User’s Guide UPS Network Management Card 2 AP9630, AP9631
This manual is available in English on the APC Web site (www.apc.com). Dieses Handbuch ist in Deutsch auf der APC Webseite (www.apc.com) verfügbar. Este manual está disponible en español en la página web de APC (www.apc.com). Ce manuel est disponible en français sur le site internet d’APC (www.apc.com). Questo manuale è disponibile in italiano sul sito web di APC (www.apc.com). Este manual está disponível em português no site da APC (www.apc.com).
Contents Introduction ..................................................................... 1 Product Description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1 Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1 IPv4 Initial setup . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2 IPv6 Initial setup . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
How to Use the Command Line Interface. . . . . . . . . . . . . . . . . . . . . 11 Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11 How to enter commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11 Command syntax . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11 Syntax examples . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12 Command Response Codes . . . . .
Web Interface ................................................................. 26 Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .26 Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26 Supported Web browsers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26 How to Log On . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .26 Overview . . . . . . .
Outlet Groups . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38 Main outlet groups . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38 Switched outlet groups . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38 The control option . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39 The settings option (including automatic load-shedding) . . . . . . . 40 Outlet group events and traps . . . . . .
Administration: Security ............................................... 56 Local Users . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .56 Setting user access . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 56 Remote Users . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .56 Authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 56 RADIUS . . . . . . . . . . .
Active, Automatic, Direct Notification . . . . . . . . . . . . . . . . . . . . . . . 73 E-mail notification . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 73 SNMP traps . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 74 SNMP Trap Test . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 75 Remote Monitoring Service . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 75 Syslog . . . . . . . . . . . .
How to Export Configuration Settings......................... 86 Retrieving and Exporting the .ini File . . . . . . . . . . . . . . . . . . . . . . . .86 Summary of the procedure . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 86 Contents of the .ini file . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 86 Detailed procedures . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 86 The Upload Event and Error Messages. . . . . . . . . . . . . . . . .
Appendix A: List of Supported Commands ................ 98 Two-Year Factory Warranty........................................ 100 Terms of warranty . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 100 Non-transferable warranty . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 100 Exclusions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 100 Warranty claims . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Introduction Product Description Features The two American Power Conversion (APC®) Network Management Cards mentioned below are Web-based, IPv6 Ready products that manage supported devices using multiple open standards such as: - Hypertext Transfer Protocol (HTTP) - Simple Network Management Protocol versions 1 and 3 (SNMPv1, SNMPv3) - File Transfer Protocol (FTP) - Telnet - Secure SHell (SSH) - Hypertext Transfer Protocol over Secure Sockets Layer (HTTPS) - Secure CoPy (SCP) The AP9630 Network Management
APC devices in which you can install the Management Card.
Internal Management Features Overview Use the Web interface or the command line interface to view the status of the UPS and manage the UPS and the Management Card. You can also use SNMP to monitor the status of the UPS. For more information about the internal user interfaces, see “Web Interface” on page 26 and “Command Line Interface” on page 8. See “SNMP” on page 67 for information about how SNMP access to the Management Card is controlled.
How to Recover from a Lost Password You can use a local computer that connects to the Management Card through the serial port to access the command line interface. 1. Select a serial port at the local computer, and disable any service that uses that port. 2. Connect the provided serial cable (APC part number 940-0299) to the selected port at the computer and to the configuration port at the Management Card. 3.
Front Panel (AP9630) Features Item Description Serial configuration port Connects the Management Card to a local computer to configure initial network settings or access the command line interface. 10/100 Base-T connector Connects the Management Card to the Ethernet network. Reset button Resets the Management Card while power remains on. Link-RX/TX (10/100) LED See “Link-RX/TX (10/100) LED” on page 7. Status LED See “Status LED” on page 6.
Item Description Reset button Resets the Management Card while power remains on. Serial configuration port Connects the Management Card to a local computer to configure initial network settings or access the command line interface. Link-RX/TX (10/100) LED See “Link-RX/TX (10/100) LED” on page 7. Status LED See “Status LED” on page 6. LED Descriptions Status LED This LED indicates the status of the Management Card.
Link-RX/TX (10/100) LED This LED indicates the network status of the Management Card. Condition Description Off One or more of the following situations exist: • The Management Card is not receiving input power. • The cable that connects the Management Card to the network is disconnected or defective. • The device that connects the Management Card to the network is turned off or not operating correctly. • The Management Card itself is not operating properly. It may need to be repaired or replaced.
Command Line Interface How To Log On Overview You can use either a local (serial) connection, or a remote (Telnet or SSH) connection with a computer on the same network as the Management Card to access the command line interface. Use case-sensitive user name and password entries to log on (by default, apc and apc for an Administrator, or device and apc for a Device User). A Read-Only User cannot access the command line interface.
Local access to the command line interface For local access, use a computer that connects to the Management Card through the serial port to access the command line interface: 1. Select a serial port at the computer and disable any service that uses the port. 2. Connect the provided serial cable (APC part number 940-0299) from the selected port on the computer to the configuration port at the Management Card. 3. Run a terminal program (e.g.
• The Up Time field reports how long the Management Card has been running since it was last turned on or reset. Up Time: 0 Days 21 Hours 21 Minutes • Two fields report when you logged in, by date and time. Date : 10/30/2009 Time : 5:58:30 • The User field reports whether you logged in through the Administrator or Device Manager account. (The Read Only User account cannot access the command line interface.
How to Use the Command Line Interface Overview The command line interface provides options to configure the network settings and manage the UPS and its Management Card. How to enter commands At the command line interface, use commands to configure the Management Card. To use a command, type the command and press ENTER. Commands and arguments are valid in lowercase, uppercase, or mixed case. Options are case-sensitive.
Syntax examples A command that supports multiple options: user [-an ] [-ap ] In this example, the user command accepts the option -an, which defines the Administrator user name, and the option -ap, which defines the Administrator password. To change the Administrator user name and password to XYZ: 1. Type the user command, one option, and the argument XYZ: user -ap XYZ 2.
Command Descriptions ? Access: Administrator, Device User Description: View a list of all the CLI commands available to your account type. To view help text for a specific command, type the command followed by a question mark. Example: To view a list of options that are accepted by the alarmcount command, type: alarmcount ? about Access: Administrator, Device User Description: View hardware and firmware information.
Example: To use a DHCP server to obtain network settings: 1. Type boot -b dhcp 2. Enable the requirement that the DHCP server provide the APC cookie: boot -c enable 3. Define the number of retries that will occur if the Management Card does not receive a valid response from the initial request: boot -s 5 cd Access: Administrator, Device User Description: Navigate to a folder in the directory structure of the Management Card.
date Access: Administrator only Definition: Configure the date used by the Management Card. To configure an NTP server to define the date and time for the Management Card, see “Set the Date and Time” on page 78. Option Argument Description -d <“datestring”> Set the current date. Use the date format specified by the date -f command. -t <00:00:00> Configure the current time, in hours, minutes, and seconds. Use the 24-hour clock format. -f mm/dd/yy | dd.mm.
dir Access: Administrator, Device User Description: View the files and folders stored on the Management Card. dns Access: Administrator Description: Configure the manual Domain Name System (DNS) settings. Parameter Argument Description -OM enable | disable Override the manual DNS. -p Set the primary DNS server. -s Set the secondary DNS server. -d Set the domain name. -n Set the domain name IPv6.
format Access: Administrator only Description: Reformat the file system of the Management Card and erase all security certificates, encryption keys, configuration settings, and the event and data logs. Be careful with this command. Note: To reset the Management Card to its default configuration, use the resetToDef command. FTP Access: Administrator only Description: Enable or disable access to the FTP server.
Option Argument Definition -OM enable | disable Override the manual settings. -p Specify the primary server. -s Specify the secondary server. Example 1: To enable the override of manual setting, type: ntp -OM enable Example 2: To specify the primary NTP server, type: ntp -p 150.250.6.10 ping Access: Administrator, Device User Description. Determine whether the device with the IP address or DNS name you specify is connected to the network.
Description: Configure the command line interface prompt to include or exclude the account type of the currently logged-in user. Any user can change this setting; all user accounts will be updated to use the new setting. Option Argument Description -s long The prompt includes the account type of the currently logged-in user. short The default setting.
Option Argument Description -t1 -t2 The time in seconds that the Management Card waits for a response from the primary or secondary RADIUS server. Example 1: To view the existing RADIUS settings for the Management Card, type radius and press ENTER.
system Access: Administrator only Description: View and set the system name, the contact, the location and view up time as well as the date and time, the logged-on user, and the high-level system status P, N, A (see “Main screen status fields” ). Option Argument Description -n -c -l Define the device name, the name of the person responsible for the device, and the physical location of the device.
Description: Enable IPv6 and view and manually configure these network settings for the Management Card: Option Argument Description -S enable | disable Enable or disable IPv6. -man enable | disable Enable manual adressing for the IPv6 address of the Management Card. -auto enable | disable Enable the Management Card to automatically configure the IPv6 address. -i Set the IPv6 address of the Management Card. -g Set the IPv6 address of the default gateway.
ups Access: Administrator, Device User Description: Control the UPS and view status information. Option Arguments Description -c off | graceoff | on | reboot | gracereboot | sleep | gracesleep Configure UPS actions. See “Actions (for a single UPS and Synchronized Control Groups)” on page 33 for detailed information. -r start | stop Initiate or end a runtime calibration.
Example 2: To immediately turn off outlet group 2 at a Smart-UPS XLM, type: ups -o2 off user Access: Administrator only Description: Configure the user name and password for each account type, and configure the inactivity timeout. For information on the permissions granted to each account type (Administrator, Device User, and Read-Only User), see “Types of user accounts” on page 3.
xferINI Access: Administrator only. This command only works through serial CLI. Description: Use XMODEM to upload an .ini file while you are accessing the command line interface through a serial connection. After the upload completes: • If there are any system or network changes, the command line interface restarts, and you must log on again.
Web Interface Introduction Overview The Web interface provides options to manage the UPS and the Management Card and view the status of the UPS. See “Web” on page 64 for information on how to select, enable, and disable the protocols that control access to the Web interface and to define the Web-server ports for the protocols. Supported Web browsers You can use Microsoft® Internet Explorer® (IE) 7.x or higher (on Windows® operating systems only) or Mozilla® Firefox® 3.0.
URL address formats Type the DNS name or IP address of the Management Card in the Web browser’s URL address field and press ENTER. When you specify a non-default Web server port in Internet Explorer, you must include http:// or https:// in the URL. Common browser error messages at log-on. Error Message Browser Cause of the Error “You are not authorized to view this page” or “Someone is currently logged in...” Internet Explorer, Firefox Someone else is logged on. “This page cannot be displayed.
Home Page Overview On the Home page of the interface, displayed when you log on, you can view active alarm conditions and the most recent events recorded in the event log. Quick status icons One or more icons and accompanying text indicate the current operating status of the UPS: Symbol Description Critical: A critical alarm exists, which requires immediate action. Warning: An alarm condition requires attention and could jeopardize your data or equipment if its cause is not addressed.
How to Use the Tabs, Menus, and Links Tabs In addition to the tab for the Home page, the following tabs are displayed. Click a tab to display a set of menu options: • UPS: Display UPS status, issue UPS control commands, configure the UPS parameters, run diagnostic tests, configure and schedule shutdowns, and view information about the UPS and the Management Card.
Monitor and Configure the UPS Note: For an AP9631 Network Management Card with a connected APC Dry Contact I/O Accessory (AP9810), the UPS tab displays two top menu bar options, UPS and Control Policy. Use the UPS option to complete the tasks described in this chapter. For information about the Control Policy option, see “Configuring the Control Policy” on page 50.
• In a list: – Input Voltage: The AC voltage (VAC) being received by the UPS or, for 3-phase UPSs, by each phase of the UPS. – Output Voltage: The AC voltage (VAC) the UPS, or each phase of a 3-phase UPS, is providing to its load. – Ambient Temperature: The temperature of the air inside the input/output (I/O) enclosure of the UPS. – Runtime Remaining: How long the UPS can use battery power to support its load. – Last Battery Transfer: The cause of the last switch to battery operation.
Control Page For UPS control actions, click Control on the left navigation menu of the UPS tab. To configure a Management Card to be a member of a Synchronized Control Group, see “Sync Control Page” on page 42.
Actions (for a single UPS and Synchronized Control Groups) Use the actions described in the following table for individual UPSs and for Synchronized Control Groups, within these guidelines: • All actions except Put UPS In Bypass and Take UPS Off Bypass are supported: – For Synchronized Control Groups of Symmetra UPS or Smart-UPS models – For individual APC UPSs • Put UPS in Bypass and Take UPS Off Bypass are supported: – Only for individual UPSs, not for Synchronized Control Groups – Only for Symmetra UPS a
Action Definition Reboot UPS (Web interface) Restarts the attached equipment by doing the following: • Turns off power at the UPS after Shutdown Delay. • Turns on power at the UPS after the UPS battery capacity returns to at least the percentage configured for Minimum Battery Capacity or can support the load for the time configured for Return Runtime Duration. (The parameter differs by UPS model.) The UPS then waits the time specified as Return Delay. See “The shutdown option” on page 36.
Action Definition Put UPS To Sleep (Web interface) Puts the UPS into sleep mode by turning off its output power for a defined period of time: • The UPS turns off output power after waiting the time configured as Shutdown Delay. See “The shutdown option” on page 36. • When input power returns, the UPS turns on output power after two configured periods of time: Sleep Time and Return Delay. See “The shutdown option” on page 36.
• Voltage settings that determine the voltage at which the UPS begins to use automatic voltage regulation or switches to battery operation and that determine how sensitive the UPS is to voltage variation • Bypass settings define conditions under which the UPS can switch to bypass mode • Alarm thresholds based on available runtime and redundant power and on UPS load The shutdown option Setting Definition Low Battery Duration How long the UPS can run on battery power after a low-battery condition occurs.
The general option Settings vary by UPS model. Each UPS model supports only some of the following: Setting Definition UPS Name A name to identify the UPS. Maximum length: 8 characters. UPS Position The physical orientation of the UPS, rack or tower. Audible Alarm Enable or disable the audible alarm of the UPS, and, for some UPS models, define the condition that will cause the alarm to sound. Last Battery Replacement The month and year of the most recent battery replacement.
Diagnostics Page You can run a self-test or a run-time calibration for any APC UPS. The UPS audible alarm test is modelspecific and may not be available for your UPS. Field Description Self-test The result (passed, failed, or unavailable) and date of the last UPS self-test. Calibration The result of the last runtime calibration.
How outlet groups turn on and off depends on how they are configured and how you turn the UPS on or off: • Until you configure the actions described in “The control option” on page 39 and their related delays described in “The settings option (including automatic load-shedding)” on page 40, when you turn on the UPS output, any outlet group that is off turns on by default and applies power to all devices attached to the outlets in that group.
The settings option (including automatic load-shedding) Click the name of an outlet group to view or configure its settings. Outlet group name and status. Define the outlet group name or view the state of the outlet. Setting or Field Description Name A name for the outlet group displayed with the outlet group number wherever the interface displays that outlet group number. State Displays the state of the outlet group (on or off). Sequencing settings. Settings vary by UPS model.
Load-shedding options. Settings vary by UPS model. Use the load-shedding options to define how the UPS will respond to alarms. The UPS provides automatic, sequenced, load-shedding when a problem occurs with input voltage or battery capacity and provides automatic sequenced start-up of outlet groups when the problem is resolved. Setting Description Settings that turn off this outlet group • A power failure is longer than the number of seconds you specify.
Scheduling Page (for Shutdowns) Select the type of shutdown to schedule, One-time Shutdown, Daily Shutdown, or Weekly Shutdown (at 1, 2, 4, or 8 week intervals), and then use these options: • Name: Define a name for the shutdown. • Shutdown daily at, Shutdown, or Shutdown on: Define when the shutdown will begin, and for a weekly shutdown, the number of weeks between shutdowns.
Display status of a Synchronized Control Group member The following information is displayed about the Synchronized Control Group membership of this group member when its group membership is enabled. Status item Description IP Address The IP address of the Network Management Card of this group member (UPS). Input Status The state of the input power of this group member: good (acceptable) or bad (not acceptable).
Parameter Description Minimum Battery Capacity Offset A UPS supports only one of these parameters, depending on UPS model. You can configure this value differently for each member of the Synchronized Control Group through the management interface of that member.
PowerChute Network Shutdown configuration parameters Parameter Description Maximum Required Delay Displays the delay required to ensure that each PowerChute client has enough time to shut down safely when the UPS or the PowerChute client initiates a graceful shutdown. When Force Negotiation is selected, PowerChute polls each server listed as a PowerChute Network Shutdown client for information on the time it needs for a graceful shutdown.
Environmental Monitoring Note: If you install a Dry Contact I/O Accessory, AP9810, at your Network Management Card, the Environment tab displays two top menu bar options, Universal I/O and Environment. Except where noted, the settings described in this chapter are available for both options. Overview Page The Overview page lists the status of environmental monitoring devices associated with the AP9631 Network Management Card of the UPS.
Parameter Description Alarm Status One of the following is displayed: • Normal if this sensor is not reporting an alarm condition. • If this sensor is in an alarm state, the text of the alarm, indicating which threshold is violated, and the severity of the alarm, indicated by color (red for critical, orange for warning). Thresholds See the next two sections for descriptions of the configurable thresholds and Hysteresis values. Thresholds.
Input Contacts Page Brief status Click Input Contacts on the left navigation menu to display the name, alarm status, and state (open or closed) of each input contact. Detailed status and configuration Click the name of an input contact for detailed status or to configure its values: 48 Parameter Description Input Contact Enable or disable this input contact. When disabled, the contact generates no alarm even when it is in the abnormal position Name A name for this input contact.
Output Relay Page This option is only available for devices with installed Dry Contact I/O Accessories. Select the Environment tab, then Universal I/O from the top menu bar. Click Output Relay to display the status of the output relay and configure its values. Parameter Description Name A name for this output relay. Maximum: 20 characters. Location The location of this output relay. Maximum: 20 characters.
Configuring the Control Policy For an AP9631 Network Management Card with up to two connected APC Dry Contact I/O Accessories (AP9810), you can configure its outputs to respond to events, and you can configure the UPS and outputs to respond to input alarms. Configuring an output to respond to an event 1. Select the UPS tab, Control Policy in the top menu bar, and by event under Event Actions on the left navigation menu. 2.
Logs Use the Event and Data Logs Event log Path: Logs > Events > options You can view, filter, or delete the event log. By default, the log displays all events recorded during the last two days, in reverse chronological order. For lists of all configurable events and their current configuration, select the Administration tab, Notification on the top menu bar, and by event under Event Actions on the left navigation menu. See “Configuring by event” on page 72.
you do not click Save As Default, the filter is active until you clear it or until the Management Card restarts. To remove an active filter, click Filter Log, then Clear Filter (Show All). Note: Events are processed through the filter using OR logic. • Events that you do not select from the Filter By Severity list never display in the filtered event log, even if the event occurs in a category you selected from the Filter by Category list.
To display the data log (Logs > Data > log): • By default, view the data log as a page of the Web interface. The most recent data item is recorded on page 1. From the navigation menu below the log: – Click a page number to open a specific page of the log. – Click Previous or Next to view the data recorded immediately before or after the data that is listed on the open page. – Click << to return to the first page of the log, or click >> to view the last page of the log.
Parameter Description User Name The user name required to send data to the repository file. This user must also be configured to have read and write access to the data repository file and the directory (folder) in which it is stored. Password The password required to send data to the repository file. File Path The path to the repository file. Filename The name of the repository file (an ASCII text file). Delay X hours between uploads. The number of hours between uploads of data to the file.
See the Security Handbook, available on the APC Network Management Card Utility CD and on the APC Web site (www.apc.com) for information on available protocols and methods for setting up the type of security you need. To use SCP to retrieve the files. To use SCP to retrieve the event.txt file, use the following command: scp username@hostname_or_ip_address:event.txt ./event.txt To use SCP to retrieve the data.txt file, use the following command: scp username@hostname_or_ip_address:data.txt ./data.
Administration: Security Local Users Setting user access Path: Administration > Security > Local Users > options The Administrator user account always has access to the Management Card. The Device User and Read-Only User accounts are enabled by default. To disable the Device User or Read-Only User accounts, select the user account from the left navigation menu, then clear the Enable checkbox. You set the case-sensitive user name and password for each account type in the same manner.
Select one of the following: • Local Authentication Only: RADIUS is disabled. Local authentication is enabled. • RADIUS, then Local Authentication: RADIUS and local authentication are enabled. Authentication is requested from the RADIUS server first. If the RADIUS server fails to respond, local authentication is used. • RADIUS Only: RADIUS is enabled. Local authentication is disabled.
Configuring the RADIUS Server Summary of the configuration procedure You must configure your RADIUS server to work with the Management Card. For examples of the RADIUS users file with Vendor Specific Attributes (VSAs) and an example of an entry in the dictionary file on the RADIUS server, see the APC Security Handbook. 1. Add the IP address of the Management Card to the RADIUS server client list (file). 2.
Inactivity Timeout Path: Administration > Security > Auto Log Off Use this option to configure the time (3 minutes by default) that the system waits before logging off an inactive user. If you change this value, you must log off for the change to take effect. Note: This timer continues to run if a user closes the browser window without first logging off by clicking Log Off at the upper right.
Administration: Network Features TCP/IP and Communication Settings TCP/IP settings Path: Administration > Network > TCP/IP > IPv4 settings The TCP/IP option on the left navigation menu, selected by default when you choose Network on the top menu bar, displays the current current IPv4 address, subnet mask, default gateway, MAC address, and boot mode of the Management Card. For information on DHCP and DHCP options, see RFC2131 and RFC2132.
DHCP response options Each valid DHCP response contains options that provide the TCP/IP settings that the Management Card needs to operate on a network, and other information that affects the operation of the Management Card. Vendor Specific Information (option 43). The Management Card uses this option in a DHCP response to determine whether the DHCP response is valid. This option contains an APC-specific option in a TAG/LEN/DATA format, called the APC Cookie. This is disabled by default. • APC Cookie.
download the .ini file. After the download, the Management Card uses the .ini file as a boot file to reconfigure its settings. Path: Administration > Network > TCP/IP > IPv6 settings Setting Description Enable Enable or disable IPv6 with this check box. Manual Configure IPv6 manually by entering the IP address and the default gateway. Auto Configuration When the Auto Configuration check box is selected, the system obtains addressing prefixes from the router (if available).
• Alternatively, you can choose 10 Mbps or 100 Mbps, each with the option of half-duplex (communication in only one direction at a time) or full-duplex (communication in both directions on the same channel simultaneously).
• by IP: the IP address of the server • by MX: the Mail Exchange used by the server – As Query Question, identify the value to be used for the selected query type: Query Type Selected Query Question to Use by Host The URL by FQDN The fully qualified domain name, my_server.my_domain. by IP The IP address by MX The Mail Exchange address – View the result of the test DNS request in the Last Query Response field.
Option Description ssl certificate Add, replace, or remove a security certificate. Status: • Not installed: A certificate is not installed, or was installed by FTP or SCP to an incorrect location. Using Add or Replace Certificate File installs the certificate to the correct location, /ssl on the Network Management Card. • Generating: The Network Management Card is generating a certificate because no valid certificate was found. • Loading: A certificate is being activated on the Management Card.
Console Path: Administration > Network > Console > options Option Description access Choose one of the following for access by Telnet or Secure SHell (SSH): • Disable: Disables all access to the command line interface. • Enable Telnet (the default): Telnet transmits user names, passwords, and data without encryption. • Enable SSH: SSH transmits user names, passwords, and data in encrypted form, providing protection from attempts to intercept, forge, or alter data during transmission.
SNMP All user names, passwords, and community names for SNMP are transferred over the network as plain text. If your network requires the high security of encryption, disable SNMP access or set the access for each community to Read. (A community with Read access can receive status information and use SNMP traps.) When using InfraStruXure Central to manage a UPS on the public network of an InfraStruXure system, you must have SNMP enabled in the Management Card interface.
SNMPv3 Path: Administration > Network > SNMPv3 > options For SNMP GETs, SETs, and trap receivers, SNMPv3 uses a system of user profiles to identify users. An SNMPv3 user must have a user profile assigned in the MIB software program to perform GETs and SETs, browse the MIB, and receive traps. Note: To use SNMPv3, you must have a MIB program that supports SNMPv3. The Management Card supports SHA or MD5 authentication and AES or DES encryption.
Option Description access control You can configure up to four access control entries to specify which NMSs have access to this device. The opening page for access control, by default, assigns one entry to each of the four user profiles, but you can edit these settings to apply more than one entry to any user profile to grant access by several specific IP addresses, host names, or IP address masks.
Note: FTP transfers files without encryption. For higher security, disable the FTP server, and transfer files with SCP. Selecting and configuring Secure SHell (SSH) enables SCP automatically. At any time that you want a UPS to be accessible for management by InfraStruXure Central, FTP Server must be enabled in the Management Card interface of that UPS.
Administration: Notification Event Actions Path: Administration > Notification > Event Actions > options Types of notification You can configure event actions to occur in response to an event or group of events. These actions notify users of the event in any of several ways: • Active, automatic notification. The specified users or monitoring devices are contacted directly. – E-mail notification – SNMP traps – APC Remote Monitoring Service – Syslog notification • Indirect notification – Event log.
Configuring by event. To define event actions for an individual event: 1. Select the Administration tab, Notification on the top menu bar, and by event under Event Actions on the left navigation menu. 2. In the list of events, review the marked columns to see whether the action you want is already configured. (By default, logging is configured for all events.) 3.
Active, Automatic, Direct Notification E-mail notification Overview of setup. Use the Simple Mail Transfer Protocol (SMTP) to send e-mail to up to four recipients when an event occurs. To use the e-mail feature, you must define the following settings: • The IP addresses of the primary and, optionally, the secondary Domain Name System (DNS) servers. (See “DNS” on page 63.) • The IP address or DNS name for SMTP Server and From Address. (See “SMTP” on page 73.
Setting Description E-mail Generation Enables (by default) or disables sending e-mail to the recipient. SMTP Server Select one of the following methods for routing e-mail: • Local: Through the Management Card’s SMTP server. This setting (recommended) ensures that the e-mail is sent before the Management Card’s 20-second time-out, and, if necessary, is retried several times.
Item Definition Trap Generation Enable (the default) or disable trap generation for this trap receiver. NMS IP/Host Name The IPv4/ IPv6 address or host name of this trap receiver. The default, 0.0.0.0, leaves the trap receiver undefined. Language Chose a language from the drop-down list. This can differ from the UI and from other trap receivers. SNMPv1 option. Item Definition Community Name The name (public by default) used as an identifier when SNMPv1 traps are sent to this trap receiver.
Registration. To activate RMS for the Management Card, select Enable APC Remote Monitoring Service., choose between Register Company and Device and Register Device Only, complete the form, and click Send APC RMS Registration. Use the Reset APC Remote Monitoring Service Registration check box to discontinue the service, whether permanently or temporarily (for example, if you are moving a Management Card).
Setting Definition Severity Mapping Maps each severity level of Management Card or Environment events to available Syslog priorities. You should not need to change the mappings.
Administration: General Options Identification Path: Administration > General > Identification Define the Name (the device name), Location (the physical location), and Contact (the person responsible for the device) used by InfraStruXure Central, InfraStruXure Manager, and the SNMP agent of the Management Card. These settings are the values used for the MIB-II sysName, sysContact, and sysLocation Object Identifiers (OIDs).
Daylight saving Path: Administration > General > Date & Time > daylight saving Enable traditional United States Daylight Saving Time (DST), or enable and configure a customized daylight saving time to match how Daylight Saving Time is implemented in your local area. DST is disabled by default. When customizing Daylight Saving Time (DST): • If the local DST always starts or ends on the fourth occurrence of a specific weekday of a month (e.g, the fourth Sunday), choose Fourth/Last.
Event Log, Temperature Units, Language, and Logon Page Path: Administration > General > Preferences Color-code event log text This option is disabled by default. Mark the Event Log Color Coding checkbox to enable color-coding of alarm text recorded in the event log. System-event entries and configuration-change entries do not change color. Text Color Alarm Severity Red Critical: A critical alarm exists, which requires immediate action.
Reset the Management Card Path: Administration > General > Reset/Reboot Action Definition Reboot Management Interface Restarts the interface of the Management Card. Reset All1 Clear the Exclude TCP/IP checkbox to reset all configuration values; mark the Exclude TCP/IP checkbox to reset all values except TCP/IP Reset Only1 TCP/IP settings: Set TCP/IP Configuration to DHCP & BOOTP, its default setting, requiring that the Management Card receive its TCP/IP settings from a DHCP or BOOTP server.
About the Management Card Path: Administration > General > About The hardware information is useful to APC Customer Support for troubleshooting problems with the Management Card. The serial number and MAC address are also available on the Management Card itself. Firmware information for the Application Module, APC OS (AOS), and APC Boot Monitor indicates the name, the firmware version, and the date and time each firmware module was created.
APC Device IP Configuration Wizard Capabilities, Requirements, and Installation How to use the Wizard to configure TCP/IP settings The APC Device IP Configuration Wizard configures the IP address, subnet mask, and default gateway of one or more Network Management Cards or APC network-enabled devices (devices containing an embedded Management Card).
Use the Wizard Most software firewalls must be temporarily disabled for the Wizard to discover unconfigured Network Management Cards. Launch the Wizard The installation creates a shortcut link in the Start menu to launch the Wizard. Configure the basic TCP/IP settings remotely Prepare to configure the settings. Before you run the Wizard: 1. Contact your network administrator to obtain valid TCP/IP settings. 2.
Configure or reconfigure the TCP/IP settings locally 1. Contact your network administrator to obtain valid TCP/IP settings. 2. Connect the provided serial configuration cable (APC part number 940-0299) from an available communications port on your computer to the serial port of the Management Card or device. Make sure no other application is using the computer port. 3. From the Start menu, launch the Wizard application. 4.
How to Export Configuration Settings Retrieving and Exporting the .ini File Summary of the procedure An Administrator can retrieve the .ini file of a Network Management Card and export it to another Management Card or to multiple Management Cards. 1. Configure a Management Card to have the settings you want to export. 2. Retrieve the .ini file from that Management Card. 3. Customize the file to change at least the TCP/IP settings. 4.
Customizing. You must customize the file before you export it. 1. Use a text editor to customize the file. – Section headings, keywords, and pre-defined values are not case-sensitive, but string values that you define are case-sensitive. – Use adjacent quotation marks to indicate no value. For example, LinkURL1="" indicates that the URL is intentionally undefined. – Enclose in quotation marks any values that contain leading or trailing spaces or are already enclosed in quotation marks.
The Upload Event and Error Messages The event and its error messages The following event occurs when the receiving Network Management Card completes using the .ini file to update its settings. Configuration file upload complete, with number valid values If a keyword, section name, or value is invalid, the upload by the receiving Management Card succeeds, and additional event text states the error. Event text Description Configuration file warning: Invalid keyword on line number.
Errors generated by overridden values The Override keyword and its value will generate error messages in the event log when it blocks the exporting of values. See “Contents of the .ini file” on page 86 for information about which values are overridden. Because the overridden values are device-specific and not appropriate to export to other Management Cards, ignore these error messages.
File Transfers How to Upgrade Firmware Benefits of upgrading firmware When you upgrade the firmware on the Network Management Card: • You obtain the latest bug fixes and performance improvements. • New features become available for immediate use. Keeping the firmware versions consistent across your network ensures that all Management Cards support the same features in the same manner.
To extract the firmware files: 1. Run the NMC2 Firmware Upgrade Utility. 2. At the prompts, click Next>, and then specify the directory location to which the files will be extracted. 3. When the Extraction Complete message displays, close the dialog box. Firmware File Transfer Methods To upgrade the firmware of a Management Card, use one of these methods: • From a networked computer running a Microsoft Windows operating system, use the NMC2 Firmware Upgrade Utility downloaded from the APC Web site.
3. Type open and the IP address of the Management Card, and press ENTER. If the port setting for the FTP Server has changed from its default of 21, you must use the non-default value in the FTP command. • For Windows FTP clients, separate a non-default port number from the IP address by a space. For example: ftp> open 150.250.6.10 21000 • Some FTP clients require a colon instead before the port number. 4. Log on as Administrator; apc is the default user name and password. 5. Upgrade the AOS.
The new utility works fine with any existing iplist.txt file that you have used with the old version of the utility. 3. Select the Upgrade From Device List check box to use the iplist.txt file. Clear this check box to upgrade the firmware using the IP, user name and password you typed on the dialog box. 4. Choose the Upgrade Now button to start the firmware version update(s). 5. Choose View Log to verify any upgrade.
Last Transfer Result codes Code Description Successful The file transfer was successful. Result not available There are no recorded file transfers. Failure unknown The last file transfer failed for an unknown reason. Server inaccessible The TFTP or FTP server could not be found on the network. Server access denied The TFTP or FTP server denied access. File not found The TFTP or FTP server could not locate the requested file.
Note: Any current language pack on the card is deleted before the new pack is transferred. Any problem with the pack transfer leaves the Management Card with no language pack. Only English is available in that circumstance. If this happens, try re-loading the new language pack.
Troubleshooting Management Card Access Problems For problems that are not described here, see the troubleshooting flowcharts on the APC Network Management Card Utility CD. Click the Troubleshooting link in the CD interface. If the problem still persists, see “APC Worldwide Customer Support” on page 108. 96 Problem Solution Unable to ping the Management Card If the Management Card’s Status LED is green, try to ping another node on the same network segment as the Management Card.
SNMP Issues Problem Solution Unable to perform a GET • Verify the read (GET) community name (SNMPv1) or the user profile configuration (SNMPv3). • Use the command line interface or Web interface to ensure that the NMS has access. See “SNMP” on page 67. Unable to perform a SET • Verify the read/write (SET) community name (SNMPv1) or the user profile configuration (SNMPv3).
Appendix A: List of Supported Commands about ping [] alarmcount [-p [all | warning | critical]] portspeed [-s [auto | 10H | 10F | 100H | 100F]] boot [-b ] [-c [enable | disable]] [-v ] [-i ] [-u ] prompt [-s [long | short]] ? cd console [-S ] [-pt ] [-ps ] [-b [2400 | 9600 | 19200 | 38400]] date [-d <“datestring”>] [-t <00:00:00>] [-f [mm/dd/
ups [-c ] [-r ] [-s ] [-b ] [-o# ] [-os#] [-st] user [-an ] [-dn ] [-rn ] [-ap ] [-dp ] [-rp ] [-t ] web [-S ] [-ph ] [-ps ] xferINI xferStatus UPS Network Man
Two-Year Factory Warranty This warranty applies only to the products you purchase for your use in accordance with this manual. Terms of warranty APC warrants its products to be free from defects in materials and workmanship for a period of two years from the date of purchase. APC will repair or replace defective products covered by this warranty. This warranty does not apply to equipment that has been damaged by accident, negligence or misapplication or has been altered or modified in any way.
NO SALESMAN, EMPLOYEE OR AGENT OF APC IS AUTHORIZED TO ADD TO OR VARY THE TERMS OF THIS WARRANTY. WARRANTY TERMS MAY BE MODIFIED, IF AT ALL, ONLY IN WRITING SIGNED BY AN APC OFFICER AND LEGAL DEPARTMENT. Warranty claims Customers with warranty claims issues may access the APC customer support network through the Support page of the APC Web site, www.apc.com/support. Select your country from the country selection pull-down menu at the top of the Web page.
102 UPS Network Management Card 2 User’s Guide
Index A About options for information about the Management Card, 82 for information about the UPS, 45 for information on environmental monitors, 49 Access enabling or disabling methods of access to the command line interface, 66 to the Web interface, 64 priority for logging on, 3 to the command line interface locally, 9 remotely, 8 troubleshooting, 96 Administration Network menu, 60 Notification menu, 71 Alarm Status output relay, 49 temperature and humidity, 47 Alarm Status, input contacts, 48 Apply Local
Management Cards, 92 versions displayed on main screen, 9 From Address (SMTP setting), 73 FTP server settings, 69 transferring firmware files, 91 using to retrieve event or data log, 54 G GET commands, troubleshooting, 97 H Help on configuring UPS power options, 35, 38 Host keys adding or replacing, 66 status, 66 Host name of trap receivers, 75 Hysteresis, 47 I Identification (Name, Location, and Contact) in Web interface, 78 Inactivity timeout, 59 ini files, See User configuration files Input contacts b
R RADIUS configuration, 57 server configuration, 58 supported RADIUS servers, 58 Reboot Management Interface, 81 Reboot UPS or Reboot UPS Gracefully, 34 Recent Events Device Events on home page, 28 Recipient SMTP server, 74 Remote Monitoring Service, 81 Remote Users authentication, 57 setting user access, 56 Reset All, 81 Reset Only, 81 Restart for inactivity, preventing, 7 Return Delay, 36 Reverse lookup, 52 Runtime calibration requirements, 23, 38 S Scheduling option, UPS tab, 42 SCP for high-security fi
User names default for each account type, 26 defining for each account type.
APC Worldwide Customer Support Customer support for this or any other APC product is available at no charge in any of the following ways: • Visit the APC Web site to access documents in the APC Knowledge Base and to submit customer support requests. – www.apc.com (Corporate Headquarters) Connect to localized APC Web sites for specific countries, each of which provides customer support information. – www.apc.com/support/ Global support searching APC Knowledge Base and using e-support.
