showrccmd Shows the current RCCMD Server configuration Enable disable Network Shutdown function on off on Network Shutdown enabled off Network Shutdown disabled add Add an RCCMD C...

Page 25: ...is alarm 1 send e mail on alarm de activation trap 0 no trap sent for this alarm 1 send trap on alarm de activation 2 2 13 Log command group The log command group allows to access the logs maintained by the SNMP Web adapters Command Parameters Description Dump the System log to the console syslog Dump the UPS log to the console upslog Dump the System and UPS log to the FTP area logdump Clear the U...

Page 26: ...address in the web browser URL field to access the web interface Either the adapter IP address or the hostname can be used DNS resolution of the hostname must be ensured in the latter case You will be presented with the web server initial page Note that authentication username password pair can be required The only user configured by default is the supervisor with username password set to ge and g...

Page 27: ...ring section These pages allow to remotely access the UPS status and measurements Please note that each specific UPS model may implement a subset of the available measurement data not available for the specific UPS is marked as N A The Test Control and Config pages are part of the UPS control sections Once again the supported command and configuration options depend on the specific UPS model Unsup...

Page 28: ... On Battery The time elapsed since the UPS switched to battery power in seconds Estimated Minutes Remaining An estimate of the remaining run time on batteries under present load conditions in minutes An estimate of the remaining battery charge in percentage 100 is full charge Estimated Charge Remaining The present battery voltage in Volts Battery Voltage The battery flowing from to the battery in ...

Page 29: ...e load with the same amount of current i e with no current share The current share occurs when an UPS exchanges some current with another UPS so that this current component doesn t feed the load The PMAD functionality detects the amount of share currents in a parallel system Obviously single system do not provide this functionality and will show this value as not available N A 3 3 4 UPS Alarm page...

Page 30: ...fies a time in seconds after which the UPS will start up Startup after delay 1 disables the procedure 0 immediate start up The UPS will shutdown immediately and will remain off for the specified time in seconds after which the UPS will restart Reboot 1 disables the procedure On the UPS will restart right after the shutdown Auto Restart Off the UPS will not restart after the shutdown Caution These ...

Page 31: ...dit edit the RCCMD Client configuration Test send an RCCMD Test Message to the Client Del delete the RCCMD Client New RCCMD Clients can be added with the Add button The page to Add Edit RCCMD clients requires to specify the following information Client RCCMD Client IP Address or hostname Port RCCMD Port on the Client default is 6003 Condition three different shutdown conditions can be chosen o Aft...

Page 32: ...nity in the request must match the getcommunity parameter The default value is public Get Community Defines the community name for writing SNMP information SET The set community name controls access to the SNMP Agent the community in the request must match the setcommunity parameter The default value is private Set Community 3 5 2 Trap settings page This page allows to configure up to 20 recipient...

Page 33: ...nt text from the page Highlight button gollowed by CTRL C 3 8 UTILITY SECTION This section includes some useful tools for troubleshooting and configuration DNS lookup a tool for verifying DNS server configuration useful for troubleshooting DNS problems Mii tool shows the media technology currently selected negotiated Speed Duplex set the media technology to be used advertised As most network devic...

Page 34: ...ettings at reboot Therefore in order to permanently modify the settings the configuration must be saved 3 10 USER SECTION This section offers access to the user management web page Note that this page becomes operative only for the supervisor user the only user enabled to perform user management Modifications reserved Page 34 58 OPM_CNT_SNM_BAS_CRD_1GB_V012 doc Operating Manual SNMP Web Adapter ...

Page 35: ...IB under the geUPS group limited to the 3 ph SNMP Web plug in adapter 4 2 RFC1628 MIB OBJECTS The SNMP Web adapters support the following RFC1628 Objects OIDs TRAPS ALARMS upsIdent Group upsIdentManufacturer upsIdentModel upsIdentUPSSoftwareVersion upsIdentAgentSoftwareVersion upsIdentName upsIdentAttachedDevices uspBattery Group upsBatteryStatus upsSecondsOnBattery upsEstimatedMinutesRemaining up...

Page 36: ...AfterDelay upsStartUpAfterDelay upsRebootWithDuration upsAutoRestart UpsAlarmBypassBad UpsAlarmOutputOffAsRequested UpsAlarmUpsOffAsRequested UpsAlarmChargerFailed UpsAlarmUpsOutputOff UpsAlarmUpsSystemOff UpsAlarmFanFailure UpsAlarmFuseFailure UpsAlarmGeneralFault UpsAlarmDiagnosticTestFailed UpsAlarmCommunicationsLost UpsAlarmAwaitingPower UpsAlarmShutdownPending UpsAlarmShutdownImminent UpsAlar...

Page 37: ...dDevices upsIdentsUPSSerialNumber upsIdentComProtVersion upsIdentOperatingTime uspBattery Group upsBatteryStatus upsSecondsOnBattery upsEstimatedMinutesRemaining upsEstimatedChargeRemaining upsBatteryVoltage upsBatteryCurrent upsBatteryTemperature upsBatteryRipple upsInput Group upsInputLineBads upsInputNumLines upsInputFrequency geUPSTraps upsWellKnownAlarms group upsAlarmBatteryBad upsAlarmOnBat...

Page 38: ...rm Group upsAlarmsPresent upsAlarmMaskA upsTest Group upsTestID upsTestSpinLock upsTestResultSummary upsTestResultsDetails upsTestStartTime upsTestElapsedTime upsAlarmTestInProgress upsAlarmReceptacleOff upsAlarmHighSpeedBusFailure upsAlarmHighSpeedBusJACRCFailure upsAlarmConnectivityBusFailure upsAlarmHighSpeedBusJBCRCFailure upsAlarmCurrentSharing upsAlarmDCRipple Once again some objects may not...

Page 39: ...adapter can be forced to operate in one specific mode instead of autonegotiating 5 2 TCP IP CONFIGURATION TCP IP configuration refers to the settings needed by an SNMP Web adapter to operate in a TCP IP network The selection of the boot method is critical for successful SNMP Web adapter configuration The SNMP Web adapters support the following boot methods Static IP BOOTP DHCP The default configur...

Page 40: ...se the functionality of other network services as an example some services may require reverse DNS Therefore make sure the DNS is correctly configured especially when a manual configuration is selected 5 4 HOSTNAME The SNMP Web adapter is configured with a hostname a fully qualified domain name for the adapter The adapter will always include this information in the relevant communication to the DH...

Page 41: ...d description of the installation and configuration steps is out of the scope of this document for details please refer to the applicable product documentation User Manual However there are a few general recommendations First of all the RCCMD Client software is a licensed software A license code can be used for only one installation If more servers are to be included in the shutdown process more l...

Page 42: ...dapter IP address must be added to the list of trusted RCCMD Servers for each RCCMD Client Therefore the SNMP Web adapter should be assigned a static IP address when possible If a DHCP Server is used it should be configured so that the SNMP Web adapter is always assigned the same address The various servers to be shutdown must be added to the list of RCCMD clients on the SNMP Web adapter Although ...

Page 43: ...ses rccmd s a 191 168 200 5 rccmd s a 191 168 200 6 the list can be continued At last force shutdown of the local machine ExitWin exe shutdown force CLS This procedure can also be used for a low number of RCCMD servers as it may be easier to configure the Network Shutdown this way rather than through the SNMP Web adapter especially when a number of servers need to be shutdown simultaneously Clearl...

Page 44: ...he console or the web interface NOTE Only the supervisor user can create new users To create a new user the following information shall be specified Username password User class access rights Available services 7 1 2 User class Users are divided in three separate classes based on access rights Supervisor Predefined user it can be renamed but not deleted it cannot be created only one supervisor use...

Page 45: ...encryption for protecting data confidentiality and integrity and particularly the following SSH Secure Shell SFTP SSH File Transfer Protocol HTTPS In this context encryption is based on public key cryptography schemes Normally the SNMP Web adapters will be delivered already configured with all applicable keys and certificates should the adapter miss these information it will generate them at first...

Page 46: ...ey pub v1 RSA It can be seen in the above example that the fingerprint shown by SSH matches the RSA key for SSH v2 on the ssh fingerprint output The SNMP Web adapter supports both version 1 and version 2 of the SSH protocol It is recommended to use SSH v2 if possible as SSH v1 is generally considered obsolete On the other hand SFTP is a file transfer protocol providing secure transfer It is used i...

Page 47: ...ecks are substantially the following The client verifies that the issuing Certificate Authority CA is on its list of trusted CAs The client checks the server s certificate validity period Further to this the client may compare the actual DNS name of the server to the DNS name on the certificate though this last point may be browser dependent Below is a sample of the results of these checks when br...

Page 48: ...can be installed in the trusted CA repository NOTE It is not mandatory to install the CA Root Certificate installing it will prevent the browser from generating a security warning message Finally the server certificate s common name will not match the DNS name or the IP address of the SNMP Web adapter Although the communication is secure with the adapter controlling the access to the web interface...

Page 49: ...ice configuration must remain secret in order to provide an efficient security protection If this information becomes public the entire authentication method loses effectiveness 7 4 3 User Service management As shown above the SNMP Web adapters offer advanced user management features by offering different access rights and allowing selective activation of services It must be noted that every runni...

Page 50: ...e console interface either local or remote This functionality is only meant to be used for obtaining service access to the UPS and as such is subject to some limitations Particularly it is recommended that the end user does not activate it as the adapter will signal a Communication Lost alarm In case the serial bypass is accidentally enabled it can be disabled with full adapter operation restored ...

Page 51: ...age of the UPS rating the threshold can be set to a value between 5 and 100 Setting it to 1 disables the functionality Default value 15 This command controls the time that the SNMP Web adapter will maintain active the UpsLoadAlert notification Once the configured time is expired the notification is reset The parameter is expressed in minutes it can be set to a value between 1 and 500 minutes 1 1 5...

Page 52: ...emory It is possible to store the settings in a file download it or even upload a new configuration file To store the settings in a file inject the nvdump command at the console This will create a gedeups cfg file in the FTP area The file can then be downloaded via ftp or sftp Also the web interface offers access to the SNMP Web adapter configuration Configuration page in the System section The co...

Page 53: ...ally provided with the UPS Note that two types of communication are possible Intelligent serial communication use VIC 23 or IMV I cable or straight 1 1 serial cable Contact interface communication use VIC 25 or IMV C serial cable The actual cable to be used will depend on the actual UPS make and model refer to applicable UPS documentation and accessories In any case make sure the proper cable is u...

Page 54: ... Y N Network interface Network I f OK Check LAN LED LED OFF Verify connection to the network Y N OK Y N Ping card from a network PC Ping OK Y Ping network node from adapter Ping OK Verify TCP IP settings N Verify if required service is running Service running N Verify user credentials and rights Request admin to enable start the required service Credentials service OK Restart Card N Y Request admi...

Page 55: ...of these checks fails the browser will issue a security alert The Encryption section explains out to download the CA Root Certificate for installation in the browser trusted CA repository 10 5 TROUBLESHOOTING DATE TIME NTP When NTP server connection is configured and enabled the SNMP Web adapter will periodically re synch its internal date and time settings with the NTP server Should you experienc...

Page 56: ... adapter SNMP server configuration OK N N E mail notification E mail OK Check SMTP server operation telnet my smtp server smtp Server OK Resolve SMTP server issues Y N OK Y N Ping SMTP server from the adapter Ping OK Y Send test e mail GEDE sendemail test Email OK Verify TCP IP settings Y Check adapter SNMP server configuration OK If the adapter and the SMTP server belong to different subnets chec...

Page 57: ...RCCMD Client The network configuration of the devices can be critical It is highly recommended to assign static IP addresses to the involved devices SNMP Web adapter and RCCMD Clients In a DHCP environment the DHCP Server should be configured to always assign the same address to these devices It is also recommended to identify the nodes with their IP address rather than their hostname otherwise th...

Page 58: ...your local GE distributor for problems with the installation of the product or its use 11 2 INTERNET On line support available on request Internet access required 11 3 WWW SERVER We have a WWW server running at www gedigitalenergy com With your favourite web browser you can access the latest information from GE and download updates and manuals for this product ...