What are the New Features of Firmware Console Server 4.3?

This article is an overview of the latest features of 4.3 Console Firmware.

New features available on console servers running firmware version 4.3 or higher are:

• Port-Level administrator
• Syslog multiple endpoint support
• Configurable Cellular MTU
• NTP Password Obfuscation
• Support for LH5 users and groups templates
• Cellular firmware support for -LMP models

 

Port-Level administrator

It is now possible to grant users administrative access to selected serial ports with the ability to edit all of a port's serial properties with the exception of the IP alias fields.  Users must be assigned to the "pmadmin" group and given explicit permission for all or select ports.

Port level administrators can configure the port's label, serial settings, and also configure logging and the available services, for example if unauthenticated telnet or ssh are supported, etc. Port level configuration changes can be made both via the WebUI and in a SSH session.  Serial port pinout configuration is only available on the IM7200 series.

GUI

When a port administrator logs into the Web UI, the only available menu is Serial & Network > Serial Port page.  The administrator will only see the available ports that have been given permission to.  Clicking Edit next to the port to configure the selected port.

CLI

Under pmshell, port administrators have access to the Port Configuration menu where they can modify a number of configuration options for a specific port. To access this menu, connect to a specific port via pmshell and choose the ~c shell command.

In the example below, a port administrator connects to port 1, and chooses the Port Configuration menu by entering the ~c command.

Connect to port > 1

Shell Commands:
~b - Generate BREAK
~h - View history
~p - Power menu
~c - Port Configuration menu
~m - Connect to port menu
~. - Exit pmshell
~? - Show this message

Type: <enter>~c

Configuration menu for Port 1 (Catalyst) 
Configuration Commands:
Usage: parameter [value]
Leave value blank to print a description of the parameter

label Port Label (Catalyst)
baud Baud Rate (115200)
data_bits Data Bits (8)
parity Parity (none)
stop_bits Stop Bits (1)
flow_control Flow Control (none)
dtr_mode DTR Mode (alwayson)
pinout Port Pinout (X2)
apply Save Configuration
cancel Cancel without saving
[Catalyst] Configuration >

To modify the configuration, type the parameter you wish to change and the new value.
For example, to change the current port label:
Type: label Catalyst_B1

The screen refreshes with the new label displayed:
label Port Label (Catalyst_B1)

You can enter a parameter and press enter to get a description of the parameter.

[Catalyst_B1] Configuration > baud
baud - The serial port's speed

Entering an invalid value for the parameter will give an error, and give the set of valid values.

[Catalyst_B1] Configuration > baud 400
Invalid value 400 - valid values are: 50, 75, 110, 134, 150, 200, 300, 600, 1200, 2400, 4800, 9600, 19200, 38400, 57600, 115200, 230400

Any configuration changes made here will not be saved until you apply them. To do so, you must type the apply command.

[Catalyst_B1] Configuration > apply
Config save succeeded
Returning to console session

If you do not wish to make changes, type cancel to return to the current state and exit the Port Configuration menu.

Note: The pmshell menu does not refresh with the new configuration.  Exiting and entering the pmshell menu will refresh to the current configuration.  This will be fixed in a future release.

Syslog multiple endpoint support

Firmware 4.3 offers admins the ability to send the syslog to multiple remote servers. This ensure that even if one syslog server is down, another one can still receive the logs. Under Status > Syslog, click the New Server button and enter Remote Syslog Server Address, Syslog Port, Syslog Protocol, and choose a Syslog Level to specify which degree of event severity you want to include in the log. When you are finished adding servers, click Apply Remote Syslog Settings.

Note: When upgrading to 4.3 the existing syslog configuration will be migrated automatically.

Configurable Cellular MTU

If you need to modify the cellular modem's Maximum Transmit Unit (MTU):

1. Open the System > Dial page
2. under External USB Modem, click the radio button next to Enable Dial-Out.
3. Scroll to the bottom of the page and locate Cellmodem MTU - Advanced.
4. Enter the desired MTU and click Apply Modem Dial Settings.

NTP Password Obfuscation

NTP passwords are obfuscated by default. To change this setting, choose System > Date & Time.  Under Network Time Protocol, uncheck Obfuscate Server Passwords.

 

Support for LH5 Users and Groups templates

Lighthouse 5.0 has added a Users and Groups template. As a result, local users with their group membership can now be pushed by Lighthouse to enrolled nodes.

• This means that Lighthouse can apply a Users and Groups template to a number of nodes.
• After template is applied, the user from the template can log in to the console.

 

Cellular firmware support for -LMP models

This release adds cellular firmware upgrade support for -LMP products.